net.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for HOST_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #ifdef __NetBSD__
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef HOST_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69
  70 /* For the benefit of older linux systems which don't supply it,
  71    we use a local copy of hpet.h. */
  72 /* #include <linux/hpet.h> */
  73 #include "hpet.h"
  74
  75 #include <linux/ppdev.h>
  76 #include <linux/parport.h>
  77 #endif
  78 #ifdef __sun__
  79 #include <sys/stat.h>
  80 #include <sys/ethernet.h>
  81 #include <sys/sockio.h>
  82 #include <netinet/arp.h>
  83 #include <netinet/in.h>
  84 #include <netinet/in_systm.h>
  85 #include <netinet/ip.h>
  86 #include <netinet/ip_icmp.h> // must come after ip.h
  87 #include <netinet/udp.h>
  88 #include <netinet/tcp.h>
  89 #include <net/if.h>
  90 #include <syslog.h>
  91 #include <stropts.h>
  92 #endif
  93 #endif
  94 #endif
  95
  96 #if defined(__OpenBSD__)
  97 #include <util.h>
  98 #endif
  99
 100 #if defined(CONFIG_VDE)
 101 #include <libvdeplug.h>
 102 #endif
 103
 104 #ifdef _WIN32
 105 #include <windows.h>
 106 #include <malloc.h>
 107 #include <sys/timeb.h>
 108 #include <mmsystem.h>
 109 #define getopt_long_only getopt_long
 110 #define memalign(align, size) malloc(size)
 111 #endif
 112
 113 #include "qemu-common.h"
 114 #include "net.h"
 115 #include "monitor.h"
 116 #include "sysemu.h"
 117 #include "qemu-timer.h"
 118 #include "qemu-char.h"
 119 #include "audio/audio.h"
 120 #include "qemu_socket.h"
 121 #include "qemu-log.h"
 122
 123 #include "slirp/libslirp.h"
 124
 125
 126 static VLANState *first_vlan;
 127
 128 /***********************************************************/
 129 /* network device redirectors */
 130
 131 #if defined(DEBUG_NET) || defined(DEBUG_SLIRP)
 132 static void hex_dump(FILE *f, const uint8_t *buf, int size)
 133 {
 134     int len, i, j, c;
 135
 136     for(i=0;i<size;i+=16) {
 137         len = size - i;
 138         if (len > 16)
 139             len = 16;
 140         fprintf(f, "%08x ", i);
 141         for(j=0;j<16;j++) {
 142             if (j < len)
 143                 fprintf(f, " %02x", buf[i+j]);
 144             else
 145                 fprintf(f, "   ");
 146         }
 147         fprintf(f, " ");
 148         for(j=0;j<len;j++) {
 149             c = buf[i+j];
 150             if (c < ' ' || c > '~')
 151                 c = '.';
 152             fprintf(f, "%c", c);
 153         }
 154         fprintf(f, "\n");
 155     }
 156 }
 157 #endif
 158
 159 static int parse_macaddr(uint8_t *macaddr, const char *p)
 160 {
 161     int i;
 162     char *last_char;
 163     long int offset;
 164
 165     errno = 0;
 166     offset = strtol(p, &last_char, 0);
 167     if (0 == errno && '\0' == *last_char &&
 168             offset >= 0 && offset <= 0xFFFFFF) {
 169         macaddr[3] = (offset & 0xFF0000) >> 16;
 170         macaddr[4] = (offset & 0xFF00) >> 8;
 171         macaddr[5] = offset & 0xFF;
 172         return 0;
 173     } else {
 174         for(i = 0; i < 6; i++) {
 175             macaddr[i] = strtol(p, (char **)&p, 16);
 176             if (i == 5) {
 177                 if (*p != '\0')
 178                     return -1;
 179             } else {
 180                 if (*p != ':' && *p != '-')
 181                     return -1;
 182                 p++;
 183             }
 184         }
 185         return 0;
 186     }
 187
 188     return -1;
 189 }
 190
 191 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
 192 {
 193     const char *p, *p1;
 194     int len;
 195     p = *pp;
 196     p1 = strchr(p, sep);
 197     if (!p1)
 198         return -1;
 199     len = p1 - p;
 200     p1++;
 201     if (buf_size > 0) {
 202         if (len > buf_size - 1)
 203             len = buf_size - 1;
 204         memcpy(buf, p, len);
 205         buf[len] = '\0';
 206     }
 207     *pp = p1;
 208     return 0;
 209 }
 210
 211 int parse_host_src_port(struct sockaddr_in *haddr,
 212                         struct sockaddr_in *saddr,
 213                         const char *input_str)
 214 {
 215     char *str = strdup(input_str);
 216     char *host_str = str;
 217     char *src_str;
 218     const char *src_str2;
 219     char *ptr;
 220
 221     /*
 222      * Chop off any extra arguments at the end of the string which
 223      * would start with a comma, then fill in the src port information
 224      * if it was provided else use the "any address" and "any port".
 225      */
 226     if ((ptr = strchr(str,',')))
 227         *ptr = '\0';
 228
 229     if ((src_str = strchr(input_str,'@'))) {
 230         *src_str = '\0';
 231         src_str++;
 232     }
 233
 234     if (parse_host_port(haddr, host_str) < 0)
 235         goto fail;
 236
 237     src_str2 = src_str;
 238     if (!src_str || *src_str == '\0')
 239         src_str2 = ":0";
 240
 241     if (parse_host_port(saddr, src_str2) < 0)
 242         goto fail;
 243
 244     free(str);
 245     return(0);
 246
 247 fail:
 248     free(str);
 249     return -1;
 250 }
 251
 252 int parse_host_port(struct sockaddr_in *saddr, const char *str)
 253 {
 254     char buf[512];
 255     struct hostent *he;
 256     const char *p, *r;
 257     int port;
 258
 259     p = str;
 260     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 261         return -1;
 262     saddr->sin_family = AF_INET;
 263     if (buf[0] == '\0') {
 264         saddr->sin_addr.s_addr = 0;
 265     } else {
 266         if (qemu_isdigit(buf[0])) {
 267             if (!inet_aton(buf, &saddr->sin_addr))
 268                 return -1;
 269         } else {
 270             if ((he = gethostbyname(buf)) == NULL)
 271                 return - 1;
 272             saddr->sin_addr = *(struct in_addr *)he->h_addr;
 273         }
 274     }
 275     port = strtol(p, (char **)&r, 0);
 276     if (r == p)
 277         return -1;
 278     saddr->sin_port = htons(port);
 279     return 0;
 280 }
 281
 282 #if !defined(_WIN32) && 0
 283 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
 284 {
 285     const char *p;
 286     int len;
 287
 288     len = MIN(108, strlen(str));
 289     p = strchr(str, ',');
 290     if (p)
 291         len = MIN(len, p - str);
 292
 293     memset(uaddr, 0, sizeof(*uaddr));
 294
 295     uaddr->sun_family = AF_UNIX;
 296     memcpy(uaddr->sun_path, str, len);
 297
 298     return 0;
 299 }
 300 #endif
 301
 302 void qemu_format_nic_info_str(VLANClientState *vc, uint8_t macaddr[6])
 303 {
 304     snprintf(vc->info_str, sizeof(vc->info_str),
 305              "model=%s,macaddr=%02x:%02x:%02x:%02x:%02x:%02x",
 306              vc->model,
 307              macaddr[0], macaddr[1], macaddr[2],
 308              macaddr[3], macaddr[4], macaddr[5]);
 309 }
 310
 311 static char *assign_name(VLANClientState *vc1, const char *model)
 312 {
 313     VLANState *vlan;
 314     char buf[256];
 315     int id = 0;
 316
 317     for (vlan = first_vlan; vlan; vlan = vlan->next) {
 318         VLANClientState *vc;
 319
 320         for (vc = vlan->first_client; vc; vc = vc->next)
 321             if (vc != vc1 && strcmp(vc->model, model) == 0)
 322                 id++;
 323     }
 324
 325     snprintf(buf, sizeof(buf), "%s.%d", model, id);
 326
 327     return strdup(buf);
 328 }
 329
 330 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
 331                                       const char *model,
 332                                       const char *name,
 333                                       NetCanReceive *can_receive,
 334                                       NetReceive *receive,
 335                                       NetReceiveIOV *receive_iov,
 336                                       NetCleanup *cleanup,
 337                                       void *opaque)
 338 {
 339     VLANClientState *vc, **pvc;
 340     vc = qemu_mallocz(sizeof(VLANClientState));
 341     vc->model = strdup(model);
 342     if (name)
 343         vc->name = strdup(name);
 344     else
 345         vc->name = assign_name(vc, model);
 346     vc->can_receive = can_receive;
 347     vc->receive = receive;
 348     vc->receive_iov = receive_iov;
 349     vc->cleanup = cleanup;
 350     vc->opaque = opaque;
 351     vc->vlan = vlan;
 352
 353     vc->next = NULL;
 354     pvc = &vlan->first_client;
 355     while (*pvc != NULL)
 356         pvc = &(*pvc)->next;
 357     *pvc = vc;
 358     return vc;
 359 }
 360
 361 void qemu_del_vlan_client(VLANClientState *vc)
 362 {
 363     VLANClientState **pvc = &vc->vlan->first_client;
 364
 365     while (*pvc != NULL)
 366         if (*pvc == vc) {
 367             *pvc = vc->next;
 368             if (vc->cleanup) {
 369                 vc->cleanup(vc);
 370             }
 371             free(vc->name);
 372             free(vc->model);
 373             qemu_free(vc);
 374             break;
 375         } else
 376             pvc = &(*pvc)->next;
 377 }
 378
 379 VLANClientState *qemu_find_vlan_client(VLANState *vlan, void *opaque)
 380 {
 381     VLANClientState **pvc = &vlan->first_client;
 382
 383     while (*pvc != NULL)
 384         if ((*pvc)->opaque == opaque)
 385             return *pvc;
 386         else
 387             pvc = &(*pvc)->next;
 388
 389     return NULL;
 390 }
 391
 392 static VLANClientState *
 393 qemu_find_vlan_client_by_name(Monitor *mon, int vlan_id,
 394                               const char *client_str)
 395 {
 396     VLANState *vlan;
 397     VLANClientState *vc;
 398
 399     vlan = qemu_find_vlan(vlan_id, 0);
 400     if (!vlan) {
 401         monitor_printf(mon, "unknown VLAN %d\n", vlan_id);
 402         return NULL;
 403     }
 404
 405     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 406         if (!strcmp(vc->name, client_str)) {
 407             break;
 408         }
 409     }
 410     if (!vc) {
 411         monitor_printf(mon, "can't find device %s on VLAN %d\n",
 412                        client_str, vlan_id);
 413     }
 414
 415     return vc;
 416 }
 417
 418 int qemu_can_send_packet(VLANClientState *sender)
 419 {
 420     VLANState *vlan = sender->vlan;
 421     VLANClientState *vc;
 422
 423     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 424         if (vc == sender) {
 425             continue;
 426         }
 427
 428         /* no can_receive() handler, they can always receive */
 429         if (!vc->can_receive || vc->can_receive(vc)) {
 430             return 1;
 431         }
 432     }
 433     return 0;
 434 }
 435
 436 static int
 437 qemu_deliver_packet(VLANClientState *sender, const uint8_t *buf, int size)
 438 {
 439     VLANClientState *vc;
 440     int ret = -1;
 441
 442     sender->vlan->delivering = 1;
