xref: /openbmc/linux/drivers/scsi/53c700.c (revision 791d3ef2)
1 /* -*- mode: c; c-basic-offset: 8 -*- */
2 
3 /* NCR (or Symbios) 53c700 and 53c700-66 Driver
4  *
5  * Copyright (C) 2001 by James.Bottomley@HansenPartnership.com
6 **-----------------------------------------------------------------------------
7 **
8 **  This program is free software; you can redistribute it and/or modify
9 **  it under the terms of the GNU General Public License as published by
10 **  the Free Software Foundation; either version 2 of the License, or
11 **  (at your option) any later version.
12 **
13 **  This program is distributed in the hope that it will be useful,
14 **  but WITHOUT ANY WARRANTY; without even the implied warranty of
15 **  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16 **  GNU General Public License for more details.
17 **
18 **  You should have received a copy of the GNU General Public License
19 **  along with this program; if not, write to the Free Software
20 **  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 **
22 **-----------------------------------------------------------------------------
23  */
24 
25 /* Notes:
26  *
27  * This driver is designed exclusively for these chips (virtually the
28  * earliest of the scripts engine chips).  They need their own drivers
29  * because they are missing so many of the scripts and snazzy register
30  * features of their elder brothers (the 710, 720 and 770).
31  *
32  * The 700 is the lowliest of the line, it can only do async SCSI.
33  * The 700-66 can at least do synchronous SCSI up to 10MHz.
34  *
35  * The 700 chip has no host bus interface logic of its own.  However,
36  * it is usually mapped to a location with well defined register
37  * offsets.  Therefore, if you can determine the base address and the
38  * irq your board incorporating this chip uses, you can probably use
39  * this driver to run it (although you'll probably have to write a
40  * minimal wrapper for the purpose---see the NCR_D700 driver for
41  * details about how to do this).
42  *
43  *
44  * TODO List:
45  *
46  * 1. Better statistics in the proc fs
47  *
48  * 2. Implement message queue (queues SCSI messages like commands) and make
49  *    the abort and device reset functions use them.
50  * */
51 
52 /* CHANGELOG
53  *
54  * Version 2.8
55  *
56  * Fixed bad bug affecting tag starvation processing (previously the
57  * driver would hang the system if too many tags starved.  Also fixed
58  * bad bug having to do with 10 byte command processing and REQUEST
59  * SENSE (the command would loop forever getting a transfer length
60  * mismatch in the CMD phase).
61  *
62  * Version 2.7
63  *
64  * Fixed scripts problem which caused certain devices (notably CDRWs)
65  * to hang on initial INQUIRY.  Updated NCR_700_readl/writel to use
66  * __raw_readl/writel for parisc compatibility (Thomas
67  * Bogendoerfer). Added missing SCp->request_bufflen initialisation
68  * for sense requests (Ryan Bradetich).
69  *
70  * Version 2.6
71  *
72  * Following test of the 64 bit parisc kernel by Richard Hirst,
73  * several problems have now been corrected.  Also adds support for
74  * consistent memory allocation.
75  *
76  * Version 2.5
77  *
78  * More Compatibility changes for 710 (now actually works).  Enhanced
79  * support for odd clock speeds which constrain SDTR negotiations.
80  * correct cacheline separation for scsi messages and status for
81  * incoherent architectures.  Use of the pci mapping functions on
82  * buffers to begin support for 64 bit drivers.
83  *
84  * Version 2.4
85  *
86  * Added support for the 53c710 chip (in 53c700 emulation mode only---no
87  * special 53c710 instructions or registers are used).
88  *
89  * Version 2.3
90  *
91  * More endianness/cache coherency changes.
92  *
93  * Better bad device handling (handles devices lying about tag
94  * queueing support and devices which fail to provide sense data on
95  * contingent allegiance conditions)
96  *
97  * Many thanks to Richard Hirst <rhirst@linuxcare.com> for patiently
98  * debugging this driver on the parisc architecture and suggesting
99  * many improvements and bug fixes.
100  *
101  * Thanks also go to Linuxcare Inc. for providing several PARISC
102  * machines for me to debug the driver on.
103  *
104  * Version 2.2
105  *
106  * Made the driver mem or io mapped; added endian invariance; added
107  * dma cache flushing operations for architectures which need it;
108  * added support for more varied clocking speeds.
109  *
110  * Version 2.1
111  *
112  * Initial modularisation from the D700.  See NCR_D700.c for the rest of
113  * the changelog.
114  * */
115 #define NCR_700_VERSION "2.8"
116 
117 #include <linux/kernel.h>
118 #include <linux/types.h>
119 #include <linux/string.h>
120 #include <linux/slab.h>
121 #include <linux/ioport.h>
122 #include <linux/delay.h>
123 #include <linux/spinlock.h>
124 #include <linux/completion.h>
125 #include <linux/init.h>
126 #include <linux/proc_fs.h>
127 #include <linux/blkdev.h>
128 #include <linux/module.h>
129 #include <linux/interrupt.h>
130 #include <linux/device.h>
131 #include <asm/dma.h>
132 #include <asm/io.h>
133 #include <asm/pgtable.h>
134 #include <asm/byteorder.h>
135 
136 #include <scsi/scsi.h>
137 #include <scsi/scsi_cmnd.h>
138 #include <scsi/scsi_dbg.h>
139 #include <scsi/scsi_eh.h>
140 #include <scsi/scsi_host.h>
141 #include <scsi/scsi_tcq.h>
142 #include <scsi/scsi_transport.h>
143 #include <scsi/scsi_transport_spi.h>
144 
145 #include "53c700.h"
146 
147 /* NOTE: For 64 bit drivers there are points in the code where we use
148  * a non dereferenceable pointer to point to a structure in dma-able
149  * memory (which is 32 bits) so that we can use all of the structure
150  * operations but take the address at the end.  This macro allows us
151  * to truncate the 64 bit pointer down to 32 bits without the compiler
152  * complaining */
153 #define to32bit(x)	((__u32)((unsigned long)(x)))
154 
155 #ifdef NCR_700_DEBUG
156 #define STATIC
157 #else
158 #define STATIC static
159 #endif
160 
161 MODULE_AUTHOR("James Bottomley");
162 MODULE_DESCRIPTION("53c700 and 53c700-66 Driver");
163 MODULE_LICENSE("GPL");
164 
165 /* This is the script */
166 #include "53c700_d.h"
167 
168 
169 STATIC int NCR_700_queuecommand(struct Scsi_Host *h, struct scsi_cmnd *);
170 STATIC int NCR_700_abort(struct scsi_cmnd * SCpnt);
171 STATIC int NCR_700_host_reset(struct scsi_cmnd * SCpnt);
172 STATIC void NCR_700_chip_setup(struct Scsi_Host *host);
173 STATIC void NCR_700_chip_reset(struct Scsi_Host *host);
174 STATIC int NCR_700_slave_alloc(struct scsi_device *SDpnt);
175 STATIC int NCR_700_slave_configure(struct scsi_device *SDpnt);
176 STATIC void NCR_700_slave_destroy(struct scsi_device *SDpnt);
177 static int NCR_700_change_queue_depth(struct scsi_device *SDpnt, int depth);
178 
179 STATIC struct device_attribute *NCR_700_dev_attrs[];
180 
181 STATIC struct scsi_transport_template *NCR_700_transport_template = NULL;
182 
183 static char *NCR_700_phase[] = {
184 	"",
185 	"after selection",
186 	"before command phase",
187 	"after command phase",
188 	"after status phase",
189 	"after data in phase",
190 	"after data out phase",
191 	"during data phase",
192 };
193 
194 static char *NCR_700_condition[] = {
195 	"",
196 	"NOT MSG_OUT",
197 	"UNEXPECTED PHASE",
198 	"NOT MSG_IN",
199 	"UNEXPECTED MSG",
200 	"MSG_IN",
201 	"SDTR_MSG RECEIVED",
202 	"REJECT_MSG RECEIVED",
203 	"DISCONNECT_MSG RECEIVED",
204 	"MSG_OUT",
205 	"DATA_IN",
206 
207 };
208 
209 static char *NCR_700_fatal_messages[] = {
210 	"unexpected message after reselection",
211 	"still MSG_OUT after message injection",
212 	"not MSG_IN after selection",
213 	"Illegal message length received",
214 };
215 
216 static char *NCR_700_SBCL_bits[] = {
217 	"IO ",
218 	"CD ",
219 	"MSG ",
220 	"ATN ",
221 	"SEL ",
222 	"BSY ",
223 	"ACK ",
224 	"REQ ",
225 };
226 
227 static char *NCR_700_SBCL_to_phase[] = {
228 	"DATA_OUT",
229 	"DATA_IN",
230 	"CMD_OUT",
231 	"STATE",
232 	"ILLEGAL PHASE",
233 	"ILLEGAL PHASE",
234 	"MSG OUT",
235 	"MSG IN",
236 };
237 
238 /* This translates the SDTR message offset and period to a value
239  * which can be loaded into the SXFER_REG.
240  *
241  * NOTE: According to SCSI-2, the true transfer period (in ns) is
242  *       actually four times this period value */
243 static inline __u8
244 NCR_700_offset_period_to_sxfer(struct NCR_700_Host_Parameters *hostdata,
245 			       __u8 offset, __u8 period)
246 {
247 	int XFERP;
248 
249 	__u8 min_xferp = (hostdata->chip710
250 			  ? NCR_710_MIN_XFERP : NCR_700_MIN_XFERP);
251 	__u8 max_offset = (hostdata->chip710
252 			   ? NCR_710_MAX_OFFSET : NCR_700_MAX_OFFSET);
253 
254 	if(offset == 0)
255 		return 0;
256 
257 	if(period < hostdata->min_period) {
258 		printk(KERN_WARNING "53c700: Period %dns is less than this chip's minimum, setting to %d\n", period*4, NCR_700_MIN_PERIOD*4);
259 		period = hostdata->min_period;
260 	}
261 	XFERP = (period*4 * hostdata->sync_clock)/1000 - 4;
262 	if(offset > max_offset) {
263 		printk(KERN_WARNING "53c700: Offset %d exceeds chip maximum, setting to %d\n",
264 		       offset, max_offset);
265 		offset = max_offset;
266 	}
267 	if(XFERP < min_xferp) {
268 		XFERP =  min_xferp;
269 	}
270 	return (offset & 0x0f) | (XFERP & 0x07)<<4;
271 }
272 
273 static inline __u8
274 NCR_700_get_SXFER(struct scsi_device *SDp)
275 {
276 	struct NCR_700_Host_Parameters *hostdata =
277 		(struct NCR_700_Host_Parameters *)SDp->host->hostdata[0];
278 
279 	return NCR_700_offset_period_to_sxfer(hostdata,
280 					      spi_offset(SDp->sdev_target),
281 					      spi_period(SDp->sdev_target));
282 }
283 
284 struct Scsi_Host *
285 NCR_700_detect(struct scsi_host_template *tpnt,
286 	       struct NCR_700_Host_Parameters *hostdata, struct device *dev)
287 {
288 	dma_addr_t pScript, pSlots;
289 	__u8 *memory;
290 	__u32 *script;
291 	struct Scsi_Host *host;
292 	static int banner = 0;
293 	int j;
294 
295 	if(tpnt->sdev_attrs == NULL)
296 		tpnt->sdev_attrs = NCR_700_dev_attrs;
297 
298 	memory = dma_alloc_attrs(hostdata->dev, TOTAL_MEM_SIZE, &pScript,
299 				 GFP_KERNEL, DMA_ATTR_NON_CONSISTENT);
300 	if(memory == NULL) {
301 		printk(KERN_ERR "53c700: Failed to allocate memory for driver, detaching\n");
302 		return NULL;
303 	}
304 
305 	script = (__u32 *)memory;
306 	hostdata->msgin = memory + MSGIN_OFFSET;
307 	hostdata->msgout = memory + MSGOUT_OFFSET;
308 	hostdata->status = memory + STATUS_OFFSET;
309 	hostdata->slots = (struct NCR_700_command_slot *)(memory + SLOTS_OFFSET);
310 	hostdata->dev = dev;
311 
312 	pSlots = pScript + SLOTS_OFFSET;
313 
314 	/* Fill in the missing routines from the host template */
315 	tpnt->queuecommand = NCR_700_queuecommand;
316 	tpnt->eh_abort_handler = NCR_700_abort;
317 	tpnt->eh_host_reset_handler = NCR_700_host_reset;
318 	tpnt->can_queue = NCR_700_COMMAND_SLOTS_PER_HOST;
319 	tpnt->sg_tablesize = NCR_700_SG_SEGMENTS;
320 	tpnt->cmd_per_lun = NCR_700_CMD_PER_LUN;
321 	tpnt->use_clustering = ENABLE_CLUSTERING;
322 	tpnt->slave_configure = NCR_700_slave_configure;
323 	tpnt->slave_destroy = NCR_700_slave_destroy;
324 	tpnt->slave_alloc = NCR_700_slave_alloc;
325 	tpnt->change_queue_depth = NCR_700_change_queue_depth;
326 
327 	if(tpnt->name == NULL)
328 		tpnt->name = "53c700";
329 	if(tpnt->proc_name == NULL)
330 		tpnt->proc_name = "53c700";
