net.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for HOST_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #ifdef __NetBSD__
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef HOST_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69
  70 /* For the benefit of older linux systems which don't supply it,
  71    we use a local copy of hpet.h. */
  72 /* #include <linux/hpet.h> */
  73 #include "hpet.h"
  74
  75 #include <linux/ppdev.h>
  76 #include <linux/parport.h>
  77 #endif
  78 #ifdef __sun__
  79 #include <sys/stat.h>
  80 #include <sys/ethernet.h>
  81 #include <sys/sockio.h>
  82 #include <netinet/arp.h>
  83 #include <netinet/in.h>
  84 #include <netinet/in_systm.h>
  85 #include <netinet/ip.h>
  86 #include <netinet/ip_icmp.h> // must come after ip.h
  87 #include <netinet/udp.h>
  88 #include <netinet/tcp.h>
  89 #include <net/if.h>
  90 #include <syslog.h>
  91 #include <stropts.h>
  92 #endif
  93 #endif
  94 #endif
  95
  96 #if defined(__OpenBSD__)
  97 #include <util.h>
  98 #endif
  99
 100 #if defined(CONFIG_VDE)
 101 #include <libvdeplug.h>
 102 #endif
 103
 104 #ifdef _WIN32
 105 #include <windows.h>
 106 #include <malloc.h>
 107 #include <sys/timeb.h>
 108 #include <mmsystem.h>
 109 #define getopt_long_only getopt_long
 110 #define memalign(align, size) malloc(size)
 111 #endif
 112
 113 #include "qemu-common.h"
 114 #include "net.h"
 115 #include "monitor.h"
 116 #include "sysemu.h"
 117 #include "qemu-timer.h"
 118 #include "qemu-char.h"
 119 #include "audio/audio.h"
 120 #include "qemu_socket.h"
 121 #include "qemu-log.h"
 122
 123 #include "slirp/libslirp.h"
 124
 125
 126 static VLANState *first_vlan;
 127
 128 /***********************************************************/
 129 /* network device redirectors */
 130
 131 #if defined(DEBUG_NET) || defined(DEBUG_SLIRP)
 132 static void hex_dump(FILE *f, const uint8_t *buf, int size)
 133 {
 134     int len, i, j, c;
 135
 136     for(i=0;i<size;i+=16) {
 137         len = size - i;
 138         if (len > 16)
 139             len = 16;
 140         fprintf(f, "%08x ", i);
 141         for(j=0;j<16;j++) {
 142             if (j < len)
 143                 fprintf(f, " %02x", buf[i+j]);
 144             else
 145                 fprintf(f, "   ");
 146         }
 147         fprintf(f, " ");
 148         for(j=0;j<len;j++) {
 149             c = buf[i+j];
 150             if (c < ' ' || c > '~')
 151                 c = '.';
 152             fprintf(f, "%c", c);
 153         }
 154         fprintf(f, "\n");
 155     }
 156 }
 157 #endif
 158
 159 static int parse_macaddr(uint8_t *macaddr, const char *p)
 160 {
 161     int i;
 162     char *last_char;
 163     long int offset;
 164
 165     errno = 0;
 166     offset = strtol(p, &last_char, 0);
 167     if (0 == errno && '\0' == *last_char &&
 168             offset >= 0 && offset <= 0xFFFFFF) {
 169         macaddr[3] = (offset & 0xFF0000) >> 16;
 170         macaddr[4] = (offset & 0xFF00) >> 8;
 171         macaddr[5] = offset & 0xFF;
 172         return 0;
 173     } else {
 174         for(i = 0; i < 6; i++) {
 175             macaddr[i] = strtol(p, (char **)&p, 16);
 176             if (i == 5) {
 177                 if (*p != '\0')
 178                     return -1;
 179             } else {
 180                 if (*p != ':' && *p != '-')
 181                     return -1;
 182                 p++;
 183             }
 184         }
 185         return 0;
 186     }
 187
 188     return -1;
 189 }
 190
 191 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
 192 {
 193     const char *p, *p1;
 194     int len;
 195     p = *pp;
 196     p1 = strchr(p, sep);
 197     if (!p1)
 198         return -1;
 199     len = p1 - p;
 200     p1++;
 201     if (buf_size > 0) {
 202         if (len > buf_size - 1)
 203             len = buf_size - 1;
 204         memcpy(buf, p, len);
 205         buf[len] = '\0';
 206     }
 207     *pp = p1;
 208     return 0;
 209 }
 210
 211 int parse_host_src_port(struct sockaddr_in *haddr,
 212                         struct sockaddr_in *saddr,
 213                         const char *input_str)
 214 {
 215     char *str = strdup(input_str);
 216     char *host_str = str;
 217     char *src_str;
 218     const char *src_str2;
 219     char *ptr;
 220
 221     /*
 222      * Chop off any extra arguments at the end of the string which
 223      * would start with a comma, then fill in the src port information
 224      * if it was provided else use the "any address" and "any port".
 225      */
 226     if ((ptr = strchr(str,',')))
 227         *ptr = '\0';
 228
 229     if ((src_str = strchr(input_str,'@'))) {
 230         *src_str = '\0';
 231         src_str++;
 232     }
 233
 234     if (parse_host_port(haddr, host_str) < 0)
 235         goto fail;
 236
 237     src_str2 = src_str;
 238     if (!src_str || *src_str == '\0')
 239         src_str2 = ":0";
 240
 241     if (parse_host_port(saddr, src_str2) < 0)
 242         goto fail;
 243
 244     free(str);
 245     return(0);
 246
 247 fail:
 248     free(str);
 249     return -1;
 250 }
 251
 252 int parse_host_port(struct sockaddr_in *saddr, const char *str)
 253 {
 254     char buf[512];
 255     struct hostent *he;
 256     const char *p, *r;
 257     int port;
 258
 259     p = str;
 260     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 261         return -1;
 262     saddr->sin_family = AF_INET;
 263     if (buf[0] == '\0') {
 264         saddr->sin_addr.s_addr = 0;
 265     } else {
 266         if (qemu_isdigit(buf[0])) {
 267             if (!inet_aton(buf, &saddr->sin_addr))
 268                 return -1;
 269         } else {
 270             if ((he = gethostbyname(buf)) == NULL)
 271                 return - 1;
 272             saddr->sin_addr = *(struct in_addr *)he->h_addr;
 273         }
 274     }
 275     port = strtol(p, (char **)&r, 0);
 276     if (r == p)
 277         return -1;
 278     saddr->sin_port = htons(port);
 279     return 0;
 280 }
 281
 282 #if !defined(_WIN32) && 0
 283 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
 284 {
 285     const char *p;
 286     int len;
 287
 288     len = MIN(108, strlen(str));
 289     p = strchr(str, ',');
 290     if (p)
 291         len = MIN(len, p - str);
 292
 293     memset(uaddr, 0, sizeof(*uaddr));
 294
 295     uaddr->sun_family = AF_UNIX;
 296     memcpy(uaddr->sun_path, str, len);
 297
 298     return 0;
 299 }
 300 #endif
 301
 302 void qemu_format_nic_info_str(VLANClientState *vc, uint8_t macaddr[6])
 303 {
 304     snprintf(vc->info_str, sizeof(vc->info_str),
 305              "model=%s,macaddr=%02x:%02x:%02x:%02x:%02x:%02x",
 306              vc->model,
 307              macaddr[0], macaddr[1], macaddr[2],
 308              macaddr[3], macaddr[4], macaddr[5]);
 309 }
 310
 311 static char *assign_name(VLANClientState *vc1, const char *model)
 312 {
 313     VLANState *vlan;
 314     char buf[256];
 315     int id = 0;
 316
 317     for (vlan = first_vlan; vlan; vlan = vlan->next) {
 318         VLANClientState *vc;
 319
 320         for (vc = vlan->first_client; vc; vc = vc->next)
 321             if (vc != vc1 && strcmp(vc->model, model) == 0)
 322                 id++;
 323     }
 324
 325     snprintf(buf, sizeof(buf), "%s.%d", model, id);
 326
 327     return strdup(buf);
 328 }
 329
 330 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
 331                                       const char *model,
 332                                       const char *name,
 333                                       NetCanReceive *can_receive,
 334                                       NetReceive *receive,
 335                                       NetReceiveIOV *receive_iov,
 336                                       NetCleanup *cleanup,
 337                                       void *opaque)
 338 {
 339     VLANClientState *vc, **pvc;
 340     vc = qemu_mallocz(sizeof(VLANClientState));
 341     vc->model = strdup(model);
 342     if (name)
 343         vc->name = strdup(name);
 344     else
 345         vc->name = assign_name(vc, model);
 346     vc->can_receive = can_receive;
 347     vc->receive = receive;
 348     vc->receive_iov = receive_iov;
 349     vc->cleanup = cleanup;
 350     vc->opaque = opaque;
 351     vc->vlan = vlan;
 352
 353     vc->next = NULL;
 354     pvc = &vlan->first_client;
 355     while (*pvc != NULL)
 356         pvc = &(*pvc)->next;
 357     *pvc = vc;
 358     return vc;
 359 }
 360
 361 void qemu_del_vlan_client(VLANClientState *vc)
 362 {
 363     VLANClientState **pvc = &vc->vlan->first_client;
 364
 365     while (*pvc != NULL)
 366         if (*pvc == vc) {
 367             *pvc = vc->next;
 368             if (vc->cleanup) {
 369                 vc->cleanup(vc);
 370             }
 371             free(vc->name);
 372             free(vc->model);
 373             qemu_free(vc);
 374             break;
 375         } else
 376             pvc = &(*pvc)->next;
 377 }
 378
 379 VLANClientState *qemu_find_vlan_client(VLANState *vlan, void *opaque)
 380 {
 381     VLANClientState **pvc = &vlan->first_client;
 382
 383     while (*pvc != NULL)
 384         if ((*pvc)->opaque == opaque)
 385             return *pvc;
 386         else
 387             pvc = &(*pvc)->next;
 388
 389     return NULL;
 390 }
 391
 392 static VLANClientState *
 393 qemu_find_vlan_client_by_name(Monitor *mon, int vlan_id,
 394                               const char *client_str)
 395 {
 396     VLANState *vlan;
 397     VLANClientState *vc;
 398
 399     vlan = qemu_find_vlan(vlan_id, 0);
 400     if (!vlan) {
 401         monitor_printf(mon, "unknown VLAN %d\n", vlan_id);
 402         return NULL;
 403     }
 404
 405     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 406         if (!strcmp(vc->name, client_str)) {
 407             break;
 408         }
 409     }
 410     if (!vc) {
 411         monitor_printf(mon, "can't find device %s on VLAN %d\n",
 412                        client_str, vlan_id);
 413     }
 414
 415     return vc;
 416 }
 417
 418 int qemu_can_send_packet(VLANClientState *sender)
 419 {
 420     VLANState *vlan = sender->vlan;
 421     VLANClientState *vc;
 422
 423     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 424         if (vc == sender) {
 425             continue;
 426         }
 427
 428         /* no can_receive() handler, they can always receive */
 429         if (!vc->can_receive || vc->can_receive(vc)) {
 430             return 1;
 431         }
 432     }
 433     return 0;
 434 }
 435
 436 static int
 437 qemu_deliver_packet(VLANClientState *sender, const uint8_t *buf, int size)
 438 {
 439     VLANClientState *vc;
 440     int ret = -1;
 441
 442     sender->vlan->delivering = 1;
