1/*
2 * XenBSD block device driver
3 *
4 * Copyright (c) 2010-2013 Spectra Logic Corporation
5 * Copyright (c) 2009 Scott Long, Yahoo!
6 * Copyright (c) 2009 Frank Suchomel, Citrix
7 * Copyright (c) 2009 Doug F. Rabson, Citrix
8 * Copyright (c) 2005 Kip Macy
9 * Copyright (c) 2003-2004, Keir Fraser & Steve Hand
10 * Modifications by Mark A. Williamson are (c) Intel Research Cambridge
11 *
12 *
13 * Permission is hereby granted, free of charge, to any person obtaining a copy
14 * of this software and associated documentation files (the "Software"), to
15 * deal in the Software without restriction, including without limitation the
16 * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
17 * sell copies of the Software, and to permit persons to whom the Software is
18 * furnished to do so, subject to the following conditions:
19 *
20 * The above copyright notice and this permission notice shall be included in
21 * all copies or substantial portions of the Software.
22 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
23 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
24 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
25 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
26 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
27 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
28 * DEALINGS IN THE SOFTWARE.
29 */
30
31#include <sys/cdefs.h>
32__FBSDID("$FreeBSD$");
33
34#include <sys/param.h>
35#include <sys/systm.h>
36#include <sys/malloc.h>
37#include <sys/kernel.h>
38#include <vm/vm.h>
39#include <vm/pmap.h>
40
41#include <sys/bio.h>
42#include <sys/bus.h>
43#include <sys/conf.h>
44#include <sys/module.h>
45#include <sys/sysctl.h>
46
47#include <machine/bus.h>
48#include <sys/rman.h>
49#include <machine/resource.h>
50#include <machine/intr_machdep.h>
51#include <machine/vmparam.h>
52#include <sys/bus_dma.h>
53
54#include <xen/xen-os.h>
55#include <xen/hypervisor.h>
56#include <xen/xen_intr.h>
57#include <xen/gnttab.h>
58#include <xen/interface/grant_table.h>
59#include <xen/interface/io/protocols.h>
60#include <xen/xenbus/xenbusvar.h>
61
62#include <machine/_inttypes.h>
63#include <machine/xen/xenvar.h>
64
65#include <geom/geom_disk.h>
66
67#include <dev/xen/blkfront/block.h>
68
69#include "xenbus_if.h"
70
71/*--------------------------- Forward Declarations ---------------------------*/
72static void xbd_closing(device_t);
73static void xbd_startio(struct xbd_softc *sc);
74
75/*---------------------------------- Macros ----------------------------------*/
76#if 0
77#define DPRINTK(fmt, args...) printf("[XEN] %s:%d: " fmt ".\n", __func__, __LINE__, ##args)
78#else
79#define DPRINTK(fmt, args...)
80#endif
81
82#define XBD_SECTOR_SHFT		9
83
84/*---------------------------- Global Static Data ----------------------------*/
85static MALLOC_DEFINE(M_XENBLOCKFRONT, "xbd", "Xen Block Front driver data");
86
87/*---------------------------- Command Processing ----------------------------*/
88static void
89xbd_freeze(struct xbd_softc *sc, xbd_flag_t xbd_flag)
90{
91	if (xbd_flag != XBDF_NONE && (sc->xbd_flags & xbd_flag) != 0)
92		return;
93
94	sc->xbd_flags |= xbd_flag;
95	sc->xbd_qfrozen_cnt++;
96}
97
98static void
99xbd_thaw(struct xbd_softc *sc, xbd_flag_t xbd_flag)
100{
101	if (xbd_flag != XBDF_NONE && (sc->xbd_flags & xbd_flag) == 0)
102		return;
103
104	if (sc->xbd_qfrozen_cnt == 0)
105		panic("%s: Thaw with flag 0x%x while not frozen.",
106		    __func__, xbd_flag);
107
108	sc->xbd_flags &= ~xbd_flag;
109	sc->xbd_qfrozen_cnt--;
110}
111
112static void
113xbd_cm_freeze(struct xbd_softc *sc, struct xbd_command *cm, xbdc_flag_t cm_flag)
114{
115	if ((cm->cm_flags & XBDCF_FROZEN) != 0)
116		return;
117
118	cm->cm_flags |= XBDCF_FROZEN|cm_flag;
119	xbd_freeze(sc, XBDF_NONE);
120}
121
122static void
123xbd_cm_thaw(struct xbd_softc *sc, struct xbd_command *cm)
124{
125	if ((cm->cm_flags & XBDCF_FROZEN) == 0)
126		return;
127
128	cm->cm_flags &= ~XBDCF_FROZEN;
129	xbd_thaw(sc, XBDF_NONE);
130}
131
132static inline void
133xbd_flush_requests(struct xbd_softc *sc)
134{
135	int notify;
136
137	RING_PUSH_REQUESTS_AND_CHECK_NOTIFY(&sc->xbd_ring, notify);
138
139	if (notify)
140		xen_intr_signal(sc->xen_intr_handle);
141}
142
143static void
144xbd_free_command(struct xbd_command *cm)
145{
146
147	KASSERT((cm->cm_flags & XBDCF_Q_MASK) == XBD_Q_NONE,
148	    ("Freeing command that is still on queue %d.",
149	    cm->cm_flags & XBDCF_Q_MASK));
150
151	cm->cm_flags = XBDCF_INITIALIZER;
152	cm->cm_bp = NULL;
153	cm->cm_complete = NULL;
154	xbd_enqueue_cm(cm, XBD_Q_FREE);
155	xbd_thaw(cm->cm_sc, XBDF_CM_SHORTAGE);
156}
157
158static void
159xbd_queue_cb(void *arg, bus_dma_segment_t *segs, int nsegs, int error)
160{
161	struct xbd_softc *sc;
162	struct xbd_command *cm;
163	blkif_request_t	*ring_req;
164	struct blkif_request_segment *sg;
165	struct blkif_request_segment *last_block_sg;
166	grant_ref_t *sg_ref;
167	vm_paddr_t buffer_ma;
168	uint64_t fsect, lsect;
169	int ref;
170	int op;
171	int block_segs;
172
173	cm = arg;
174	sc = cm->cm_sc;
175
176	if (error) {
177		printf("error %d in xbd_queue_cb\n", error);
178		cm->cm_bp->bio_error = EIO;
179		biodone(cm->cm_bp);
180		xbd_free_command(cm);
181		return;
182	}
183
184	/* Fill out a communications ring structure. */
185	ring_req = RING_GET_REQUEST(&sc->xbd_ring, sc->xbd_ring.req_prod_pvt);
186	sc->xbd_ring.req_prod_pvt++;
187	ring_req->id = cm->cm_id;
188	ring_req->operation = cm->cm_operation;
189	ring_req->sector_number = cm->cm_sector_number;
190	ring_req->handle = (blkif_vdev_t)(uintptr_t)sc->xbd_disk;
191	ring_req->nr_segments = nsegs;
192	cm->cm_nseg = nsegs;
193
194	block_segs    = MIN(nsegs, BLKIF_MAX_SEGMENTS_PER_HEADER_BLOCK);
195	sg            = ring_req->seg;
196	last_block_sg = sg + block_segs;
197	sg_ref        = cm->cm_sg_refs;
198
199	while (1) {
200
201		while (sg < last_block_sg) {
202			buffer_ma = segs->ds_addr;
203			fsect = (buffer_ma & PAGE_MASK) >> XBD_SECTOR_SHFT;
204			lsect = fsect + (segs->ds_len  >> XBD_SECTOR_SHFT) - 1;
205
206			KASSERT(lsect <= 7, ("XEN disk driver data cannot "
207			    "cross a page boundary"));
208
209			/* install a grant reference. */
210			ref = gnttab_claim_grant_reference(&cm->cm_gref_head);
211
212			/*
213			 * GNTTAB_LIST_END == 0xffffffff, but it is private
214			 * to gnttab.c.
