Linux Audio

Check our new training course

Loading...
v3.1
   1/*
   2 * Adaptec U320 device driver firmware for Linux and FreeBSD.
   3 *
   4 * Copyright (c) 1994-2001, 2004 Justin T. Gibbs.
   5 * Copyright (c) 2000-2002 Adaptec Inc.
   6 * All rights reserved.
   7 *
   8 * Redistribution and use in source and binary forms, with or without
   9 * modification, are permitted provided that the following conditions
  10 * are met:
  11 * 1. Redistributions of source code must retain the above copyright
  12 *    notice, this list of conditions, and the following disclaimer,
  13 *    without modification.
  14 * 2. Redistributions in binary form must reproduce at minimum a disclaimer
  15 *    substantially similar to the "NO WARRANTY" disclaimer below
  16 *    ("Disclaimer") and any redistribution must be conditioned upon
  17 *    including a substantially similar Disclaimer requirement for further
  18 *    binary redistribution.
  19 * 3. Neither the names of the above-listed copyright holders nor the names
  20 *    of any contributors may be used to endorse or promote products derived
  21 *    from this software without specific prior written permission.
  22 *
  23 * Alternatively, this software may be distributed under the terms of the
  24 * GNU General Public License ("GPL") version 2 as published by the Free
  25 * Software Foundation.
  26 *
  27 * NO WARRANTY
  28 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  29 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  30 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR
  31 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  32 * HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  33 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  34 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  35 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  36 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
  37 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  38 * POSSIBILITY OF SUCH DAMAGES.
  39 *
  40 * $FreeBSD$
  41 */
  42
  43VERSION = "$Id: //depot/aic7xxx/aic7xxx/aic79xx.seq#120 $"
  44PATCH_ARG_LIST = "struct ahd_softc *ahd"
  45PREFIX = "ahd_"
  46
  47#include "aic79xx.reg"
  48#include "scsi_message.h"
  49
  50restart:
  51if ((ahd->bugs & AHD_INTCOLLISION_BUG) != 0) {
  52	test	SEQINTCODE, 0xFF jz idle_loop;
  53	SET_SEQINTCODE(NO_SEQINT)
  54}
  55
  56idle_loop:
  57
  58	if ((ahd->bugs & AHD_INTCOLLISION_BUG) != 0) {
  59		/*
  60		 * Convert ERROR status into a sequencer
  61		 * interrupt to handle the case of an
  62		 * interrupt collision on the hardware
  63		 * setting of HWERR.
  64		 */
  65		test	ERROR, 0xFF jz no_error_set;
  66		SET_SEQINTCODE(SAW_HWERR)
  67no_error_set:
  68	}
  69	SET_MODE(M_SCSI, M_SCSI)
  70	test	SCSISEQ0, ENSELO|ENARBO jnz idle_loop_checkbus;
  71	test	SEQ_FLAGS2, SELECTOUT_QFROZEN jz check_waiting_list;
  72	/*
  73	 * If the kernel has caught up with us, thaw the queue.
  74	 */
  75	mov	A, KERNEL_QFREEZE_COUNT;
  76	cmp	QFREEZE_COUNT, A jne check_frozen_completions;
  77	mov	A, KERNEL_QFREEZE_COUNT[1];
  78	cmp	QFREEZE_COUNT[1], A jne check_frozen_completions;
  79	and	SEQ_FLAGS2, ~SELECTOUT_QFROZEN;
  80	jmp	check_waiting_list;
  81check_frozen_completions:
  82	test	SSTAT0, SELDO|SELINGO jnz idle_loop_checkbus;
  83BEGIN_CRITICAL;
  84	/*
  85	 * If we have completions stalled waiting for the qfreeze
  86	 * to take effect, move them over to the complete_scb list
  87	 * now that no selections are pending.
  88	 */
  89	cmp	COMPLETE_ON_QFREEZE_HEAD[1],SCB_LIST_NULL je idle_loop_checkbus;
  90	/*
  91	 * Find the end of the qfreeze list.  The first element has
  92	 * to be treated specially.
  93	 */
  94	bmov	SCBPTR, COMPLETE_ON_QFREEZE_HEAD, 2;
  95	cmp 	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL je join_lists;
  96	/*
  97	 * Now the normal loop.
  98	 */
  99	bmov	SCBPTR, SCB_NEXT_COMPLETE, 2;
 100	cmp 	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL jne . - 1;
 101join_lists:
 102	bmov	SCB_NEXT_COMPLETE, COMPLETE_SCB_HEAD, 2;
 103	bmov	COMPLETE_SCB_HEAD, COMPLETE_ON_QFREEZE_HEAD, 2;
 104	mvi	COMPLETE_ON_QFREEZE_HEAD[1], SCB_LIST_NULL;
 105	jmp	idle_loop_checkbus;
 106check_waiting_list:
 107	cmp	WAITING_TID_HEAD[1], SCB_LIST_NULL je idle_loop_checkbus;
 108	/*
 109	 * ENSELO is cleared by a SELDO, so we must test for SELDO
 110	 * one last time.
 111	 */
 112	test	SSTAT0, SELDO jnz select_out;
 113	call	start_selection;
 114idle_loop_checkbus:
 115	test	SSTAT0, SELDO jnz select_out;
 116END_CRITICAL;
 117	test	SSTAT0, SELDI jnz select_in;
 118	test	SCSIPHASE, ~DATA_PHASE_MASK jz idle_loop_check_nonpackreq;
 119	test	SCSISIGO, ATNO jz idle_loop_check_nonpackreq;
 120	call	unexpected_nonpkt_phase_find_ctxt;
 121idle_loop_check_nonpackreq:
 122	test	SSTAT2, NONPACKREQ jz . + 2;
 123	call	unexpected_nonpkt_phase_find_ctxt;
 124	if ((ahd->bugs & AHD_FAINT_LED_BUG) != 0) {
 125		/*
 126		 * On Rev A. hardware, the busy LED is only
 127		 * turned on automaically during selections
 128		 * and re-selections.  Make the LED status
 129		 * more useful by forcing it to be on so
 130		 * long as one of our data FIFOs is active.
 131		 */
 132		and	A, FIFO0FREE|FIFO1FREE, DFFSTAT;
 133		cmp	A, FIFO0FREE|FIFO1FREE jne . + 3;
 134		and	SBLKCTL, ~DIAGLEDEN|DIAGLEDON;
 135		jmp	. + 2;
 136		or	SBLKCTL, DIAGLEDEN|DIAGLEDON;
 137	}
 138	call	idle_loop_gsfifo_in_scsi_mode;
 139	call	idle_loop_service_fifos;
 140	call	idle_loop_cchan;
 141	jmp	idle_loop;
 142
 143idle_loop_gsfifo:
 144	SET_MODE(M_SCSI, M_SCSI)
 145BEGIN_CRITICAL;
 146idle_loop_gsfifo_in_scsi_mode:
 147	test	LQISTAT2, LQIGSAVAIL jz return;
 148	/*
 149	 * We have received good status for this transaction.  There may
 150	 * still be data in our FIFOs draining to the host.  Complete
 151	 * the SCB only if all data has transferred to the host.
 152	 */
 153good_status_IU_done:
 154	bmov	SCBPTR, GSFIFO, 2;
 155	clr	SCB_SCSI_STATUS;
 156	/*
 157	 * If a command completed before an attempted task management
 158	 * function completed, notify the host after disabling any
 159	 * pending select-outs.
 160	 */
 161	test	SCB_TASK_MANAGEMENT, 0xFF jz gsfifo_complete_normally;
 162	test	SSTAT0, SELDO|SELINGO jnz . + 2;
 163	and	SCSISEQ0, ~ENSELO;
 164	SET_SEQINTCODE(TASKMGMT_CMD_CMPLT_OKAY)
 165gsfifo_complete_normally:
 166	or	SCB_CONTROL, STATUS_RCVD;
 167
 168	/*
 169	 * Since this status did not consume a FIFO, we have to
 170	 * be a bit more dilligent in how we check for FIFOs pertaining
 171	 * to this transaction.  There are two states that a FIFO still
 172	 * transferring data may be in.
 173	 *
 174	 * 1) Configured and draining to the host, with a FIFO handler.
 175	 * 2) Pending cfg4data, fifo not empty.
 176	 *
 177	 * Case 1 can be detected by noticing a non-zero FIFO active
 178	 * count in the SCB.  In this case, we allow the routine servicing
 179	 * the FIFO to complete the SCB.
 180	 * 
 181	 * Case 2 implies either a pending or yet to occur save data
 182	 * pointers for this same context in the other FIFO.  So, if
 183	 * we detect case 1, we will properly defer the post of the SCB
 184	 * and achieve the desired result.  The pending cfg4data will
 185	 * notice that status has been received and complete the SCB.
 186	 */
 187	test	SCB_FIFO_USE_COUNT, 0xFF jnz idle_loop_gsfifo_in_scsi_mode;
 188	call	complete;
 189END_CRITICAL;
 190	jmp	idle_loop_gsfifo_in_scsi_mode;
 191
 192idle_loop_service_fifos:
 193	SET_MODE(M_DFF0, M_DFF0)
 194BEGIN_CRITICAL;
 195	test	LONGJMP_ADDR[1], INVALID_ADDR jnz idle_loop_next_fifo;
 196	call	longjmp;
 197END_CRITICAL;
 198idle_loop_next_fifo:
 199	SET_MODE(M_DFF1, M_DFF1)
 200BEGIN_CRITICAL;
 201	test	LONGJMP_ADDR[1], INVALID_ADDR jz longjmp;
 202END_CRITICAL;
 203return:
 204	ret;
 205
 206idle_loop_cchan:
 207	SET_MODE(M_CCHAN, M_CCHAN)
 208	test	QOFF_CTLSTA, HS_MAILBOX_ACT jz	hs_mailbox_empty;
 209	or	QOFF_CTLSTA, HS_MAILBOX_ACT;
 210	mov	LOCAL_HS_MAILBOX, HS_MAILBOX;
 211hs_mailbox_empty:
 212BEGIN_CRITICAL;
 213	test	CCSCBCTL, CCARREN|CCSCBEN jz scbdma_idle;
 214	test	CCSCBCTL, CCSCBDIR jnz fetch_new_scb_inprog;
 215	test	CCSCBCTL, CCSCBDONE jz return;
 216	/* FALLTHROUGH */
 217scbdma_tohost_done:
 218	test	CCSCBCTL, CCARREN jz fill_qoutfifo_dmadone;
 219	/*
 220	 * An SCB has been successfully uploaded to the host.
 221	 * If the SCB was uploaded for some reason other than
 222	 * bad SCSI status (currently only for underruns), we
 223	 * queue the SCB for normal completion.  Otherwise, we
 224	 * wait until any select-out activity has halted, and
 225	 * then queue the completion.
 226	 */
 227	and	CCSCBCTL, ~(CCARREN|CCSCBEN);
 228	bmov	COMPLETE_DMA_SCB_HEAD, SCB_NEXT_COMPLETE, 2;
 229	cmp	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL jne . + 2;
 230	mvi	COMPLETE_DMA_SCB_TAIL[1], SCB_LIST_NULL;
 231	test	SCB_SCSI_STATUS, 0xff jz scbdma_queue_completion;
 232	bmov	SCB_NEXT_COMPLETE, COMPLETE_ON_QFREEZE_HEAD, 2;
 233	bmov	COMPLETE_ON_QFREEZE_HEAD, SCBPTR, 2 ret;
 234scbdma_queue_completion:
 235	bmov	SCB_NEXT_COMPLETE, COMPLETE_SCB_HEAD, 2;
 236	bmov	COMPLETE_SCB_HEAD, SCBPTR, 2 ret;
 237fill_qoutfifo_dmadone:
 238	and	CCSCBCTL, ~(CCARREN|CCSCBEN);
 239	call	qoutfifo_updated;
 240	mvi	COMPLETE_SCB_DMAINPROG_HEAD[1], SCB_LIST_NULL;
 241	bmov	QOUTFIFO_NEXT_ADDR, SCBHADDR, 4;
 242	test	QOFF_CTLSTA, SDSCB_ROLLOVR jz return;
 243	bmov	QOUTFIFO_NEXT_ADDR, SHARED_DATA_ADDR, 4;
 244	xor	QOUTFIFO_ENTRY_VALID_TAG, QOUTFIFO_ENTRY_VALID_TOGGLE ret;
 245END_CRITICAL;
 246
 247qoutfifo_updated:
 248	/*
 249	 * If there are more commands waiting to be dma'ed
 250	 * to the host, always coalesce.  Otherwise honor the
 251	 * host's wishes.
 252	 */
 253	cmp	COMPLETE_DMA_SCB_HEAD[1], SCB_LIST_NULL jne coalesce_by_count;
 254	cmp	COMPLETE_SCB_HEAD[1], SCB_LIST_NULL jne coalesce_by_count;
 255	test	LOCAL_HS_MAILBOX, ENINT_COALESCE jz issue_cmdcmplt;
 256
 257	/*
 258	 * If we have relatively few commands outstanding, don't
 259	 * bother waiting for another command to complete.
 260	 */
 261	test	CMDS_PENDING[1], 0xFF jnz coalesce_by_count;
 262	/* Add -1 so that jnc means <= not just < */
 263	add	A, -1, INT_COALESCING_MINCMDS;
 264	add	NONE, A, CMDS_PENDING;
 265	jnc	issue_cmdcmplt;
 266	
 267	/*
 268	 * If coalescing, only coalesce up to the limit
 269	 * provided by the host driver.
 270	 */
 271coalesce_by_count:
 272	mov	A, INT_COALESCING_MAXCMDS;
 273	add	NONE, A, INT_COALESCING_CMDCOUNT;
 274	jc	issue_cmdcmplt;
 275	/*
 276	 * If the timer is not currently active,
 277	 * fire it up.
 278	 */
 279	test	INTCTL, SWTMINTMASK jz return;
 280	bmov	SWTIMER, INT_COALESCING_TIMER, 2;
 281	mvi	CLRSEQINTSTAT, CLRSEQ_SWTMRTO;
 282	or	INTCTL, SWTMINTEN|SWTIMER_START;
 283	and	INTCTL, ~SWTMINTMASK ret;
 284
 285issue_cmdcmplt:
 286	mvi	INTSTAT, CMDCMPLT;
 287	clr	INT_COALESCING_CMDCOUNT;
 288	or	INTCTL, SWTMINTMASK ret;
 289
 290BEGIN_CRITICAL;
 291fetch_new_scb_inprog:
 292	test	CCSCBCTL, ARRDONE jz return;
 293fetch_new_scb_done:
 294	and	CCSCBCTL, ~(CCARREN|CCSCBEN);
 295	clr	A;
 296	add	CMDS_PENDING, 1;
 297	adc	CMDS_PENDING[1], A;
 298	if ((ahd->bugs & AHD_PKT_LUN_BUG) != 0) {
 299		/*
 300		 * "Short Luns" are not placed into outgoing LQ
 301		 * packets in the correct byte order.  Use a full
 302		 * sized lun field instead and fill it with the
 303		 * one byte of lun information we support.
 304		 */
 305		mov	SCB_PKT_LUN[6], SCB_LUN;
 306	}
 307	/*
 308	 * The FIFO use count field is shared with the
 309	 * tag set by the host so that our SCB dma engine
 310	 * knows the correct location to store the SCB.
 311	 * Set it to zero before processing the SCB.
 312	 */
 313	clr	SCB_FIFO_USE_COUNT;
 314	/* Update the next SCB address to download. */
 315	bmov	NEXT_QUEUED_SCB_ADDR, SCB_NEXT_SCB_BUSADDR, 4;
 316	/*
 317	 * NULL out the SCB links since these fields
 318	 * occupy the same location as SCB_NEXT_SCB_BUSADDR.
 319	 */
 320	mvi	SCB_NEXT[1], SCB_LIST_NULL;
 321	mvi	SCB_NEXT2[1], SCB_LIST_NULL;
 322	/* Increment our position in the QINFIFO. */
 323	mov	NONE, SNSCB_QOFF;
 324
 325	/*
 326	 * Save SCBID of this SCB in REG0 since
 327	 * SCBPTR will be clobbered during target
 328	 * list updates.  We also record the SCB's
 329	 * flags so that we can refer to them even
 330	 * after SCBPTR has been changed.
 331	 */
 332	bmov	REG0, SCBPTR, 2;
 333	mov	A, SCB_CONTROL;
 334
 335	/*
 336	 * Find the tail SCB of the execution queue
 337	 * for this target.
 338	 */
 339	shr	SINDEX, 3, SCB_SCSIID;
 340	and	SINDEX, ~0x1;
 341	mvi	SINDEX[1], (WAITING_SCB_TAILS >> 8);
 342	bmov	DINDEX, SINDEX, 2;
 343	bmov	SCBPTR, SINDIR, 2;
 344
 345	/*
 346	 * Update the tail to point to the new SCB.
 347	 */
 348	bmov	DINDIR, REG0, 2;
 349
 350	/*
 351	 * If the queue was empty, queue this SCB as
 352	 * the first for this target.
 353	 */
 354	cmp	SCBPTR[1], SCB_LIST_NULL je first_new_target_scb;
 355
 356	/*
 357	 * SCBs that want to send messages must always be
 358	 * at the head of their per-target queue so that
 359	 * ATN can be asserted even if the current
 360	 * negotiation agreement is packetized.  If the
 361	 * target queue is empty, the SCB can be queued
 362	 * immediately.  If the queue is not empty, we must
 363	 * wait for it to empty before entering this SCB
 364	 * into the waiting for selection queue.  Otherwise
 365	 * our batching and round-robin selection scheme 
 366	 * could allow commands to be queued out of order.
 367	 * To simplify the implementation, we stop pulling
 368	 * new commands from the host until the MK_MESSAGE
 369	 * SCB can be queued to the waiting for selection
 370	 * list.
 371	 */
 372	test	A, MK_MESSAGE jz batch_scb; 
 373
 374	/*
 375	 * If the last SCB is also a MK_MESSAGE SCB, then
 376	 * order is preserved even if we batch.
 377	 */
 378	test	SCB_CONTROL, MK_MESSAGE jz batch_scb; 
 379
 380	/*
 381	 * Defer this SCB and stop fetching new SCBs until
 382	 * it can be queued.  Since the SCB_SCSIID of the
 383	 * tail SCB must be the same as that of the newly
 384	 * queued SCB, there is no need to restore the SCBID
 385	 * here.
 386	 */
 387	or	SEQ_FLAGS2, PENDING_MK_MESSAGE;
 388	bmov	MK_MESSAGE_SCB, REG0, 2;
 389	mov	MK_MESSAGE_SCSIID, SCB_SCSIID ret;
 390
 391batch_scb:
 392	/*
 393	 * Otherwise just update the previous tail SCB to
 394	 * point to the new tail.
 395	 */
 396	bmov	SCB_NEXT, REG0, 2 ret;
 397
 398first_new_target_scb:
 399	/*
 400	 * Append SCB to the tail of the waiting for
 401	 * selection list.
 402	 */
 403	cmp	WAITING_TID_HEAD[1], SCB_LIST_NULL je first_new_scb;
 404	bmov	SCBPTR, WAITING_TID_TAIL, 2;
 405	bmov	SCB_NEXT2, REG0, 2;
 406	bmov	WAITING_TID_TAIL, REG0, 2 ret;
 407first_new_scb:
 408	/*
 409	 * Whole list is empty, so the head of
 410	 * the list must be initialized too.
 411	 */
 412	bmov	WAITING_TID_HEAD, REG0, 2;
 413	bmov	WAITING_TID_TAIL, REG0, 2 ret;
 414END_CRITICAL;
 415
 416scbdma_idle:
 417	/*
 418	 * Don't bother downloading new SCBs to execute
 419	 * if select-outs are currently frozen or we have
 420	 * a MK_MESSAGE SCB waiting to enter the queue.
 421	 */
 422	test	SEQ_FLAGS2, SELECTOUT_QFROZEN|PENDING_MK_MESSAGE
 423		jnz scbdma_no_new_scbs;
 424BEGIN_CRITICAL;
 425	test	QOFF_CTLSTA, NEW_SCB_AVAIL jnz fetch_new_scb;
 426scbdma_no_new_scbs:
 427	cmp	COMPLETE_DMA_SCB_HEAD[1], SCB_LIST_NULL jne dma_complete_scb;
 428	cmp	COMPLETE_SCB_HEAD[1], SCB_LIST_NULL je return;
 429	/* FALLTHROUGH */
 430fill_qoutfifo:
 431	/*
 432	 * Keep track of the SCBs we are dmaing just
 433	 * in case the DMA fails or is aborted.
 434	 */
 435	bmov	COMPLETE_SCB_DMAINPROG_HEAD, COMPLETE_SCB_HEAD, 2;
 436	mvi	CCSCBCTL, CCSCBRESET;
 437	bmov	SCBHADDR, QOUTFIFO_NEXT_ADDR, 4;
 438	mov	A, QOUTFIFO_NEXT_ADDR;
 439	bmov	SCBPTR, COMPLETE_SCB_HEAD, 2;
 440fill_qoutfifo_loop:
 441	bmov	CCSCBRAM, SCBPTR, 2;
 442	mov	CCSCBRAM, SCB_SGPTR[0];
 443	mov	CCSCBRAM, QOUTFIFO_ENTRY_VALID_TAG;
 444	mov	NONE, SDSCB_QOFF;
 445	inc	INT_COALESCING_CMDCOUNT;
 446	add	CMDS_PENDING, -1;
 447	adc	CMDS_PENDING[1], -1;
 448	cmp	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL je fill_qoutfifo_done;
 449	cmp	CCSCBADDR, CCSCBADDR_MAX je fill_qoutfifo_done;
 450	test	QOFF_CTLSTA, SDSCB_ROLLOVR jnz fill_qoutfifo_done;
 451	/*
 452	 * Don't cross an ADB or Cachline boundary when DMA'ing
 453	 * completion entries.  In PCI mode, at least in 32/33
 454	 * configurations, the SCB DMA engine may lose its place
 455	 * in the data-stream should the target force a retry on
 456	 * something other than an 8byte aligned boundary. In
 457	 * PCI-X mode, we do this to avoid split transactions since
 458	 * many chipsets seem to be unable to format proper split
 459	 * completions to continue the data transfer.
 460	 */
 461	add	SINDEX, A, CCSCBADDR;
 462	test	SINDEX, CACHELINE_MASK jz fill_qoutfifo_done;
 463	bmov	SCBPTR, SCB_NEXT_COMPLETE, 2;
 464	jmp	fill_qoutfifo_loop;
 465fill_qoutfifo_done:
 466	mov	SCBHCNT, CCSCBADDR;
 467	mvi	CCSCBCTL, CCSCBEN|CCSCBRESET;
 468	bmov	COMPLETE_SCB_HEAD, SCB_NEXT_COMPLETE, 2;
 469	mvi	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL ret;
 470
 471fetch_new_scb:
 472	bmov	SCBHADDR, NEXT_QUEUED_SCB_ADDR, 4;
 473	mvi	CCARREN|CCSCBEN|CCSCBDIR|CCSCBRESET jmp dma_scb;
 474dma_complete_scb:
 475	bmov	SCBPTR, COMPLETE_DMA_SCB_HEAD, 2;
 476	bmov	SCBHADDR, SCB_BUSADDR, 4;
 477	mvi	CCARREN|CCSCBEN|CCSCBRESET jmp dma_scb;
 478
 479/*
 480 * Either post or fetch an SCB from host memory.  The caller
 481 * is responsible for polling for transfer completion.
 482 *
 483 * Prerequisits: Mode == M_CCHAN
 484 *		 SINDEX contains CCSCBCTL flags
 485 *		 SCBHADDR set to Host SCB address
 486 *		 SCBPTR set to SCB src location on "push" operations
 487 */
 488SET_SRC_MODE	M_CCHAN;
 489SET_DST_MODE	M_CCHAN;
 490dma_scb:
 491	mvi	SCBHCNT, SCB_TRANSFER_SIZE;
 492	mov	CCSCBCTL, SINDEX ret;
 493
 494setjmp:
 495	/*
 496	 * At least on the A, a return in the same
 497	 * instruction as the bmov results in a return
 498	 * to the caller, not to the new address at the
 499	 * top of the stack.  Since we want the latter
 500	 * (we use setjmp to register a handler from an
 501	 * interrupt context but not invoke that handler
 502	 * until we return to our idle loop), use a
 503	 * separate ret instruction.
 504	 */
 505	bmov	LONGJMP_ADDR, STACK, 2;
 506	ret;
 507setjmp_inline:
 508	bmov	LONGJMP_ADDR, STACK, 2;
 509longjmp:
 510	bmov	STACK, LONGJMP_ADDR, 2 ret;
 511END_CRITICAL;
 512
 513/*************************** Chip Bug Work Arounds ****************************/
 514/*
 515 * Must disable interrupts when setting the mode pointer
 516 * register as an interrupt occurring mid update will
 517 * fail to store the new mode value for restoration on
 518 * an iret.
 519 */
 520if ((ahd->bugs & AHD_SET_MODE_BUG) != 0) {
 521set_mode_work_around:
 522	mvi	SEQINTCTL, INTVEC1DSL;
 523	mov	MODE_PTR, SINDEX;
 524	clr	SEQINTCTL ret;
 525}
 526
 527
 528if ((ahd->bugs & AHD_INTCOLLISION_BUG) != 0) {
 529set_seqint_work_around:
 530	mov	SEQINTCODE, SINDEX;
 531	mvi	SEQINTCODE, NO_SEQINT ret;
 532}
 533
 534/************************ Packetized LongJmp Routines *************************/
 535SET_SRC_MODE	M_SCSI;
 536SET_DST_MODE	M_SCSI;
 537start_selection:
 538BEGIN_CRITICAL;
 539	if ((ahd->bugs & AHD_SENT_SCB_UPDATE_BUG) != 0) {
 540		/*
 541		 * Razor #494
 542		 * Rev A hardware fails to update LAST/CURR/NEXTSCB
 543		 * correctly after a packetized selection in several
 544		 * situations:
 545		 *
 546		 * 1) If only one command existed in the queue, the
 547		 *    LAST/CURR/NEXTSCB are unchanged.
 548		 *
 549		 * 2) In a non QAS, protocol allowed phase change,
 550		 *    the queue is shifted 1 too far.  LASTSCB is
 551		 *    the last SCB that was correctly processed.
 552		 * 
 553		 * 3) In the QAS case, if the full list of commands
 554		 *    was successfully sent, NEXTSCB is NULL and neither
 555		 *    CURRSCB nor LASTSCB can be trusted.  We must
 556		 *    manually walk the list counting MAXCMDCNT elements
 557		 *    to find the last SCB that was sent correctly.
 558		 *
 559		 * To simplify the workaround for this bug in SELDO
 560		 * handling, we initialize LASTSCB prior to enabling
 561		 * selection so we can rely on it even for case #1 above.
 562		 */
 563		bmov	LASTSCB, WAITING_TID_HEAD, 2;
 564	}
 565	bmov	CURRSCB, WAITING_TID_HEAD, 2;
 566	bmov	SCBPTR, WAITING_TID_HEAD, 2;
 567	shr	SELOID, 4, SCB_SCSIID;
 568	/*
 569	 * If we want to send a message to the device, ensure
 570	 * we are selecting with atn regardless of our packetized
 571	 * agreement.  Since SPI4 only allows target reset or PPR
 572	 * messages if this is a packetized connection, the change
 573	 * to our negotiation table entry for this selection will
 574	 * be cleared when the message is acted on.