 443
 444     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 445         ssize_t len;
 446
 447         if (vc == sender) {
 448             continue;
 449         }
 450
 451         if (vc->link_down) {
 452             ret = size;
 453             continue;
 454         }
 455
 456         len = vc->receive(vc, buf, size);
 457
 458         ret = (ret >= 0) ? ret : len;
 459     }
 460
 461     sender->vlan->delivering = 0;
 462
 463     return ret;
 464 }
 465
 466 void qemu_purge_queued_packets(VLANClientState *vc)
 467 {
 468     VLANPacket **pp = &vc->vlan->send_queue;
 469
 470     while (*pp != NULL) {
 471         VLANPacket *packet = *pp;
 472
 473         if (packet->sender == vc) {
 474             *pp = packet->next;
 475             qemu_free(packet);
 476         } else {
 477             pp = &packet->next;
 478         }
 479     }
 480 }
 481
 482 void qemu_flush_queued_packets(VLANClientState *vc)
 483 {
 484     VLANPacket *packet;
 485
 486     while ((packet = vc->vlan->send_queue) != NULL) {
 487         int ret;
 488
 489         vc->vlan->send_queue = packet->next;
 490
 491         ret = qemu_deliver_packet(packet->sender, packet->data, packet->size);
 492         if (ret == 0 && packet->sent_cb != NULL) {
 493             packet->next = vc->vlan->send_queue;
 494             vc->vlan->send_queue = packet;
 495             break;
 496         }
 497
 498         if (packet->sent_cb)
 499             packet->sent_cb(packet->sender, ret);
 500
 501         qemu_free(packet);
 502     }
 503 }
 504
 505 static void qemu_enqueue_packet(VLANClientState *sender,
 506                                 const uint8_t *buf, int size,
 507                                 NetPacketSent *sent_cb)
 508 {
 509     VLANPacket *packet;
 510
 511     packet = qemu_malloc(sizeof(VLANPacket) + size);
 512     packet->next = sender->vlan->send_queue;
 513     packet->sender = sender;
 514     packet->size = size;
 515     packet->sent_cb = sent_cb;
 516     memcpy(packet->data, buf, size);
 517     sender->vlan->send_queue = packet;
 518 }
 519
 520 ssize_t qemu_send_packet_async(VLANClientState *sender,
 521                                const uint8_t *buf, int size,
 522                                NetPacketSent *sent_cb)
 523 {
 524     int ret;
 525
 526     if (sender->link_down) {
 527         return size;
 528     }
 529
 530 #ifdef DEBUG_NET
 531     printf("vlan %d send:\n", sender->vlan->id);
 532     hex_dump(stdout, buf, size);
 533 #endif
 534
 535     if (sender->vlan->delivering) {
 536         qemu_enqueue_packet(sender, buf, size, NULL);
 537         return size;
 538     }
 539
 540     ret = qemu_deliver_packet(sender, buf, size);
 541     if (ret == 0 && sent_cb != NULL) {
 542         qemu_enqueue_packet(sender, buf, size, sent_cb);
 543         return 0;
 544     }
 545
 546     qemu_flush_queued_packets(sender);
 547
 548     return ret;
 549 }
 550
 551 void qemu_send_packet(VLANClientState *vc, const uint8_t *buf, int size)
 552 {
 553     qemu_send_packet_async(vc, buf, size, NULL);
 554 }
 555
 556 static ssize_t vc_sendv_compat(VLANClientState *vc, const struct iovec *iov,
 557                                int iovcnt)
 558 {
 559     uint8_t buffer[4096];
 560     size_t offset = 0;
 561     int i;
 562
 563     for (i = 0; i < iovcnt; i++) {
 564         size_t len;
 565
 566         len = MIN(sizeof(buffer) - offset, iov[i].iov_len);
 567         memcpy(buffer + offset, iov[i].iov_base, len);
 568         offset += len;
 569     }
 570
 571     return vc->receive(vc, buffer, offset);
 572 }
 573
 574 static ssize_t calc_iov_length(const struct iovec *iov, int iovcnt)
 575 {
 576     size_t offset = 0;
 577     int i;
 578
 579     for (i = 0; i < iovcnt; i++)
 580         offset += iov[i].iov_len;
 581     return offset;
 582 }
 583
 584 static int qemu_deliver_packet_iov(VLANClientState *sender,
 585                                    const struct iovec *iov, int iovcnt)
 586 {
 587     VLANClientState *vc;
 588     int ret = -1;
 589
 590     sender->vlan->delivering = 1;
 591
 592     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 593         ssize_t len;
 594
 595         if (vc == sender) {
 596             continue;
 597         }
 598
 599         if (vc->link_down) {
 600             ret = calc_iov_length(iov, iovcnt);
 601             continue;
 602         }
 603
 604         if (vc->receive_iov) {
 605             len = vc->receive_iov(vc, iov, iovcnt);
 606         } else {
 607             len = vc_sendv_compat(vc, iov, iovcnt);
 608         }
 609
 610         ret = (ret >= 0) ? ret : len;
 611     }
 612
 613     sender->vlan->delivering = 0;
 614
 615     return ret;
 616 }
 617
 618 static ssize_t qemu_enqueue_packet_iov(VLANClientState *sender,
 619                                        const struct iovec *iov, int iovcnt,
 620                                        NetPacketSent *sent_cb)
 621 {
 622     VLANPacket *packet;
 623     size_t max_len = 0;
 624     int i;
 625
 626     max_len = calc_iov_length(iov, iovcnt);
 627
 628     packet = qemu_malloc(sizeof(VLANPacket) + max_len);
 629     packet->next = sender->vlan->send_queue;
 630     packet->sender = sender;
 631     packet->sent_cb = sent_cb;
 632     packet->size = 0;
 633
 634     for (i = 0; i < iovcnt; i++) {
 635         size_t len = iov[i].iov_len;
 636
 637         memcpy(packet->data + packet->size, iov[i].iov_base, len);
 638         packet->size += len;
 639     }
 640
 641     sender->vlan->send_queue = packet;
 642
 643     return packet->size;
 644 }
 645
 646 ssize_t qemu_sendv_packet_async(VLANClientState *sender,
 647                                 const struct iovec *iov, int iovcnt,
 648                                 NetPacketSent *sent_cb)
 649 {
 650     int ret;
 651
 652     if (sender->link_down) {
 653         return calc_iov_length(iov, iovcnt);
 654     }
 655
 656     if (sender->vlan->delivering) {
 657         return qemu_enqueue_packet_iov(sender, iov, iovcnt, NULL);
 658     }
 659
 660     ret = qemu_deliver_packet_iov(sender, iov, iovcnt);
 661     if (ret == 0 && sent_cb != NULL) {
 662         qemu_enqueue_packet_iov(sender, iov, iovcnt, sent_cb);
 663         return 0;
 664     }
 665
 666     qemu_flush_queued_packets(sender);
 667
 668     return ret;
 669 }
 670
 671 ssize_t
 672 qemu_sendv_packet(VLANClientState *vc, const struct iovec *iov, int iovcnt)
 673 {
 674     return qemu_sendv_packet_async(vc, iov, iovcnt, NULL);
 675 }
 676
 677 static void config_error(Monitor *mon, const char *fmt, ...)
 678 {
 679     va_list ap;
 680
 681     va_start(ap, fmt);
 682     if (mon) {
 683         monitor_vprintf(mon, fmt, ap);
 684     } else {
 685         fprintf(stderr, "qemu: ");
 686         vfprintf(stderr, fmt, ap);
 687         exit(1);
 688     }
 689     va_end(ap);
 690 }
 691
 692 #if defined(CONFIG_SLIRP)
 693
 694 /* slirp network adapter */
 695
 696 #define SLIRP_CFG_HOSTFWD 1
 697 #define SLIRP_CFG_LEGACY  2
 698
 699 struct slirp_config_str {
 700     struct slirp_config_str *next;
 701     int flags;
 702     char str[1024];
 703     int legacy_format;
 704 };
 705
 706 typedef struct SlirpState {
 707     TAILQ_ENTRY(SlirpState) entry;
 708     VLANClientState *vc;
 709     Slirp *slirp;
 710 #ifndef _WIN32
 711     char smb_dir[128];
 712 #endif
 713 } SlirpState;
 714
 715 static struct slirp_config_str *slirp_configs;
 716 const char *legacy_tftp_prefix;
 717 const char *legacy_bootp_filename;
 718 static TAILQ_HEAD(slirp_stacks, SlirpState) slirp_stacks =
 719     TAILQ_HEAD_INITIALIZER(slirp_stacks);
 720
 721 static void slirp_hostfwd(SlirpState *s, Monitor *mon, const char *redir_str,
 722                           int legacy_format);
 723 static void slirp_guestfwd(SlirpState *s, Monitor *mon, const char *config_str,
 724                            int legacy_format);
 725
 726 #ifndef _WIN32
 727 static const char *legacy_smb_export;
 728
 729 static void slirp_smb(SlirpState *s, Monitor *mon, const char *exported_dir,
 730                       struct in_addr vserver_addr);
 731 static void slirp_smb_cleanup(SlirpState *s);
 732 #else
 733 static inline void slirp_smb_cleanup(SlirpState *s) { }
 734 #endif
 735
 736 int slirp_can_output(void *opaque)
 737 {
 738     SlirpState *s = opaque;
 739
 740     return qemu_can_send_packet(s->vc);
 741 }
 742
 743 void slirp_output(void *opaque, const uint8_t *pkt, int pkt_len)
 744 {
 745     SlirpState *s = opaque;
 746
 747 #ifdef DEBUG_SLIRP
 748     printf("slirp output:\n");
 749     hex_dump(stdout, pkt, pkt_len);
 750 #endif
 751     qemu_send_packet(s->vc, pkt, pkt_len);
 752 }
 753
 754 static ssize_t slirp_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
 755 {
 756     SlirpState *s = vc->opaque;
 757
 758 #ifdef DEBUG_SLIRP
 759     printf("slirp input:\n");
 760     hex_dump(stdout, buf, size);
 761 #endif
 762     slirp_input(s->slirp, buf, size);
 763     return size;
 764 }
 765
 766 static void net_slirp_cleanup(VLANClientState *vc)
 767 {
 768     SlirpState *s = vc->opaque;
 769
 770     slirp_cleanup(s->slirp);
 771     slirp_smb_cleanup(s);
 772     TAILQ_REMOVE(&slirp_stacks, s, entry);
 773     qemu_free(s);
 774 }
 775
 776 static int net_slirp_init(Monitor *mon, VLANState *vlan, const char *model,
 777                           const char *name, int restricted,
 778                           const char *vnetwork, const char *vhost,
 779                           const char *vhostname, const char *tftp_export,
 780                           const char *bootfile, const char *vdhcp_start,
 781                           const char *vnameserver, const char *smb_export,
 782                           const char *vsmbserver)
 783 {
 784     /* default settings according to historic slirp */
 785     struct in_addr net  = { .s_addr = htonl(0x0a000200) }; /* 10.0.2.0 */
 786     struct in_addr mask = { .s_addr = htonl(0xffffff00) }; /* 255.255.255.0 */
 787     struct in_addr host = { .s_addr = htonl(0x0a000202) }; /* 10.0.2.2 */
 788     struct in_addr dhcp = { .s_addr = htonl(0x0a00020f) }; /* 10.0.2.15 */
 789     struct in_addr dns  = { .s_addr = htonl(0x0a000203) }; /* 10.0.2.3 */
 790 #ifndef _WIN32
 791     struct in_addr smbsrv = { .s_addr = 0 };
 792 #endif
 793     SlirpState *s;
 794     char buf[20];
 795     uint32_t addr;
 796     int shift;
 797     char *end;
 798
 799     if (!tftp_export) {
 800         tftp_export = legacy_tftp_prefix;
 801     }
 802     if (!bootfile) {
 803         bootfile = legacy_bootp_filename;
 804     }
 805
 806     if (vnetwork) {
 807         if (get_str_sep(buf, sizeof(buf), &vnetwork, '/') < 0) {
 808             if (!inet_aton(vnetwork, &net)) {