215			 */
216			KASSERT(ref != ~0, ("grant_reference failed"));
217
218			gnttab_grant_foreign_access_ref(
219			    ref,
220			    xenbus_get_otherend_id(sc->xbd_dev),
221			    buffer_ma >> PAGE_SHIFT,
222			    ring_req->operation == BLKIF_OP_WRITE);
223
224			*sg_ref = ref;
225			*sg = (struct blkif_request_segment) {
226				.gref       = ref,
227				.first_sect = fsect,
228				.last_sect  = lsect
229			};
230			sg++;
231			sg_ref++;
232			segs++;
233			nsegs--;
234		}
235		block_segs = MIN(nsegs, BLKIF_MAX_SEGMENTS_PER_SEGMENT_BLOCK);
236		if (block_segs == 0)
237			break;
238
239		sg = BLKRING_GET_SEG_BLOCK(&sc->xbd_ring,
240		    sc->xbd_ring.req_prod_pvt);
241		sc->xbd_ring.req_prod_pvt++;
242		last_block_sg = sg + block_segs;
243	}
244
245	if (cm->cm_operation == BLKIF_OP_READ)
246		op = BUS_DMASYNC_PREREAD;
247	else if (cm->cm_operation == BLKIF_OP_WRITE)
248		op = BUS_DMASYNC_PREWRITE;
249	else
250		op = 0;
251	bus_dmamap_sync(sc->xbd_io_dmat, cm->cm_map, op);
252
253	gnttab_free_grant_references(cm->cm_gref_head);
254
255	xbd_enqueue_cm(cm, XBD_Q_BUSY);
256
257	/*
258	 * If bus dma had to asynchronously call us back to dispatch
259	 * this command, we are no longer executing in the context of
260	 * xbd_startio().  Thus we cannot rely on xbd_startio()'s call to
261	 * xbd_flush_requests() to publish this command to the backend
262	 * along with any other commands that it could batch.
263	 */
264	if ((cm->cm_flags & XBDCF_ASYNC_MAPPING) != 0)
265		xbd_flush_requests(sc);
266
267	return;
268}
269
270static int
271xbd_queue_request(struct xbd_softc *sc, struct xbd_command *cm)
272{
273	int error;
274
275	error = bus_dmamap_load(sc->xbd_io_dmat, cm->cm_map, cm->cm_data,
276	    cm->cm_datalen, xbd_queue_cb, cm, 0);
277	if (error == EINPROGRESS) {
278		/*
279		 * Maintain queuing order by freezing the queue.  The next
280		 * command may not require as many resources as the command
281		 * we just attempted to map, so we can't rely on bus dma
282		 * blocking for it too.
283		 */
284		xbd_cm_freeze(sc, cm, XBDCF_ASYNC_MAPPING);
285		return (0);
286	}
287
288	return (error);
289}
290
291static void
292xbd_restart_queue_callback(void *arg)
293{
294	struct xbd_softc *sc = arg;
295
296	mtx_lock(&sc->xbd_io_lock);
297
298	xbd_thaw(sc, XBDF_GNT_SHORTAGE);
299
300	xbd_startio(sc);
301
302	mtx_unlock(&sc->xbd_io_lock);
303}
304
305static struct xbd_command *
306xbd_bio_command(struct xbd_softc *sc)
307{
308	struct xbd_command *cm;
309	struct bio *bp;
310
311	if (__predict_false(sc->xbd_state != XBD_STATE_CONNECTED))
312		return (NULL);
313
314	bp = xbd_dequeue_bio(sc);
315	if (bp == NULL)
316		return (NULL);
317
318	if ((cm = xbd_dequeue_cm(sc, XBD_Q_FREE)) == NULL) {
319		xbd_freeze(sc, XBDF_CM_SHORTAGE);
320		xbd_requeue_bio(sc, bp);
321		return (NULL);
322	}
323
324	if (gnttab_alloc_grant_references(sc->xbd_max_request_segments,
325	    &cm->cm_gref_head) != 0) {
326		gnttab_request_free_callback(&sc->xbd_callback,
327		    xbd_restart_queue_callback, sc,
328		    sc->xbd_max_request_segments);
329		xbd_freeze(sc, XBDF_GNT_SHORTAGE);
330		xbd_requeue_bio(sc, bp);
331		xbd_enqueue_cm(cm, XBD_Q_FREE);
332		return (NULL);
333	}
334
335	cm->cm_bp = bp;
336	cm->cm_data = bp->bio_data;
337	cm->cm_datalen = bp->bio_bcount;
338	cm->cm_sector_number = (blkif_sector_t)bp->bio_pblkno;
339
340	switch (bp->bio_cmd) {
341	case BIO_READ:
342		cm->cm_operation = BLKIF_OP_READ;
343		break;
344	case BIO_WRITE:
345		cm->cm_operation = BLKIF_OP_WRITE;
346		if ((bp->bio_flags & BIO_ORDERED) != 0) {
347			if ((sc->xbd_flags & XBDF_BARRIER) != 0) {
348				cm->cm_operation = BLKIF_OP_WRITE_BARRIER;
349			} else {
350				/*
351				 * Single step this command.
352				 */
353				cm->cm_flags |= XBDCF_Q_FREEZE;
354				if (xbd_queue_length(sc, XBD_Q_BUSY) != 0) {
355					/*
356					 * Wait for in-flight requests to
357					 * finish.
358					 */
359					xbd_freeze(sc, XBDF_WAIT_IDLE);
360					xbd_requeue_cm(cm, XBD_Q_READY);
361					return (NULL);
362				}
363			}
364		}
365		break;
366	case BIO_FLUSH:
367		if ((sc->xbd_flags & XBDF_FLUSH) != 0)
368			cm->cm_operation = BLKIF_OP_FLUSH_DISKCACHE;
369		else if ((sc->xbd_flags & XBDF_BARRIER) != 0)
370			cm->cm_operation = BLKIF_OP_WRITE_BARRIER;
371		else
372			panic("flush request, but no flush support available");
373		break;
374	default:
375		panic("unknown bio command %d", bp->bio_cmd);
376	}
377
378	return (cm);
379}
380
381/*
382 * Dequeue buffers and place them in the shared communication ring.
383 * Return when no more requests can be accepted or all buffers have
384 * been queued.
385 *
386 * Signal XEN once the ring has been filled out.
387 */
388static void
389xbd_startio(struct xbd_softc *sc)
390{
391	struct xbd_command *cm;
392	int error, queued = 0;
393
394	mtx_assert(&sc->xbd_io_lock, MA_OWNED);
395
396	if (sc->xbd_state != XBD_STATE_CONNECTED)
397		return;
398
399	while (RING_FREE_REQUESTS(&sc->xbd_ring) >=
400	    sc->xbd_max_request_blocks) {
401		if (sc->xbd_qfrozen_cnt != 0)
402			break;
403
404		cm = xbd_dequeue_cm(sc, XBD_Q_READY);
405
406		if (cm == NULL)
407		    cm = xbd_bio_command(sc);
408
409		if (cm == NULL)
410			break;
411
412		if ((cm->cm_flags & XBDCF_Q_FREEZE) != 0) {
413			/*
414			 * Single step command.  Future work is
415			 * held off until this command completes.
