linux-stable/include/linux/usb/uas.h

110 lines
2 KiB
C
Raw Normal View History

#ifndef __USB_UAS_H__
#define __USB_UAS_H__
#include <scsi/scsi.h>
#include <scsi/scsi_cmnd.h>
/* Common header for all IUs */
struct iu {
__u8 iu_id;
__u8 rsvd1;
__be16 tag;
} __attribute__((__packed__));
enum {
IU_ID_COMMAND = 0x01,
IU_ID_STATUS = 0x03,
IU_ID_RESPONSE = 0x04,
IU_ID_TASK_MGMT = 0x05,
IU_ID_READ_READY = 0x06,
IU_ID_WRITE_READY = 0x07,
};
enum {
TMF_ABORT_TASK = 0x01,
TMF_ABORT_TASK_SET = 0x02,
TMF_CLEAR_TASK_SET = 0x04,
TMF_LOGICAL_UNIT_RESET = 0x08,
TMF_I_T_NEXUS_RESET = 0x10,
TMF_CLEAR_ACA = 0x40,
TMF_QUERY_TASK = 0x80,
TMF_QUERY_TASK_SET = 0x81,
TMF_QUERY_ASYNC_EVENT = 0x82,
};
enum {
RC_TMF_COMPLETE = 0x00,
RC_INVALID_INFO_UNIT = 0x02,
RC_TMF_NOT_SUPPORTED = 0x04,
RC_TMF_FAILED = 0x05,
RC_TMF_SUCCEEDED = 0x08,
RC_INCORRECT_LUN = 0x09,
RC_OVERLAPPED_TAG = 0x0a,
};
struct command_iu {
__u8 iu_id;
__u8 rsvd1;
__be16 tag;
__u8 prio_attr;
__u8 rsvd5;
__u8 len;
__u8 rsvd7;
struct scsi_lun lun;
__u8 cdb[16]; /* XXX: Overflow-checking tools may misunderstand */
} __attribute__((__packed__));
struct task_mgmt_iu {
__u8 iu_id;
__u8 rsvd1;
__be16 tag;
__u8 function;
__u8 rsvd2;
__be16 task_tag;
struct scsi_lun lun;
} __attribute__((__packed__));
/*
* Also used for the Read Ready and Write Ready IUs since they have the
* same first four bytes
*/
struct sense_iu {
__u8 iu_id;
__u8 rsvd1;
__be16 tag;
__be16 status_qual;
__u8 status;
__u8 rsvd7[7];
__be16 len;
__u8 sense[SCSI_SENSE_BUFFERSIZE];
} __attribute__((__packed__));
struct response_iu {
__u8 iu_id;
__u8 rsvd1;
__be16 tag;
uas: Fix response iu struct definition The response iu struct before this patch has a size of 7 bytes (discounting padding), which is weird since all other iu-s are explictly padded to a multiple of 4 bytes. More over submitting a 7 byte bulk transfer to the status endpoint when expecting a response iu results in an USB babble error, as the device actually sends 8 bytes. Up on closer reading of the UAS spec: http://www.t10.org/cgi-bin/ac.pl?t=f&f=uas2r00.pdf The reason for this becomes clear, the 2 entries in "Table 17 — RESPONSE IU" are numbered 4 and 6, looking at other iu definitions in the spec, esp. multi-byte fields, this indicates that the ADDITIONAL RESPONSE INFORMATION field is not a 2 byte field as one might assume at a first look, but is a multi-byte field containing 3 bytes. This also aligns with the SCSI Architecture Model 4 spec, which UAS is based on which states in paragraph "7.1 Task management function procedure calls" that the "Additional Response Information" output argument for a Task management function procedure call is 3 bytes. Last but not least I've verified this by sending a logical unit reset task management call with an invalid lun to an actual uasp device, and received back a response-iu with byte 6 being 0, and byte 7 being 9, which is the responce code for an invalid iu, which confirms that the response code is being reported in byte 7 of the response iu rather then in byte 6. Things were working before despite this error in the response iu struct definition because the additional response info field is normally filled with zeros, and 0 is the response code value for success. Signed-off-by: Hans de Goede <hdegoede@redhat.com> Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
2013-10-31 08:59:12 +00:00
__u8 add_response_info[3];
__u8 response_code;
} __attribute__((__packed__));
struct usb_pipe_usage_descriptor {
__u8 bLength;
__u8 bDescriptorType;
__u8 bPipeID;
__u8 Reserved;
} __attribute__((__packed__));
enum {
CMD_PIPE_ID = 1,
STATUS_PIPE_ID = 2,
DATA_IN_PIPE_ID = 3,
DATA_OUT_PIPE_ID = 4,
UAS_SIMPLE_TAG = 0,
UAS_HEAD_TAG = 1,
UAS_ORDERED_TAG = 2,
UAS_ACA = 4,
};
#endif