 575	 */
 576	test	SCB_CONTROL, MK_MESSAGE jz . + 3;
 577	mov	NEGOADDR, SELOID;
 578	or	NEGCONOPTS, ENAUTOATNO;
 579	or	SCSISEQ0, ENSELO ret;
 580END_CRITICAL;
 581
 582/*
 583 * Allocate a FIFO for a non-packetized transaction.
 584 * In RevA hardware, both FIFOs must be free before we
 585 * can allocate a FIFO for a non-packetized transaction.
 586 */
 587allocate_fifo_loop:
 588	/*
 589	 * Do whatever work is required to free a FIFO.
 590	 */
 591	call	idle_loop_service_fifos;
 592	SET_MODE(M_SCSI, M_SCSI)
 593allocate_fifo:
 594	if ((ahd->bugs & AHD_NONPACKFIFO_BUG) != 0) {
 595		and	A, FIFO0FREE|FIFO1FREE, DFFSTAT;
 596		cmp	A, FIFO0FREE|FIFO1FREE jne allocate_fifo_loop;
 597	} else {
 598		test	DFFSTAT, FIFO1FREE jnz allocate_fifo1;
 599		test	DFFSTAT, FIFO0FREE jz allocate_fifo_loop;
 600		mvi	DFFSTAT, B_CURRFIFO_0;
 601		SET_MODE(M_DFF0, M_DFF0)
 602		bmov	SCBPTR, ALLOCFIFO_SCBPTR, 2 ret;
 603	}
 604SET_SRC_MODE	M_SCSI;
 605SET_DST_MODE	M_SCSI;
 606allocate_fifo1:
 607	mvi	DFFSTAT, CURRFIFO_1;
 608	SET_MODE(M_DFF1, M_DFF1)
 609	bmov	SCBPTR, ALLOCFIFO_SCBPTR, 2 ret;
 610
 611/*
 612 * We have been reselected as an initiator
 613 * or selected as a target.
 614 */
 615SET_SRC_MODE	M_SCSI;
 616SET_DST_MODE	M_SCSI;
 617select_in:
 618	if ((ahd->bugs & AHD_FAINT_LED_BUG) != 0) {
 619		/*
 620		 * On Rev A. hardware, the busy LED is only
 621		 * turned on automaically during selections
 622		 * and re-selections.  Make the LED status
 623		 * more useful by forcing it to be on from
 624		 * the point of selection until our idle
 625		 * loop determines that neither of our FIFOs
 626		 * are busy.  This handles the non-packetized
 627		 * case nicely as we will not return to the
 628		 * idle loop until the busfree at the end of
 629		 * each transaction.
 630		 */
 631		or	SBLKCTL, DIAGLEDEN|DIAGLEDON;
 632	}
 633	if ((ahd->bugs & AHD_BUSFREEREV_BUG) != 0) {
 634		/*
 635		 * Test to ensure that the bus has not
 636		 * already gone free prior to clearing
 637		 * any stale busfree status.  This avoids
 638		 * a window whereby a busfree just after
 639		 * a selection could be missed.
 640		 */
 641		test	SCSISIGI, BSYI jz . + 2;
 642		mvi	CLRSINT1,CLRBUSFREE;
 643		or	SIMODE1, ENBUSFREE;
 644	}
 645	or	SXFRCTL0, SPIOEN;
 646	and	SAVED_SCSIID, SELID_MASK, SELID;
 647	and	A, OID, IOWNID;
 648	or	SAVED_SCSIID, A;
 649	mvi	CLRSINT0, CLRSELDI;
 650	jmp	ITloop;
 651
 652/*
 653 * We have successfully selected out.
 654 *
 655 * Clear SELDO.
 656 * Dequeue all SCBs sent from the waiting queue
 657 * Requeue all SCBs *not* sent to the tail of the waiting queue
 658 * Take Razor #494 into account for above.
 659 *
 660 * In Packetized Mode:
 661 *	Return to the idle loop.  Our interrupt handler will take
 662 *	care of any incoming L_Qs.
 663 *
 664 * In Non-Packetize Mode:
 665 *	Continue to our normal state machine.
 666 */
 667SET_SRC_MODE	M_SCSI;
 668SET_DST_MODE	M_SCSI;
 669select_out:
 670BEGIN_CRITICAL;
 671	if ((ahd->bugs & AHD_FAINT_LED_BUG) != 0) {
 672		/*
 673		 * On Rev A. hardware, the busy LED is only
 674		 * turned on automaically during selections
 675		 * and re-selections.  Make the LED status
 676		 * more useful by forcing it to be on from
 677		 * the point of re-selection until our idle
 678		 * loop determines that neither of our FIFOs
 679		 * are busy.  This handles the non-packetized
 680		 * case nicely as we will not return to the
 681		 * idle loop until the busfree at the end of
 682		 * each transaction.
 683		 */
 684		or	SBLKCTL, DIAGLEDEN|DIAGLEDON;
 685	}
 686	/* Clear out all SCBs that have been successfully sent. */
 687	if ((ahd->bugs & AHD_SENT_SCB_UPDATE_BUG) != 0) {
 688		/*
 689		 * For packetized, the LQO manager clears ENSELO on
 690		 * the assertion of SELDO.  If we are non-packetized,
 691		 * LASTSCB and CURRSCB are accurate.
 692		 */
 693		test	SCSISEQ0, ENSELO jnz use_lastscb;
 694
 695		/*
 696		 * The update is correct for LQOSTAT1 errors.  All
 697		 * but LQOBUSFREE are handled by kernel interrupts.
 698		 * If we see LQOBUSFREE, return to the idle loop.
 699		 * Once we are out of the select_out critical section,
 700		 * the kernel will cleanup the LQOBUSFREE and we will
 701		 * eventually restart the selection if appropriate.
 702		 */
 703		test	LQOSTAT1, LQOBUSFREE jnz idle_loop;
 704
 705		/*
 706		 * On a phase change oustside of packet boundaries,
 707		 * LASTSCB points to the currently active SCB context
 708		 * on the bus.
 709		 */
 710		test	LQOSTAT2, LQOPHACHGOUTPKT jnz use_lastscb;
 711
 712		/*
 713		 * If the hardware has traversed the whole list, NEXTSCB
 714		 * will be NULL, CURRSCB and LASTSCB cannot be trusted,
 715		 * but MAXCMDCNT is accurate.  If we stop part way through
 716		 * the list or only had one command to issue, NEXTSCB[1] is
 717		 * not NULL and LASTSCB is the last command to go out.
 718		 */
 719		cmp	NEXTSCB[1], SCB_LIST_NULL jne use_lastscb;
 720
 721		/*
 722		 * Brute force walk.
 723		 */
 724		bmov	SCBPTR, WAITING_TID_HEAD, 2;
 725		mvi	SEQINTCTL, INTVEC1DSL;
 726		mvi	MODE_PTR, MK_MODE(M_CFG, M_CFG);
 727		mov	A, MAXCMDCNT;
 728		mvi	MODE_PTR, MK_MODE(M_SCSI, M_SCSI);
 729		clr	SEQINTCTL;
 730find_lastscb_loop:
 731		dec	A;
 732		test	A, 0xFF jz found_last_sent_scb;
 733		bmov	SCBPTR, SCB_NEXT, 2;
 734		jmp	find_lastscb_loop;
 735use_lastscb:
 736		bmov	SCBPTR, LASTSCB, 2;
 737found_last_sent_scb:
 738		bmov	CURRSCB, SCBPTR, 2;
 739curscb_ww_done:
 740	} else {
 741		bmov	SCBPTR, CURRSCB, 2;
 742	}
 743
 744	/*
 745	 * The whole list made it.  Clear our tail pointer to indicate
 746	 * that the per-target selection queue is now empty.
 747	 */
 748	cmp	SCB_NEXT[1], SCB_LIST_NULL je select_out_clear_tail;
 749
 750	/*
 751	 * Requeue any SCBs not sent, to the tail of the waiting Q.
 752	 * We know that neither the per-TID list nor the list of
 753	 * TIDs is empty.  Use this knowledge to our advantage and
 754	 * queue the remainder to the tail of the global execution
 755	 * queue.
 756	 */
 757	bmov	REG0, SCB_NEXT, 2;
 758select_out_queue_remainder:
 759	bmov	SCBPTR, WAITING_TID_TAIL, 2;
 760	bmov	SCB_NEXT2, REG0, 2;
 761	bmov	WAITING_TID_TAIL, REG0, 2;
 762	jmp	select_out_inc_tid_q;
 763
 764select_out_clear_tail:
 765	/*
 766	 * Queue any pending MK_MESSAGE SCB for this target now
 767	 * that the queue is empty.
 768	 */
 769	test	SEQ_FLAGS2, PENDING_MK_MESSAGE jz select_out_no_mk_message_scb;
 770	mov	A, MK_MESSAGE_SCSIID;
 771	cmp	SCB_SCSIID, A jne select_out_no_mk_message_scb;
 772	and	SEQ_FLAGS2, ~PENDING_MK_MESSAGE;
 773	bmov	REG0, MK_MESSAGE_SCB, 2;
 774	jmp select_out_queue_remainder;
 775
 776select_out_no_mk_message_scb:
 777	/*
 778	 * Clear this target's execution tail and increment the queue.
 779	 */
 780	shr	DINDEX, 3, SCB_SCSIID;
 781	or	DINDEX, 1;	/* Want only the second byte */
 782	mvi	DINDEX[1], ((WAITING_SCB_TAILS) >> 8);
 783	mvi	DINDIR, SCB_LIST_NULL;
 784select_out_inc_tid_q:
 785	bmov	SCBPTR, WAITING_TID_HEAD, 2;
 786	bmov	WAITING_TID_HEAD, SCB_NEXT2, 2;
 787	cmp	WAITING_TID_HEAD[1], SCB_LIST_NULL jne . + 2;
 788	mvi	WAITING_TID_TAIL[1], SCB_LIST_NULL;
 789	bmov	SCBPTR, CURRSCB, 2;
 790	mvi	CLRSINT0, CLRSELDO;
 791	test	LQOSTAT2, LQOPHACHGOUTPKT jnz unexpected_nonpkt_mode_cleared;
 792	test	LQOSTAT1, LQOPHACHGINPKT jnz unexpected_nonpkt_mode_cleared;
 793
 794	/*
 795	 * If this is a packetized connection, return to our
 796	 * idle_loop and let our interrupt handler deal with
 797	 * any connection setup/teardown issues.  The only
 798	 * exceptions are the case of MK_MESSAGE and task management
 799	 * SCBs.
 800	 */
 801	if ((ahd->bugs & AHD_LQO_ATNO_BUG) != 0) {
 802		/*
 803		 * In the A, the LQO manager transitions to LQOSTOP0 even if
 804		 * we have selected out with ATN asserted and the target
 805		 * REQs in a non-packet phase.
 806		 */
 807		test 	SCB_CONTROL, MK_MESSAGE jz select_out_no_message;
 808		test	SCSISIGO, ATNO jnz select_out_non_packetized;
 809select_out_no_message:
 810	}
 811	test	LQOSTAT2, LQOSTOP0 jz select_out_non_packetized;
 812	test	SCB_TASK_MANAGEMENT, 0xFF jz idle_loop;
 813	SET_SEQINTCODE(TASKMGMT_FUNC_COMPLETE)
 814	jmp	idle_loop;
 815
 816select_out_non_packetized:
 817	/* Non packetized request. */
 818	and     SCSISEQ0, ~ENSELO;
 819	if ((ahd->bugs & AHD_BUSFREEREV_BUG) != 0) {
 820		/*
 821		 * Test to ensure that the bus has not
 822		 * already gone free prior to clearing
 823		 * any stale busfree status.  This avoids
 824		 * a window whereby a busfree just after
 825		 * a selection could be missed.
 826		 */
 827		test	SCSISIGI, BSYI jz . + 2;
 828		mvi	CLRSINT1,CLRBUSFREE;
 829		or	SIMODE1, ENBUSFREE;
 830	}
 831	mov	SAVED_SCSIID, SCB_SCSIID;
 832	mov	SAVED_LUN, SCB_LUN;
 833	mvi	SEQ_FLAGS, NO_CDB_SENT;
 834END_CRITICAL;
 835	or	SXFRCTL0, SPIOEN;
 836
 837	/*
 838	 * As soon as we get a successful selection, the target
 839	 * should go into the message out phase since we have ATN
 840	 * asserted.
 841	 */
 842	mvi	MSG_OUT, MSG_IDENTIFYFLAG;
 843
 844	/*
 845	 * Main loop for information transfer phases.  Wait for the
 846	 * target to assert REQ before checking MSG, C/D and I/O for
 847	 * the bus phase.
 848	 */
 849mesgin_phasemis:
 850ITloop:
 851	call	phase_lock;
 852
 853	mov	A, LASTPHASE;
 854
 855	test	A, ~P_DATAIN_DT	jz p_data;
 856	cmp	A,P_COMMAND	je p_command;
 857	cmp	A,P_MESGOUT	je p_mesgout;
 858	cmp	A,P_STATUS	je p_status;
 859	cmp	A,P_MESGIN	je p_mesgin;
 860
 861	SET_SEQINTCODE(BAD_PHASE)
 862	jmp	ITloop;			/* Try reading the bus again. */
 863
 864/*
 865 * Command phase.  Set up the DMA registers and let 'er rip.
 866 */
 867p_command:
 868	test	SEQ_FLAGS, NOT_IDENTIFIED jz p_command_okay;
 869	SET_SEQINTCODE(PROTO_VIOLATION)
 870p_command_okay:
 871	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
 872		jnz p_command_allocate_fifo;
 873	/*
 874	 * Command retry.  Free our current FIFO and
 875	 * re-allocate a FIFO so transfer state is
 876	 * reset.
 877	 */
 878SET_SRC_MODE	M_DFF1;
 879SET_DST_MODE	M_DFF1;
 880	mvi	DFFSXFRCTL, RSTCHN|CLRSHCNT;
 881	SET_MODE(M_SCSI, M_SCSI)
 882p_command_allocate_fifo:
 883	bmov	ALLOCFIFO_SCBPTR, SCBPTR, 2;
 884	call	allocate_fifo;
 885SET_SRC_MODE	M_DFF1;
 886SET_DST_MODE	M_DFF1;
 887	add	NONE, -17, SCB_CDB_LEN;
 888	jnc	p_command_embedded;
 889p_command_from_host:
 890	bmov	HADDR[0], SCB_HOST_CDB_PTR, 9;
 891	mvi	SG_CACHE_PRE, LAST_SEG;
 892	mvi	DFCNTRL, (PRELOADEN|SCSIEN|HDMAEN);
 893	jmp	p_command_xfer;
 894p_command_embedded:
 895	bmov	SHCNT[0], SCB_CDB_LEN,  1;
 896	bmov	DFDAT, SCB_CDB_STORE, 16; 
 897	mvi	DFCNTRL, SCSIEN;
 898p_command_xfer:
 899	and	SEQ_FLAGS, ~NO_CDB_SENT;
 900	if ((ahd->features & AHD_FAST_CDB_DELIVERY) != 0) {
 901		/*
 902		 * To speed up CDB delivery in Rev B, all CDB acks
 903		 * are "released" to the output sync as soon as the
 904		 * command phase starts.  There is only one problem
 905		 * with this approach.  If the target changes phase
 906		 * before all data are sent, we have left over acks
 907		 * that can go out on the bus in a data phase.  Due
 908		 * to other chip contraints, this only happens if
 909		 * the target goes to data-in, but if the acks go
 910		 * out before we can test SDONE, we'll think that
 911		 * the transfer has completed successfully.  Work
 912		 * around this by taking advantage of the 400ns or
 913		 * 800ns dead time between command phase and the REQ
 914		 * of the new phase.  If the transfer has completed
 915		 * successfully, SCSIEN should fall *long* before we
 916		 * see a phase change.  We thus treat any phasemiss
 917		 * that occurs before SCSIEN falls as an incomplete
 918		 * transfer.
 919		 */
 920		test	SSTAT1, PHASEMIS jnz p_command_xfer_failed;
 921		test	DFCNTRL, SCSIEN jnz . - 1;
 922	} else {
 923		test	DFCNTRL, SCSIEN jnz .;
 924	}
 925	/*
 926	 * DMA Channel automatically disabled.
 927	 * Don't allow a data phase if the command
 928	 * was not fully transferred.
 929	 */
 930	test	SSTAT2, SDONE jnz ITloop;
 931p_command_xfer_failed:
 932	or	SEQ_FLAGS, NO_CDB_SENT;
 933	jmp	ITloop;
 934
 935
 936/*
 937 * Status phase.  Wait for the data byte to appear, then read it
 938 * and store it into the SCB.
 939 */
 940SET_SRC_MODE	M_SCSI;
 941SET_DST_MODE	M_SCSI;
 942p_status:
 943	test	SEQ_FLAGS,NOT_IDENTIFIED jnz mesgin_proto_violation;
 944p_status_okay:
 945	mov	SCB_SCSI_STATUS, SCSIDAT;
 946	or	SCB_CONTROL, STATUS_RCVD;
 947	jmp	ITloop;
 948
 949/*
 950 * Message out phase.  If MSG_OUT is MSG_IDENTIFYFLAG, build a full
 951 * indentify message sequence and send it to the target.  The host may
 952 * override this behavior by setting the MK_MESSAGE bit in the SCB
 953 * control byte.  This will cause us to interrupt the host and allow
 954 * it to handle the message phase completely on its own.  If the bit
 955 * associated with this target is set, we will also interrupt the host,
 956 * thereby allowing it to send a message on the next selection regardless
 957 * of the transaction being sent.
 958 * 
 959 * If MSG_OUT is == HOST_MSG, also interrupt the host and take a message.
 960 * This is done to allow the host to send messages outside of an identify
 961 * sequence while protecting the seqencer from testing the MK_MESSAGE bit
 962 * on an SCB that might not be for the current nexus. (For example, a
 963 * BDR message in response to a bad reselection would leave us pointed to
 964 * an SCB that doesn't have anything to do with the current target).
 965 *
 966 * Otherwise, treat MSG_OUT as a 1 byte message to send (abort, abort tag,
 967 * bus device reset).
 968 *
 969 * When there are no messages to send, MSG_OUT should be set to MSG_NOOP,
 970 * in case the target decides to put us in this phase for some strange
 971 * reason.
 972 */
 973p_mesgout_retry:
 974	/* Turn on ATN for the retry */
 975	mvi	SCSISIGO, ATNO;
 976p_mesgout:
 977	mov	SINDEX, MSG_OUT;
 978	cmp	SINDEX, MSG_IDENTIFYFLAG jne p_mesgout_from_host;
 979	test	SCB_CONTROL,MK_MESSAGE	jnz host_message_loop;
 980p_mesgout_identify:
 981	or	SINDEX, MSG_IDENTIFYFLAG|DISCENB, SCB_LUN;
 982	test	SCB_CONTROL, DISCENB jnz . + 2;
 983	and	SINDEX, ~DISCENB;
 984/*
 985 * Send a tag message if TAG_ENB is set in the SCB control block.
 986 * Use SCB_NONPACKET_TAG as the tag value.
 987 */
 988p_mesgout_tag:
 989	test	SCB_CONTROL,TAG_ENB jz  p_mesgout_onebyte;
 990	mov	SCSIDAT, SINDEX;	/* Send the identify message */
 991	call	phase_lock;
 992	cmp	LASTPHASE, P_MESGOUT	jne p_mesgout_done;
 993	and	SCSIDAT,TAG_ENB|SCB_TAG_TYPE,SCB_CONTROL;
 994	call	phase_lock;
 995	cmp	LASTPHASE, P_MESGOUT	jne p_mesgout_done;
 996	mov	SCBPTR jmp p_mesgout_onebyte;
 997/*
 998 * Interrupt the driver, and allow it to handle this message
 999 * phase and any required retries.
1000 */
1001p_mesgout_from_host:
1002	cmp	SINDEX, HOST_MSG	jne p_mesgout_onebyte;
1003	jmp	host_message_loop;
1004
1005p_mesgout_onebyte:
1006	mvi	CLRSINT1, CLRATNO;
1007	mov	SCSIDAT, SINDEX;
1008
1009/*
1010 * If the next bus phase after ATN drops is message out, it means
1011 * that the target is requesting that the last message(s) be resent.
1012 */
1013	call	phase_lock;
1014	cmp	LASTPHASE, P_MESGOUT	je p_mesgout_retry;
1015
1016p_mesgout_done:
1017	mvi	CLRSINT1,CLRATNO;	/* Be sure to turn ATNO off */
1018	mov	LAST_MSG, MSG_OUT;
1019	mvi	MSG_OUT, MSG_NOOP;	/* No message left */
1020	jmp	ITloop;
1021
1022/*
1023 * Message in phase.  Bytes are read using Automatic PIO mode.
1024 */
1025p_mesgin:
1026	/* read the 1st message byte */
1027	mvi	ACCUM		call inb_first;
1028
1029	test	A,MSG_IDENTIFYFLAG	jnz mesgin_identify;
1030	cmp	A,MSG_DISCONNECT	je mesgin_disconnect;
1031	cmp	A,MSG_SAVEDATAPOINTER	je mesgin_sdptrs;
1032	cmp	ALLZEROS,A		je mesgin_complete;
1033	cmp	A,MSG_RESTOREPOINTERS	je mesgin_rdptrs;
1034	cmp	A,MSG_IGN_WIDE_RESIDUE	je mesgin_ign_wide_residue;
1035	cmp	A,MSG_NOOP		je mesgin_done;
1036
1037/*
1038 * Pushed message loop to allow the kernel to
1039 * run it's own message state engine.  To avoid an
1040 * extra nop instruction after signaling the kernel,
1041 * we perform the phase_lock before checking to see
1042 * if we should exit the loop and skip the phase_lock
1043 * in the ITloop.  Performing back to back phase_locks
1044 * shouldn't hurt, but why do it twice...
1045 */
1046host_message_loop:
1047	call	phase_lock;	/* Benign the first time through. */
1048	SET_SEQINTCODE(HOST_MSG_LOOP)
1049	cmp	RETURN_1, EXIT_MSG_LOOP	je ITloop;
1050	cmp	RETURN_1, CONT_MSG_LOOP_WRITE	jne . + 3;
1051	mov	SCSIDAT, RETURN_2;
1052	jmp	host_message_loop;
1053	/* Must be CONT_MSG_LOOP_READ */
1054	mov	NONE, SCSIDAT;	/* ACK Byte */
1055	jmp	host_message_loop;
1056
1057mesgin_ign_wide_residue:
1058	mov	SAVED_MODE, MODE_PTR;
1059	SET_MODE(M_SCSI, M_SCSI)
1060	shr	NEGOADDR, 4, SAVED_SCSIID;
1061	mov	A, NEGCONOPTS;
1062	RESTORE_MODE(SAVED_MODE)
1063	test	A, WIDEXFER jz mesgin_reject;
1064	/* Pull the residue byte */
1065	mvi	REG0	call inb_next;
1066	cmp	REG0, 0x01 jne mesgin_reject;
1067	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jz . + 2;
1068	test	SCB_TASK_ATTRIBUTE, SCB_XFERLEN_ODD jnz mesgin_done;
1069	SET_SEQINTCODE(IGN_WIDE_RES)
1070	jmp	mesgin_done;
1071
1072mesgin_proto_violation:
1073	SET_SEQINTCODE(PROTO_VIOLATION)
1074	jmp	mesgin_done;
1075mesgin_reject:
1076	mvi	MSG_MESSAGE_REJECT	call mk_mesg;
1077mesgin_done:
1078	mov	NONE,SCSIDAT;		/*dummy read from latch to ACK*/
1079	jmp	ITloop;
1080
1081#define INDEX_DISC_LIST(scsiid, lun)					\
1082	and	A, 0xC0, scsiid;					\
1083	or	SCBPTR, A, lun;						\
1084	clr	SCBPTR[1];						\
1085	and	SINDEX, 0x30, scsiid;					\
1086	shr	SINDEX, 3;	/* Multiply by 2 */			\
1087	add	SINDEX, (SCB_DISCONNECTED_LISTS & 0xFF);		\
1088	mvi	SINDEX[1], ((SCB_DISCONNECTED_LISTS >> 8) & 0xFF)
1089
1090mesgin_identify:
1091	/*
1092	 * Determine whether a target is using tagged or non-tagged
1093	 * transactions by first looking at the transaction stored in
1094	 * the per-device, disconnected array.  If there is no untagged
1095	 * transaction for this target, this must be a tagged transaction.
1096	 */
1097	and	SAVED_LUN, MSG_IDENTIFY_LUNMASK, A;
1098	INDEX_DISC_LIST(SAVED_SCSIID, SAVED_LUN);
1099	bmov	DINDEX, SINDEX, 2;
1100	bmov	REG0, SINDIR, 2;
1101	cmp	REG0[1], SCB_LIST_NULL je snoop_tag;
1102	/* Untagged.  Clear the busy table entry and setup the SCB. */
1103	bmov	DINDIR, ALLONES, 2;
1104	bmov	SCBPTR, REG0, 2;
1105	jmp	setup_SCB;
1106
1107/*
1108 * Here we "snoop" the bus looking for a SIMPLE QUEUE TAG message.
1109 * If we get one, we use the tag returned to find the proper
1110 * SCB.  After receiving the tag, look for the SCB at SCB locations tag and
1111 * tag + 256.
1112 */
1113snoop_tag:
1114	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1115		or	SEQ_FLAGS, 0x80;
1116	}
1117	mov	NONE, SCSIDAT;		/* ACK Identify MSG */
1118	call	phase_lock;
1119	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1120		or	SEQ_FLAGS, 0x1;
1121	}
1122	cmp	LASTPHASE, P_MESGIN	jne not_found_ITloop;
1123	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1124		or	SEQ_FLAGS, 0x2;
1125	}
1126	cmp	SCSIBUS, MSG_SIMPLE_Q_TAG jne not_found;
1127get_tag:
1128	clr	SCBPTR[1];
1129	mvi	SCBPTR	call inb_next;	/* tag value */
1130verify_scb:
1131	test	SCB_CONTROL,DISCONNECTED jz verify_other_scb;
1132	mov	A, SAVED_SCSIID;
1133	cmp	SCB_SCSIID, A jne verify_other_scb;
1134	mov	A, SAVED_LUN;
1135	cmp	SCB_LUN, A je setup_SCB_disconnected;
1136verify_other_scb:
1137	xor	SCBPTR[1], 1;
1138	test	SCBPTR[1], 0xFF jnz verify_scb;
1139	jmp	not_found;
1140
1141/*
1142 * Ensure that the SCB the tag points to is for
1143 * an SCB transaction to the reconnecting target.