416			 */
417			xbd_cm_freeze(sc, cm, XBDCF_Q_FREEZE);
418		}
419
420		if ((error = xbd_queue_request(sc, cm)) != 0) {
421			printf("xbd_queue_request returned %d\n", error);
422			break;
423		}
424		queued++;
425	}
426
427	if (queued != 0)
428		xbd_flush_requests(sc);
429}
430
431static void
432xbd_bio_complete(struct xbd_softc *sc, struct xbd_command *cm)
433{
434	struct bio *bp;
435
436	bp = cm->cm_bp;
437
438	if (__predict_false(cm->cm_status != BLKIF_RSP_OKAY)) {
439		disk_err(bp, "disk error" , -1, 0);
440		printf(" status: %x\n", cm->cm_status);
441		bp->bio_flags |= BIO_ERROR;
442	}
443
444	if (bp->bio_flags & BIO_ERROR)
445		bp->bio_error = EIO;
446	else
447		bp->bio_resid = 0;
448
449	xbd_free_command(cm);
450	biodone(bp);
451}
452
453static int
454xbd_completion(struct xbd_command *cm)
455{
456	gnttab_end_foreign_access_references(cm->cm_nseg, cm->cm_sg_refs);
457	return (BLKIF_SEGS_TO_BLOCKS(cm->cm_nseg));
458}
459
460static void
461xbd_int(void *xsc)
462{
463	struct xbd_softc *sc = xsc;
464	struct xbd_command *cm;
465	blkif_response_t *bret;
466	RING_IDX i, rp;
467	int op;
468
469	mtx_lock(&sc->xbd_io_lock);
470
471	if (__predict_false(sc->xbd_state == XBD_STATE_DISCONNECTED)) {
472		mtx_unlock(&sc->xbd_io_lock);
473		return;
474	}
475
476 again:
477	rp = sc->xbd_ring.sring->rsp_prod;
478	rmb(); /* Ensure we see queued responses up to 'rp'. */
479
480	for (i = sc->xbd_ring.rsp_cons; i != rp;) {
481		bret = RING_GET_RESPONSE(&sc->xbd_ring, i);
482		cm   = &sc->xbd_shadow[bret->id];
483
484		xbd_remove_cm(cm, XBD_Q_BUSY);
485		i += xbd_completion(cm);
486
487		if (cm->cm_operation == BLKIF_OP_READ)
488			op = BUS_DMASYNC_POSTREAD;
489		else if (cm->cm_operation == BLKIF_OP_WRITE ||
490		    cm->cm_operation == BLKIF_OP_WRITE_BARRIER)
491			op = BUS_DMASYNC_POSTWRITE;
492		else
493			op = 0;
494		bus_dmamap_sync(sc->xbd_io_dmat, cm->cm_map, op);
495		bus_dmamap_unload(sc->xbd_io_dmat, cm->cm_map);
496
497		/*
498		 * Release any hold this command has on future command
499		 * dispatch.
500		 */
501		xbd_cm_thaw(sc, cm);
502
503		/*
504		 * Directly call the i/o complete routine to save an
505		 * an indirection in the common case.
506		 */
507		cm->cm_status = bret->status;
508		if (cm->cm_bp)
509			xbd_bio_complete(sc, cm);
510		else if (cm->cm_complete != NULL)
511			cm->cm_complete(cm);
512		else
513			xbd_free_command(cm);
514	}
515
516	sc->xbd_ring.rsp_cons = i;
517
518	if (i != sc->xbd_ring.req_prod_pvt) {
519		int more_to_do;
520		RING_FINAL_CHECK_FOR_RESPONSES(&sc->xbd_ring, more_to_do);
521		if (more_to_do)
522			goto again;
523	} else {
524		sc->xbd_ring.sring->rsp_event = i + 1;
525	}
526
527	if (xbd_queue_length(sc, XBD_Q_BUSY) == 0)
528		xbd_thaw(sc, XBDF_WAIT_IDLE);
529
530	xbd_startio(sc);
531
532	if (__predict_false(sc->xbd_state == XBD_STATE_SUSPENDED))
533		wakeup(&sc->xbd_cm_q[XBD_Q_BUSY]);
534
535	mtx_unlock(&sc->xbd_io_lock);
536}
537
538/*------------------------------- Dump Support -------------------------------*/
539/**
540 * Quiesce the disk writes for a dump file before allowing the next buffer.
541 */
542static void
543xbd_quiesce(struct xbd_softc *sc)
544{
545	int mtd;
546
547	// While there are outstanding requests
548	while (xbd_queue_length(sc, XBD_Q_BUSY) != 0) {
549		RING_FINAL_CHECK_FOR_RESPONSES(&sc->xbd_ring, mtd);
550		if (mtd) {
551			/* Recieved request completions, update queue. */
552			xbd_int(sc);
553		}
554		if (xbd_queue_length(sc, XBD_Q_BUSY) != 0) {
555			/*
556			 * Still pending requests, wait for the disk i/o
557			 * to complete.
558			 */
559			HYPERVISOR_yield();
560		}
561	}
562}
563
564/* Kernel dump function for a paravirtualized disk device */
565static void
566xbd_dump_complete(struct xbd_command *cm)
567{
568
569	xbd_enqueue_cm(cm, XBD_Q_COMPLETE);
570}
571
572static int
573xbd_dump(void *arg, void *virtual, vm_offset_t physical, off_t offset,
574    size_t length)
575{
576	struct disk *dp = arg;
577	struct xbd_softc *sc = dp->d_drv1;
578	struct xbd_command *cm;
579	size_t chunk;
580	int sbp;
581	int rc = 0;
582
583	if (length <= 0)
584		return (rc);
585
586	xbd_quiesce(sc);	/* All quiet on the western front. */
587
588	/*
589	 * If this lock is held, then this module is failing, and a
590	 * successful kernel dump is highly unlikely anyway.
591	 */
592	mtx_lock(&sc->xbd_io_lock);
593
594	/* Split the 64KB block as needed */
595	for (sbp=0; length > 0; sbp++) {
596		cm = xbd_dequeue_cm(sc, XBD_Q_FREE);
597		if (cm == NULL) {
598			mtx_unlock(&sc->xbd_io_lock);
599			device_printf(sc->xbd_dev, "dump: no more commands?\n");
600			return (EBUSY);
601		}
602
603		if (gnttab_alloc_grant_references(sc->xbd_max_request_segments,
604		    &cm->cm_gref_head) != 0) {
605			xbd_free_command(cm);
606			mtx_unlock(&sc->xbd_io_lock);
607			device_printf(sc->xbd_dev, "no more grant allocs?\n");
608			return (EBUSY);
609		}
610
611		chunk = length > sc->xbd_max_request_size ?
