1 /* 2 * SCSI Primary Commands (SPC) parsing and emulation. 3 * 4 * (c) Copyright 2002-2013 Datera, Inc. 5 * 6 * Nicholas A. Bellinger <nab@kernel.org> 7 * 8 * This program is free software; you can redistribute it and/or modify 9 * it under the terms of the GNU General Public License as published by 10 * the Free Software Foundation; either version 2 of the License, or 11 * (at your option) any later version. 12 * 13 * This program is distributed in the hope that it will be useful, 14 * but WITHOUT ANY WARRANTY; without even the implied warranty of 15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 16 * GNU General Public License for more details. 17 * 18 * You should have received a copy of the GNU General Public License 19 * along with this program; if not, write to the Free Software 20 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. 21 */ 22 23 #include <linux/kernel.h> 24 #include <linux/module.h> 25 #include <asm/unaligned.h> 26 27 #include <scsi/scsi.h> 28 #include <scsi/scsi_tcq.h> 29 30 #include <target/target_core_base.h> 31 #include <target/target_core_backend.h> 32 #include <target/target_core_fabric.h> 33 34 #include "target_core_internal.h" 35 #include "target_core_alua.h" 36 #include "target_core_pr.h" 37 #include "target_core_ua.h" 38 #include "target_core_xcopy.h" 39 40 static void spc_fill_alua_data(struct se_port *port, unsigned char *buf) 41 { 42 struct t10_alua_tg_pt_gp *tg_pt_gp; 43 struct t10_alua_tg_pt_gp_member *tg_pt_gp_mem; 44 45 /* 46 * Set SCCS for MAINTENANCE_IN + REPORT_TARGET_PORT_GROUPS. 47 */ 48 buf[5] = 0x80; 49 50 /* 51 * Set TPGS field for explicit and/or implicit ALUA access type 52 * and opteration. 53 * 54 * See spc4r17 section 6.4.2 Table 135 55 */ 56 if (!port) 57 return; 58 tg_pt_gp_mem = port->sep_alua_tg_pt_gp_mem; 59 if (!tg_pt_gp_mem) 60 return; 61 62 spin_lock(&tg_pt_gp_mem->tg_pt_gp_mem_lock); 63 tg_pt_gp = tg_pt_gp_mem->tg_pt_gp; 64 if (tg_pt_gp) 65 buf[5] |= tg_pt_gp->tg_pt_gp_alua_access_type; 66 spin_unlock(&tg_pt_gp_mem->tg_pt_gp_mem_lock); 67 } 68 69 sense_reason_t 70 spc_emulate_inquiry_std(struct se_cmd *cmd, unsigned char *buf) 71 { 72 struct se_lun *lun = cmd->se_lun; 73 struct se_device *dev = cmd->se_dev; 74 struct se_session *sess = cmd->se_sess; 75 76 /* Set RMB (removable media) for tape devices */ 77 if (dev->transport->get_device_type(dev) == TYPE_TAPE) 78 buf[1] = 0x80; 79 80 buf[2] = 0x05; /* SPC-3 */ 81 82 /* 83 * NORMACA and HISUP = 0, RESPONSE DATA FORMAT = 2 84 * 85 * SPC4 says: 86 * A RESPONSE DATA FORMAT field set to 2h indicates that the 87 * standard INQUIRY data is in the format defined in this 88 * standard. Response data format values less than 2h are 89 * obsolete. Response data format values greater than 2h are 90 * reserved. 91 */ 92 buf[3] = 2; 93 94 /* 95 * Enable SCCS and TPGS fields for Emulated ALUA 96 */ 97 spc_fill_alua_data(lun->lun_sep, buf); 98 99 /* 100 * Set Third-Party Copy (3PC) bit to indicate support for EXTENDED_COPY 101 */ 102 if (dev->dev_attrib.emulate_3pc) 103 buf[5] |= 0x8; 104 /* 105 * Set Protection (PROTECT) bit when DIF has been enabled on the 106 * device, and the fabric supports VERIFY + PASS. Also report 107 * PROTECT=1 if sess_prot_type has been configured to allow T10-PI 108 * to unprotected devices. 109 */ 110 if (sess->sup_prot_ops & (TARGET_PROT_DIN_PASS | TARGET_PROT_DOUT_PASS)) { 111 if (dev->dev_attrib.pi_prot_type || cmd->se_sess->sess_prot_type) 112 buf[5] |= 0x1; 113 } 114 115 buf[7] = 0x2; /* CmdQue=1 */ 116 117 memcpy(&buf[8], "LIO-ORG ", 8); 118 memset(&buf[16], 0x20, 16); 119 memcpy(&buf[16], dev->t10_wwn.model, 120 min_t(size_t, strlen(dev->t10_wwn.model), 16)); 121 memcpy(&buf[32], dev->t10_wwn.revision, 122 min_t(size_t, strlen(dev->t10_wwn.revision), 4)); 123 buf[4] = 31; /* Set additional length to 31 */ 124 125 return 0; 126 } 127 EXPORT_SYMBOL(spc_emulate_inquiry_std); 128 129 /* unit serial number */ 130 static sense_reason_t 131 spc_emulate_evpd_80(struct se_cmd *cmd, unsigned char *buf) 132 { 133 struct se_device *dev = cmd->se_dev; 134 u16 len; 135 136 if (dev->dev_flags & DF_EMULATED_VPD_UNIT_SERIAL) { 137 len = sprintf(&buf[4], "%s", dev->t10_wwn.unit_serial); 138 len++; /* Extra Byte for NULL Terminator */ 139 buf[3] = len; 140 } 141 return 0; 142 } 143 144 void spc_parse_naa_6h_vendor_specific(struct se_device *dev, 145 unsigned char *buf) 146 { 147 unsigned char *p = &dev->t10_wwn.unit_serial[0]; 148 int cnt; 149 bool next = true; 150 151 /* 152 * Generate up to 36 bits of VENDOR SPECIFIC IDENTIFIER starting on 153 * byte 3 bit 3-0 for NAA IEEE Registered Extended DESIGNATOR field 154 * format, followed by 64 bits of VENDOR SPECIFIC IDENTIFIER EXTENSION 155 * to complete the payload. These are based from VPD=0x80 PRODUCT SERIAL 156 * NUMBER set via vpd_unit_serial in target_core_configfs.c to ensure 157 * per device uniqeness. 158 */ 159 for (cnt = 0; *p && cnt < 13; p++) { 160 int val = hex_to_bin(*p); 161 162 if (val < 0) 163 continue; 164 165 if (next) { 166 next = false; 167 buf[cnt++] |= val; 168 } else { 169 next = true; 170 buf[cnt] = val << 4; 171 } 172 } 173 } 174 175 /* 176 * Device identification VPD, for a complete list of 177 * DESIGNATOR TYPEs see spc4r17 Table 459. 