 443
 444     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 445         ssize_t len;
 446
 447         if (vc == sender) {
 448             continue;
 449         }
 450
 451         if (vc->link_down) {
 452             ret = size;
 453             continue;
 454         }
 455
 456         len = vc->receive(vc, buf, size);
 457
 458         ret = (ret >= 0) ? ret : len;
 459     }
 460
 461     sender->vlan->delivering = 0;
 462
 463     return ret;
 464 }
 465
 466 void qemu_purge_queued_packets(VLANClientState *vc)
 467 {
 468     VLANPacket *packet, *next;
 469
 470     TAILQ_FOREACH_SAFE(packet, &vc->vlan->send_queue, entry, next) {
 471         if (packet->sender == vc) {
 472             TAILQ_REMOVE(&vc->vlan->send_queue, packet, entry);
 473             qemu_free(packet);
 474         }
 475     }
 476 }
 477
 478 void qemu_flush_queued_packets(VLANClientState *vc)
 479 {
 480     while (!TAILQ_EMPTY(&vc->vlan->send_queue)) {
 481         VLANPacket *packet;
 482         int ret;
 483
 484         packet = TAILQ_FIRST(&vc->vlan->send_queue);
 485         TAILQ_REMOVE(&vc->vlan->send_queue, packet, entry);
 486
 487         ret = qemu_deliver_packet(packet->sender, packet->data, packet->size);
 488         if (ret == 0 && packet->sent_cb != NULL) {
 489             TAILQ_INSERT_HEAD(&vc->vlan->send_queue, packet, entry);
 490             break;
 491         }
 492
 493         if (packet->sent_cb)
 494             packet->sent_cb(packet->sender, ret);
 495
 496         qemu_free(packet);
 497     }
 498 }
 499
 500 static void qemu_enqueue_packet(VLANClientState *sender,
 501                                 const uint8_t *buf, int size,
 502                                 NetPacketSent *sent_cb)
 503 {
 504     VLANPacket *packet;
 505
 506     packet = qemu_malloc(sizeof(VLANPacket) + size);
 507     packet->sender = sender;
 508     packet->size = size;
 509     packet->sent_cb = sent_cb;
 510     memcpy(packet->data, buf, size);
 511
 512     TAILQ_INSERT_TAIL(&sender->vlan->send_queue, packet, entry);
 513 }
 514
 515 ssize_t qemu_send_packet_async(VLANClientState *sender,
 516                                const uint8_t *buf, int size,
 517                                NetPacketSent *sent_cb)
 518 {
 519     int ret;
 520
 521     if (sender->link_down) {
 522         return size;
 523     }
 524
 525 #ifdef DEBUG_NET
 526     printf("vlan %d send:\n", sender->vlan->id);
 527     hex_dump(stdout, buf, size);
 528 #endif
 529
 530     if (sender->vlan->delivering) {
 531         qemu_enqueue_packet(sender, buf, size, NULL);
 532         return size;
 533     }
 534
 535     ret = qemu_deliver_packet(sender, buf, size);
 536     if (ret == 0 && sent_cb != NULL) {
 537         qemu_enqueue_packet(sender, buf, size, sent_cb);
 538         return 0;
 539     }
 540
 541     qemu_flush_queued_packets(sender);
 542
 543     return ret;
 544 }
 545
 546 void qemu_send_packet(VLANClientState *vc, const uint8_t *buf, int size)
 547 {
 548     qemu_send_packet_async(vc, buf, size, NULL);
 549 }
 550
 551 static ssize_t vc_sendv_compat(VLANClientState *vc, const struct iovec *iov,
 552                                int iovcnt)
 553 {
 554     uint8_t buffer[4096];
 555     size_t offset = 0;
 556     int i;
 557
 558     for (i = 0; i < iovcnt; i++) {
 559         size_t len;
 560
 561         len = MIN(sizeof(buffer) - offset, iov[i].iov_len);
 562         memcpy(buffer + offset, iov[i].iov_base, len);
 563         offset += len;
 564     }
 565
 566     return vc->receive(vc, buffer, offset);
 567 }
 568
 569 static ssize_t calc_iov_length(const struct iovec *iov, int iovcnt)
 570 {
 571     size_t offset = 0;
 572     int i;
 573
 574     for (i = 0; i < iovcnt; i++)
 575         offset += iov[i].iov_len;
 576     return offset;
 577 }
 578
 579 static int qemu_deliver_packet_iov(VLANClientState *sender,
 580                                    const struct iovec *iov, int iovcnt)
 581 {
 582     VLANClientState *vc;
 583     int ret = -1;
 584
 585     sender->vlan->delivering = 1;
 586
 587     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 588         ssize_t len;
 589
 590         if (vc == sender) {
 591             continue;
 592         }
 593
 594         if (vc->link_down) {
 595             ret = calc_iov_length(iov, iovcnt);
 596             continue;
 597         }
 598
 599         if (vc->receive_iov) {
 600             len = vc->receive_iov(vc, iov, iovcnt);
 601         } else {
 602             len = vc_sendv_compat(vc, iov, iovcnt);
 603         }
 604
 605         ret = (ret >= 0) ? ret : len;
 606     }
 607
 608     sender->vlan->delivering = 0;
 609
 610     return ret;
 611 }
 612
 613 static ssize_t qemu_enqueue_packet_iov(VLANClientState *sender,
 614                                        const struct iovec *iov, int iovcnt,
 615                                        NetPacketSent *sent_cb)
 616 {
 617     VLANPacket *packet;
 618     size_t max_len = 0;
 619     int i;
 620
 621     max_len = calc_iov_length(iov, iovcnt);
 622
 623     packet = qemu_malloc(sizeof(VLANPacket) + max_len);
 624     packet->sender = sender;
 625     packet->sent_cb = sent_cb;
 626     packet->size = 0;
 627
 628     for (i = 0; i < iovcnt; i++) {
 629         size_t len = iov[i].iov_len;
 630
 631         memcpy(packet->data + packet->size, iov[i].iov_base, len);
 632         packet->size += len;
 633     }
 634
 635     TAILQ_INSERT_TAIL(&sender->vlan->send_queue, packet, entry);
 636
 637     return packet->size;
 638 }
 639
 640 ssize_t qemu_sendv_packet_async(VLANClientState *sender,
 641                                 const struct iovec *iov, int iovcnt,
 642                                 NetPacketSent *sent_cb)
 643 {
 644     int ret;
 645
 646     if (sender->link_down) {
 647         return calc_iov_length(iov, iovcnt);
 648     }
 649
 650     if (sender->vlan->delivering) {
 651         return qemu_enqueue_packet_iov(sender, iov, iovcnt, NULL);
 652     }
 653
 654     ret = qemu_deliver_packet_iov(sender, iov, iovcnt);
 655     if (ret == 0 && sent_cb != NULL) {
 656         qemu_enqueue_packet_iov(sender, iov, iovcnt, sent_cb);
 657         return 0;
 658     }
 659
 660     qemu_flush_queued_packets(sender);
 661
 662     return ret;
 663 }
 664
 665 ssize_t
 666 qemu_sendv_packet(VLANClientState *vc, const struct iovec *iov, int iovcnt)
 667 {
 668     return qemu_sendv_packet_async(vc, iov, iovcnt, NULL);
 669 }
 670
 671 static void config_error(Monitor *mon, const char *fmt, ...)
 672 {
 673     va_list ap;
 674
 675     va_start(ap, fmt);
 676     if (mon) {
 677         monitor_vprintf(mon, fmt, ap);
 678     } else {
 679         fprintf(stderr, "qemu: ");
 680         vfprintf(stderr, fmt, ap);
 681         exit(1);
 682     }
 683     va_end(ap);
 684 }
 685
 686 #if defined(CONFIG_SLIRP)
 687
 688 /* slirp network adapter */
 689
 690 #define SLIRP_CFG_HOSTFWD 1
 691 #define SLIRP_CFG_LEGACY  2
 692
 693 struct slirp_config_str {
 694     struct slirp_config_str *next;
 695     int flags;
 696     char str[1024];
 697     int legacy_format;
 698 };
 699
 700 typedef struct SlirpState {
 701     TAILQ_ENTRY(SlirpState) entry;
 702     VLANClientState *vc;
 703     Slirp *slirp;
 704 #ifndef _WIN32
 705     char smb_dir[128];
 706 #endif
 707 } SlirpState;
 708
 709 static struct slirp_config_str *slirp_configs;
 710 const char *legacy_tftp_prefix;
 711 const char *legacy_bootp_filename;
 712 static TAILQ_HEAD(slirp_stacks, SlirpState) slirp_stacks =
 713     TAILQ_HEAD_INITIALIZER(slirp_stacks);
 714
 715 static void slirp_hostfwd(SlirpState *s, Monitor *mon, const char *redir_str,
 716                           int legacy_format);
 717 static void slirp_guestfwd(SlirpState *s, Monitor *mon, const char *config_str,
 718                            int legacy_format);
 719
 720 #ifndef _WIN32
 721 static const char *legacy_smb_export;
 722
 723 static void slirp_smb(SlirpState *s, Monitor *mon, const char *exported_dir,
 724                       struct in_addr vserver_addr);
 725 static void slirp_smb_cleanup(SlirpState *s);
 726 #else
 727 static inline void slirp_smb_cleanup(SlirpState *s) { }
 728 #endif
 729
 730 int slirp_can_output(void *opaque)
 731 {
 732     SlirpState *s = opaque;
 733
 734     return qemu_can_send_packet(s->vc);
 735 }
 736
 737 void slirp_output(void *opaque, const uint8_t *pkt, int pkt_len)
 738 {
 739     SlirpState *s = opaque;
 740
 741 #ifdef DEBUG_SLIRP
 742     printf("slirp output:\n");
 743     hex_dump(stdout, pkt, pkt_len);
 744 #endif
 745     qemu_send_packet(s->vc, pkt, pkt_len);
 746 }
 747
 748 static ssize_t slirp_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
 749 {
 750     SlirpState *s = vc->opaque;
 751
 752 #ifdef DEBUG_SLIRP
 753     printf("slirp input:\n");
 754     hex_dump(stdout, buf, size);
 755 #endif
 756     slirp_input(s->slirp, buf, size);
 757     return size;
 758 }
 759
 760 static void net_slirp_cleanup(VLANClientState *vc)
 761 {
 762     SlirpState *s = vc->opaque;
 763
 764     slirp_cleanup(s->slirp);
 765     slirp_smb_cleanup(s);
 766     TAILQ_REMOVE(&slirp_stacks, s, entry);
 767     qemu_free(s);
 768 }
 769
 770 static int net_slirp_init(Monitor *mon, VLANState *vlan, const char *model,
 771                           const char *name, int restricted,
 772                           const char *vnetwork, const char *vhost,
 773                           const char *vhostname, const char *tftp_export,
 774                           const char *bootfile, const char *vdhcp_start,
 775                           const char *vnameserver, const char *smb_export,
 776                           const char *vsmbserver)
 777 {
 778     /* default settings according to historic slirp */
 779     struct in_addr net  = { .s_addr = htonl(0x0a000200) }; /* 10.0.2.0 */
 780     struct in_addr mask = { .s_addr = htonl(0xffffff00) }; /* 255.255.255.0 */
 781     struct in_addr host = { .s_addr = htonl(0x0a000202) }; /* 10.0.2.2 */
 782     struct in_addr dhcp = { .s_addr = htonl(0x0a00020f) }; /* 10.0.2.15 */
 783     struct in_addr dns  = { .s_addr = htonl(0x0a000203) }; /* 10.0.2.3 */
 784 #ifndef _WIN32
 785     struct in_addr smbsrv = { .s_addr = 0 };
 786 #endif
 787     SlirpState *s;
 788     char buf[20];
 789     uint32_t addr;
 790     int shift;
 791     char *end;
 792
 793     if (!tftp_export) {
 794         tftp_export = legacy_tftp_prefix;
 795     }
 796     if (!bootfile) {
 797         bootfile = legacy_bootp_filename;
 798     }
 799
 800     if (vnetwork) {
 801         if (get_str_sep(buf, sizeof(buf), &vnetwork, '/') < 0) {
 802             if (!inet_aton(vnetwork, &net)) {
 803                 return -1;