 809                 return -1;
 810             }
 811             addr = ntohl(net.s_addr);
 812             if (!(addr & 0x80000000)) {
 813                 mask.s_addr = htonl(0xff000000); /* class A */
 814             } else if ((addr & 0xfff00000) == 0xac100000) {
 815                 mask.s_addr = htonl(0xfff00000); /* priv. 172.16.0.0/12 */
 816             } else if ((addr & 0xc0000000) == 0x80000000) {
 817                 mask.s_addr = htonl(0xffff0000); /* class B */
 818             } else if ((addr & 0xffff0000) == 0xc0a80000) {
 819                 mask.s_addr = htonl(0xffff0000); /* priv. 192.168.0.0/16 */
 820             } else if ((addr & 0xffff0000) == 0xc6120000) {
 821                 mask.s_addr = htonl(0xfffe0000); /* tests 198.18.0.0/15 */
 822             } else if ((addr & 0xe0000000) == 0xe0000000) {
 823                 mask.s_addr = htonl(0xffffff00); /* class C */
 824             } else {
 825                 mask.s_addr = htonl(0xfffffff0); /* multicast/reserved */
 826             }
 827         } else {
 828             if (!inet_aton(buf, &net)) {
 829                 return -1;
 830             }
 831             shift = strtol(vnetwork, &end, 10);
 832             if (*end != '\0') {
 833                 if (!inet_aton(vnetwork, &mask)) {
 834                     return -1;
 835                 }
 836             } else if (shift < 4 || shift > 32) {
 837                 return -1;
 838             } else {
 839                 mask.s_addr = htonl(0xffffffff << (32 - shift));
 840             }
 841         }
 842         net.s_addr &= mask.s_addr;
 843         host.s_addr = net.s_addr | (htonl(0x0202) & ~mask.s_addr);
 844         dhcp.s_addr = net.s_addr | (htonl(0x020f) & ~mask.s_addr);
 845         dns.s_addr  = net.s_addr | (htonl(0x0203) & ~mask.s_addr);
 846     }
 847
 848     if (vhost && !inet_aton(vhost, &host)) {
 849         return -1;
 850     }
 851     if ((host.s_addr & mask.s_addr) != net.s_addr) {
 852         return -1;
 853     }
 854
 855     if (vdhcp_start && !inet_aton(vdhcp_start, &dhcp)) {
 856         return -1;
 857     }
 858     if ((dhcp.s_addr & mask.s_addr) != net.s_addr ||
 859         dhcp.s_addr == host.s_addr || dhcp.s_addr == dns.s_addr) {
 860         return -1;
 861     }
 862
 863     if (vnameserver && !inet_aton(vnameserver, &dns)) {
 864         return -1;
 865     }
 866     if ((dns.s_addr & mask.s_addr) != net.s_addr ||
 867         dns.s_addr == host.s_addr) {
 868         return -1;
 869     }
 870
 871 #ifndef _WIN32
 872     if (vsmbserver && !inet_aton(vsmbserver, &smbsrv)) {
 873         return -1;
 874     }
 875 #endif
 876
 877     s = qemu_mallocz(sizeof(SlirpState));
 878     s->slirp = slirp_init(restricted, net, mask, host, vhostname,
 879                           tftp_export, bootfile, dhcp, dns, s);
 880     TAILQ_INSERT_TAIL(&slirp_stacks, s, entry);
 881
 882     while (slirp_configs) {
 883         struct slirp_config_str *config = slirp_configs;
 884
 885         if (config->flags & SLIRP_CFG_HOSTFWD) {
 886             slirp_hostfwd(s, mon, config->str,
 887                           config->flags & SLIRP_CFG_LEGACY);
 888         } else {
 889             slirp_guestfwd(s, mon, config->str,
 890                            config->flags & SLIRP_CFG_LEGACY);
 891         }
 892         slirp_configs = config->next;
 893         qemu_free(config);
 894     }
 895 #ifndef _WIN32
 896     if (!smb_export) {
 897         smb_export = legacy_smb_export;
 898     }
 899     if (smb_export) {
 900         slirp_smb(s, mon, smb_export, smbsrv);
 901     }
 902 #endif
 903
 904     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, slirp_receive, NULL,
 905                                  net_slirp_cleanup, s);
 906     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
 907              "net=%s, restricted=%c", inet_ntoa(net), restricted ? 'y' : 'n');
 908     return 0;
 909 }
 910
 911 static SlirpState *slirp_lookup(Monitor *mon, const char *vlan,
 912                                 const char *stack)
 913 {
 914     VLANClientState *vc;
 915
 916     if (vlan) {
 917         vc = qemu_find_vlan_client_by_name(mon, strtol(vlan, NULL, 0), stack);
 918         if (!vc) {
 919             return NULL;
 920         }
 921         if (strcmp(vc->model, "user")) {
 922             monitor_printf(mon, "invalid device specified\n");
 923             return NULL;
 924         }
 925         return vc->opaque;
 926     } else {
 927         if (TAILQ_EMPTY(&slirp_stacks)) {
 928             monitor_printf(mon, "user mode network stack not in use\n");
 929             return NULL;
 930         }
 931         return TAILQ_FIRST(&slirp_stacks);
 932     }
 933 }
 934
 935 void net_slirp_hostfwd_remove(Monitor *mon, const char *arg1,
 936                               const char *arg2, const char *arg3)
 937 {
 938     struct in_addr host_addr = { .s_addr = INADDR_ANY };
 939     int host_port;
 940     char buf[256] = "";
 941     const char *src_str, *p;
 942     SlirpState *s;
 943     int is_udp = 0;
 944     int err;
 945
 946     if (arg2) {
 947         s = slirp_lookup(mon, arg1, arg2);
 948         src_str = arg3;
 949     } else {
 950         s = slirp_lookup(mon, NULL, NULL);
 951         src_str = arg1;
 952     }
 953     if (!s) {
 954         return;
 955     }
 956
 957     if (!src_str || !src_str[0])
 958         goto fail_syntax;
 959
 960     p = src_str;
 961     get_str_sep(buf, sizeof(buf), &p, ':');
 962
 963     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 964         is_udp = 0;
 965     } else if (!strcmp(buf, "udp")) {
 966         is_udp = 1;
 967     } else {
 968         goto fail_syntax;
 969     }
 970
 971     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 972         goto fail_syntax;
 973     }
 974     if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
 975         goto fail_syntax;
 976     }
 977
 978     host_port = atoi(p);
 979
 980     err = slirp_remove_hostfwd(TAILQ_FIRST(&slirp_stacks)->slirp, is_udp,
 981                                host_addr, host_port);
 982
 983     monitor_printf(mon, "host forwarding rule for %s %s\n", src_str,
 984                    err ? "removed" : "not found");
 985     return;
 986
 987  fail_syntax:
 988     monitor_printf(mon, "invalid format\n");
 989 }
 990
 991 static void slirp_hostfwd(SlirpState *s, Monitor *mon, const char *redir_str,
 992                           int legacy_format)
 993 {
 994     struct in_addr host_addr = { .s_addr = INADDR_ANY };
 995     struct in_addr guest_addr = { .s_addr = 0 };
 996     int host_port, guest_port;
 997     const char *p;
 998     char buf[256];
 999     int is_udp;
1000     char *end;
1001
1002     p = redir_str;
1003     if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1004         goto fail_syntax;
1005     }
1006     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
1007         is_udp = 0;
1008     } else if (!strcmp(buf, "udp")) {
1009         is_udp = 1;
1010     } else {
1011         goto fail_syntax;
1012     }
1013
1014     if (!legacy_format) {
1015         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1016             goto fail_syntax;
1017         }
1018         if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
1019             goto fail_syntax;
1020         }
1021     }
1022
1023     if (get_str_sep(buf, sizeof(buf), &p, legacy_format ? ':' : '-') < 0) {
1024         goto fail_syntax;
1025     }
1026     host_port = strtol(buf, &end, 0);
1027     if (*end != '\0' || host_port < 1 || host_port > 65535) {
1028         goto fail_syntax;
1029     }
1030
1031     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1032         goto fail_syntax;
1033     }
1034     if (buf[0] != '\0' && !inet_aton(buf, &guest_addr)) {
1035         goto fail_syntax;
1036     }
1037
1038     guest_port = strtol(p, &end, 0);
1039     if (*end != '\0' || guest_port < 1 || guest_port > 65535) {
1040         goto fail_syntax;
1041     }
1042
1043     if (slirp_add_hostfwd(s->slirp, is_udp, host_addr, host_port, guest_addr,
1044                           guest_port) < 0) {
1045         config_error(mon, "could not set up host forwarding rule '%s'\n",
1046                      redir_str);
1047     }
1048     return;
1049
1050  fail_syntax:
1051     config_error(mon, "invalid host forwarding rule '%s'\n", redir_str);
1052 }
1053
1054 void net_slirp_hostfwd_add(Monitor *mon, const char *arg1,
1055                            const char *arg2, const char *arg3)
1056 {
1057     const char *redir_str;
1058     SlirpState *s;
1059
1060     if (arg2) {
1061         s = slirp_lookup(mon, arg1, arg2);
1062         redir_str = arg3;
1063     } else {
1064         s = slirp_lookup(mon, NULL, NULL);
1065         redir_str = arg1;
1066     }
1067     if (s) {
1068         slirp_hostfwd(s, mon, redir_str, 0);
1069     }
1070
1071 }
1072
1073 void net_slirp_redir(const char *redir_str)
1074 {
1075     struct slirp_config_str *config;
1076
1077     if (TAILQ_EMPTY(&slirp_stacks)) {
1078         config = qemu_malloc(sizeof(*config));
1079         pstrcpy(config->str, sizeof(config->str), redir_str);
1080         config->flags = SLIRP_CFG_HOSTFWD | SLIRP_CFG_LEGACY;
1081         config->next = slirp_configs;
1082         slirp_configs = config;
1083         return;
1084     }
1085
1086     slirp_hostfwd(TAILQ_FIRST(&slirp_stacks), NULL, redir_str, 1);
1087 }
1088
1089 #ifndef _WIN32
1090
1091 /* automatic user mode samba server configuration */
1092 static void slirp_smb_cleanup(SlirpState *s)
1093 {
1094     char cmd[128];
1095
1096     if (s->smb_dir[0] != '\0') {
1097         snprintf(cmd, sizeof(cmd), "rm -rf %s", s->smb_dir);
1098         system(cmd);
1099         s->smb_dir[0] = '\0';
1100     }
1101 }
1102
1103 static void slirp_smb(SlirpState* s, Monitor *mon, const char *exported_dir,
1104                       struct in_addr vserver_addr)
1105 {
1106     static int instance;
1107     char smb_conf[128];
1108     char smb_cmdline[128];
1109     FILE *f;
1110
1111     snprintf(s->smb_dir, sizeof(s->smb_dir), "/tmp/qemu-smb.%ld-%d",
1112              (long)getpid(), instance++);
1113     if (mkdir(s->smb_dir, 0700) < 0) {
1114         config_error(mon, "could not create samba server dir '%s'\n",
1115                      s->smb_dir);
1116         return;
1117     }
1118     snprintf(smb_conf, sizeof(smb_conf), "%s/%s", s->smb_dir, "smb.conf");
1119
1120     f = fopen(smb_conf, "w");
1121     if (!f) {
1122         slirp_smb_cleanup(s);
1123         config_error(mon, "could not create samba server "
1124                      "configuration file '%s'\n", smb_conf);
1125         return;
1126     }
1127     fprintf(f,
