1. 05 12月, 2009 2 次提交
    • R
      [SCSI] libfc: Add libfc/fc_libfc.[ch] for libfc internal routines · 8866a5d9
      Robert Love 提交于
      include/scsi/libfc.h is currently loaded with common code
      shared between libfc's sub-modules as well as shared between
      libfc and fcoe. Previous patches attempted to move out
      non-common code. This patch creates two files for common
      libfc routines that will not be shared with fcoe, fnic or
      any other LLDs.
      Signed-off-by: NRobert Love <robert.w.love@intel.com>
      Signed-off-by: NJames Bottomley <James.Bottomley@suse.de>
      8866a5d9
    • C
      [SCSI] libfc: fix memory corruption caused by double frees and bad error handling · 8f550f93
      Chris Leech 提交于
      I was running into several different panics under stress, which I traced down
      to a few different possible slab corruption issues in error handling paths.
      I have not yet looked into why these exchange sends fail, but with these
      fixes my test system is much more stable under stress than before.
      
      fc_elsct_send() could fail and either leave the passed in frame intact
      (failure in fc_ct/els_fill) or the frame could have been freed if the
      failure was is fc_exch_seq_send().  The caller had no way of knowing, and
      there was a potential double free in the error handling in fc_fcp_rec().
      
      Make fc_elsct_send() always free the frame before returning, and remove the
      fc_frame_free() call in fc_fcp_rec().
      
      While fc_exch_seq_send() did always consume the frame, there were double free
      bugs in the error handling of fc_fcp_cmd_send() and fc_fcp_srr() as well.
      
      Numerous calls to error handling routines (fc_disc_error(),
      fc_lport_error(), fc_rport_error_retry() ) were passing in a frame pointer that
      had already been freed in the case of an error.  I have changed the call
      sites to pass in a NULL pointer, but there may be more appropriate error
      codes to use.
      
      Question:  Why do these error routines take a frame pointer anyway?  I
      understand passing in a pointer encoded error to the response handlers, but
      the error routines take no action on a valid pointer and should never be
      called that way.
      Signed-off-by: NChris Leech <christopher.leech@intel.com>
      Signed-off-by: NRobert Love <robert.w.love@intel.com>
      Signed-off-by: NJames Bottomley <James.Bottomley@suse.de>
      8f550f93
  2. 11 9月, 2009 24 次提交
  3. 22 6月, 2009 1 次提交
  4. 27 4月, 2009 2 次提交
    • A
      [SCSI] libfc: Track rogue remote ports · b4c6f546
      Abhijeet Joglekar 提交于
      Rogue ports are currently not tracked on any list. The only reference
      to them is through any outstanding exchanges pending on the rogue ports.
      If the module is removed while a retry is set on a rogue port
      (say a Plogi retry for instance), this retry is not cancelled because there
      is no reference to the rogue port in the discovery rports list. Thus the
      local port can clean itself up, delete the exchange pool, and then the
      rogue port timeout can fire and try to start up another exchange.
      
      This patch tracks the rogue ports in a new list disc->rogue_rports. Creating
      a new list instead of using the disc->rports list keeps remote port code
      change to a minimum.
      
      1)  Whenever a rogue port is created, it is immediately added to the
      disc->rogue_rports list.
      
      2) When the rogues port goes to ready, it is removed from the rogue list
      and the real remote port is added to the disc->rports list
      
      3) The removal of the rogue from the disc->rogue_rports list is done in
      the context of the fc_rport_work() workQ thread in discovery callback.
      
      4) Real rports are removed from the disc->rports list like before. Lookup
      is done only in the real rports list. This avoids making large changes
      to the remote port code.
      
      5) In fc_disc_stop_rports, the rogues list is traversed in addition to the
      real list to stop the rogue ports and issue logoffs on them. This way, rogue
      ports get cleaned up when the local port goes away.
      
      6) rogue remote ports are not removed from the list right away, but
      removed late in fc_rport_work() context, multiple threads can find the same
      remote port in the list and call rport_logoff(). Rport_logoff() only
      continues with the logoff if port is not in NONE state, thus preventing
      multiple logoffs and multiple list deletions.
      