 804             }
 805             addr = ntohl(net.s_addr);
 806             if (!(addr & 0x80000000)) {
 807                 mask.s_addr = htonl(0xff000000); /* class A */
 808             } else if ((addr & 0xfff00000) == 0xac100000) {
 809                 mask.s_addr = htonl(0xfff00000); /* priv. 172.16.0.0/12 */
 810             } else if ((addr & 0xc0000000) == 0x80000000) {
 811                 mask.s_addr = htonl(0xffff0000); /* class B */
 812             } else if ((addr & 0xffff0000) == 0xc0a80000) {
 813                 mask.s_addr = htonl(0xffff0000); /* priv. 192.168.0.0/16 */
 814             } else if ((addr & 0xffff0000) == 0xc6120000) {
 815                 mask.s_addr = htonl(0xfffe0000); /* tests 198.18.0.0/15 */
 816             } else if ((addr & 0xe0000000) == 0xe0000000) {
 817                 mask.s_addr = htonl(0xffffff00); /* class C */
 818             } else {
 819                 mask.s_addr = htonl(0xfffffff0); /* multicast/reserved */
 820             }
 821         } else {
 822             if (!inet_aton(buf, &net)) {
 823                 return -1;
 824             }
 825             shift = strtol(vnetwork, &end, 10);
 826             if (*end != '\0') {
 827                 if (!inet_aton(vnetwork, &mask)) {
 828                     return -1;
 829                 }
 830             } else if (shift < 4 || shift > 32) {
 831                 return -1;
 832             } else {
 833                 mask.s_addr = htonl(0xffffffff << (32 - shift));
 834             }
 835         }
 836         net.s_addr &= mask.s_addr;
 837         host.s_addr = net.s_addr | (htonl(0x0202) & ~mask.s_addr);
 838         dhcp.s_addr = net.s_addr | (htonl(0x020f) & ~mask.s_addr);
 839         dns.s_addr  = net.s_addr | (htonl(0x0203) & ~mask.s_addr);
 840     }
 841
 842     if (vhost && !inet_aton(vhost, &host)) {
 843         return -1;
 844     }
 845     if ((host.s_addr & mask.s_addr) != net.s_addr) {
 846         return -1;
 847     }
 848
 849     if (vdhcp_start && !inet_aton(vdhcp_start, &dhcp)) {
 850         return -1;
 851     }
 852     if ((dhcp.s_addr & mask.s_addr) != net.s_addr ||
 853         dhcp.s_addr == host.s_addr || dhcp.s_addr == dns.s_addr) {
 854         return -1;
 855     }
 856
 857     if (vnameserver && !inet_aton(vnameserver, &dns)) {
 858         return -1;
 859     }
 860     if ((dns.s_addr & mask.s_addr) != net.s_addr ||
 861         dns.s_addr == host.s_addr) {
 862         return -1;
 863     }
 864
 865 #ifndef _WIN32
 866     if (vsmbserver && !inet_aton(vsmbserver, &smbsrv)) {
 867         return -1;
 868     }
 869 #endif
 870
 871     s = qemu_mallocz(sizeof(SlirpState));
 872     s->slirp = slirp_init(restricted, net, mask, host, vhostname,
 873                           tftp_export, bootfile, dhcp, dns, s);
 874     TAILQ_INSERT_TAIL(&slirp_stacks, s, entry);
 875
 876     while (slirp_configs) {
 877         struct slirp_config_str *config = slirp_configs;
 878
 879         if (config->flags & SLIRP_CFG_HOSTFWD) {
 880             slirp_hostfwd(s, mon, config->str,
 881                           config->flags & SLIRP_CFG_LEGACY);
 882         } else {
 883             slirp_guestfwd(s, mon, config->str,
 884                            config->flags & SLIRP_CFG_LEGACY);
 885         }
 886         slirp_configs = config->next;
 887         qemu_free(config);
 888     }
 889 #ifndef _WIN32
 890     if (!smb_export) {
 891         smb_export = legacy_smb_export;
 892     }
 893     if (smb_export) {
 894         slirp_smb(s, mon, smb_export, smbsrv);
 895     }
 896 #endif
 897
 898     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, slirp_receive, NULL,
 899                                  net_slirp_cleanup, s);
 900     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
 901              "net=%s, restricted=%c", inet_ntoa(net), restricted ? 'y' : 'n');
 902     return 0;
 903 }
 904
 905 static SlirpState *slirp_lookup(Monitor *mon, const char *vlan,
 906                                 const char *stack)
 907 {
 908     VLANClientState *vc;
 909
 910     if (vlan) {
 911         vc = qemu_find_vlan_client_by_name(mon, strtol(vlan, NULL, 0), stack);
 912         if (!vc) {
 913             return NULL;
 914         }
 915         if (strcmp(vc->model, "user")) {
 916             monitor_printf(mon, "invalid device specified\n");
 917             return NULL;
 918         }
 919         return vc->opaque;
 920     } else {
 921         if (TAILQ_EMPTY(&slirp_stacks)) {
 922             monitor_printf(mon, "user mode network stack not in use\n");
 923             return NULL;
 924         }
 925         return TAILQ_FIRST(&slirp_stacks);
 926     }
 927 }
 928
 929 void net_slirp_hostfwd_remove(Monitor *mon, const char *arg1,
 930                               const char *arg2, const char *arg3)
 931 {
 932     struct in_addr host_addr = { .s_addr = INADDR_ANY };
 933     int host_port;
 934     char buf[256] = "";
 935     const char *src_str, *p;
 936     SlirpState *s;
 937     int is_udp = 0;
 938     int err;
 939
 940     if (arg2) {
 941         s = slirp_lookup(mon, arg1, arg2);
 942         src_str = arg3;
 943     } else {
 944         s = slirp_lookup(mon, NULL, NULL);
 945         src_str = arg1;
 946     }
 947     if (!s) {
 948         return;
 949     }
 950
 951     if (!src_str || !src_str[0])
 952         goto fail_syntax;
 953
 954     p = src_str;
 955     get_str_sep(buf, sizeof(buf), &p, ':');
 956
 957     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 958         is_udp = 0;
 959     } else if (!strcmp(buf, "udp")) {
 960         is_udp = 1;
 961     } else {
 962         goto fail_syntax;
 963     }
 964
 965     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 966         goto fail_syntax;
 967     }
 968     if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
 969         goto fail_syntax;
 970     }
 971
 972     host_port = atoi(p);
 973
 974     err = slirp_remove_hostfwd(TAILQ_FIRST(&slirp_stacks)->slirp, is_udp,
 975                                host_addr, host_port);
 976
 977     monitor_printf(mon, "host forwarding rule for %s %s\n", src_str,
 978                    err ? "removed" : "not found");
 979     return;
 980
 981  fail_syntax:
 982     monitor_printf(mon, "invalid format\n");
 983 }
 984
 985 static void slirp_hostfwd(SlirpState *s, Monitor *mon, const char *redir_str,
 986                           int legacy_format)
 987 {
 988     struct in_addr host_addr = { .s_addr = INADDR_ANY };
 989     struct in_addr guest_addr = { .s_addr = 0 };
 990     int host_port, guest_port;
 991     const char *p;
 992     char buf[256];
 993     int is_udp;
 994     char *end;
 995
 996     p = redir_str;
 997     if (!p || get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 998         goto fail_syntax;
 999     }
1000     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
1001         is_udp = 0;
1002     } else if (!strcmp(buf, "udp")) {
1003         is_udp = 1;
1004     } else {
1005         goto fail_syntax;
1006     }
1007
1008     if (!legacy_format) {
1009         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1010             goto fail_syntax;
1011         }
1012         if (buf[0] != '\0' && !inet_aton(buf, &host_addr)) {
1013             goto fail_syntax;
1014         }
1015     }
1016
1017     if (get_str_sep(buf, sizeof(buf), &p, legacy_format ? ':' : '-') < 0) {
1018         goto fail_syntax;
1019     }
1020     host_port = strtol(buf, &end, 0);
1021     if (*end != '\0' || host_port < 1 || host_port > 65535) {
1022         goto fail_syntax;
1023     }
1024
1025     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1026         goto fail_syntax;
1027     }
1028     if (buf[0] != '\0' && !inet_aton(buf, &guest_addr)) {
1029         goto fail_syntax;
1030     }
1031
1032     guest_port = strtol(p, &end, 0);
1033     if (*end != '\0' || guest_port < 1 || guest_port > 65535) {
1034         goto fail_syntax;
1035     }
1036
1037     if (slirp_add_hostfwd(s->slirp, is_udp, host_addr, host_port, guest_addr,
1038                           guest_port) < 0) {
1039         config_error(mon, "could not set up host forwarding rule '%s'\n",
1040                      redir_str);
1041     }
1042     return;
1043
1044  fail_syntax:
1045     config_error(mon, "invalid host forwarding rule '%s'\n", redir_str);
1046 }
1047
1048 void net_slirp_hostfwd_add(Monitor *mon, const char *arg1,
1049                            const char *arg2, const char *arg3)
1050 {
1051     const char *redir_str;
1052     SlirpState *s;
1053
1054     if (arg2) {
1055         s = slirp_lookup(mon, arg1, arg2);
1056         redir_str = arg3;
1057     } else {
1058         s = slirp_lookup(mon, NULL, NULL);
1059         redir_str = arg1;
1060     }
1061     if (s) {
1062         slirp_hostfwd(s, mon, redir_str, 0);
1063     }
1064
1065 }
1066
1067 void net_slirp_redir(const char *redir_str)
1068 {
1069     struct slirp_config_str *config;
1070
1071     if (TAILQ_EMPTY(&slirp_stacks)) {
1072         config = qemu_malloc(sizeof(*config));
1073         pstrcpy(config->str, sizeof(config->str), redir_str);
1074         config->flags = SLIRP_CFG_HOSTFWD | SLIRP_CFG_LEGACY;
1075         config->next = slirp_configs;
1076         slirp_configs = config;
1077         return;
1078     }
1079
1080     slirp_hostfwd(TAILQ_FIRST(&slirp_stacks), NULL, redir_str, 1);
1081 }
1082
1083 #ifndef _WIN32
1084
1085 /* automatic user mode samba server configuration */
1086 static void slirp_smb_cleanup(SlirpState *s)
1087 {
1088     char cmd[128];
1089
1090     if (s->smb_dir[0] != '\0') {
1091         snprintf(cmd, sizeof(cmd), "rm -rf %s", s->smb_dir);
1092         system(cmd);
1093         s->smb_dir[0] = '\0';
1094     }
1095 }
1096
1097 static void slirp_smb(SlirpState* s, Monitor *mon, const char *exported_dir,
1098                       struct in_addr vserver_addr)
1099 {
1100     static int instance;
1101     char smb_conf[128];
1102     char smb_cmdline[128];
1103     FILE *f;
1104
1105     snprintf(s->smb_dir, sizeof(s->smb_dir), "/tmp/qemu-smb.%ld-%d",
1106              (long)getpid(), instance++);
1107     if (mkdir(s->smb_dir, 0700) < 0) {
1108         config_error(mon, "could not create samba server dir '%s'\n",
1109                      s->smb_dir);
1110         return;
1111     }
1112     snprintf(smb_conf, sizeof(smb_conf), "%s/%s", s->smb_dir, "smb.conf");
1113
1114     f = fopen(smb_conf, "w");
1115     if (!f) {
1116         slirp_smb_cleanup(s);
1117         config_error(mon, "could not create samba server "
1118                      "configuration file '%s'\n", smb_conf);
1119         return;
1120     }
1121     fprintf(f,