1144 */
1145setup_SCB:
1146	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1147		or	SEQ_FLAGS, 0x10;
1148	}
1149	test	SCB_CONTROL,DISCONNECTED jz not_found;
1150setup_SCB_disconnected:
1151	and	SCB_CONTROL,~DISCONNECTED;
1152	clr	SEQ_FLAGS;	/* make note of IDENTIFY */
1153	test	SCB_SGPTR, SG_LIST_NULL jnz . + 3;
1154	bmov	ALLOCFIFO_SCBPTR, SCBPTR, 2;
1155	call	allocate_fifo;
1156	/* See if the host wants to send a message upon reconnection */
1157	test	SCB_CONTROL, MK_MESSAGE jz mesgin_done;
1158	mvi	HOST_MSG	call mk_mesg;
1159	jmp	mesgin_done;
1160
1161not_found:
1162	SET_SEQINTCODE(NO_MATCH)
1163	jmp	mesgin_done;
1164
1165not_found_ITloop:
1166	SET_SEQINTCODE(NO_MATCH)
1167	jmp	ITloop;
1168
1169/*
1170 * We received a "command complete" message.  Put the SCB on the complete
1171 * queue and trigger a completion interrupt via the idle loop.  Before doing
1172 * so, check to see if there is a residual or the status byte is something
1173 * other than STATUS_GOOD (0).  In either of these conditions, we upload the
1174 * SCB back to the host so it can process this information.
1175 */
1176mesgin_complete:
1177
1178	/*
1179	 * If ATN is raised, we still want to give the target a message.
1180	 * Perhaps there was a parity error on this last message byte.
1181	 * Either way, the target should take us to message out phase
1182	 * and then attempt to complete the command again.  We should use a
1183	 * critical section here to guard against a timeout triggering
1184	 * for this command and setting ATN while we are still processing
1185	 * the completion.
1186	test	SCSISIGI, ATNI jnz mesgin_done;
1187	 */
1188
1189	/*
1190	 * If we are identified and have successfully sent the CDB,
1191	 * any status will do.  Optimize this fast path.
1192	 */
1193	test	SCB_CONTROL, STATUS_RCVD jz mesgin_proto_violation;
1194	test	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT jz complete_accepted;
1195
1196	/*
1197	 * If the target never sent an identify message but instead went
1198	 * to mesgin to give an invalid message, let the host abort us.
1199	 */
1200	test	SEQ_FLAGS, NOT_IDENTIFIED jnz mesgin_proto_violation;
1201
1202	/*
1203	 * If we recevied good status but never successfully sent the
1204	 * cdb, abort the command.
1205	 */
1206	test	SCB_SCSI_STATUS,0xff	jnz complete_accepted;
1207	test	SEQ_FLAGS, NO_CDB_SENT jnz mesgin_proto_violation;
1208complete_accepted:
1209
1210	/*
1211	 * See if we attempted to deliver a message but the target ingnored us.
1212	 */
1213	test	SCB_CONTROL, MK_MESSAGE jz complete_nomsg;
1214	SET_SEQINTCODE(MKMSG_FAILED)
1215complete_nomsg:
1216	call	queue_scb_completion;
1217	jmp	await_busfree;
1218
1219BEGIN_CRITICAL;
1220freeze_queue:
1221	/* Cancel any pending select-out. */
1222	test	SSTAT0, SELDO|SELINGO jnz . + 2;
1223	and	SCSISEQ0, ~ENSELO;
1224	mov	ACCUM_SAVE, A;
1225	clr	A;
1226	add	QFREEZE_COUNT, 1;
1227	adc	QFREEZE_COUNT[1], A;
1228	or	SEQ_FLAGS2, SELECTOUT_QFROZEN;
1229	mov	A, ACCUM_SAVE ret;
1230END_CRITICAL;
1231
1232/*
1233 * Complete the current FIFO's SCB if data for this same
1234 * SCB is not transferring in the other FIFO.
1235 */
1236SET_SRC_MODE	M_DFF1;
1237SET_DST_MODE	M_DFF1;
1238pkt_complete_scb_if_fifos_idle:
1239	bmov	ARG_1, SCBPTR, 2;
1240	mvi	DFFSXFRCTL, CLRCHN;
1241	SET_MODE(M_SCSI, M_SCSI)
1242	bmov	SCBPTR, ARG_1, 2;
1243	test	SCB_FIFO_USE_COUNT, 0xFF jnz return;
1244queue_scb_completion:
1245	test	SCB_SCSI_STATUS,0xff	jnz bad_status;
1246	/*
1247	 * Check for residuals
1248	 */
1249	test	SCB_SGPTR, SG_LIST_NULL jnz complete;	/* No xfer */
1250	test	SCB_SGPTR, SG_FULL_RESID jnz upload_scb;/* Never xfered */
1251	test	SCB_RESIDUAL_SGPTR, SG_LIST_NULL jz upload_scb;
1252complete:
1253BEGIN_CRITICAL;
1254	bmov	SCB_NEXT_COMPLETE, COMPLETE_SCB_HEAD, 2;
1255	bmov	COMPLETE_SCB_HEAD, SCBPTR, 2 ret;
1256END_CRITICAL;
1257bad_status:
1258	cmp	SCB_SCSI_STATUS, STATUS_PKT_SENSE je upload_scb;
1259	call	freeze_queue;
1260upload_scb:
1261	/*
1262	 * Restore SCB TAG since we reuse this field
1263	 * in the sequencer.  We don't want to corrupt
1264	 * it on the host.
1265	 */
1266	bmov	SCB_TAG, SCBPTR, 2;
1267BEGIN_CRITICAL;
1268	or	SCB_SGPTR, SG_STATUS_VALID;
1269	mvi	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL;
1270	cmp	COMPLETE_DMA_SCB_HEAD[1], SCB_LIST_NULL jne add_dma_scb_tail;
1271	bmov	COMPLETE_DMA_SCB_HEAD, SCBPTR, 2;
1272	bmov	COMPLETE_DMA_SCB_TAIL, SCBPTR, 2 ret;
1273add_dma_scb_tail:
1274	bmov	REG0, SCBPTR, 2;
1275	bmov	SCBPTR, COMPLETE_DMA_SCB_TAIL, 2;
1276	bmov	SCB_NEXT_COMPLETE, REG0, 2;
1277	bmov	COMPLETE_DMA_SCB_TAIL, REG0, 2 ret;
1278END_CRITICAL;
1279
1280/*
1281 * Is it a disconnect message?  Set a flag in the SCB to remind us
1282 * and await the bus going free.  If this is an untagged transaction
1283 * store the SCB id for it in our untagged target table for lookup on
1284 * a reselection.
1285 */
1286mesgin_disconnect:
1287	/*
1288	 * If ATN is raised, we still want to give the target a message.
1289	 * Perhaps there was a parity error on this last message byte
1290	 * or we want to abort this command.  Either way, the target
1291	 * should take us to message out phase and then attempt to
1292	 * disconnect again.
1293	 * XXX - Wait for more testing.
1294	test	SCSISIGI, ATNI jnz mesgin_done;
1295	 */
1296	test	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT
1297		jnz mesgin_proto_violation;
1298	or	SCB_CONTROL,DISCONNECTED;
1299	test	SCB_CONTROL, TAG_ENB jnz await_busfree;
1300queue_disc_scb:
1301	bmov	REG0, SCBPTR, 2;
1302	INDEX_DISC_LIST(SAVED_SCSIID, SAVED_LUN);
1303	bmov	DINDEX, SINDEX, 2;
1304	bmov	DINDIR, REG0, 2;
1305	bmov	SCBPTR, REG0, 2;
1306	/* FALLTHROUGH */
1307await_busfree:
1308	and	SIMODE1, ~ENBUSFREE;
1309	if ((ahd->bugs & AHD_BUSFREEREV_BUG) == 0) {
1310		/*
1311		 * In the BUSFREEREV_BUG case, the
1312		 * busfree status was cleared at the
1313		 * beginning of the connection.
1314		 */
1315		mvi	CLRSINT1,CLRBUSFREE;
1316	}
1317	mov	NONE, SCSIDAT;		/* Ack the last byte */
1318	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
1319		jnz await_busfree_not_m_dff;
1320SET_SRC_MODE	M_DFF1;
1321SET_DST_MODE	M_DFF1;
1322await_busfree_clrchn:
1323	mvi	DFFSXFRCTL, CLRCHN;
1324await_busfree_not_m_dff:
1325	/* clear target specific flags */
1326	mvi	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT;
1327	test	SSTAT1,REQINIT|BUSFREE	jz .;
1328	/*
1329	 * We only set BUSFREE status once either a new
1330	 * phase has been detected or we are really
1331	 * BUSFREE.  This allows the driver to know
1332	 * that we are active on the bus even though
1333	 * no identified transaction exists should a
1334	 * timeout occur while awaiting busfree.
1335	 */
1336	mvi	LASTPHASE, P_BUSFREE;
1337	test	SSTAT1, BUSFREE jnz idle_loop;
1338	SET_SEQINTCODE(MISSED_BUSFREE)
1339
1340
1341/*
1342 * Save data pointers message:
1343 * Copying RAM values back to SCB, for Save Data Pointers message, but
1344 * only if we've actually been into a data phase to change them.  This
1345 * protects against bogus data in scratch ram and the residual counts
1346 * since they are only initialized when we go into data_in or data_out.
1347 * Ack the message as soon as possible.
1348 */
1349SET_SRC_MODE	M_DFF1;
1350SET_DST_MODE	M_DFF1;
1351mesgin_sdptrs:
1352	mov	NONE,SCSIDAT;		/*dummy read from latch to ACK*/
1353	test	SEQ_FLAGS, DPHASE	jz ITloop;
1354	call	save_pointers;
1355	jmp	ITloop;
1356
1357save_pointers:
1358	/*
1359	 * If we are asked to save our position at the end of the
1360	 * transfer, just mark us at the end rather than perform a
1361	 * full save.
1362	 */
1363	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jz save_pointers_full;
1364	or	SCB_SGPTR, SG_LIST_NULL ret;
1365
1366save_pointers_full:
1367	/*
1368	 * The SCB_DATAPTR becomes the current SHADDR.
1369	 * All other information comes directly from our residual
1370	 * state.
1371	 */
1372	bmov	SCB_DATAPTR, SHADDR, 8;
1373	bmov	SCB_DATACNT, SCB_RESIDUAL_DATACNT, 8 ret;
1374
1375/*
1376 * Restore pointers message?  Data pointers are recopied from the
1377 * SCB anytime we enter a data phase for the first time, so all
1378 * we need to do is clear the DPHASE flag and let the data phase
1379 * code do the rest.  We also reset/reallocate the FIFO to make
1380 * sure we have a clean start for the next data or command phase.
1381 */
1382mesgin_rdptrs:
1383	and	SEQ_FLAGS, ~DPHASE;
1384	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1)) jnz msgin_rdptrs_get_fifo;
1385	mvi	DFFSXFRCTL, RSTCHN|CLRSHCNT;
1386	SET_MODE(M_SCSI, M_SCSI)
1387msgin_rdptrs_get_fifo:
1388	call	allocate_fifo;
1389	jmp	mesgin_done;
1390
1391phase_lock:     
1392	if ((ahd->bugs & AHD_EARLY_REQ_BUG) != 0) {
1393		/*
1394		 * Don't ignore persistent REQ assertions just because
1395		 * they were asserted within the bus settle delay window.
1396		 * This allows us to tolerate devices like the GEM318
1397		 * that violate the SCSI spec.  We are careful not to
1398		 * count REQ while we are waiting for it to fall during
1399		 * an async phase due to our asserted ACK.  Each
1400		 * sequencer instruction takes ~25ns, so the REQ must
1401		 * last at least 100ns in order to be counted as a true
1402		 * REQ.
1403		 */
1404		test	SCSIPHASE, 0xFF jnz phase_locked;
1405		test	SCSISIGI, ACKI jnz phase_lock;
1406		test	SCSISIGI, REQI jz phase_lock;
1407		test	SCSIPHASE, 0xFF jnz phase_locked;
1408		test	SCSISIGI, ACKI jnz phase_lock;
1409		test	SCSISIGI, REQI jz phase_lock;
1410phase_locked:
1411	} else {
1412		test	SCSIPHASE, 0xFF jz .;
1413	}
1414	test	SSTAT1, SCSIPERR jnz phase_lock;
1415phase_lock_latch_phase:
1416	and	LASTPHASE, PHASE_MASK, SCSISIGI ret;
1417
1418/*
1419 * Functions to read data in Automatic PIO mode.
1420 *
1421 * An ACK is not sent on input from the target until SCSIDATL is read from.
1422 * So we wait until SCSIDATL is latched (the usual way), then read the data
1423 * byte directly off the bus using SCSIBUSL.  When we have pulled the ATN
1424 * line, or we just want to acknowledge the byte, then we do a dummy read
1425 * from SCISDATL.  The SCSI spec guarantees that the target will hold the
1426 * data byte on the bus until we send our ACK.
1427 *
1428 * The assumption here is that these are called in a particular sequence,
1429 * and that REQ is already set when inb_first is called.  inb_{first,next}
1430 * use the same calling convention as inb.
1431 */
1432inb_next:
1433	mov	NONE,SCSIDAT;		/*dummy read from latch to ACK*/
1434inb_next_wait:
1435	/*
1436	 * If there is a parity error, wait for the kernel to
1437	 * see the interrupt and prepare our message response
1438	 * before continuing.
1439	 */
1440	test	SCSIPHASE, 0xFF jz .;
1441	test	SSTAT1, SCSIPERR jnz inb_next_wait;
1442inb_next_check_phase:
1443	and	LASTPHASE, PHASE_MASK, SCSISIGI;
1444	cmp	LASTPHASE, P_MESGIN jne mesgin_phasemis;
1445inb_first:
1446	clr	DINDEX[1];
1447	mov	DINDEX,SINDEX;
1448	mov	DINDIR,SCSIBUS	ret;		/*read byte directly from bus*/
1449inb_last:
1450	mov	NONE,SCSIDAT ret;		/*dummy read from latch to ACK*/
1451
1452mk_mesg:
1453	mvi	SCSISIGO, ATNO;
1454	mov	MSG_OUT,SINDEX ret;
1455
1456SET_SRC_MODE	M_DFF1;
1457SET_DST_MODE	M_DFF1;
1458disable_ccsgen:
1459	test	SG_STATE, FETCH_INPROG jz disable_ccsgen_fetch_done;
1460	clr	CCSGCTL;
1461disable_ccsgen_fetch_done:
1462	clr	SG_STATE ret;
1463
1464service_fifo:
1465	/*
1466	 * Do we have any prefetch left???
1467	 */
1468	test	SG_STATE, SEGS_AVAIL jnz idle_sg_avail;
1469
1470	/*
1471	 * Can this FIFO have access to the S/G cache yet?
1472	 */
1473	test	CCSGCTL, SG_CACHE_AVAIL jz return;
1474
1475	/* Did we just finish fetching segs? */
1476	test	CCSGCTL, CCSGDONE jnz idle_sgfetch_complete;
1477
1478	/* Are we actively fetching segments? */
1479	test	CCSGCTL, CCSGENACK jnz return;
1480
1481	/*
1482	 * Should the other FIFO get the S/G cache first?  If
1483	 * both FIFOs have been allocated since we last checked
1484	 * any FIFO, it is important that we service a FIFO
1485	 * that is not actively on the bus first.  This guarantees
1486	 * that a FIFO will be freed to handle snapshot requests for
1487	 * any FIFO that is still on the bus.  Chips with RTI do not
1488	 * perform snapshots, so don't bother with this test there.
1489	 */
1490	if ((ahd->features & AHD_RTI) == 0) {
1491		/*
1492		 * If we're not still receiving SCSI data,
1493		 * it is safe to allocate the S/G cache to
1494		 * this FIFO.
1495		 */
1496		test	DFCNTRL, SCSIEN jz idle_sgfetch_start;
1497
1498		/*
1499		 * Switch to the other FIFO.  Non-RTI chips
1500		 * also have the "set mode" bug, so we must
1501		 * disable interrupts during the switch.
1502		 */
1503		mvi	SEQINTCTL, INTVEC1DSL;
1504		xor	MODE_PTR, MK_MODE(M_DFF1, M_DFF1);
1505
1506		/*
1507		 * If the other FIFO needs loading, then it
1508		 * must not have claimed the S/G cache yet
1509		 * (SG_CACHE_AVAIL would have been cleared in
1510		 * the original FIFO mode and we test this above).
1511		 * Return to the idle loop so we can process the
1512		 * FIFO not currently on the bus first.
1513		 */
1514		test	SG_STATE, LOADING_NEEDED jz idle_sgfetch_okay;
1515		clr	SEQINTCTL ret;
1516idle_sgfetch_okay:
1517		xor	MODE_PTR, MK_MODE(M_DFF1, M_DFF1);
1518		clr	SEQINTCTL;
1519	}
1520
1521idle_sgfetch_start:
1522	/*
1523	 * We fetch a "cacheline aligned" and sized amount of data
1524	 * so we don't end up referencing a non-existent page.
1525	 * Cacheline aligned is in quotes because the kernel will
1526	 * set the prefetch amount to a reasonable level if the
1527	 * cacheline size is unknown.
1528	 */
1529	bmov	SGHADDR, SCB_RESIDUAL_SGPTR, 4;
1530	mvi	SGHCNT, SG_PREFETCH_CNT;
1531	if ((ahd->bugs & AHD_REG_SLOW_SETTLE_BUG) != 0) {
1532		/*
1533		 * Need two instructions between "touches" of SGHADDR.
1534		 */
1535		nop;
1536	}
1537	and	SGHADDR[0], SG_PREFETCH_ALIGN_MASK, SCB_RESIDUAL_SGPTR;
1538	mvi	CCSGCTL, CCSGEN|CCSGRESET;
1539	or	SG_STATE, FETCH_INPROG ret;
1540idle_sgfetch_complete:
1541	/*
1542	 * Guard against SG_CACHE_AVAIL activating during sg fetch
1543	 * request in the other FIFO.
1544	 */
1545	test	SG_STATE, FETCH_INPROG jz return;
1546	clr	CCSGCTL;
1547	and	CCSGADDR, SG_PREFETCH_ADDR_MASK, SCB_RESIDUAL_SGPTR;
1548	mvi	SG_STATE, SEGS_AVAIL|LOADING_NEEDED;
1549idle_sg_avail:
1550	/* Does the hardware have space for another SG entry? */
1551	test	DFSTATUS, PRELOAD_AVAIL jz return;
1552	/*
1553	 * On the A, preloading a segment before HDMAENACK
1554	 * comes true can clobber the shadow address of the
1555	 * first segment in the S/G FIFO.  Wait until it is
1556	 * safe to proceed.
1557	 */
1558	if ((ahd->features & AHD_NEW_DFCNTRL_OPTS) == 0) {
1559		test	DFCNTRL, HDMAENACK jz return;
1560	}
1561	if ((ahd->flags & AHD_64BIT_ADDRESSING) != 0) {
1562		bmov	HADDR, CCSGRAM, 8;
1563	} else {
1564		bmov 	HADDR, CCSGRAM, 4;
1565	}
1566	bmov	HCNT, CCSGRAM, 3;
1567	bmov	SCB_RESIDUAL_DATACNT[3], CCSGRAM, 1;
1568	if ((ahd->flags & AHD_39BIT_ADDRESSING) != 0) {
1569		and	HADDR[4], SG_HIGH_ADDR_BITS, SCB_RESIDUAL_DATACNT[3];
1570	}
1571	if ((ahd->flags & AHD_64BIT_ADDRESSING) != 0) {
1572		/* Skip 4 bytes of pad. */
1573		add	CCSGADDR, 4;
1574	}
1575sg_advance:
1576	clr	A;			/* add sizeof(struct scatter) */
1577	add	SCB_RESIDUAL_SGPTR[0],SG_SIZEOF;
1578	adc	SCB_RESIDUAL_SGPTR[1],A;
1579	adc	SCB_RESIDUAL_SGPTR[2],A;
1580	adc	SCB_RESIDUAL_SGPTR[3],A;
1581	mov	SINDEX, SCB_RESIDUAL_SGPTR[0];
1582	test	SCB_RESIDUAL_DATACNT[3], SG_LAST_SEG jz . + 3;
1583	or	SINDEX, LAST_SEG;
1584	clr	SG_STATE;
1585	mov	SG_CACHE_PRE, SINDEX;
1586	if ((ahd->features & AHD_NEW_DFCNTRL_OPTS) != 0) {
1587		/*
1588		 * Use SCSIENWRDIS so that SCSIEN is never
1589		 * modified by this operation.
1590		 */
1591		or	DFCNTRL, PRELOADEN|HDMAEN|SCSIENWRDIS;
1592	} else {
1593		or	DFCNTRL, PRELOADEN|HDMAEN;
1594	}
1595	/*
1596	 * Do we have another segment in the cache?
1597	 */
1598	add	NONE, SG_PREFETCH_CNT_LIMIT, CCSGADDR;
1599	jnc	return;
1600	and	SG_STATE, ~SEGS_AVAIL ret;
1601
1602/*
1603 * Initialize the DMA address and counter from the SCB.
1604 */
1605load_first_seg:
1606	bmov	HADDR, SCB_DATAPTR, 11;
1607	and	REG_ISR, ~SG_FULL_RESID, SCB_SGPTR[0];
1608	test	SCB_DATACNT[3], SG_LAST_SEG jz . + 2;
1609	or	REG_ISR, LAST_SEG;
1610	mov	SG_CACHE_PRE, REG_ISR;
1611	mvi	DFCNTRL, (PRELOADEN|SCSIEN|HDMAEN);
1612	/*
1613	 * Since we've are entering a data phase, we will
1614	 * rely on the SCB_RESID* fields.  Initialize the
1615	 * residual and clear the full residual flag.
1616	 */
1617	and	SCB_SGPTR[0], ~SG_FULL_RESID;
1618	bmov	SCB_RESIDUAL_DATACNT[3], SCB_DATACNT[3], 5;
1619	/* If we need more S/G elements, tell the idle loop */
1620	test	SCB_RESIDUAL_DATACNT[3], SG_LAST_SEG jnz . + 2;
1621	mvi	SG_STATE, LOADING_NEEDED ret;
1622	clr	SG_STATE ret;
1623
1624p_data_handle_xfer:
1625	call	setjmp;
1626	test	SG_STATE, LOADING_NEEDED jnz service_fifo;
1627p_data_clear_handler:
1628	or	LONGJMP_ADDR[1], INVALID_ADDR ret;
1629
1630p_data:
1631	test	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT	jz p_data_allowed;
1632	SET_SEQINTCODE(PROTO_VIOLATION)
1633p_data_allowed:
1634 
1635	test	SEQ_FLAGS, DPHASE	jz data_phase_initialize;
1636
1637	/*
1638	 * If we re-enter the data phase after going through another
1639	 * phase, our transfer location has almost certainly been
1640	 * corrupted by the interveining, non-data, transfers.  Ask
1641	 * the host driver to fix us up based on the transfer residual
1642	 * unless we already know that we should be bitbucketing.
1643	 */
1644	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jnz p_data_bitbucket;
1645	SET_SEQINTCODE(PDATA_REINIT)
1646	jmp	data_phase_inbounds;
1647
1648p_data_bitbucket:
1649	/*
1650	 * Turn on `Bit Bucket' mode, wait until the target takes
1651	 * us to another phase, and then notify the host.
1652	 */
1653	mov	SAVED_MODE, MODE_PTR;
1654	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
1655		jnz bitbucket_not_m_dff;
1656	/*
1657	 * Ensure that any FIFO contents are cleared out and the
1658	 * FIFO free'd prior to starting the BITBUCKET.  BITBUCKET
1659	 * doesn't discard data already in the FIFO.
1660	 */
1661	mvi	DFFSXFRCTL, RSTCHN|CLRSHCNT;
1662	SET_MODE(M_SCSI, M_SCSI)
1663bitbucket_not_m_dff:
1664	or	SXFRCTL1,BITBUCKET;
1665	/* Wait for non-data phase. */
1666	test	SCSIPHASE, ~DATA_PHASE_MASK jz .;
1667	and	SXFRCTL1, ~BITBUCKET;
1668	RESTORE_MODE(SAVED_MODE)
1669SET_SRC_MODE	M_DFF1;
1670SET_DST_MODE	M_DFF1;
1671	SET_SEQINTCODE(DATA_OVERRUN)
1672	jmp	ITloop;
1673
1674data_phase_initialize:
1675	test	SCB_SGPTR[0], SG_LIST_NULL jnz p_data_bitbucket;
1676	call	load_first_seg;
1677data_phase_inbounds:
1678	/* We have seen a data phase at least once. */
1679	or	SEQ_FLAGS, DPHASE;
1680	mov	SAVED_MODE, MODE_PTR;
1681	test	SG_STATE, LOADING_NEEDED jz data_group_dma_loop;
1682	call	p_data_handle_xfer;
1683data_group_dma_loop:
1684	/*
1685	 * The transfer is complete if either the last segment
1686	 * completes or the target changes phase.  Both conditions
1687	 * will clear SCSIEN.
1688	 */
1689	call	idle_loop_service_fifos;
1690	call	idle_loop_cchan;
1691	call	idle_loop_gsfifo;
1692	RESTORE_MODE(SAVED_MODE)
1693	test	DFCNTRL, SCSIEN jnz data_group_dma_loop;
1694
1695data_group_dmafinish:
1696	/*
1697	 * The transfer has terminated either due to a phase
1698	 * change, and/or the completion of the last segment.
1699	 * We have two goals here.  Do as much other work
1700	 * as possible while the data fifo drains on a read
1701	 * and respond as quickly as possible to the standard
1702	 * messages (save data pointers/disconnect and command
1703	 * complete) that usually follow a data phase.
1704	 */
1705	call	calc_residual;
1706
1707	/*
1708	 * Go ahead and shut down the DMA engine now.
1709	 */
1710	test	DFCNTRL, DIRECTION jnz data_phase_finish;
1711data_group_fifoflush:
1712	if ((ahd->bugs & AHD_AUTOFLUSH_BUG) != 0) {
1713		or	DFCNTRL, FIFOFLUSH;
1714	}
1715	/*
1716	 * We have enabled the auto-ack feature.  This means
1717	 * that the controller may have already transferred
1718	 * some overrun bytes into the data FIFO and acked them
1719	 * on the bus.  The only way to detect this situation is
1720	 * to wait for LAST_SEG_DONE to come true on a completed
1721	 * transfer and then test to see if the data FIFO is
1722	 * non-empty.  We know there is more data yet to transfer
1723	 * if SG_LIST_NULL is not yet set, thus there cannot be
1724	 * an overrun.
1725	 */
1726	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jz data_phase_finish;
1727	test	SG_CACHE_SHADOW, LAST_SEG_DONE jz .;
1728	test	DFSTATUS, FIFOEMP jnz data_phase_finish;
1729	/* Overrun */
1730	jmp	p_data;
1731data_phase_finish:
1732	/*
1733	 * If the target has left us in data phase, loop through
1734	 * the dma code again.  We will only loop if there is a
1735	 * data overrun.  
1736	 */
1737	if ((ahd->flags & AHD_TARGETROLE) != 0) {
1738		test	SSTAT0, TARGET jnz data_phase_done;
1739	}
1740	if ((ahd->flags & AHD_INITIATORROLE) != 0) {
1741		test	SSTAT1, REQINIT jz .;
1742		test	SCSIPHASE, DATA_PHASE_MASK jnz p_data;
1743	}
1744
1745data_phase_done:
1746	/* Kill off any pending prefetch */
1747	call	disable_ccsgen;
1748	or 	LONGJMP_ADDR[1], INVALID_ADDR;
1749
1750	if ((ahd->flags & AHD_TARGETROLE) != 0) {
1751		test	SEQ_FLAGS, DPHASE_PENDING jz ITloop;
1752		/*
1753		and	SEQ_FLAGS, ~DPHASE_PENDING;
1754		 * For data-in phases, wait for any pending acks from the
1755		 * initiator before changing phase.  We only need to
1756		 * send Ignore Wide Residue messages for data-in phases.