612		    sc->xbd_max_request_size : length;
613		cm->cm_data = virtual;
614		cm->cm_datalen = chunk;
615		cm->cm_operation = BLKIF_OP_WRITE;
616		cm->cm_sector_number = offset / dp->d_sectorsize;
617		cm->cm_complete = xbd_dump_complete;
618
619		xbd_enqueue_cm(cm, XBD_Q_READY);
620
621		length -= chunk;
622		offset += chunk;
623		virtual = (char *) virtual + chunk;
624	}
625
626	/* Tell DOM0 to do the I/O */
627	xbd_startio(sc);
628	mtx_unlock(&sc->xbd_io_lock);
629
630	/* Poll for the completion. */
631	xbd_quiesce(sc);	/* All quite on the eastern front */
632
633	/* If there were any errors, bail out... */
634	while ((cm = xbd_dequeue_cm(sc, XBD_Q_COMPLETE)) != NULL) {
635		if (cm->cm_status != BLKIF_RSP_OKAY) {
636			device_printf(sc->xbd_dev,
637			    "Dump I/O failed at sector %jd\n",
638			    cm->cm_sector_number);
639			rc = EIO;
640		}
641		xbd_free_command(cm);
642	}
643
644	return (rc);
645}
646
647/*----------------------------- Disk Entrypoints -----------------------------*/
648static int
649xbd_open(struct disk *dp)
650{
651	struct xbd_softc *sc = dp->d_drv1;
652
653	if (sc == NULL) {
654		printf("xb%d: not found", sc->xbd_unit);
655		return (ENXIO);
656	}
657
658	sc->xbd_flags |= XBDF_OPEN;
659	sc->xbd_users++;
660	return (0);
661}
662
663static int
664xbd_close(struct disk *dp)
665{
666	struct xbd_softc *sc = dp->d_drv1;
667
668	if (sc == NULL)
669		return (ENXIO);
670	sc->xbd_flags &= ~XBDF_OPEN;
671	if (--(sc->xbd_users) == 0) {
672		/*
673		 * Check whether we have been instructed to close.  We will
674		 * have ignored this request initially, as the device was
675		 * still mounted.
676		 */
677		if (xenbus_get_otherend_state(sc->xbd_dev) ==
678		    XenbusStateClosing)
679			xbd_closing(sc->xbd_dev);
680	}
681	return (0);
682}
683
684static int
685xbd_ioctl(struct disk *dp, u_long cmd, void *addr, int flag, struct thread *td)
686{
687	struct xbd_softc *sc = dp->d_drv1;
688
689	if (sc == NULL)
690		return (ENXIO);
691
692	return (ENOTTY);
693}
694
695/*
696 * Read/write routine for a buffer.  Finds the proper unit, place it on
697 * the sortq and kick the controller.
698 */
699static void
700xbd_strategy(struct bio *bp)
701{
702	struct xbd_softc *sc = bp->bio_disk->d_drv1;
703
704	/* bogus disk? */
705	if (sc == NULL) {
706		bp->bio_error = EINVAL;
707		bp->bio_flags |= BIO_ERROR;
708		bp->bio_resid = bp->bio_bcount;
709		biodone(bp);
710		return;
711	}
712
713	/*
714	 * Place it in the queue of disk activities for this disk
715	 */
716	mtx_lock(&sc->xbd_io_lock);
717
718	xbd_enqueue_bio(sc, bp);
719	xbd_startio(sc);
720
721	mtx_unlock(&sc->xbd_io_lock);
722	return;
723}
724
725/*------------------------------ Ring Management -----------------------------*/
726static int
727xbd_alloc_ring(struct xbd_softc *sc)
728{
729	blkif_sring_t *sring;
730	uintptr_t sring_page_addr;
731	int error;
732	int i;
733
734	sring = malloc(sc->xbd_ring_pages * PAGE_SIZE, M_XENBLOCKFRONT,
735	    M_NOWAIT|M_ZERO);
736	if (sring == NULL) {
737		xenbus_dev_fatal(sc->xbd_dev, ENOMEM, "allocating shared ring");
738		return (ENOMEM);
739	}
740	SHARED_RING_INIT(sring);
741	FRONT_RING_INIT(&sc->xbd_ring, sring, sc->xbd_ring_pages * PAGE_SIZE);
742
743	for (i = 0, sring_page_addr = (uintptr_t)sring;
744	     i < sc->xbd_ring_pages;
745	     i++, sring_page_addr += PAGE_SIZE) {
746
747		error = xenbus_grant_ring(sc->xbd_dev,
748		    (vtomach(sring_page_addr) >> PAGE_SHIFT),
749		    &sc->xbd_ring_ref[i]);
750		if (error) {
751			xenbus_dev_fatal(sc->xbd_dev, error,
752			    "granting ring_ref(%d)", i);
753			return (error);
754		}
755	}
756	if (sc->xbd_ring_pages == 1) {
757		error = xs_printf(XST_NIL, xenbus_get_node(sc->xbd_dev),
758		    "ring-ref", "%u", sc->xbd_ring_ref[0]);
759		if (error) {
760			xenbus_dev_fatal(sc->xbd_dev, error,
761			    "writing %s/ring-ref",
762			    xenbus_get_node(sc->xbd_dev));
763			return (error);
764		}
765	} else {
766		for (i = 0; i < sc->xbd_ring_pages; i++) {
767			char ring_ref_name[]= "ring_refXX";
768
769			snprintf(ring_ref_name, sizeof(ring_ref_name),
770			    "ring-ref%u", i);
771			error = xs_printf(XST_NIL, xenbus_get_node(sc->xbd_dev),
772			     ring_ref_name, "%u", sc->xbd_ring_ref[i]);
773			if (error) {
774				xenbus_dev_fatal(sc->xbd_dev, error,
775				    "writing %s/%s",
776				    xenbus_get_node(sc->xbd_dev),
777				    ring_ref_name);
778				return (error);
779			}
780		}
781	}
782
783	error = xen_intr_alloc_and_bind_local_port(sc->xbd_dev,
784	    xenbus_get_otherend_id(sc->xbd_dev), NULL, xbd_int, sc,
785	    INTR_TYPE_BIO | INTR_MPSAFE, &sc->xen_intr_handle);
786	if (error) {
787		xenbus_dev_fatal(sc->xbd_dev, error,
788		    "xen_intr_alloc_and_bind_local_port failed");
789		return (error);
790	}
791
792	return (0);
793}
794
795static void
796xbd_free_ring(struct xbd_softc *sc)
797{
798	int i;
799
800	if (sc->xbd_ring.sring == NULL)
801		return;
802
803	for (i = 0; i < sc->xbd_ring_pages; i++) {
804		if (sc->xbd_ring_ref[i] != GRANT_REF_INVALID) {
805			gnttab_end_foreign_access_ref(sc->xbd_ring_ref[i]);
806			sc->xbd_ring_ref[i] = GRANT_REF_INVALID;
807		}
808	}
809	free(sc->xbd_ring.sring, M_XENBLOCKFRONT);
810	sc->xbd_ring.sring = NULL;
811}
812
813/*-------------------------- Initialization/Teardown -------------------------*/
814static int
815xbd_feature_string(struct xbd_softc *sc, char *features, size_t len)
816{
817	struct sbuf sb;
818	int feature_cnt;
819
820	sbuf_new(&sb, features, len, SBUF_FIXEDLEN);
821
822	feature_cnt = 0;
823	if ((sc->xbd_flags & XBDF_FLUSH) != 0) {
824		sbuf_printf(&sb, "flush");
825		feature_cnt++;
826	}
827
828	if ((sc->xbd_flags & XBDF_BARRIER) != 0) {
829		if (feature_cnt != 0)
830			sbuf_printf(&sb, ", ");
831		sbuf_printf(&sb, "write_barrier");
832		feature_cnt++;
833	}
834
835	(void) sbuf_finish(&sb);
836	return (sbuf_len(&sb));
837}
838
839static int
840xbd_sysctl_features(SYSCTL_HANDLER_ARGS)
841{
842	char features[80];
843	struct xbd_softc *sc = arg1;
844	int error;
845	int len;
846
847	error = sysctl_wire_old_buffer(req, 0);
848	if (error != 0)
849		return (error);
850
851	len = xbd_feature_string(sc, features, sizeof(features));
852
853	/* len is -1 on error, which will make the SYSCTL_OUT a no-op. */
854	return (SYSCTL_OUT(req, features, len + 1/*NUL*/));
855}
856
857static void
858xbd_setup_sysctl(struct xbd_softc *xbd)
859{
860	struct sysctl_ctx_list *sysctl_ctx = NULL;
861	struct sysctl_oid *sysctl_tree = NULL;
862	struct sysctl_oid_list *children;
863
864	sysctl_ctx = device_get_sysctl_ctx(xbd->xbd_dev);
865	if (sysctl_ctx == NULL)
866		return;
867
868	sysctl_tree = device_get_sysctl_tree(xbd->xbd_dev);
869	if (sysctl_tree == NULL)
870		return;
871
872	children = SYSCTL_CHILDREN(sysctl_tree);
873	SYSCTL_ADD_UINT(sysctl_ctx, children, OID_AUTO,
874	    "max_requests", CTLFLAG_RD, &xbd->xbd_max_requests, -1,
875	    "maximum outstanding requests (negotiated)");
876
877	SYSCTL_ADD_UINT(sysctl_ctx, children, OID_AUTO,
878	    "max_request_segments", CTLFLAG_RD,
879	    &xbd->xbd_max_request_segments, 0,
880	    "maximum number of pages per requests (negotiated)");
881
882	SYSCTL_ADD_UINT(sysctl_ctx, children, OID_AUTO,
883	    "max_request_size", CTLFLAG_RD, &xbd->xbd_max_request_size, 0,
884	    "maximum size in bytes of a request (negotiated)");
885
886	SYSCTL_ADD_UINT(sysctl_ctx, children, OID_AUTO,
887	    "ring_pages", CTLFLAG_RD, &xbd->xbd_ring_pages, 0,
888	    "communication channel pages (negotiated)");
889
890	SYSCTL_ADD_PROC(sysctl_ctx, children, OID_AUTO,
891	    "features", CTLTYPE_STRING|CTLFLAG_RD, xbd, 0,
892	    xbd_sysctl_features, "A", "protocol features (negotiated)");
893}
894
895/*
896 * Translate Linux major/minor to an appropriate name and unit
897 * number. For HVM guests, this allows us to use the same drive names
898 * with blkfront as the emulated drives, easing transition slightly.