331 
332 	host = scsi_host_alloc(tpnt, 4);
333 	if (!host)
334 		return NULL;
335 	memset(hostdata->slots, 0, sizeof(struct NCR_700_command_slot)
336 	       * NCR_700_COMMAND_SLOTS_PER_HOST);
337 	for (j = 0; j < NCR_700_COMMAND_SLOTS_PER_HOST; j++) {
338 		dma_addr_t offset = (dma_addr_t)((unsigned long)&hostdata->slots[j].SG[0]
339 					  - (unsigned long)&hostdata->slots[0].SG[0]);
340 		hostdata->slots[j].pSG = (struct NCR_700_SG_List *)((unsigned long)(pSlots + offset));
341 		if(j == 0)
342 			hostdata->free_list = &hostdata->slots[j];
343 		else
344 			hostdata->slots[j-1].ITL_forw = &hostdata->slots[j];
345 		hostdata->slots[j].state = NCR_700_SLOT_FREE;
346 	}
347 
348 	for (j = 0; j < ARRAY_SIZE(SCRIPT); j++)
349 		script[j] = bS_to_host(SCRIPT[j]);
350 
351 	/* adjust all labels to be bus physical */
352 	for (j = 0; j < PATCHES; j++)
353 		script[LABELPATCHES[j]] = bS_to_host(pScript + SCRIPT[LABELPATCHES[j]]);
354 	/* now patch up fixed addresses. */
355 	script_patch_32(hostdata->dev, script, MessageLocation,
356 			pScript + MSGOUT_OFFSET);
357 	script_patch_32(hostdata->dev, script, StatusAddress,
358 			pScript + STATUS_OFFSET);
359 	script_patch_32(hostdata->dev, script, ReceiveMsgAddress,
360 			pScript + MSGIN_OFFSET);
361 
362 	hostdata->script = script;
363 	hostdata->pScript = pScript;
364 	dma_sync_single_for_device(hostdata->dev, pScript, sizeof(SCRIPT), DMA_TO_DEVICE);
365 	hostdata->state = NCR_700_HOST_FREE;
366 	hostdata->cmd = NULL;
367 	host->max_id = 8;
368 	host->max_lun = NCR_700_MAX_LUNS;
369 	BUG_ON(NCR_700_transport_template == NULL);
370 	host->transportt = NCR_700_transport_template;
371 	host->unique_id = (unsigned long)hostdata->base;
372 	hostdata->eh_complete = NULL;
373 	host->hostdata[0] = (unsigned long)hostdata;
374 	/* kick the chip */
375 	NCR_700_writeb(0xff, host, CTEST9_REG);
376 	if (hostdata->chip710)
377 		hostdata->rev = (NCR_700_readb(host, CTEST8_REG)>>4) & 0x0f;
378 	else
379 		hostdata->rev = (NCR_700_readb(host, CTEST7_REG)>>4) & 0x0f;
380 	hostdata->fast = (NCR_700_readb(host, CTEST9_REG) == 0);
381 	if (banner == 0) {
382 		printk(KERN_NOTICE "53c700: Version " NCR_700_VERSION " By James.Bottomley@HansenPartnership.com\n");
383 		banner = 1;
384 	}
385 	printk(KERN_NOTICE "scsi%d: %s rev %d %s\n", host->host_no,
386 	       hostdata->chip710 ? "53c710" :
387 	       (hostdata->fast ? "53c700-66" : "53c700"),
388 	       hostdata->rev, hostdata->differential ?
389 	       "(Differential)" : "");
390 	/* reset the chip */
391 	NCR_700_chip_reset(host);
392 
393 	if (scsi_add_host(host, dev)) {
394 		dev_printk(KERN_ERR, dev, "53c700: scsi_add_host failed\n");
395 		scsi_host_put(host);
396 		return NULL;
397 	}
398 
399 	spi_signalling(host) = hostdata->differential ? SPI_SIGNAL_HVD :
400 		SPI_SIGNAL_SE;
401 
402 	return host;
403 }
404 
405 int
406 NCR_700_release(struct Scsi_Host *host)
407 {
408 	struct NCR_700_Host_Parameters *hostdata =
409 		(struct NCR_700_Host_Parameters *)host->hostdata[0];
410 
411 	dma_free_attrs(hostdata->dev, TOTAL_MEM_SIZE, hostdata->script,
412 		       hostdata->pScript, DMA_ATTR_NON_CONSISTENT);
413 	return 1;
414 }
415 
416 static inline __u8
417 NCR_700_identify(int can_disconnect, __u8 lun)
418 {
419 	return IDENTIFY_BASE |
420 		((can_disconnect) ? 0x40 : 0) |
421 		(lun & NCR_700_LUN_MASK);
422 }
423 
424 /*
425  * Function : static int data_residual (Scsi_Host *host)
426  *
427  * Purpose : return residual data count of what's in the chip.  If you
428  * really want to know what this function is doing, it's almost a
429  * direct transcription of the algorithm described in the 53c710
430  * guide, except that the DBC and DFIFO registers are only 6 bits
431  * wide on a 53c700.
432  *
433  * Inputs : host - SCSI host */
434 static inline int
435 NCR_700_data_residual (struct Scsi_Host *host) {
436 	struct NCR_700_Host_Parameters *hostdata =
437 		(struct NCR_700_Host_Parameters *)host->hostdata[0];
438 	int count, synchronous = 0;
439 	unsigned int ddir;
440 
441 	if(hostdata->chip710) {
442 		count = ((NCR_700_readb(host, DFIFO_REG) & 0x7f) -
443 			 (NCR_700_readl(host, DBC_REG) & 0x7f)) & 0x7f;
444 	} else {
445 		count = ((NCR_700_readb(host, DFIFO_REG) & 0x3f) -
446 			 (NCR_700_readl(host, DBC_REG) & 0x3f)) & 0x3f;
447 	}
448 
449 	if(hostdata->fast)
450 		synchronous = NCR_700_readb(host, SXFER_REG) & 0x0f;
451 
452 	/* get the data direction */
453 	ddir = NCR_700_readb(host, CTEST0_REG) & 0x01;
454 
455 	if (ddir) {
456 		/* Receive */
457 		if (synchronous)
458 			count += (NCR_700_readb(host, SSTAT2_REG) & 0xf0) >> 4;
459 		else
460 			if (NCR_700_readb(host, SSTAT1_REG) & SIDL_REG_FULL)
461 				++count;
462 	} else {
463 		/* Send */
464 		__u8 sstat = NCR_700_readb(host, SSTAT1_REG);
465 		if (sstat & SODL_REG_FULL)
466 			++count;
467 		if (synchronous && (sstat & SODR_REG_FULL))
468 			++count;
469 	}
470 #ifdef NCR_700_DEBUG
471 	if(count)
472 		printk("RESIDUAL IS %d (ddir %d)\n", count, ddir);
473 #endif
474 	return count;
475 }
476 
477 /* print out the SCSI wires and corresponding phase from the SBCL register
478  * in the chip */
479 static inline char *
480 sbcl_to_string(__u8 sbcl)
481 {
482 	int i;
483 	static char ret[256];
484 
485 	ret[0]='\0';
486 	for(i=0; i<8; i++) {
487 		if((1<<i) & sbcl)
488 			strcat(ret, NCR_700_SBCL_bits[i]);
489 	}
490 	strcat(ret, NCR_700_SBCL_to_phase[sbcl & 0x07]);
491 	return ret;
492 }
493 
494 static inline __u8
495 bitmap_to_number(__u8 bitmap)
496 {
497 	__u8 i;
498 
499 	for(i=0; i<8 && !(bitmap &(1<<i)); i++)
500 		;
501 	return i;
502 }
503 
504 /* Pull a slot off the free list */
505 STATIC struct NCR_700_command_slot *
506 find_empty_slot(struct NCR_700_Host_Parameters *hostdata)
507 {
508 	struct NCR_700_command_slot *slot = hostdata->free_list;
509 
510 	if(slot == NULL) {
511 		/* sanity check */
512 		if(hostdata->command_slot_count != NCR_700_COMMAND_SLOTS_PER_HOST)
513 			printk(KERN_ERR "SLOTS FULL, but count is %d, should be %d\n", hostdata->command_slot_count, NCR_700_COMMAND_SLOTS_PER_HOST);
514 		return NULL;
515 	}
516 
517 	if(slot->state != NCR_700_SLOT_FREE)
518 		/* should panic! */
519 		printk(KERN_ERR "BUSY SLOT ON FREE LIST!!!\n");
520 
521 
522 	hostdata->free_list = slot->ITL_forw;
523 	slot->ITL_forw = NULL;
524 
525 
526 	/* NOTE: set the state to busy here, not queued, since this
527 	 * indicates the slot is in use and cannot be run by the IRQ
528 	 * finish routine.  If we cannot queue the command when it
529 	 * is properly build, we then change to NCR_700_SLOT_QUEUED */
530 	slot->state = NCR_700_SLOT_BUSY;
531 	slot->flags = 0;
532 	hostdata->command_slot_count++;
533 
534 	return slot;
535 }
536 
537 STATIC void
538 free_slot(struct NCR_700_command_slot *slot,
539 	  struct NCR_700_Host_Parameters *hostdata)
540 {
541 	if((slot->state & NCR_700_SLOT_MASK) != NCR_700_SLOT_MAGIC) {
542 		printk(KERN_ERR "53c700: SLOT %p is not MAGIC!!!\n", slot);
543 	}
544 	if(slot->state == NCR_700_SLOT_FREE) {
545 		printk(KERN_ERR "53c700: SLOT %p is FREE!!!\n", slot);
546 	}
547 
548 	slot->resume_offset = 0;
549 	slot->cmnd = NULL;
550 	slot->state = NCR_700_SLOT_FREE;
551 	slot->ITL_forw = hostdata->free_list;
552 	hostdata->free_list = slot;
553 	hostdata->command_slot_count--;
554 }
555 
556 
557 /* This routine really does very little.  The command is indexed on
558    the ITL and (if tagged) the ITLQ lists in _queuecommand */
559 STATIC void
560 save_for_reselection(struct NCR_700_Host_Parameters *hostdata,
561 		     struct scsi_cmnd *SCp, __u32 dsp)
562 {
563 	/* Its just possible that this gets executed twice */
564 	if(SCp != NULL) {
565 		struct NCR_700_command_slot *slot =
566 			(struct NCR_700_command_slot *)SCp->host_scribble;
567 
568 		slot->resume_offset = dsp;
569 	}
570 	hostdata->state = NCR_700_HOST_FREE;
571 	hostdata->cmd = NULL;
572 }
573 
574 STATIC inline void
575 NCR_700_unmap(struct NCR_700_Host_Parameters *hostdata, struct scsi_cmnd *SCp,
576 	      struct NCR_700_command_slot *slot)
577 {
578 	if(SCp->sc_data_direction != DMA_NONE &&
579 	   SCp->sc_data_direction != DMA_BIDIRECTIONAL)
580 		scsi_dma_unmap(SCp);
581 }
582 
583 STATIC inline void
584 NCR_700_scsi_done(struct NCR_700_Host_Parameters *hostdata,
585 	       struct scsi_cmnd *SCp, int result)
586 {
587 	hostdata->state = NCR_700_HOST_FREE;
588 	hostdata->cmd = NULL;
589 
590 	if(SCp != NULL) {
591 		struct NCR_700_command_slot *slot =
592 			(struct NCR_700_command_slot *)SCp->host_scribble;
593 
594 		dma_unmap_single(hostdata->dev, slot->pCmd,
595 				 MAX_COMMAND_SIZE, DMA_TO_DEVICE);
596 		if (slot->flags == NCR_700_FLAG_AUTOSENSE) {
597 			char *cmnd = NCR_700_get_sense_cmnd(SCp->device);
598 
599 			dma_unmap_single(hostdata->dev, slot->dma_handle,
600 					 SCSI_SENSE_BUFFERSIZE, DMA_FROM_DEVICE);
601 			/* restore the old result if the request sense was
602 			 * successful */
603 			if (result == 0)
604 				result = cmnd[7];
605 			/* restore the original length */
606 			SCp->cmd_len = cmnd[8];
607 		} else
608 			NCR_700_unmap(hostdata, SCp, slot);
609 
610 		free_slot(slot, hostdata);
611 #ifdef NCR_700_DEBUG
612 		if(NCR_700_get_depth(SCp->device) == 0 ||
613 		   NCR_700_get_depth(SCp->device) > SCp->device->queue_depth)
614 			printk(KERN_ERR "Invalid depth in NCR_700_scsi_done(): %d\n",
615 			       NCR_700_get_depth(SCp->device));
616 #endif /* NCR_700_DEBUG */
617 		NCR_700_set_depth(SCp->device, NCR_700_get_depth(SCp->device) - 1);
618 
619 		SCp->host_scribble = NULL;
620 		SCp->result = result;
621 		SCp->scsi_done(SCp);
622 	} else {
623 		printk(KERN_ERR "53c700: SCSI DONE HAS NULL SCp\n");
624 	}
625 }
626 
627 
628 STATIC void
629 NCR_700_internal_bus_reset(struct Scsi_Host *host)
630 {
631 	/* Bus reset */
632 	NCR_700_writeb(ASSERT_RST, host, SCNTL1_REG);
633 	udelay(50);
634 	NCR_700_writeb(0, host, SCNTL1_REG);
635 
636 }
637 
638 STATIC void
639 NCR_700_chip_setup(struct Scsi_Host *host)
640 {
641 	struct NCR_700_Host_Parameters *hostdata =
642 		(struct NCR_700_Host_Parameters *)host->hostdata[0];
643 	__u8 min_period;
644 	__u8 min_xferp = (hostdata->chip710 ? NCR_710_MIN_XFERP : NCR_700_MIN_XFERP);
645 
646 	if(hostdata->chip710) {
647 		__u8 burst_disable = 0;
648 		__u8 burst_length = 0;
649 
650 		switch (hostdata->burst_length) {
651 			case 1:
652 			        burst_length = BURST_LENGTH_1;
653 			        break;
654 			case 2:
655 			        burst_length = BURST_LENGTH_2;
656 			        break;
657 			case 4:
658 			        burst_length = BURST_LENGTH_4;
659 			        break;
660 			case 8:
661 			        burst_length = BURST_LENGTH_8;
662 			        break;
663 			default:
664 			        burst_disable = BURST_DISABLE;
665 			        break;
666 		}
667 		hostdata->dcntl_extra |= COMPAT_700_MODE;
668 
669 		NCR_700_writeb(hostdata->dcntl_extra, host, DCNTL_REG);
670 		NCR_700_writeb(burst_length | hostdata->dmode_extra,
671 			       host, DMODE_710_REG);
672 		NCR_700_writeb(burst_disable | hostdata->ctest7_extra |
673 			       (hostdata->differential ? DIFF : 0),
674 			       host, CTEST7_REG);
675 		NCR_700_writeb(BTB_TIMER_DISABLE, host, CTEST0_REG);
676 		NCR_700_writeb(FULL_ARBITRATION | ENABLE_PARITY | PARITY
677 			       | AUTO_ATN, host, SCNTL0_REG);
678 	} else {
679 		NCR_700_writeb(BURST_LENGTH_8 | hostdata->dmode_extra,
680 			       host, DMODE_700_REG);