1757		test	DFCNTRL, DIRECTION jz target_ITloop;
1758		test	SSTAT1, REQINIT	jnz .;
1759		test	SCB_TASK_ATTRIBUTE, SCB_XFERLEN_ODD jz target_ITloop;
1760		SET_MODE(M_SCSI, M_SCSI)
1761		test	NEGCONOPTS, WIDEXFER jz target_ITloop;
1762		 */
1763		/*
1764		 * Issue an Ignore Wide Residue Message.
1765		mvi	P_MESGIN|BSYO call change_phase;
1766		mvi	MSG_IGN_WIDE_RESIDUE call target_outb;
1767		mvi	1 call target_outb;
1768		jmp	target_ITloop;
1769		 */
1770	} else {
1771		jmp	ITloop;
1772	}
1773
1774/*
1775 * We assume that, even though data may still be
1776 * transferring to the host, that the SCSI side of
1777 * the DMA engine is now in a static state.  This
1778 * allows us to update our notion of where we are
1779 * in this transfer.
1780 *
1781 * If, by chance, we stopped before being able
1782 * to fetch additional segments for this transfer,
1783 * yet the last S/G was completely exhausted,
1784 * call our idle loop until it is able to load
1785 * another segment.  This will allow us to immediately
1786 * pickup on the next segment on the next data phase.
1787 *
1788 * If we happened to stop on the last segment, then
1789 * our residual information is still correct from
1790 * the idle loop and there is no need to perform
1791 * any fixups.
1792 */
1793residual_before_last_seg:
1794	test    MDFFSTAT, SHVALID	jnz sgptr_fixup;
1795	/*
1796	 * Can never happen from an interrupt as the packetized
1797	 * hardware will only interrupt us once SHVALID or
1798	 * LAST_SEG_DONE.
1799	 */
1800	call	idle_loop_service_fifos;
1801	RESTORE_MODE(SAVED_MODE)
1802	/* FALLTHROUGH */
1803calc_residual:
1804	test	SG_CACHE_SHADOW, LAST_SEG jz residual_before_last_seg;
1805	/* Record if we've consumed all S/G entries */
1806	test	MDFFSTAT, SHVALID	jz . + 2;
1807	bmov	SCB_RESIDUAL_DATACNT, SHCNT, 3 ret;
1808	or	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL ret;
1809
1810sgptr_fixup:
1811	/*
1812	 * Fixup the residual next S/G pointer.  The S/G preload
1813	 * feature of the chip allows us to load two elements
1814	 * in addition to the currently active element.  We
1815	 * store the bottom byte of the next S/G pointer in
1816	 * the SG_CACHE_PTR register so we can restore the
1817	 * correct value when the DMA completes.  If the next
1818	 * sg ptr value has advanced to the point where higher
1819	 * bytes in the address have been affected, fix them
1820	 * too.
1821	 */
1822	test	SG_CACHE_SHADOW, 0x80 jz sgptr_fixup_done;
1823	test	SCB_RESIDUAL_SGPTR[0], 0x80 jnz sgptr_fixup_done;
1824	add	SCB_RESIDUAL_SGPTR[1], -1;
1825	adc	SCB_RESIDUAL_SGPTR[2], -1; 
1826	adc	SCB_RESIDUAL_SGPTR[3], -1;
1827sgptr_fixup_done:
1828	and	SCB_RESIDUAL_SGPTR[0], SG_ADDR_MASK, SG_CACHE_SHADOW;
1829	clr	SCB_RESIDUAL_DATACNT[3]; /* We are not the last seg */
1830	bmov	SCB_RESIDUAL_DATACNT, SHCNT, 3 ret;
1831
1832export timer_isr:
1833	call	issue_cmdcmplt;
1834	mvi	CLRSEQINTSTAT, CLRSEQ_SWTMRTO;
1835	if ((ahd->bugs & AHD_SET_MODE_BUG) != 0) {
1836		/*
1837		 * In H2A4, the mode pointer is not saved
1838		 * for intvec2, but is restored on iret.
1839		 * This can lead to the restoration of a
1840		 * bogus mode ptr.  Manually clear the
1841		 * intmask bits and do a normal return
1842		 * to compensate.
1843		 */
1844		and	SEQINTCTL, ~(INTMASK2|INTMASK1) ret;
1845	} else {
1846		or	SEQINTCTL, IRET ret;
1847	}
1848
1849export seq_isr:
1850	if ((ahd->features & AHD_RTI) == 0) {
1851		/*
1852		 * On RevA Silicon, if the target returns us to data-out
1853		 * after we have already trained for data-out, it is
1854		 * possible for us to transition the free running clock to
1855		 * data-valid before the required 100ns P1 setup time (8 P1
1856		 * assertions in fast-160 mode).  This will only happen if
1857		 * this L-Q is a continuation of a data transfer for which
1858		 * we have already prefetched data into our FIFO (LQ/Data
1859		 * followed by LQ/Data for the same write transaction).
1860		 * This can cause some target implementations to miss the
1861		 * first few data transfers on the bus.  We detect this
1862		 * situation by noticing that this is the first data transfer
1863		 * after an LQ (LQIWORKONLQ true), that the data transfer is
1864		 * a continuation of a transfer already setup in our FIFO
1865		 * (SAVEPTRS interrupt), and that the transaction is a write
1866		 * (DIRECTION set in DFCNTRL). The delay is performed by
1867		 * disabling SCSIEN until we see the first REQ from the
1868		 * target.
1869		 * 
1870		 * First instruction in an ISR cannot be a branch on
1871		 * Rev A.  Snapshot LQISTAT2 so the status is not missed
1872		 * and deffer the test by one instruction.
1873		 */
1874		mov	REG_ISR, LQISTAT2;
1875		test	REG_ISR, LQIWORKONLQ jz main_isr;
1876		test	SEQINTSRC, SAVEPTRS  jz main_isr;
1877		test	LONGJMP_ADDR[1], INVALID_ADDR jz saveptr_active_fifo;
1878		/*
1879		 * Switch to the active FIFO after clearing the snapshot
1880		 * savepointer in the current FIFO.  We do this so that
1881		 * a pending CTXTDONE or SAVEPTR is visible in the active
1882		 * FIFO.  This status is the only way we can detect if we
1883		 * have lost the race (e.g. host paused us) and our attempts
1884		 * to disable the channel occurred after all REQs were
1885		 * already seen and acked (REQINIT never comes true).
1886		 */
1887		mvi	DFFSXFRCTL, CLRCHN;
1888		xor	MODE_PTR, MK_MODE(M_DFF1, M_DFF1);
1889		test	DFCNTRL, DIRECTION jz interrupt_return;
1890		and	DFCNTRL, ~SCSIEN;
1891snapshot_wait_data_valid:
1892		test	SEQINTSRC, (CTXTDONE|SAVEPTRS) jnz interrupt_return;
1893		test	SSTAT1, REQINIT	jz snapshot_wait_data_valid;
1894snapshot_data_valid:
1895		or	DFCNTRL, SCSIEN;
1896		or	SEQINTCTL, IRET ret;
1897snapshot_saveptr:
1898		mvi	DFFSXFRCTL, CLRCHN;
1899		or	SEQINTCTL, IRET ret;
1900main_isr:
1901	}
1902	test	SEQINTSRC, CFG4DATA	jnz cfg4data_intr;
1903	test	SEQINTSRC, CFG4ISTAT	jnz cfg4istat_intr;
1904	test	SEQINTSRC, SAVEPTRS	jnz saveptr_intr;
1905	test	SEQINTSRC, CFG4ICMD	jnz cfg4icmd_intr;
1906	SET_SEQINTCODE(INVALID_SEQINT)
1907
1908/*
1909 * There are two types of save pointers interrupts:
1910 * The first is a snapshot save pointers where the current FIFO is not
1911 * active and contains a snapshot of the current poniter information.
1912 * This happens between packets in a stream for a single L_Q.  Since we
1913 * are not performing a pointer save, we can safely clear the channel
1914 * so it can be used for other transactions.  On RTI capable controllers,
1915 * where snapshots can, and are, disabled, the code to handle this type
1916 * of snapshot is not active.
1917 *
1918 * The second case is a save pointers on an active FIFO which occurs
1919 * if the target changes to a new L_Q or busfrees/QASes and the transfer
1920 * has a residual.  This should occur coincident with a ctxtdone.  We
1921 * disable the interrupt and allow our active routine to handle the
1922 * save.
1923 */
1924saveptr_intr:
1925	if ((ahd->features & AHD_RTI) == 0) {
1926		test	LONGJMP_ADDR[1], INVALID_ADDR jnz snapshot_saveptr;
1927	}
1928saveptr_active_fifo:
1929	and	SEQIMODE, ~ENSAVEPTRS;
1930	or	SEQINTCTL, IRET ret;
1931
1932cfg4data_intr:
1933	test	SCB_SGPTR[0], SG_LIST_NULL jnz pkt_handle_overrun_inc_use_count;
1934	call	load_first_seg;
1935	call	pkt_handle_xfer;
1936	inc	SCB_FIFO_USE_COUNT;
1937interrupt_return:
1938	or	SEQINTCTL, IRET ret;
1939
1940cfg4istat_intr:
1941	call	freeze_queue;
1942	add	NONE, -13, SCB_CDB_LEN;
1943	jnc	cfg4istat_have_sense_addr;
1944	test	SCB_CDB_LEN, SCB_CDB_LEN_PTR jnz cfg4istat_have_sense_addr;
1945	/*
1946	 * Host sets up address/count and enables transfer.
1947	 */
1948	SET_SEQINTCODE(CFG4ISTAT_INTR)
1949	jmp	cfg4istat_setup_handler;
1950cfg4istat_have_sense_addr:
1951	bmov	HADDR, SCB_SENSE_BUSADDR, 4;
1952	mvi	HCNT[1], (AHD_SENSE_BUFSIZE >> 8);
1953	mvi	SG_CACHE_PRE, LAST_SEG;
1954	mvi	DFCNTRL, PRELOADEN|SCSIEN|HDMAEN;
1955cfg4istat_setup_handler:
1956	/*
1957	 * Status pkt is transferring to host.
1958	 * Wait in idle loop for transfer to complete.
1959	 * If a command completed before an attempted
1960	 * task management function completed, notify the host.
1961	 */
1962	test	SCB_TASK_MANAGEMENT, 0xFF jz cfg4istat_no_taskmgmt_func;
1963	SET_SEQINTCODE(TASKMGMT_CMD_CMPLT_OKAY)
1964cfg4istat_no_taskmgmt_func:
1965	call	pkt_handle_status;
1966	or	SEQINTCTL, IRET ret;
1967
1968cfg4icmd_intr:
1969	/*
1970	 * In the case of DMAing a CDB from the host, the normal
1971	 * CDB buffer is formatted with an 8 byte address followed
1972	 * by a 1 byte count.
1973	 */
1974	bmov	HADDR[0], SCB_HOST_CDB_PTR, 9;
1975	mvi	SG_CACHE_PRE, LAST_SEG;
1976	mvi	DFCNTRL, (PRELOADEN|SCSIEN|HDMAEN);
1977	call	pkt_handle_cdb;
1978	or	SEQINTCTL, IRET ret;
1979
1980/*
1981 * See if the target has gone on in this context creating an
1982 * overrun condition.  For the write case, the hardware cannot
1983 * ack bytes until data are provided.  So, if the target begins
1984 * another  packet without changing contexts, implying we are
1985 * not sitting on a packet boundary, we are in an overrun
1986 * situation.  For the read case, the hardware will continue to
1987 * ack bytes into the FIFO, and may even ack the last overrun packet
1988 * into the FIFO.   If the FIFO should become non-empty, we are in
1989 * a read overrun case.
1990 */
1991#define check_overrun							\
1992	/* Not on a packet boundary. */					\
1993	test 	MDFFSTAT, DLZERO jz pkt_handle_overrun;			\
1994	test	DFSTATUS, FIFOEMP jz pkt_handle_overrun
1995
1996pkt_handle_xfer:
1997	test	SG_STATE, LOADING_NEEDED jz pkt_last_seg;
1998	call	setjmp;
1999	test	SEQINTSRC, SAVEPTRS jnz pkt_saveptrs;
2000	test	SCSIPHASE, ~DATA_PHASE_MASK jz . + 2;
2001	test	SCSISIGO, ATNO jnz . + 2;
2002	test	SSTAT2, NONPACKREQ jz pkt_service_fifo;
2003	/*
2004	 * Defer handling of this NONPACKREQ until we
2005	 * can be sure it pertains to this FIFO.  SAVEPTRS
2006	 * will not be asserted if the NONPACKREQ is for us,
2007	 * so we must simulate it if shadow is valid.  If
2008	 * shadow is not valid, keep running this FIFO until we
2009	 * have satisfied the transfer by loading segments and
2010	 * waiting for either shadow valid or last_seg_done.
2011	 */
2012	test	MDFFSTAT, SHVALID jnz pkt_saveptrs;
2013pkt_service_fifo:
2014	test	SG_STATE, LOADING_NEEDED jnz service_fifo;
2015pkt_last_seg:
2016	call	setjmp;
2017	test	SEQINTSRC, SAVEPTRS jnz pkt_saveptrs;
2018	test	SG_CACHE_SHADOW, LAST_SEG_DONE jnz pkt_last_seg_done;
2019	test	SCSIPHASE, ~DATA_PHASE_MASK jz . + 2;
2020	test	SCSISIGO, ATNO jnz . + 2;
2021	test	SSTAT2, NONPACKREQ jz return;
2022	test	MDFFSTAT, SHVALID jz return;
2023	/* FALLTHROUGH */
2024
2025/*
2026 * Either a SAVEPTRS interrupt condition is pending for this FIFO
2027 * or we have a pending NONPACKREQ for this FIFO.  We differentiate
2028 * between the two by capturing the state of the SAVEPTRS interrupt
2029 * prior to clearing this status and executing the common code for
2030 * these two cases.
2031 */
2032pkt_saveptrs:
2033BEGIN_CRITICAL;
2034	if ((ahd->bugs & AHD_AUTOFLUSH_BUG) != 0) {
2035		or	DFCNTRL, FIFOFLUSH;
2036	}
2037	mov	REG0, SEQINTSRC;
2038	call	calc_residual;
2039	call	save_pointers;
2040	mvi	CLRSEQINTSRC, CLRSAVEPTRS;
2041	call	disable_ccsgen;
2042	or	SEQIMODE, ENSAVEPTRS;
2043	test	DFCNTRL, DIRECTION jnz pkt_saveptrs_check_status;
2044	test	DFSTATUS, FIFOEMP jnz pkt_saveptrs_check_status;
2045	/*
2046	 * Keep a handler around for this FIFO until it drains
2047	 * to the host to guarantee that we don't complete the
2048	 * command to the host before the data arrives.
2049	 */
2050pkt_saveptrs_wait_fifoemp:
2051	call	setjmp;
2052	test	DFSTATUS, FIFOEMP jz return;
2053pkt_saveptrs_check_status:
2054	or	LONGJMP_ADDR[1], INVALID_ADDR;
2055	test	REG0, SAVEPTRS jz unexpected_nonpkt_phase;
2056	dec	SCB_FIFO_USE_COUNT;
2057	test	SCB_CONTROL, STATUS_RCVD jnz pkt_complete_scb_if_fifos_idle;
2058	mvi	DFFSXFRCTL, CLRCHN ret;
2059
2060/*
2061 * LAST_SEG_DONE status has been seen in the current FIFO.
2062 * This indicates that all of the allowed data for this
2063 * command has transferred across the SCSI and host buses.
2064 * Check for overrun and see if we can complete this command.
2065 */
2066pkt_last_seg_done:
2067	/*
2068	 * Mark transfer as completed.
2069	 */
2070	or	SCB_SGPTR, SG_LIST_NULL;
2071
2072	/*
2073	 * Wait for the current context to finish to verify that
2074	 * no overrun condition has occurred.
2075	 */
2076	test	SEQINTSRC, CTXTDONE jnz pkt_ctxt_done;
2077	call	setjmp;
2078pkt_wait_ctxt_done_loop:
2079	test	SEQINTSRC, CTXTDONE jnz pkt_ctxt_done;
2080	/*
2081	 * A sufficiently large overrun or a NONPACKREQ may
2082	 * prevent CTXTDONE from ever asserting, so we must
2083	 * poll for these statuses too.
2084	 */
2085	check_overrun;
2086	test	SSTAT2, NONPACKREQ jz return;
2087	test	SEQINTSRC, CTXTDONE jz unexpected_nonpkt_phase;
2088	/* FALLTHROUGH */
2089
2090pkt_ctxt_done:
2091	check_overrun;
2092	or	LONGJMP_ADDR[1], INVALID_ADDR;
2093	/*
2094	 * If status has been received, it is safe to skip
2095	 * the check to see if another FIFO is active because
2096	 * LAST_SEG_DONE has been observed.  However, we check
2097	 * the FIFO anyway since it costs us only one extra
2098	 * instruction to leverage common code to perform the
2099	 * SCB completion.
2100	 */
2101	dec	SCB_FIFO_USE_COUNT;
2102	test	SCB_CONTROL, STATUS_RCVD jnz pkt_complete_scb_if_fifos_idle;
2103	mvi	DFFSXFRCTL, CLRCHN ret;
2104END_CRITICAL;
2105
2106/*
2107 * Must wait until CDB xfer is over before issuing the
2108 * clear channel.
2109 */
2110pkt_handle_cdb:
2111	call	setjmp;
2112	test	SG_CACHE_SHADOW, LAST_SEG_DONE jz return;
2113	or	LONGJMP_ADDR[1], INVALID_ADDR;
2114	mvi	DFFSXFRCTL, CLRCHN ret;
2115
2116/*
2117 * Watch over the status transfer.  Our host sense buffer is
2118 * large enough to take the maximum allowed status packet.
2119 * None-the-less, we must still catch and report overruns to
2120 * the host.  Additionally, properly catch unexpected non-packet
2121 * phases that are typically caused by CRC errors in status packet
2122 * transmission.
2123 */
2124pkt_handle_status:
2125	call	setjmp;
2126	test	SG_CACHE_SHADOW, LAST_SEG_DONE jnz pkt_status_check_overrun;
2127	test	SEQINTSRC, CTXTDONE jz pkt_status_check_nonpackreq;
2128	test	SG_CACHE_SHADOW, LAST_SEG_DONE jnz pkt_status_check_overrun;
2129pkt_status_IU_done:
2130	if ((ahd->bugs & AHD_AUTOFLUSH_BUG) != 0) {
2131		or	DFCNTRL, FIFOFLUSH;
2132	}
2133	test	DFSTATUS, FIFOEMP jz return;
2134BEGIN_CRITICAL;
2135	or	LONGJMP_ADDR[1], INVALID_ADDR;
2136	mvi	SCB_SCSI_STATUS, STATUS_PKT_SENSE;
2137	or	SCB_CONTROL, STATUS_RCVD;
2138	jmp	pkt_complete_scb_if_fifos_idle;
2139END_CRITICAL;
2140pkt_status_check_overrun:
2141	/*
2142	 * Status PKT overruns are uncerimoniously recovered with a
2143	 * bus reset.  If we've overrun, let the host know so that
2144	 * recovery can be performed.
2145	 *
2146	 * LAST_SEG_DONE has been observed.  If either CTXTDONE or
2147	 * a NONPACKREQ phase change have occurred and the FIFO is
2148	 * empty, there is no overrun.
2149	 */
2150	test	DFSTATUS, FIFOEMP jz pkt_status_report_overrun;
2151	test	SEQINTSRC, CTXTDONE jz . + 2;
2152	test	DFSTATUS, FIFOEMP jnz pkt_status_IU_done;
2153	test	SCSIPHASE, ~DATA_PHASE_MASK jz return;
2154	test	DFSTATUS, FIFOEMP jnz pkt_status_check_nonpackreq;
2155pkt_status_report_overrun:
2156	SET_SEQINTCODE(STATUS_OVERRUN)
2157	/* SEQUENCER RESTARTED */
2158pkt_status_check_nonpackreq:
2159	/*
2160	 * CTXTDONE may be held off if a NONPACKREQ is associated with
2161	 * the current context.  If a NONPACKREQ is observed, decide
2162	 * if it is for the current context.  If it is for the current
2163	 * context, we must defer NONPACKREQ processing until all data
2164	 * has transferred to the host.
2165	 */
2166	test	SCSIPHASE, ~DATA_PHASE_MASK jz return;
2167	test	SCSISIGO, ATNO jnz . + 2;
2168	test	SSTAT2, NONPACKREQ jz return;
2169	test	SEQINTSRC, CTXTDONE jnz pkt_status_IU_done;
2170	test	DFSTATUS, FIFOEMP jz return;
2171	/*
2172	 * The unexpected nonpkt phase handler assumes that any
2173	 * data channel use will have a FIFO reference count.  It
2174	 * turns out that the status handler doesn't need a references
2175	 * count since the status received flag, and thus completion
2176	 * processing, cannot be set until the handler is finished.
2177	 * We increment the count here to make the nonpkt handler
2178	 * happy.
2179	 */
2180	inc	SCB_FIFO_USE_COUNT;
2181	/* FALLTHROUGH */
2182
2183/*
2184 * Nonpackreq is a polled status.  It can come true in three situations:
2185 * we have received an L_Q, we have sent one or more L_Qs, or there is no
2186 * L_Q context associated with this REQ (REQ occurs immediately after a
2187 * (re)selection).  Routines that know that the context responsible for this
2188 * nonpackreq call directly into unexpected_nonpkt_phase.  In the case of the
2189 * top level idle loop, we exhaust all active contexts prior to determining that
2190 * we simply do not have the full I_T_L_Q for this phase.
2191 */
2192unexpected_nonpkt_phase_find_ctxt:
2193	/*
2194	 * This nonpackreq is most likely associated with one of the tags
2195	 * in a FIFO or an outgoing LQ.  Only treat it as an I_T only
2196	 * nonpackreq if we've cleared out the FIFOs and handled any
2197	 * pending SELDO.
2198	 */
2199SET_SRC_MODE	M_SCSI;
2200SET_DST_MODE	M_SCSI;
2201	and	A, FIFO1FREE|FIFO0FREE, DFFSTAT;
2202	cmp	A, FIFO1FREE|FIFO0FREE jne return;
2203	test	SSTAT0, SELDO jnz return;
2204	mvi	SCBPTR[1], SCB_LIST_NULL;
2205unexpected_nonpkt_phase:
2206	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
2207		jnz unexpected_nonpkt_mode_cleared;
2208SET_SRC_MODE	M_DFF0;
2209SET_DST_MODE	M_DFF0;
2210	or	LONGJMP_ADDR[1], INVALID_ADDR;
2211	dec	SCB_FIFO_USE_COUNT;
2212	mvi	DFFSXFRCTL, CLRCHN;
2213unexpected_nonpkt_mode_cleared:
2214	mvi	CLRSINT2, CLRNONPACKREQ;
2215	if ((ahd->bugs & AHD_BUSFREEREV_BUG) != 0) {
2216		/*
2217		 * Test to ensure that the bus has not
2218		 * already gone free prior to clearing
2219		 * any stale busfree status.  This avoids
2220		 * a window whereby a busfree just after
2221		 * a selection could be missed.
2222		 */
2223		test	SCSISIGI, BSYI jz . + 2;
2224		mvi	CLRSINT1,CLRBUSFREE;
2225		or	SIMODE1, ENBUSFREE;
2226	}
2227	test	SCSIPHASE, ~(MSG_IN_PHASE|MSG_OUT_PHASE) jnz illegal_phase;
2228	SET_SEQINTCODE(ENTERING_NONPACK)
2229	jmp	ITloop;
2230
2231illegal_phase:
2232	SET_SEQINTCODE(ILLEGAL_PHASE)
2233	jmp	ITloop;
2234
2235/*
2236 * We have entered an overrun situation.  If we have working
2237 * BITBUCKET, flip that on and let the hardware eat any overrun
2238 * data.  Otherwise use an overrun buffer in the host to simulate
2239 * BITBUCKET.
2240 */
2241pkt_handle_overrun_inc_use_count:
2242	inc	SCB_FIFO_USE_COUNT;
2243pkt_handle_overrun:
2244	SET_SEQINTCODE(CFG4OVERRUN)
2245	call	freeze_queue;
2246	if ((ahd->bugs & AHD_PKT_BITBUCKET_BUG) == 0) {
2247		or	DFFSXFRCTL, DFFBITBUCKET;
2248SET_SRC_MODE	M_DFF1;
2249SET_DST_MODE	M_DFF1;
2250	} else {
2251		call	load_overrun_buf;
2252		mvi	DFCNTRL, (HDMAEN|SCSIEN|PRELOADEN);
2253	}
2254	call	setjmp;
2255	if ((ahd->bugs & AHD_PKT_BITBUCKET_BUG) != 0) {
2256		test	DFSTATUS, PRELOAD_AVAIL jz overrun_load_done;
2257		call	load_overrun_buf;
2258		or	DFCNTRL, PRELOADEN;
2259overrun_load_done:
2260		test	SEQINTSRC, CTXTDONE jnz pkt_overrun_end;
2261	} else {
2262		test	DFFSXFRCTL, DFFBITBUCKET jz pkt_overrun_end;
2263	}
2264	test	SSTAT2, NONPACKREQ jz return;
2265pkt_overrun_end:
2266	or	SCB_RESIDUAL_SGPTR, SG_OVERRUN_RESID;
2267	test	SEQINTSRC, CTXTDONE jz unexpected_nonpkt_phase;
2268	dec	SCB_FIFO_USE_COUNT;
2269	or	LONGJMP_ADDR[1], INVALID_ADDR;
2270	test	SCB_CONTROL, STATUS_RCVD jnz pkt_complete_scb_if_fifos_idle;
2271	mvi	DFFSXFRCTL, CLRCHN ret;
2272
2273if ((ahd->bugs & AHD_PKT_BITBUCKET_BUG) != 0) {
2274load_overrun_buf:
2275	/*
2276	 * Load a dummy segment if preload space is available.
2277	 */
2278	mov 	HADDR[0], SHARED_DATA_ADDR;
2279	add	HADDR[1], PKT_OVERRUN_BUFOFFSET, SHARED_DATA_ADDR[1];
2280	mov	ACCUM_SAVE, A;
2281	clr	A;
2282	adc	HADDR[2], A, SHARED_DATA_ADDR[2];
2283	adc	HADDR[3], A, SHARED_DATA_ADDR[3];
2284	mov	A, ACCUM_SAVE;
2285	bmov	HADDR[4], ALLZEROS, 4;
2286	/* PKT_OVERRUN_BUFSIZE is a multiple of 256 */
2287	clr	HCNT[0];
2288	mvi	HCNT[1], ((PKT_OVERRUN_BUFSIZE >> 8) & 0xFF);
2289	clr	HCNT[2] ret;
2290}
v5.9
   1/*
   2 * Adaptec U320 device driver firmware for Linux and FreeBSD.
   3 *
   4 * Copyright (c) 1994-2001, 2004 Justin T. Gibbs.