1122             "[global]\n"
1123             "private dir=%s\n"
1124             "smb ports=0\n"
1125             "socket address=127.0.0.1\n"
1126             "pid directory=%s\n"
1127             "lock directory=%s\n"
1128             "log file=%s/log.smbd\n"
1129             "smb passwd file=%s/smbpasswd\n"
1130             "security = share\n"
1131             "[qemu]\n"
1132             "path=%s\n"
1133             "read only=no\n"
1134             "guest ok=yes\n",
1135             s->smb_dir,
1136             s->smb_dir,
1137             s->smb_dir,
1138             s->smb_dir,
1139             s->smb_dir,
1140             exported_dir
1141             );
1142     fclose(f);
1143
1144     snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
1145              SMBD_COMMAND, smb_conf);
1146
1147     if (slirp_add_exec(s->slirp, 0, smb_cmdline, &vserver_addr, 139) < 0) {
1148         slirp_smb_cleanup(s);
1149         config_error(mon, "conflicting/invalid smbserver address\n");
1150     }
1151 }
1152
1153 /* automatic user mode samba server configuration (legacy interface) */
1154 void net_slirp_smb(const char *exported_dir)
1155 {
1156     struct in_addr vserver_addr = { .s_addr = 0 };
1157
1158     if (legacy_smb_export) {
1159         fprintf(stderr, "-smb given twice\n");
1160         exit(1);
1161     }
1162     legacy_smb_export = exported_dir;
1163     if (!TAILQ_EMPTY(&slirp_stacks)) {
1164         slirp_smb(TAILQ_FIRST(&slirp_stacks), NULL, exported_dir,
1165                   vserver_addr);
1166     }
1167 }
1168
1169 #endif /* !defined(_WIN32) */
1170
1171 struct GuestFwd {
1172     CharDriverState *hd;
1173     struct in_addr server;
1174     int port;
1175     Slirp *slirp;
1176 };
1177
1178 static int guestfwd_can_read(void *opaque)
1179 {
1180     struct GuestFwd *fwd = opaque;
1181     return slirp_socket_can_recv(fwd->slirp, fwd->server, fwd->port);
1182 }
1183
1184 static void guestfwd_read(void *opaque, const uint8_t *buf, int size)
1185 {
1186     struct GuestFwd *fwd = opaque;
1187     slirp_socket_recv(fwd->slirp, fwd->server, fwd->port, buf, size);
1188 }
1189
1190 static void slirp_guestfwd(SlirpState *s, Monitor *mon, const char *config_str,
1191                            int legacy_format)
1192 {
1193     struct in_addr server = { .s_addr = 0 };
1194     struct GuestFwd *fwd;
1195     const char *p;
1196     char buf[128];
1197     char *end;
1198     int port;
1199
1200     p = config_str;
1201     if (legacy_format) {
1202         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1203             goto fail_syntax;
1204         }
1205     } else {
1206         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1207             goto fail_syntax;
1208         }
1209         if (strcmp(buf, "tcp") && buf[0] != '\0') {
1210             goto fail_syntax;
1211         }
1212         if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
1213             goto fail_syntax;
1214         }
1215         if (buf[0] != '\0' && !inet_aton(buf, &server)) {
1216             goto fail_syntax;
1217         }
1218         if (get_str_sep(buf, sizeof(buf), &p, '-') < 0) {
1219             goto fail_syntax;
1220         }
1221     }
1222     port = strtol(buf, &end, 10);
1223     if (*end != '\0' || port < 1 || port > 65535) {
1224         goto fail_syntax;
1225     }
1226
1227     fwd = qemu_malloc(sizeof(struct GuestFwd));
1228     snprintf(buf, sizeof(buf), "guestfwd.tcp:%d", port);
1229     fwd->hd = qemu_chr_open(buf, p, NULL);
1230     if (!fwd->hd) {
1231         config_error(mon, "could not open guest forwarding device '%s'\n",
1232                      buf);
1233         qemu_free(fwd);
1234         return;
1235     }
1236
1237     if (slirp_add_exec(s->slirp, 3, fwd->hd, &server, port) < 0) {
1238         config_error(mon, "conflicting/invalid host:port in guest forwarding "
1239                      "rule '%s'\n", config_str);
1240         qemu_free(fwd);
1241         return;
1242     }
1243     fwd->server = server;
1244     fwd->port = port;
1245     fwd->slirp = s->slirp;
1246
1247     qemu_chr_add_handlers(fwd->hd, guestfwd_can_read, guestfwd_read,
1248                           NULL, fwd);
1249     return;
1250
1251  fail_syntax:
1252     config_error(mon, "invalid guest forwarding rule '%s'\n", config_str);
1253 }
1254
1255 void do_info_usernet(Monitor *mon)
1256 {
1257     SlirpState *s;
1258
1259     TAILQ_FOREACH(s, &slirp_stacks, entry) {
1260         monitor_printf(mon, "VLAN %d (%s):\n", s->vc->vlan->id, s->vc->name);
1261         slirp_connection_info(s->slirp, mon);
1262     }
1263 }
1264
1265 #endif /* CONFIG_SLIRP */
1266
1267 #if !defined(_WIN32)
1268
1269 typedef struct TAPState {
1270     VLANClientState *vc;
1271     int fd;
1272     char down_script[1024];
1273     char down_script_arg[128];
1274     uint8_t buf[4096];
1275     unsigned int read_poll : 1;
1276     unsigned int write_poll : 1;
1277 } TAPState;
1278
1279 static int launch_script(const char *setup_script, const char *ifname, int fd);
1280
1281 static int tap_can_send(void *opaque);
1282 static void tap_send(void *opaque);
1283 static void tap_writable(void *opaque);
1284
1285 static void tap_update_fd_handler(TAPState *s)
1286 {
1287     qemu_set_fd_handler2(s->fd,
1288                          s->read_poll  ? tap_can_send : NULL,
1289                          s->read_poll  ? tap_send     : NULL,
1290                          s->write_poll ? tap_writable : NULL,
1291                          s);
1292 }
1293
1294 static void tap_read_poll(TAPState *s, int enable)
1295 {
1296     s->read_poll = !!enable;
1297     tap_update_fd_handler(s);
1298 }
1299
1300 static void tap_write_poll(TAPState *s, int enable)
1301 {
1302     s->write_poll = !!enable;
1303     tap_update_fd_handler(s);
1304 }
1305
1306 static void tap_writable(void *opaque)
1307 {
1308     TAPState *s = opaque;
1309
1310     tap_write_poll(s, 0);
1311
1312     qemu_flush_queued_packets(s->vc);
1313 }
1314
1315 static ssize_t tap_receive_iov(VLANClientState *vc, const struct iovec *iov,
1316                                int iovcnt)
1317 {
1318     TAPState *s = vc->opaque;
1319     ssize_t len;
1320
1321     do {
1322         len = writev(s->fd, iov, iovcnt);
1323     } while (len == -1 && errno == EINTR);
1324
1325     if (len == -1 && errno == EAGAIN) {
1326         tap_write_poll(s, 1);
1327         return 0;
1328     }
1329
1330     return len;
1331 }
1332
1333 static ssize_t tap_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1334 {
1335     TAPState *s = vc->opaque;
1336     ssize_t len;
1337
1338     do {
1339         len = write(s->fd, buf, size);
1340     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
1341
1342     return len;
1343 }
1344
1345 static int tap_can_send(void *opaque)
1346 {
1347     TAPState *s = opaque;
1348
1349     return qemu_can_send_packet(s->vc);
1350 }
1351
1352 #ifdef __sun__
1353 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1354 {
1355     struct strbuf sbuf;
1356     int f = 0;
1357
1358     sbuf.maxlen = maxlen;
1359     sbuf.buf = (char *)buf;
1360
1361     return getmsg(tapfd, NULL, &sbuf, &f) >= 0 ? sbuf.len : -1;
1362 }
1363 #else
1364 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
1365 {
1366     return read(tapfd, buf, maxlen);
1367 }
1368 #endif
1369
1370 static void tap_send_completed(VLANClientState *vc, ssize_t len)
1371 {
1372     TAPState *s = vc->opaque;
1373     tap_read_poll(s, 1);
1374 }
1375
1376 static void tap_send(void *opaque)
1377 {
1378     TAPState *s = opaque;
1379     int size;
1380
1381     do {
1382         size = tap_read_packet(s->fd, s->buf, sizeof(s->buf));
1383         if (size <= 0) {
1384             break;
1385         }
1386
1387         size = qemu_send_packet_async(s->vc, s->buf, size, tap_send_completed);
1388         if (size == 0) {
1389             tap_read_poll(s, 0);
1390         }
1391     } while (size > 0);
1392 }
1393
1394 #ifdef TUNSETSNDBUF
1395 /* sndbuf should be set to a value lower than the tx queue
1396  * capacity of any destination network interface.
1397  * Ethernet NICs generally have txqueuelen=1000, so 1Mb is
1398  * a good default, given a 1500 byte MTU.
1399  */
1400 #define TAP_DEFAULT_SNDBUF 1024*1024
1401
1402 static void tap_set_sndbuf(TAPState *s, const char *sndbuf_str, Monitor *mon)
1403 {
1404     int sndbuf = TAP_DEFAULT_SNDBUF;
1405
1406     if (sndbuf_str) {
1407         sndbuf = atoi(sndbuf_str);
1408     }
1409
1410     if (!sndbuf) {
1411         sndbuf = INT_MAX;
1412     }
1413
1414     if (ioctl(s->fd, TUNSETSNDBUF, &sndbuf) == -1 && sndbuf_str) {
1415         config_error(mon, "TUNSETSNDBUF ioctl failed: %s\n",
1416                      strerror(errno));
1417     }
1418 }
1419 #else
1420 static void tap_set_sndbuf(TAPState *s, const char *sndbuf_str, Monitor *mon)
1421 {
1422     if (sndbuf_str) {
1423         config_error(mon, "No '-net tap,sndbuf=<nbytes>' support available\n");
1424     }
1425 }
1426 #endif /* TUNSETSNDBUF */
1427
1428 static void tap_cleanup(VLANClientState *vc)
1429 {
1430     TAPState *s = vc->opaque;
1431
1432     qemu_purge_queued_packets(vc);
1433
1434     if (s->down_script[0])
1435         launch_script(s->down_script, s->down_script_arg, s->fd);
1436
1437     tap_read_poll(s, 0);
1438     tap_write_poll(s, 0);
1439     close(s->fd);
1440     qemu_free(s);
1441 }
1442
1443 /* fd support */
1444
1445 static TAPState *net_tap_fd_init(VLANState *vlan,
1446                                  const char *model,
1447                                  const char *name,
1448                                  int fd)
1449 {
1450     TAPState *s;
1451
1452     s = qemu_mallocz(sizeof(TAPState));
1453     s->fd = fd;
1454     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, tap_receive,
1455                                  tap_receive_iov, tap_cleanup, s);
1456     tap_read_poll(s, 1);
1457     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "fd=%d", fd);
1458     return s;
1459 }
1460
1461 #if defined (HOST_BSD) || defined (__FreeBSD_kernel__)
1462 static int tap_open(char *ifname, int ifname_size)
1463 {
1464     int fd;
1465     char *dev;
1466     struct stat s;
1467
1468     TFR(fd = open("/dev/tap", O_RDWR));
1469     if (fd < 0) {
1470         fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
1471         return -1;
1472     }
1473
1474     fstat(fd, &s);
1475     dev = devname(s.st_rdev, S_IFCHR);
1476     pstrcpy(ifname, ifname_size, dev);
1477
1478     fcntl(fd, F_SETFL, O_NONBLOCK);
1479     return fd;
1480 }
1481 #elif defined(__sun__)
1482 #define TUNNEWPPA       (('T'<<16) | 0x0001)
1483 /*
1484  * Allocate TAP device, returns opened fd.
1485  * Stores dev name in the first arg(must be large enough).