178 */ 179 sense_reason_t 180 spc_emulate_evpd_83(struct se_cmd *cmd, unsigned char *buf) 181 { 182 struct se_device *dev = cmd->se_dev; 183 struct se_lun *lun = cmd->se_lun; 184 struct se_port *port = NULL; 185 struct se_portal_group *tpg = NULL; 186 struct t10_alua_lu_gp_member *lu_gp_mem; 187 struct t10_alua_tg_pt_gp *tg_pt_gp; 188 struct t10_alua_tg_pt_gp_member *tg_pt_gp_mem; 189 unsigned char *prod = &dev->t10_wwn.model[0]; 190 u32 prod_len; 191 u32 unit_serial_len, off = 0; 192 u16 len = 0, id_len; 193 194 off = 4; 195 196 /* 197 * NAA IEEE Registered Extended Assigned designator format, see 198 * spc4r17 section 7.7.3.6.5 199 * 200 * We depend upon a target_core_mod/ConfigFS provided 201 * /sys/kernel/config/target/core/$HBA/$DEV/wwn/vpd_unit_serial 202 * value in order to return the NAA id. 203 */ 204 if (!(dev->dev_flags & DF_EMULATED_VPD_UNIT_SERIAL)) 205 goto check_t10_vend_desc; 206 207 /* CODE SET == Binary */ 208 buf[off++] = 0x1; 209 210 /* Set ASSOCIATION == addressed logical unit: 0)b */ 211 buf[off] = 0x00; 212 213 /* Identifier/Designator type == NAA identifier */ 214 buf[off++] |= 0x3; 215 off++; 216 217 /* Identifier/Designator length */ 218 buf[off++] = 0x10; 219 220 /* 221 * Start NAA IEEE Registered Extended Identifier/Designator 222 */ 223 buf[off++] = (0x6 << 4); 224 225 /* 226 * Use OpenFabrics IEEE Company ID: 00 14 05 227 */ 228 buf[off++] = 0x01; 229 buf[off++] = 0x40; 230 buf[off] = (0x5 << 4); 231 232 /* 233 * Return ConfigFS Unit Serial Number information for 234 * VENDOR_SPECIFIC_IDENTIFIER and 235 * VENDOR_SPECIFIC_IDENTIFIER_EXTENTION 236 */ 237 spc_parse_naa_6h_vendor_specific(dev, &buf[off]); 238 239 len = 20; 240 off = (len + 4); 241 242 check_t10_vend_desc: 243 /* 244 * T10 Vendor Identifier Page, see spc4r17 section 7.7.3.4 245 */ 246 id_len = 8; /* For Vendor field */ 247 prod_len = 4; /* For VPD Header */ 248 prod_len += 8; /* For Vendor field */ 249 prod_len += strlen(prod); 250 prod_len++; /* For : */ 251 252 if (dev->dev_flags & DF_EMULATED_VPD_UNIT_SERIAL) { 253 unit_serial_len = strlen(&dev->t10_wwn.unit_serial[0]); 254 unit_serial_len++; /* For NULL Terminator */ 255 256 id_len += sprintf(&buf[off+12], "%s:%s", prod, 257 &dev->t10_wwn.unit_serial[0]); 258 } 259 buf[off] = 0x2; /* ASCII */ 260 buf[off+1] = 0x1; /* T10 Vendor ID */ 261 buf[off+2] = 0x0; 262 memcpy(&buf[off+4], "LIO-ORG", 8); 263 /* Extra Byte for NULL Terminator */ 264 id_len++; 265 /* Identifier Length */ 266 buf[off+3] = id_len; 267 /* Header size for Designation descriptor */ 268 len += (id_len + 4); 269 off += (id_len + 4); 270 /* 271 * struct se_port is only set for INQUIRY VPD=1 through $FABRIC_MOD 272 */ 273 port = lun->lun_sep; 274 if (port) { 275 struct t10_alua_lu_gp *lu_gp; 276 u32 padding, scsi_name_len, scsi_target_len; 277 u16 lu_gp_id = 0; 278 u16 tg_pt_gp_id = 0; 279 u16 tpgt; 280 281 tpg = port->sep_tpg; 282 /* 283 * Relative target port identifer, see spc4r17 284 * section 7.7.3.7 285 * 286 * Get the PROTOCOL IDENTIFIER as defined by spc4r17 287 * section 7.5.1 Table 362 288 */ 289 buf[off] = tpg->proto_id << 4; 290 buf[off++] |= 0x1; /* CODE SET == Binary */ 291 buf[off] = 0x80; /* Set PIV=1 */ 292 /* Set ASSOCIATION == target port: 01b */ 293 buf[off] |= 0x10; 294 /* DESIGNATOR TYPE == Relative target port identifer */ 295 buf[off++] |= 0x4; 296 off++; /* Skip over Reserved */ 297 buf[off++] = 4; /* DESIGNATOR LENGTH */ 298 /* Skip over Obsolete field in RTPI payload 299 * in Table 472 */ 300 off += 2; 301 buf[off++] = ((port->sep_rtpi >> 8) & 0xff); 302 buf[off++] = (port->sep_rtpi & 0xff); 303 len += 8; /* Header size + Designation descriptor */ 304 /* 305 * Target port group identifier, see spc4r17 306 * section 7.7.3.8 307 * 308 * Get the PROTOCOL IDENTIFIER as defined by spc4r17 309 * section 7.5.1 Table 362 310 */ 311 tg_pt_gp_mem = port->sep_alua_tg_pt_gp_mem; 312 if (!tg_pt_gp_mem) 313 goto check_lu_gp; 314 315 spin_lock(&tg_pt_gp_mem->tg_pt_gp_mem_lock); 316 tg_pt_gp = tg_pt_gp_mem->tg_pt_gp; 317 if (!tg_pt_gp) { 318 spin_unlock(&tg_pt_gp_mem->tg_pt_gp_mem_lock); 319 goto check_lu_gp; 320 } 321 tg_pt_gp_id = tg_pt_gp->tg_pt_gp_id; 322 spin_unlock(&tg_pt_gp_mem->tg_pt_gp_mem_lock); 323 324 buf[off] = tpg->proto_id << 4; 325 buf[off++] |= 0x1; /* CODE SET == Binary */ 326 buf[off] = 0x80; /* Set PIV=1 */ 327 /* Set ASSOCIATION == target port: 01b */ 328 buf[off] |= 0x10; 329 /* DESIGNATOR TYPE == Target port group identifier */ 330 buf[off++] |= 0x5; 331 off++; /* Skip over Reserved */ 332 buf[off++] = 4; /* DESIGNATOR LENGTH */ 333 off += 2; /* Skip over Reserved Field */ 334 buf[off++] = ((tg_pt_gp_id >> 8) & 0xff); 335 buf[off++] = (tg_pt_gp_id & 0xff); 336 len += 8; /* Header size + Designation descriptor */ 337 /* 338 * Logical Unit Group identifier, see spc4r17 339 * section 7.7.3.8 340 */ 341 check_lu_gp: 342 lu_gp_mem = dev->dev_alua_lu_gp_mem; 343 if (!lu_gp_mem) 344 goto check_scsi_name; 345 346 spin_lock(&lu_gp_mem->lu_gp_mem_lock); 347 lu_gp = lu_gp_mem->lu_gp; 348 if (!lu_gp) { 349 spin_unlock(&lu_gp_mem->lu_gp_mem_lock); 350 goto check_scsi_name; 351 } 352 lu_gp_id = lu_gp->lu_gp_id; 353 spin_unlock(&lu_gp_mem->lu_gp_mem_lock); 354 355 buf[off++] |= 0x1; /* CODE SET == Binary */ 356 /* DESIGNATOR TYPE == Logical Unit Group identifier */ 357 buf[off++] |= 0x6; 358 off++; /* Skip over Reserved */ 359 buf[off++] = 