   5 * Copyright (c) 2000-2002 Adaptec Inc.
   6 * All rights reserved.
   7 *
   8 * Redistribution and use in source and binary forms, with or without
   9 * modification, are permitted provided that the following conditions
  10 * are met:
  11 * 1. Redistributions of source code must retain the above copyright
  12 *    notice, this list of conditions, and the following disclaimer,
  13 *    without modification.
  14 * 2. Redistributions in binary form must reproduce at minimum a disclaimer
  15 *    substantially similar to the "NO WARRANTY" disclaimer below
  16 *    ("Disclaimer") and any redistribution must be conditioned upon
  17 *    including a substantially similar Disclaimer requirement for further
  18 *    binary redistribution.
  19 * 3. Neither the names of the above-listed copyright holders nor the names
  20 *    of any contributors may be used to endorse or promote products derived
  21 *    from this software without specific prior written permission.
  22 *
  23 * Alternatively, this software may be distributed under the terms of the
  24 * GNU General Public License ("GPL") version 2 as published by the Free
  25 * Software Foundation.
  26 *
  27 * NO WARRANTY
  28 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  29 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  30 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR
  31 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  32 * HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  33 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  34 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  35 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  36 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
  37 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  38 * POSSIBILITY OF SUCH DAMAGES.
  39 *
  40 * $FreeBSD$
  41 */
  42
  43VERSION = "$Id: //depot/aic7xxx/aic7xxx/aic79xx.seq#120 $"
  44PATCH_ARG_LIST = "struct ahd_softc *ahd"
  45PREFIX = "ahd_"
  46
  47#include "aic79xx.reg"
  48#include "scsi_message.h"
  49
  50restart:
  51if ((ahd->bugs & AHD_INTCOLLISION_BUG) != 0) {
  52	test	SEQINTCODE, 0xFF jz idle_loop;
  53	SET_SEQINTCODE(NO_SEQINT)
  54}
  55
  56idle_loop:
  57
  58	if ((ahd->bugs & AHD_INTCOLLISION_BUG) != 0) {
  59		/*
  60		 * Convert ERROR status into a sequencer
  61		 * interrupt to handle the case of an
  62		 * interrupt collision on the hardware
  63		 * setting of HWERR.
  64		 */
  65		test	ERROR, 0xFF jz no_error_set;
  66		SET_SEQINTCODE(SAW_HWERR)
  67no_error_set:
  68	}
  69	SET_MODE(M_SCSI, M_SCSI)
  70	test	SCSISEQ0, ENSELO|ENARBO jnz idle_loop_checkbus;
  71	test	SEQ_FLAGS2, SELECTOUT_QFROZEN jz check_waiting_list;
  72	/*
  73	 * If the kernel has caught up with us, thaw the queue.
  74	 */
  75	mov	A, KERNEL_QFREEZE_COUNT;
  76	cmp	QFREEZE_COUNT, A jne check_frozen_completions;
  77	mov	A, KERNEL_QFREEZE_COUNT[1];
  78	cmp	QFREEZE_COUNT[1], A jne check_frozen_completions;
  79	and	SEQ_FLAGS2, ~SELECTOUT_QFROZEN;
  80	jmp	check_waiting_list;
  81check_frozen_completions:
  82	test	SSTAT0, SELDO|SELINGO jnz idle_loop_checkbus;
  83BEGIN_CRITICAL;
  84	/*
  85	 * If we have completions stalled waiting for the qfreeze
  86	 * to take effect, move them over to the complete_scb list
  87	 * now that no selections are pending.
  88	 */
  89	cmp	COMPLETE_ON_QFREEZE_HEAD[1],SCB_LIST_NULL je idle_loop_checkbus;
  90	/*
  91	 * Find the end of the qfreeze list.  The first element has
  92	 * to be treated specially.
  93	 */
  94	bmov	SCBPTR, COMPLETE_ON_QFREEZE_HEAD, 2;
  95	cmp 	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL je join_lists;
  96	/*
  97	 * Now the normal loop.
  98	 */
  99	bmov	SCBPTR, SCB_NEXT_COMPLETE, 2;
 100	cmp 	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL jne . - 1;
 101join_lists:
 102	bmov	SCB_NEXT_COMPLETE, COMPLETE_SCB_HEAD, 2;
 103	bmov	COMPLETE_SCB_HEAD, COMPLETE_ON_QFREEZE_HEAD, 2;
 104	mvi	COMPLETE_ON_QFREEZE_HEAD[1], SCB_LIST_NULL;
 105	jmp	idle_loop_checkbus;
 106check_waiting_list:
 107	cmp	WAITING_TID_HEAD[1], SCB_LIST_NULL je idle_loop_checkbus;
 108	/*
 109	 * ENSELO is cleared by a SELDO, so we must test for SELDO
 110	 * one last time.
 111	 */
 112	test	SSTAT0, SELDO jnz select_out;
 113	call	start_selection;
 114idle_loop_checkbus:
 115	test	SSTAT0, SELDO jnz select_out;
 116END_CRITICAL;
 117	test	SSTAT0, SELDI jnz select_in;
 118	test	SCSIPHASE, ~DATA_PHASE_MASK jz idle_loop_check_nonpackreq;
 119	test	SCSISIGO, ATNO jz idle_loop_check_nonpackreq;
 120	call	unexpected_nonpkt_phase_find_ctxt;
 121idle_loop_check_nonpackreq:
 122	test	SSTAT2, NONPACKREQ jz . + 2;
 123	call	unexpected_nonpkt_phase_find_ctxt;
 124	if ((ahd->bugs & AHD_FAINT_LED_BUG) != 0) {
 125		/*
 126		 * On Rev A. hardware, the busy LED is only
 127		 * turned on automaically during selections
 128		 * and re-selections.  Make the LED status
 129		 * more useful by forcing it to be on so
 130		 * long as one of our data FIFOs is active.
 131		 */
 132		and	A, FIFO0FREE|FIFO1FREE, DFFSTAT;
 133		cmp	A, FIFO0FREE|FIFO1FREE jne . + 3;
 134		and	SBLKCTL, ~DIAGLEDEN|DIAGLEDON;
 135		jmp	. + 2;
 136		or	SBLKCTL, DIAGLEDEN|DIAGLEDON;
 137	}
 138	call	idle_loop_gsfifo_in_scsi_mode;
 139	call	idle_loop_service_fifos;
 140	call	idle_loop_cchan;
 141	jmp	idle_loop;
 142
 143idle_loop_gsfifo:
 144	SET_MODE(M_SCSI, M_SCSI)
 145BEGIN_CRITICAL;
 146idle_loop_gsfifo_in_scsi_mode:
 147	test	LQISTAT2, LQIGSAVAIL jz return;
 148	/*
 149	 * We have received good status for this transaction.  There may
 150	 * still be data in our FIFOs draining to the host.  Complete
 151	 * the SCB only if all data has transferred to the host.
 152	 */
 153good_status_IU_done:
 154	bmov	SCBPTR, GSFIFO, 2;
 155	clr	SCB_SCSI_STATUS;
 156	/*
 157	 * If a command completed before an attempted task management
 158	 * function completed, notify the host after disabling any
 159	 * pending select-outs.
 160	 */
 161	test	SCB_TASK_MANAGEMENT, 0xFF jz gsfifo_complete_normally;
 162	test	SSTAT0, SELDO|SELINGO jnz . + 2;
 163	and	SCSISEQ0, ~ENSELO;
 164	SET_SEQINTCODE(TASKMGMT_CMD_CMPLT_OKAY)
 165gsfifo_complete_normally:
 166	or	SCB_CONTROL, STATUS_RCVD;
 167
 168	/*
 169	 * Since this status did not consume a FIFO, we have to
 170	 * be a bit more dilligent in how we check for FIFOs pertaining
 171	 * to this transaction.  There are two states that a FIFO still
 172	 * transferring data may be in.
 173	 *
 174	 * 1) Configured and draining to the host, with a FIFO handler.
 175	 * 2) Pending cfg4data, fifo not empty.
 176	 *
 177	 * Case 1 can be detected by noticing a non-zero FIFO active
 178	 * count in the SCB.  In this case, we allow the routine servicing
 179	 * the FIFO to complete the SCB.
 180	 * 
 181	 * Case 2 implies either a pending or yet to occur save data
 182	 * pointers for this same context in the other FIFO.  So, if
 183	 * we detect case 1, we will properly defer the post of the SCB
 184	 * and achieve the desired result.  The pending cfg4data will
 185	 * notice that status has been received and complete the SCB.
 186	 */
 187	test	SCB_FIFO_USE_COUNT, 0xFF jnz idle_loop_gsfifo_in_scsi_mode;
 188	call	complete;
 189END_CRITICAL;
 190	jmp	idle_loop_gsfifo_in_scsi_mode;
 191
 192idle_loop_service_fifos:
 193	SET_MODE(M_DFF0, M_DFF0)
 194BEGIN_CRITICAL;
 195	test	LONGJMP_ADDR[1], INVALID_ADDR jnz idle_loop_next_fifo;
 196	call	longjmp;
 197END_CRITICAL;
 198idle_loop_next_fifo:
 199	SET_MODE(M_DFF1, M_DFF1)
 200BEGIN_CRITICAL;
 201	test	LONGJMP_ADDR[1], INVALID_ADDR jz longjmp;
 202END_CRITICAL;
 203return:
 204	ret;
 205
 206idle_loop_cchan:
 207	SET_MODE(M_CCHAN, M_CCHAN)
 208	test	QOFF_CTLSTA, HS_MAILBOX_ACT jz	hs_mailbox_empty;
 209	or	QOFF_CTLSTA, HS_MAILBOX_ACT;
 210	mov	LOCAL_HS_MAILBOX, HS_MAILBOX;
 211hs_mailbox_empty:
 212BEGIN_CRITICAL;
 213	test	CCSCBCTL, CCARREN|CCSCBEN jz scbdma_idle;
 214	test	CCSCBCTL, CCSCBDIR jnz fetch_new_scb_inprog;
 215	test	CCSCBCTL, CCSCBDONE jz return;
 216	/* FALLTHROUGH */
 217scbdma_tohost_done:
 218	test	CCSCBCTL, CCARREN jz fill_qoutfifo_dmadone;
 219	/*
 220	 * An SCB has been successfully uploaded to the host.
 221	 * If the SCB was uploaded for some reason other than
 222	 * bad SCSI status (currently only for underruns), we
 223	 * queue the SCB for normal completion.  Otherwise, we
 224	 * wait until any select-out activity has halted, and
 225	 * then queue the completion.
 226	 */
 227	and	CCSCBCTL, ~(CCARREN|CCSCBEN);
 228	bmov	COMPLETE_DMA_SCB_HEAD, SCB_NEXT_COMPLETE, 2;
 229	cmp	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL jne . + 2;
 230	mvi	COMPLETE_DMA_SCB_TAIL[1], SCB_LIST_NULL;
 231	test	SCB_SCSI_STATUS, 0xff jz scbdma_queue_completion;
 232	bmov	SCB_NEXT_COMPLETE, COMPLETE_ON_QFREEZE_HEAD, 2;
 233	bmov	COMPLETE_ON_QFREEZE_HEAD, SCBPTR, 2 ret;
 234scbdma_queue_completion:
 235	bmov	SCB_NEXT_COMPLETE, COMPLETE_SCB_HEAD, 2;
 236	bmov	COMPLETE_SCB_HEAD, SCBPTR, 2 ret;
 237fill_qoutfifo_dmadone:
 238	and	CCSCBCTL, ~(CCARREN|CCSCBEN);
 239	call	qoutfifo_updated;
 240	mvi	COMPLETE_SCB_DMAINPROG_HEAD[1], SCB_LIST_NULL;
 241	bmov	QOUTFIFO_NEXT_ADDR, SCBHADDR, 4;
 242	test	QOFF_CTLSTA, SDSCB_ROLLOVR jz return;
 243	bmov	QOUTFIFO_NEXT_ADDR, SHARED_DATA_ADDR, 4;
 244	xor	QOUTFIFO_ENTRY_VALID_TAG, QOUTFIFO_ENTRY_VALID_TOGGLE ret;
 245END_CRITICAL;
 246
 247qoutfifo_updated:
 248	/*
 249	 * If there are more commands waiting to be dma'ed
 250	 * to the host, always coalesce.  Otherwise honor the
 251	 * host's wishes.
 252	 */
 253	cmp	COMPLETE_DMA_SCB_HEAD[1], SCB_LIST_NULL jne coalesce_by_count;
 254	cmp	COMPLETE_SCB_HEAD[1], SCB_LIST_NULL jne coalesce_by_count;
 255	test	LOCAL_HS_MAILBOX, ENINT_COALESCE jz issue_cmdcmplt;
 256
 257	/*
 258	 * If we have relatively few commands outstanding, don't
 259	 * bother waiting for another command to complete.
 260	 */
 261	test	CMDS_PENDING[1], 0xFF jnz coalesce_by_count;
 262	/* Add -1 so that jnc means <= not just < */
 263	add	A, -1, INT_COALESCING_MINCMDS;
 264	add	NONE, A, CMDS_PENDING;
 265	jnc	issue_cmdcmplt;
 266	
 267	/*
 268	 * If coalescing, only coalesce up to the limit
 269	 * provided by the host driver.
 270	 */
 271coalesce_by_count:
 272	mov	A, INT_COALESCING_MAXCMDS;
 273	add	NONE, A, INT_COALESCING_CMDCOUNT;
 274	jc	issue_cmdcmplt;
 275	/*
 276	 * If the timer is not currently active,
 277	 * fire it up.
 278	 */
 279	test	INTCTL, SWTMINTMASK jz return;
 280	bmov	SWTIMER, INT_COALESCING_TIMER, 2;
 281	mvi	CLRSEQINTSTAT, CLRSEQ_SWTMRTO;
 282	or	INTCTL, SWTMINTEN|SWTIMER_START;
 283	and	INTCTL, ~SWTMINTMASK ret;
 284
 285issue_cmdcmplt:
 286	mvi	INTSTAT, CMDCMPLT;
 287	clr	INT_COALESCING_CMDCOUNT;
 288	or	INTCTL, SWTMINTMASK ret;
 289
 290BEGIN_CRITICAL;
 291fetch_new_scb_inprog:
 292	test	CCSCBCTL, ARRDONE jz return;
 293fetch_new_scb_done:
 294	and	CCSCBCTL, ~(CCARREN|CCSCBEN);
 295	clr	A;
 296	add	CMDS_PENDING, 1;
 297	adc	CMDS_PENDING[1], A;
 298	if ((ahd->bugs & AHD_PKT_LUN_BUG) != 0) {
 299		/*
 300		 * "Short Luns" are not placed into outgoing LQ
 301		 * packets in the correct byte order.  Use a full
 302		 * sized lun field instead and fill it with the
 303		 * one byte of lun information we support.
 304		 */
 305		mov	SCB_PKT_LUN[6], SCB_LUN;
 306	}
 307	/*
 308	 * The FIFO use count field is shared with the
 309	 * tag set by the host so that our SCB dma engine
 310	 * knows the correct location to store the SCB.
 311	 * Set it to zero before processing the SCB.
 312	 */
 313	clr	SCB_FIFO_USE_COUNT;
 314	/* Update the next SCB address to download. */
 315	bmov	NEXT_QUEUED_SCB_ADDR, SCB_NEXT_SCB_BUSADDR, 4;
 316	/*
 317	 * NULL out the SCB links since these fields
 318	 * occupy the same location as SCB_NEXT_SCB_BUSADDR.
 319	 */
 320	mvi	SCB_NEXT[1], SCB_LIST_NULL;
 321	mvi	SCB_NEXT2[1], SCB_LIST_NULL;
 322	/* Increment our position in the QINFIFO. */
 323	mov	NONE, SNSCB_QOFF;
 324
 325	/*
 326	 * Save SCBID of this SCB in REG0 since
 327	 * SCBPTR will be clobbered during target
 328	 * list updates.  We also record the SCB's
 329	 * flags so that we can refer to them even
 330	 * after SCBPTR has been changed.
 331	 */
 332	bmov	REG0, SCBPTR, 2;
 333	mov	A, SCB_CONTROL;
 334
 335	/*
 336	 * Find the tail SCB of the execution queue
 337	 * for this target.
 338	 */
 339	shr	SINDEX, 3, SCB_SCSIID;
 340	and	SINDEX, ~0x1;
 341	mvi	SINDEX[1], (WAITING_SCB_TAILS >> 8);
 342	bmov	DINDEX, SINDEX, 2;
 343	bmov	SCBPTR, SINDIR, 2;
 344
 345	/*
 346	 * Update the tail to point to the new SCB.
 347	 */
 348	bmov	DINDIR, REG0, 2;
 349
 350	/*
 351	 * If the queue was empty, queue this SCB as
 352	 * the first for this target.
 353	 */
 354	cmp	SCBPTR[1], SCB_LIST_NULL je first_new_target_scb;
 355
 356	/*
 357	 * SCBs that want to send messages must always be
 358	 * at the head of their per-target queue so that
 359	 * ATN can be asserted even if the current
 360	 * negotiation agreement is packetized.  If the
 361	 * target queue is empty, the SCB can be queued
 362	 * immediately.  If the queue is not empty, we must
 363	 * wait for it to empty before entering this SCB
 364	 * into the waiting for selection queue.  Otherwise
 365	 * our batching and round-robin selection scheme 
 366	 * could allow commands to be queued out of order.
 367	 * To simplify the implementation, we stop pulling
 368	 * new commands from the host until the MK_MESSAGE
 369	 * SCB can be queued to the waiting for selection
 370	 * list.
 371	 */
 372	test	A, MK_MESSAGE jz batch_scb; 
 373
 374	/*
 375	 * If the last SCB is also a MK_MESSAGE SCB, then
 376	 * order is preserved even if we batch.
 377	 */
 378	test	SCB_CONTROL, MK_MESSAGE jz batch_scb; 
 379
 380	/*
 381	 * Defer this SCB and stop fetching new SCBs until
 382	 * it can be queued.  Since the SCB_SCSIID of the
 383	 * tail SCB must be the same as that of the newly
 384	 * queued SCB, there is no need to restore the SCBID
 385	 * here.
 386	 */
 387	or	SEQ_FLAGS2, PENDING_MK_MESSAGE;
 388	bmov	MK_MESSAGE_SCB, REG0, 2;
 389	mov	MK_MESSAGE_SCSIID, SCB_SCSIID ret;
 390
 391batch_scb:
 392	/*
 393	 * Otherwise just update the previous tail SCB to
 394	 * point to the new tail.
 395	 */
 396	bmov	SCB_NEXT, REG0, 2 ret;
 397
 398first_new_target_scb:
 399	/*
 400	 * Append SCB to the tail of the waiting for
 401	 * selection list.
 402	 */
 403	cmp	WAITING_TID_HEAD[1], SCB_LIST_NULL je first_new_scb;
 404	bmov	SCBPTR, WAITING_TID_TAIL, 2;
 405	bmov	SCB_NEXT2, REG0, 2;
 406	bmov	WAITING_TID_TAIL, REG0, 2 ret;
 407first_new_scb:
 408	/*
 409	 * Whole list is empty, so the head of
 410	 * the list must be initialized too.
 411	 */
 412	bmov	WAITING_TID_HEAD, REG0, 2;
 413	bmov	WAITING_TID_TAIL, REG0, 2 ret;
 414END_CRITICAL;
 415
 416scbdma_idle:
 417	/*
 418	 * Don't bother downloading new SCBs to execute
 419	 * if select-outs are currently frozen or we have
 420	 * a MK_MESSAGE SCB waiting to enter the queue.
 421	 */
 422	test	SEQ_FLAGS2, SELECTOUT_QFROZEN|PENDING_MK_MESSAGE
 423		jnz scbdma_no_new_scbs;
 424BEGIN_CRITICAL;
 425	test	QOFF_CTLSTA, NEW_SCB_AVAIL jnz fetch_new_scb;
 426scbdma_no_new_scbs:
 427	cmp	COMPLETE_DMA_SCB_HEAD[1], SCB_LIST_NULL jne dma_complete_scb;
 428	cmp	COMPLETE_SCB_HEAD[1], SCB_LIST_NULL je return;
 429	/* FALLTHROUGH */
 430fill_qoutfifo:
 431	/*
 432	 * Keep track of the SCBs we are dmaing just
 433	 * in case the DMA fails or is aborted.
 434	 */
 435	bmov	COMPLETE_SCB_DMAINPROG_HEAD, COMPLETE_SCB_HEAD, 2;
 436	mvi	CCSCBCTL, CCSCBRESET;
 437	bmov	SCBHADDR, QOUTFIFO_NEXT_ADDR, 4;
 438	mov	A, QOUTFIFO_NEXT_ADDR;
 439	bmov	SCBPTR, COMPLETE_SCB_HEAD, 2;
 440fill_qoutfifo_loop:
 441	bmov	CCSCBRAM, SCBPTR, 2;
 442	mov	CCSCBRAM, SCB_SGPTR[0];
 443	mov	CCSCBRAM, QOUTFIFO_ENTRY_VALID_TAG;
 444	mov	NONE, SDSCB_QOFF;
 445	inc	INT_COALESCING_CMDCOUNT;
 446	add	CMDS_PENDING, -1;
 447	adc	CMDS_PENDING[1], -1;
 448	cmp	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL je fill_qoutfifo_done;
 449	cmp	CCSCBADDR, CCSCBADDR_MAX je fill_qoutfifo_done;
 450	test	QOFF_CTLSTA, SDSCB_ROLLOVR jnz fill_qoutfifo_done;
 451	/*
 452	 * Don't cross an ADB or Cachline boundary when DMA'ing
 453	 * completion entries.  In PCI mode, at least in 32/33
 454	 * configurations, the SCB DMA engine may lose its place
 455	 * in the data-stream should the target force a retry on
 456	 * something other than an 8byte aligned boundary. In
 457	 * PCI-X mode, we do this to avoid split transactions since
 458	 * many chipsets seem to be unable to format proper split
 459	 * completions to continue the data transfer.
 460	 */
 461	add	SINDEX, A, CCSCBADDR;
 462	test	SINDEX, CACHELINE_MASK jz fill_qoutfifo_done;
 463	bmov	SCBPTR, SCB_NEXT_COMPLETE, 2;
 464	jmp	fill_qoutfifo_loop;
 465fill_qoutfifo_done:
 466	mov	SCBHCNT, CCSCBADDR;
 467	mvi	CCSCBCTL, CCSCBEN|CCSCBRESET;
 468	bmov	COMPLETE_SCB_HEAD, SCB_NEXT_COMPLETE, 2;
 469	mvi	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL ret;
 470
 471fetch_new_scb:
 472	bmov	SCBHADDR, NEXT_QUEUED_SCB_ADDR, 4;
 473	mvi	CCARREN|CCSCBEN|CCSCBDIR|CCSCBRESET jmp dma_scb;
 474dma_complete_scb:
 475	bmov	SCBPTR, COMPLETE_DMA_SCB_HEAD, 2;
 476	bmov	SCBHADDR, SCB_BUSADDR, 4;
 477	mvi	CCARREN|CCSCBEN|CCSCBRESET jmp dma_scb;
 478
 479/*
 480 * Either post or fetch an SCB from host memory.  The caller
 481 * is responsible for polling for transfer completion.
 482 *
 483 * Prerequisits: Mode == M_CCHAN
 484 *		 SINDEX contains CCSCBCTL flags
 485 *		 SCBHADDR set to Host SCB address
 486 *		 SCBPTR set to SCB src location on "push" operations
 487 */
 488SET_SRC_MODE	M_CCHAN;
 489SET_DST_MODE	M_CCHAN;
 490dma_scb:
 491	mvi	SCBHCNT, SCB_TRANSFER_SIZE;
 492	mov	CCSCBCTL, SINDEX ret;
 493
 494setjmp:
 495	/*
 496	 * At least on the A, a return in the same
 497	 * instruction as the bmov results in a return
 498	 * to the caller, not to the new address at the
 499	 * top of the stack.  Since we want the latter
 500	 * (we use setjmp to register a handler from an
 501	 * interrupt context but not invoke that handler
 502	 * until we return to our idle loop), use a
 503	 * separate ret instruction.
 504	 */
 505	bmov	LONGJMP_ADDR, STACK, 2;
 506	ret;
 507setjmp_inline:
 508	bmov	LONGJMP_ADDR, STACK, 2;
 509longjmp:
 510	bmov	STACK, LONGJMP_ADDR, 2 ret;
 511END_CRITICAL;
 512
 513/*************************** Chip Bug Work Arounds ****************************/
 514/*
 515 * Must disable interrupts when setting the mode pointer
 516 * register as an interrupt occurring mid update will
 517 * fail to store the new mode value for restoration on
 518 * an iret.
 519 */
 520if ((ahd->bugs & AHD_SET_MODE_BUG) != 0) {
 521set_mode_work_around:
 522	mvi	SEQINTCTL, INTVEC1DSL;
 523	mov	MODE_PTR, SINDEX;
 524	clr	SEQINTCTL ret;
 525}
 526
 527
 528if ((ahd->bugs & AHD_INTCOLLISION_BUG) != 0) {
 529set_seqint_work_around:
 530	mov	SEQINTCODE, SINDEX;
 531	mvi	SEQINTCODE, NO_SEQINT ret;
 532}
 533
 534/************************ Packetized LongJmp Routines *************************/
 535SET_SRC_MODE	M_SCSI;
 536SET_DST_MODE	M_SCSI;
 537start_selection:
 538BEGIN_CRITICAL;
 539	if ((ahd->bugs & AHD_SENT_SCB_UPDATE_BUG) != 0) {
 540		/*
 541		 * Razor #494
 542		 * Rev A hardware fails to update LAST/CURR/NEXTSCB
 543		 * correctly after a packetized selection in several
 544		 * situations:
 545		 *
 546		 * 1) If only one command existed in the queue, the
 547		 *    LAST/CURR/NEXTSCB are unchanged.
 548		 *
 549		 * 2) In a non QAS, protocol allowed phase change,
 550		 *    the queue is shifted 1 too far.  LASTSCB is
 551		 *    the last SCB that was correctly processed.
 552		 * 
 553		 * 3) In the QAS case, if the full list of commands
 554		 *    was successfully sent, NEXTSCB is NULL and neither
 555		 *    CURRSCB nor LASTSCB can be trusted.  We must
 556		 *    manually walk the list counting MAXCMDCNT elements
 557		 *    to find the last SCB that was sent correctly.
 558		 *
 559		 * To simplify the workaround for this bug in SELDO
 560		 * handling, we initialize LASTSCB prior to enabling
 561		 * selection so we can rely on it even for case #1 above.
 562		 */
 563		bmov	LASTSCB, WAITING_TID_HEAD, 2;
 564	}
 565	bmov	CURRSCB, WAITING_TID_HEAD, 2;
 566	bmov	SCBPTR, WAITING_TID_HEAD, 2;
 567	shr	SELOID, 4, SCB_SCSIID;
 568	/*
 569	 * If we want to send a message to the device, ensure
 570	 * we are selecting with atn regardless of our packetized
 571	 * agreement.  Since SPI4 only allows target reset or PPR
 572	 * messages if this is a packetized connection, the change
 573	 * to our negotiation table entry for this selection will
 574	 * be cleared when the message is acted on.