681 		NCR_700_writeb(hostdata->differential ?
682 			       DIFF : 0, host, CTEST7_REG);
683 		if(hostdata->fast) {
684 			/* this is for 700-66, does nothing on 700 */
685 			NCR_700_writeb(LAST_DIS_ENBL | ENABLE_ACTIVE_NEGATION
686 				       | GENERATE_RECEIVE_PARITY, host,
687 				       CTEST8_REG);
688 		} else {
689 			NCR_700_writeb(FULL_ARBITRATION | ENABLE_PARITY
690 				       | PARITY | AUTO_ATN, host, SCNTL0_REG);
691 		}
692 	}
693 
694 	NCR_700_writeb(1 << host->this_id, host, SCID_REG);
695 	NCR_700_writeb(0, host, SBCL_REG);
696 	NCR_700_writeb(ASYNC_OPERATION, host, SXFER_REG);
697 
698 	NCR_700_writeb(PHASE_MM_INT | SEL_TIMEOUT_INT | GROSS_ERR_INT | UX_DISC_INT
699 	     | RST_INT | PAR_ERR_INT | SELECT_INT, host, SIEN_REG);
700 
701 	NCR_700_writeb(ABORT_INT | INT_INST_INT | ILGL_INST_INT, host, DIEN_REG);
702 	NCR_700_writeb(ENABLE_SELECT, host, SCNTL1_REG);
703 	if(hostdata->clock > 75) {
704 		printk(KERN_ERR "53c700: Clock speed %dMHz is too high: 75Mhz is the maximum this chip can be driven at\n", hostdata->clock);
705 		/* do the best we can, but the async clock will be out
706 		 * of spec: sync divider 2, async divider 3 */
707 		DEBUG(("53c700: sync 2 async 3\n"));
708 		NCR_700_writeb(SYNC_DIV_2_0, host, SBCL_REG);
709 		NCR_700_writeb(ASYNC_DIV_3_0 | hostdata->dcntl_extra, host, DCNTL_REG);
710 		hostdata->sync_clock = hostdata->clock/2;
711 	} else	if(hostdata->clock > 50  && hostdata->clock <= 75) {
712 		/* sync divider 1.5, async divider 3 */
713 		DEBUG(("53c700: sync 1.5 async 3\n"));
714 		NCR_700_writeb(SYNC_DIV_1_5, host, SBCL_REG);
715 		NCR_700_writeb(ASYNC_DIV_3_0 | hostdata->dcntl_extra, host, DCNTL_REG);
716 		hostdata->sync_clock = hostdata->clock*2;
717 		hostdata->sync_clock /= 3;
718 
719 	} else if(hostdata->clock > 37 && hostdata->clock <= 50) {
720 		/* sync divider 1, async divider 2 */
721 		DEBUG(("53c700: sync 1 async 2\n"));
722 		NCR_700_writeb(SYNC_DIV_1_0, host, SBCL_REG);
723 		NCR_700_writeb(ASYNC_DIV_2_0 | hostdata->dcntl_extra, host, DCNTL_REG);
724 		hostdata->sync_clock = hostdata->clock;
725 	} else if(hostdata->clock > 25 && hostdata->clock <=37) {
726 		/* sync divider 1, async divider 1.5 */
727 		DEBUG(("53c700: sync 1 async 1.5\n"));
728 		NCR_700_writeb(SYNC_DIV_1_0, host, SBCL_REG);
729 		NCR_700_writeb(ASYNC_DIV_1_5 | hostdata->dcntl_extra, host, DCNTL_REG);
730 		hostdata->sync_clock = hostdata->clock;
731 	} else {
732 		DEBUG(("53c700: sync 1 async 1\n"));
733 		NCR_700_writeb(SYNC_DIV_1_0, host, SBCL_REG);
734 		NCR_700_writeb(ASYNC_DIV_1_0 | hostdata->dcntl_extra, host, DCNTL_REG);
735 		/* sync divider 1, async divider 1 */
736 		hostdata->sync_clock = hostdata->clock;
737 	}
738 	/* Calculate the actual minimum period that can be supported
739 	 * by our synchronous clock speed.  See the 710 manual for
740 	 * exact details of this calculation which is based on a
741 	 * setting of the SXFER register */
742 	min_period = 1000*(4+min_xferp)/(4*hostdata->sync_clock);
743 	hostdata->min_period = NCR_700_MIN_PERIOD;
744 	if(min_period > NCR_700_MIN_PERIOD)
745 		hostdata->min_period = min_period;
746 }
747 
748 STATIC void
749 NCR_700_chip_reset(struct Scsi_Host *host)
750 {
751 	struct NCR_700_Host_Parameters *hostdata =
752 		(struct NCR_700_Host_Parameters *)host->hostdata[0];
753 	if(hostdata->chip710) {
754 		NCR_700_writeb(SOFTWARE_RESET_710, host, ISTAT_REG);
755 		udelay(100);
756 
757 		NCR_700_writeb(0, host, ISTAT_REG);
758 	} else {
759 		NCR_700_writeb(SOFTWARE_RESET, host, DCNTL_REG);
760 		udelay(100);
761 
762 		NCR_700_writeb(0, host, DCNTL_REG);
763 	}
764 
765 	mdelay(1000);
766 
767 	NCR_700_chip_setup(host);
768 }
769 
770 /* The heart of the message processing engine is that the instruction
771  * immediately after the INT is the normal case (and so must be CLEAR
772  * ACK).  If we want to do something else, we call that routine in
773  * scripts and set temp to be the normal case + 8 (skipping the CLEAR
774  * ACK) so that the routine returns correctly to resume its activity
775  * */
776 STATIC __u32
777 process_extended_message(struct Scsi_Host *host,
778 			 struct NCR_700_Host_Parameters *hostdata,
779 			 struct scsi_cmnd *SCp, __u32 dsp, __u32 dsps)
780 {
781 	__u32 resume_offset = dsp, temp = dsp + 8;
782 	__u8 pun = 0xff, lun = 0xff;
783 
784 	if(SCp != NULL) {
785 		pun = SCp->device->id;
786 		lun = SCp->device->lun;
787 	}
788 
789 	switch(hostdata->msgin[2]) {
790 	case A_SDTR_MSG:
791 		if(SCp != NULL && NCR_700_is_flag_set(SCp->device, NCR_700_DEV_BEGIN_SYNC_NEGOTIATION)) {
792 			struct scsi_target *starget = SCp->device->sdev_target;
793 			__u8 period = hostdata->msgin[3];
794 			__u8 offset = hostdata->msgin[4];
795 
796 			if(offset == 0 || period == 0) {
797 				offset = 0;
798 				period = 0;
799 			}
800 
801 			spi_offset(starget) = offset;
802 			spi_period(starget) = period;
803 
804 			if(NCR_700_is_flag_set(SCp->device, NCR_700_DEV_PRINT_SYNC_NEGOTIATION)) {
805 				spi_display_xfer_agreement(starget);
806 				NCR_700_clear_flag(SCp->device, NCR_700_DEV_PRINT_SYNC_NEGOTIATION);
807 			}
808 
809 			NCR_700_set_flag(SCp->device, NCR_700_DEV_NEGOTIATED_SYNC);
810 			NCR_700_clear_flag(SCp->device, NCR_700_DEV_BEGIN_SYNC_NEGOTIATION);
811 
812 			NCR_700_writeb(NCR_700_get_SXFER(SCp->device),
813 				       host, SXFER_REG);
814 
815 		} else {
816 			/* SDTR message out of the blue, reject it */
817 			shost_printk(KERN_WARNING, host,
818 				"Unexpected SDTR msg\n");
819 			hostdata->msgout[0] = A_REJECT_MSG;
820 			dma_cache_sync(hostdata->dev, hostdata->msgout, 1, DMA_TO_DEVICE);
821 			script_patch_16(hostdata->dev, hostdata->script,
822 			                MessageCount, 1);
823 			/* SendMsgOut returns, so set up the return
824 			 * address */
825 			resume_offset = hostdata->pScript + Ent_SendMessageWithATN;
826 		}
827 		break;
828 
829 	case A_WDTR_MSG:
830 		printk(KERN_INFO "scsi%d: (%d:%d), Unsolicited WDTR after CMD, Rejecting\n",
831 		       host->host_no, pun, lun);
832 		hostdata->msgout[0] = A_REJECT_MSG;
833 		dma_cache_sync(hostdata->dev, hostdata->msgout, 1, DMA_TO_DEVICE);
834 		script_patch_16(hostdata->dev, hostdata->script, MessageCount,
835 		                1);
836 		resume_offset = hostdata->pScript + Ent_SendMessageWithATN;
837 
838 		break;
839 
840 	default:
841 		printk(KERN_INFO "scsi%d (%d:%d): Unexpected message %s: ",
842 		       host->host_no, pun, lun,
843 		       NCR_700_phase[(dsps & 0xf00) >> 8]);
844 		spi_print_msg(hostdata->msgin);
845 		printk("\n");
846 		/* just reject it */
847 		hostdata->msgout[0] = A_REJECT_MSG;
848 		dma_cache_sync(hostdata->dev, hostdata->msgout, 1, DMA_TO_DEVICE);
849 		script_patch_16(hostdata->dev, hostdata->script, MessageCount,
850 		                1);
851 		/* SendMsgOut returns, so set up the return
852 		 * address */
853 		resume_offset = hostdata->pScript + Ent_SendMessageWithATN;
854 	}
855 	NCR_700_writel(temp, host, TEMP_REG);
856 	return resume_offset;
857 }
858 
859 STATIC __u32
860 process_message(struct Scsi_Host *host,	struct NCR_700_Host_Parameters *hostdata,
861 		struct scsi_cmnd *SCp, __u32 dsp, __u32 dsps)
862 {
863 	/* work out where to return to */
864 	__u32 temp = dsp + 8, resume_offset = dsp;
865 	__u8 pun = 0xff, lun = 0xff;
866 
867 	if(SCp != NULL) {
868 		pun = SCp->device->id;
869 		lun = SCp->device->lun;
870 	}
871 
872 #ifdef NCR_700_DEBUG
873 	printk("scsi%d (%d:%d): message %s: ", host->host_no, pun, lun,
874 	       NCR_700_phase[(dsps & 0xf00) >> 8]);
875 	spi_print_msg(hostdata->msgin);
876 	printk("\n");
877 #endif
878 
879 	switch(hostdata->msgin[0]) {
880 
881 	case A_EXTENDED_MSG:
882 		resume_offset =  process_extended_message(host, hostdata, SCp,
883 							  dsp, dsps);
884 		break;
885 
886 	case A_REJECT_MSG:
887 		if(SCp != NULL && NCR_700_is_flag_set(SCp->device, NCR_700_DEV_BEGIN_SYNC_NEGOTIATION)) {
888 			/* Rejected our sync negotiation attempt */
889 			spi_period(SCp->device->sdev_target) =
890 				spi_offset(SCp->device->sdev_target) = 0;
891 			NCR_700_set_flag(SCp->device, NCR_700_DEV_NEGOTIATED_SYNC);
892 			NCR_700_clear_flag(SCp->device, NCR_700_DEV_BEGIN_SYNC_NEGOTIATION);
893 		} else if(SCp != NULL && NCR_700_get_tag_neg_state(SCp->device) == NCR_700_DURING_TAG_NEGOTIATION) {