899 */
900static void
901xbd_vdevice_to_unit(uint32_t vdevice, int *unit, const char **name)
902{
903	static struct vdev_info {
904		int major;
905		int shift;
906		int base;
907		const char *name;
908	} info[] = {
909		{3,	6,	0,	"ada"},	/* ide0 */
910		{22,	6,	2,	"ada"},	/* ide1 */
911		{33,	6,	4,	"ada"},	/* ide2 */
912		{34,	6,	6,	"ada"},	/* ide3 */
913		{56,	6,	8,	"ada"},	/* ide4 */
914		{57,	6,	10,	"ada"},	/* ide5 */
915		{88,	6,	12,	"ada"},	/* ide6 */
916		{89,	6,	14,	"ada"},	/* ide7 */
917		{90,	6,	16,	"ada"},	/* ide8 */
918		{91,	6,	18,	"ada"},	/* ide9 */
919
920		{8,	4,	0,	"da"},	/* scsi disk0 */
921		{65,	4,	16,	"da"},	/* scsi disk1 */
922		{66,	4,	32,	"da"},	/* scsi disk2 */
923		{67,	4,	48,	"da"},	/* scsi disk3 */
924		{68,	4,	64,	"da"},	/* scsi disk4 */
925		{69,	4,	80,	"da"},	/* scsi disk5 */
926		{70,	4,	96,	"da"},	/* scsi disk6 */
927		{71,	4,	112,	"da"},	/* scsi disk7 */
928		{128,	4,	128,	"da"},	/* scsi disk8 */
929		{129,	4,	144,	"da"},	/* scsi disk9 */
930		{130,	4,	160,	"da"},	/* scsi disk10 */
931		{131,	4,	176,	"da"},	/* scsi disk11 */
932		{132,	4,	192,	"da"},	/* scsi disk12 */
933		{133,	4,	208,	"da"},	/* scsi disk13 */
934		{134,	4,	224,	"da"},	/* scsi disk14 */
935		{135,	4,	240,	"da"},	/* scsi disk15 */
936
937		{202,	4,	0,	"xbd"},	/* xbd */
938
939		{0,	0,	0,	NULL},
940	};
941	int major = vdevice >> 8;
942	int minor = vdevice & 0xff;
943	int i;
944
945	if (vdevice & (1 << 28)) {
946		*unit = (vdevice & ((1 << 28) - 1)) >> 8;
947		*name = "xbd";
948		return;
949	}
950
951	for (i = 0; info[i].major; i++) {
952		if (info[i].major == major) {
953			*unit = info[i].base + (minor >> info[i].shift);
954			*name = info[i].name;
955			return;
956		}
957	}
958
959	*unit = minor >> 4;
960	*name = "xbd";
961}
962
963int
964xbd_instance_create(struct xbd_softc *sc, blkif_sector_t sectors,
965    int vdevice, uint16_t vdisk_info, unsigned long sector_size)
966{
967	char features[80];
968	int unit, error = 0;
969	const char *name;
970
971	xbd_vdevice_to_unit(vdevice, &unit, &name);
972
973	sc->xbd_unit = unit;
974
975	if (strcmp(name, "xbd") != 0)
976		device_printf(sc->xbd_dev, "attaching as %s%d\n", name, unit);
977
978	if (xbd_feature_string(sc, features, sizeof(features)) > 0) {
979		device_printf(sc->xbd_dev, "features: %s\n",
980		    features);
981	}
982
983	sc->xbd_disk = disk_alloc();
984	sc->xbd_disk->d_unit = sc->xbd_unit;
985	sc->xbd_disk->d_open = xbd_open;
986	sc->xbd_disk->d_close = xbd_close;
987	sc->xbd_disk->d_ioctl = xbd_ioctl;
988	sc->xbd_disk->d_strategy = xbd_strategy;
989	sc->xbd_disk->d_dump = xbd_dump;
990	sc->xbd_disk->d_name = name;
991	sc->xbd_disk->d_drv1 = sc;
992	sc->xbd_disk->d_sectorsize = sector_size;
993
994	sc->xbd_disk->d_mediasize = sectors * sector_size;
995	sc->xbd_disk->d_maxsize = sc->xbd_max_request_size;
996	sc->xbd_disk->d_flags = 0;
997	if ((sc->xbd_flags & (XBDF_FLUSH|XBDF_BARRIER)) != 0) {
998		sc->xbd_disk->d_flags |= DISKFLAG_CANFLUSHCACHE;
999		device_printf(sc->xbd_dev,
1000		    "synchronize cache commands enabled.\n");
1001	}
1002	disk_create(sc->xbd_disk, DISK_VERSION);
1003
1004	return error;
1005}
1006
1007static void
1008xbd_free(struct xbd_softc *sc)
1009{
1010	int i;
1011
1012	/* Prevent new requests being issued until we fix things up. */
1013	mtx_lock(&sc->xbd_io_lock);
1014	sc->xbd_state = XBD_STATE_DISCONNECTED;
1015	mtx_unlock(&sc->xbd_io_lock);
1016
1017	/* Free resources associated with old device channel. */
1018	xbd_free_ring(sc);
1019	if (sc->xbd_shadow) {
1020
1021		for (i = 0; i < sc->xbd_max_requests; i++) {
1022			struct xbd_command *cm;
1023
1024			cm = &sc->xbd_shadow[i];
1025			if (cm->cm_sg_refs != NULL) {
1026				free(cm->cm_sg_refs, M_XENBLOCKFRONT);
1027				cm->cm_sg_refs = NULL;
1028			}
1029
1030			bus_dmamap_destroy(sc->xbd_io_dmat, cm->cm_map);
1031		}
1032		free(sc->xbd_shadow, M_XENBLOCKFRONT);
1033		sc->xbd_shadow = NULL;
1034
1035		bus_dma_tag_destroy(sc->xbd_io_dmat);
1036
1037		xbd_initq_cm(sc, XBD_Q_FREE);
1038		xbd_initq_cm(sc, XBD_Q_READY);
1039		xbd_initq_cm(sc, XBD_Q_COMPLETE);
1040	}
1041
1042	xen_intr_unbind(&sc->xen_intr_handle);
1043
1044}
1045
1046/*--------------------------- State Change Handlers --------------------------*/
1047static void
1048xbd_initialize(struct xbd_softc *sc)
1049{
1050	const char *otherend_path;
1051	const char *node_path;
1052	uint32_t max_ring_page_order;
1053	int error;
1054	int i;
1055
1056	if (xenbus_get_state(sc->xbd_dev) != XenbusStateInitialising) {
1057		/* Initialization has already been performed. */
1058		return;
1059	}
1060
1061	/*
1062	 * Protocol defaults valid even if negotiation for a
1063	 * setting fails.