4; /* DESIGNATOR LENGTH */ 360 off += 2; /* Skip over Reserved Field */ 361 buf[off++] = ((lu_gp_id >> 8) & 0xff); 362 buf[off++] = (lu_gp_id & 0xff); 363 len += 8; /* Header size + Designation descriptor */ 364 /* 365 * SCSI name string designator, see spc4r17 366 * section 7.7.3.11 367 * 368 * Get the PROTOCOL IDENTIFIER as defined by spc4r17 369 * section 7.5.1 Table 362 370 */ 371 check_scsi_name: 372 buf[off] = tpg->proto_id << 4; 373 buf[off++] |= 0x3; /* CODE SET == UTF-8 */ 374 buf[off] = 0x80; /* Set PIV=1 */ 375 /* Set ASSOCIATION == target port: 01b */ 376 buf[off] |= 0x10; 377 /* DESIGNATOR TYPE == SCSI name string */ 378 buf[off++] |= 0x8; 379 off += 2; /* Skip over Reserved and length */ 380 /* 381 * SCSI name string identifer containing, $FABRIC_MOD 382 * dependent information. For LIO-Target and iSCSI 383 * Target Port, this means "<iSCSI name>,t,0x<TPGT> in 384 * UTF-8 encoding. 385 */ 386 tpgt = tpg->se_tpg_tfo->tpg_get_tag(tpg); 387 scsi_name_len = sprintf(&buf[off], "%s,t,0x%04x", 388 tpg->se_tpg_tfo->tpg_get_wwn(tpg), tpgt); 389 scsi_name_len += 1 /* Include NULL terminator */; 390 /* 391 * The null-terminated, null-padded (see 4.4.2) SCSI 392 * NAME STRING field contains a UTF-8 format string. 393 * The number of bytes in the SCSI NAME STRING field 394 * (i.e., the value in the DESIGNATOR LENGTH field) 395 * shall be no larger than 256 and shall be a multiple 396 * of four. 397 */ 398 padding = ((-scsi_name_len) & 3); 399 if (padding) 400 scsi_name_len += padding; 401 if (scsi_name_len > 256) 402 scsi_name_len = 256; 403 404 buf[off-1] = scsi_name_len; 405 off += scsi_name_len; 406 /* Header size + Designation descriptor */ 407 len += (scsi_name_len + 4); 408 409 /* 410 * Target device designator 411 */ 412 buf[off] = tpg->proto_id << 4; 413 buf[off++] |= 0x3; /* CODE SET == UTF-8 */ 414 buf[off] = 0x80; /* Set PIV=1 */ 415 /* Set ASSOCIATION == target device: 10b */ 416 buf[off] |= 0x20; 417 /* DESIGNATOR TYPE == SCSI name string */ 418 buf[off++] |= 0x8; 419 off += 2; /* Skip over Reserved and length */ 420 /* 421 * SCSI name string identifer containing, $FABRIC_MOD 422 * dependent information. For LIO-Target and iSCSI 423 * Target Port, this means "<iSCSI name>" in 424 * UTF-8 encoding. 425 */ 426 scsi_target_len = sprintf(&buf[off], "%s", 427 tpg->se_tpg_tfo->tpg_get_wwn(tpg)); 428 scsi_target_len += 1 /* Include NULL terminator */; 429 /* 430 * The null-terminated, null-padded (see 4.4.2) SCSI 431 * NAME STRING field contains a UTF-8 format string. 432 * The number of bytes in the SCSI NAME STRING field 433 * (i.e., the value in the DESIGNATOR LENGTH field) 434 * shall be no larger than 256 and shall be a multiple 435 * of four. 436 */ 437 padding = ((-scsi_target_len) & 3); 438 if (padding) 439 scsi_target_len += padding; 440 if (scsi_target_len > 256) 441 scsi_target_len = 256; 442 443 buf[off-1] = scsi_target_len; 444 off += scsi_target_len; 445 446 /* Header size + Designation descriptor */ 447 len += (scsi_target_len + 4); 448 } 449 buf[2] = ((len >> 8) & 0xff); 450 buf[3] = (len & 0xff); /* Page Length for VPD 0x83 */ 451 return 0; 452 } 453 EXPORT_SYMBOL(spc_emulate_evpd_83); 454 455 /* Extended INQUIRY Data VPD Page */ 456 static sense_reason_t 457 spc_emulate_evpd_86(struct se_cmd *cmd, unsigned char *buf) 458 { 459 struct se_device *dev = cmd->se_dev; 460 struct se_session *sess = cmd->se_sess; 461 462 buf[3] = 0x3c; 463 /* 464 * Set GRD_CHK + REF_CHK for TYPE1 protection, or GRD_CHK 465 * only for TYPE3 protection. 466 */ 467 if (sess->sup_prot_ops & (TARGET_PROT_DIN_PASS | TARGET_PROT_DOUT_PASS)) { 468 if (dev->dev_attrib.pi_prot_type == TARGET_DIF_TYPE1_PROT || 469 cmd->se_sess->sess_prot_type == TARGET_DIF_TYPE1_PROT) 470 buf[4] = 0x5; 471 else if (dev->dev_attrib.pi_prot_type == TARGET_DIF_TYPE3_PROT || 472 cmd->se_sess->sess_prot_type == TARGET_DIF_TYPE3_PROT) 473 buf[4] = 0x4; 474 } 475 476 /* Set HEADSUP, ORDSUP, SIMPSUP */ 477 buf[5] = 0x07; 478 479 /* If WriteCache emulation is enabled, set V_SUP */ 480 if (target_check_wce(dev)) 481 buf[6] = 0x01; 482 /* If an LBA map is present set R_SUP */ 483 spin_lock(&cmd->se_dev->t10_alua.lba_map_lock); 484 if (!list_empty(&dev->t10_alua.lba_map_list)) 485 buf[8] = 0x10; 486 spin_unlock(&cmd->se_dev->t10_alua.lba_map_lock); 487 return 0; 488 } 489 490 /* Block Limits VPD page */ 491 static sense_reason_t 492 spc_emulate_evpd_b0(struct se_cmd *cmd, unsigned char *buf) 493 { 494 struct se_device *dev = cmd->se_dev; 495 int have_tp = 0; 496 int opt, min; 497 498 /* 499 * Following spc3r22 section 6.5.3 Block Limits VPD page, when 500 * emulate_tpu=1 or emulate_tpws=1 we will be expect a 501 * different page length for Thin Provisioning. 502 */ 503 if (dev->dev_attrib.emulate_tpu || dev->dev_attrib.emulate_tpws) 504 have_tp = 1; 505 506 buf[0] = dev->transport->get_device_type(dev); 507 buf[3] = have_tp ? 