 575	 */
 576	test	SCB_CONTROL, MK_MESSAGE jz . + 3;
 577	mov	NEGOADDR, SELOID;
 578	or	NEGCONOPTS, ENAUTOATNO;
 579	or	SCSISEQ0, ENSELO ret;
 580END_CRITICAL;
 581
 582/*
 583 * Allocate a FIFO for a non-packetized transaction.
 584 * In RevA hardware, both FIFOs must be free before we
 585 * can allocate a FIFO for a non-packetized transaction.
 586 */
 587allocate_fifo_loop:
 588	/*
 589	 * Do whatever work is required to free a FIFO.
 590	 */
 591	call	idle_loop_service_fifos;
 592	SET_MODE(M_SCSI, M_SCSI)
 593allocate_fifo:
 594	if ((ahd->bugs & AHD_NONPACKFIFO_BUG) != 0) {
 595		and	A, FIFO0FREE|FIFO1FREE, DFFSTAT;
 596		cmp	A, FIFO0FREE|FIFO1FREE jne allocate_fifo_loop;
 597	} else {
 598		test	DFFSTAT, FIFO1FREE jnz allocate_fifo1;
 599		test	DFFSTAT, FIFO0FREE jz allocate_fifo_loop;
 600		mvi	DFFSTAT, B_CURRFIFO_0;
 601		SET_MODE(M_DFF0, M_DFF0)
 602		bmov	SCBPTR, ALLOCFIFO_SCBPTR, 2 ret;
 603	}
 604SET_SRC_MODE	M_SCSI;
 605SET_DST_MODE	M_SCSI;
 606allocate_fifo1:
 607	mvi	DFFSTAT, CURRFIFO_1;
 608	SET_MODE(M_DFF1, M_DFF1)
 609	bmov	SCBPTR, ALLOCFIFO_SCBPTR, 2 ret;
 610
 611/*
 612 * We have been reselected as an initiator
 613 * or selected as a target.
 614 */
 615SET_SRC_MODE	M_SCSI;
 616SET_DST_MODE	M_SCSI;
 617select_in:
 618	if ((ahd->bugs & AHD_FAINT_LED_BUG) != 0) {
 619		/*
 620		 * On Rev A. hardware, the busy LED is only
 621		 * turned on automaically during selections
 622		 * and re-selections.  Make the LED status
 623		 * more useful by forcing it to be on from
 624		 * the point of selection until our idle
 625		 * loop determines that neither of our FIFOs
 626		 * are busy.  This handles the non-packetized
 627		 * case nicely as we will not return to the
 628		 * idle loop until the busfree at the end of
 629		 * each transaction.
 630		 */
 631		or	SBLKCTL, DIAGLEDEN|DIAGLEDON;
 632	}
 633	if ((ahd->bugs & AHD_BUSFREEREV_BUG) != 0) {
 634		/*
 635		 * Test to ensure that the bus has not
 636		 * already gone free prior to clearing
 637		 * any stale busfree status.  This avoids
 638		 * a window whereby a busfree just after
 639		 * a selection could be missed.
 640		 */
 641		test	SCSISIGI, BSYI jz . + 2;
 642		mvi	CLRSINT1,CLRBUSFREE;
 643		or	SIMODE1, ENBUSFREE;
 644	}
 645	or	SXFRCTL0, SPIOEN;
 646	and	SAVED_SCSIID, SELID_MASK, SELID;
 647	and	A, OID, IOWNID;
 648	or	SAVED_SCSIID, A;
 649	mvi	CLRSINT0, CLRSELDI;
 650	jmp	ITloop;
 651
 652/*
 653 * We have successfully selected out.
 654 *
 655 * Clear SELDO.
 656 * Dequeue all SCBs sent from the waiting queue
 657 * Requeue all SCBs *not* sent to the tail of the waiting queue
 658 * Take Razor #494 into account for above.
 659 *
 660 * In Packetized Mode:
 661 *	Return to the idle loop.  Our interrupt handler will take
 662 *	care of any incoming L_Qs.
 663 *
 664 * In Non-Packetize Mode:
 665 *	Continue to our normal state machine.
 666 */
 667SET_SRC_MODE	M_SCSI;
 668SET_DST_MODE	M_SCSI;
 669select_out:
 670BEGIN_CRITICAL;
 671	if ((ahd->bugs & AHD_FAINT_LED_BUG) != 0) {
 672		/*
 673		 * On Rev A. hardware, the busy LED is only
 674		 * turned on automaically during selections
 675		 * and re-selections.  Make the LED status
 676		 * more useful by forcing it to be on from
 677		 * the point of re-selection until our idle
 678		 * loop determines that neither of our FIFOs
 679		 * are busy.  This handles the non-packetized
 680		 * case nicely as we will not return to the
 681		 * idle loop until the busfree at the end of
 682		 * each transaction.
 683		 */
 684		or	SBLKCTL, DIAGLEDEN|DIAGLEDON;
 685	}
 686	/* Clear out all SCBs that have been successfully sent. */
 687	if ((ahd->bugs & AHD_SENT_SCB_UPDATE_BUG) != 0) {
 688		/*
 689		 * For packetized, the LQO manager clears ENSELO on
 690		 * the assertion of SELDO.  If we are non-packetized,
 691		 * LASTSCB and CURRSCB are accurate.
 692		 */
 693		test	SCSISEQ0, ENSELO jnz use_lastscb;
 694
 695		/*
 696		 * The update is correct for LQOSTAT1 errors.  All
 697		 * but LQOBUSFREE are handled by kernel interrupts.
 698		 * If we see LQOBUSFREE, return to the idle loop.
 699		 * Once we are out of the select_out critical section,
 700		 * the kernel will cleanup the LQOBUSFREE and we will
 701		 * eventually restart the selection if appropriate.
 702		 */
 703		test	LQOSTAT1, LQOBUSFREE jnz idle_loop;
 704
 705		/*
 706		 * On a phase change oustside of packet boundaries,
 707		 * LASTSCB points to the currently active SCB context
 708		 * on the bus.
 709		 */
 710		test	LQOSTAT2, LQOPHACHGOUTPKT jnz use_lastscb;
 711
 712		/*
 713		 * If the hardware has traversed the whole list, NEXTSCB
 714		 * will be NULL, CURRSCB and LASTSCB cannot be trusted,
 715		 * but MAXCMDCNT is accurate.  If we stop part way through
 716		 * the list or only had one command to issue, NEXTSCB[1] is
 717		 * not NULL and LASTSCB is the last command to go out.
 718		 */
 719		cmp	NEXTSCB[1], SCB_LIST_NULL jne use_lastscb;
 720
 721		/*
 722		 * Brute force walk.
 723		 */
 724		bmov	SCBPTR, WAITING_TID_HEAD, 2;
 725		mvi	SEQINTCTL, INTVEC1DSL;
 726		mvi	MODE_PTR, MK_MODE(M_CFG, M_CFG);
 727		mov	A, MAXCMDCNT;
 728		mvi	MODE_PTR, MK_MODE(M_SCSI, M_SCSI);
 729		clr	SEQINTCTL;
 730find_lastscb_loop:
 731		dec	A;
 732		test	A, 0xFF jz found_last_sent_scb;
 733		bmov	SCBPTR, SCB_NEXT, 2;
 734		jmp	find_lastscb_loop;
 735use_lastscb:
 736		bmov	SCBPTR, LASTSCB, 2;
 737found_last_sent_scb:
 738		bmov	CURRSCB, SCBPTR, 2;
 739curscb_ww_done:
 740	} else {
 741		bmov	SCBPTR, CURRSCB, 2;
 742	}
 743
 744	/*
 745	 * The whole list made it.  Clear our tail pointer to indicate
 746	 * that the per-target selection queue is now empty.
 747	 */
 748	cmp	SCB_NEXT[1], SCB_LIST_NULL je select_out_clear_tail;
 749
 750	/*
 751	 * Requeue any SCBs not sent, to the tail of the waiting Q.
 752	 * We know that neither the per-TID list nor the list of
 753	 * TIDs is empty.  Use this knowledge to our advantage and
 754	 * queue the remainder to the tail of the global execution
 755	 * queue.
 756	 */
 757	bmov	REG0, SCB_NEXT, 2;
 758select_out_queue_remainder:
 759	bmov	SCBPTR, WAITING_TID_TAIL, 2;
 760	bmov	SCB_NEXT2, REG0, 2;
 761	bmov	WAITING_TID_TAIL, REG0, 2;
 762	jmp	select_out_inc_tid_q;
 763
 764select_out_clear_tail:
 765	/*
 766	 * Queue any pending MK_MESSAGE SCB for this target now
 767	 * that the queue is empty.
 768	 */
 769	test	SEQ_FLAGS2, PENDING_MK_MESSAGE jz select_out_no_mk_message_scb;
 770	mov	A, MK_MESSAGE_SCSIID;
 771	cmp	SCB_SCSIID, A jne select_out_no_mk_message_scb;
 772	and	SEQ_FLAGS2, ~PENDING_MK_MESSAGE;
 773	bmov	REG0, MK_MESSAGE_SCB, 2;
 774	jmp select_out_queue_remainder;
 775
 776select_out_no_mk_message_scb:
 777	/*
 778	 * Clear this target's execution tail and increment the queue.
 779	 */
 780	shr	DINDEX, 3, SCB_SCSIID;
 781	or	DINDEX, 1;	/* Want only the second byte */
 782	mvi	DINDEX[1], ((WAITING_SCB_TAILS) >> 8);
 783	mvi	DINDIR, SCB_LIST_NULL;
 784select_out_inc_tid_q:
 785	bmov	SCBPTR, WAITING_TID_HEAD, 2;
 786	bmov	WAITING_TID_HEAD, SCB_NEXT2, 2;
 787	cmp	WAITING_TID_HEAD[1], SCB_LIST_NULL jne . + 2;
 788	mvi	WAITING_TID_TAIL[1], SCB_LIST_NULL;
 789	bmov	SCBPTR, CURRSCB, 2;
 790	mvi	CLRSINT0, CLRSELDO;
 791	test	LQOSTAT2, LQOPHACHGOUTPKT jnz unexpected_nonpkt_mode_cleared;
 792	test	LQOSTAT1, LQOPHACHGINPKT jnz unexpected_nonpkt_mode_cleared;
 793
 794	/*
 795	 * If this is a packetized connection, return to our
 796	 * idle_loop and let our interrupt handler deal with
 797	 * any connection setup/teardown issues.  The only
 798	 * exceptions are the case of MK_MESSAGE and task management
 799	 * SCBs.
 800	 */
 801	if ((ahd->bugs & AHD_LQO_ATNO_BUG) != 0) {
 802		/*
 803		 * In the A, the LQO manager transitions to LQOSTOP0 even if
 804		 * we have selected out with ATN asserted and the target
 805		 * REQs in a non-packet phase.
 806		 */
 807		test 	SCB_CONTROL, MK_MESSAGE jz select_out_no_message;
 808		test	SCSISIGO, ATNO jnz select_out_non_packetized;
 809select_out_no_message:
 810	}
 811	test	LQOSTAT2, LQOSTOP0 jz select_out_non_packetized;
 812	test	SCB_TASK_MANAGEMENT, 0xFF jz idle_loop;
 813	SET_SEQINTCODE(TASKMGMT_FUNC_COMPLETE)
 814	jmp	idle_loop;
 815
 816select_out_non_packetized:
 817	/* Non packetized request. */
 818	and     SCSISEQ0, ~ENSELO;
 819	if ((ahd->bugs & AHD_BUSFREEREV_BUG) != 0) {
 820		/*
 821		 * Test to ensure that the bus has not
 822		 * already gone free prior to clearing
 823		 * any stale busfree status.  This avoids
 824		 * a window whereby a busfree just after
 825		 * a selection could be missed.
 826		 */
 827		test	SCSISIGI, BSYI jz . + 2;
 828		mvi	CLRSINT1,CLRBUSFREE;
 829		or	SIMODE1, ENBUSFREE;
 830	}
 831	mov	SAVED_SCSIID, SCB_SCSIID;
 832	mov	SAVED_LUN, SCB_LUN;
 833	mvi	SEQ_FLAGS, NO_CDB_SENT;
 834END_CRITICAL;
 835	or	SXFRCTL0, SPIOEN;
 836
 837	/*
 838	 * As soon as we get a successful selection, the target
 839	 * should go into the message out phase since we have ATN
 840	 * asserted.
 841	 */
 842	mvi	MSG_OUT, MSG_IDENTIFYFLAG;
 843
 844	/*
 845	 * Main loop for information transfer phases.  Wait for the
 846	 * target to assert REQ before checking MSG, C/D and I/O for
 847	 * the bus phase.
 848	 */
 849mesgin_phasemis:
 850ITloop:
 851	call	phase_lock;
 852
 853	mov	A, LASTPHASE;
 854
 855	test	A, ~P_DATAIN_DT	jz p_data;
 856	cmp	A,P_COMMAND	je p_command;
 857	cmp	A,P_MESGOUT	je p_mesgout;
 858	cmp	A,P_STATUS	je p_status;
 859	cmp	A,P_MESGIN	je p_mesgin;
 860
 861	SET_SEQINTCODE(BAD_PHASE)
 862	jmp	ITloop;			/* Try reading the bus again. */
 863
 864/*
 865 * Command phase.  Set up the DMA registers and let 'er rip.
 866 */
 867p_command:
 868	test	SEQ_FLAGS, NOT_IDENTIFIED jz p_command_okay;
 869	SET_SEQINTCODE(PROTO_VIOLATION)
 870p_command_okay:
 871	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
 872		jnz p_command_allocate_fifo;
 873	/*
 874	 * Command retry.  Free our current FIFO and
 875	 * re-allocate a FIFO so transfer state is
 876	 * reset.
 877	 */
 878SET_SRC_MODE	M_DFF1;
 879SET_DST_MODE	M_DFF1;
 880	mvi	DFFSXFRCTL, RSTCHN|CLRSHCNT;
 881	SET_MODE(M_SCSI, M_SCSI)
 882p_command_allocate_fifo:
 883	bmov	ALLOCFIFO_SCBPTR, SCBPTR, 2;
 884	call	allocate_fifo;
 885SET_SRC_MODE	M_DFF1;
 886SET_DST_MODE	M_DFF1;
 887	add	NONE, -17, SCB_CDB_LEN;
 888	jnc	p_command_embedded;
 889p_command_from_host:
 890	bmov	HADDR[0], SCB_HOST_CDB_PTR, 9;
 891	mvi	SG_CACHE_PRE, LAST_SEG;
 892	mvi	DFCNTRL, (PRELOADEN|SCSIEN|HDMAEN);
 893	jmp	p_command_xfer;
 894p_command_embedded:
 895	bmov	SHCNT[0], SCB_CDB_LEN,  1;
 896	bmov	DFDAT, SCB_CDB_STORE, 16; 
 897	mvi	DFCNTRL, SCSIEN;
 898p_command_xfer:
 899	and	SEQ_FLAGS, ~NO_CDB_SENT;
 900	if ((ahd->features & AHD_FAST_CDB_DELIVERY) != 0) {
 901		/*
 902		 * To speed up CDB delivery in Rev B, all CDB acks
 903		 * are "released" to the output sync as soon as the
 904		 * command phase starts.  There is only one problem
 905		 * with this approach.  If the target changes phase
 906		 * before all data are sent, we have left over acks
 907		 * that can go out on the bus in a data phase.  Due
 908		 * to other chip contraints, this only happens if
 909		 * the target goes to data-in, but if the acks go
 910		 * out before we can test SDONE, we'll think that
 911		 * the transfer has completed successfully.  Work
 912		 * around this by taking advantage of the 400ns or
 913		 * 800ns dead time between command phase and the REQ
 914		 * of the new phase.  If the transfer has completed
 915		 * successfully, SCSIEN should fall *long* before we
 916		 * see a phase change.  We thus treat any phasemiss
 917		 * that occurs before SCSIEN falls as an incomplete
 918		 * transfer.
 919		 */
 920		test	SSTAT1, PHASEMIS jnz p_command_xfer_failed;
 921		test	DFCNTRL, SCSIEN jnz . - 1;
 922	} else {
 923		test	DFCNTRL, SCSIEN jnz .;
 924	}
 925	/*
 926	 * DMA Channel automatically disabled.
 927	 * Don't allow a data phase if the command
 928	 * was not fully transferred.
 929	 */
 930	test	SSTAT2, SDONE jnz ITloop;
 931p_command_xfer_failed:
 932	or	SEQ_FLAGS, NO_CDB_SENT;
 933	jmp	ITloop;
 934
 935
 936/*
 937 * Status phase.  Wait for the data byte to appear, then read it
 938 * and store it into the SCB.
 939 */
 940SET_SRC_MODE	M_SCSI;
 941SET_DST_MODE	M_SCSI;
 942p_status:
 943	test	SEQ_FLAGS,NOT_IDENTIFIED jnz mesgin_proto_violation;
 944p_status_okay:
 945	mov	SCB_SCSI_STATUS, SCSIDAT;
 946	or	SCB_CONTROL, STATUS_RCVD;
 947	jmp	ITloop;
 948
 949/*
 950 * Message out phase.  If MSG_OUT is MSG_IDENTIFYFLAG, build a full
 951 * indentify message sequence and send it to the target.  The host may
 952 * override this behavior by setting the MK_MESSAGE bit in the SCB
 953 * control byte.  This will cause us to interrupt the host and allow
 954 * it to handle the message phase completely on its own.  If the bit
 955 * associated with this target is set, we will also interrupt the host,
 956 * thereby allowing it to send a message on the next selection regardless
 957 * of the transaction being sent.
 958 * 
 959 * If MSG_OUT is == HOST_MSG, also interrupt the host and take a message.
 960 * This is done to allow the host to send messages outside of an identify
 961 * sequence while protecting the seqencer from testing the MK_MESSAGE bit
 962 * on an SCB that might not be for the current nexus. (For example, a
 963 * BDR message in response to a bad reselection would leave us pointed to
 964 * an SCB that doesn't have anything to do with the current target).
 965 *
 966 * Otherwise, treat MSG_OUT as a 1 byte message to send (abort, abort tag,
 967 * bus device reset).
 968 *
 969 * When there are no messages to send, MSG_OUT should be set to MSG_NOOP,
 970 * in case the target decides to put us in this phase for some strange
 971 * reason.
 972 */
 973p_mesgout_retry:
 974	/* Turn on ATN for the retry */
 975	mvi	SCSISIGO, ATNO;
 976p_mesgout:
 977	mov	SINDEX, MSG_OUT;
 978	cmp	SINDEX, MSG_IDENTIFYFLAG jne p_mesgout_from_host;
 979	test	SCB_CONTROL,MK_MESSAGE	jnz host_message_loop;
 980p_mesgout_identify:
 981	or	SINDEX, MSG_IDENTIFYFLAG|DISCENB, SCB_LUN;
 982	test	SCB_CONTROL, DISCENB jnz . + 2;
 983	and	SINDEX, ~DISCENB;
 984/*
 985 * Send a tag message if TAG_ENB is set in the SCB control block.
 986 * Use SCB_NONPACKET_TAG as the tag value.
 987 */
 988p_mesgout_tag:
 989	test	SCB_CONTROL,TAG_ENB jz  p_mesgout_onebyte;
 990	mov	SCSIDAT, SINDEX;	/* Send the identify message */
 991	call	phase_lock;
 992	cmp	LASTPHASE, P_MESGOUT	jne p_mesgout_done;
 993	and	SCSIDAT,TAG_ENB|SCB_TAG_TYPE,SCB_CONTROL;
 994	call	phase_lock;
 995	cmp	LASTPHASE, P_MESGOUT	jne p_mesgout_done;
 996	mov	SCBPTR jmp p_mesgout_onebyte;
 997/*
 998 * Interrupt the driver, and allow it to handle this message
 999 * phase and any required retries.
1000 */
1001p_mesgout_from_host:
1002	cmp	SINDEX, HOST_MSG	jne p_mesgout_onebyte;
1003	jmp	host_message_loop;
1004
1005p_mesgout_onebyte:
1006	mvi	CLRSINT1, CLRATNO;
1007	mov	SCSIDAT, SINDEX;
1008
1009/*
1010 * If the next bus phase after ATN drops is message out, it means
1011 * that the target is requesting that the last message(s) be resent.
1012 */
1013	call	phase_lock;
1014	cmp	LASTPHASE, P_MESGOUT	je p_mesgout_retry;
1015
1016p_mesgout_done:
1017	mvi	CLRSINT1,CLRATNO;	/* Be sure to turn ATNO off */
1018	mov	LAST_MSG, MSG_OUT;
1019	mvi	MSG_OUT, MSG_NOOP;	/* No message left */
1020	jmp	ITloop;
1021
1022/*
1023 * Message in phase.  Bytes are read using Automatic PIO mode.
1024 */
1025p_mesgin:
1026	/* read the 1st message byte */
1027	mvi	ACCUM		call inb_first;
1028
1029	test	A,MSG_IDENTIFYFLAG	jnz mesgin_identify;
1030	cmp	A,MSG_DISCONNECT	je mesgin_disconnect;
1031	cmp	A,MSG_SAVEDATAPOINTER	je mesgin_sdptrs;
1032	cmp	ALLZEROS,A		je mesgin_complete;
1033	cmp	A,MSG_RESTOREPOINTERS	je mesgin_rdptrs;
1034	cmp	A,MSG_IGN_WIDE_RESIDUE	je mesgin_ign_wide_residue;
1035	cmp	A,MSG_NOOP		je mesgin_done;
1036
1037/*
1038 * Pushed message loop to allow the kernel to
1039 * run it's own message state engine.  To avoid an
1040 * extra nop instruction after signaling the kernel,
1041 * we perform the phase_lock before checking to see
1042 * if we should exit the loop and skip the phase_lock
1043 * in the ITloop.  Performing back to back phase_locks
1044 * shouldn't hurt, but why do it twice...
1045 */
1046host_message_loop:
1047	call	phase_lock;	/* Benign the first time through. */
1048	SET_SEQINTCODE(HOST_MSG_LOOP)
1049	cmp	RETURN_1, EXIT_MSG_LOOP	je ITloop;
1050	cmp	RETURN_1, CONT_MSG_LOOP_WRITE	jne . + 3;
1051	mov	SCSIDAT, RETURN_2;
1052	jmp	host_message_loop;
1053	/* Must be CONT_MSG_LOOP_READ */
1054	mov	NONE, SCSIDAT;	/* ACK Byte */
1055	jmp	host_message_loop;
1056
1057mesgin_ign_wide_residue:
1058	mov	SAVED_MODE, MODE_PTR;
1059	SET_MODE(M_SCSI, M_SCSI)
1060	shr	NEGOADDR, 4, SAVED_SCSIID;
1061	mov	A, NEGCONOPTS;
1062	RESTORE_MODE(SAVED_MODE)
1063	test	A, WIDEXFER jz mesgin_reject;
1064	/* Pull the residue byte */
1065	mvi	REG0	call inb_next;
1066	cmp	REG0, 0x01 jne mesgin_reject;
1067	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jz . + 2;
1068	test	SCB_TASK_ATTRIBUTE, SCB_XFERLEN_ODD jnz mesgin_done;
1069	SET_SEQINTCODE(IGN_WIDE_RES)
1070	jmp	mesgin_done;
1071
1072mesgin_proto_violation:
1073	SET_SEQINTCODE(PROTO_VIOLATION)
1074	jmp	mesgin_done;
1075mesgin_reject:
1076	mvi	MSG_MESSAGE_REJECT	call mk_mesg;
1077mesgin_done:
1078	mov	NONE,SCSIDAT;		/*dummy read from latch to ACK*/
1079	jmp	ITloop;
1080
1081#define INDEX_DISC_LIST(scsiid, lun)					\
1082	and	A, 0xC0, scsiid;					\
1083	or	SCBPTR, A, lun;						\
1084	clr	SCBPTR[1];						\
1085	and	SINDEX, 0x30, scsiid;					\
1086	shr	SINDEX, 3;	/* Multiply by 2 */			\
1087	add	SINDEX, (SCB_DISCONNECTED_LISTS & 0xFF);		\
1088	mvi	SINDEX[1], ((SCB_DISCONNECTED_LISTS >> 8) & 0xFF)
1089
1090mesgin_identify:
1091	/*
1092	 * Determine whether a target is using tagged or non-tagged
1093	 * transactions by first looking at the transaction stored in
1094	 * the per-device, disconnected array.  If there is no untagged
1095	 * transaction for this target, this must be a tagged transaction.
1096	 */
1097	and	SAVED_LUN, MSG_IDENTIFY_LUNMASK, A;
1098	INDEX_DISC_LIST(SAVED_SCSIID, SAVED_LUN);
1099	bmov	DINDEX, SINDEX, 2;
1100	bmov	REG0, SINDIR, 2;
1101	cmp	REG0[1], SCB_LIST_NULL je snoop_tag;
1102	/* Untagged.  Clear the busy table entry and setup the SCB. */
1103	bmov	DINDIR, ALLONES, 2;
1104	bmov	SCBPTR, REG0, 2;
1105	jmp	setup_SCB;
1106
1107/*
1108 * Here we "snoop" the bus looking for a SIMPLE QUEUE TAG message.
1109 * If we get one, we use the tag returned to find the proper
1110 * SCB.  After receiving the tag, look for the SCB at SCB locations tag and
1111 * tag + 256.
1112 */
1113snoop_tag:
1114	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1115		or	SEQ_FLAGS, 0x80;
1116	}
1117	mov	NONE, SCSIDAT;		/* ACK Identify MSG */
1118	call	phase_lock;
1119	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1120		or	SEQ_FLAGS, 0x1;
1121	}
1122	cmp	LASTPHASE, P_MESGIN	jne not_found_ITloop;
1123	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1124		or	SEQ_FLAGS, 0x2;
1125	}
1126	cmp	SCSIBUS, MSG_SIMPLE_Q_TAG jne not_found;
1127get_tag:
1128	clr	SCBPTR[1];
1129	mvi	SCBPTR	call inb_next;	/* tag value */
1130verify_scb:
1131	test	SCB_CONTROL,DISCONNECTED jz verify_other_scb;
1132	mov	A, SAVED_SCSIID;
1133	cmp	SCB_SCSIID, A jne verify_other_scb;
1134	mov	A, SAVED_LUN;
1135	cmp	SCB_LUN, A je setup_SCB_disconnected;
1136verify_other_scb:
1137	xor	SCBPTR[1], 1;
1138	test	SCBPTR[1], 0xFF jnz verify_scb;
1139	jmp	not_found;
1140
1141/*
1142 * Ensure that the SCB the tag points to is for
1143 * an SCB transaction to the reconnecting target.