1486  */
1487 static int tap_alloc(char *dev, size_t dev_size)
1488 {
1489     int tap_fd, if_fd, ppa = -1;
1490     static int ip_fd = 0;
1491     char *ptr;
1492
1493     static int arp_fd = 0;
1494     int ip_muxid, arp_muxid;
1495     struct strioctl  strioc_if, strioc_ppa;
1496     int link_type = I_PLINK;;
1497     struct lifreq ifr;
1498     char actual_name[32] = "";
1499
1500     memset(&ifr, 0x0, sizeof(ifr));
1501
1502     if( *dev ){
1503        ptr = dev;
1504        while( *ptr && !qemu_isdigit((int)*ptr) ) ptr++;
1505        ppa = atoi(ptr);
1506     }
1507
1508     /* Check if IP device was opened */
1509     if( ip_fd )
1510        close(ip_fd);
1511
1512     TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
1513     if (ip_fd < 0) {
1514        syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
1515        return -1;
1516     }
1517
1518     TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
1519     if (tap_fd < 0) {
1520        syslog(LOG_ERR, "Can't open /dev/tap");
1521        return -1;
1522     }
1523
1524     /* Assign a new PPA and get its unit number. */
1525     strioc_ppa.ic_cmd = TUNNEWPPA;
1526     strioc_ppa.ic_timout = 0;
1527     strioc_ppa.ic_len = sizeof(ppa);
1528     strioc_ppa.ic_dp = (char *)&ppa;
1529     if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
1530        syslog (LOG_ERR, "Can't assign new interface");
1531
1532     TFR(if_fd = open("/dev/tap", O_RDWR, 0));
1533     if (if_fd < 0) {
1534        syslog(LOG_ERR, "Can't open /dev/tap (2)");
1535        return -1;
1536     }
1537     if(ioctl(if_fd, I_PUSH, "ip") < 0){
1538        syslog(LOG_ERR, "Can't push IP module");
1539        return -1;
1540     }
1541
1542     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
1543         syslog(LOG_ERR, "Can't get flags\n");
1544
1545     snprintf (actual_name, 32, "tap%d", ppa);
1546     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1547
1548     ifr.lifr_ppa = ppa;
1549     /* Assign ppa according to the unit number returned by tun device */
1550
1551     if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
1552         syslog (LOG_ERR, "Can't set PPA %d", ppa);
1553     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
1554         syslog (LOG_ERR, "Can't get flags\n");
1555     /* Push arp module to if_fd */
1556     if (ioctl (if_fd, I_PUSH, "arp") < 0)
1557         syslog (LOG_ERR, "Can't push ARP module (2)");
1558
1559     /* Push arp module to ip_fd */
1560     if (ioctl (ip_fd, I_POP, NULL) < 0)
1561         syslog (LOG_ERR, "I_POP failed\n");
1562     if (ioctl (ip_fd, I_PUSH, "arp") < 0)
1563         syslog (LOG_ERR, "Can't push ARP module (3)\n");
1564     /* Open arp_fd */
1565     TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
1566     if (arp_fd < 0)
1567        syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
1568
1569     /* Set ifname to arp */
1570     strioc_if.ic_cmd = SIOCSLIFNAME;
1571     strioc_if.ic_timout = 0;
1572     strioc_if.ic_len = sizeof(ifr);
1573     strioc_if.ic_dp = (char *)&ifr;
1574     if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
1575         syslog (LOG_ERR, "Can't set ifname to arp\n");
1576     }
1577
1578     if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
1579        syslog(LOG_ERR, "Can't link TAP device to IP");
1580        return -1;
1581     }
1582
1583     if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
1584         syslog (LOG_ERR, "Can't link TAP device to ARP");
1585
1586     close (if_fd);
1587
1588     memset(&ifr, 0x0, sizeof(ifr));
1589     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1590     ifr.lifr_ip_muxid  = ip_muxid;
1591     ifr.lifr_arp_muxid = arp_muxid;
1592
1593     if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
1594     {
1595       ioctl (ip_fd, I_PUNLINK , arp_muxid);
1596       ioctl (ip_fd, I_PUNLINK, ip_muxid);
1597       syslog (LOG_ERR, "Can't set multiplexor id");
1598     }
1599
1600     snprintf(dev, dev_size, "tap%d", ppa);
1601     return tap_fd;
1602 }
1603
1604 static int tap_open(char *ifname, int ifname_size)
1605 {
1606     char  dev[10]="";
1607     int fd;
1608     if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
1609        fprintf(stderr, "Cannot allocate TAP device\n");
1610        return -1;
1611     }
1612     pstrcpy(ifname, ifname_size, dev);
1613     fcntl(fd, F_SETFL, O_NONBLOCK);
1614     return fd;
1615 }
1616 #elif defined (_AIX)
1617 static int tap_open(char *ifname, int ifname_size)
1618 {
1619     fprintf (stderr, "no tap on AIX\n");
1620     return -1;
1621 }
1622 #else
1623 static int tap_open(char *ifname, int ifname_size)
1624 {
1625     struct ifreq ifr;
1626     int fd, ret;
1627
1628     TFR(fd = open("/dev/net/tun", O_RDWR));
1629     if (fd < 0) {
1630         fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1631         return -1;
1632     }
1633     memset(&ifr, 0, sizeof(ifr));
1634     ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
1635     if (ifname[0] != '\0')
1636         pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
1637     else
1638         pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
1639     ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
1640     if (ret != 0) {
1641         fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1642         close(fd);
1643         return -1;
1644     }
1645     pstrcpy(ifname, ifname_size, ifr.ifr_name);
1646     fcntl(fd, F_SETFL, O_NONBLOCK);
1647     return fd;
1648 }
1649 #endif
1650
1651 static int launch_script(const char *setup_script, const char *ifname, int fd)
1652 {
1653     sigset_t oldmask, mask;
1654     int pid, status;
1655     char *args[3];
1656     char **parg;
1657
1658     sigemptyset(&mask);
1659     sigaddset(&mask, SIGCHLD);
1660     sigprocmask(SIG_BLOCK, &mask, &oldmask);
1661
1662     /* try to launch network script */
1663     pid = fork();
1664     if (pid == 0) {
1665         int open_max = sysconf(_SC_OPEN_MAX), i;
1666
1667         for (i = 0; i < open_max; i++) {
1668             if (i != STDIN_FILENO &&
1669                 i != STDOUT_FILENO &&
1670                 i != STDERR_FILENO &&
1671                 i != fd) {
1672                 close(i);
1673             }
1674         }
1675         parg = args;
1676         *parg++ = (char *)setup_script;
1677         *parg++ = (char *)ifname;
1678         *parg++ = NULL;
1679         execv(setup_script, args);
1680         _exit(1);
1681     } else if (pid > 0) {
1682         while (waitpid(pid, &status, 0) != pid) {
1683             /* loop */
1684         }
1685         sigprocmask(SIG_SETMASK, &oldmask, NULL);
1686
1687         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
1688             return 0;
1689         }
1690     }
1691     fprintf(stderr, "%s: could not launch network script\n", setup_script);
1692     return -1;
1693 }
1694
1695 static TAPState *net_tap_init(VLANState *vlan, const char *model,
1696                               const char *name, const char *ifname1,
1697                               const char *setup_script, const char *down_script)
1698 {
1699     TAPState *s;
1700     int fd;
1701     char ifname[128];
1702
1703     if (ifname1 != NULL)
1704         pstrcpy(ifname, sizeof(ifname), ifname1);
1705     else
1706         ifname[0] = '\0';
1707     TFR(fd = tap_open(ifname, sizeof(ifname)));
1708     if (fd < 0)
1709         return NULL;
1710
1711     if (!setup_script || !strcmp(setup_script, "no"))
1712         setup_script = "";
1713     if (setup_script[0] != '\0' &&
1714         launch_script(setup_script, ifname, fd)) {
1715         return NULL;
1716     }
1717     s = net_tap_fd_init(vlan, model, name, fd);
1718     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1719              "ifname=%s,script=%s,downscript=%s",
1720              ifname, setup_script, down_script);
1721     if (down_script && strcmp(down_script, "no")) {
1722         snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
1723         snprintf(s->down_script_arg, sizeof(s->down_script_arg), "%s", ifname);
1724     }
1725     return s;
1726 }
1727
1728 #endif /* !_WIN32 */
1729
1730 #if defined(CONFIG_VDE)
1731 typedef struct VDEState {
1732     VLANClientState *vc;
1733     VDECONN *vde;
1734 } VDEState;
1735
1736 static void vde_to_qemu(void *opaque)
1737 {
1738     VDEState *s = opaque;
1739     uint8_t buf[4096];
1740     int size;
1741
1742     size = vde_recv(s->vde, (char *)buf, sizeof(buf), 0);
1743     if (size > 0) {
1744         qemu_send_packet(s->vc, buf, size);
1745     }
1746 }
1747
1748 static ssize_t vde_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1749 {
1750     VDEState *s = vc->opaque;
1751     ssize_t ret;
1752
1753     do {
1754       ret = vde_send(s->vde, (const char *)buf, size, 0);
1755     } while (ret < 0 && errno == EINTR);
1756
1757     return ret;
1758 }
1759
1760 static void vde_cleanup(VLANClientState *vc)
1761 {
1762     VDEState *s = vc->opaque;
1763     qemu_set_fd_handler(vde_datafd(s->vde), NULL, NULL, NULL);
1764     vde_close(s->vde);
1765     qemu_free(s);
1766 }
1767
1768 static int net_vde_init(VLANState *vlan, const char *model,
1769                         const char *name, const char *sock,
1770                         int port, const char *group, int mode)
1771 {
1772     VDEState *s;
1773     char *init_group = strlen(group) ? (char *)group : NULL;
1774     char *init_sock = strlen(sock) ? (char *)sock : NULL;
1775
1776     struct vde_open_args args = {
1777         .port = port,
1778         .group = init_group,
1779         .mode = mode,
1780     };
1781
1782     s = qemu_mallocz(sizeof(VDEState));
1783     s->vde = vde_open(init_sock, (char *)"QEMU", &args);
1784     if (!s->vde){
1785         free(s);
1786         return -1;
1787     }
1788     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, vde_receive,
1789                                  NULL, vde_cleanup, s);
1790     qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
1791     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "sock=%s,fd=%d",
1792              sock, vde_datafd(s->vde));
1793     return 0;
1794 }
1795 #endif
1796
1797 /* network connection */
1798 typedef struct NetSocketState {
1799     VLANClientState *vc;
1800     int fd;
1801     int state; /* 0 = getting length, 1 = getting data */
1802     unsigned int index;
1803     unsigned int packet_len;
1804     uint8_t buf[4096];
1805     struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
1806 } NetSocketState;
1807
1808 typedef struct NetSocketListenState {
1809     VLANState *vlan;
1810     char *model;
1811     char *name;
1812     int fd;
1813 } NetSocketListenState;
1814
1815 /* XXX: we consider we can send the whole packet without blocking */
1816 static ssize_t net_socket_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1817 {
1818     NetSocketState *s = vc->opaque;
1819     uint32_t len;
1820     len = htonl(size);
1821
1822     send_all(s->fd, (const uint8_t *)&len, sizeof(len));
1823     return send_all(s->fd, buf, size);
1824 }
1825
1826 static ssize_t net_socket_receive_dgram(VLANClientState *vc, const uint8_t *buf, size_t size)
1827 {
1828     NetSocketState *s = vc->opaque;
1829
1830     return sendto(s->fd, (const void *)buf, size, 0,
1831                   (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
1832 }
1833
1834 static void net_socket_send(void *opaque)
1835 {
1836     NetSocketState *s = opaque;
1837     int size, err;
1838     unsigned l;
1839     uint8_t buf1[4096];
1840     const uint8_t *buf;
1841
1842     size = recv(s->fd, (void *)buf1, sizeof(buf1), 0);
1843     if (size < 0) {
1844         err = socket_error();
1845         if (err != EWOULDBLOCK)
1846             goto eoc;
1847     } else if (size == 0) {
1848         /* end of connection */
1849     eoc:
1850         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1851         closesocket(s->fd);
1852         return;
1853     }
1854     buf = buf1;
1855     while (size > 0) {
1856         /* reassemble a packet from the network */
1857         switch(s->state) {
1858         case 0:
1859             l = 4 - s->index;
1860             if (l > size)
1861                 l = size;
1862             memcpy(s->buf + s->index, buf, l);
1863             buf += l;
1864             size -= l;
1865             s->index += l;
1866             if (s->index == 4) {
1867                 /* got length */
1868                 s->packet_len = ntohl(*(uint32_t *)s->buf);
1869                 s->index = 0;
1870                 s->state = 1;
1871             }
1872             break;
1873         case 1:
1874             l = s->packet_len - s->index;
1875             if (l > size)