894 			/* rejected our first simple tag message */
895 			scmd_printk(KERN_WARNING, SCp,
896 				"Rejected first tag queue attempt, turning off tag queueing\n");
897 			/* we're done negotiating */
898 			NCR_700_set_tag_neg_state(SCp->device, NCR_700_FINISHED_TAG_NEGOTIATION);
899 			hostdata->tag_negotiated &= ~(1<<scmd_id(SCp));
900 
901 			SCp->device->tagged_supported = 0;
902 			SCp->device->simple_tags = 0;
903 			scsi_change_queue_depth(SCp->device, host->cmd_per_lun);
904 		} else {
905 			shost_printk(KERN_WARNING, host,
906 				"(%d:%d) Unexpected REJECT Message %s\n",
907 			       pun, lun,
908 			       NCR_700_phase[(dsps & 0xf00) >> 8]);
909 			/* however, just ignore it */
910 		}
911 		break;
912 
913 	case A_PARITY_ERROR_MSG:
914 		printk(KERN_ERR "scsi%d (%d:%d) Parity Error!\n", host->host_no,
915 		       pun, lun);
916 		NCR_700_internal_bus_reset(host);
917 		break;
918 	case A_SIMPLE_TAG_MSG:
919 		printk(KERN_INFO "scsi%d (%d:%d) SIMPLE TAG %d %s\n", host->host_no,
920 		       pun, lun, hostdata->msgin[1],
921 		       NCR_700_phase[(dsps & 0xf00) >> 8]);
922 		/* just ignore it */
923 		break;
924 	default:
925 		printk(KERN_INFO "scsi%d (%d:%d): Unexpected message %s: ",
926 		       host->host_no, pun, lun,
927 		       NCR_700_phase[(dsps & 0xf00) >> 8]);
928 
929 		spi_print_msg(hostdata->msgin);
930 		printk("\n");
931 		/* just reject it */
932 		hostdata->msgout[0] = A_REJECT_MSG;
933 		dma_cache_sync(hostdata->dev, hostdata->msgout, 1, DMA_TO_DEVICE);
934 		script_patch_16(hostdata->dev, hostdata->script, MessageCount,
935 		                1);
936 		/* SendMsgOut returns, so set up the return
937 		 * address */
938 		resume_offset = hostdata->pScript + Ent_SendMessageWithATN;
939 
940 		break;
941 	}
942 	NCR_700_writel(temp, host, TEMP_REG);
943 	/* set us up to receive another message */
944 	dma_cache_sync(hostdata->dev, hostdata->msgin, MSG_ARRAY_SIZE, DMA_FROM_DEVICE);
945 	return resume_offset;
946 }
947 
948 STATIC __u32
949 process_script_interrupt(__u32 dsps, __u32 dsp, struct scsi_cmnd *SCp,
950 			 struct Scsi_Host *host,
951 			 struct NCR_700_Host_Parameters *hostdata)
952 {
953 	__u32 resume_offset = 0;
954 	__u8 pun = 0xff, lun=0xff;
955 
956 	if(SCp != NULL) {
957 		pun = SCp->device->id;
958 		lun = SCp->device->lun;
959 	}
960 
961 	if(dsps == A_GOOD_STATUS_AFTER_STATUS) {
962 		DEBUG(("  COMMAND COMPLETE, status=%02x\n",
963 		       hostdata->status[0]));
964 		/* OK, if TCQ still under negotiation, we now know it works */
965 		if (NCR_700_get_tag_neg_state(SCp->device) == NCR_700_DURING_TAG_NEGOTIATION)
966 			NCR_700_set_tag_neg_state(SCp->device,
967 						  NCR_700_FINISHED_TAG_NEGOTIATION);
968 
969 		/* check for contingent allegiance contitions */
970 		if(status_byte(hostdata->status[0]) == CHECK_CONDITION ||
971 		   status_byte(hostdata->status[0]) == COMMAND_TERMINATED) {
972 			struct NCR_700_command_slot *slot =
973 				(struct NCR_700_command_slot *)SCp->host_scribble;
974 			if(slot->flags == NCR_700_FLAG_AUTOSENSE) {
975 				/* OOPS: bad device, returning another
976 				 * contingent allegiance condition */
977 				scmd_printk(KERN_ERR, SCp,
978 					"broken device is looping in contingent allegiance: ignoring\n");
979 				NCR_700_scsi_done(hostdata, SCp, hostdata->status[0]);
980 			} else {
981 				char *cmnd =
982 					NCR_700_get_sense_cmnd(SCp->device);
983 #ifdef NCR_DEBUG
984 				scsi_print_command(SCp);
985 				printk("  cmd %p has status %d, requesting sense\n",
986 				       SCp, hostdata->status[0]);
987 #endif
988 				/* we can destroy the command here
989 				 * because the contingent allegiance
990 				 * condition will cause a retry which
991 				 * will re-copy the command from the
992 				 * saved data_cmnd.  We also unmap any
993 				 * data associated with the command
994 				 * here */
995 				NCR_700_unmap(hostdata, SCp, slot);
996 				dma_unmap_single(hostdata->dev, slot->pCmd,
997 						 MAX_COMMAND_SIZE,
998 						 DMA_TO_DEVICE);
999 
1000 				cmnd[0] = REQUEST_SENSE;
1001 				cmnd[1] = (lun & 0x7) << 5;
1002 				cmnd[2] = 0;
1003 				cmnd[3] = 0;
1004 				cmnd[4] = SCSI_SENSE_BUFFERSIZE;
1005 				cmnd[5] = 0;
1006 				/* Here's a quiet hack: the
1007 				 * REQUEST_SENSE command is six bytes,
1008 				 * so store a flag indicating that
1009 				 * this was an internal sense request
1010 				 * and the original status at the end
1011 				 * of the command */
1012 				cmnd[6] = NCR_700_INTERNAL_SENSE_MAGIC;
1013 				cmnd[7] = hostdata->status[0];
1014 				cmnd[8] = SCp->cmd_len;
1015 				SCp->cmd_len = 6; /* command length for
1016 						   * REQUEST_SENSE */
1017 				slot->pCmd = dma_map_single(hostdata->dev, cmnd, MAX_COMMAND_SIZE, DMA_TO_DEVICE);
1018 				slot->dma_handle = dma_map_single(hostdata->dev, SCp->sense_buffer, SCSI_SENSE_BUFFERSIZE, DMA_FROM_DEVICE);
1019 				slot->SG[0].ins = bS_to_host(SCRIPT_MOVE_DATA_IN | SCSI_SENSE_BUFFERSIZE);
1020 				slot->SG[0].pAddr = bS_to_host(slot->dma_handle);
1021 				slot->SG[1].ins = bS_to_host(SCRIPT_RETURN);
1022 				slot->SG[1].pAddr = 0;
1023 				slot->resume_offset = hostdata->pScript;
1024 				dma_cache_sync(hostdata->dev, slot->SG, sizeof(slot->SG[0])*2, DMA_TO_DEVICE);
1025 				dma_cache_sync(hostdata->dev, SCp->sense_buffer, SCSI_SENSE_BUFFERSIZE, DMA_FROM_DEVICE);
1026 
1027 				/* queue the command for reissue */
1028 				slot->state = NCR_700_SLOT_QUEUED;
1029 				slot->flags = NCR_700_FLAG_AUTOSENSE;
1030 				hostdata->state = NCR_700_HOST_FREE;
1031 				hostdata->cmd = NULL;
1032 			}
1033 		} else {
1034 			// Currently rely on the mid layer evaluation
1035 			// of the tag queuing capability
1036 			//
1037 			//if(status_byte(hostdata->status[0]) == GOOD &&
1038 			//   SCp->cmnd[0] == INQUIRY && SCp->use_sg == 0) {
1039 			//	/* Piggy back the tag queueing support
1040 			//	 * on this command */
1041 			//	dma_sync_single_for_cpu(hostdata->dev,
1042 			//			    slot->dma_handle,
1043 			//			    SCp->request_bufflen,
1044 			//			    DMA_FROM_DEVICE);
1045 			//	if(((char *)SCp->request_buffer)[7] & 0x02) {
1046 			//		scmd_printk(KERN_INFO, SCp,
1047 			//		     "Enabling Tag Command Queuing\n");
1048 			//		hostdata->tag_negotiated |= (1<<scmd_id(SCp));
1049 			//		NCR_700_set_flag(SCp->device, NCR_700_DEV_BEGIN_TAG_QUEUEING);
1050 			//	} else {
1051 			//		NCR_700_clear_flag(SCp->device, NCR_700_DEV_BEGIN_TAG_QUEUEING);
1052 			//		hostdata->tag_negotiated &= ~(1<<scmd_id(SCp));
1053 			//	}
1054 			//}
1055 			NCR_700_scsi_done(hostdata, SCp, hostdata->status[0]);
1056 		}
1057 	} else if((dsps & 0xfffff0f0) == A_UNEXPECTED_PHASE) {
1058 		__u8 i = (dsps & 0xf00) >> 8;
1059 
1060 		scmd_printk(KERN_ERR, SCp, "UNEXPECTED PHASE %s (%s)\n",
1061 		       NCR_700_phase[i],
1062 		       sbcl_to_string(NCR_700_readb(host, SBCL_REG)));
1063 		scmd_printk(KERN_ERR, SCp, "         len = %d, cmd =",
1064 			SCp->cmd_len);
1065 		scsi_print_command(SCp);
1066 
1067 		NCR_700_internal_bus_reset(host);
1068 	} else if((dsps & 0xfffff000) == A_FATAL) {
1069 		int i = (dsps & 0xfff);
1070 
1071 		printk(KERN_ERR "scsi%d: (%d:%d) FATAL ERROR: %s\n",
1072 		       host->host_no, pun, lun, NCR_700_fatal_messages[i]);
1073 		if(dsps == A_FATAL_ILLEGAL_MSG_LENGTH) {
1074 			printk(KERN_ERR "     msg begins %02x %02x\n",
1075 			       hostdata->msgin[0], hostdata->msgin[1]);
1076 		}
1077 		NCR_700_internal_bus_reset(host);
1078 	} else if((dsps & 0xfffff0f0) == A_DISCONNECT) {
1079 #ifdef NCR_700_DEBUG
1080 		__u8 i = (dsps & 0xf00) >> 8;
1081 
1082 		printk("scsi%d: (%d:%d), DISCONNECTED (%d) %s\n",
1083 		       host->host_no, pun, lun,
1084 		       i, NCR_700_phase[i]);
1085 #endif
1086 		save_for_reselection(hostdata, SCp, dsp);
1087 
1088 	} else if(dsps == A_RESELECTION_IDENTIFIED) {
1089 		__u8 lun;
1090 		struct NCR_700_command_slot *slot;
1091 		__u8 reselection_id = hostdata->reselection_id;
1092 		struct scsi_device *SDp;
1093 
1094 		lun = hostdata->msgin[0] & 0x1f;
1095 
1096 		hostdata->reselection_id = 0xff;
1097 		DEBUG(("scsi%d: (%d:%d) RESELECTED!\n",
1098 		       host->host_no, reselection_id, lun));
1099 		/* clear the reselection indicator */
1100 		SDp = __scsi_device_lookup(host, 0, reselection_id, lun);
1101 		if(unlikely(SDp == NULL)) {