1144 */
1145setup_SCB:
1146	if ((ahd->flags & AHD_SEQUENCER_DEBUG) != 0) {
1147		or	SEQ_FLAGS, 0x10;
1148	}
1149	test	SCB_CONTROL,DISCONNECTED jz not_found;
1150setup_SCB_disconnected:
1151	and	SCB_CONTROL,~DISCONNECTED;
1152	clr	SEQ_FLAGS;	/* make note of IDENTIFY */
1153	test	SCB_SGPTR, SG_LIST_NULL jnz . + 3;
1154	bmov	ALLOCFIFO_SCBPTR, SCBPTR, 2;
1155	call	allocate_fifo;
1156	/* See if the host wants to send a message upon reconnection */
1157	test	SCB_CONTROL, MK_MESSAGE jz mesgin_done;
1158	mvi	HOST_MSG	call mk_mesg;
1159	jmp	mesgin_done;
1160
1161not_found:
1162	SET_SEQINTCODE(NO_MATCH)
1163	jmp	mesgin_done;
1164
1165not_found_ITloop:
1166	SET_SEQINTCODE(NO_MATCH)
1167	jmp	ITloop;
1168
1169/*
1170 * We received a "command complete" message.  Put the SCB on the complete
1171 * queue and trigger a completion interrupt via the idle loop.  Before doing
1172 * so, check to see if there is a residual or the status byte is something
1173 * other than STATUS_GOOD (0).  In either of these conditions, we upload the
1174 * SCB back to the host so it can process this information.
1175 */
1176mesgin_complete:
1177
1178	/*
1179	 * If ATN is raised, we still want to give the target a message.
1180	 * Perhaps there was a parity error on this last message byte.
1181	 * Either way, the target should take us to message out phase
1182	 * and then attempt to complete the command again.  We should use a
1183	 * critical section here to guard against a timeout triggering
1184	 * for this command and setting ATN while we are still processing
1185	 * the completion.
1186	test	SCSISIGI, ATNI jnz mesgin_done;
1187	 */
1188
1189	/*
1190	 * If we are identified and have successfully sent the CDB,
1191	 * any status will do.  Optimize this fast path.
1192	 */
1193	test	SCB_CONTROL, STATUS_RCVD jz mesgin_proto_violation;
1194	test	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT jz complete_accepted;
1195
1196	/*
1197	 * If the target never sent an identify message but instead went
1198	 * to mesgin to give an invalid message, let the host abort us.
1199	 */
1200	test	SEQ_FLAGS, NOT_IDENTIFIED jnz mesgin_proto_violation;
1201
1202	/*
1203	 * If we recevied good status but never successfully sent the
1204	 * cdb, abort the command.
1205	 */
1206	test	SCB_SCSI_STATUS,0xff	jnz complete_accepted;
1207	test	SEQ_FLAGS, NO_CDB_SENT jnz mesgin_proto_violation;
1208complete_accepted:
1209
1210	/*
1211	 * See if we attempted to deliver a message but the target ingnored us.
1212	 */
1213	test	SCB_CONTROL, MK_MESSAGE jz complete_nomsg;
1214	SET_SEQINTCODE(MKMSG_FAILED)
1215complete_nomsg:
1216	call	queue_scb_completion;
1217	jmp	await_busfree;
1218
1219BEGIN_CRITICAL;
1220freeze_queue:
1221	/* Cancel any pending select-out. */
1222	test	SSTAT0, SELDO|SELINGO jnz . + 2;
1223	and	SCSISEQ0, ~ENSELO;
1224	mov	ACCUM_SAVE, A;
1225	clr	A;
1226	add	QFREEZE_COUNT, 1;
1227	adc	QFREEZE_COUNT[1], A;
1228	or	SEQ_FLAGS2, SELECTOUT_QFROZEN;
1229	mov	A, ACCUM_SAVE ret;
1230END_CRITICAL;
1231
1232/*
1233 * Complete the current FIFO's SCB if data for this same
1234 * SCB is not transferring in the other FIFO.
1235 */
1236SET_SRC_MODE	M_DFF1;
1237SET_DST_MODE	M_DFF1;
1238pkt_complete_scb_if_fifos_idle:
1239	bmov	ARG_1, SCBPTR, 2;
1240	mvi	DFFSXFRCTL, CLRCHN;
1241	SET_MODE(M_SCSI, M_SCSI)
1242	bmov	SCBPTR, ARG_1, 2;
1243	test	SCB_FIFO_USE_COUNT, 0xFF jnz return;
1244queue_scb_completion:
1245	test	SCB_SCSI_STATUS,0xff	jnz bad_status;
1246	/*
1247	 * Check for residuals
1248	 */
1249	test	SCB_SGPTR, SG_LIST_NULL jnz complete;	/* No xfer */
1250	test	SCB_SGPTR, SG_FULL_RESID jnz upload_scb;/* Never xfered */
1251	test	SCB_RESIDUAL_SGPTR, SG_LIST_NULL jz upload_scb;
1252complete:
1253BEGIN_CRITICAL;
1254	bmov	SCB_NEXT_COMPLETE, COMPLETE_SCB_HEAD, 2;
1255	bmov	COMPLETE_SCB_HEAD, SCBPTR, 2 ret;
1256END_CRITICAL;
1257bad_status:
1258	cmp	SCB_SCSI_STATUS, STATUS_PKT_SENSE je upload_scb;
1259	call	freeze_queue;
1260upload_scb:
1261	/*
1262	 * Restore SCB TAG since we reuse this field
1263	 * in the sequencer.  We don't want to corrupt
1264	 * it on the host.
1265	 */
1266	bmov	SCB_TAG, SCBPTR, 2;
1267BEGIN_CRITICAL;
1268	or	SCB_SGPTR, SG_STATUS_VALID;
1269	mvi	SCB_NEXT_COMPLETE[1], SCB_LIST_NULL;
1270	cmp	COMPLETE_DMA_SCB_HEAD[1], SCB_LIST_NULL jne add_dma_scb_tail;
1271	bmov	COMPLETE_DMA_SCB_HEAD, SCBPTR, 2;
1272	bmov	COMPLETE_DMA_SCB_TAIL, SCBPTR, 2 ret;
1273add_dma_scb_tail:
1274	bmov	REG0, SCBPTR, 2;
1275	bmov	SCBPTR, COMPLETE_DMA_SCB_TAIL, 2;
1276	bmov	SCB_NEXT_COMPLETE, REG0, 2;
1277	bmov	COMPLETE_DMA_SCB_TAIL, REG0, 2 ret;
1278END_CRITICAL;
1279
1280/*
1281 * Is it a disconnect message?  Set a flag in the SCB to remind us
1282 * and await the bus going free.  If this is an untagged transaction
1283 * store the SCB id for it in our untagged target table for lookup on
1284 * a reselection.
1285 */
1286mesgin_disconnect:
1287	/*
1288	 * If ATN is raised, we still want to give the target a message.
1289	 * Perhaps there was a parity error on this last message byte
1290	 * or we want to abort this command.  Either way, the target
1291	 * should take us to message out phase and then attempt to
1292	 * disconnect again.
1293	 * XXX - Wait for more testing.
1294	test	SCSISIGI, ATNI jnz mesgin_done;
1295	 */
1296	test	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT
1297		jnz mesgin_proto_violation;
1298	or	SCB_CONTROL,DISCONNECTED;
1299	test	SCB_CONTROL, TAG_ENB jnz await_busfree;
1300queue_disc_scb:
1301	bmov	REG0, SCBPTR, 2;
1302	INDEX_DISC_LIST(SAVED_SCSIID, SAVED_LUN);
1303	bmov	DINDEX, SINDEX, 2;
1304	bmov	DINDIR, REG0, 2;
1305	bmov	SCBPTR, REG0, 2;
1306	/* FALLTHROUGH */
1307await_busfree:
1308	and	SIMODE1, ~ENBUSFREE;
1309	if ((ahd->bugs & AHD_BUSFREEREV_BUG) == 0) {
1310		/*
1311		 * In the BUSFREEREV_BUG case, the
1312		 * busfree status was cleared at the
1313		 * beginning of the connection.
1314		 */
1315		mvi	CLRSINT1,CLRBUSFREE;
1316	}
1317	mov	NONE, SCSIDAT;		/* Ack the last byte */
1318	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
1319		jnz await_busfree_not_m_dff;
1320SET_SRC_MODE	M_DFF1;
1321SET_DST_MODE	M_DFF1;
1322await_busfree_clrchn:
1323	mvi	DFFSXFRCTL, CLRCHN;
1324await_busfree_not_m_dff:
1325	/* clear target specific flags */
1326	mvi	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT;
1327	test	SSTAT1,REQINIT|BUSFREE	jz .;
1328	/*
1329	 * We only set BUSFREE status once either a new
1330	 * phase has been detected or we are really
1331	 * BUSFREE.  This allows the driver to know
1332	 * that we are active on the bus even though
1333	 * no identified transaction exists should a
1334	 * timeout occur while awaiting busfree.
1335	 */
1336	mvi	LASTPHASE, P_BUSFREE;
1337	test	SSTAT1, BUSFREE jnz idle_loop;
1338	SET_SEQINTCODE(MISSED_BUSFREE)
1339
1340
1341/*
1342 * Save data pointers message:
1343 * Copying RAM values back to SCB, for Save Data Pointers message, but
1344 * only if we've actually been into a data phase to change them.  This
1345 * protects against bogus data in scratch ram and the residual counts
1346 * since they are only initialized when we go into data_in or data_out.
1347 * Ack the message as soon as possible.
1348 */
1349SET_SRC_MODE	M_DFF1;
1350SET_DST_MODE	M_DFF1;
1351mesgin_sdptrs:
1352	mov	NONE,SCSIDAT;		/*dummy read from latch to ACK*/
1353	test	SEQ_FLAGS, DPHASE	jz ITloop;
1354	call	save_pointers;
1355	jmp	ITloop;
1356
1357save_pointers:
1358	/*
1359	 * If we are asked to save our position at the end of the
1360	 * transfer, just mark us at the end rather than perform a
1361	 * full save.
1362	 */
1363	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jz save_pointers_full;
1364	or	SCB_SGPTR, SG_LIST_NULL ret;
1365
1366save_pointers_full:
1367	/*
1368	 * The SCB_DATAPTR becomes the current SHADDR.
1369	 * All other information comes directly from our residual
1370	 * state.
1371	 */
1372	bmov	SCB_DATAPTR, SHADDR, 8;
1373	bmov	SCB_DATACNT, SCB_RESIDUAL_DATACNT, 8 ret;
1374
1375/*
1376 * Restore pointers message?  Data pointers are recopied from the
1377 * SCB anytime we enter a data phase for the first time, so all
1378 * we need to do is clear the DPHASE flag and let the data phase
1379 * code do the rest.  We also reset/reallocate the FIFO to make
1380 * sure we have a clean start for the next data or command phase.
1381 */
1382mesgin_rdptrs:
1383	and	SEQ_FLAGS, ~DPHASE;
1384	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1)) jnz msgin_rdptrs_get_fifo;
1385	mvi	DFFSXFRCTL, RSTCHN|CLRSHCNT;
1386	SET_MODE(M_SCSI, M_SCSI)
1387msgin_rdptrs_get_fifo:
1388	call	allocate_fifo;
1389	jmp	mesgin_done;
1390
1391phase_lock:     
1392	if ((ahd->bugs & AHD_EARLY_REQ_BUG) != 0) {
1393		/*
1394		 * Don't ignore persistent REQ assertions just because
1395		 * they were asserted within the bus settle delay window.
1396		 * This allows us to tolerate devices like the GEM318
1397		 * that violate the SCSI spec.  We are careful not to
1398		 * count REQ while we are waiting for it to fall during
1399		 * an async phase due to our asserted ACK.  Each
1400		 * sequencer instruction takes ~25ns, so the REQ must
1401		 * last at least 100ns in order to be counted as a true
1402		 * REQ.
1403		 */
1404		test	SCSIPHASE, 0xFF jnz phase_locked;
1405		test	SCSISIGI, ACKI jnz phase_lock;
1406		test	SCSISIGI, REQI jz phase_lock;
1407		test	SCSIPHASE, 0xFF jnz phase_locked;
1408		test	SCSISIGI, ACKI jnz phase_lock;
1409		test	SCSISIGI, REQI jz phase_lock;
1410phase_locked:
1411	} else {
1412		test	SCSIPHASE, 0xFF jz .;
1413	}
1414	test	SSTAT1, SCSIPERR jnz phase_lock;
1415phase_lock_latch_phase:
1416	and	LASTPHASE, PHASE_MASK, SCSISIGI ret;
1417
1418/*
1419 * Functions to read data in Automatic PIO mode.
1420 *
1421 * An ACK is not sent on input from the target until SCSIDATL is read from.
1422 * So we wait until SCSIDATL is latched (the usual way), then read the data
1423 * byte directly off the bus using SCSIBUSL.  When we have pulled the ATN
1424 * line, or we just want to acknowledge the byte, then we do a dummy read
1425 * from SCISDATL.  The SCSI spec guarantees that the target will hold the
1426 * data byte on the bus until we send our ACK.
1427 *
1428 * The assumption here is that these are called in a particular sequence,
1429 * and that REQ is already set when inb_first is called.  inb_{first,next}
1430 * use the same calling convention as inb.
1431 */
1432inb_next:
1433	mov	NONE,SCSIDAT;		/*dummy read from latch to ACK*/
1434inb_next_wait:
1435	/*
1436	 * If there is a parity error, wait for the kernel to
1437	 * see the interrupt and prepare our message response
1438	 * before continuing.
1439	 */
1440	test	SCSIPHASE, 0xFF jz .;
1441	test	SSTAT1, SCSIPERR jnz inb_next_wait;
1442inb_next_check_phase:
1443	and	LASTPHASE, PHASE_MASK, SCSISIGI;
1444	cmp	LASTPHASE, P_MESGIN jne mesgin_phasemis;
1445inb_first:
1446	clr	DINDEX[1];
1447	mov	DINDEX,SINDEX;
1448	mov	DINDIR,SCSIBUS	ret;		/*read byte directly from bus*/
1449inb_last:
1450	mov	NONE,SCSIDAT ret;		/*dummy read from latch to ACK*/
1451
1452mk_mesg:
1453	mvi	SCSISIGO, ATNO;
1454	mov	MSG_OUT,SINDEX ret;
1455
1456SET_SRC_MODE	M_DFF1;
1457SET_DST_MODE	M_DFF1;
1458disable_ccsgen:
1459	test	SG_STATE, FETCH_INPROG jz disable_ccsgen_fetch_done;
1460	clr	CCSGCTL;
1461disable_ccsgen_fetch_done:
1462	clr	SG_STATE ret;
1463
1464service_fifo:
1465	/*
1466	 * Do we have any prefetch left???
1467	 */
1468	test	SG_STATE, SEGS_AVAIL jnz idle_sg_avail;
1469
1470	/*
1471	 * Can this FIFO have access to the S/G cache yet?
1472	 */
1473	test	CCSGCTL, SG_CACHE_AVAIL jz return;
1474
1475	/* Did we just finish fetching segs? */
1476	test	CCSGCTL, CCSGDONE jnz idle_sgfetch_complete;
1477
1478	/* Are we actively fetching segments? */
1479	test	CCSGCTL, CCSGENACK jnz return;
1480
1481	/*
1482	 * Should the other FIFO get the S/G cache first?  If
1483	 * both FIFOs have been allocated since we last checked
1484	 * any FIFO, it is important that we service a FIFO
1485	 * that is not actively on the bus first.  This guarantees
1486	 * that a FIFO will be freed to handle snapshot requests for
1487	 * any FIFO that is still on the bus.  Chips with RTI do not
1488	 * perform snapshots, so don't bother with this test there.
1489	 */
1490	if ((ahd->features & AHD_RTI) == 0) {
1491		/*
1492		 * If we're not still receiving SCSI data,
1493		 * it is safe to allocate the S/G cache to
1494		 * this FIFO.
1495		 */
1496		test	DFCNTRL, SCSIEN jz idle_sgfetch_start;
1497
1498		/*
1499		 * Switch to the other FIFO.  Non-RTI chips
1500		 * also have the "set mode" bug, so we must
1501		 * disable interrupts during the switch.
1502		 */
1503		mvi	SEQINTCTL, INTVEC1DSL;
1504		xor	MODE_PTR, MK_MODE(M_DFF1, M_DFF1);
1505
1506		/*
1507		 * If the other FIFO needs loading, then it
1508		 * must not have claimed the S/G cache yet
1509		 * (SG_CACHE_AVAIL would have been cleared in
1510		 * the original FIFO mode and we test this above).
1511		 * Return to the idle loop so we can process the
1512		 * FIFO not currently on the bus first.
1513		 */
1514		test	SG_STATE, LOADING_NEEDED jz idle_sgfetch_okay;
1515		clr	SEQINTCTL ret;
1516idle_sgfetch_okay:
1517		xor	MODE_PTR, MK_MODE(M_DFF1, M_DFF1);
1518		clr	SEQINTCTL;
1519	}
1520
1521idle_sgfetch_start:
1522	/*
1523	 * We fetch a "cacheline aligned" and sized amount of data
1524	 * so we don't end up referencing a non-existent page.
1525	 * Cacheline aligned is in quotes because the kernel will
1526	 * set the prefetch amount to a reasonable level if the
1527	 * cacheline size is unknown.
1528	 */
1529	bmov	SGHADDR, SCB_RESIDUAL_SGPTR, 4;
1530	mvi	SGHCNT, SG_PREFETCH_CNT;
1531	if ((ahd->bugs & AHD_REG_SLOW_SETTLE_BUG) != 0) {
1532		/*
1533		 * Need two instructions between "touches" of SGHADDR.
1534		 */
1535		nop;
1536	}
1537	and	SGHADDR[0], SG_PREFETCH_ALIGN_MASK, SCB_RESIDUAL_SGPTR;
1538	mvi	CCSGCTL, CCSGEN|CCSGRESET;
1539	or	SG_STATE, FETCH_INPROG ret;
1540idle_sgfetch_complete:
1541	/*
1542	 * Guard against SG_CACHE_AVAIL activating during sg fetch
1543	 * request in the other FIFO.
1544	 */
1545	test	SG_STATE, FETCH_INPROG jz return;
1546	clr	CCSGCTL;
1547	and	CCSGADDR, SG_PREFETCH_ADDR_MASK, SCB_RESIDUAL_SGPTR;
1548	mvi	SG_STATE, SEGS_AVAIL|LOADING_NEEDED;
1549idle_sg_avail:
1550	/* Does the hardware have space for another SG entry? */
1551	test	DFSTATUS, PRELOAD_AVAIL jz return;
1552	/*
1553	 * On the A, preloading a segment before HDMAENACK
1554	 * comes true can clobber the shadow address of the
1555	 * first segment in the S/G FIFO.  Wait until it is
1556	 * safe to proceed.
1557	 */
1558	if ((ahd->features & AHD_NEW_DFCNTRL_OPTS) == 0) {
1559		test	DFCNTRL, HDMAENACK jz return;
1560	}
1561	if ((ahd->flags & AHD_64BIT_ADDRESSING) != 0) {
1562		bmov	HADDR, CCSGRAM, 8;
1563	} else {
1564		bmov 	HADDR, CCSGRAM, 4;
1565	}
1566	bmov	HCNT, CCSGRAM, 3;
1567	bmov	SCB_RESIDUAL_DATACNT[3], CCSGRAM, 1;
1568	if ((ahd->flags & AHD_39BIT_ADDRESSING) != 0) {
1569		and	HADDR[4], SG_HIGH_ADDR_BITS, SCB_RESIDUAL_DATACNT[3];
1570	}
1571	if ((ahd->flags & AHD_64BIT_ADDRESSING) != 0) {
1572		/* Skip 4 bytes of pad. */
1573		add	CCSGADDR, 4;
1574	}
1575sg_advance:
1576	clr	A;			/* add sizeof(struct scatter) */
1577	add	SCB_RESIDUAL_SGPTR[0],SG_SIZEOF;
1578	adc	SCB_RESIDUAL_SGPTR[1],A;
1579	adc	SCB_RESIDUAL_SGPTR[2],A;
1580	adc	SCB_RESIDUAL_SGPTR[3],A;
1581	mov	SINDEX, SCB_RESIDUAL_SGPTR[0];
1582	test	SCB_RESIDUAL_DATACNT[3], SG_LAST_SEG jz . + 3;
1583	or	SINDEX, LAST_SEG;
1584	clr	SG_STATE;
1585	mov	SG_CACHE_PRE, SINDEX;
1586	if ((ahd->features & AHD_NEW_DFCNTRL_OPTS) != 0) {
1587		/*
1588		 * Use SCSIENWRDIS so that SCSIEN is never
1589		 * modified by this operation.
1590		 */
1591		or	DFCNTRL, PRELOADEN|HDMAEN|SCSIENWRDIS;
1592	} else {
1593		or	DFCNTRL, PRELOADEN|HDMAEN;
1594	}
1595	/*
1596	 * Do we have another segment in the cache?
1597	 */
1598	add	NONE, SG_PREFETCH_CNT_LIMIT, CCSGADDR;
1599	jnc	return;
1600	and	SG_STATE, ~SEGS_AVAIL ret;
1601
1602/*
1603 * Initialize the DMA address and counter from the SCB.
1604 */
1605load_first_seg:
1606	bmov	HADDR, SCB_DATAPTR, 11;
1607	and	REG_ISR, ~SG_FULL_RESID, SCB_SGPTR[0];
1608	test	SCB_DATACNT[3], SG_LAST_SEG jz . + 2;
1609	or	REG_ISR, LAST_SEG;
1610	mov	SG_CACHE_PRE, REG_ISR;
1611	mvi	DFCNTRL, (PRELOADEN|SCSIEN|HDMAEN);
1612	/*
1613	 * Since we've are entering a data phase, we will
1614	 * rely on the SCB_RESID* fields.  Initialize the
1615	 * residual and clear the full residual flag.
1616	 */
1617	and	SCB_SGPTR[0], ~SG_FULL_RESID;
1618	bmov	SCB_RESIDUAL_DATACNT[3], SCB_DATACNT[3], 5;
1619	/* If we need more S/G elements, tell the idle loop */
1620	test	SCB_RESIDUAL_DATACNT[3], SG_LAST_SEG jnz . + 2;
1621	mvi	SG_STATE, LOADING_NEEDED ret;
1622	clr	SG_STATE ret;
1623
1624p_data_handle_xfer:
1625	call	setjmp;
1626	test	SG_STATE, LOADING_NEEDED jnz service_fifo;
1627p_data_clear_handler:
1628	or	LONGJMP_ADDR[1], INVALID_ADDR ret;
1629
1630p_data:
1631	test	SEQ_FLAGS, NOT_IDENTIFIED|NO_CDB_SENT	jz p_data_allowed;
1632	SET_SEQINTCODE(PROTO_VIOLATION)
1633p_data_allowed:
1634 
1635	test	SEQ_FLAGS, DPHASE	jz data_phase_initialize;
1636
1637	/*
1638	 * If we re-enter the data phase after going through another
1639	 * phase, our transfer location has almost certainly been
1640	 * corrupted by the interveining, non-data, transfers.  Ask
1641	 * the host driver to fix us up based on the transfer residual
1642	 * unless we already know that we should be bitbucketing.
1643	 */
1644	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jnz p_data_bitbucket;
1645	SET_SEQINTCODE(PDATA_REINIT)
1646	jmp	data_phase_inbounds;
1647
1648p_data_bitbucket:
1649	/*
1650	 * Turn on `Bit Bucket' mode, wait until the target takes
1651	 * us to another phase, and then notify the host.
1652	 */
1653	mov	SAVED_MODE, MODE_PTR;
1654	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
1655		jnz bitbucket_not_m_dff;
1656	/*
1657	 * Ensure that any FIFO contents are cleared out and the
1658	 * FIFO free'd prior to starting the BITBUCKET.  BITBUCKET
1659	 * doesn't discard data already in the FIFO.
1660	 */
1661	mvi	DFFSXFRCTL, RSTCHN|CLRSHCNT;
1662	SET_MODE(M_SCSI, M_SCSI)
1663bitbucket_not_m_dff:
1664	or	SXFRCTL1,BITBUCKET;
1665	/* Wait for non-data phase. */
1666	test	SCSIPHASE, ~DATA_PHASE_MASK jz .;
1667	and	SXFRCTL1, ~BITBUCKET;
1668	RESTORE_MODE(SAVED_MODE)
1669SET_SRC_MODE	M_DFF1;
1670SET_DST_MODE	M_DFF1;
1671	SET_SEQINTCODE(DATA_OVERRUN)
1672	jmp	ITloop;
1673
1674data_phase_initialize:
1675	test	SCB_SGPTR[0], SG_LIST_NULL jnz p_data_bitbucket;
1676	call	load_first_seg;
1677data_phase_inbounds:
1678	/* We have seen a data phase at least once. */
1679	or	SEQ_FLAGS, DPHASE;
1680	mov	SAVED_MODE, MODE_PTR;
1681	test	SG_STATE, LOADING_NEEDED jz data_group_dma_loop;
1682	call	p_data_handle_xfer;
1683data_group_dma_loop:
1684	/*
1685	 * The transfer is complete if either the last segment
1686	 * completes or the target changes phase.  Both conditions
1687	 * will clear SCSIEN.
1688	 */
1689	call	idle_loop_service_fifos;
1690	call	idle_loop_cchan;
1691	call	idle_loop_gsfifo;
1692	RESTORE_MODE(SAVED_MODE)
1693	test	DFCNTRL, SCSIEN jnz data_group_dma_loop;
1694
1695data_group_dmafinish:
1696	/*
1697	 * The transfer has terminated either due to a phase
1698	 * change, and/or the completion of the last segment.
1699	 * We have two goals here.  Do as much other work
1700	 * as possible while the data fifo drains on a read
1701	 * and respond as quickly as possible to the standard
1702	 * messages (save data pointers/disconnect and command
1703	 * complete) that usually follow a data phase.
1704	 */
1705	call	calc_residual;
1706
1707	/*
1708	 * Go ahead and shut down the DMA engine now.
1709	 */
1710	test	DFCNTRL, DIRECTION jnz data_phase_finish;
1711data_group_fifoflush:
1712	if ((ahd->bugs & AHD_AUTOFLUSH_BUG) != 0) {
1713		or	DFCNTRL, FIFOFLUSH;
1714	}
1715	/*
1716	 * We have enabled the auto-ack feature.  This means
1717	 * that the controller may have already transferred
1718	 * some overrun bytes into the data FIFO and acked them
1719	 * on the bus.  The only way to detect this situation is
1720	 * to wait for LAST_SEG_DONE to come true on a completed
1721	 * transfer and then test to see if the data FIFO is
1722	 * non-empty.  We know there is more data yet to transfer
1723	 * if SG_LIST_NULL is not yet set, thus there cannot be
1724	 * an overrun.
1725	 */
1726	test	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL jz data_phase_finish;
1727	test	SG_CACHE_SHADOW, LAST_SEG_DONE jz .;
1728	test	DFSTATUS, FIFOEMP jnz data_phase_finish;
1729	/* Overrun */
1730	jmp	p_data;
1731data_phase_finish:
1732	/*
1733	 * If the target has left us in data phase, loop through
1734	 * the dma code again.  We will only loop if there is a
1735	 * data overrun.  
1736	 */
1737	if ((ahd->flags & AHD_TARGETROLE) != 0) {
1738		test	SSTAT0, TARGET jnz data_phase_done;
1739	}
1740	if ((ahd->flags & AHD_INITIATORROLE) != 0) {
1741		test	SSTAT1, REQINIT jz .;
1742		test	SCSIPHASE, DATA_PHASE_MASK jnz p_data;
1743	}
1744
1745data_phase_done:
1746	/* Kill off any pending prefetch */
1747	call	disable_ccsgen;
1748	or 	LONGJMP_ADDR[1], INVALID_ADDR;
1749
1750	if ((ahd->flags & AHD_TARGETROLE) != 0) {
1751		test	SEQ_FLAGS, DPHASE_PENDING jz ITloop;
1752		/*
1753		and	SEQ_FLAGS, ~DPHASE_PENDING;
1754		 * For data-in phases, wait for any pending acks from the
1755		 * initiator before changing phase.  We only need to
1756		 * send Ignore Wide Residue messages for data-in phases.
