Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

Pull SCSI target updates from Nicholas Bellinger:
 "This contains the usual set of updates and bugfixes to target-core +
  existing fabric module code, along with a handful of the patches
  destined for v3.3 stable.

  It also contains the necessary target-core infrastructure pieces
  required to run using tcm_qla2xxx.ko WWPNs with the new Qlogic Fibre
  Channel fabric module currently queued in target-pending/for-next-merge,
  and coming for round 2.

  The highlights for this series include:

   - Add target_submit_tmr() helper function for fabric task management
     (andy)
   - Convert tcm_fc to use target_submit_tmr() (andy)
   - Replace target core various cmd flags with a transport state (hch)
   - Convert loopback to use workqueue submission (hch)
   - Convert target core to use array_zalloc for tpg_lun_list (joern)
   - Convert target core to use array_zalloc for device_list (joern)
   - Add target core support for TMR_ABORT_TASK (nab)
   - Add target core se_sess->sess_kref + get/put helpers (nab)
   - Add target core se_node_acl->acl_kref for ->acl_free_comp usage
     (nab)
   - Convert iscsi-target to use target_put_session + sess_kref (nab)
   - Fix tcm_fc fc_exch memory leak in ft_send_resp_status (nab)
   - Fix ib_srpt srpt_handle_cmd send_ioctx->ioctx_kref leak on
     exception (nab)
   - Fix target core up handling of short INQUIRY buffers (roland)
   - Untangle target-core front-end and back-end meanings of max_sectors
     attribute (roland)
   - Set loopback residual field for SCSI commands (roland)
   - Fix target-core 16-bit target ports for SET TARGET PORT GROUPS
     emulation (roland)

  Thanks again to Andy, Christoph, Joern, Roland, and everyone who has
  contributed this round!"

* 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending: (64 commits)
  ib_srpt: Fix srpt_handle_cmd send_ioctx->ioctx_kref leak on exception
  loopback: Fix transport_generic_allocate_tasks error handling
  iscsi-target: remove improper externs
  iscsi-target: Remove unused variables in iscsi_target_parameters.c
  target: remove obvious warnings
  target: Use array_zalloc for device_list
  target: Use array_zalloc for tpg_lun_list
  target: Fix sense code for unsupported SERVICE ACTION IN
  target: Remove hack to make READ CAPACITY(10) lie if thin provisioning is enabled
  target: Bump core version to v4.1.0-rc2-ml + fabric versions
  tcm_fc: Fix fc_exch memory leak in ft_send_resp_status
  target: Drop unused legacy target_core_fabric_ops API callers
  iscsi-target: Convert to use target_put_session + sess_kref
  target: Convert se_node_acl->acl_group removal to use ->acl_kref
  target: Add se_node_acl->acl_kref for ->acl_free_comp usage
  target: Add se_node_acl->acl_free_comp for NodeACL release path
  target: Add se_sess->sess_kref + get/put helpers
  target: Convert session_lock to irqsave
  target: Fix typo in drivers/target
  iscsi-target: Fix dynamic -> explict NodeACL pointer reference
  ...

1 files changed, 24 insertions, 40 deletions

diff --git a/drivers/infiniband/ulp/srpt/ib_srpt.c b/drivers/infiniband/ulp/srpt/ib_srpt.c
index ebe33d960d77..69e2ad06e515 100644
--- a/drivers/infiniband/ulp/srpt/ib_srpt.c
+++ b/drivers/infiniband/ulp/srpt/ib_srpt.c
@@ -1378,7 +1378,9 @@ static int srpt_abort_cmd(struct srpt_send_ioctx *ioctx)
                 break;
         case SRPT_STATE_NEED_DATA:
                 /* DMA_TO_DEVICE (write) - RDMA read error. */
-                atomic_set(&ioctx->cmd.transport_lun_stop, 1);
+                spin_lock_irqsave(&ioctx->cmd.t_state_lock, flags);
+                ioctx->cmd.transport_state |= CMD_T_LUN_STOP;
+                spin_unlock_irqrestore(&ioctx->cmd.t_state_lock, flags);
                 transport_generic_handle_data(&ioctx->cmd);
                 break;
         case SRPT_STATE_CMD_RSP_SENT:
@@ -1387,7 +1389,9 @@ static int srpt_abort_cmd(struct srpt_send_ioctx *ioctx)
                  * not been received in time.
                  */
                 srpt_unmap_sg_to_ib_sge(ioctx->ch, ioctx);
-                atomic_set(&ioctx->cmd.transport_lun_stop, 1);
+                spin_lock_irqsave(&ioctx->cmd.t_state_lock, flags);
+                ioctx->cmd.transport_state |= CMD_T_LUN_STOP;
+                spin_unlock_irqrestore(&ioctx->cmd.t_state_lock, flags);
                 kref_put(&ioctx->kref, srpt_put_send_ioctx_kref);
                 break;
         case SRPT_STATE_MGMT_RSP_SENT:
@@ -1494,6 +1498,7 @@ static void srpt_handle_rdma_err_comp(struct srpt_rdma_ch *ch,
 {
         struct se_cmd *cmd;
         enum srpt_command_state state;
+        unsigned long flags;
 