0x3c : 0x10; 508 509 /* Set WSNZ to 1 */ 510 buf[4] = 0x01; 511 /* 512 * Set MAXIMUM COMPARE AND WRITE LENGTH 513 */ 514 if (dev->dev_attrib.emulate_caw) 515 buf[5] = 0x01; 516 517 /* 518 * Set OPTIMAL TRANSFER LENGTH GRANULARITY 519 */ 520 if (dev->transport->get_io_min && (min = dev->transport->get_io_min(dev))) 521 put_unaligned_be16(min / dev->dev_attrib.block_size, &buf[6]); 522 else 523 put_unaligned_be16(1, &buf[6]); 524 525 /* 526 * Set MAXIMUM TRANSFER LENGTH 527 */ 528 put_unaligned_be32(dev->dev_attrib.hw_max_sectors, &buf[8]); 529 530 /* 531 * Set OPTIMAL TRANSFER LENGTH 532 */ 533 if (dev->transport->get_io_opt && (opt = dev->transport->get_io_opt(dev))) 534 put_unaligned_be32(opt / dev->dev_attrib.block_size, &buf[12]); 535 else 536 put_unaligned_be32(dev->dev_attrib.optimal_sectors, &buf[12]); 537 538 /* 539 * Exit now if we don't support TP. 540 */ 541 if (!have_tp) 542 goto max_write_same; 543 544 /* 545 * Set MAXIMUM UNMAP LBA COUNT 546 */ 547 put_unaligned_be32(dev->dev_attrib.max_unmap_lba_count, &buf[20]); 548 549 /* 550 * Set MAXIMUM UNMAP BLOCK DESCRIPTOR COUNT 551 */ 552 put_unaligned_be32(dev->dev_attrib.max_unmap_block_desc_count, 553 &buf[24]); 554 555 /* 556 * Set OPTIMAL UNMAP GRANULARITY 557 */ 558 put_unaligned_be32(dev->dev_attrib.unmap_granularity, &buf[28]); 559 560 /* 561 * UNMAP GRANULARITY ALIGNMENT 562 */ 563 put_unaligned_be32(dev->dev_attrib.unmap_granularity_alignment, 564 &buf[32]); 565 if (dev->dev_attrib.unmap_granularity_alignment != 0) 566 buf[32] |= 0x80; /* Set the UGAVALID bit */ 567 568 /* 569 * MAXIMUM WRITE SAME LENGTH 570 */ 571 max_write_same: 572 put_unaligned_be64(dev->dev_attrib.max_write_same_len, &buf[36]); 573 574 return 0; 575 } 576 577 /* Block Device Characteristics VPD page */ 578 static sense_reason_t 579 spc_emulate_evpd_b1(struct se_cmd *cmd, unsigned char *buf) 580 { 581 struct se_device *dev = cmd->se_dev; 582 583 buf[0] = dev->transport->get_device_type(dev); 584 buf[3] = 0x3c; 585 buf[5] = dev->dev_attrib.is_nonrot ? 1 : 0; 586 587 return 0; 588 } 589 590 /* Thin Provisioning VPD */ 591 static sense_reason_t 592 spc_emulate_evpd_b2(struct se_cmd *cmd, unsigned char *buf) 593 { 594 struct se_device *dev = cmd->se_dev; 595 596 /* 597 * From spc3r22 section 6.5.4 Thin Provisioning VPD page: 598 * 599 * The PAGE LENGTH field is defined in SPC-4. If the DP bit is set to 600 * zero, then the page length shall be set to 0004h. If the DP bit 601 * is set to one, then the page length shall be set to the value 602 * defined in table 162. 603 */ 604 buf[0] = dev->transport->get_device_type(dev); 605 606 /* 607 * Set Hardcoded length mentioned above for DP=0 608 */ 609 put_unaligned_be16(0x0004, &buf[2]); 610 611 /* 612 * The THRESHOLD EXPONENT field indicates the threshold set size in 613 * LBAs as a power of 2 (i.e., the threshold set size is equal to 614 * 2(threshold exponent)). 615 * 616 * Note that this is currently set to 0x00 as mkp says it will be 617 * changing again. We can enable this once it has settled in T10 618 * and is actually used by Linux/SCSI ML code. 619 */ 620 buf[4] = 0x00; 621 622 /* 623 * A TPU bit set to one indicates that the device server supports 624 * the UNMAP command (see 5.25). A TPU bit set to zero indicates 625 * that the device server does not support the UNMAP command. 626 */ 627 if (dev->dev_attrib.emulate_tpu != 0) 628 buf[5] = 0x80; 629 630 /* 631 * A TPWS bit set to one indicates that the device server supports 632 * the use of the WRITE SAME (16) command (see 5.42) to unmap LBAs. 633 * A TPWS bit set to zero indicates that the device server does not 634 * support the use of the WRITE SAME (16) command to unmap LBAs. 635 */ 636 if (dev->dev_attrib.emulate_tpws != 0) 637 buf[5] |= 0x40 | 0x20; 638 639 return 0; 640 } 641 642 /* Referrals VPD page */ 643 static sense_reason_t 644 spc_emulate_evpd_b3(struct se_cmd *cmd, unsigned char *buf) 645 { 646 struct se_device *dev = cmd->se_dev; 647 648 buf[0] = dev->transport->get_device_type(dev); 649 buf[3] = 0x0c; 650 put_unaligned_be32(dev->t10_alua.lba_map_segment_size, &buf[8]); 651 put_unaligned_be32(dev->t10_alua.lba_map_segment_multiplier, &buf[12]); 652 653 return 0; 654 } 655 656 static sense_reason_t 657 spc_emulate_evpd_00(struct se_cmd *cmd, unsigned char *buf); 658 659 static struct { 660 uint8_t page; 661 sense_reason_t (*emulate)(struct se_cmd *, unsigned char *); 662 } evpd_handlers[] = { 663 { .page = 0x00, .emulate = spc_emulate_evpd_00 }, 664 { .page = 0x80, .emulate = spc_emulate_evpd_80 }, 665 { .page = 0x83, .emulate = spc_emulate_evpd_83 }, 666 { .page = 0x86, .emulate = spc_emulate_evpd_86 }, 667 { .page = 0xb0, .emulate = spc_emulate_evpd_b0 }, 668 { .page = 0xb1, .emulate = spc_emulate_evpd_b1 }, 669 { .page = 0xb2, .emulate = spc_emulate_evpd_b2 }, 670 { .page = 0xb3, .emulate = spc_emulate_evpd_b3 }, 671 }; 672 673 /* supported vital product data pages */ 674 static sense_reason_t 675 spc_emulate_evpd_00(struct se_cmd *cmd, unsigned char *buf) 676 { 677 int p; 678 679 /* 680 * Only report the INQUIRY EVPD=1 pages after a valid NAA 681 * Registered Extended LUN WWN has been set via ConfigFS 682 * during device creation/restart. 683 */ 684 if (cmd->se_dev->dev_flags & DF_EMULATED_VPD_UNIT_SERIAL) { 685 buf[3] = ARRAY_SIZE(evpd_handlers); 686 for (p = 0; p < ARRAY_SIZE(evpd_handlers); ++p) 687 buf[p + 4] = evpd_handlers[p].page; 688 } 689 690 return 0; 691 } 692 693 static sense_reason_t 694 spc_emulate_inquiry(struct se_cmd *cmd) 695 { 696 struct se_device *dev = cmd->se_dev; 697 struct se_portal_group *tpg = cmd->se_lun->lun_sep->sep_tpg; 698 unsigned char *rbuf; 699 unsigned char *cdb = cmd->t_task_cdb; 700 unsigned char *buf; 701 sense_reason_t ret; 702 int p; 703 int len = 0; 704 705 buf = kzalloc(SE_INQUIRY_BUF, GFP_KERNEL); 706 if (!buf) { 707 pr_err("Unable to allocate response buffer for INQUIRY\n"); 708 return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE; 709 } 710 711 if (dev == tpg->tpg_virt_lun0.lun_se_dev) 712 buf[0] = 0x3f; /* Not connected */ 713 else 714 buf[0] = dev->transport->get_device_type(dev); 715 716 if (!