1064	 */
1065	max_ring_page_order = 0;
1066	sc->xbd_ring_pages = 1;
1067	sc->xbd_max_request_segments = BLKIF_MAX_SEGMENTS_PER_HEADER_BLOCK;
1068	sc->xbd_max_request_size =
1069	    XBD_SEGS_TO_SIZE(sc->xbd_max_request_segments);
1070	sc->xbd_max_request_blocks =
1071	    BLKIF_SEGS_TO_BLOCKS(sc->xbd_max_request_segments);
1072
1073	/*
1074	 * Protocol negotiation.
1075	 *
1076	 * \note xs_gather() returns on the first encountered error, so
1077	 *       we must use independant calls in order to guarantee
1078	 *       we don't miss information in a sparsly populated back-end
1079	 *       tree.
1080	 *
1081	 * \note xs_scanf() does not update variables for unmatched
1082	 *	 fields.
1083	 */
1084	otherend_path = xenbus_get_otherend_path(sc->xbd_dev);
1085	node_path = xenbus_get_node(sc->xbd_dev);
1086
1087	/* Support both backend schemes for relaying ring page limits. */
1088	(void)xs_scanf(XST_NIL, otherend_path,
1089	    "max-ring-page-order", NULL, "%" PRIu32,
1090	    &max_ring_page_order);
1091	sc->xbd_ring_pages = 1 << max_ring_page_order;
1092	(void)xs_scanf(XST_NIL, otherend_path,
1093	    "max-ring-pages", NULL, "%" PRIu32,
1094	    &sc->xbd_ring_pages);
1095	if (sc->xbd_ring_pages < 1)
1096		sc->xbd_ring_pages = 1;
1097
1098	sc->xbd_max_requests =
1099	    BLKIF_MAX_RING_REQUESTS(sc->xbd_ring_pages * PAGE_SIZE);
1100	(void)xs_scanf(XST_NIL, otherend_path,
1101	    "max-requests", NULL, "%" PRIu32,
1102	    &sc->xbd_max_requests);
1103
1104	(void)xs_scanf(XST_NIL, otherend_path,
1105	    "max-request-segments", NULL, "%" PRIu32,
1106	    &sc->xbd_max_request_segments);
1107
1108	(void)xs_scanf(XST_NIL, otherend_path,
1109	    "max-request-size", NULL, "%" PRIu32,
1110	    &sc->xbd_max_request_size);
1111
1112	if (sc->xbd_ring_pages > XBD_MAX_RING_PAGES) {
1113		device_printf(sc->xbd_dev,
1114		    "Back-end specified ring-pages of %u "
1115		    "limited to front-end limit of %zu.\n",
1116		    sc->xbd_ring_pages, XBD_MAX_RING_PAGES);
1117		sc->xbd_ring_pages = XBD_MAX_RING_PAGES;
1118	}
1119
1120	if (powerof2(sc->xbd_ring_pages) == 0) {
1121		uint32_t new_page_limit;
1122
1123		new_page_limit = 0x01 << (fls(sc->xbd_ring_pages) - 1);
1124		device_printf(sc->xbd_dev,
1125		    "Back-end specified ring-pages of %u "
1126		    "is not a power of 2. Limited to %u.\n",
1127		    sc->xbd_ring_pages, new_page_limit);
1128		sc->xbd_ring_pages = new_page_limit;
1129	}
1130
1131	if (sc->xbd_max_requests > XBD_MAX_REQUESTS) {
1132		device_printf(sc->xbd_dev,
1133		    "Back-end specified max_requests of %u "
1134		    "limited to front-end limit of %u.\n",
1135		    sc->xbd_max_requests, XBD_MAX_REQUESTS);
1136		sc->xbd_max_requests = XBD_MAX_REQUESTS;
1137	}
1138
1139	if (sc->xbd_max_request_segments > XBD_MAX_SEGMENTS_PER_REQUEST) {
1140		device_printf(sc->xbd_dev,
1141		    "Back-end specified max_request_segments of %u "
1142		    "limited to front-end limit of %u.\n",
1143		    sc->xbd_max_request_segments,
1144		    XBD_MAX_SEGMENTS_PER_REQUEST);
1145		sc->xbd_max_request_segments = XBD_MAX_SEGMENTS_PER_REQUEST;
1146	}
1147
1148	if (sc->xbd_max_request_size > XBD_MAX_REQUEST_SIZE) {
1149		device_printf(sc->xbd_dev,
1150		    "Back-end specified max_request_size of %u "
1151		    "limited to front-end limit of %u.\n",
1152		    sc->xbd_max_request_size,
1153		    XBD_MAX_REQUEST_SIZE);
1154		sc->xbd_max_request_size = XBD_MAX_REQUEST_SIZE;
1155	}
1156
1157 	if (sc->xbd_max_request_size >
1158	    XBD_SEGS_TO_SIZE(sc->xbd_max_request_segments)) {
1159 		device_printf(sc->xbd_dev,
1160		    "Back-end specified max_request_size of %u "
1161		    "limited to front-end limit of %u.  (Too few segments.)\n",
1162		    sc->xbd_max_request_size,
1163		    XBD_SEGS_TO_SIZE(sc->xbd_max_request_segments));
1164 		sc->xbd_max_request_size =
1165 		    XBD_SEGS_TO_SIZE(sc->xbd_max_request_segments);
1166 	}
1167
1168	sc->xbd_max_request_blocks =
1169	    BLKIF_SEGS_TO_BLOCKS(sc->xbd_max_request_segments);
1170
1171	/* Allocate datastructures based on negotiated values. */
1172	error = bus_dma_tag_create(
1173	    bus_get_dma_tag(sc->xbd_dev),	/* parent */
1174	    512, PAGE_SIZE,			/* algnmnt, boundary */
1175	    BUS_SPACE_MAXADDR,			/* lowaddr */
1176	    BUS_SPACE_MAXADDR,			/* highaddr */
1177	    NULL, NULL,				/* filter, filterarg */
1178	    sc->xbd_max_request_size,
1179	    sc->xbd_max_request_segments,
1180	    PAGE_SIZE,				/* maxsegsize */
1181	    BUS_DMA_ALLOCNOW,			/* flags */
1182	    busdma_lock_mutex,			/* lockfunc */
1183	    &sc->xbd_io_lock,			/* lockarg */
1184	    &sc->xbd_io_dmat);
1185	if (error != 0) {
1186		xenbus_dev_fatal(sc->xbd_dev, error,
1187		    "Cannot allocate parent DMA tag\n");
1188		return;
1189	}
1190
1191	/* Per-transaction data allocation. */
1192	sc->xbd_shadow = malloc(sizeof(*sc->xbd_shadow) * sc->xbd_max_requests,
1193	    M_XENBLOCKFRONT, M_NOWAIT|M_ZERO);
1194	if (sc->xbd_shadow == NULL) {