1128             "[global]\n"
1129             "private dir=%s\n"
1130             "smb ports=0\n"
1131             "socket address=127.0.0.1\n"
1132             "pid directory=%s\n"
1133             "lock directory=%s\n"
1134             "log file=%s/log.smbd\n"
1135             "smb passwd file=%s/smbpasswd\n"
1136             "security = share\n"
1137             "[qemu]\n"
1138             "path=%s\n"
1139             "read only=no\n"
1140             "guest ok=yes\n",
1141             s->smb_dir,
1142             s->smb_dir,
1143             s->smb_dir,
1144             s->smb_dir,
1145             s->smb_dir,
1146             exported_dir
1147             );
1148     fclose(f);
1149
1150     snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
1151              SMBD_COMMAND, smb_conf);
1152
1153     if (slirp_add_exec(s->slirp, 0, smb_cmdline, &vserver_addr, 139) < 0) {
1154         slirp_smb_cleanup(s);
1155         config_error(mon, "conflicting/invalid smbserver address\n");
1156     }
1157 }
1158
1159 /* automatic user mode samba server configuration (legacy interface) */
1160 void net_slirp_smb(const char *exported_dir)
1161 {
1162     struct in_addr vserver_addr = { .s_addr = 0 };
1163
1164     if (legacy_smb_export) {
1165         fprintf(stderr, "-smb given twice\n");
1166         exit(1);
1167     }
1168     legacy_smb_export = exported_dir;
1169     if (!TAILQ_EMPTY(&slirp_stacks)) {
1170         slirp_smb(TAILQ_FIRST(&slirp_stacks), NULL, exported_dir,
1171                   vserver_addr);
1172     }
1173 }
1174
1175 #endif /* !defined(_WIN32) */
1176
1177 struct GuestFwd {
1178     CharDriverState *hd;
1179     struct in_addr server;
1180     int port;
1181     Slirp *slirp;
1182 };
1183
1184 static int guestfwd_can_read(void *opaque)
1185 {
1186     struct GuestFwd *fwd = opaque;
1187     return slirp_socket_can_recv(fwd->slirp, fwd->server, fwd->port);
1188 }
1189
1190 static void guestfwd_read(void *opaque, const uint8_t *buf, int size)
1191 {
1192     struct GuestFwd *fwd = opaque;
1193     slirp_socket_recv(fwd->slirp, fwd->server, fwd->port, buf, size);
1194 }
1195
1196 static void slirp_guestfwd(SlirpState *s, Monitor *mon, const char *config_str,
1197                            int legacy_format)
1198 {
1199     struct in_addr server = { .s_addr = 0 };
1200     struct GuestFwd *fwd;
1201     const char *p;
1202     char buf[128];
1203     char *end;
1204     int port;
1205
1206     p = config_str;
1207     if (legacy_format) {
1208         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1209             goto fail_syntax;
1210         }
1211     } else {
1212         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1213             goto fail_syntax;
1214         }
1215         if (strcmp(buf, "tcp") && buf[0] != '\0') {
1216             goto fail_syntax;
1217         }
1218         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1219             goto fail_syntax;
1220         }
1221         if (buf[0] != '\0' && !inet_aton(buf, &server)) {
1222             goto fail_syntax;
1223         }
1224         if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
1225             goto fail_syntax;
1226         }
1227     }
1228     port = strtol(buf, &end, 10);
1229     if (*end != '\0' || port < 1 || port > 65535) {
1230         goto fail_syntax;
1231     }
1232
1233     fwd = qemu_malloc(sizeof(struct GuestFwd));
1234     snprintf(buf, sizeof(buf), "guestfwd.tcp:%d", port);
1235     fwd->hd = qemu_chr_open(buf, p, NULL);
1236     if (!fwd->hd) {
1237         config_error(mon, "could not open guest forwarding device '%s'\n",
1238                      buf);
1239         qemu_free(fwd);
1240         return;
1241     }
1242
1243     if (slirp_add_exec(s->slirp, 3, fwd->hd, &server, port) < 0) {
1244         config_error(mon, "conflicting/invalid host:port in guest forwarding "
1245                      "rule '%s'\n", config_str);
1246         qemu_free(fwd);
1247         return;
1248     }
1249     fwd->server = server;
1250     fwd->port = port;
1251     fwd->slirp = s->slirp;
1252
1253     qemu_chr_add_handlers(fwd->hd, guestfwd_can_read, guestfwd_read,
1254                           NULL, fwd);
1255     return;
1256
1257  fail_syntax:
1258     config_error(mon, "invalid guest forwarding rule '%s'\n", config_str);
1259 }
1260
1261 void do_info_usernet(Monitor *mon)
1262 {
1263     SlirpState *s;
1264
1265     TAILQ_FOREACH(s, &slirp_stacks, entry) {
1266         monitor_printf(mon, "VLAN %d (%s):\n", s->vc->vlan->id, s->vc->name);
1267         slirp_connection_info(s->slirp, mon);
1268     }
1269 }
1270
1271 #endif /* CONFIG_SLIRP */
1272
1273 #if !defined(_WIN32)
1274
1275 typedef struct TAPState {
1276     VLANClientState *vc;
1277     int fd;
1278     char down_script[1024];
1279     char down_script_arg[128];
1280     uint8_t buf[4096];
1281     unsigned int read_poll : 1;
1282     unsigned int write_poll : 1;
1283 } TAPState;
1284
1285 static int launch_script(const char *setup_script, const char *ifname, int fd);
1286
1287 static int tap_can_send(void *opaque);
1288 static void tap_send(void *opaque);
1289 static void tap_writable(void *opaque);
1290
1291 static void tap_update_fd_handler(TAPState *s)
1292 {
1293     qemu_set_fd_handler2(s->fd,
1294                          s->read_poll  ? tap_can_send : NULL,
1295                          s->read_poll  ? tap_send     : NULL,
1296                          s->write_poll ? tap_writable : NULL,
1297                          s);
1298 }
1299
1300 static void tap_read_poll(TAPState *s, int enable)
1301 {
1302     s->read_poll = !!enable;
1303     tap_update_fd_handler(s);
1304 }
1305
1306 static void tap_write_poll(TAPState *s, int enable)
1307 {
1308     s->write_poll = !!enable;
1309     tap_update_fd_handler(s);
1310 }
1311
1312 static void tap_writable(void *opaque)
1313 {
1314     TAPState *s = opaque;
1315
1316     tap_write_poll(s, 0);
1317
1318     qemu_flush_queued_packets(s->vc);
1319 }
1320
1321 static ssize_t tap_receive_iov(VLANClientState *vc, const struct iovec *iov,
1322                                int iovcnt)
1323 {
1324     TAPState *s = vc->opaque;
1325     ssize_t len;
1326
1327     do {
1328         len = writev(s->fd, iov, iovcnt);
1329     } while (len == -1 && errno == EINTR);
1330
1331     if (len == -1 && errno == EAGAIN) {
1332         tap_write_poll(s, 1);
1333         return 0;
1334     }
1335
1336     return len;
1337 }
1338
1339 static ssize_t tap_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1340 {
1341     TAPState *s = vc->opaque;
1342     ssize_t len;
1343
1344     do {
1345         len = write(s->fd, buf, size);
1346     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
1347
1348     return len;
1349 }
1350
1351 static int tap_can_send(void *opaque)
1352 {
1353     TAPState *s = opaque;
1354
1355     return qemu_can_send_packet(s->vc);
1356 }
1357
1358 #ifdef __sun__
1359 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1360 {
1361     struct strbuf sbuf;
1362     int f = 0;
1363
1364     sbuf.maxlen = maxlen;
1365     sbuf.buf = (char *)buf;
1366
1367     return getmsg(tapfd, NULL, &sbuf, &f) >= 0 ? sbuf.len : -1;
1368 }
1369 #else
1370 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1371 {
1372     return read(tapfd, buf, maxlen);
1373 }
1374 #endif
1375
1376 static void tap_send_completed(VLANClientState *vc, ssize_t len)
1377 {
1378     TAPState *s = vc->opaque;
1379     tap_read_poll(s, 1);
1380 }
1381
1382 static void tap_send(void *opaque)
1383 {
1384     TAPState *s = opaque;
1385     int size;
1386
1387     do {
1388         size = tap_read_packet(s->fd, s->buf, sizeof(s->buf));
1389         if (size <= 0) {
1390             break;
1391         }
1392
1393         size = qemu_send_packet_async(s->vc, s->buf, size, tap_send_completed);
1394         if (size == 0) {
1395             tap_read_poll(s, 0);
1396         }
1397     } while (size > 0);
1398 }
1399
1400 #ifdef TUNSETSNDBUF
1401 /* sndbuf should be set to a value lower than the tx queue
1402  * capacity of any destination network interface.
1403  * Ethernet NICs generally have txqueuelen=1000, so 1Mb is
1404  * a good default, given a 1500 byte MTU.
1405  */
1406 #define TAP_DEFAULT_SNDBUF 1024*1024
1407
1408 static void tap_set_sndbuf(TAPState *s, const char *sndbuf_str, Monitor *mon)
1409 {
1410     int sndbuf = TAP_DEFAULT_SNDBUF;
1411
1412     if (sndbuf_str) {
1413         sndbuf = atoi(sndbuf_str);
1414     }
1415
1416     if (!sndbuf) {
1417         sndbuf = INT_MAX;
1418     }
1419
1420     if (ioctl(s->fd, TUNSETSNDBUF, &sndbuf) == -1 && sndbuf_str) {
1421         config_error(mon, "TUNSETSNDBUF ioctl failed: %s\n",
1422                      strerror(errno));
1423     }
1424 }
1425 #else
1426 static void tap_set_sndbuf(TAPState *s, const char *sndbuf_str, Monitor *mon)
1427 {
1428     if (sndbuf_str) {
1429         config_error(mon, "No '-net tap,sndbuf=<nbytes>' support available\n");
1430     }
1431 }
1432 #endif /* TUNSETSNDBUF */
1433
1434 static void tap_cleanup(VLANClientState *vc)
1435 {
1436     TAPState *s = vc->opaque;
1437
1438     qemu_purge_queued_packets(vc);
1439
1440     if (s->down_script[0])
1441         launch_script(s->down_script, s->down_script_arg, s->fd);
1442
1443     tap_read_poll(s, 0);
1444     tap_write_poll(s, 0);
1445     close(s->fd);
1446     qemu_free(s);
1447 }
1448
1449 /* fd support */
1450
1451 static TAPState *net_tap_fd_init(VLANState *vlan,
1452                                  const char *model,
1453                                  const char *name,
1454                                  int fd)
1455 {
1456     TAPState *s;
1457
1458     s = qemu_mallocz(sizeof(TAPState));
1459     s->fd = fd;
1460     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, tap_receive,
1461                                  tap_receive_iov, tap_cleanup, s);
1462     tap_read_poll(s, 1);
1463     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "fd=%d", fd);
1464     return s;
1465 }
1466
1467 #if defined (HOST_BSD) || defined (__FreeBSD_kernel__)
1468 static int tap_open(char *ifname, int ifname_size)
1469 {
1470     int fd;
1471     char *dev;
1472     struct stat s;
1473
1474     TFR(fd = open("/dev/tap", O_RDWR));
1475     if (fd < 0) {
1476         fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
1477         return -1;
1478     }
1479
1480     fstat(fd, &s);
1481     dev = devname(s.st_rdev, S_IFCHR);
1482     pstrcpy(ifname, ifname_size, dev);
1483
1484     fcntl(fd, F_SETFL, O_NONBLOCK);
1485     return fd;
1486 }
1487 #elif defined(__sun__)
1488 #define TUNNEWPPA       (('T'<<16) | 0x0001)
1489 /*
1490  * Allocate TAP device, returns opened fd.
1491  * Stores dev name in the first arg(must be large enough).