(cdb[1] & 0x1)) { 717 if (cdb[2]) { 718 pr_err("INQUIRY with EVPD==0 but PAGE CODE=%02x\n", 719 cdb[2]); 720 ret = TCM_INVALID_CDB_FIELD; 721 goto out; 722 } 723 724 ret = spc_emulate_inquiry_std(cmd, buf); 725 len = buf[4] + 5; 726 goto out; 727 } 728 729 for (p = 0; p < ARRAY_SIZE(evpd_handlers); ++p) { 730 if (cdb[2] == evpd_handlers[p].page) { 731 buf[1] = cdb[2]; 732 ret = evpd_handlers[p].emulate(cmd, buf); 733 len = get_unaligned_be16(&buf[2]) + 4; 734 goto out; 735 } 736 } 737 738 pr_err("Unknown VPD Code: 0x%02x\n", cdb[2]); 739 ret = TCM_INVALID_CDB_FIELD; 740 741 out: 742 rbuf = transport_kmap_data_sg(cmd); 743 if (rbuf) { 744 memcpy(rbuf, buf, min_t(u32, SE_INQUIRY_BUF, cmd->data_length)); 745 transport_kunmap_data_sg(cmd); 746 } 747 kfree(buf); 748 749 if (!ret) 750 target_complete_cmd_with_length(cmd, GOOD, len); 751 return ret; 752 } 753 754 static int spc_modesense_rwrecovery(struct se_cmd *cmd, u8 pc, u8 *p) 755 { 756 p[0] = 0x01; 757 p[1] = 0x0a; 758 759 /* No changeable values for now */ 760 if (pc == 1) 761 goto out; 762 763 out: 764 return 12; 765 } 766 767 static int spc_modesense_control(struct se_cmd *cmd, u8 pc, u8 *p) 768 { 769 struct se_device *dev = cmd->se_dev; 770 struct se_session *sess = cmd->se_sess; 771 772 p[0] = 0x0a; 773 p[1] = 0x0a; 774 775 /* No changeable values for now */ 776 if (pc == 1) 777 goto out; 778 779 p[2] = 2; 780 /* 781 * From spc4r23, 7.4.7 Control mode page 782 * 783 * The QUEUE ALGORITHM MODIFIER field (see table 368) specifies 784 * restrictions on the algorithm used for reordering commands 785 * having the SIMPLE task attribute (see SAM-4). 786 * 787 * Table 368 -- QUEUE ALGORITHM MODIFIER field 788 * Code Description 789 * 0h Restricted reordering 790 * 1h Unrestricted reordering allowed 791 * 2h to 7h Reserved 792 * 8h to Fh Vendor specific 793 * 794 * A value of zero in the QUEUE ALGORITHM MODIFIER field specifies that 795 * the device server shall order the processing sequence of commands 796 * having the SIMPLE task attribute such that data integrity is maintained 797 * for that I_T nexus (i.e., if the transmission of new SCSI transport protocol 798 * requests is halted at any time, the final value of all data observable 799 * on the medium shall be the same as if all the commands had been processed 800 * with the ORDERED task attribute). 801 * 802 * A value of one in the QUEUE ALGORITHM MODIFIER field specifies that the 803 * device server may reorder the processing sequence of commands having the 804 * SIMPLE task attribute in any manner. Any data integrity exposures related to 805 * command sequence order shall be explicitly handled by the application client 806 * through the selection of appropriate ommands and task attributes. 807 */ 808 p[3] = (dev->dev_attrib.emulate_rest_reord == 1) ? 0x00 : 0x10; 809 /* 810 * From spc4r17, section 7.4.6 Control mode Page 811 * 812 * Unit Attention interlocks control (UN_INTLCK_CTRL) to code 00b 813 * 814 * 00b: The logical unit shall clear any unit attention condition 815 * reported in the same I_T_L_Q nexus transaction as a CHECK CONDITION 816 * status and shall not establish a unit attention condition when a com- 817 * mand is completed with BUSY, TASK SET FULL, or RESERVATION CONFLICT 818 * status. 819 * 820 * 10b: The logical unit shall not clear any unit attention condition 821 * reported in the same I_T_L_Q nexus transaction as a CHECK CONDITION 822 * status and shall not establish a unit attention condition when 823 * a command is completed with BUSY, TASK SET FULL, or RESERVATION 824 * CONFLICT status. 825 * 826 * 11b a The logical unit shall not clear any unit attention condition 827 * reported in the same I_T_L_Q nexus transaction as a CHECK CONDITION 828 * status and shall establish a unit attention condition for the 829 * initiator port associated with the I_T nexus on which the BUSY, 830 * TASK SET FULL, or RESERVATION CONFLICT status is being returned. 831 * Depending on the status, the additional sense code shall be set to 832 * PREVIOUS BUSY STATUS, PREVIOUS TASK SET FULL STATUS, or PREVIOUS 833 * RESERVATION CONFLICT STATUS. Until it is cleared by a REQUEST SENSE 834 * command, a unit attention condition shall be established only once 835 * for a BUSY, TASK SET FULL, or RESERVATION CONFLICT status regardless 836 * to the number of commands completed with one of those status codes. 837 */ 838 p[4] = (dev->dev_attrib.emulate_ua_intlck_ctrl == 2) ? 0x30 : 839 (dev->dev_attrib.emulate_ua_intlck_ctrl == 1) ? 0x20 : 0x00; 840 /* 841 * From spc4r17, section 7.4.6 Control mode Page 842 * 843 * Task Aborted Status (TAS) bit set to zero. 844 * 845 * A task aborted status (TAS) bit set to zero specifies that aborted 846 * tasks shall be terminated by the device server without any response 847 * to the application client. A TAS bit set to one specifies that tasks 848 * aborted by the actions of an I_T nexus other than the I_T nexus on 849 * which the command was received shall be completed with TASK ABORTED 850 * status (see SAM-4). 