1876                 l = size;
1877             if (s->index + l <= sizeof(s->buf)) {
1878                 memcpy(s->buf + s->index, buf, l);
1879             } else {
1880                 fprintf(stderr, "serious error: oversized packet received,"
1881                     "connection terminated.\n");
1882                 s->state = 0;
1883                 goto eoc;
1884             }
1885
1886             s->index += l;
1887             buf += l;
1888             size -= l;
1889             if (s->index >= s->packet_len) {
1890                 qemu_send_packet(s->vc, s->buf, s->packet_len);
1891                 s->index = 0;
1892                 s->state = 0;
1893             }
1894             break;
1895         }
1896     }
1897 }
1898
1899 static void net_socket_send_dgram(void *opaque)
1900 {
1901     NetSocketState *s = opaque;
1902     int size;
1903
1904     size = recv(s->fd, (void *)s->buf, sizeof(s->buf), 0);
1905     if (size < 0)
1906         return;
1907     if (size == 0) {
1908         /* end of connection */
1909         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1910         return;
1911     }
1912     qemu_send_packet(s->vc, s->buf, size);
1913 }
1914
1915 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
1916 {
1917     struct ip_mreq imr;
1918     int fd;
1919     int val, ret;
1920     if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
1921         fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
1922                 inet_ntoa(mcastaddr->sin_addr),
1923                 (int)ntohl(mcastaddr->sin_addr.s_addr));
1924         return -1;
1925
1926     }
1927     fd = socket(PF_INET, SOCK_DGRAM, 0);
1928     if (fd < 0) {
1929         perror("socket(PF_INET, SOCK_DGRAM)");
1930         return -1;
1931     }
1932
1933     val = 1;
1934     ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
1935                    (const char *)&val, sizeof(val));
1936     if (ret < 0) {
1937         perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
1938         goto fail;
1939     }
1940
1941     ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
1942     if (ret < 0) {
1943         perror("bind");
1944         goto fail;
1945     }
1946
1947     /* Add host to multicast group */
1948     imr.imr_multiaddr = mcastaddr->sin_addr;
1949     imr.imr_interface.s_addr = htonl(INADDR_ANY);
1950
1951     ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
1952                      (const char *)&imr, sizeof(struct ip_mreq));
1953     if (ret < 0) {
1954         perror("setsockopt(IP_ADD_MEMBERSHIP)");
1955         goto fail;
1956     }
1957
1958     /* Force mcast msgs to loopback (eg. several QEMUs in same host */
1959     val = 1;
1960     ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
1961                    (const char *)&val, sizeof(val));
1962     if (ret < 0) {
1963         perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
1964         goto fail;
1965     }
1966
1967     socket_set_nonblock(fd);
1968     return fd;
1969 fail:
1970     if (fd >= 0)
1971         closesocket(fd);
1972     return -1;
1973 }
1974
1975 static void net_socket_cleanup(VLANClientState *vc)
1976 {
1977     NetSocketState *s = vc->opaque;
1978     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1979     close(s->fd);
1980     qemu_free(s);
1981 }
1982
1983 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan,
1984                                                 const char *model,
1985                                                 const char *name,
1986                                                 int fd, int is_connected)
1987 {
1988     struct sockaddr_in saddr;
1989     int newfd;
1990     socklen_t saddr_len;
1991     NetSocketState *s;
1992
1993     /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
1994      * Because this may be "shared" socket from a "master" process, datagrams would be recv()
1995      * by ONLY ONE process: we must "clone" this dgram socket --jjo
1996      */
1997
1998     if (is_connected) {
1999         if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
2000             /* must be bound */
2001             if (saddr.sin_addr.s_addr==0) {
2002                 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
2003                         fd);
2004                 return NULL;
2005             }
2006             /* clone dgram socket */
2007             newfd = net_socket_mcast_create(&saddr);
2008             if (newfd < 0) {
2009                 /* error already reported by net_socket_mcast_create() */
2010                 close(fd);
2011                 return NULL;
2012             }
2013             /* clone newfd to fd, close newfd */
2014             dup2(newfd, fd);
2015             close(newfd);
2016
2017         } else {
2018             fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
2019                     fd, strerror(errno));
2020             return NULL;
2021         }
2022     }
2023
2024     s = qemu_mallocz(sizeof(NetSocketState));
2025     s->fd = fd;
2026
2027     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive_dgram,
2028                                  NULL, net_socket_cleanup, s);
2029     qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
2030
2031     /* mcast: save bound address as dst */
2032     if (is_connected) s->dgram_dst=saddr;
2033
2034     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2035             "socket: fd=%d (%s mcast=%s:%d)",
2036             fd, is_connected? "cloned" : "",
2037             inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2038     return s;
2039 }
2040
2041 static void net_socket_connect(void *opaque)
2042 {
2043     NetSocketState *s = opaque;
2044     qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
2045 }
2046
2047 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan,
2048                                                  const char *model,
2049                                                  const char *name,
2050                                                  int fd, int is_connected)
2051 {
2052     NetSocketState *s;
2053     s = qemu_mallocz(sizeof(NetSocketState));
2054     s->fd = fd;
2055     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive,
2056                                  NULL, net_socket_cleanup, s);
2057     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2058              "socket: fd=%d", fd);
2059     if (is_connected) {
2060         net_socket_connect(s);
2061     } else {
2062         qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
2063     }
2064     return s;
2065 }
2066
2067 static NetSocketState *net_socket_fd_init(VLANState *vlan,
2068                                           const char *model, const char *name,
2069                                           int fd, int is_connected)
2070 {
2071     int so_type=-1, optlen=sizeof(so_type);
2072
2073     if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
2074         (socklen_t *)&optlen)< 0) {
2075         fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
2076         return NULL;
2077     }
2078     switch(so_type) {
2079     case SOCK_DGRAM:
2080         return net_socket_fd_init_dgram(vlan, model, name, fd, is_connected);
2081     case SOCK_STREAM:
2082         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
2083     default:
2084         /* who knows ... this could be a eg. a pty, do warn and continue as stream */
2085         fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
2086         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
2087     }
2088     return NULL;
2089 }
2090
2091 static void net_socket_accept(void *opaque)
2092 {
2093     NetSocketListenState *s = opaque;
2094     NetSocketState *s1;
2095     struct sockaddr_in saddr;
2096     socklen_t len;
2097     int fd;
2098
2099     for(;;) {
2100         len = sizeof(saddr);
2101         fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
2102         if (fd < 0 && errno != EINTR) {
2103             return;
2104         } else if (fd >= 0) {
2105             break;
2106         }
2107     }
2108     s1 = net_socket_fd_init(s->vlan, s->model, s->name, fd, 1);
2109     if (!s1) {
2110         closesocket(fd);
2111     } else {
2112         snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
2113                  "socket: connection from %s:%d",
2114                  inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2115     }
2116 }
2117
2118 static int net_socket_listen_init(VLANState *vlan,
2119                                   const char *model,
2120                                   const char *name,
2121                                   const char *host_str)
2122 {
2123     NetSocketListenState *s;
2124     int fd, val, ret;
2125     struct sockaddr_in saddr;
2126
2127     if (parse_host_port(&saddr, host_str) < 0)
2128         return -1;
2129
2130     s = qemu_mallocz(sizeof(NetSocketListenState));
2131
2132     fd = socket(PF_INET, SOCK_STREAM, 0);
2133     if (fd < 0) {
2134         perror("socket");
2135         return -1;
2136     }
2137     socket_set_nonblock(fd);
2138
2139     /* allow fast reuse */
2140     val = 1;
2141     setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
2142
2143     ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
2144     if (ret < 0) {
2145         perror("bind");
2146         return -1;
2147     }
2148     ret = listen(fd, 0);
2149     if (ret < 0) {
2150         perror("listen");
2151         return -1;
2152     }
2153     s->vlan = vlan;
2154     s->model = strdup(model);
2155     s->name = name ? strdup(name) : NULL;
2156     s->fd = fd;
2157     qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
2158     return 0;
2159 }
2160
2161 static int net_socket_connect_init(VLANState *vlan,
2162                                    const char *model,
2163                                    const char *name,
2164                                    const char *host_str)
2165 {
2166     NetSocketState *s;
2167     int fd, connected, ret, err;
2168     struct sockaddr_in saddr;
2169
2170     if (parse_host_port(&saddr, host_str) < 0)
2171         return -1;
2172
2173     fd = socket(PF_INET, SOCK_STREAM, 0);
2174     if (fd < 0) {
2175         perror("socket");
2176         return -1;
2177     }
2178     socket_set_nonblock(fd);
2179
2180     connected = 0;
2181     for(;;) {
2182         ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
2183         if (ret < 0) {
2184             err = socket_error();
2185             if (err == EINTR || err == EWOULDBLOCK) {
2186             } else if (err == EINPROGRESS) {
2187                 break;
2188 #ifdef _WIN32
2189             } else if (err == WSAEALREADY) {
2190                 break;
2191 #endif
2192             } else {
2193                 perror("connect");
2194                 closesocket(fd);
2195                 return -1;
2196             }
2197         } else {
2198             connected = 1;
2199             break;
2200         }
2201     }
2202     s = net_socket_fd_init(vlan, model, name, fd, connected);
2203     if (!s)
2204         return -1;
2205     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2206              "socket: connect to %s:%d",
2207              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2208     return 0;
2209 }
2210
2211 static int net_socket_mcast_init(VLANState *vlan,
2212                                  const char *model,
2213                                  const char *name,
2214                                  const char *host_str)
2215 {
2216     NetSocketState *s;
2217     int fd;
2218     struct sockaddr_in saddr;
2219
2220     if (parse_host_port(&saddr, host_str) < 0)
2221         return -1;
2222
2223
2224     fd = net_socket_mcast_create(&saddr);
2225     if (fd < 0)
2226         return -1;
2227
2228     s = net_socket_fd_init(vlan, model, name, fd, 0);
2229     if (!s)
2230         return -1;
2231
2232     s->dgram_dst = saddr;
2233
2234     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2235              "socket: mcast=%s:%d",
2236              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2237     return 0;
2238
2239 }
2240
2241 typedef struct DumpState {
2242     VLANClientState *pcap_vc;
2243     int fd;
2244     int pcap_caplen;
2245 } DumpState;
2246
2247 #define PCAP_MAGIC 0xa1b2c3d4
2248
2249 struct pcap_file_hdr {
2250     uint32_t magic;
2251     uint16_t version_major;
2252     uint16_t version_minor;
2253     int32_t thiszone;
2254     uint32_t sigfigs;
2255     uint32_t snaplen;
2256     uint32_t linktype;
2257 };
2258
2259 struct pcap_sf_pkthdr {
2260     struct {
2261         int32_t tv_sec;
2262         int32_t tv_usec;