1102 			printk(KERN_ERR "scsi%d: (%d:%d) HAS NO device\n",
1103 			       host->host_no, reselection_id, lun);
1104 			BUG();
1105 		}
1106 		if(hostdata->msgin[1] == A_SIMPLE_TAG_MSG) {
1107 			struct scsi_cmnd *SCp;
1108 
1109 			SCp = scsi_host_find_tag(SDp->host, hostdata->msgin[2]);
1110 			if(unlikely(SCp == NULL)) {
1111 				printk(KERN_ERR "scsi%d: (%d:%d) no saved request for tag %d\n",
1112 				       host->host_no, reselection_id, lun, hostdata->msgin[2]);
1113 				BUG();
1114 			}
1115 
1116 			slot = (struct NCR_700_command_slot *)SCp->host_scribble;
1117 			DDEBUG(KERN_DEBUG, SDp,
1118 				"reselection is tag %d, slot %p(%d)\n",
1119 				hostdata->msgin[2], slot, slot->tag);
1120 		} else {
1121 			struct NCR_700_Device_Parameters *p = SDp->hostdata;
1122 			struct scsi_cmnd *SCp = p->current_cmnd;
1123 
1124 			if(unlikely(SCp == NULL)) {
1125 				sdev_printk(KERN_ERR, SDp,
1126 					"no saved request for untagged cmd\n");
1127 				BUG();
1128 			}
1129 			slot = (struct NCR_700_command_slot *)SCp->host_scribble;
1130 		}
1131 
1132 		if(slot == NULL) {
1133 			printk(KERN_ERR "scsi%d: (%d:%d) RESELECTED but no saved command (MSG = %02x %02x %02x)!!\n",
1134 			       host->host_no, reselection_id, lun,
1135 			       hostdata->msgin[0], hostdata->msgin[1],
1136 			       hostdata->msgin[2]);
1137 		} else {
1138 			if(hostdata->state != NCR_700_HOST_BUSY)
1139 				printk(KERN_ERR "scsi%d: FATAL, host not busy during valid reselection!\n",
1140 				       host->host_no);
1141 			resume_offset = slot->resume_offset;
1142 			hostdata->cmd = slot->cmnd;
1143 
1144 			/* re-patch for this command */
1145 			script_patch_32_abs(hostdata->dev, hostdata->script,
1146 			                    CommandAddress, slot->pCmd);
1147 			script_patch_16(hostdata->dev, hostdata->script,
1148 					CommandCount, slot->cmnd->cmd_len);
1149 			script_patch_32_abs(hostdata->dev, hostdata->script,
1150 			                    SGScriptStartAddress,
1151 					    to32bit(&slot->pSG[0].ins));
1152 
1153 			/* Note: setting SXFER only works if we're
1154 			 * still in the MESSAGE phase, so it is vital
1155 			 * that ACK is still asserted when we process
1156 			 * the reselection message.  The resume offset
1157 			 * should therefore always clear ACK */
1158 			NCR_700_writeb(NCR_700_get_SXFER(hostdata->cmd->device),
1159 				       host, SXFER_REG);
1160 			dma_cache_sync(hostdata->dev, hostdata->msgin,
1161 				       MSG_ARRAY_SIZE, DMA_FROM_DEVICE);
1162 			dma_cache_sync(hostdata->dev, hostdata->msgout,
1163 				       MSG_ARRAY_SIZE, DMA_TO_DEVICE);
1164 			/* I'm just being paranoid here, the command should
1165 			 * already have been flushed from the cache */
1166 			dma_cache_sync(hostdata->dev, slot->cmnd->cmnd,
1167 				       slot->cmnd->cmd_len, DMA_TO_DEVICE);
1168 
1169 
1170 
1171 		}
1172 	} else if(dsps == A_RESELECTED_DURING_SELECTION) {
1173 
1174 		/* This section is full of debugging code because I've
1175 		 * never managed to reach it.  I think what happens is
1176 		 * that, because the 700 runs with selection
1177 		 * interrupts enabled the whole time that we take a
1178 		 * selection interrupt before we manage to get to the
1179 		 * reselected script interrupt */
1180 
1181 		__u8 reselection_id = NCR_700_readb(host, SFBR_REG);
1182 		struct NCR_700_command_slot *slot;
1183 
1184 		/* Take out our own ID */
1185 		reselection_id &= ~(1<<host->this_id);
1186 
1187 		/* I've never seen this happen, so keep this as a printk rather
1188 		 * than a debug */
1189 		printk(KERN_INFO "scsi%d: (%d:%d) RESELECTION DURING SELECTION, dsp=%08x[%04x] state=%d, count=%d\n",
1190 		       host->host_no, reselection_id, lun, dsp, dsp - hostdata->pScript, hostdata->state, hostdata->command_slot_count);
1191 
1192 		{
1193 			/* FIXME: DEBUGGING CODE */
1194 			__u32 SG = (__u32)bS_to_cpu(hostdata->script[A_SGScriptStartAddress_used[0]]);
1195 			int i;
1196 
1197 			for(i=0; i< NCR_700_COMMAND_SLOTS_PER_HOST; i++) {
1198 				if(SG >= to32bit(&hostdata->slots[i].pSG[0])
1199 				   && SG <= to32bit(&hostdata->slots[i].pSG[NCR_700_SG_SEGMENTS]))
1200 					break;
1201 			}
1202 			printk(KERN_INFO "IDENTIFIED SG segment as being %08x in slot %p, cmd %p, slot->resume_offset=%08x\n", SG, &hostdata->slots[i], hostdata->slots[i].cmnd, hostdata->slots[i].resume_offset);
1203 			SCp =  hostdata->slots[i].cmnd;
1204 		}
1205 
1206 		if(SCp != NULL) {
1207 			slot = (struct NCR_700_command_slot *)SCp->host_scribble;
1208 			/* change slot from busy to queued to redo command */
1209 			slot->state = NCR_700_SLOT_QUEUED;
1210 		}
1211 		hostdata->cmd = NULL;
1212 
1213 		if(reselection_id == 0) {
1214 			if(hostdata->reselection_id == 0xff) {
1215 				printk(KERN_ERR "scsi%d: Invalid reselection during selection!!\n", host->host_no);
1216 				return 0;
1217 			} else {
1218 				printk(KERN_ERR "scsi%d: script reselected and we took a selection interrupt\n",
1219 				       host->host_no);
1220 				reselection_id = hostdata->reselection_id;
1221 			}
1222 		} else {
1223 
1224 			/* convert to real ID */
1225 			reselection_id = bitmap_to_number(reselection_id);
1226 		}
1227 		hostdata->reselection_id = reselection_id;
1228 		/* just in case we have a stale simple tag message, clear it */
1229 		hostdata->msgin[1] = 0;
1230 		dma_cache_sync(hostdata->dev, hostdata->msgin,
1231 			       MSG_ARRAY_SIZE, DMA_BIDIRECTIONAL);
1232 		if(hostdata->tag_negotiated & (1<<reselection_id)) {
1233 			resume_offset = hostdata->pScript + Ent_GetReselectionWithTag;
1234 		} else {
1235 			resume_offset = hostdata->pScript + Ent_GetReselectionData;
1236 		}
1237 	} else if(dsps == A_COMPLETED_SELECTION_AS_TARGET) {
1238 		/* we've just disconnected from the bus, do nothing since
1239 		 * a return here will re-run the queued command slot
1240 		 * that may have been interrupted by the initial selection */
1241 		DEBUG((" SELECTION COMPLETED\n"));
1242 	} else if((dsps & 0xfffff0f0) == A_MSG_IN) {
1243 		resume_offset = process_message(host, hostdata, SCp,
1244 						dsp, dsps);
1245 	} else if((dsps &  0xfffff000) == 0) {
1246 		__u8 i = (dsps & 0xf0) >> 4, j = (dsps & 0xf00) >> 8;
1247 		printk(KERN_ERR "scsi%d: (%d:%d), unhandled script condition %s %s at %04x\n",
1248 		       host->host_no, pun, lun, NCR_700_condition[i],
1249 		       NCR_700_phase[j], dsp - hostdata->pScript);
1250 		if(SCp != NULL) {
1251 			struct scatterlist *sg;
1252 
1253 			scsi_print_command(SCp);
1254 			scsi_for_each_sg(SCp, sg, scsi_sg_count(SCp) + 1, i) {
1255 				printk(KERN_INFO " SG[%d].length = %d, move_insn=%08x, addr %08x\n", i, sg->length, ((struct NCR_700_command_slot *)SCp->host_scribble)->SG[i].ins, ((struct NCR_700_command_slot *)SCp->host_scribble)->SG[i].pAddr);
1256 			}
1257 		}
1258 		NCR_700_internal_bus_reset(host);
1259 	} else if((dsps & 0xfffff000) == A_DEBUG_INTERRUPT) {
1260 		printk(KERN_NOTICE "scsi%d (%d:%d) DEBUG INTERRUPT %d AT %08x[%04x], continuing\n",
1261 		       host->host_no, pun, lun, dsps & 0xfff, dsp, dsp - hostdata->pScript);
1262 		resume_offset = dsp;
1263 	} else {
1264 		printk(KERN_ERR "scsi%d: (%d:%d), unidentified script interrupt 0x%x at %04x\n",
1265 		       host->host_no, pun, lun, dsps, dsp - hostdata->pScript);
1266 		NCR_700_internal_bus_reset(host);
1267 	}
1268 	return resume_offset;
1269 }
1270 
1271 /* We run the 53c700 with selection interrupts always enabled.  This
1272  * means that the chip may be selected as soon as the bus frees.  On a
1273  * busy bus, this can be before the scripts engine finishes its
1274  * processing.  Therefore, part of the selection processing has to be
1275  * to find out what the scripts engine is doing and complete the
1276  * function if necessary (i.e. process the pending disconnect or save
1277  * the interrupted initial selection */
1278 STATIC inline __u32
1279 process_selection(struct Scsi_Host *host, __u32 dsp)
1280 {
1281 	__u8 id = 0;	/* Squash compiler warning */
1282 	int count = 0;
1283 	__u32 resume_offset = 0;
1284 	struct NCR_700_Host_Parameters *hostdata =
1285 		(struct NCR_700_Host_Parameters *)host->hostdata[0];
1286 	struct scsi_cmnd *SCp = hostdata->cmd;
1287 	__u8 sbcl;
1288 
1289 	for(count = 0; count < 5; count++) {
1290 		id = NCR_700_readb(host, hostdata->chip710 ?