1492  */
1493 static int tap_alloc(char *dev, size_t dev_size)
1494 {
1495     int tap_fd, if_fd, ppa = -1;
1496     static int ip_fd = 0;
1497     char *ptr;
1498
1499     static int arp_fd = 0;
1500     int ip_muxid, arp_muxid;
1501     struct strioctl  strioc_if, strioc_ppa;
1502     int link_type = I_PLINK;;
1503     struct lifreq ifr;
1504     char actual_name[32] = "";
1505
1506     memset(&ifr, 0x0, sizeof(ifr));
1507
1508     if( *dev ){
1509        ptr = dev;
1510        while( *ptr && !qemu_isdigit((int)*ptr) ) ptr++;
1511        ppa = atoi(ptr);
1512     }
1513
1514     /* Check if IP device was opened */
1515     if( ip_fd )
1516        close(ip_fd);
1517
1518     TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
1519     if (ip_fd < 0) {
1520        syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
1521        return -1;
1522     }
1523
1524     TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
1525     if (tap_fd < 0) {
1526        syslog(LOG_ERR, "Can't open /dev/tap");
1527        return -1;
1528     }
1529
1530     /* Assign a new PPA and get its unit number. */
1531     strioc_ppa.ic_cmd = TUNNEWPPA;
1532     strioc_ppa.ic_timout = 0;
1533     strioc_ppa.ic_len = sizeof(ppa);
1534     strioc_ppa.ic_dp = (char *)&ppa;
1535     if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
1536        syslog (LOG_ERR, "Can't assign new interface");
1537
1538     TFR(if_fd = open("/dev/tap", O_RDWR, 0));
1539     if (if_fd < 0) {
1540        syslog(LOG_ERR, "Can't open /dev/tap (2)");
1541        return -1;
1542     }
1543     if(ioctl(if_fd, I_PUSH, "ip") < 0){
1544        syslog(LOG_ERR, "Can't push IP module");
1545        return -1;
1546     }
1547
1548     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
1549         syslog(LOG_ERR, "Can't get flags\n");
1550
1551     snprintf (actual_name, 32, "tap%d", ppa);
1552     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1553
1554     ifr.lifr_ppa = ppa;
1555     /* Assign ppa according to the unit number returned by tun device */
1556
1557     if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
1558         syslog (LOG_ERR, "Can't set PPA %d", ppa);
1559     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
1560         syslog (LOG_ERR, "Can't get flags\n");
1561     /* Push arp module to if_fd */
1562     if (ioctl (if_fd, I_PUSH, "arp") < 0)
1563         syslog (LOG_ERR, "Can't push ARP module (2)");
1564
1565     /* Push arp module to ip_fd */
1566     if (ioctl (ip_fd, I_POP, NULL) < 0)
1567         syslog (LOG_ERR, "I_POP failed\n");
1568     if (ioctl (ip_fd, I_PUSH, "arp") < 0)
1569         syslog (LOG_ERR, "Can't push ARP module (3)\n");
1570     /* Open arp_fd */
1571     TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
1572     if (arp_fd < 0)
1573        syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
1574
1575     /* Set ifname to arp */
1576     strioc_if.ic_cmd = SIOCSLIFNAME;
1577     strioc_if.ic_timout = 0;
1578     strioc_if.ic_len = sizeof(ifr);
1579     strioc_if.ic_dp = (char *)&ifr;
1580     if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
1581         syslog (LOG_ERR, "Can't set ifname to arp\n");
1582     }
1583
1584     if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
1585        syslog(LOG_ERR, "Can't link TAP device to IP");
1586        return -1;
1587     }
1588
1589     if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
1590         syslog (LOG_ERR, "Can't link TAP device to ARP");
1591
1592     close (if_fd);
1593
1594     memset(&ifr, 0x0, sizeof(ifr));
1595     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1596     ifr.lifr_ip_muxid  = ip_muxid;
1597     ifr.lifr_arp_muxid = arp_muxid;
1598
1599     if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
1600     {
1601       ioctl (ip_fd, I_PUNLINK , arp_muxid);
1602       ioctl (ip_fd, I_PUNLINK, ip_muxid);
1603       syslog (LOG_ERR, "Can't set multiplexor id");
1604     }
1605
1606     snprintf(dev, dev_size, "tap%d", ppa);
1607     return tap_fd;
1608 }
1609
1610 static int tap_open(char *ifname, int ifname_size)
1611 {
1612     char  dev[10]="";
1613     int fd;
1614     if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
1615        fprintf(stderr, "Cannot allocate TAP device\n");
1616        return -1;
1617     }
1618     pstrcpy(ifname, ifname_size, dev);
1619     fcntl(fd, F_SETFL, O_NONBLOCK);
1620     return fd;
1621 }
1622 #elif defined (_AIX)
1623 static int tap_open(char *ifname, int ifname_size)
1624 {
1625     fprintf (stderr, "no tap on AIX\n");
1626     return -1;
1627 }
1628 #else
1629 static int tap_open(char *ifname, int ifname_size)
1630 {
1631     struct ifreq ifr;
1632     int fd, ret;
1633
1634     TFR(fd = open("/dev/net/tun", O_RDWR));
1635     if (fd < 0) {
1636         fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1637         return -1;
1638     }
1639     memset(&ifr, 0, sizeof(ifr));
1640     ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
1641     if (ifname[0] != '\0')
1642         pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
1643     else
1644         pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
1645     ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
1646     if (ret != 0) {
1647         fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1648         close(fd);
1649         return -1;
1650     }
1651     pstrcpy(ifname, ifname_size, ifr.ifr_name);
1652     fcntl(fd, F_SETFL, O_NONBLOCK);
1653     return fd;
1654 }
1655 #endif
1656
1657 static int launch_script(const char *setup_script, const char *ifname, int fd)
1658 {
1659     sigset_t oldmask, mask;
1660     int pid, status;
1661     char *args[3];
1662     char **parg;
1663
1664     sigemptyset(&mask);
1665     sigaddset(&mask, SIGCHLD);
1666     sigprocmask(SIG_BLOCK, &mask, &oldmask);
1667
1668     /* try to launch network script */
1669     pid = fork();
1670     if (pid == 0) {
1671         int open_max = sysconf(_SC_OPEN_MAX), i;
1672
1673         for (i = 0; i < open_max; i++) {
1674             if (i != STDIN_FILENO &&
1675                 i != STDOUT_FILENO &&
1676                 i != STDERR_FILENO &&
1677                 i != fd) {
1678                 close(i);
1679             }
1680         }
1681         parg = args;
1682         *parg++ = (char *)setup_script;
1683         *parg++ = (char *)ifname;
1684         *parg++ = NULL;
1685         execv(setup_script, args);
1686         _exit(1);
1687     } else if (pid > 0) {
1688         while (waitpid(pid, &status, 0) != pid) {
1689             /* loop */
1690         }
1691         sigprocmask(SIG_SETMASK, &oldmask, NULL);
1692
1693         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
1694             return 0;
1695         }
1696     }
1697     fprintf(stderr, "%s: could not launch network script\n", setup_script);
1698     return -1;
1699 }
1700
1701 static TAPState *net_tap_init(VLANState *vlan, const char *model,
1702                               const char *name, const char *ifname1,
1703                               const char *setup_script, const char *down_script)
1704 {
1705     TAPState *s;
1706     int fd;
1707     char ifname[128];
1708
1709     if (ifname1 != NULL)
1710         pstrcpy(ifname, sizeof(ifname), ifname1);
1711     else
1712         ifname[0] = '\0';
1713     TFR(fd = tap_open(ifname, sizeof(ifname)));
1714     if (fd < 0)
1715         return NULL;
1716
1717     if (!setup_script || !strcmp(setup_script, "no"))
1718         setup_script = "";
1719     if (setup_script[0] != '\0' &&
1720         launch_script(setup_script, ifname, fd)) {
1721         return NULL;
1722     }
1723     s = net_tap_fd_init(vlan, model, name, fd);
1724     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1725              "ifname=%s,script=%s,downscript=%s",
1726              ifname, setup_script, down_script);
1727     if (down_script && strcmp(down_script, "no")) {
1728         snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
1729         snprintf(s->down_script_arg, sizeof(s->down_script_arg), "%s", ifname);
1730     }
1731     return s;
1732 }
1733
1734 #endif /* !_WIN32 */
1735
1736 #if defined(CONFIG_VDE)
1737 typedef struct VDEState {
1738     VLANClientState *vc;
1739     VDECONN *vde;
1740 } VDEState;
1741
1742 static void vde_to_qemu(void *opaque)
1743 {
1744     VDEState *s = opaque;
1745     uint8_t buf[4096];
1746     int size;
1747
1748     size = vde_recv(s->vde, (char *)buf, sizeof(buf), 0);
1749     if (size > 0) {
1750         qemu_send_packet(s->vc, buf, size);
1751     }
1752 }
1753
1754 static ssize_t vde_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1755 {
1756     VDEState *s = vc->opaque;
1757     ssize_t ret;
1758
1759     do {
1760       ret = vde_send(s->vde, (const char *)buf, size, 0);
1761     } while (ret < 0 && errno == EINTR);
1762
1763     return ret;
1764 }
1765
1766 static void vde_cleanup(VLANClientState *vc)
1767 {
1768     VDEState *s = vc->opaque;
1769     qemu_set_fd_handler(vde_datafd(s->vde), NULL, NULL, NULL);
1770     vde_close(s->vde);
1771     qemu_free(s);
1772 }
1773
1774 static int net_vde_init(VLANState *vlan, const char *model,
1775                         const char *name, const char *sock,
1776                         int port, const char *group, int mode)
1777 {
1778     VDEState *s;
1779     char *init_group = strlen(group) ? (char *)group : NULL;
1780     char *init_sock = strlen(sock) ? (char *)sock : NULL;
1781
1782     struct vde_open_args args = {
1783         .port = port,
1784         .group = init_group,
1785         .mode = mode,
1786     };
1787
1788     s = qemu_mallocz(sizeof(VDEState));
1789     s->vde = vde_open(init_sock, (char *)"QEMU", &args);
1790     if (!s->vde){
1791         free(s);
1792         return -1;
1793     }
1794     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, vde_receive,
1795                                  NULL, vde_cleanup, s);
1796     qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
1797     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "sock=%s,fd=%d",
1798              sock, vde_datafd(s->vde));
1799     return 0;
1800 }
1801 #endif
1802
1803 /* network connection */
1804 typedef struct NetSocketState {
1805     VLANClientState *vc;
1806     int fd;
1807     int state; /* 0 = getting length, 1 = getting data */
1808     unsigned int index;
1809     unsigned int packet_len;
1810     uint8_t buf[4096];
1811     struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
1812 } NetSocketState;
1813
1814 typedef struct NetSocketListenState {
1815     VLANState *vlan;
1816     char *model;
1817     char *name;
1818     int fd;
1819 } NetSocketListenState;
1820
1821 /* XXX: we consider we can send the whole packet without blocking */
1822 static ssize_t net_socket_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1823 {
1824     NetSocketState *s = vc->opaque;
1825     uint32_t len;
1826     len = htonl(size);
1827
1828     send_all(s->fd, (const uint8_t *)&len, sizeof(len));
1829     return send_all(s->fd, buf, size);
1830 }
1831
1832 static ssize_t net_socket_receive_dgram(VLANClientState *vc, const uint8_t *buf, size_t size)
1833 {
1834     NetSocketState *s = vc->opaque;
1835
1836     return sendto(s->fd, (const void *)buf, size, 0,
1837                   (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
1838 }
1839
1840 static void net_socket_send(void *opaque)
1841 {
1842     NetSocketState *s = opaque;
1843     int size, err;
1844     unsigned l;
1845     uint8_t buf1[4096];
1846     const uint8_t *buf;
1847
1848     size = recv(s->fd, (void *)buf1, sizeof(buf1), 0);
1849     if (size < 0) {
1850         err = socket_error();
1851         if (err != EWOULDBLOCK)
1852             goto eoc;
1853     } else if (size == 0) {
1854         /* end of connection */
1855     eoc:
1856         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1857         closesocket(s->fd);
1858         return;
1859     }
1860     buf = buf1;
1861     while (size > 0) {
1862         /* reassemble a packet from the network */
1863         switch(s->state) {
1864         case 0:
1865             l = 4 - s->index;
1866             if (l > size)
1867                 l = size;
1868             memcpy(s->buf + s->index, buf, l);
1869             buf += l;
1870             size -= l;
1871             s->index += l;
1872             if (s->index == 4) {
1873                 /* got length */
1874                 s->packet_len = ntohl(*(uint32_t *)s->buf);
1875                 s->index = 0;
1876                 s->state = 1;
1877             }
1878             break;
1879         case 1:
1880             l = s->packet_len - s->index;
1881             if (l > size)