1195		bus_dma_tag_destroy(sc->xbd_io_dmat);
1196		xenbus_dev_fatal(sc->xbd_dev, error,
1197		    "Cannot allocate request structures\n");
1198		return;
1199	}
1200
1201	for (i = 0; i < sc->xbd_max_requests; i++) {
1202		struct xbd_command *cm;
1203
1204		cm = &sc->xbd_shadow[i];
1205		cm->cm_sg_refs = malloc(
1206		    sizeof(grant_ref_t) * sc->xbd_max_request_segments,
1207		    M_XENBLOCKFRONT, M_NOWAIT);
1208		if (cm->cm_sg_refs == NULL)
1209			break;
1210		cm->cm_id = i;
1211		cm->cm_flags = XBDCF_INITIALIZER;
1212		cm->cm_sc = sc;
1213		if (bus_dmamap_create(sc->xbd_io_dmat, 0, &cm->cm_map) != 0)
1214			break;
1215		xbd_free_command(cm);
1216	}
1217
1218	if (xbd_alloc_ring(sc) != 0)
1219		return;
1220
1221	/* Support both backend schemes for relaying ring page limits. */
1222	if (sc->xbd_ring_pages > 1) {
1223		error = xs_printf(XST_NIL, node_path,
1224		    "num-ring-pages","%u",
1225		    sc->xbd_ring_pages);
1226		if (error) {
1227			xenbus_dev_fatal(sc->xbd_dev, error,
1228			    "writing %s/num-ring-pages",
1229			    node_path);
1230			return;
1231		}
1232
1233		error = xs_printf(XST_NIL, node_path,
1234		    "ring-page-order", "%u",
1235		    fls(sc->xbd_ring_pages) - 1);
1236		if (error) {
1237			xenbus_dev_fatal(sc->xbd_dev, error,
1238			    "writing %s/ring-page-order",
1239			    node_path);
1240			return;
1241		}
1242	}
1243
1244	error = xs_printf(XST_NIL, node_path,
1245	    "max-requests","%u",
1246	    sc->xbd_max_requests);
1247	if (error) {
1248		xenbus_dev_fatal(sc->xbd_dev, error,
1249		    "writing %s/max-requests",
1250		    node_path);
1251		return;
1252	}
1253
1254	error = xs_printf(XST_NIL, node_path,
1255	    "max-request-segments","%u",
1256	    sc->xbd_max_request_segments);
1257	if (error) {
1258		xenbus_dev_fatal(sc->xbd_dev, error,
1259		    "writing %s/max-request-segments",
1260		    node_path);
1261		return;
1262	}
1263
1264	error = xs_printf(XST_NIL, node_path,
1265	    "max-request-size","%u",
1266	    sc->xbd_max_request_size);
1267	if (error) {
1268		xenbus_dev_fatal(sc->xbd_dev, error,
1269		    "writing %s/max-request-size",
1270		    node_path);
1271		return;
1272	}
1273
1274	error = xs_printf(XST_NIL, node_path, "event-channel",
1275	    "%u", xen_intr_port(sc->xen_intr_handle));
1276	if (error) {
1277		xenbus_dev_fatal(sc->xbd_dev, error,
1278		    "writing %s/event-channel",
1279		    node_path);
1280		return;
1281	}
1282
1283	error = xs_printf(XST_NIL, node_path, "protocol",
1284	    "%s", XEN_IO_PROTO_ABI_NATIVE);
1285	if (error) {
1286		xenbus_dev_fatal(sc->xbd_dev, error,
1287		    "writing %s/protocol",
1288		    node_path);
1289		return;
1290	}
1291
1292	xenbus_set_state(sc->xbd_dev, XenbusStateInitialised);
1293}
1294
1295/*
1296 * Invoked when the backend is finally 'ready' (and has published
1297 * the details about the physical device - #sectors, size, etc).
1298 */
1299static void
1300xbd_connect(struct xbd_softc *sc)
1301{
1302	device_t dev = sc->xbd_dev;
1303	unsigned long sectors, sector_size;
1304	unsigned int binfo;
1305	int err, feature_barrier, feature_flush;
1306
1307	if (sc->xbd_state == XBD_STATE_CONNECTED ||
1308	    sc->xbd_state == XBD_STATE_SUSPENDED)
1309		return;
1310
1311	DPRINTK("blkfront.c:connect:%s.\n", xenbus_get_otherend_path(dev));
1312
1313	err = xs_gather(XST_NIL, xenbus_get_otherend_path(dev),
1314	    "sectors", "%lu", &sectors,
1315	    "info", "%u", &binfo,
1316	    "sector-size", "%lu", &sector_size,
1317	    NULL);
1318	if (err) {
1319		xenbus_dev_fatal(dev, err,
1320		    "reading backend fields at %s",
1321		    xenbus_get_otherend_path(dev));
1322		return;
1323	}
1324	err = xs_gather(XST_NIL, xenbus_get_otherend_path(dev),
1325	     "feature-barrier", "%lu", &feature_barrier,
1326	     NULL);
1327	if (err == 0 && feature_barrier != 0)
1328		sc->xbd_flags |= XBDF_BARRIER;
1329
1330	err = xs_gather(XST_NIL, xenbus_get_otherend_path(dev),
1331	     "feature-flush-cache", "%lu", &feature_flush,
1332	     NULL);
1333	if (err == 0 && feature_flush != 0)
1334		sc->xbd_flags |= XBDF_FLUSH;
1335
1336	if (sc->xbd_disk == NULL) {
1337		device_printf(dev, "%juMB <%s> at %s",
1338		    (uintmax_t) sectors / (1048576 / sector_size),
1339		    device_get_desc(dev),
1340		    xenbus_get_node(dev));
1341		bus_print_child_footer(device_get_parent(dev), dev);
1342
1343		xbd_instance_create(sc, sectors, sc->xbd_vdevice, binfo,
1344		    sector_size);
1345	}
1346
1347	(void)xenbus_set_state(dev, XenbusStateConnected);
1348
1349	/* Kick pending requests. */
1350	mtx_lock(&sc->xbd_io_lock);
1351	sc->xbd_state = XBD_STATE_CONNECTED;
1352	xbd_startio(sc);
1353	sc->xbd_flags |= XBDF_READY;
1354	mtx_unlock(&sc->xbd_io_lock);
1355}
1356
1357/**
1358 * Handle the change of state of the backend to Closing.  We must delete our
1359 * device-layer structures now, to ensure that writes are flushed through to
1360 * the backend.  Once this is done, we can switch to Closed in
1361 * acknowledgement.