1291 				   CTEST9_REG : SFBR_REG);
1292 
1293 		/* Take out our own ID */
1294 		id &= ~(1<<host->this_id);
1295 		if(id != 0)
1296 			break;
1297 		udelay(5);
1298 	}
1299 	sbcl = NCR_700_readb(host, SBCL_REG);
1300 	if((sbcl & SBCL_IO) == 0) {
1301 		/* mark as having been selected rather than reselected */
1302 		id = 0xff;
1303 	} else {
1304 		/* convert to real ID */
1305 		hostdata->reselection_id = id = bitmap_to_number(id);
1306 		DEBUG(("scsi%d:  Reselected by %d\n",
1307 		       host->host_no, id));
1308 	}
1309 	if(hostdata->state == NCR_700_HOST_BUSY && SCp != NULL) {
1310 		struct NCR_700_command_slot *slot =
1311 			(struct NCR_700_command_slot *)SCp->host_scribble;
1312 		DEBUG(("  ID %d WARNING: RESELECTION OF BUSY HOST, saving cmd %p, slot %p, addr %x [%04x], resume %x!\n", id, hostdata->cmd, slot, dsp, dsp - hostdata->pScript, resume_offset));
1313 
1314 		switch(dsp - hostdata->pScript) {
1315 		case Ent_Disconnect1:
1316 		case Ent_Disconnect2:
1317 			save_for_reselection(hostdata, SCp, Ent_Disconnect2 + hostdata->pScript);
1318 			break;
1319 		case Ent_Disconnect3:
1320 		case Ent_Disconnect4:
1321 			save_for_reselection(hostdata, SCp, Ent_Disconnect4 + hostdata->pScript);
1322 			break;
1323 		case Ent_Disconnect5:
1324 		case Ent_Disconnect6:
1325 			save_for_reselection(hostdata, SCp, Ent_Disconnect6 + hostdata->pScript);
1326 			break;
1327 		case Ent_Disconnect7:
1328 		case Ent_Disconnect8:
1329 			save_for_reselection(hostdata, SCp, Ent_Disconnect8 + hostdata->pScript);
1330 			break;
1331 		case Ent_Finish1:
1332 		case Ent_Finish2:
1333 			process_script_interrupt(A_GOOD_STATUS_AFTER_STATUS, dsp, SCp, host, hostdata);
1334 			break;
1335 
1336 		default:
1337 			slot->state = NCR_700_SLOT_QUEUED;
1338 			break;
1339 			}
1340 	}
1341 	hostdata->state = NCR_700_HOST_BUSY;
1342 	hostdata->cmd = NULL;
1343 	/* clear any stale simple tag message */
1344 	hostdata->msgin[1] = 0;
1345 	dma_cache_sync(hostdata->dev, hostdata->msgin, MSG_ARRAY_SIZE,
1346 		       DMA_BIDIRECTIONAL);
1347 
1348 	if(id == 0xff) {
1349 		/* Selected as target, Ignore */
1350 		resume_offset = hostdata->pScript + Ent_SelectedAsTarget;
1351 	} else if(hostdata->tag_negotiated & (1<<id)) {
1352 		resume_offset = hostdata->pScript + Ent_GetReselectionWithTag;
1353 	} else {
1354 		resume_offset = hostdata->pScript + Ent_GetReselectionData;
1355 	}
1356 	return resume_offset;
1357 }
1358 
1359 static inline void
1360 NCR_700_clear_fifo(struct Scsi_Host *host) {
1361 	const struct NCR_700_Host_Parameters *hostdata
1362 		= (struct NCR_700_Host_Parameters *)host->hostdata[0];
1363 	if(hostdata->chip710) {
1364 		NCR_700_writeb(CLR_FIFO_710, host, CTEST8_REG);
1365 	} else {
1366 		NCR_700_writeb(CLR_FIFO, host, DFIFO_REG);
1367 	}
1368 }
1369 
1370 static inline void
1371 NCR_700_flush_fifo(struct Scsi_Host *host) {
1372 	const struct NCR_700_Host_Parameters *hostdata
1373 		= (struct NCR_700_Host_Parameters *)host->hostdata[0];
1374 	if(hostdata->chip710) {
1375 		NCR_700_writeb(FLUSH_DMA_FIFO_710, host, CTEST8_REG);
1376 		udelay(10);
1377 		NCR_700_writeb(0, host, CTEST8_REG);
1378 	} else {
1379 		NCR_700_writeb(FLUSH_DMA_FIFO, host, DFIFO_REG);
1380 		udelay(10);
1381 		NCR_700_writeb(0, host, DFIFO_REG);
1382 	}
1383 }
1384 
1385 
1386 /* The queue lock with interrupts disabled must be held on entry to
1387  * this function */
1388 STATIC int
1389 NCR_700_start_command(struct scsi_cmnd *SCp)
1390 {
1391 	struct NCR_700_command_slot *slot =
1392 		(struct NCR_700_command_slot *)SCp->host_scribble;
1393 	struct NCR_700_Host_Parameters *hostdata =
1394 		(struct NCR_700_Host_Parameters *)SCp->device->host->hostdata[0];
1395 	__u16 count = 1;	/* for IDENTIFY message */
1396 	u8 lun = SCp->device->lun;
1397 
1398 	if(hostdata->state != NCR_700_HOST_FREE) {
1399 		/* keep this inside the lock to close the race window where
1400 		 * the running command finishes on another CPU while we don't
1401 		 * change the state to queued on this one */
1402 		slot->state = NCR_700_SLOT_QUEUED;
1403 
1404 		DEBUG(("scsi%d: host busy, queueing command %p, slot %p\n",
1405 		       SCp->device->host->host_no, slot->cmnd, slot));
1406 		return 0;
1407 	}
1408 	hostdata->state = NCR_700_HOST_BUSY;
1409 	hostdata->cmd = SCp;
1410 	slot->state = NCR_700_SLOT_BUSY;
1411 	/* keep interrupts disabled until we have the command correctly
1412 	 * set up so we cannot take a selection interrupt */
1413 
1414 	hostdata->msgout[0] = NCR_700_identify((SCp->cmnd[0] != REQUEST_SENSE &&
1415 						slot->flags != NCR_700_FLAG_AUTOSENSE),
1416 					       lun);
1417 	/* for INQUIRY or REQUEST_SENSE commands, we cannot be sure
1418 	 * if the negotiated transfer parameters still hold, so
1419 	 * always renegotiate them */
1420 	if(SCp->cmnd[0] == INQUIRY || SCp->cmnd[0] == REQUEST_SENSE ||
1421 	   slot->flags == NCR_700_FLAG_AUTOSENSE) {
1422 		NCR_700_clear_flag(SCp->device, NCR_700_DEV_NEGOTIATED_SYNC);
1423 	}
1424 
1425 	/* REQUEST_SENSE is asking for contingent I_T_L(_Q) status.
1426 	 * If a contingent allegiance condition exists, the device
1427 	 * will refuse all tags, so send the request sense as untagged
1428 	 * */
1429 	if((hostdata->tag_negotiated & (1<<scmd_id(SCp)))
1430 	   && (slot->tag != SCSI_NO_TAG && SCp->cmnd[0] != REQUEST_SENSE &&
1431 	       slot->flags != NCR_700_FLAG_AUTOSENSE)) {
1432 		count += spi_populate_tag_msg(&hostdata->msgout[count], SCp);
1433 	}
1434 
1435 	if(hostdata->fast &&
1436 	   NCR_700_is_flag_clear(SCp->device, NCR_700_DEV_NEGOTIATED_SYNC)) {
1437 		count += spi_populate_sync_msg(&hostdata->msgout[count],
1438 				spi_period(SCp->device->sdev_target),
1439 				spi_offset(SCp->device->sdev_target));
1440 		NCR_700_set_flag(SCp->device, NCR_700_DEV_BEGIN_SYNC_NEGOTIATION);
1441 	}
1442 
1443 	script_patch_16(hostdata->dev, hostdata->script, MessageCount, count);
1444 
1445 
1446 	script_patch_ID(hostdata->dev, hostdata->script,
1447 			Device_ID, 1<<scmd_id(SCp));
1448 
1449 	script_patch_32_abs(hostdata->dev, hostdata->script, CommandAddress,
1450 			    slot->pCmd);
1451 	script_patch_16(hostdata->dev, hostdata->script, CommandCount,
1452 	                SCp->cmd_len);
1453 	/* finally plumb the beginning of the SG list into the script
1454 	 * */
1455 	script_patch_32_abs(hostdata->dev, hostdata->script,
1456 	                    SGScriptStartAddress, to32bit(&slot->pSG[0].ins));
1457 	NCR_700_clear_fifo(SCp->device->host);
1458 
1459 	if(slot->resume_offset == 0)
1460 		slot->resume_offset = hostdata->pScript;
1461 	/* now perform all the writebacks and invalidates */
1462 	dma_cache_sync(hostdata->dev, hostdata->msgout, count, DMA_TO_DEVICE);
1463 	dma_cache_sync(hostdata->dev, hostdata->msgin, MSG_ARRAY_SIZE,
1464 		       DMA_FROM_DEVICE);
1465 	dma_cache_sync(hostdata->dev, SCp->cmnd, SCp->cmd_len, DMA_TO_DEVICE);
1466 	dma_cache_sync(hostdata->dev, hostdata->status, 1, DMA_FROM_DEVICE);
1467 
1468 	/* set the synchronous period/offset */
1469 	NCR_700_writeb(NCR_700_get_SXFER(SCp->device),
1470 		       SCp->device->host, SXFER_REG);
1471 	NCR_700_writel(slot->temp, SCp->device->host, TEMP_REG);
1472 	NCR_700_writel(slot->resume_offset, SCp->device->host, DSP_REG);
1473 
1474 	return 1;
1475 }
1476 
1477 irqreturn_t
1478 NCR_700_intr(int irq, void *dev_id)
1479 {
1480 	struct Scsi_Host *host = (struct Scsi_Host *)dev_id;
1481 	struct NCR_700_Host_Parameters *hostdata =
1482 		(struct NCR_700_Host_Parameters *)host->hostdata[0];
1483 	__u8 istat;
1484 	__u32 resume_offset = 0;
1485 	__u8 pun = 0xff, lun = 0xff;
1486 	unsigned long flags;
1487 	int handled = 0;
1488 
1489 	/* Use the host lock to serialise access to the 53c700
1490 	 * hardware.  Note: In future, we may need to take the queue
1491 	 * lock to enter the done routines.  When that happens, we
1492 	 * need to ensure that for this driver, the host lock and the
1493 	 * queue lock point to the same thing. */
1494 	spin_lock_irqsave(host->host_lock, flags);
1495 	if((istat = NCR_700_readb(host, ISTAT_REG))
1496 	      & (SCSI_INT_PENDING | DMA_INT_PENDING)) {
1497 		__u32 dsps;
1498 		__u8 sstat0 = 0, dstat = 0;
1499 		__u32 dsp;
1500 		struct scsi_cmnd *SCp = hostdata->cmd;
1501 		enum NCR_700_Host_State state;
1502 
1503 		handled = 1;
1504 		state = hostdata->state;
1505 		SCp = hostdata->cmd;
1506 
1507 		if(istat & SCSI_INT_PENDING) {
1508 			udelay(10);
1509 
1510 			sstat0 = NCR_700_readb(host, SSTAT0_REG);
1511 		}
1512 
1513 		if(istat & DMA_INT_PENDING) {
1514 			udelay(10);
1515 
1516 			dstat = NCR_700_readb(host, DSTAT_REG);
1517 		}
1518 
1519 		dsps = NCR_700_readl(host, DSPS_REG);
1520 		dsp = NCR_700_readl(host, DSP_REG);
1521 
1522 		DEBUG(("scsi%d: istat %02x sstat0 %02x dstat %02x dsp %04x[%08x] dsps 0x%x\n",
1523 		       host->host_no, istat, sstat0, dstat,
1524 		       (dsp - (__u32)(hostdata->pScript))/4,
1525 		       dsp, dsps));
1526 
1527 		if(SCp != NULL) {
1528 			pun = SCp->device->id;
1529 			lun = SCp->device->lun;
1530 		}
1531 
1532 		if(sstat0 & SCSI_RESET_DETECTED) {
1533 			struct scsi_device *SDp;
1534 			int i;
1535 
1536 			hostdata->state = NCR_700_HOST_BUSY;
1537 
1538 			printk(KERN_ERR "scsi%d: Bus Reset detected, executing command %p, slot %p, dsp %08x[%04x]\n",
1539 			       host->host_no, SCp, SCp == NULL ? NULL : SCp->host_scribble, dsp, dsp - hostdata->pScript);
1540 
1541 			scsi_report_bus_reset(host, 0);
1542 
1543 			/* clear all the negotiated parameters */
1544 			__shost_for_each_device(SDp, host)
1545 				NCR_700_clear_flag(SDp, ~0);
1546 
1547 			/* clear all the slots and their pending commands */
1548 			for(i = 0; i < NCR_700_COMMAND_SLOTS_PER_HOST; i++) {
1549 				struct scsi_cmnd *SCp;
1550 				struct NCR_700_command_slot *slot =
1551 					&hostdata->slots[i];
1552 
1553 				if(slot->state == NCR_700_SLOT_FREE)
1554 					continue;
1555 
1556 				SCp = slot->cmnd;
1557 				printk(KERN_ERR " failing command because of reset, slot %p, cmnd %p\n",
1558 				       slot, SCp);
1559 				free_slot(slot, hostdata);
1560 				SCp->host_scribble = NULL;
1561 				NCR_700_set_depth(SCp->device, 0);
1562 				/* NOTE: deadlock potential here: we
1563 				 * rely on mid-layer guarantees that
1564 				 * scsi_done won't try to issue the
1565 				 * command again otherwise we'll
1566 				 * deadlock on the
1567 				 * hostdata->state_lock */
1568 				SCp->result = DID_RESET << 16;
1569 				SCp->scsi_done(SCp);
1570 			}
1571 			mdelay(25);