2263     } ts;
2264     uint32_t caplen;
2265     uint32_t len;
2266 };
2267
2268 static ssize_t dump_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
2269 {
2270     DumpState *s = vc->opaque;
2271     struct pcap_sf_pkthdr hdr;
2272     int64_t ts;
2273     int caplen;
2274
2275     /* Early return in case of previous error. */
2276     if (s->fd < 0) {
2277         return size;
2278     }
2279
2280     ts = muldiv64(qemu_get_clock(vm_clock), 1000000, ticks_per_sec);
2281     caplen = size > s->pcap_caplen ? s->pcap_caplen : size;
2282
2283     hdr.ts.tv_sec = ts / 1000000;
2284     hdr.ts.tv_usec = ts % 1000000;
2285     hdr.caplen = caplen;
2286     hdr.len = size;
2287     if (write(s->fd, &hdr, sizeof(hdr)) != sizeof(hdr) ||
2288         write(s->fd, buf, caplen) != caplen) {
2289         qemu_log("-net dump write error - stop dump\n");
2290         close(s->fd);
2291         s->fd = -1;
2292     }
2293
2294     return size;
2295 }
2296
2297 static void net_dump_cleanup(VLANClientState *vc)
2298 {
2299     DumpState *s = vc->opaque;
2300
2301     close(s->fd);
2302     qemu_free(s);
2303 }
2304
2305 static int net_dump_init(Monitor *mon, VLANState *vlan, const char *device,
2306                          const char *name, const char *filename, int len)
2307 {
2308     struct pcap_file_hdr hdr;
2309     DumpState *s;
2310
2311     s = qemu_malloc(sizeof(DumpState));
2312
2313     s->fd = open(filename, O_CREAT | O_WRONLY | O_BINARY, 0644);
2314     if (s->fd < 0) {
2315         config_error(mon, "-net dump: can't open %s\n", filename);
2316         return -1;
2317     }
2318
2319     s->pcap_caplen = len;
2320
2321     hdr.magic = PCAP_MAGIC;
2322     hdr.version_major = 2;
2323     hdr.version_minor = 4;
2324     hdr.thiszone = 0;
2325     hdr.sigfigs = 0;
2326     hdr.snaplen = s->pcap_caplen;
2327     hdr.linktype = 1;
2328
2329     if (write(s->fd, &hdr, sizeof(hdr)) < sizeof(hdr)) {
2330         config_error(mon, "-net dump write error: %s\n", strerror(errno));
2331         close(s->fd);
2332         qemu_free(s);
2333         return -1;
2334     }
2335
2336     s->pcap_vc = qemu_new_vlan_client(vlan, device, name, NULL, dump_receive, NULL,
2337                                       net_dump_cleanup, s);
2338     snprintf(s->pcap_vc->info_str, sizeof(s->pcap_vc->info_str),
2339              "dump to %s (len=%d)", filename, len);
2340     return 0;
2341 }
2342
2343 /* find or alloc a new VLAN */
2344 VLANState *qemu_find_vlan(int id, int allocate)
2345 {
2346     VLANState **pvlan, *vlan;
2347     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2348         if (vlan->id == id)
2349             return vlan;
2350     }
2351     if (!allocate) {
2352         return NULL;
2353     }
2354     vlan = qemu_mallocz(sizeof(VLANState));
2355     vlan->id = id;
2356     TAILQ_INIT(&vlan->send_queue);
2357     vlan->next = NULL;
2358     pvlan = &first_vlan;
2359     while (*pvlan != NULL)
2360         pvlan = &(*pvlan)->next;
2361     *pvlan = vlan;
2362     return vlan;
2363 }
2364
2365 static int nic_get_free_idx(void)
2366 {
2367     int index;
2368
2369     for (index = 0; index < MAX_NICS; index++)
2370         if (!nd_table[index].used)
2371             return index;
2372     return -1;
2373 }
2374
2375 void qemu_check_nic_model(NICInfo *nd, const char *model)
2376 {
2377     const char *models[2];
2378
2379     models[0] = model;
2380     models[1] = NULL;
2381
2382     qemu_check_nic_model_list(nd, models, model);
2383 }
2384
2385 void qemu_check_nic_model_list(NICInfo *nd, const char * const *models,
2386                                const char *default_model)
2387 {
2388     int i, exit_status = 0;
2389
2390     if (!nd->model)
2391         nd->model = strdup(default_model);
2392
2393     if (strcmp(nd->model, "?") != 0) {
2394         for (i = 0 ; models[i]; i++)
2395             if (strcmp(nd->model, models[i]) == 0)
2396                 return;
2397
2398         fprintf(stderr, "qemu: Unsupported NIC model: %s\n", nd->model);
2399         exit_status = 1;
2400     }
2401
2402     fprintf(stderr, "qemu: Supported NIC models: ");
2403     for (i = 0 ; models[i]; i++)
2404         fprintf(stderr, "%s%c", models[i], models[i+1] ? ',' : '\n');
2405
2406     exit(exit_status);
2407 }
2408
2409 static int net_handle_fd_param(Monitor *mon, const char *param)
2410 {
2411     if (!qemu_isdigit(param[0])) {
2412         int fd;
2413
2414         fd = monitor_get_fd(mon, param);
2415         if (fd == -1) {
2416             config_error(mon, "No file descriptor named %s found", param);
2417             return -1;
2418         }
2419
2420         return fd;
2421     } else {
2422         return strtol(param, NULL, 0);
2423     }
2424 }
2425
2426 int net_client_init(Monitor *mon, const char *device, const char *p)
2427 {
2428     char buf[1024];
2429     int vlan_id, ret;
2430     VLANState *vlan;
2431     char *name = NULL;
2432
2433     vlan_id = 0;
2434     if (get_param_value(buf, sizeof(buf), "vlan", p)) {
2435         vlan_id = strtol(buf, NULL, 0);
2436     }
2437     vlan = qemu_find_vlan(vlan_id, 1);
2438
2439     if (get_param_value(buf, sizeof(buf), "name", p)) {
2440         name = qemu_strdup(buf);
2441     }
2442     if (!strcmp(device, "nic")) {
2443         static const char * const nic_params[] = {
2444             "vlan", "name", "macaddr", "model", "addr", "id", "vectors", NULL
2445         };
2446         NICInfo *nd;
2447         uint8_t *macaddr;
2448         int idx = nic_get_free_idx();
2449
2450         if (check_params(buf, sizeof(buf), nic_params, p) < 0) {
2451             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2452             ret = -1;
2453             goto out;
2454         }
2455         if (idx == -1 || nb_nics >= MAX_NICS) {
2456             config_error(mon, "Too Many NICs\n");
2457             ret = -1;
2458             goto out;
2459         }
2460         nd = &nd_table[idx];
2461         macaddr = nd->macaddr;
2462         macaddr[0] = 0x52;
2463         macaddr[1] = 0x54;
2464         macaddr[2] = 0x00;
2465         macaddr[3] = 0x12;
2466         macaddr[4] = 0x34;
2467         macaddr[5] = 0x56 + idx;
2468
2469         if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
2470             if (parse_macaddr(macaddr, buf) < 0) {
2471                 config_error(mon, "invalid syntax for ethernet address\n");
2472                 ret = -1;
2473                 goto out;
2474             }
2475         }
2476         if (get_param_value(buf, sizeof(buf), "model", p)) {
2477             nd->model = strdup(buf);
2478         }
2479         if (get_param_value(buf, sizeof(buf), "addr", p)) {
2480             nd->devaddr = strdup(buf);
2481         }
2482         if (get_param_value(buf, sizeof(buf), "id", p)) {
2483             nd->id = strdup(buf);
2484         }
2485         nd->nvectors = NIC_NVECTORS_UNSPECIFIED;
2486         if (get_param_value(buf, sizeof(buf), "vectors", p)) {
2487             char *endptr;
2488             long vectors = strtol(buf, &endptr, 0);
2489             if (*endptr) {
2490                 config_error(mon, "invalid syntax for # of vectors\n");
2491                 ret = -1;
2492                 goto out;
2493             }
2494             if (vectors < 0 || vectors > 0x7ffffff) {
2495                 config_error(mon, "invalid # of vectors\n");
2496                 ret = -1;
2497                 goto out;
2498             }
2499             nd->nvectors = vectors;
2500         }
2501         nd->vlan = vlan;
2502         nd->name = name;
2503         nd->used = 1;
2504         name = NULL;
2505         nb_nics++;
2506         vlan->nb_guest_devs++;
2507         ret = idx;
2508     } else
2509     if (!strcmp(device, "none")) {
2510         if (*p != '\0') {
2511             config_error(mon, "'none' takes no parameters\n");
2512             ret = -1;
2513             goto out;
2514         }
2515         /* does nothing. It is needed to signal that no network cards
2516            are wanted */
2517         ret = 0;
2518     } else
2519 #ifdef CONFIG_SLIRP
2520     if (!strcmp(device, "user")) {
2521         static const char * const slirp_params[] = {
2522             "vlan", "name", "hostname", "restrict", "ip", "net", "host",
2523             "tftp", "bootfile", "dhcpstart", "dns", "smb", "smbserver",
2524             "hostfwd", "guestfwd", NULL
2525         };
2526         struct slirp_config_str *config;
2527         int restricted = 0;
2528         char *vnet = NULL;
2529         char *vhost = NULL;
2530         char *vhostname = NULL;
2531         char *tftp_export = NULL;
2532         char *bootfile = NULL;
2533         char *vdhcp_start = NULL;
2534         char *vnamesrv = NULL;
2535         char *smb_export = NULL;
2536         char *vsmbsrv = NULL;
2537         const char *q;
2538
2539         if (check_params(buf, sizeof(buf), slirp_params, p) < 0) {
2540             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2541             ret = -1;
2542             goto out;
2543         }
2544         if (get_param_value(buf, sizeof(buf), "ip", p)) {
2545             int vnet_buflen = strlen(buf) + strlen("/24") + 1;
2546             /* emulate legacy parameter */
2547             vnet = qemu_malloc(vnet_buflen);
2548             pstrcpy(vnet, vnet_buflen, buf);
2549             pstrcat(vnet, vnet_buflen, "/24");
2550         }
2551         if (get_param_value(buf, sizeof(buf), "net", p)) {
2552             vnet = qemu_strdup(buf);
2553         }
2554         if (get_param_value(buf, sizeof(buf), "host", p)) {
2555             vhost = qemu_strdup(buf);
2556         }
2557         if (get_param_value(buf, sizeof(buf), "hostname", p)) {
2558             vhostname = qemu_strdup(buf);
2559         }
2560         if (get_param_value(buf, sizeof(buf), "restrict", p)) {
2561             restricted = (buf[0] == 'y') ? 1 : 0;
2562         }
2563         if (get_param_value(buf, sizeof(buf), "dhcpstart", p)) {
2564             vdhcp_start = qemu_strdup(buf);
2565         }
2566         if (get_param_value(buf, sizeof(buf), "dns", p)) {
2567             vnamesrv = qemu_strdup(buf);
2568         }
2569         if (get_param_value(buf, sizeof(buf), "tftp", p)) {
2570             tftp_export = qemu_strdup(buf);
2571         }
2572         if (get_param_value(buf, sizeof(buf), "bootfile", p)) {
2573             bootfile = qemu_strdup(buf);
2574         }
2575         if (get_param_value(buf, sizeof(buf), "smb", p)) {
2576             smb_export = qemu_strdup(buf);
2577             if (get_param_value(buf, sizeof(buf), "smbserver", p)) {
2578                 vsmbsrv = qemu_strdup(buf);
2579             }
2580         }
2581         q = p;
2582         while (1) {
2583             config = qemu_malloc(sizeof(*config));
2584             if (!get_next_param_value(config->str, sizeof(config->str),
2585                                       "hostfwd", &q)) {
2586                 break;
2587             }
2588             config->flags = SLIRP_CFG_HOSTFWD;
2589             config->next = slirp_configs;
2590             slirp_configs = config;
2591             config = NULL;
2592         }
2593         q = p;
2594         while (1) {
2595             config = qemu_malloc(sizeof(*config));
2596             if (!get_next_param_value(config->str, sizeof(config->str),
2597                                       "guestfwd", &q)) {
2598                 break;
2599             }
2600             config->flags = 0;
2601             config->next = slirp_configs;
2602             slirp_configs = config;
2603             config = NULL;
2604         }
2605         qemu_free(config);
2606         vlan->nb_host_devs++;
2607         ret = net_slirp_init(mon, vlan, device, name, restricted, vnet, vhost,
2608                              vhostname, tftp_export, bootfile, vdhcp_start,
2609                              vnamesrv, smb_export, vsmbsrv);
2610         qemu_free(vnet);
2611         qemu_free(vhost);
2612         qemu_free(vhostname);
2613         qemu_free(tftp_export);
2614         qemu_free(bootfile);
2615         qemu_free(vdhcp_start);
2616         qemu_free(vnamesrv);
2617         qemu_free(smb_export);
2618         qemu_free(vsmbsrv);
2619     } else if (!strcmp(device, "channel")) {
2620         if (TAILQ_EMPTY(&slirp_stacks)) {
2621             struct slirp_config_str *config;
2622
2623             config = qemu_malloc(sizeof(*config));
2624             pstrcpy(config->str, sizeof(config->str), p);
2625             config->flags = SLIRP_CFG_LEGACY;
2626             config->next = slirp_configs;
2627             slirp_configs = config;
2628         } else {
2629             slirp_guestfwd(TAILQ_FIRST(&slirp_stacks), mon, p, 1);