1362 */
1363static void
1364xbd_closing(device_t dev)
1365{
1366	struct xbd_softc *sc = device_get_softc(dev);
1367
1368	xenbus_set_state(dev, XenbusStateClosing);
1369
1370	DPRINTK("xbd_closing: %s removed\n", xenbus_get_node(dev));
1371
1372	if (sc->xbd_disk != NULL) {
1373		disk_destroy(sc->xbd_disk);
1374		sc->xbd_disk = NULL;
1375	}
1376
1377	xenbus_set_state(dev, XenbusStateClosed);
1378}
1379
1380/*---------------------------- NewBus Entrypoints ----------------------------*/
1381static int
1382xbd_probe(device_t dev)
1383{
1384	if (strcmp(xenbus_get_type(dev), "vbd") != 0)
1385		return (ENXIO);
1386
1387	if (xen_hvm_domain()) {
1388		int error;
1389		char *type;
1390
1391		/*
1392		 * When running in an HVM domain, IDE disk emulation is
1393		 * disabled early in boot so that native drivers will
1394		 * not see emulated hardware.  However, CDROM device
1395		 * emulation cannot be disabled.
1396		 *
1397		 * Through use of FreeBSD's vm_guest and xen_hvm_domain()
1398		 * APIs, we could modify the native CDROM driver to fail its
1399		 * probe when running under Xen.  Unfortunatlely, the PV
1400		 * CDROM support in XenServer (up through at least version
1401		 * 6.2) isn't functional, so we instead rely on the emulated
1402		 * CDROM instance, and fail to attach the PV one here in
1403		 * the blkfront driver.
1404		 */
1405		error = xs_read(XST_NIL, xenbus_get_node(dev),
1406		    "device-type", NULL, (void **) &type);
1407		if (error)
1408			return (ENXIO);
1409
1410		if (strncmp(type, "cdrom", 5) == 0) {
1411			free(type, M_XENSTORE);
1412			return (ENXIO);
1413		}
1414		free(type, M_XENSTORE);
1415	}
1416
1417	device_set_desc(dev, "Virtual Block Device");
1418	device_quiet(dev);
1419	return (0);
1420}
1421
1422/*
1423 * Setup supplies the backend dir, virtual device.  We place an event
1424 * channel and shared frame entries.  We watch backend to wait if it's
1425 * ok.
1426 */
1427static int
1428xbd_attach(device_t dev)
1429{
1430	struct xbd_softc *sc;
1431	const char *name;
1432	uint32_t vdevice;
1433	int error;
1434	int i;
1435	int unit;
1436
1437	/* FIXME: Use dynamic device id if this is not set. */
1438	error = xs_scanf(XST_NIL, xenbus_get_node(dev),
1439	    "virtual-device", NULL, "%" PRIu32, &vdevice);
1440	if (error)
1441		error = xs_scanf(XST_NIL, xenbus_get_node(dev),
1442		    "virtual-device-ext", NULL, "%" PRIu32, &vdevice);
1443	if (error) {
1444		xenbus_dev_fatal(dev, error, "reading virtual-device");
1445		device_printf(dev, "Couldn't determine virtual device.\n");
1446		return (error);
1447	}
1448
1449	xbd_vdevice_to_unit(vdevice, &unit, &name);
1450	if (!strcmp(name, "xbd"))
1451		device_set_unit(dev, unit);
1452
1453	sc = device_get_softc(dev);
1454	mtx_init(&sc->xbd_io_lock, "blkfront i/o lock", NULL, MTX_DEF);
1455	xbd_initqs(sc);
1456	for (i = 0; i < XBD_MAX_RING_PAGES; i++)
1457		sc->xbd_ring_ref[i] = GRANT_REF_INVALID;
1458
1459	sc->xbd_dev = dev;
1460	sc->xbd_vdevice = vdevice;
1461	sc->xbd_state = XBD_STATE_DISCONNECTED;
1462
1463	xbd_setup_sysctl(sc);
1464
1465	/* Wait for backend device to publish its protocol capabilities. */
1466	xenbus_set_state(dev, XenbusStateInitialising);
1467
1468	return (0);
1469}
1470
1471static int
1472xbd_detach(device_t dev)
1473{
1474	struct xbd_softc *sc = device_get_softc(dev);
1475
1476	DPRINTK("%s: %s removed\n", __func__, xenbus_get_node(dev));
1477
1478	xbd_free(sc);
1479	mtx_destroy(&sc->xbd_io_lock);
1480
1481	return 0;
1482}
1483
1484static int
1485xbd_suspend(device_t dev)
1486{
1487	struct xbd_softc *sc = device_get_softc(dev);
1488	int retval;
1489	int saved_state;
1490
1491	/* Prevent new requests being issued until we fix things up. */
1492	mtx_lock(&sc->xbd_io_lock);
1493	saved_state = sc->xbd_state;
1494	sc->xbd_state = XBD_STATE_SUSPENDED;
1495
1496	/* Wait for outstanding I/O to drain. */
1497	retval = 0;
1498	while (xbd_queue_length(sc, XBD_Q_BUSY) != 0) {
1499		if (msleep(&sc->xbd_cm_q[XBD_Q_BUSY], &sc->xbd_io_lock,
1500		    PRIBIO, "blkf_susp", 30 * hz) == EWOULDBLOCK) {
1501			retval = EBUSY;
1502			break;
1503		}
1504	}
1505	mtx_unlock(&sc->xbd_io_lock);
1506
1507	if (retval != 0)
1508		sc->xbd_state = saved_state;
1509
1510	return (retval);
1511}
1512
1513static int
1514xbd_resume(device_t dev)
1515{
1516	struct xbd_softc *sc = device_get_softc(dev);
1517
1518	DPRINTK("xbd_resume: %s\n", xenbus_get_node(dev));
1519
1520	xbd_free(sc);
1521	xbd_initialize(sc);
1522	return (0);
1523}
1524
1525/**
1526 * Callback received when the backend's state changes.
1527 */
1528static void
1529xbd_backend_changed(device_t dev, XenbusState backend_state)
1530{
1531	struct xbd_softc *sc = device_get_softc(dev);
1532
1533	DPRINTK("backend_state=%d\n", backend_state);
1534
1535	switch (backend_state) {
1536	case XenbusStateUnknown:
1537	case XenbusStateInitialising:
1538	case XenbusStateReconfigured:
1539	case XenbusStateReconfiguring:
1540	case XenbusStateClosed:
1541		break;
1542
1543	case XenbusStateInitWait:
1544	case XenbusStateInitialised:
1545		xbd_initialize(sc);
1546		break;
1547
1548	case XenbusStateConnected:
1549		xbd_initialize(sc);
1550		xbd_connect(sc);
1551		break;
1552
1553	case XenbusStateClosing:
1554		if (sc->xbd_users > 0)
1555			xenbus_dev_error(dev, -EBUSY,
1556			    "Device in use; refusing to close");
1557		else
1558			xbd_closing(dev);
1559		break;
1560	}
1561}
1562
1563/*---------------------------- NewBus Registration ---------------------------*/
1564static device_method_t xbd_methods[] = {
1565	/* Device interface */
1566	DEVMETHOD(device_probe,         xbd_probe),
1567	DEVMETHOD(device_attach,        xbd_attach),
1568	DEVMETHOD(device_detach,        xbd_detach),
1569	DEVMETHOD(device_shutdown,      bus_generic_shutdown),
1570	DEVMETHOD(device_suspend,       xbd_suspend),
1571	DEVMETHOD(device_resume,        xbd_resume),
1572
1573	/* Xenbus interface */
1574	DEVMETHOD(xenbus_otherend_changed, xbd_backend_changed),
1575
1576	{ 0, 0 }
1577};
1578
1579static driver_t xbd_driver = {
1580	"xbd",
1581	xbd_methods,
1582	sizeof(struct xbd_softc),
1583};
1584devclass_t xbd_devclass;
1585
1586DRIVER_MODULE(xbd, xenbusb_front, xbd_driver, xbd_devclass, 0, 0);
1587