      7) Since the rport is removed from the disc list at a later stage
      (in the disc callback), incoming frames can find the rport even if
      rport_logoff() has been called on the rport. When rport_logoff() is called,
      the rport state is set to NONE, and we are trying to cancel all exchanges
      and retries on that port. While in this state, if an incoming
      Plogi/Prli/Logo or other frames match the rport, we should not reply
      because the rport is in the NONE state. Just drop the frame, since the
      rport will be deleted soon in the disc callback (fc_rport_work)
      
      8)  In fc_disc_single(), remove rport lookup and call to fc_disc_del_target.
      fc_disc_single() is called from recv_rscn_req() where rport lookup
      and rport_logoff is already done.
      Signed-off-by: NAbhijeet Joglekar <abjoglek@cisco.com>
      Signed-off-by: NRobert Love <robert.w.love@intel.com>
      Signed-off-by: NJames Bottomley <James.Bottomley@HansenPartnership.com>
      b4c6f546
    • A
      [SCSI] libfc: Hold disc mutex while processing gpn ft resp · 0d228c0f
      Abhijeet Joglekar 提交于
      gpn_ft_resp processing currently does not hold the discovery lock.
      disc_done() thus gets called from gpn_ft_resp or from gpn_ft_parse
      without the lock held. This then sets disc->pending to zero or calls
      gpn_ft_req() without disc_lock held.
      
      - Hold disc mutex during gpn_ft resp processing
      - In disc_done, release the disc mutex while calling lport callback
      Signed-off-by: NAbhijeet Joglekar <abjoglek@cisco.com>
      Signed-off-by: NRobert Love <robert.w.love@intel.com>
      Signed-off-by: NJames Bottomley <James.Bottomley@HansenPartnership.com>
      0d228c0f
  5. 10 3月, 2009 1 次提交
    • R
      [SCSI] libfc, fcoe: Fix kerneldoc comments · 34f42a07
      Robert Love 提交于
      1) Added '()' for function names in kerneldoc comments
      
      2) Changed comment bookends from '**/' to '*/'. The comment on the the
         mailing list was that '**/' "is consistently unconventional.  Not
         wrong, just odd." The Documentation/kernel-doc-nano-HOWTO.txt
         states that kerneldoc comment blocks should end with '**/' but most
         (if not all) instance I found under drivers/scsi/ were only using
         the '*/' so I converted to that style.
      
      3) Removed incorrect linebreaks in kerneldoc comments where found
      
      4) Removed a few unnecessary blank comment lines in kerneldoc comment
         blocks
      Signed-off-by: NRobert Love <robert.w.love@intel.com>
      Signed-off-by: NJames Bottomley <James.Bottomley@HansenPartnership.com>
      34f42a07
  6. 07 3月, 2009 3 次提交
  7. 30 12月, 2008 1 次提交
    • R
      [SCSI] libfc: A modular Fibre Channel library · 42e9a92f
      Robert Love 提交于
      libFC is composed of 4 blocks supported by an exchange manager
      and a framing library. The upper 4 layers are fc_lport, fc_disc,
      fc_rport and fc_fcp. A LLD that uses libfc could choose to
      either use libfc's block, or using the transport template
      defined in libfc.h, override one or more blocks with its own
      implementation.
      
      The EM (Exchange Manager) manages exhcanges/sequences for all
      commands- ELS, CT and FCP.
      
      The framing library frames ELS and CT commands.
      
      The fc_lport block manages the library's representation of the
      host's FC enabled ports.
      
      The fc_disc block manages discovery of targets as well as
      handling changes that occur in the FC fabric (via. RSCN events).
      
      The fc_rport block manages the library's representation of other
      entities in the FC fabric. Currently the library uses this block
      for targets, its peer when in point-to-point mode and the
      directory server, but can be extended for other entities if
      needed.
      
      The fc_fcp block interacts with the scsi-ml and handles all
      I/O.
      Signed-off-by: NRobert Love <robert.w.love@intel.com>
      [jejb: added include of delay.h to fix ppc64 compile prob spotted by sfr]
      Signed-off-by: NJames Bottomley <James.Bottomley@HansenPartnership.com>
      42e9a92f