1572 			NCR_700_chip_setup(host);
1573 
1574 			hostdata->state = NCR_700_HOST_FREE;
1575 			hostdata->cmd = NULL;
1576 			/* signal back if this was an eh induced reset */
1577 			if(hostdata->eh_complete != NULL)
1578 				complete(hostdata->eh_complete);
1579 			goto out_unlock;
1580 		} else if(sstat0 & SELECTION_TIMEOUT) {
1581 			DEBUG(("scsi%d: (%d:%d) selection timeout\n",
1582 			       host->host_no, pun, lun));
1583 			NCR_700_scsi_done(hostdata, SCp, DID_NO_CONNECT<<16);
1584 		} else if(sstat0 & PHASE_MISMATCH) {
1585 			struct NCR_700_command_slot *slot = (SCp == NULL) ? NULL :
1586 				(struct NCR_700_command_slot *)SCp->host_scribble;
1587 
1588 			if(dsp == Ent_SendMessage + 8 + hostdata->pScript) {
1589 				/* It wants to reply to some part of
1590 				 * our message */
1591 #ifdef NCR_700_DEBUG
1592 				__u32 temp = NCR_700_readl(host, TEMP_REG);
1593 				int count = (hostdata->script[Ent_SendMessage/4] & 0xffffff) - ((NCR_700_readl(host, DBC_REG) & 0xffffff) + NCR_700_data_residual(host));
1594 				printk("scsi%d (%d:%d) PHASE MISMATCH IN SEND MESSAGE %d remain, return %p[%04x], phase %s\n", host->host_no, pun, lun, count, (void *)temp, temp - hostdata->pScript, sbcl_to_string(NCR_700_readb(host, SBCL_REG)));
1595 #endif
1596 				resume_offset = hostdata->pScript + Ent_SendMessagePhaseMismatch;
1597 			} else if(dsp >= to32bit(&slot->pSG[0].ins) &&
1598 				  dsp <= to32bit(&slot->pSG[NCR_700_SG_SEGMENTS].ins)) {
1599 				int data_transfer = NCR_700_readl(host, DBC_REG) & 0xffffff;
1600 				int SGcount = (dsp - to32bit(&slot->pSG[0].ins))/sizeof(struct NCR_700_SG_List);
1601 				int residual = NCR_700_data_residual(host);
1602 				int i;
1603 #ifdef NCR_700_DEBUG
1604 				__u32 naddr = NCR_700_readl(host, DNAD_REG);
1605 
1606 				printk("scsi%d: (%d:%d) Expected phase mismatch in slot->SG[%d], transferred 0x%x\n",
1607 				       host->host_no, pun, lun,
1608 				       SGcount, data_transfer);
1609 				scsi_print_command(SCp);
1610 				if(residual) {
1611 					printk("scsi%d: (%d:%d) Expected phase mismatch in slot->SG[%d], transferred 0x%x, residual %d\n",
1612 				       host->host_no, pun, lun,
1613 				       SGcount, data_transfer, residual);
1614 				}
1615 #endif
1616 				data_transfer += residual;
1617 
1618 				if(data_transfer != 0) {
1619 					int count;
1620 					__u32 pAddr;
1621 
1622 					SGcount--;
1623 
1624 					count = (bS_to_cpu(slot->SG[SGcount].ins) & 0x00ffffff);
1625 					DEBUG(("DATA TRANSFER MISMATCH, count = %d, transferred %d\n", count, count-data_transfer));
1626 					slot->SG[SGcount].ins &= bS_to_host(0xff000000);
1627 					slot->SG[SGcount].ins |= bS_to_host(data_transfer);
1628 					pAddr = bS_to_cpu(slot->SG[SGcount].pAddr);
1629 					pAddr += (count - data_transfer);
1630 #ifdef NCR_700_DEBUG
1631 					if(pAddr != naddr) {
1632 						printk("scsi%d (%d:%d) transfer mismatch pAddr=%lx, naddr=%lx, data_transfer=%d, residual=%d\n", host->host_no, pun, lun, (unsigned long)pAddr, (unsigned long)naddr, data_transfer, residual);
1633 					}
1634 #endif
1635 					slot->SG[SGcount].pAddr = bS_to_host(pAddr);
1636 				}
1637 				/* set the executed moves to nops */
1638 				for(i=0; i<SGcount; i++) {
1639 					slot->SG[i].ins = bS_to_host(SCRIPT_NOP);
1640 					slot->SG[i].pAddr = 0;
1641 				}
1642 				dma_cache_sync(hostdata->dev, slot->SG, sizeof(slot->SG), DMA_TO_DEVICE);
1643 				/* and pretend we disconnected after
1644 				 * the command phase */
1645 				resume_offset = hostdata->pScript + Ent_MsgInDuringData;
1646 				/* make sure all the data is flushed */
1647 				NCR_700_flush_fifo(host);
1648 			} else {
1649 				__u8 sbcl = NCR_700_readb(host, SBCL_REG);
1650 				printk(KERN_ERR "scsi%d: (%d:%d) phase mismatch at %04x, phase %s\n",
1651 				       host->host_no, pun, lun, dsp - hostdata->pScript, sbcl_to_string(sbcl));
1652 				NCR_700_internal_bus_reset(host);
1653 			}
1654 
1655 		} else if(sstat0 & SCSI_GROSS_ERROR) {
1656 			printk(KERN_ERR "scsi%d: (%d:%d) GROSS ERROR\n",
1657 			       host->host_no, pun, lun);
1658 			NCR_700_scsi_done(hostdata, SCp, DID_ERROR<<16);
1659 		} else if(sstat0 & PARITY_ERROR) {
1660 			printk(KERN_ERR "scsi%d: (%d:%d) PARITY ERROR\n",
1661 			       host->host_no, pun, lun);
1662 			NCR_700_scsi_done(hostdata, SCp, DID_ERROR<<16);
1663 		} else if(dstat & SCRIPT_INT_RECEIVED) {
1664 			DEBUG(("scsi%d: (%d:%d) ====>SCRIPT INTERRUPT<====\n",
1665 			       host->host_no, pun, lun));
1666 			resume_offset = process_script_interrupt(dsps, dsp, SCp, host, hostdata);
1667 		} else if(dstat & (ILGL_INST_DETECTED)) {
1668 			printk(KERN_ERR "scsi%d: (%d:%d) Illegal Instruction detected at 0x%08x[0x%x]!!!\n"
1669 			       "         Please email James.Bottomley@HansenPartnership.com with the details\n",
1670 			       host->host_no, pun, lun,
1671 			       dsp, dsp - hostdata->pScript);
1672 			NCR_700_scsi_done(hostdata, SCp, DID_ERROR<<16);
1673 		} else if(dstat & (WATCH_DOG_INTERRUPT|ABORTED)) {
1674 			printk(KERN_ERR "scsi%d: (%d:%d) serious DMA problem, dstat=%02x\n",
1675 			       host->host_no, pun, lun, dstat);
1676 			NCR_700_scsi_done(hostdata, SCp, DID_ERROR<<16);
1677 		}
1678 
1679 
1680 		/* NOTE: selection interrupt processing MUST occur
1681 		 * after script interrupt processing to correctly cope
1682 		 * with the case where we process a disconnect and
1683 		 * then get reselected before we process the
1684 		 * disconnection */
1685 		if(sstat0 & SELECTED) {
1686 			/* FIXME: It currently takes at least FOUR
1687 			 * interrupts to complete a command that
1688 			 * disconnects: one for the disconnect, one
1689 			 * for the reselection, one to get the
1690 			 * reselection data and one to complete the
1691 			 * command.  If we guess the reselected
1692 			 * command here and prepare it, we only need
1693 			 * to get a reselection data interrupt if we
1694 			 * guessed wrongly.  Since the interrupt
1695 			 * overhead is much greater than the command
1696 			 * setup, this would be an efficient
1697 			 * optimisation particularly as we probably
1698 			 * only have one outstanding command on a
1699 			 * target most of the time */
1700 
1701 			resume_offset = process_selection(host, dsp);
1702 
1703 		}
1704 
1705 	}
1706 
1707 	if(resume_offset) {
1708 		if(hostdata->state != NCR_700_HOST_BUSY) {
1709 			printk(KERN_ERR "scsi%d: Driver error: resume at 0x%08x [0x%04x] with non busy host!\n",
1710 			       host->host_no, resume_offset, resume_offset - hostdata->pScript);
1711 			hostdata->state = NCR_700_HOST_BUSY;
1712 		}
1713 
1714 		DEBUG(("Attempting to resume at %x\n", resume_offset));
1715 		NCR_700_clear_fifo(host);
1716 		NCR_700_writel(resume_offset, host, DSP_REG);
1717 	}
1718 	/* There is probably a technical no-no about this: If we're a
1719 	 * shared interrupt and we got this interrupt because the
1720 	 * other device needs servicing not us, we're still going to
1721 	 * check our queued commands here---of course, there shouldn't
1722 	 * be any outstanding.... */
1723 	if(hostdata->state == NCR_700_HOST_FREE) {
1724 		int i;
1725 
1726 		for(i = 0; i < NCR_700_COMMAND_SLOTS_PER_HOST; i++) {
1727 			/* fairness: always run the queue from the last
1728 			 * position we left off */
1729 			int j = (i + hostdata->saved_slot_position)
1730 				% NCR_700_COMMAND_SLOTS_PER_HOST;
1731 
1732 			if(hostdata->slots[j].state != NCR_700_SLOT_QUEUED)
1733 				continue;
1734 			if(NCR_700_start_command(hostdata->slots[j].cmnd)) {
1735 				DEBUG(("scsi%d: Issuing saved command slot %p, cmd %p\t\n",
1736 				       host->host_no, &hostdata->slots[j],
1737 				       hostdata->slots[j].cmnd));
1738 				hostdata->saved_slot_position = j + 1;
1739 			}
1740 
1741 			break;
1742 		}
1743 	}
1744  out_unlock:
1745 	spin_unlock_irqrestore(host->host_lock, flags);
1746 	return IRQ_RETVAL(handled);
1747 }
1748 
1749 static int
1750 NCR_700_queuecommand_lck(struct scsi_cmnd *SCp, void (*done)(struct scsi_cmnd *))
1751 {
1752 	struct NCR_700_Host_Parameters *hostdata =
1753 		(struct NCR_700_Host_Parameters *)SCp->device->host->hostdata[0];
1754 	__u32 move_ins;
1755 	enum dma_data_direction direction;
1756 	struct NCR_700_command_slot *slot;
1757 
1758 	if(hostdata->command_slot_count >= NCR_700_COMMAND_SLOTS_PER_HOST) {
1759 		/* We're over our allocation, this should never happen
1760 		 * since we report the max allocation to the mid layer */
1761 		printk(KERN_WARNING "scsi%d: Command depth has gone over queue depth\n", SCp->device->host->host_no);
1762 		return 1;
1763 	}
1764 	/* check for untagged commands.  We cannot have any outstanding
1765 	 * commands if we accept them.  Commands could be untagged because:
1766 	 *
1767 	 * - The tag negotiated bitmap is clear
1768 	 * - The blk layer sent and untagged command
1769 	 */
1770 	if(NCR_700_get_depth(SCp->device) != 0
1771 	   && (!(hostdata->tag_negotiated & (1<<scmd_id(SCp)))
1772 	       || !(SCp->flags & SCMD_TAGGED))) {
1773 		CDEBUG(KERN_ERR, SCp, "has non zero depth %d\n",
1774 		       NCR_700_get_depth(SCp->device));
1775 		return SCSI_MLQUEUE_DEVICE_BUSY;
1776 	}
1777 	if(NCR_700_get_depth(SCp->device) >= SCp->device->queue_depth) {
1778 		CDEBUG(KERN_ERR, SCp, "has max tag depth %d\n",
1779 		       NCR_700_get_depth(SCp->device));
1780 		return SCSI_MLQUEUE_DEVICE_BUSY;
1781 	}
1782 	NCR_700_set_depth(SCp->device, NCR_700_get_depth(SCp->device) + 1);
1783 
1784 	/* begin the command here */
1785 	/* no need to check for NULL, test for command_slot_count above
1786 	 * ensures a slot is free */
1787 	slot = find_empty_slot(hostdata);
1788 
1789 	slot->cmnd = SCp;
1790 
1791 	SCp->scsi_done = done;
1792 	SCp->host_scribble = (unsigned char *)slot;
1793 	SCp->SCp.ptr = NULL;
1794 	SCp->SCp.buffer = NULL;
1795 
1796 #ifdef NCR_700_DEBUG
1797 	printk("53c700: scsi%d, command ", SCp->device->host->host_no);
1798 	scsi_print_command(SCp);
1799 #endif
1800 	if ((SCp->flags & SCMD_TAGGED)
1801 	   && (hostdata->tag_negotiated &(1<<scmd_id(SCp))) == 0
1802 	   && NCR_700_get_tag_neg_state(SCp->device) == NCR_700_START_TAG_NEGOTIATION) {
1803 		scmd_printk(KERN_ERR, SCp, "Enabling Tag Command Queuing\n");
1804 		hostdata->tag_negotiated |= (1<<scmd_id(SCp));
1805 		NCR_700_set_tag_neg_state(SCp->device, NCR_700_DURING_TAG_NEGOTIATION);
1806 	}
1807 
1808 	/* here we may have to process an untagged command.  The gate
1809 	 * above ensures that this will be the only one outstanding,
1810 	 * so clear the tag negotiated bit.