2630         }
2631         ret = 0;
2632     } else
2633 #endif
2634 #ifdef _WIN32
2635     if (!strcmp(device, "tap")) {
2636         static const char * const tap_params[] = {
2637             "vlan", "name", "ifname", NULL
2638         };
2639         char ifname[64];
2640
2641         if (check_params(buf, sizeof(buf), tap_params, p) < 0) {
2642             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2643             ret = -1;
2644             goto out;
2645         }
2646         if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2647             config_error(mon, "tap: no interface name\n");
2648             ret = -1;
2649             goto out;
2650         }
2651         vlan->nb_host_devs++;
2652         ret = tap_win32_init(vlan, device, name, ifname);
2653     } else
2654 #elif defined (_AIX)
2655 #else
2656     if (!strcmp(device, "tap")) {
2657         char ifname[64], chkbuf[64];
2658         char setup_script[1024], down_script[1024];
2659         TAPState *s;
2660         int fd;
2661         vlan->nb_host_devs++;
2662         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2663             static const char * const fd_params[] = {
2664                 "vlan", "name", "fd", "sndbuf", NULL
2665             };
2666             ret = -1;
2667             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2668                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2669                 goto out;
2670             }
2671             fd = net_handle_fd_param(mon, buf);
2672             if (fd == -1) {
2673                 goto out;
2674             }
2675             fcntl(fd, F_SETFL, O_NONBLOCK);
2676             s = net_tap_fd_init(vlan, device, name, fd);
2677             if (!s) {
2678                 close(fd);
2679             }
2680         } else {
2681             static const char * const tap_params[] = {
2682                 "vlan", "name", "ifname", "script", "downscript", "sndbuf", NULL
2683             };
2684             if (check_params(chkbuf, sizeof(chkbuf), tap_params, p) < 0) {
2685                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2686                 ret = -1;
2687                 goto out;
2688             }
2689             if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2690                 ifname[0] = '\0';
2691             }
2692             if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
2693                 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
2694             }
2695             if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
2696                 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
2697             }
2698             s = net_tap_init(vlan, device, name, ifname, setup_script, down_script);
2699         }
2700         if (s != NULL) {
2701             const char *sndbuf_str = NULL;
2702             if (get_param_value(buf, sizeof(buf), "sndbuf", p)) {
2703                 sndbuf_str = buf;
2704             }
2705             tap_set_sndbuf(s, sndbuf_str, mon);
2706             ret = 0;
2707         } else {
2708             ret = -1;
2709         }
2710     } else
2711 #endif
2712     if (!strcmp(device, "socket")) {
2713         char chkbuf[64];
2714         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2715             static const char * const fd_params[] = {
2716                 "vlan", "name", "fd", NULL
2717             };
2718             int fd;
2719             ret = -1;
2720             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2721                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2722                 goto out;
2723             }
2724             fd = net_handle_fd_param(mon, buf);
2725             if (fd == -1) {
2726                 goto out;
2727             }
2728             if (!net_socket_fd_init(vlan, device, name, fd, 1)) {
2729                 close(fd);
2730                 goto out;
2731             }
2732             ret = 0;
2733         } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
2734             static const char * const listen_params[] = {
2735                 "vlan", "name", "listen", NULL
2736             };
2737             if (check_params(chkbuf, sizeof(chkbuf), listen_params, p) < 0) {
2738                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2739                 ret = -1;
2740                 goto out;
2741             }
2742             ret = net_socket_listen_init(vlan, device, name, buf);
2743         } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
2744             static const char * const connect_params[] = {
2745                 "vlan", "name", "connect", NULL
2746             };
2747             if (check_params(chkbuf, sizeof(chkbuf), connect_params, p) < 0) {
2748                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2749                 ret = -1;
2750                 goto out;
2751             }
2752             ret = net_socket_connect_init(vlan, device, name, buf);
2753         } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
2754             static const char * const mcast_params[] = {
2755                 "vlan", "name", "mcast", NULL
2756             };
2757             if (check_params(chkbuf, sizeof(chkbuf), mcast_params, p) < 0) {
2758                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2759                 ret = -1;
2760                 goto out;
2761             }
2762             ret = net_socket_mcast_init(vlan, device, name, buf);
2763         } else {
2764             config_error(mon, "Unknown socket options: %s\n", p);
2765             ret = -1;
2766             goto out;
2767         }
2768         vlan->nb_host_devs++;
2769     } else
2770 #ifdef CONFIG_VDE
2771     if (!strcmp(device, "vde")) {
2772         static const char * const vde_params[] = {
2773             "vlan", "name", "sock", "port", "group", "mode", NULL
2774         };
2775         char vde_sock[1024], vde_group[512];
2776         int vde_port, vde_mode;
2777
2778         if (check_params(buf, sizeof(buf), vde_params, p) < 0) {
2779             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2780             ret = -1;
2781             goto out;
2782         }
2783         vlan->nb_host_devs++;
2784         if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
2785             vde_sock[0] = '\0';
2786         }
2787         if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
2788             vde_port = strtol(buf, NULL, 10);
2789         } else {
2790             vde_port = 0;
2791         }
2792         if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
2793             vde_group[0] = '\0';
2794         }
2795         if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
2796             vde_mode = strtol(buf, NULL, 8);
2797         } else {
2798             vde_mode = 0700;
2799         }
2800         ret = net_vde_init(vlan, device, name, vde_sock, vde_port, vde_group, vde_mode);
2801     } else
2802 #endif
2803     if (!strcmp(device, "dump")) {
2804         int len = 65536;
2805
2806         if (get_param_value(buf, sizeof(buf), "len", p) > 0) {
2807             len = strtol(buf, NULL, 0);
2808         }
2809         if (!get_param_value(buf, sizeof(buf), "file", p)) {
2810             snprintf(buf, sizeof(buf), "qemu-vlan%d.pcap", vlan_id);
2811         }
2812         ret = net_dump_init(mon, vlan, device, name, buf, len);
2813     } else {
2814         config_error(mon, "Unknown network device: %s\n", device);
2815         ret = -1;
2816         goto out;
2817     }
2818     if (ret < 0) {
2819         config_error(mon, "Could not initialize device '%s'\n", device);
2820     }
2821 out:
2822     qemu_free(name);
2823     return ret;
2824 }
2825
2826 void net_client_uninit(NICInfo *nd)
2827 {
2828     nd->vlan->nb_guest_devs--;
2829     nb_nics--;
2830     nd->used = 0;
2831     free((void *)nd->model);
2832 }
2833
2834 static int net_host_check_device(const char *device)
2835 {
2836     int i;
2837     const char *valid_param_list[] = { "tap", "socket", "dump"
2838 #ifdef CONFIG_SLIRP
2839                                        ,"user"
2840 #endif
2841 #ifdef CONFIG_VDE
2842                                        ,"vde"
2843 #endif
2844     };
2845     for (i = 0; i < sizeof(valid_param_list) / sizeof(char *); i++) {
2846         if (!strncmp(valid_param_list[i], device,
2847                      strlen(valid_param_list[i])))
2848             return 1;
2849     }
2850
2851     return 0;
2852 }
2853
2854 void net_host_device_add(Monitor *mon, const char *device, const char *opts)
2855 {
2856     if (!net_host_check_device(device)) {
2857         monitor_printf(mon, "invalid host network device %s\n", device);
2858         return;
2859     }
2860     if (net_client_init(mon, device, opts ? opts : "") < 0) {
2861         monitor_printf(mon, "adding host network device %s failed\n", device);
2862     }
2863 }
2864
2865 void net_host_device_remove(Monitor *mon, int vlan_id, const char *device)
2866 {
2867     VLANClientState *vc;
2868
2869     vc = qemu_find_vlan_client_by_name(mon, vlan_id, device);
2870     if (!vc) {
2871         return;
2872     }
2873     if (!net_host_check_device(vc->model)) {
2874         monitor_printf(mon, "invalid host network device %s\n", device);
2875         return;
2876     }
2877     qemu_del_vlan_client(vc);
2878 }
2879
2880 int net_client_parse(const char *str)
2881 {
2882     const char *p;
2883     char *q;
2884     char device[64];
2885
2886     p = str;
2887     q = device;
2888     while (*p != '\0' && *p != ',') {
2889         if ((q - device) < sizeof(device) - 1)
2890             *q++ = *p;
2891         p++;
2892     }
2893     *q = '\0';
2894     if (*p == ',')
2895         p++;
2896
2897     return net_client_init(NULL, device, p);
2898 }
2899
2900 void net_set_boot_mask(int net_boot_mask)
2901 {
2902     int i;
2903
2904     /* Only the first four NICs may be bootable */
2905     net_boot_mask = net_boot_mask & 0xF;
2906
2907     for (i = 0; i < nb_nics; i++) {
2908         if (net_boot_mask & (1 << i)) {
2909             nd_table[i].bootable = 1;
2910             net_boot_mask &= ~(1 << i);
2911         }
2912     }
2913
2914     if (net_boot_mask) {
2915         fprintf(stderr, "Cannot boot from non-existent NIC\n");
2916         exit(1);
2917     }
2918 }
2919
2920 void do_info_network(Monitor *mon)
2921 {
2922     VLANState *vlan;
2923     VLANClientState *vc;
2924
2925     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2926         monitor_printf(mon, "VLAN %d devices:\n", vlan->id);
2927         for(vc = vlan->first_client; vc != NULL; vc = vc->next)
2928             monitor_printf(mon, "  %s: %s\n", vc->name, vc->info_str);
2929     }
2930 }
2931
2932 void do_set_link(Monitor *mon, const char *name, const char *up_or_down)
2933 {
2934     VLANState *vlan;
2935     VLANClientState *vc = NULL;
2936
2937     for (vlan = first_vlan; vlan != NULL; vlan = vlan->next)
2938         for (vc = vlan->first_client; vc != NULL; vc = vc->next)
2939             if (strcmp(vc->name, name) == 0)
2940                 goto done;
2941 done:
2942
2943     if (!vc) {
2944         monitor_printf(mon, "could not find network device '%s'\n", name);
2945         return;
2946     }
2947
2948     if (strcmp(up_or_down, "up") == 0)
2949         vc->link_down = 0;
2950     else if (strcmp(up_or_down, "down") == 0)
2951         vc->link_down = 1;
2952     else
2953         monitor_printf(mon, "invalid link status '%s'; only 'up' or 'down' "
2954                        "valid\n", up_or_down);
2955
2956     if (vc->link_status_changed)
2957         vc->link_status_changed(vc);
2958 }
2959
2960 void net_cleanup(void)
2961 {
2962     VLANState *vlan;
2963
2964     /* close network clients */
2965     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2966         VLANClientState *vc = vlan->first_client;
2967
2968         while (vc) {
2969             VLANClientState *next = vc->next;
2970
2971             qemu_del_vlan_client(vc);
2972
2973             vc = next;
2974         }
2975     }
2976 }
2977
2978 void net_client_check(void)
2979 {
2980     VLANState *vlan;
2981
2982     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2983         if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
2984             continue;
2985         if (vlan->nb_guest_devs == 0)
2986             fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
2987         if (vlan->nb_host_devs == 0)
2988             fprintf(stderr,
2989                     "Warning: vlan %d is not connected to host network\n",
2990                     vlan->id);
2991     }
2992 }