1757		test	DFCNTRL, DIRECTION jz target_ITloop;
1758		test	SSTAT1, REQINIT	jnz .;
1759		test	SCB_TASK_ATTRIBUTE, SCB_XFERLEN_ODD jz target_ITloop;
1760		SET_MODE(M_SCSI, M_SCSI)
1761		test	NEGCONOPTS, WIDEXFER jz target_ITloop;
1762		 */
1763		/*
1764		 * Issue an Ignore Wide Residue Message.
1765		mvi	P_MESGIN|BSYO call change_phase;
1766		mvi	MSG_IGN_WIDE_RESIDUE call target_outb;
1767		mvi	1 call target_outb;
1768		jmp	target_ITloop;
1769		 */
1770	} else {
1771		jmp	ITloop;
1772	}
1773
1774/*
1775 * We assume that, even though data may still be
1776 * transferring to the host, that the SCSI side of
1777 * the DMA engine is now in a static state.  This
1778 * allows us to update our notion of where we are
1779 * in this transfer.
1780 *
1781 * If, by chance, we stopped before being able
1782 * to fetch additional segments for this transfer,
1783 * yet the last S/G was completely exhausted,
1784 * call our idle loop until it is able to load
1785 * another segment.  This will allow us to immediately
1786 * pickup on the next segment on the next data phase.
1787 *
1788 * If we happened to stop on the last segment, then
1789 * our residual information is still correct from
1790 * the idle loop and there is no need to perform
1791 * any fixups.
1792 */
1793residual_before_last_seg:
1794	test    MDFFSTAT, SHVALID	jnz sgptr_fixup;
1795	/*
1796	 * Can never happen from an interrupt as the packetized
1797	 * hardware will only interrupt us once SHVALID or
1798	 * LAST_SEG_DONE.
1799	 */
1800	call	idle_loop_service_fifos;
1801	RESTORE_MODE(SAVED_MODE)
1802	/* FALLTHROUGH */
1803calc_residual:
1804	test	SG_CACHE_SHADOW, LAST_SEG jz residual_before_last_seg;
1805	/* Record if we've consumed all S/G entries */
1806	test	MDFFSTAT, SHVALID	jz . + 2;
1807	bmov	SCB_RESIDUAL_DATACNT, SHCNT, 3 ret;
1808	or	SCB_RESIDUAL_SGPTR[0], SG_LIST_NULL ret;
1809
1810sgptr_fixup:
1811	/*
1812	 * Fixup the residual next S/G pointer.  The S/G preload
1813	 * feature of the chip allows us to load two elements
1814	 * in addition to the currently active element.  We
1815	 * store the bottom byte of the next S/G pointer in
1816	 * the SG_CACHE_PTR register so we can restore the
1817	 * correct value when the DMA completes.  If the next
1818	 * sg ptr value has advanced to the point where higher
1819	 * bytes in the address have been affected, fix them
1820	 * too.
1821	 */
1822	test	SG_CACHE_SHADOW, 0x80 jz sgptr_fixup_done;
1823	test	SCB_RESIDUAL_SGPTR[0], 0x80 jnz sgptr_fixup_done;
1824	add	SCB_RESIDUAL_SGPTR[1], -1;
1825	adc	SCB_RESIDUAL_SGPTR[2], -1; 
1826	adc	SCB_RESIDUAL_SGPTR[3], -1;
1827sgptr_fixup_done:
1828	and	SCB_RESIDUAL_SGPTR[0], SG_ADDR_MASK, SG_CACHE_SHADOW;
1829	clr	SCB_RESIDUAL_DATACNT[3]; /* We are not the last seg */
1830	bmov	SCB_RESIDUAL_DATACNT, SHCNT, 3 ret;
1831
1832export timer_isr:
1833	call	issue_cmdcmplt;
1834	mvi	CLRSEQINTSTAT, CLRSEQ_SWTMRTO;
1835	if ((ahd->bugs & AHD_SET_MODE_BUG) != 0) {
1836		/*
1837		 * In H2A4, the mode pointer is not saved
1838		 * for intvec2, but is restored on iret.
1839		 * This can lead to the restoration of a
1840		 * bogus mode ptr.  Manually clear the
1841		 * intmask bits and do a normal return
1842		 * to compensate.
1843		 */
1844		and	SEQINTCTL, ~(INTMASK2|INTMASK1) ret;
1845	} else {
1846		or	SEQINTCTL, IRET ret;
1847	}
1848
1849export seq_isr:
1850	if ((ahd->features & AHD_RTI) == 0) {
1851		/*
1852		 * On RevA Silicon, if the target returns us to data-out
1853		 * after we have already trained for data-out, it is
1854		 * possible for us to transition the free running clock to
1855		 * data-valid before the required 100ns P1 setup time (8 P1
1856		 * assertions in fast-160 mode).  This will only happen if
1857		 * this L-Q is a continuation of a data transfer for which
1858		 * we have already prefetched data into our FIFO (LQ/Data
1859		 * followed by LQ/Data for the same write transaction).
1860		 * This can cause some target implementations to miss the
1861		 * first few data transfers on the bus.  We detect this
1862		 * situation by noticing that this is the first data transfer
1863		 * after an LQ (LQIWORKONLQ true), that the data transfer is
1864		 * a continuation of a transfer already setup in our FIFO
1865		 * (SAVEPTRS interrupt), and that the transaction is a write
1866		 * (DIRECTION set in DFCNTRL). The delay is performed by
1867		 * disabling SCSIEN until we see the first REQ from the
1868		 * target.
1869		 * 
1870		 * First instruction in an ISR cannot be a branch on
1871		 * Rev A.  Snapshot LQISTAT2 so the status is not missed
1872		 * and deffer the test by one instruction.
1873		 */
1874		mov	REG_ISR, LQISTAT2;
1875		test	REG_ISR, LQIWORKONLQ jz main_isr;
1876		test	SEQINTSRC, SAVEPTRS  jz main_isr;
1877		test	LONGJMP_ADDR[1], INVALID_ADDR jz saveptr_active_fifo;
1878		/*
1879		 * Switch to the active FIFO after clearing the snapshot
1880		 * savepointer in the current FIFO.  We do this so that
1881		 * a pending CTXTDONE or SAVEPTR is visible in the active
1882		 * FIFO.  This status is the only way we can detect if we
1883		 * have lost the race (e.g. host paused us) and our attempts
1884		 * to disable the channel occurred after all REQs were
1885		 * already seen and acked (REQINIT never comes true).
1886		 */
1887		mvi	DFFSXFRCTL, CLRCHN;
1888		xor	MODE_PTR, MK_MODE(M_DFF1, M_DFF1);
1889		test	DFCNTRL, DIRECTION jz interrupt_return;
1890		and	DFCNTRL, ~SCSIEN;
1891snapshot_wait_data_valid:
1892		test	SEQINTSRC, (CTXTDONE|SAVEPTRS) jnz interrupt_return;
1893		test	SSTAT1, REQINIT	jz snapshot_wait_data_valid;
1894snapshot_data_valid:
1895		or	DFCNTRL, SCSIEN;
1896		or	SEQINTCTL, IRET ret;
1897snapshot_saveptr:
1898		mvi	DFFSXFRCTL, CLRCHN;
1899		or	SEQINTCTL, IRET ret;
1900main_isr:
1901	}
1902	test	SEQINTSRC, CFG4DATA	jnz cfg4data_intr;
1903	test	SEQINTSRC, CFG4ISTAT	jnz cfg4istat_intr;
1904	test	SEQINTSRC, SAVEPTRS	jnz saveptr_intr;
1905	test	SEQINTSRC, CFG4ICMD	jnz cfg4icmd_intr;
1906	SET_SEQINTCODE(INVALID_SEQINT)
1907
1908/*
1909 * There are two types of save pointers interrupts:
1910 * The first is a snapshot save pointers where the current FIFO is not
1911 * active and contains a snapshot of the current poniter information.
1912 * This happens between packets in a stream for a single L_Q.  Since we
1913 * are not performing a pointer save, we can safely clear the channel
1914 * so it can be used for other transactions.  On RTI capable controllers,
1915 * where snapshots can, and are, disabled, the code to handle this type
1916 * of snapshot is not active.
1917 *
1918 * The second case is a save pointers on an active FIFO which occurs
1919 * if the target changes to a new L_Q or busfrees/QASes and the transfer
1920 * has a residual.  This should occur coincident with a ctxtdone.  We
1921 * disable the interrupt and allow our active routine to handle the
1922 * save.
1923 */
1924saveptr_intr:
1925	if ((ahd->features & AHD_RTI) == 0) {
1926		test	LONGJMP_ADDR[1], INVALID_ADDR jnz snapshot_saveptr;
1927	}
1928saveptr_active_fifo:
1929	and	SEQIMODE, ~ENSAVEPTRS;
1930	or	SEQINTCTL, IRET ret;
1931
1932cfg4data_intr:
1933	test	SCB_SGPTR[0], SG_LIST_NULL jnz pkt_handle_overrun_inc_use_count;
1934	call	load_first_seg;
1935	call	pkt_handle_xfer;
1936	inc	SCB_FIFO_USE_COUNT;
1937interrupt_return:
1938	or	SEQINTCTL, IRET ret;
1939
1940cfg4istat_intr:
1941	call	freeze_queue;
1942	add	NONE, -13, SCB_CDB_LEN;
1943	jnc	cfg4istat_have_sense_addr;
1944	test	SCB_CDB_LEN, SCB_CDB_LEN_PTR jnz cfg4istat_have_sense_addr;
1945	/*
1946	 * Host sets up address/count and enables transfer.
1947	 */
1948	SET_SEQINTCODE(CFG4ISTAT_INTR)
1949	jmp	cfg4istat_setup_handler;
1950cfg4istat_have_sense_addr:
1951	bmov	HADDR, SCB_SENSE_BUSADDR, 4;
1952	mvi	HCNT[1], (AHD_SENSE_BUFSIZE >> 8);
1953	mvi	SG_CACHE_PRE, LAST_SEG;
1954	mvi	DFCNTRL, PRELOADEN|SCSIEN|HDMAEN;
1955cfg4istat_setup_handler:
1956	/*
1957	 * Status pkt is transferring to host.
1958	 * Wait in idle loop for transfer to complete.
1959	 * If a command completed before an attempted
1960	 * task management function completed, notify the host.
1961	 */
1962	test	SCB_TASK_MANAGEMENT, 0xFF jz cfg4istat_no_taskmgmt_func;
1963	SET_SEQINTCODE(TASKMGMT_CMD_CMPLT_OKAY)
1964cfg4istat_no_taskmgmt_func:
1965	call	pkt_handle_status;
1966	or	SEQINTCTL, IRET ret;
1967
1968cfg4icmd_intr:
1969	/*
1970	 * In the case of DMAing a CDB from the host, the normal
1971	 * CDB buffer is formatted with an 8 byte address followed
1972	 * by a 1 byte count.
1973	 */
1974	bmov	HADDR[0], SCB_HOST_CDB_PTR, 9;
1975	mvi	SG_CACHE_PRE, LAST_SEG;
1976	mvi	DFCNTRL, (PRELOADEN|SCSIEN|HDMAEN);
1977	call	pkt_handle_cdb;
1978	or	SEQINTCTL, IRET ret;
1979
1980/*
1981 * See if the target has gone on in this context creating an
1982 * overrun condition.  For the write case, the hardware cannot
1983 * ack bytes until data are provided.  So, if the target begins
1984 * another  packet without changing contexts, implying we are
1985 * not sitting on a packet boundary, we are in an overrun
1986 * situation.  For the read case, the hardware will continue to
1987 * ack bytes into the FIFO, and may even ack the last overrun packet
1988 * into the FIFO.   If the FIFO should become non-empty, we are in
1989 * a read overrun case.
1990 */
1991#define check_overrun							\
1992	/* Not on a packet boundary. */					\
1993	test 	MDFFSTAT, DLZERO jz pkt_handle_overrun;			\
1994	test	DFSTATUS, FIFOEMP jz pkt_handle_overrun
1995
1996pkt_handle_xfer:
1997	test	SG_STATE, LOADING_NEEDED jz pkt_last_seg;
1998	call	setjmp;
1999	test	SEQINTSRC, SAVEPTRS jnz pkt_saveptrs;
2000	test	SCSIPHASE, ~DATA_PHASE_MASK jz . + 2;
2001	test	SCSISIGO, ATNO jnz . + 2;
2002	test	SSTAT2, NONPACKREQ jz pkt_service_fifo;
2003	/*
2004	 * Defer handling of this NONPACKREQ until we
2005	 * can be sure it pertains to this FIFO.  SAVEPTRS
2006	 * will not be asserted if the NONPACKREQ is for us,
2007	 * so we must simulate it if shadow is valid.  If
2008	 * shadow is not valid, keep running this FIFO until we
2009	 * have satisfied the transfer by loading segments and
2010	 * waiting for either shadow valid or last_seg_done.
2011	 */
2012	test	MDFFSTAT, SHVALID jnz pkt_saveptrs;
2013pkt_service_fifo:
2014	test	SG_STATE, LOADING_NEEDED jnz service_fifo;
2015pkt_last_seg:
2016	call	setjmp;
2017	test	SEQINTSRC, SAVEPTRS jnz pkt_saveptrs;
2018	test	SG_CACHE_SHADOW, LAST_SEG_DONE jnz pkt_last_seg_done;
2019	test	SCSIPHASE, ~DATA_PHASE_MASK jz . + 2;
2020	test	SCSISIGO, ATNO jnz . + 2;
2021	test	SSTAT2, NONPACKREQ jz return;
2022	test	MDFFSTAT, SHVALID jz return;
2023	/* FALLTHROUGH */
2024
2025/*
2026 * Either a SAVEPTRS interrupt condition is pending for this FIFO
2027 * or we have a pending NONPACKREQ for this FIFO.  We differentiate
2028 * between the two by capturing the state of the SAVEPTRS interrupt
2029 * prior to clearing this status and executing the common code for
2030 * these two cases.
2031 */
2032pkt_saveptrs:
2033BEGIN_CRITICAL;
2034	if ((ahd->bugs & AHD_AUTOFLUSH_BUG) != 0) {
2035		or	DFCNTRL, FIFOFLUSH;
2036	}
2037	mov	REG0, SEQINTSRC;
2038	call	calc_residual;
2039	call	save_pointers;
2040	mvi	CLRSEQINTSRC, CLRSAVEPTRS;
2041	call	disable_ccsgen;
2042	or	SEQIMODE, ENSAVEPTRS;
2043	test	DFCNTRL, DIRECTION jnz pkt_saveptrs_check_status;
2044	test	DFSTATUS, FIFOEMP jnz pkt_saveptrs_check_status;
2045	/*
2046	 * Keep a handler around for this FIFO until it drains
2047	 * to the host to guarantee that we don't complete the
2048	 * command to the host before the data arrives.
2049	 */
2050pkt_saveptrs_wait_fifoemp:
2051	call	setjmp;
2052	test	DFSTATUS, FIFOEMP jz return;
2053pkt_saveptrs_check_status:
2054	or	LONGJMP_ADDR[1], INVALID_ADDR;
2055	test	REG0, SAVEPTRS jz unexpected_nonpkt_phase;
2056	dec	SCB_FIFO_USE_COUNT;
2057	test	SCB_CONTROL, STATUS_RCVD jnz pkt_complete_scb_if_fifos_idle;
2058	mvi	DFFSXFRCTL, CLRCHN ret;
2059
2060/*
2061 * LAST_SEG_DONE status has been seen in the current FIFO.
2062 * This indicates that all of the allowed data for this
2063 * command has transferred across the SCSI and host buses.
2064 * Check for overrun and see if we can complete this command.
2065 */
2066pkt_last_seg_done:
2067	/*
2068	 * Mark transfer as completed.
2069	 */
2070	or	SCB_SGPTR, SG_LIST_NULL;
2071
2072	/*
2073	 * Wait for the current context to finish to verify that
2074	 * no overrun condition has occurred.
2075	 */
2076	test	SEQINTSRC, CTXTDONE jnz pkt_ctxt_done;
2077	call	setjmp;
2078pkt_wait_ctxt_done_loop:
2079	test	SEQINTSRC, CTXTDONE jnz pkt_ctxt_done;
2080	/*
2081	 * A sufficiently large overrun or a NONPACKREQ may
2082	 * prevent CTXTDONE from ever asserting, so we must
2083	 * poll for these statuses too.
2084	 */
2085	check_overrun;
2086	test	SSTAT2, NONPACKREQ jz return;
2087	test	SEQINTSRC, CTXTDONE jz unexpected_nonpkt_phase;
2088	/* FALLTHROUGH */
2089
2090pkt_ctxt_done:
2091	check_overrun;
2092	or	LONGJMP_ADDR[1], INVALID_ADDR;
2093	/*
2094	 * If status has been received, it is safe to skip
2095	 * the check to see if another FIFO is active because
2096	 * LAST_SEG_DONE has been observed.  However, we check
2097	 * the FIFO anyway since it costs us only one extra
2098	 * instruction to leverage common code to perform the
2099	 * SCB completion.
2100	 */
2101	dec	SCB_FIFO_USE_COUNT;
2102	test	SCB_CONTROL, STATUS_RCVD jnz pkt_complete_scb_if_fifos_idle;
2103	mvi	DFFSXFRCTL, CLRCHN ret;
2104END_CRITICAL;
2105
2106/*
2107 * Must wait until CDB xfer is over before issuing the
2108 * clear channel.
2109 */
2110pkt_handle_cdb:
2111	call	setjmp;
2112	test	SG_CACHE_SHADOW, LAST_SEG_DONE jz return;
2113	or	LONGJMP_ADDR[1], INVALID_ADDR;
2114	mvi	DFFSXFRCTL, CLRCHN ret;
2115
2116/*
2117 * Watch over the status transfer.  Our host sense buffer is
2118 * large enough to take the maximum allowed status packet.
2119 * None-the-less, we must still catch and report overruns to
2120 * the host.  Additionally, properly catch unexpected non-packet
2121 * phases that are typically caused by CRC errors in status packet
2122 * transmission.
2123 */
2124pkt_handle_status:
2125	call	setjmp;
2126	test	SG_CACHE_SHADOW, LAST_SEG_DONE jnz pkt_status_check_overrun;
2127	test	SEQINTSRC, CTXTDONE jz pkt_status_check_nonpackreq;
2128	test	SG_CACHE_SHADOW, LAST_SEG_DONE jnz pkt_status_check_overrun;
2129pkt_status_IU_done:
2130	if ((ahd->bugs & AHD_AUTOFLUSH_BUG) != 0) {
2131		or	DFCNTRL, FIFOFLUSH;
2132	}
2133	test	DFSTATUS, FIFOEMP jz return;
2134BEGIN_CRITICAL;
2135	or	LONGJMP_ADDR[1], INVALID_ADDR;
2136	mvi	SCB_SCSI_STATUS, STATUS_PKT_SENSE;
2137	or	SCB_CONTROL, STATUS_RCVD;
2138	jmp	pkt_complete_scb_if_fifos_idle;
2139END_CRITICAL;
2140pkt_status_check_overrun:
2141	/*
2142	 * Status PKT overruns are uncerimoniously recovered with a
2143	 * bus reset.  If we've overrun, let the host know so that
2144	 * recovery can be performed.
2145	 *
2146	 * LAST_SEG_DONE has been observed.  If either CTXTDONE or
2147	 * a NONPACKREQ phase change have occurred and the FIFO is
2148	 * empty, there is no overrun.
2149	 */
2150	test	DFSTATUS, FIFOEMP jz pkt_status_report_overrun;
2151	test	SEQINTSRC, CTXTDONE jz . + 2;
2152	test	DFSTATUS, FIFOEMP jnz pkt_status_IU_done;
2153	test	SCSIPHASE, ~DATA_PHASE_MASK jz return;
2154	test	DFSTATUS, FIFOEMP jnz pkt_status_check_nonpackreq;
2155pkt_status_report_overrun:
2156	SET_SEQINTCODE(STATUS_OVERRUN)
2157	/* SEQUENCER RESTARTED */
2158pkt_status_check_nonpackreq:
2159	/*
2160	 * CTXTDONE may be held off if a NONPACKREQ is associated with
2161	 * the current context.  If a NONPACKREQ is observed, decide
2162	 * if it is for the current context.  If it is for the current
2163	 * context, we must defer NONPACKREQ processing until all data
2164	 * has transferred to the host.
2165	 */
2166	test	SCSIPHASE, ~DATA_PHASE_MASK jz return;
2167	test	SCSISIGO, ATNO jnz . + 2;
2168	test	SSTAT2, NONPACKREQ jz return;
2169	test	SEQINTSRC, CTXTDONE jnz pkt_status_IU_done;
2170	test	DFSTATUS, FIFOEMP jz return;
2171	/*
2172	 * The unexpected nonpkt phase handler assumes that any
2173	 * data channel use will have a FIFO reference count.  It
2174	 * turns out that the status handler doesn't need a references
2175	 * count since the status received flag, and thus completion
2176	 * processing, cannot be set until the handler is finished.
2177	 * We increment the count here to make the nonpkt handler
2178	 * happy.
2179	 */
2180	inc	SCB_FIFO_USE_COUNT;
2181	/* FALLTHROUGH */
2182
2183/*
2184 * Nonpackreq is a polled status.  It can come true in three situations:
2185 * we have received an L_Q, we have sent one or more L_Qs, or there is no
2186 * L_Q context associated with this REQ (REQ occurs immediately after a
2187 * (re)selection).  Routines that know that the context responsible for this
2188 * nonpackreq call directly into unexpected_nonpkt_phase.  In the case of the
2189 * top level idle loop, we exhaust all active contexts prior to determining that
2190 * we simply do not have the full I_T_L_Q for this phase.
2191 */
2192unexpected_nonpkt_phase_find_ctxt:
2193	/*
2194	 * This nonpackreq is most likely associated with one of the tags
2195	 * in a FIFO or an outgoing LQ.  Only treat it as an I_T only
2196	 * nonpackreq if we've cleared out the FIFOs and handled any
2197	 * pending SELDO.
2198	 */
2199SET_SRC_MODE	M_SCSI;
2200SET_DST_MODE	M_SCSI;
2201	and	A, FIFO1FREE|FIFO0FREE, DFFSTAT;
2202	cmp	A, FIFO1FREE|FIFO0FREE jne return;
2203	test	SSTAT0, SELDO jnz return;
2204	mvi	SCBPTR[1], SCB_LIST_NULL;
2205unexpected_nonpkt_phase:
2206	test	MODE_PTR, ~(MK_MODE(M_DFF1, M_DFF1))
2207		jnz unexpected_nonpkt_mode_cleared;
2208SET_SRC_MODE	M_DFF0;
2209SET_DST_MODE	M_DFF0;
2210	or	LONGJMP_ADDR[1], INVALID_ADDR;
2211	dec	SCB_FIFO_USE_COUNT;
2212	mvi	DFFSXFRCTL, CLRCHN;
2213unexpected_nonpkt_mode_cleared:
2214	mvi	CLRSINT2, CLRNONPACKREQ;
2215	if ((ahd->bugs & AHD_BUSFREEREV_BUG) != 0) {
2216		/*
2217		 * Test to ensure that the bus has not
2218		 * already gone free prior to clearing
2219		 * any stale busfree status.  This avoids
2220		 * a window whereby a busfree just after
2221		 * a selection could be missed.
2222		 */
2223		test	SCSISIGI, BSYI jz . + 2;
2224		mvi	CLRSINT1,CLRBUSFREE;
2225		or	SIMODE1, ENBUSFREE;
2226	}
2227	test	SCSIPHASE, ~(MSG_IN_PHASE|MSG_OUT_PHASE) jnz illegal_phase;
2228	SET_SEQINTCODE(ENTERING_NONPACK)
2229	jmp	ITloop;
2230
2231illegal_phase:
2232	SET_SEQINTCODE(ILLEGAL_PHASE)
2233	jmp	ITloop;
2234
2235/*
2236 * We have entered an overrun situation.  If we have working
2237 * BITBUCKET, flip that on and let the hardware eat any overrun
2238 * data.  Otherwise use an overrun buffer in the host to simulate
2239 * BITBUCKET.
2240 */
2241pkt_handle_overrun_inc_use_count:
2242	inc	SCB_FIFO_USE_COUNT;
2243pkt_handle_overrun:
2244	SET_SEQINTCODE(CFG4OVERRUN)
2245	call	freeze_queue;
2246	if ((ahd->bugs & AHD_PKT_BITBUCKET_BUG) == 0) {
2247		or	DFFSXFRCTL, DFFBITBUCKET;
2248SET_SRC_MODE	M_DFF1;
2249SET_DST_MODE	M_DFF1;
2250	} else {
2251		call	load_overrun_buf;
2252		mvi	DFCNTRL, (HDMAEN|SCSIEN|PRELOADEN);
2253	}
2254	call	setjmp;
2255	if ((ahd->bugs & AHD_PKT_BITBUCKET_BUG) != 0) {
2256		test	DFSTATUS, PRELOAD_AVAIL jz overrun_load_done;
2257		call	load_overrun_buf;
2258		or	DFCNTRL, PRELOADEN;
2259overrun_load_done:
2260		test	SEQINTSRC, CTXTDONE jnz pkt_overrun_end;
2261	} else {
2262		test	DFFSXFRCTL, DFFBITBUCKET jz pkt_overrun_end;
2263	}
2264	test	SSTAT2, NONPACKREQ jz return;
2265pkt_overrun_end:
2266	or	SCB_RESIDUAL_SGPTR, SG_OVERRUN_RESID;
2267	test	SEQINTSRC, CTXTDONE jz unexpected_nonpkt_phase;
2268	dec	SCB_FIFO_USE_COUNT;
2269	or	LONGJMP_ADDR[1], INVALID_ADDR;
2270	test	SCB_CONTROL, STATUS_RCVD jnz pkt_complete_scb_if_fifos_idle;
2271	mvi	DFFSXFRCTL, CLRCHN ret;
2272
2273if ((ahd->bugs & AHD_PKT_BITBUCKET_BUG) != 0) {
2274load_overrun_buf:
2275	/*
2276	 * Load a dummy segment if preload space is available.
2277	 */
2278	mov 	HADDR[0], SHARED_DATA_ADDR;
2279	add	HADDR[1], PKT_OVERRUN_BUFOFFSET, SHARED_DATA_ADDR[1];
2280	mov	ACCUM_SAVE, A;
2281	clr	A;
2282	adc	HADDR[2], A, SHARED_DATA_ADDR[2];
2283	adc	HADDR[3], A, SHARED_DATA_ADDR[3];
2284	mov	A, ACCUM_SAVE;
2285	bmov	HADDR[4], ALLZEROS, 4;
2286	/* PKT_OVERRUN_BUFSIZE is a multiple of 256 */
2287	clr	HCNT[0];
2288	mvi	HCNT[1], ((PKT_OVERRUN_BUFSIZE >> 8) & 0xFF);
2289	clr	HCNT[2] ret;
2290}