1882                 l = size;
1883             if (s->index + l <= sizeof(s->buf)) {
1884                 memcpy(s->buf + s->index, buf, l);
1885             } else {
1886                 fprintf(stderr, "serious error: oversized packet received,"
1887                     "connection terminated.\n");
1888                 s->state = 0;
1889                 goto eoc;
1890             }
1891
1892             s->index += l;
1893             buf += l;
1894             size -= l;
1895             if (s->index >= s->packet_len) {
1896                 qemu_send_packet(s->vc, s->buf, s->packet_len);
1897                 s->index = 0;
1898                 s->state = 0;
1899             }
1900             break;
1901         }
1902     }
1903 }
1904
1905 static void net_socket_send_dgram(void *opaque)
1906 {
1907     NetSocketState *s = opaque;
1908     int size;
1909
1910     size = recv(s->fd, (void *)s->buf, sizeof(s->buf), 0);
1911     if (size < 0)
1912         return;
1913     if (size == 0) {
1914         /* end of connection */
1915         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1916         return;
1917     }
1918     qemu_send_packet(s->vc, s->buf, size);
1919 }
1920
1921 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
1922 {
1923     struct ip_mreq imr;
1924     int fd;
1925     int val, ret;
1926     if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
1927         fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
1928                 inet_ntoa(mcastaddr->sin_addr),
1929                 (int)ntohl(mcastaddr->sin_addr.s_addr));
1930         return -1;
1931
1932     }
1933     fd = socket(PF_INET, SOCK_DGRAM, 0);
1934     if (fd < 0) {
1935         perror("socket(PF_INET, SOCK_DGRAM)");
1936         return -1;
1937     }
1938
1939     val = 1;
1940     ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
1941                    (const char *)&val, sizeof(val));
1942     if (ret < 0) {
1943         perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
1944         goto fail;
1945     }
1946
1947     ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
1948     if (ret < 0) {
1949         perror("bind");
1950         goto fail;
1951     }
1952
1953     /* Add host to multicast group */
1954     imr.imr_multiaddr = mcastaddr->sin_addr;
1955     imr.imr_interface.s_addr = htonl(INADDR_ANY);
1956
1957     ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
1958                      (const char *)&imr, sizeof(struct ip_mreq));
1959     if (ret < 0) {
1960         perror("setsockopt(IP_ADD_MEMBERSHIP)");
1961         goto fail;
1962     }
1963
1964     /* Force mcast msgs to loopback (eg. several QEMUs in same host */
1965     val = 1;
1966     ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
1967                    (const char *)&val, sizeof(val));
1968     if (ret < 0) {
1969         perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
1970         goto fail;
1971     }
1972
1973     socket_set_nonblock(fd);
1974     return fd;
1975 fail:
1976     if (fd >= 0)
1977         closesocket(fd);
1978     return -1;
1979 }
1980
1981 static void net_socket_cleanup(VLANClientState *vc)
1982 {
1983     NetSocketState *s = vc->opaque;
1984     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1985     close(s->fd);
1986     qemu_free(s);
1987 }
1988
1989 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan,
1990                                                 const char *model,
1991                                                 const char *name,
1992                                                 int fd, int is_connected)
1993 {
1994     struct sockaddr_in saddr;
1995     int newfd;
1996     socklen_t saddr_len;
1997     NetSocketState *s;
1998
1999     /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
2000      * Because this may be "shared" socket from a "master" process, datagrams would be recv()
2001      * by ONLY ONE process: we must "clone" this dgram socket --jjo
2002      */
2003
2004     if (is_connected) {
2005         if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
2006             /* must be bound */
2007             if (saddr.sin_addr.s_addr==0) {
2008                 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
2009                         fd);
2010                 return NULL;
2011             }
2012             /* clone dgram socket */
2013             newfd = net_socket_mcast_create(&saddr);
2014             if (newfd < 0) {
2015                 /* error already reported by net_socket_mcast_create() */
2016                 close(fd);
2017                 return NULL;
2018             }
2019             /* clone newfd to fd, close newfd */
2020             dup2(newfd, fd);
2021             close(newfd);
2022
2023         } else {
2024             fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
2025                     fd, strerror(errno));
2026             return NULL;
2027         }
2028     }
2029
2030     s = qemu_mallocz(sizeof(NetSocketState));
2031     s->fd = fd;
2032
2033     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive_dgram,
2034                                  NULL, net_socket_cleanup, s);
2035     qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
2036
2037     /* mcast: save bound address as dst */
2038     if (is_connected) s->dgram_dst=saddr;
2039
2040     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2041             "socket: fd=%d (%s mcast=%s:%d)",
2042             fd, is_connected? "cloned" : "",
2043             inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2044     return s;
2045 }
2046
2047 static void net_socket_connect(void *opaque)
2048 {
2049     NetSocketState *s = opaque;
2050     qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
2051 }
2052
2053 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan,
2054                                                  const char *model,
2055                                                  const char *name,
2056                                                  int fd, int is_connected)
2057 {
2058     NetSocketState *s;
2059     s = qemu_mallocz(sizeof(NetSocketState));
2060     s->fd = fd;
2061     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive,
2062                                  NULL, net_socket_cleanup, s);
2063     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2064              "socket: fd=%d", fd);
2065     if (is_connected) {
2066         net_socket_connect(s);
2067     } else {
2068         qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
2069     }
2070     return s;
2071 }
2072
2073 static NetSocketState *net_socket_fd_init(VLANState *vlan,
2074                                           const char *model, const char *name,
2075                                           int fd, int is_connected)
2076 {
2077     int so_type=-1, optlen=sizeof(so_type);
2078
2079     if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
2080         (socklen_t *)&optlen)< 0) {
2081         fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
2082         return NULL;
2083     }
2084     switch(so_type) {
2085     case SOCK_DGRAM:
2086         return net_socket_fd_init_dgram(vlan, model, name, fd, is_connected);
2087     case SOCK_STREAM:
2088         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
2089     default:
2090         /* who knows ... this could be a eg. a pty, do warn and continue as stream */
2091         fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
2092         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
2093     }
2094     return NULL;
2095 }
2096
2097 static void net_socket_accept(void *opaque)
2098 {
2099     NetSocketListenState *s = opaque;
2100     NetSocketState *s1;
2101     struct sockaddr_in saddr;
2102     socklen_t len;
2103     int fd;
2104
2105     for(;;) {
2106         len = sizeof(saddr);
2107         fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
2108         if (fd < 0 && errno != EINTR) {
2109             return;
2110         } else if (fd >= 0) {
2111             break;
2112         }
2113     }
2114     s1 = net_socket_fd_init(s->vlan, s->model, s->name, fd, 1);
2115     if (!s1) {
2116         closesocket(fd);
2117     } else {
2118         snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
2119                  "socket: connection from %s:%d",
2120                  inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2121     }
2122 }
2123
2124 static int net_socket_listen_init(VLANState *vlan,
2125                                   const char *model,
2126                                   const char *name,
2127                                   const char *host_str)
2128 {
2129     NetSocketListenState *s;
2130     int fd, val, ret;
2131     struct sockaddr_in saddr;
2132
2133     if (parse_host_port(&saddr, host_str) < 0)
2134         return -1;
2135
2136     s = qemu_mallocz(sizeof(NetSocketListenState));
2137
2138     fd = socket(PF_INET, SOCK_STREAM, 0);
2139     if (fd < 0) {
2140         perror("socket");
2141         return -1;
2142     }
2143     socket_set_nonblock(fd);
2144
2145     /* allow fast reuse */
2146     val = 1;
2147     setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
2148
2149     ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
2150     if (ret < 0) {
2151         perror("bind");
2152         return -1;
2153     }
2154     ret = listen(fd, 0);
2155     if (ret < 0) {
2156         perror("listen");
2157         return -1;
2158     }
2159     s->vlan = vlan;
2160     s->model = strdup(model);
2161     s->name = name ? strdup(name) : NULL;
2162     s->fd = fd;
2163     qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
2164     return 0;
2165 }
2166
2167 static int net_socket_connect_init(VLANState *vlan,
2168                                    const char *model,
2169                                    const char *name,
2170                                    const char *host_str)
2171 {
2172     NetSocketState *s;
2173     int fd, connected, ret, err;
2174     struct sockaddr_in saddr;
2175
2176     if (parse_host_port(&saddr, host_str) < 0)
2177         return -1;
2178
2179     fd = socket(PF_INET, SOCK_STREAM, 0);
2180     if (fd < 0) {
2181         perror("socket");
2182         return -1;
2183     }
2184     socket_set_nonblock(fd);
2185
2186     connected = 0;
2187     for(;;) {
2188         ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
2189         if (ret < 0) {
2190             err = socket_error();
2191             if (err == EINTR || err == EWOULDBLOCK) {
2192             } else if (err == EINPROGRESS) {
2193                 break;
2194 #ifdef _WIN32
2195             } else if (err == WSAEALREADY) {
2196                 break;
2197 #endif
2198             } else {
2199                 perror("connect");
2200                 closesocket(fd);
2201                 return -1;
2202             }
2203         } else {
2204             connected = 1;
2205             break;
2206         }
2207     }
2208     s = net_socket_fd_init(vlan, model, name, fd, connected);
2209     if (!s)
2210         return -1;
2211     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2212              "socket: connect to %s:%d",
2213              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2214     return 0;
2215 }
2216
2217 static int net_socket_mcast_init(VLANState *vlan,
2218                                  const char *model,
2219                                  const char *name,
2220                                  const char *host_str)
2221 {
2222     NetSocketState *s;
2223     int fd;
2224     struct sockaddr_in saddr;
2225
2226     if (parse_host_port(&saddr, host_str) < 0)
2227         return -1;
2228
2229
2230     fd = net_socket_mcast_create(&saddr);
2231     if (fd < 0)
2232         return -1;
2233
2234     s = net_socket_fd_init(vlan, model, name, fd, 0);
2235     if (!s)
2236         return -1;
2237
2238     s->dgram_dst = saddr;
2239
2240     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2241              "socket: mcast=%s:%d",
2242              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2243     return 0;
2244
2245 }
2246
2247 typedef struct DumpState {
2248     VLANClientState *pcap_vc;
2249     int fd;
2250     int pcap_caplen;
2251 } DumpState;
2252
2253 #define PCAP_MAGIC 0xa1b2c3d4
2254
2255 struct pcap_file_hdr {
2256     uint32_t magic;
2257     uint16_t version_major;
2258     uint16_t version_minor;
2259     int32_t thiszone;
2260     uint32_t sigfigs;
2261     uint32_t snaplen;
2262     uint32_t linktype;
2263 };
2264
2265 struct pcap_sf_pkthdr {
2266     struct {
2267         int32_t tv_sec;