851 */ 852 p[5] = (dev->dev_attrib.emulate_tas) ? 0x40 : 0x00; 853 /* 854 * From spc4r30, section 7.5.7 Control mode page 855 * 856 * Application Tag Owner (ATO) bit set to one. 857 * 858 * If the ATO bit is set to one the device server shall not modify the 859 * LOGICAL BLOCK APPLICATION TAG field and, depending on the protection 860 * type, shall not modify the contents of the LOGICAL BLOCK REFERENCE 861 * TAG field. 862 */ 863 if (sess->sup_prot_ops & (TARGET_PROT_DIN_PASS | TARGET_PROT_DOUT_PASS)) { 864 if (dev->dev_attrib.pi_prot_type || sess->sess_prot_type) 865 p[5] |= 0x80; 866 } 867 868 p[8] = 0xff; 869 p[9] = 0xff; 870 p[11] = 30; 871 872 out: 873 return 12; 874 } 875 876 static int spc_modesense_caching(struct se_cmd *cmd, u8 pc, u8 *p) 877 { 878 struct se_device *dev = cmd->se_dev; 879 880 p[0] = 0x08; 881 p[1] = 0x12; 882 883 /* No changeable values for now */ 884 if (pc == 1) 885 goto out; 886 887 if (target_check_wce(dev)) 888 p[2] = 0x04; /* Write Cache Enable */ 889 p[12] = 0x20; /* Disabled Read Ahead */ 890 891 out: 892 return 20; 893 } 894 895 static int spc_modesense_informational_exceptions(struct se_cmd *cmd, u8 pc, unsigned char *p) 896 { 897 p[0] = 0x1c; 898 p[1] = 0x0a; 899 900 /* No changeable values for now */ 901 if (pc == 1) 902 goto out; 903 904 out: 905 return 12; 906 } 907 908 static struct { 909 uint8_t page; 910 uint8_t subpage; 911 int (*emulate)(struct se_cmd *, u8, unsigned char *); 912 } modesense_handlers[] = { 913 { .page = 0x01, .subpage = 0x00, .emulate = spc_modesense_rwrecovery }, 914 { .page = 0x08, .subpage = 0x00, .emulate = spc_modesense_caching }, 915 { .page = 0x0a, .subpage = 0x00, .emulate = spc_modesense_control }, 916 { .page = 0x1c, .subpage = 0x00, .emulate = spc_modesense_informational_exceptions }, 917 }; 918 919 static void spc_modesense_write_protect(unsigned char *buf, int type) 920 { 921 /* 922 * I believe that the WP bit (bit 7) in the mode header is the same for 923 * all device types.. 924 */ 925 switch (type) { 926 case TYPE_DISK: 927 case TYPE_TAPE: 928 default: 929 buf[0] |= 0x80; /* WP bit */ 930 break; 931 } 932 } 933 934 static void spc_modesense_dpofua(unsigned char *buf, int type) 935 { 936 switch (type) { 937 case TYPE_DISK: 938 buf[0] |= 0x10; /* DPOFUA bit */ 939 break; 940 default: 941 break; 942 } 943 } 944 945 static int spc_modesense_blockdesc(unsigned char *buf, u64 blocks, u32 block_size) 946 { 947 *buf++ = 8; 948 put_unaligned_be32(min(blocks, 0xffffffffull), buf); 949 buf += 4; 950 put_unaligned_be32(block_size, buf); 951 return 9; 952 } 953 954 static int spc_modesense_long_blockdesc(unsigned char *buf, u64 blocks, u32 block_size) 955 { 956 if (blocks <= 0xffffffff) 957 return spc_modesense_blockdesc(buf + 3, blocks, block_size) + 3; 958 959 *buf++ = 1; /* LONGLBA */ 960 buf += 2; 961 *buf++ = 16; 962 put_unaligned_be64(blocks, buf); 963 buf += 12; 964 put_unaligned_be32(block_size, buf); 965 966 return 17; 967 } 968 969 static sense_reason_t spc_emulate_modesense(struct se_cmd *cmd) 970 { 971 struct se_device *dev = cmd->se_dev; 972 char *cdb = cmd->t_task_cdb; 973 unsigned char buf[SE_MODE_PAGE_BUF], *rbuf; 974 int type = dev->transport->get_device_type(dev); 975 int ten = (cmd->t_task_cdb[0] == MODE_SENSE_10); 976 bool dbd = !!(cdb[1] & 0x08); 977 bool llba = ten ? !!(cdb[1] & 0x10) : false; 978 u8 pc = cdb[2] >> 6; 979 u8 page = cdb[2] & 0x3f; 980 u8 subpage = cdb[3]; 981 int length = 0; 982 int ret; 983 int i; 984 bool read_only = target_lun_is_rdonly(cmd);; 985 986 memset(buf, 0, SE_MODE_PAGE_BUF); 987 988 /* 989 * Skip over MODE DATA LENGTH + MEDIUM TYPE fields to byte 3 for 990 * MODE_SENSE_10 and byte 2 for MODE_SENSE (6). 991 */ 992 length = ten ? 3 : 2; 993 994 /* DEVICE-SPECIFIC PARAMETER */ 995 if ((cmd->se_lun->lun_access & TRANSPORT_LUNFLAGS_READ_ONLY) || read_only) 996 spc_modesense_write_protect(&buf[length], type); 997 998 /* 999 * SBC only allows us to enable FUA and DPO together. Fortunately 1000 * DPO is explicitly specified as a hint, so a noop is a perfectly 1001 * valid implementation. 1002 */ 1003 if (target_check_fua(dev)) 1004 spc_modesense_dpofua(&buf[length], type); 1005 1006 ++length; 1007 1008 /* BLOCK DESCRIPTOR */ 1009 1010 /* 1011 * For now we only include a block descriptor for disk (SBC) 1012 * devices; other command sets use a slightly different format. 1013 */ 1014 if (!dbd && type == TYPE_DISK) { 1015 u64 blocks = dev->transport->get_blocks(dev); 1016 u32 block_size = dev->dev_attrib.block_size; 1017 1018 if (ten) { 1019 if (llba) { 1020 length += spc_modesense_long_blockdesc(&buf[length], 1021 blocks, block_size); 1022 } else { 1023 length += 3; 1024 length += spc_modesense_blockdesc(&buf[length], 1025 blocks, block_size); 1026 } 1027 } else { 1028 length += spc_modesense_blockdesc(&buf[length], blocks, 1029 block_size); 1030 } 1031 } else { 1032 if (ten) 1033 length += 4; 1034 else 1035 length += 1; 1036 } 1037 1038 if (page == 0x3f) { 1039 if (subpage != 0x00 && subpage != 0xff) { 1040 pr_warn("MODE_SENSE: Invalid subpage code: 0x%02x\n", subpage); 1041 return TCM_INVALID_CDB_FIELD; 1042 } 1043 1044 for (i = 0; i < ARRAY_SIZE(modesense_handlers); ++i) { 1045 /* 1046 * Tricky way to say all subpage 00h for 1047 * subpage==0, all subpages for subpage==0xff 1048 * (and we just checked above that those are 1049 * the only two possibilities). 