1811 	 *
1812 	 * FIXME: This will royally screw up on multiple LUN devices
1813 	 * */
1814 	if (!(SCp->flags & SCMD_TAGGED)
1815 	   && (hostdata->tag_negotiated &(1<<scmd_id(SCp)))) {
1816 		scmd_printk(KERN_INFO, SCp, "Disabling Tag Command Queuing\n");
1817 		hostdata->tag_negotiated &= ~(1<<scmd_id(SCp));
1818 	}
1819 
1820 	if ((hostdata->tag_negotiated & (1<<scmd_id(SCp))) &&
1821 	    SCp->device->simple_tags) {
1822 		slot->tag = SCp->request->tag;
1823 		CDEBUG(KERN_DEBUG, SCp, "sending out tag %d, slot %p\n",
1824 		       slot->tag, slot);
1825 	} else {
1826 		struct NCR_700_Device_Parameters *p = SCp->device->hostdata;
1827 
1828 		slot->tag = SCSI_NO_TAG;
1829 		/* save current command for reselection */
1830 		p->current_cmnd = SCp;
1831 	}
1832 	/* sanity check: some of the commands generated by the mid-layer
1833 	 * have an eccentric idea of their sc_data_direction */
1834 	if(!scsi_sg_count(SCp) && !scsi_bufflen(SCp) &&
1835 	   SCp->sc_data_direction != DMA_NONE) {
1836 #ifdef NCR_700_DEBUG
1837 		printk("53c700: Command");
1838 		scsi_print_command(SCp);
1839 		printk("Has wrong data direction %d\n", SCp->sc_data_direction);
1840 #endif
1841 		SCp->sc_data_direction = DMA_NONE;
1842 	}
1843 
1844 	switch (SCp->cmnd[0]) {
1845 	case REQUEST_SENSE:
1846 		/* clear the internal sense magic */
1847 		SCp->cmnd[6] = 0;
1848 		/* fall through */
1849 	default:
1850 		/* OK, get it from the command */
1851 		switch(SCp->sc_data_direction) {
1852 		case DMA_BIDIRECTIONAL:
1853 		default:
1854 			printk(KERN_ERR "53c700: Unknown command for data direction ");
1855 			scsi_print_command(SCp);
1856 
1857 			move_ins = 0;
1858 			break;
1859 		case DMA_NONE:
1860 			move_ins = 0;
1861 			break;
1862 		case DMA_FROM_DEVICE:
1863 			move_ins = SCRIPT_MOVE_DATA_IN;
1864 			break;
1865 		case DMA_TO_DEVICE:
1866 			move_ins = SCRIPT_MOVE_DATA_OUT;
1867 			break;
1868 		}
1869 	}
1870 
1871 	/* now build the scatter gather list */
1872 	direction = SCp->sc_data_direction;
1873 	if(move_ins != 0) {
1874 		int i;
1875 		int sg_count;
1876 		dma_addr_t vPtr = 0;
1877 		struct scatterlist *sg;
1878 		__u32 count = 0;
1879 
1880 		sg_count = scsi_dma_map(SCp);
1881 		BUG_ON(sg_count < 0);
1882 
1883 		scsi_for_each_sg(SCp, sg, sg_count, i) {
1884 			vPtr = sg_dma_address(sg);
1885 			count = sg_dma_len(sg);
1886 
1887 			slot->SG[i].ins = bS_to_host(move_ins | count);
1888 			DEBUG((" scatter block %d: move %d[%08x] from 0x%lx\n",
1889 			       i, count, slot->SG[i].ins, (unsigned long)vPtr));
1890 			slot->SG[i].pAddr = bS_to_host(vPtr);
1891 		}
1892 		slot->SG[i].ins = bS_to_host(SCRIPT_RETURN);
1893 		slot->SG[i].pAddr = 0;
1894 		dma_cache_sync(hostdata->dev, slot->SG, sizeof(slot->SG), DMA_TO_DEVICE);
1895 		DEBUG((" SETTING %p to %x\n",
1896 		       (&slot->pSG[i].ins),
1897 		       slot->SG[i].ins));
1898 	}
1899 	slot->resume_offset = 0;
1900 	slot->pCmd = dma_map_single(hostdata->dev, SCp->cmnd,
1901 				    MAX_COMMAND_SIZE, DMA_TO_DEVICE);
1902 	NCR_700_start_command(SCp);
1903 	return 0;
1904 }
1905 
1906 STATIC DEF_SCSI_QCMD(NCR_700_queuecommand)
1907 
1908 STATIC int
1909 NCR_700_abort(struct scsi_cmnd * SCp)
1910 {
1911 	struct NCR_700_command_slot *slot;
1912 
1913 	scmd_printk(KERN_INFO, SCp, "abort command\n");
1914 
1915 	slot = (struct NCR_700_command_slot *)SCp->host_scribble;
1916 
1917 	if(slot == NULL)
1918 		/* no outstanding command to abort */
1919 		return SUCCESS;
1920 	if(SCp->cmnd[0] == TEST_UNIT_READY) {
1921 		/* FIXME: This is because of a problem in the new
1922 		 * error handler.  When it is in error recovery, it
1923 		 * will send a TUR to a device it thinks may still be
1924 		 * showing a problem.  If the TUR isn't responded to,
1925 		 * it will abort it and mark the device off line.
1926 		 * Unfortunately, it does no other error recovery, so
1927 		 * this would leave us with an outstanding command
1928 		 * occupying a slot.  Rather than allow this to
1929 		 * happen, we issue a bus reset to force all
1930 		 * outstanding commands to terminate here. */
1931 		NCR_700_internal_bus_reset(SCp->device->host);
1932 		/* still drop through and return failed */
1933 	}
1934 	return FAILED;
1935 
1936 }
1937 
1938 STATIC int
1939 NCR_700_host_reset(struct scsi_cmnd * SCp)
1940 {
1941 	DECLARE_COMPLETION_ONSTACK(complete);
1942 	struct NCR_700_Host_Parameters *hostdata =
1943 		(struct NCR_700_Host_Parameters *)SCp->device->host->hostdata[0];
1944 
1945 	scmd_printk(KERN_INFO, SCp,
1946 		"New error handler wants HOST reset, cmd %p\n\t", SCp);
1947 	scsi_print_command(SCp);
1948 
1949 	/* In theory, eh_complete should always be null because the
1950 	 * eh is single threaded, but just in case we're handling a
1951 	 * reset via sg or something */
1952 	spin_lock_irq(SCp->device->host->host_lock);
1953 	while (hostdata->eh_complete != NULL) {
1954 		spin_unlock_irq(SCp->device->host->host_lock);
1955 		msleep_interruptible(100);
1956 		spin_lock_irq(SCp->device->host->host_lock);
1957 	}
1958 
1959 	hostdata->eh_complete = &complete;
1960 	NCR_700_internal_bus_reset(SCp->device->host);
1961 	NCR_700_chip_reset(SCp->device->host);
1962 
1963 	spin_unlock_irq(SCp->device->host->host_lock);
1964 	wait_for_completion(&complete);
1965 	spin_lock_irq(SCp->device->host->host_lock);
1966 
1967 	hostdata->eh_complete = NULL;
1968 	/* Revalidate the transport parameters of the failing device */
1969 	if(hostdata->fast)
1970 		spi_schedule_dv_device(SCp->device);
1971 
1972 	spin_unlock_irq(SCp->device->host->host_lock);
1973 	return SUCCESS;
1974 }
1975 
1976 STATIC void
1977 NCR_700_set_period(struct scsi_target *STp, int period)
1978 {
1979 	struct Scsi_Host *SHp = dev_to_shost(STp->dev.parent);
1980 	struct NCR_700_Host_Parameters *hostdata =
1981 		(struct NCR_700_Host_Parameters *)SHp->hostdata[0];
1982 
1983 	if(!hostdata->fast)
1984 		return;
1985 
1986 	if(period < hostdata->min_period)
1987 		period = hostdata->min_period;
1988 
1989 	spi_period(STp) = period;
1990 	spi_flags(STp) &= ~(NCR_700_DEV_NEGOTIATED_SYNC |
1991 			    NCR_700_DEV_BEGIN_SYNC_NEGOTIATION);
1992 	spi_flags(STp) |= NCR_700_DEV_PRINT_SYNC_NEGOTIATION;
1993 }
1994 
1995 STATIC void
1996 NCR_700_set_offset(struct scsi_target *STp, int offset)
1997 {
1998 	struct Scsi_Host *SHp = dev_to_shost(STp->dev.parent);
1999 	struct NCR_700_Host_Parameters *hostdata =
2000 		(struct NCR_700_Host_Parameters *)SHp->hostdata[0];
2001 	int max_offset = hostdata->chip710
2002 		? NCR_710_MAX_OFFSET : NCR_700_MAX_OFFSET;
2003 
2004 	if(!hostdata->fast)
2005 		return;
2006 
2007 	if(offset > max_offset)
2008 		offset = max_offset;
2009 
2010 	/* if we're currently async, make sure the period is reasonable */
2011 	if(spi_offset(STp) == 0 && (spi_period(STp) < hostdata->min_period ||
2012 				    spi_period(STp) > 0xff))
2013 		spi_period(STp) = hostdata->min_period;
2014 
2015 	spi_offset(STp) = offset;
2016 	spi_flags(STp) &= ~(NCR_700_DEV_NEGOTIATED_SYNC |
2017 			    NCR_700_DEV_BEGIN_SYNC_NEGOTIATION);
2018 	spi_flags(STp) |= NCR_700_DEV_PRINT_SYNC_NEGOTIATION;
2019 }
2020 
2021 STATIC int
2022 NCR_700_slave_alloc(struct scsi_device *SDp)
2023 {
2024 	SDp->hostdata = kzalloc(sizeof(struct NCR_700_Device_Parameters),
2025 				GFP_KERNEL);
2026 
2027 	if (!SDp->hostdata)
2028 		return -ENOMEM;
2029 
2030 	return 0;
2031 }
2032 
2033 STATIC int
2034 NCR_700_slave_configure(struct scsi_device *SDp)
2035 {
2036 	struct NCR_700_Host_Parameters *hostdata =
2037 		(struct NCR_700_Host_Parameters *)SDp->host->hostdata[0];
2038 
2039 	/* to do here: allocate memory; build a queue_full list */
2040 	if(SDp->tagged_supported) {
2041 		scsi_change_queue_depth(SDp, NCR_700_DEFAULT_TAGS);
2042 		NCR_700_set_tag_neg_state(SDp, NCR_700_START_TAG_NEGOTIATION);
2043 	}
2044 
2045 	if(hostdata->fast) {
2046 		/* Find the correct offset and period via domain validation */
2047 		if (!spi_initial_dv(SDp->sdev_target))
2048 			spi_dv_device(SDp);
2049 	} else {
2050 		spi_offset(SDp->sdev_target) = 0;
2051 		spi_period(SDp->sdev_target) = 0;
2052 	}
2053 	return 0;
2054 }
2055 
2056 STATIC void
2057 NCR_700_slave_destroy(struct scsi_device *SDp)
2058 {
2059 	kfree(SDp->hostdata);
2060 	SDp->hostdata = NULL;
2061 }
2062 
2063 static int
2064 NCR_700_change_queue_depth(struct scsi_device *SDp, int depth)
2065 {
2066 	if (depth > NCR_700_MAX_TAGS)
2067 		depth = NCR_700_MAX_TAGS;
2068 	return scsi_change_queue_depth(SDp, depth);
2069 }
2070 
2071 static ssize_t
2072 NCR_700_show_active_tags(struct device *dev, struct device_attribute *attr, char *buf)
2073 {
2074 	struct scsi_device *SDp = to_scsi_device(dev);
2075 
2076 	return snprintf(buf, 20, "%d\n", NCR_700_get_depth(SDp));
2077 }
2078 
2079 static struct device_attribute NCR_700_active_tags_attr = {
2080 	.attr = {
2081 		.name =		"active_tags",
2082 		.mode =		S_IRUGO,
2083 	},
2084 	.show = NCR_700_show_active_tags,
2085 };
2086 
2087 STATIC struct device_attribute *NCR_700_dev_attrs[] = {
2088 	&NCR_700_active_tags_attr,
2089 	NULL,
2090 };
2091 
2092 EXPORT_SYMBOL(NCR_700_detect);
2093 EXPORT_SYMBOL(NCR_700_release);
2094 EXPORT_SYMBOL(NCR_700_intr);
2095 
2096 static struct spi_function_template NCR_700_transport_functions =  {
2097 	.set_period	= NCR_700_set_period,
2098 	.show_period	= 1,
2099 	.set_offset	= NCR_700_set_offset,
2100 	.show_offset	= 1,
2101 };
2102 
2103 static int __init NCR_700_init(void)
2104 {
2105 	NCR_700_transport_template = spi_attach_transport(&NCR_700_transport_functions);
2106 	if(!NCR_700_transport_template)
2107 		return -ENODEV;
2108 	return 0;
2109 }
2110 
2111 static void __exit NCR_700_exit(void)
2112 {
2113 	spi_release_transport(NCR_700_transport_template);
2114 }
2115 
2116 module_init(NCR_700_init);
2117 module_exit(NCR_700_exit);
2118 
2119