2268         int32_t tv_usec;
2269     } ts;
2270     uint32_t caplen;
2271     uint32_t len;
2272 };
2273
2274 static ssize_t dump_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
2275 {
2276     DumpState *s = vc->opaque;
2277     struct pcap_sf_pkthdr hdr;
2278     int64_t ts;
2279     int caplen;
2280
2281     /* Early return in case of previous error. */
2282     if (s->fd < 0) {
2283         return size;
2284     }
2285
2286     ts = muldiv64(qemu_get_clock(vm_clock), 1000000, ticks_per_sec);
2287     caplen = size > s->pcap_caplen ? s->pcap_caplen : size;
2288
2289     hdr.ts.tv_sec = ts / 1000000;
2290     hdr.ts.tv_usec = ts % 1000000;
2291     hdr.caplen = caplen;
2292     hdr.len = size;
2293     if (write(s->fd, &hdr, sizeof(hdr)) != sizeof(hdr) ||
2294         write(s->fd, buf, caplen) != caplen) {
2295         qemu_log("-net dump write error - stop dump\n");
2296         close(s->fd);
2297         s->fd = -1;
2298     }
2299
2300     return size;
2301 }
2302
2303 static void net_dump_cleanup(VLANClientState *vc)
2304 {
2305     DumpState *s = vc->opaque;
2306
2307     close(s->fd);
2308     qemu_free(s);
2309 }
2310
2311 static int net_dump_init(Monitor *mon, VLANState *vlan, const char *device,
2312                          const char *name, const char *filename, int len)
2313 {
2314     struct pcap_file_hdr hdr;
2315     DumpState *s;
2316
2317     s = qemu_malloc(sizeof(DumpState));
2318
2319     s->fd = open(filename, O_CREAT | O_WRONLY | O_BINARY, 0644);
2320     if (s->fd < 0) {
2321         config_error(mon, "-net dump: can't open %s\n", filename);
2322         return -1;
2323     }
2324
2325     s->pcap_caplen = len;
2326
2327     hdr.magic = PCAP_MAGIC;
2328     hdr.version_major = 2;
2329     hdr.version_minor = 4;
2330     hdr.thiszone = 0;
2331     hdr.sigfigs = 0;
2332     hdr.snaplen = s->pcap_caplen;
2333     hdr.linktype = 1;
2334
2335     if (write(s->fd, &hdr, sizeof(hdr)) < sizeof(hdr)) {
2336         config_error(mon, "-net dump write error: %s\n", strerror(errno));
2337         close(s->fd);
2338         qemu_free(s);
2339         return -1;
2340     }
2341
2342     s->pcap_vc = qemu_new_vlan_client(vlan, device, name, NULL, dump_receive, NULL,
2343                                       net_dump_cleanup, s);
2344     snprintf(s->pcap_vc->info_str, sizeof(s->pcap_vc->info_str),
2345              "dump to %s (len=%d)", filename, len);
2346     return 0;
2347 }
2348
2349 /* find or alloc a new VLAN */
2350 VLANState *qemu_find_vlan(int id, int allocate)
2351 {
2352     VLANState **pvlan, *vlan;
2353     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2354         if (vlan->id == id)
2355             return vlan;
2356     }
2357     if (!allocate) {
2358         return NULL;
2359     }
2360     vlan = qemu_mallocz(sizeof(VLANState));
2361     vlan->id = id;
2362     vlan->next = NULL;
2363     pvlan = &first_vlan;
2364     while (*pvlan != NULL)
2365         pvlan = &(*pvlan)->next;
2366     *pvlan = vlan;
2367     return vlan;
2368 }
2369
2370 static int nic_get_free_idx(void)
2371 {
2372     int index;
2373
2374     for (index = 0; index < MAX_NICS; index++)
2375         if (!nd_table[index].used)
2376             return index;
2377     return -1;
2378 }
2379
2380 void qemu_check_nic_model(NICInfo *nd, const char *model)
2381 {
2382     const char *models[2];
2383
2384     models[0] = model;
2385     models[1] = NULL;
2386
2387     qemu_check_nic_model_list(nd, models, model);
2388 }
2389
2390 void qemu_check_nic_model_list(NICInfo *nd, const char * const *models,
2391                                const char *default_model)
2392 {
2393     int i, exit_status = 0;
2394
2395     if (!nd->model)
2396         nd->model = strdup(default_model);
2397
2398     if (strcmp(nd->model, "?") != 0) {
2399         for (i = 0 ; models[i]; i++)
2400             if (strcmp(nd->model, models[i]) == 0)
2401                 return;
2402
2403         fprintf(stderr, "qemu: Unsupported NIC model: %s\n", nd->model);
2404         exit_status = 1;
2405     }
2406
2407     fprintf(stderr, "qemu: Supported NIC models: ");
2408     for (i = 0 ; models[i]; i++)
2409         fprintf(stderr, "%s%c", models[i], models[i+1] ? ',' : '\n');
2410
2411     exit(exit_status);
2412 }
2413
2414 static int net_handle_fd_param(Monitor *mon, const char *param)
2415 {
2416     if (!qemu_isdigit(param[0])) {
2417         int fd;
2418
2419         fd = monitor_get_fd(mon, param);
2420         if (fd == -1) {
2421             config_error(mon, "No file descriptor named %s found", param);
2422             return -1;
2423         }
2424
2425         return fd;
2426     } else {
2427         return strtol(param, NULL, 0);
2428     }
2429 }
2430
2431 int net_client_init(Monitor *mon, const char *device, const char *p)
2432 {
2433     char buf[1024];
2434     int vlan_id, ret;
2435     VLANState *vlan;
2436     char *name = NULL;
2437
2438     vlan_id = 0;
2439     if (get_param_value(buf, sizeof(buf), "vlan", p)) {
2440         vlan_id = strtol(buf, NULL, 0);
2441     }
2442     vlan = qemu_find_vlan(vlan_id, 1);
2443
2444     if (get_param_value(buf, sizeof(buf), "name", p)) {
2445         name = qemu_strdup(buf);
2446     }
2447     if (!strcmp(device, "nic")) {
2448         static const char * const nic_params[] = {
2449             "vlan", "name", "macaddr", "model", "addr", "id", "vectors", NULL
2450         };
2451         NICInfo *nd;
2452         uint8_t *macaddr;
2453         int idx = nic_get_free_idx();
2454
2455         if (check_params(buf, sizeof(buf), nic_params, p) < 0) {
2456             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2457             ret = -1;
2458             goto out;
2459         }
2460         if (idx == -1 || nb_nics >= MAX_NICS) {
2461             config_error(mon, "Too Many NICs\n");
2462             ret = -1;
2463             goto out;
2464         }
2465         nd = &nd_table[idx];
2466         macaddr = nd->macaddr;
2467         macaddr[0] = 0x52;
2468         macaddr[1] = 0x54;
2469         macaddr[2] = 0x00;
2470         macaddr[3] = 0x12;
2471         macaddr[4] = 0x34;
2472         macaddr[5] = 0x56 + idx;
2473
2474         if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
2475             if (parse_macaddr(macaddr, buf) < 0) {
2476                 config_error(mon, "invalid syntax for ethernet address\n");
2477                 ret = -1;
2478                 goto out;
2479             }
2480         }
2481         if (get_param_value(buf, sizeof(buf), "model", p)) {
2482             nd->model = strdup(buf);
2483         }
2484         if (get_param_value(buf, sizeof(buf), "addr", p)) {
2485             nd->devaddr = strdup(buf);
2486         }
2487         if (get_param_value(buf, sizeof(buf), "id", p)) {
2488             nd->id = strdup(buf);
2489         }
2490         nd->nvectors = NIC_NVECTORS_UNSPECIFIED;
2491         if (get_param_value(buf, sizeof(buf), "vectors", p)) {
2492             char *endptr;
2493             long vectors = strtol(buf, &endptr, 0);
2494             if (*endptr) {
2495                 config_error(mon, "invalid syntax for # of vectors\n");
2496                 ret = -1;
2497                 goto out;
2498             }
2499             if (vectors < 0 || vectors > 0x7ffffff) {
2500                 config_error(mon, "invalid # of vectors\n");
2501                 ret = -1;
2502                 goto out;
2503             }
2504             nd->nvectors = vectors;
2505         }
2506         nd->vlan = vlan;
2507         nd->name = name;
2508         nd->used = 1;
2509         name = NULL;
2510         nb_nics++;
2511         vlan->nb_guest_devs++;
2512         ret = idx;
2513     } else
2514     if (!strcmp(device, "none")) {
2515         if (*p != '\0') {
2516             config_error(mon, "'none' takes no parameters\n");
2517             ret = -1;
2518             goto out;
2519         }
2520         /* does nothing. It is needed to signal that no network cards
2521            are wanted */
2522         ret = 0;
2523     } else
2524 #ifdef CONFIG_SLIRP
2525     if (!strcmp(device, "user")) {
2526         static const char * const slirp_params[] = {
2527             "vlan", "name", "hostname", "restrict", "ip", "net", "host",
2528             "tftp", "bootfile", "dhcpstart", "dns", "smb", "smbserver",
2529             "hostfwd", "guestfwd", NULL
2530         };
2531         struct slirp_config_str *config;
2532         int restricted = 0;
2533         char *vnet = NULL;
2534         char *vhost = NULL;
2535         char *vhostname = NULL;
2536         char *tftp_export = NULL;
2537         char *bootfile = NULL;
2538         char *vdhcp_start = NULL;
2539         char *vnamesrv = NULL;
2540         char *smb_export = NULL;
2541         char *vsmbsrv = NULL;
2542         const char *q;
2543
2544         if (check_params(buf, sizeof(buf), slirp_params, p) < 0) {
2545             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2546             ret = -1;
2547             goto out;
2548         }
2549         if (get_param_value(buf, sizeof(buf), "ip", p)) {
2550             int vnet_buflen = strlen(buf) + strlen("/24") + 1;
2551             /* emulate legacy parameter */
2552             vnet = qemu_malloc(vnet_buflen);
2553             pstrcpy(vnet, vnet_buflen, buf);
2554             pstrcat(vnet, vnet_buflen, "/24");
2555         }
2556         if (get_param_value(buf, sizeof(buf), "net", p)) {
2557             vnet = qemu_strdup(buf);
2558         }
2559         if (get_param_value(buf, sizeof(buf), "host", p)) {
2560             vhost = qemu_strdup(buf);
2561         }
2562         if (get_param_value(buf, sizeof(buf), "hostname", p)) {
2563             vhostname = qemu_strdup(buf);
2564         }
2565         if (get_param_value(buf, sizeof(buf), "restrict", p)) {
2566             restricted = (buf[0] == 'y') ? 1 : 0;
2567         }
2568         if (get_param_value(buf, sizeof(buf), "dhcpstart", p)) {
2569             vdhcp_start = qemu_strdup(buf);
2570         }
2571         if (get_param_value(buf, sizeof(buf), "dns", p)) {
2572             vnamesrv = qemu_strdup(buf);
2573         }
2574         if (get_param_value(buf, sizeof(buf), "tftp", p)) {
2575             tftp_export = qemu_strdup(buf);
2576         }
2577         if (get_param_value(buf, sizeof(buf), "bootfile", p)) {
2578             bootfile = qemu_strdup(buf);
2579         }
2580         if (get_param_value(buf, sizeof(buf), "smb", p)) {
2581             smb_export = qemu_strdup(buf);
2582             if (get_param_value(buf, sizeof(buf), "smbserver", p)) {
2583                 vsmbsrv = qemu_strdup(buf);
2584             }
2585         }
2586         q = p;
2587         while (1) {
2588             config = qemu_malloc(sizeof(*config));
2589             if (!get_next_param_value(config->str, sizeof(config->str),
2590                                       "hostfwd", &q)) {
2591                 break;
2592             }
2593             config->flags = SLIRP_CFG_HOSTFWD;
2594             config->next = slirp_configs;
2595             slirp_configs = config;
2596             config = NULL;
2597         }
2598         q = p;
2599         while (1) {
2600             config = qemu_malloc(sizeof(*config));
2601             if (!get_next_param_value(config->str, sizeof(config->str),
2602                                       "guestfwd", &q)) {
2603                 break;
2604             }
2605             config->flags = 0;
2606             config->next = slirp_configs;
2607             slirp_configs = config;
2608             config = NULL;
2609         }
2610         qemu_free(config);
2611         vlan->nb_host_devs++;
2612         ret = net_slirp_init(mon, vlan, device, name, restricted, vnet, vhost,
2613                              vhostname, tftp_export, bootfile, vdhcp_start,
2614                              vnamesrv, smb_export, vsmbsrv);
2615         qemu_free(vnet);
2616         qemu_free(vhost);
2617         qemu_free(vhostname);
2618         qemu_free(tftp_export);
2619         qemu_free(bootfile);
2620         qemu_free(vdhcp_start);
2621         qemu_free(vnamesrv);
2622         qemu_free(smb_export);
2623         qemu_free(vsmbsrv);
2624     } else if (!strcmp(device, "channel")) {
2625         if (TAILQ_EMPTY(&slirp_stacks)) {
2626             struct slirp_config_str *config;
2627
2628             config = qemu_malloc(sizeof(*config));
2629             pstrcpy(config->str, sizeof(config->str), p);
2630             config->flags = SLIRP_CFG_LEGACY;
2631             config->next = slirp_configs;
2632             slirp_configs = config;
2633         } else {
2634             slirp_guestfwd(TAILQ_FIRST(&slirp_stacks), mon, p, 1);