1050 */ 1051 if ((modesense_handlers[i].subpage & ~subpage) == 0) { 1052 ret = modesense_handlers[i].emulate(cmd, pc, &buf[length]); 1053 if (!ten && length + ret >= 255) 1054 break; 1055 length += ret; 1056 } 1057 } 1058 1059 goto set_length; 1060 } 1061 1062 for (i = 0; i < ARRAY_SIZE(modesense_handlers); ++i) 1063 if (modesense_handlers[i].page == page && 1064 modesense_handlers[i].subpage == subpage) { 1065 length += modesense_handlers[i].emulate(cmd, pc, &buf[length]); 1066 goto set_length; 1067 } 1068 1069 /* 1070 * We don't intend to implement: 1071 * - obsolete page 03h "format parameters" (checked by Solaris) 1072 */ 1073 if (page != 0x03) 1074 pr_err("MODE SENSE: unimplemented page/subpage: 0x%02x/0x%02x\n", 1075 page, subpage); 1076 1077 return TCM_UNKNOWN_MODE_PAGE; 1078 1079 set_length: 1080 if (ten) 1081 put_unaligned_be16(length - 2, buf); 1082 else 1083 buf[0] = length - 1; 1084 1085 rbuf = transport_kmap_data_sg(cmd); 1086 if (rbuf) { 1087 memcpy(rbuf, buf, min_t(u32, SE_MODE_PAGE_BUF, cmd->data_length)); 1088 transport_kunmap_data_sg(cmd); 1089 } 1090 1091 target_complete_cmd_with_length(cmd, GOOD, length); 1092 return 0; 1093 } 1094 1095 static sense_reason_t spc_emulate_modeselect(struct se_cmd *cmd) 1096 { 1097 char *cdb = cmd->t_task_cdb; 1098 bool ten = cdb[0] == MODE_SELECT_10; 1099 int off = ten ? 8 : 4; 1100 bool pf = !!(cdb[1] & 0x10); 1101 u8 page, subpage; 1102 unsigned char *buf; 1103 unsigned char tbuf[SE_MODE_PAGE_BUF]; 1104 int length; 1105 sense_reason_t ret = 0; 1106 int i; 1107 1108 if (!cmd->data_length) { 1109 target_complete_cmd(cmd, GOOD); 1110 return 0; 1111 } 1112 1113 if (cmd->data_length < off + 2) 1114 return TCM_PARAMETER_LIST_LENGTH_ERROR; 1115 1116 buf = transport_kmap_data_sg(cmd); 1117 if (!buf) 1118 return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE; 1119 1120 if (!pf) { 1121 ret = TCM_INVALID_CDB_FIELD; 1122 goto out; 1123 } 1124 1125 page = buf[off] & 0x3f; 1126 subpage = buf[off] & 0x40 ? buf[off + 1] : 0; 1127 1128 for (i = 0; i < ARRAY_SIZE(modesense_handlers); ++i) 1129 if (modesense_handlers[i].page == page && 1130 modesense_handlers[i].subpage == subpage) { 1131 memset(tbuf, 0, SE_MODE_PAGE_BUF); 1132 length = modesense_handlers[i].emulate(cmd, 0, tbuf); 1133 goto check_contents; 1134 } 1135 1136 ret = TCM_UNKNOWN_MODE_PAGE; 1137 goto out; 1138 1139 check_contents: 1140 if (cmd->data_length < off + length) { 1141 ret = TCM_PARAMETER_LIST_LENGTH_ERROR; 1142 goto out; 1143 } 1144 1145 if (memcmp(buf + off, tbuf, length)) 1146 ret = TCM_INVALID_PARAMETER_LIST; 1147 1148 out: 1149 transport_kunmap_data_sg(cmd); 1150 1151 if (!ret) 1152 target_complete_cmd(cmd, GOOD); 1153 return ret; 1154 } 1155 1156 static sense_reason_t spc_emulate_request_sense(struct se_cmd *cmd) 1157 { 1158 unsigned char *cdb = cmd->t_task_cdb; 1159 unsigned char *rbuf; 1160 u8 ua_asc = 0, ua_ascq = 0; 1161 unsigned char buf[SE_SENSE_BUF]; 1162 1163 memset(buf, 0, SE_SENSE_BUF); 1164 1165 if (cdb[1] & 0x01) { 1166 pr_err("REQUEST_SENSE description emulation not" 1167 " supported\n"); 1168 return TCM_INVALID_CDB_FIELD; 1169 } 1170 1171 rbuf = transport_kmap_data_sg(cmd); 1172 if (!rbuf) 1173 return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE; 1174 1175 if (!core_scsi3_ua_clear_for_request_sense(cmd, &ua_asc, &ua_ascq)) { 1176 /* 1177 * CURRENT ERROR, UNIT ATTENTION 1178 */ 1179 buf[0] = 0x70; 1180 buf[SPC_SENSE_KEY_OFFSET] = UNIT_ATTENTION; 1181 1182 /* 1183 * The Additional Sense Code (ASC) from the UNIT ATTENTION 1184 */ 1185 buf[SPC_ASC_KEY_OFFSET] = ua_asc; 1186 buf[SPC_ASCQ_KEY_OFFSET] = ua_ascq; 1187 buf[7] = 0x0A; 1188 } else { 1189 /* 1190 * CURRENT ERROR, NO SENSE 1191 */ 1192 buf[0] = 0x70; 1193 buf[SPC_SENSE_KEY_OFFSET] = NO_SENSE; 1194 1195 /* 1196 * NO ADDITIONAL SENSE INFORMATION 1197 */ 1198 buf[SPC_ASC_KEY_OFFSET] = 0x00; 1199 buf[7] = 0x0A; 1200 } 1201 1202 memcpy(rbuf, buf, min_t(u32, sizeof(buf), cmd->data_length)); 1203 transport_kunmap_data_sg(cmd); 1204 1205 target_complete_cmd(cmd, GOOD); 1206 return 0; 1207 } 1208 1209 sense_reason_t spc_emulate_report_luns(struct se_cmd *cmd) 1210 { 1211 struct se_dev_entry *deve; 1212 struct se_session *sess = cmd->se_sess; 1213 struct se_node_acl *nacl; 1214 unsigned char *buf; 1215 u32 lun_count = 0, offset = 8; 1216 1217 if (cmd->data_length < 16) { 1218 pr_warn("REPORT LUNS allocation length %u too small\n", 1219 cmd->data_length); 1220 return TCM_INVALID_CDB_FIELD; 1221 } 1222 1223 buf = transport_kmap_data_sg(cmd); 1224 if (!buf) 1225 return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE; 1226 1227 /* 1228 * If no struct se_session pointer is present, this struct se_cmd is 1229 * coming via a target_core_mod PASSTHROUGH op, and not through 1230 * a $FABRIC_MOD. In that case, report LUN=0 only. 1231 */ 1232 if (!sess) { 1233 int_to_scsilun(0, (struct scsi_lun *)&buf[offset]); 1234 lun_count = 1; 1235 goto done; 1236 } 1237 nacl = sess->se_node_acl; 1238 1239 rcu_read_lock(); 1240 hlist_for_each_entry_rcu(deve, &nacl->lun_entry_hlist, link) { 1241 /* 1242 * We determine the correct LUN LIST LENGTH even once we 1243 * have reached the initial allocation length. 