         cmd = &ioctx->cmd;
         state = srpt_get_cmd_state(ioctx);
@@ -1513,7 +1518,9 @@ static void srpt_handle_rdma_err_comp(struct srpt_rdma_ch *ch,
                                __func__, __LINE__, state);
                 break;
         case SRPT_RDMA_WRITE_LAST:
-                atomic_set(&ioctx->cmd.transport_lun_stop, 1);
+                spin_lock_irqsave(&ioctx->cmd.t_state_lock, flags);
+                ioctx->cmd.transport_state |= CMD_T_LUN_STOP;
+                spin_unlock_irqrestore(&ioctx->cmd.t_state_lock, flags);
                 break;
         default:
                 printk(KERN_ERR "%s[%d]: opcode = %u\n", __func__,
@@ -1750,6 +1757,7 @@ static int srpt_handle_cmd(struct srpt_rdma_ch *ch,
                        srp_cmd->tag);
                 cmd->se_cmd_flags |= SCF_SCSI_CDB_EXCEPTION;
                 cmd->scsi_sense_reason = TCM_INVALID_CDB_FIELD;
+                kref_put(&send_ioctx->kref, srpt_put_send_ioctx_kref);
                 goto send_sense;
         }
 
@@ -1757,15 +1765,19 @@ static int srpt_handle_cmd(struct srpt_rdma_ch *ch,
         cmd->data_direction = dir;
         unpacked_lun = srpt_unpack_lun((uint8_t *)&srp_cmd->lun,
                                        sizeof(srp_cmd->lun));
-        if (transport_lookup_cmd_lun(cmd, unpacked_lun) < 0)
+        if (transport_lookup_cmd_lun(cmd, unpacked_lun) < 0) {
+                kref_put(&send_ioctx->kref, srpt_put_send_ioctx_kref);
                 goto send_sense;
+        }
         ret = transport_generic_allocate_tasks(cmd, srp_cmd->cdb);
-        if (cmd->se_cmd_flags & SCF_SCSI_RESERVATION_CONFLICT)
-                srpt_queue_status(cmd);
-        else if (cmd->se_cmd_flags & SCF_SCSI_CDB_EXCEPTION)
-                goto send_sense;
-        else
-                WARN_ON_ONCE(ret);
+        if (ret < 0) {
+                kref_put(&send_ioctx->kref, srpt_put_send_ioctx_kref);
+                if (cmd->se_cmd_flags & SCF_SCSI_RESERVATION_CONFLICT) {
+                        srpt_queue_status(cmd);
+                        return 0;
+                } else
+                        goto send_sense;
+        }
 
         transport_handle_cdb_direct(cmd);
         return 0;
@@ -1871,8 +1883,8 @@ static void srpt_handle_tsk_mgmt(struct srpt_rdma_ch *ch,
                         TMR_TASK_MGMT_FUNCTION_NOT_SUPPORTED;
                 goto process_tmr;
         }
-        cmd->se_tmr_req = core_tmr_alloc_req(cmd, NULL, tcm_tmr, GFP_KERNEL);
-        if (!cmd->se_tmr_req) {
+        res = core_tmr_alloc_req(cmd, NULL, tcm_tmr, GFP_KERNEL);
+        if (res < 0) {
                 send_ioctx->cmd.se_cmd_flags |= SCF_SCSI_CDB_EXCEPTION;
                 send_ioctx->cmd.se_tmr_req->response = TMR_FUNCTION_REJECTED;
                 goto process_tmr;
@@ -3514,25 +3526,6 @@ static void srpt_close_session(struct se_session *se_sess)
 }
 
 /**
- * To do: Find out whether stop_session() has a meaning for transports
- * other than iSCSI.
- */
-static void srpt_stop_session(struct se_session *se_sess, int sess_sleep,
-                              int conn_sleep)
-{
-}
-
-static void srpt_reset_nexus(struct se_session *sess)
-{
-        printk(KERN_ERR "This is the SRP protocol, not iSCSI\n");
-}
-
-static int srpt_sess_logged_in(struct se_session *se_sess)
-{
-        return true;
-}
-
-/**
  * srpt_sess_get_index() - Return the value of scsiAttIntrPortIndex (SCSI-MIB).
  *
  * A quote from RFC 4455 (SCSI-MIB) about this MIB object:
@@ -3576,11 +3569,6 @@ static u16 srpt_get_fabric_sense_len(void)
         return 0;
 }
 
-static int srpt_is_state_remove(struct se_cmd *se_cmd)
-{
-        return 0;
-}
-
 /**
  * srpt_parse_i_port_id() - Parse an initiator port ID.
  * @name: ASCII representation of a 128-bit initiator port ID.
@@ -3950,9 +3938,6 @@ static struct target_core_fabric_ops srpt_template = {
         .check_stop_free                = srpt_check_stop_free,
         .shutdown_session               = srpt_shutdown_session,
         .close_session                  = srpt_close_session,
-        .stop_session                   = srpt_stop_session,
-        .fall_back_to_erl0              = srpt_reset_nexus,
-        .sess_logged_in                 = srpt_sess_logged_in,
         .sess_get_index                 = srpt_sess_get_index,
         .sess_get_initiator_sid         = NULL,
         .write_pending                  = srpt_write_pending,
@@ -3965,7 +3950,6 @@ static struct target_core_fabric_ops srpt_template = {
         .queue_tm_rsp                   = srpt_queue_response,
         .get_fabric_sense_len           = srpt_get_fabric_sense_len,
         .set_fabric_sense_len           = srpt_set_fabric_sense_len,
-        .is_state_remove                = srpt_is_state_remove,
         /*
          * Setup function pointers for generic logic in
          * target_core_fabric_configfs.c