2635         }
2636         ret = 0;
2637     } else
2638 #endif
2639 #ifdef _WIN32
2640     if (!strcmp(device, "tap")) {
2641         static const char * const tap_params[] = {
2642             "vlan", "name", "ifname", NULL
2643         };
2644         char ifname[64];
2645
2646         if (check_params(buf, sizeof(buf), tap_params, p) < 0) {
2647             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2648             ret = -1;
2649             goto out;
2650         }
2651         if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2652             config_error(mon, "tap: no interface name\n");
2653             ret = -1;
2654             goto out;
2655         }
2656         vlan->nb_host_devs++;
2657         ret = tap_win32_init(vlan, device, name, ifname);
2658     } else
2659 #elif defined (_AIX)
2660 #else
2661     if (!strcmp(device, "tap")) {
2662         char ifname[64], chkbuf[64];
2663         char setup_script[1024], down_script[1024];
2664         TAPState *s;
2665         int fd;
2666         vlan->nb_host_devs++;
2667         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2668             static const char * const fd_params[] = {
2669                 "vlan", "name", "fd", "sndbuf", NULL
2670             };
2671             ret = -1;
2672             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2673                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2674                 goto out;
2675             }
2676             fd = net_handle_fd_param(mon, buf);
2677             if (fd == -1) {
2678                 goto out;
2679             }
2680             fcntl(fd, F_SETFL, O_NONBLOCK);
2681             s = net_tap_fd_init(vlan, device, name, fd);
2682             if (!s) {
2683                 close(fd);
2684             }
2685         } else {
2686             static const char * const tap_params[] = {
2687                 "vlan", "name", "ifname", "script", "downscript", "sndbuf", NULL
2688             };
2689             if (check_params(chkbuf, sizeof(chkbuf), tap_params, p) < 0) {
2690                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2691                 ret = -1;
2692                 goto out;
2693             }
2694             if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2695                 ifname[0] = '\0';
2696             }
2697             if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
2698                 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
2699             }
2700             if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
2701                 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
2702             }
2703             s = net_tap_init(vlan, device, name, ifname, setup_script, down_script);
2704         }
2705         if (s != NULL) {
2706             const char *sndbuf_str = NULL;
2707             if (get_param_value(buf, sizeof(buf), "sndbuf", p)) {
2708                 sndbuf_str = buf;
2709             }
2710             tap_set_sndbuf(s, sndbuf_str, mon);
2711             ret = 0;
2712         } else {
2713             ret = -1;
2714         }
2715     } else
2716 #endif
2717     if (!strcmp(device, "socket")) {
2718         char chkbuf[64];
2719         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2720             static const char * const fd_params[] = {
2721                 "vlan", "name", "fd", NULL
2722             };
2723             int fd;
2724             ret = -1;
2725             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2726                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2727                 goto out;
2728             }
2729             fd = net_handle_fd_param(mon, buf);
2730             if (fd == -1) {
2731                 goto out;
2732             }
2733             if (!net_socket_fd_init(vlan, device, name, fd, 1)) {
2734                 close(fd);
2735                 goto out;
2736             }
2737             ret = 0;
2738         } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
2739             static const char * const listen_params[] = {
2740                 "vlan", "name", "listen", NULL
2741             };
2742             if (check_params(chkbuf, sizeof(chkbuf), listen_params, p) < 0) {
2743                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2744                 ret = -1;
2745                 goto out;
2746             }
2747             ret = net_socket_listen_init(vlan, device, name, buf);
2748         } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
2749             static const char * const connect_params[] = {
2750                 "vlan", "name", "connect", NULL
2751             };
2752             if (check_params(chkbuf, sizeof(chkbuf), connect_params, p) < 0) {
2753                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2754                 ret = -1;
2755                 goto out;
2756             }
2757             ret = net_socket_connect_init(vlan, device, name, buf);
2758         } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
2759             static const char * const mcast_params[] = {
2760                 "vlan", "name", "mcast", NULL
2761             };
2762             if (check_params(chkbuf, sizeof(chkbuf), mcast_params, p) < 0) {
2763                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2764                 ret = -1;
2765                 goto out;
2766             }
2767             ret = net_socket_mcast_init(vlan, device, name, buf);
2768         } else {
2769             config_error(mon, "Unknown socket options: %s\n", p);
2770             ret = -1;
2771             goto out;
2772         }
2773         vlan->nb_host_devs++;
2774     } else
2775 #ifdef CONFIG_VDE
2776     if (!strcmp(device, "vde")) {
2777         static const char * const vde_params[] = {
2778             "vlan", "name", "sock", "port", "group", "mode", NULL
2779         };
2780         char vde_sock[1024], vde_group[512];
2781         int vde_port, vde_mode;
2782
2783         if (check_params(buf, sizeof(buf), vde_params, p) < 0) {
2784             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2785             ret = -1;
2786             goto out;
2787         }
2788         vlan->nb_host_devs++;
2789         if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
2790             vde_sock[0] = '\0';
2791         }
2792         if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
2793             vde_port = strtol(buf, NULL, 10);
2794         } else {
2795             vde_port = 0;
2796         }
2797         if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
2798             vde_group[0] = '\0';
2799         }
2800         if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
2801             vde_mode = strtol(buf, NULL, 8);
2802         } else {
2803             vde_mode = 0700;
2804         }
2805         ret = net_vde_init(vlan, device, name, vde_sock, vde_port, vde_group, vde_mode);
2806     } else
2807 #endif
2808     if (!strcmp(device, "dump")) {
2809         int len = 65536;
2810
2811         if (get_param_value(buf, sizeof(buf), "len", p) > 0) {
2812             len = strtol(buf, NULL, 0);
2813         }
2814         if (!get_param_value(buf, sizeof(buf), "file", p)) {
2815             snprintf(buf, sizeof(buf), "qemu-vlan%d.pcap", vlan_id);
2816         }
2817         ret = net_dump_init(mon, vlan, device, name, buf, len);
2818     } else {
2819         config_error(mon, "Unknown network device: %s\n", device);
2820         ret = -1;
2821         goto out;
2822     }
2823     if (ret < 0) {
2824         config_error(mon, "Could not initialize device '%s'\n", device);
2825     }
2826 out:
2827     qemu_free(name);
2828     return ret;
2829 }
2830
2831 void net_client_uninit(NICInfo *nd)
2832 {
2833     nd->vlan->nb_guest_devs--;
2834     nb_nics--;
2835     nd->used = 0;
2836     free((void *)nd->model);
2837 }
2838
2839 static int net_host_check_device(const char *device)
2840 {
2841     int i;
2842     const char *valid_param_list[] = { "tap", "socket", "dump"
2843 #ifdef CONFIG_SLIRP
2844                                        ,"user"
2845 #endif
2846 #ifdef CONFIG_VDE
2847                                        ,"vde"
2848 #endif
2849     };
2850     for (i = 0; i < sizeof(valid_param_list) / sizeof(char *); i++) {
2851         if (!strncmp(valid_param_list[i], device,
2852                      strlen(valid_param_list[i])))
2853             return 1;
2854     }
2855
2856     return 0;
2857 }
2858
2859 void net_host_device_add(Monitor *mon, const char *device, const char *opts)
2860 {
2861     if (!net_host_check_device(device)) {
2862         monitor_printf(mon, "invalid host network device %s\n", device);
2863         return;
2864     }
2865     if (net_client_init(mon, device, opts ? opts : "") < 0) {
2866         monitor_printf(mon, "adding host network device %s failed\n", device);
2867     }
2868 }
2869
2870 void net_host_device_remove(Monitor *mon, int vlan_id, const char *device)
2871 {
2872     VLANClientState *vc;
2873
2874     vc = qemu_find_vlan_client_by_name(mon, vlan_id, device);
2875     if (!vc) {
2876         return;
2877     }
2878     if (!net_host_check_device(vc->model)) {
2879         monitor_printf(mon, "invalid host network device %s\n", device);
2880         return;
2881     }
2882     qemu_del_vlan_client(vc);
2883 }
2884
2885 int net_client_parse(const char *str)
2886 {
2887     const char *p;
2888     char *q;
2889     char device[64];
2890
2891     p = str;
2892     q = device;
2893     while (*p != '\0' && *p != ',') {
2894         if ((q - device) < sizeof(device) - 1)
2895             *q++ = *p;
2896         p++;
2897     }
2898     *q = '\0';
2899     if (*p == ',')
2900         p++;
2901
2902     return net_client_init(NULL, device, p);
2903 }
2904
2905 void net_set_boot_mask(int net_boot_mask)
2906 {
2907     int i;
2908
2909     /* Only the first four NICs may be bootable */
2910     net_boot_mask = net_boot_mask & 0xF;
2911
2912     for (i = 0; i < nb_nics; i++) {
2913         if (net_boot_mask & (1 << i)) {
2914             nd_table[i].bootable = 1;
2915             net_boot_mask &= ~(1 << i);
2916         }
2917     }
2918
2919     if (net_boot_mask) {
2920         fprintf(stderr, "Cannot boot from non-existent NIC\n");
2921         exit(1);
2922     }
2923 }
2924
2925 void do_info_network(Monitor *mon)
2926 {
2927     VLANState *vlan;
2928     VLANClientState *vc;
2929
2930     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2931         monitor_printf(mon, "VLAN %d devices:\n", vlan->id);
2932         for(vc = vlan->first_client; vc != NULL; vc = vc->next)
2933             monitor_printf(mon, "  %s: %s\n", vc->name, vc->info_str);
2934     }
2935 }
2936
2937 int do_set_link(Monitor *mon, const char *name, const char *up_or_down)
2938 {
2939     VLANState *vlan;
2940     VLANClientState *vc = NULL;
2941
2942     for (vlan = first_vlan; vlan != NULL; vlan = vlan->next)
2943         for (vc = vlan->first_client; vc != NULL; vc = vc->next)
2944             if (strcmp(vc->name, name) == 0)
2945                 goto done;
2946 done:
2947
2948     if (!vc) {
2949         monitor_printf(mon, "could not find network device '%s'", name);
2950         return 0;
2951     }
2952
2953     if (strcmp(up_or_down, "up") == 0)
2954         vc->link_down = 0;
2955     else if (strcmp(up_or_down, "down") == 0)
2956         vc->link_down = 1;
2957     else
2958         monitor_printf(mon, "invalid link status '%s'; only 'up' or 'down' "
2959                        "valid\n", up_or_down);
2960
2961     if (vc->link_status_changed)
2962         vc->link_status_changed(vc);
2963
2964     return 1;
2965 }
2966
2967 void net_cleanup(void)
2968 {
2969     VLANState *vlan;
2970
2971     /* close network clients */
2972     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2973         VLANClientState *vc = vlan->first_client;
2974
2975         while (vc) {
2976             VLANClientState *next = vc->next;
2977
2978             qemu_del_vlan_client(vc);
2979
2980             vc = next;
2981         }
2982     }
2983 }
2984
2985 void net_client_check(void)
2986 {
2987     VLANState *vlan;
2988
2989     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2990         if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
2991             continue;
2992         if (vlan->nb_guest_devs == 0)
2993             fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
2994         if (vlan->nb_host_devs == 0)
2995             fprintf(stderr,
2996                     "Warning: vlan %d is not connected to host network\n",
2997                     vlan->id);
2998     }
2999 }