On Fri, Sep 07 2007 at 0:50 +0300, FUJITA Tomonori <tomof@xxxxxxx> wrote:
> Signed-off-by: FUJITA Tomonori <fujita.tomonori@xxxxxxxxxxxxx>
> ---
> drivers/scsi/ibmvscsi/ibmvstgt.c | 2 +-
> drivers/scsi/libsrp.c | 27 ++++++++++++++-------------
> 2 files changed, 15 insertions(+), 14 deletions(-)
>
> diff --git a/drivers/scsi/ibmvscsi/ibmvstgt.c b/drivers/scsi/ibmvscsi/ibmvstgt.c
> index 8ba7dd0..ab173d4 100644
> --- a/drivers/scsi/ibmvscsi/ibmvstgt.c
> +++ b/drivers/scsi/ibmvscsi/ibmvstgt.c
> @@ -286,7 +286,7 @@ static int ibmvstgt_cmd_done(struct scsi_cmnd *sc,
> dprintk("%p %p %x %u\n", iue, target, vio_iu(iue)->srp.cmd.cdb[0],
> cmd->usg_sg);
>
> - if (sc->use_sg)
> + if (scsi_sg_count(sc))
> err = srp_transfer_data(sc, &vio_iu(iue)->srp.cmd, ibmvstgt_rdma, 1, 1);
>
> spin_lock_irqsave(&target->lock, flags);
> diff --git a/drivers/scsi/libsrp.c b/drivers/scsi/libsrp.c
> index 732446e..32e1529 100644
> --- a/drivers/scsi/libsrp.c
> +++ b/drivers/scsi/libsrp.c
> @@ -192,18 +192,18 @@ static int srp_direct_data(struct scsi_cmnd *sc, struct srp_direct_buf *md,
>
> if (dma_map) {
> iue = (struct iu_entry *) sc->SCp.ptr;
> - sg = sc->request_buffer;
> + sg = scsi_sglist(sc);
>
> - dprintk("%p %u %u %d\n", iue, sc->request_bufflen,
> - md->len, sc->use_sg);
> + dprintk("%p %u %u %d\n", iue, scsi_bufflen(sc),
> + md->len, scsi_sg_count(sc));
>
> - nsg = dma_map_sg(iue->target->dev, sg, sc->use_sg,
> + nsg = dma_map_sg(iue->target->dev, sg, scsi_sg_count(sc),
> DMA_BIDIRECTIONAL);
> if (!nsg) {
> - printk("fail to map %p %d\n", iue, sc->use_sg);
> + printk("fail to map %p %d\n", iue, scsi_sg_count(sc));
> return 0;
> }
> - len = min(sc->request_bufflen, md->len);
> + len = min(scsi_bufflen(sc), md->len);
> } else
> len = md->len;
>
> @@ -229,10 +229,10 @@ static int srp_indirect_data(struct scsi_cmnd *sc, struct srp_cmd *cmd,
>
> if (dma_map || ext_desc) {
> iue = (struct iu_entry *) sc->SCp.ptr;
> - sg = sc->request_buffer;
> + sg = scsi_sglist(sc);
>
> dprintk("%p %u %u %d %d\n",
> - iue, sc->request_bufflen, id->len,
> + iue, scsi_bufflen(sc), id->len,
> cmd->data_in_desc_cnt, cmd->data_out_desc_cnt);
> }
>
> @@ -268,13 +268,14 @@ static int srp_indirect_data(struct scsi_cmnd *sc, struct srp_cmd *cmd,
>
> rdma:
> if (dma_map) {
> - nsg = dma_map_sg(iue->target->dev, sg, sc->use_sg, DMA_BIDIRECTIONAL);
> + nsg = dma_map_sg(iue->target->dev, sg, scsi_sg_count(sc),
> + DMA_BIDIRECTIONAL);
> if (!nsg) {
> - eprintk("fail to map %p %d\n", iue, sc->use_sg);
> + eprintk("fail to map %p %d\n", iue, scsi_sg_count(sc));
> err = -EIO;
> goto free_mem;
> }
> - len = min(sc->request_bufflen, id->len);
> + len = min(scsi_bufflen(sc), id->len);
> } else
> len = id->len;
>
> @@ -425,8 +426,8 @@ int srp_cmd_queue(struct Scsi_Host *shost, struct srp_cmd *cmd, void *info,
>
> sc->SCp.ptr = info;
> memcpy(sc->cmnd, cmd->cdb, MAX_COMMAND_SIZE);
> - sc->request_bufflen = len;
> - sc->request_buffer = (void *) (unsigned long) addr;
> + sc->sdb.length = len;
> + sc->sdb.sglist = (void *) (unsigned long) addr;
> sc->tag = tag;
> err = scsi_tgt_queue_command(sc, (struct scsi_lun *) &cmd->lun, cmd->tag);
> if (err)
What is done here in srp_cmd_queue() looks scary to me. even today.
What is that u64 addr that gets truncated to unsigned long and put
on sglist? What data-buffer "len" is suppose to describe? And "dir" is
for what data? It is made to look like addr is a linear pointer with
a use_sg==0 issued command, which is no longer allowed. Only we know
it is not, because of the "(void *)(unsigned long) addr;"
which is a bug in 64-bit.
If this is a totally private message sent threw the scsi-ml. I would
rather it was done with DMA_NONE,bufflen=0,sglist=NULL and put all
the user-info into scsi_cmnd.SCp like above "void* info".
Boaz
-
To unsubscribe from this list: send the line "unsubscribe linux-scsi" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