1244 * See SPC2-R20 7.19. 1245 */ 1246 lun_count++; 1247 if ((offset + 8) > cmd->data_length) 1248 continue; 1249 1250 int_to_scsilun(deve->mapped_lun, (struct scsi_lun *)&buf[offset]); 1251 offset += 8; 1252 } 1253 rcu_read_unlock(); 1254 1255 /* 1256 * See SPC3 r07, page 159. 1257 */ 1258 done: 1259 lun_count *= 8; 1260 buf[0] = ((lun_count >> 24) & 0xff); 1261 buf[1] = ((lun_count >> 16) & 0xff); 1262 buf[2] = ((lun_count >> 8) & 0xff); 1263 buf[3] = (lun_count & 0xff); 1264 transport_kunmap_data_sg(cmd); 1265 1266 target_complete_cmd_with_length(cmd, GOOD, 8 + lun_count * 8); 1267 return 0; 1268 } 1269 EXPORT_SYMBOL(spc_emulate_report_luns); 1270 1271 static sense_reason_t 1272 spc_emulate_testunitready(struct se_cmd *cmd) 1273 { 1274 target_complete_cmd(cmd, GOOD); 1275 return 0; 1276 } 1277 1278 sense_reason_t 1279 spc_parse_cdb(struct se_cmd *cmd, unsigned int *size) 1280 { 1281 struct se_device *dev = cmd->se_dev; 1282 unsigned char *cdb = cmd->t_task_cdb; 1283 1284 switch (cdb[0]) { 1285 case MODE_SELECT: 1286 *size = cdb[4]; 1287 cmd->execute_cmd = spc_emulate_modeselect; 1288 break; 1289 case MODE_SELECT_10: 1290 *size = (cdb[7] << 8) + cdb[8]; 1291 cmd->execute_cmd = spc_emulate_modeselect; 1292 break; 1293 case MODE_SENSE: 1294 *size = cdb[4]; 1295 cmd->execute_cmd = spc_emulate_modesense; 1296 break; 1297 case MODE_SENSE_10: 1298 *size = (cdb[7] << 8) + cdb[8]; 1299 cmd->execute_cmd = spc_emulate_modesense; 1300 break; 1301 case LOG_SELECT: 1302 case LOG_SENSE: 1303 *size = (cdb[7] << 8) + cdb[8]; 1304 break; 1305 case PERSISTENT_RESERVE_IN: 1306 *size = (cdb[7] << 8) + cdb[8]; 1307 cmd->execute_cmd = target_scsi3_emulate_pr_in; 1308 break; 1309 case PERSISTENT_RESERVE_OUT: 1310 *size = (cdb[7] << 8) + cdb[8]; 1311 cmd->execute_cmd = target_scsi3_emulate_pr_out; 1312 break; 1313 case RELEASE: 1314 case RELEASE_10: 1315 if (cdb[0] == RELEASE_10) 1316 *size = (cdb[7] << 8) | cdb[8]; 1317 else 1318 *size = cmd->data_length; 1319 1320 cmd->execute_cmd = target_scsi2_reservation_release; 1321 break; 1322 case RESERVE: 1323 case RESERVE_10: 1324 /* 1325 * The SPC-2 RESERVE does not contain a size in the SCSI CDB. 1326 * Assume the passthrough or $FABRIC_MOD will tell us about it. 1327 */ 1328 if (cdb[0] == RESERVE_10) 1329 *size = (cdb[7] << 8) | cdb[8]; 1330 else 1331 *size = cmd->data_length; 1332 1333 cmd->execute_cmd = target_scsi2_reservation_reserve; 1334 break; 1335 case REQUEST_SENSE: 1336 *size = cdb[4]; 1337 cmd->execute_cmd = spc_emulate_request_sense; 1338 break; 1339 case INQUIRY: 1340 *size = (cdb[3] << 8) + cdb[4]; 1341 1342 /* 1343 * Do implicit HEAD_OF_QUEUE processing for INQUIRY. 1344 * See spc4r17 section 5.3 1345 */ 1346 cmd->sam_task_attr = TCM_HEAD_TAG; 1347 cmd->execute_cmd = spc_emulate_inquiry; 1348 break; 1349 case SECURITY_PROTOCOL_IN: 1350 case SECURITY_PROTOCOL_OUT: 1351 *size = (cdb[6] << 24) | (cdb[7] << 16) | (cdb[8] << 8) | cdb[9]; 1352 break; 1353 case EXTENDED_COPY: 1354 *size = get_unaligned_be32(&cdb[10]); 1355 cmd->execute_cmd = target_do_xcopy; 1356 break; 1357 case RECEIVE_COPY_RESULTS: 1358 *size = get_unaligned_be32(&cdb[10]); 1359 cmd->execute_cmd = target_do_receive_copy_results; 1360 break; 1361 case READ_ATTRIBUTE: 1362 case WRITE_ATTRIBUTE: 1363 *size = (cdb[10] << 24) | (cdb[11] << 16) | 1364 (cdb[12] << 8) | cdb[13]; 1365 break; 1366 case RECEIVE_DIAGNOSTIC: 1367 case SEND_DIAGNOSTIC: 1368 *size = (cdb[3] << 8) | cdb[4]; 1369 break; 1370 case WRITE_BUFFER: 1371 *size = (cdb[6] << 16) + (cdb[7] << 8) + cdb[8]; 1372 break; 1373 case REPORT_LUNS: 1374 cmd->execute_cmd = spc_emulate_report_luns; 1375 *size = (cdb[6] << 24) | (cdb[7] << 16) | (cdb[8] << 8) | cdb[9]; 1376 /* 1377 * Do implicit HEAD_OF_QUEUE processing for REPORT_LUNS 1378 * See spc4r17 section 5.3 1379 */ 1380 cmd->sam_task_attr = TCM_HEAD_TAG; 1381 break; 1382 case TEST_UNIT_READY: 1383 cmd->execute_cmd = spc_emulate_testunitready; 1384 *size = 0; 1385 break; 1386 case MAINTENANCE_IN: 1387 if (dev->transport->get_device_type(dev) != TYPE_ROM) { 1388 /* 1389 * MAINTENANCE_IN from SCC-2 1390 * Check for emulated MI_REPORT_TARGET_PGS 1391 */ 1392 if ((cdb[1] & 0x1f) == MI_REPORT_TARGET_PGS) { 1393 cmd->execute_cmd = 1394 target_emulate_report_target_port_groups; 1395 } 1396 *size = get_unaligned_be32(&cdb[6]); 1397 } else { 1398 /* 1399 * GPCMD_SEND_KEY from multi media commands 1400 */ 1401 *size = get_unaligned_be16(&cdb[8]); 1402 } 1403 break; 1404 case MAINTENANCE_OUT: 1405 if (dev->transport->get_device_type(dev) != TYPE_ROM) { 1406 /* 1407 * MAINTENANCE_OUT from SCC-2 1408 * Check for emulated MO_SET_TARGET_PGS. 1409 */ 1410 if (cdb[1] == MO_SET_TARGET_PGS) { 1411 cmd->execute_cmd = 1412 target_emulate_set_target_port_groups; 1413 } 1414 *size = get_unaligned_be32(&cdb[6]); 1415 } else { 1416 /* 1417 * GPCMD_SEND_KEY from multi media commands 1418 */ 1419 *size = get_unaligned_be16(&cdb[8]); 1420 } 1421 break; 1422 default: 1423 pr_warn("TARGET_CORE[%s]: Unsupported SCSI Opcode" 1424 " 0x%02x, sending CHECK_CONDITION.\n", 1425 cmd->se_tfo->get_fabric_name(), cdb[0]); 1426 return TCM_UNSUPPORTED_SCSI_OPCODE; 1427 } 1428 1429 return 0; 1430 } 1431 EXPORT_SYMBOL(spc_parse_cdb); 1432