net.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for HOST_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #ifdef __NetBSD__
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef HOST_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69
  70 /* For the benefit of older linux systems which don't supply it,
  71    we use a local copy of hpet.h. */
  72 /* #include <linux/hpet.h> */
  73 #include "hpet.h"
  74
  75 #include <linux/ppdev.h>
  76 #include <linux/parport.h>
  77 #endif
  78 #ifdef __sun__
  79 #include <sys/stat.h>
  80 #include <sys/ethernet.h>
  81 #include <sys/sockio.h>
  82 #include <netinet/arp.h>
  83 #include <netinet/in.h>
  84 #include <netinet/in_systm.h>
  85 #include <netinet/ip.h>
  86 #include <netinet/ip_icmp.h> // must come after ip.h
  87 #include <netinet/udp.h>
  88 #include <netinet/tcp.h>
  89 #include <net/if.h>
  90 #include <syslog.h>
  91 #include <stropts.h>
  92 #endif
  93 #endif
  94 #endif
  95
  96 #if defined(__OpenBSD__)
  97 #include <util.h>
  98 #endif
  99
 100 #if defined(CONFIG_VDE)
 101 #include <libvdeplug.h>
 102 #endif
 103
 104 #ifdef _WIN32
 105 #include <windows.h>
 106 #include <malloc.h>
 107 #include <sys/timeb.h>
 108 #include <mmsystem.h>
 109 #define getopt_long_only getopt_long
 110 #define memalign(align, size) malloc(size)
 111 #endif
 112
 113 #include "qemu-common.h"
 114 #include "net.h"
 115 #include "monitor.h"
 116 #include "sysemu.h"
 117 #include "qemu-timer.h"
 118 #include "qemu-char.h"
 119 #include "audio/audio.h"
 120 #include "qemu_socket.h"
 121 #include "qemu-log.h"
 122
 123 #if defined(CONFIG_SLIRP)
 124 #include "libslirp.h"
 125 #endif
 126
 127
 128 static VLANState *first_vlan;
 129
 130 /***********************************************************/
 131 /* network device redirectors */
 132
 133 #if defined(DEBUG_NET) || defined(DEBUG_SLIRP)
 134 static void hex_dump(FILE *f, const uint8_t *buf, int size)
 135 {
 136     int len, i, j, c;
 137
 138     for(i=0;i<size;i+=16) {
 139         len = size - i;
 140         if (len > 16)
 141             len = 16;
 142         fprintf(f, "%08x ", i);
 143         for(j=0;j<16;j++) {
 144             if (j < len)
 145                 fprintf(f, " %02x", buf[i+j]);
 146             else
 147                 fprintf(f, "   ");
 148         }
 149         fprintf(f, " ");
 150         for(j=0;j<len;j++) {
 151             c = buf[i+j];
 152             if (c < ' ' || c > '~')
 153                 c = '.';
 154             fprintf(f, "%c", c);
 155         }
 156         fprintf(f, "\n");
 157     }
 158 }
 159 #endif
 160
 161 static int parse_macaddr(uint8_t *macaddr, const char *p)
 162 {
 163     int i;
 164     char *last_char;
 165     long int offset;
 166
 167     errno = 0;
 168     offset = strtol(p, &last_char, 0);
 169     if (0 == errno && '\0' == *last_char &&
 170             offset >= 0 && offset <= 0xFFFFFF) {
 171         macaddr[3] = (offset & 0xFF0000) >> 16;
 172         macaddr[4] = (offset & 0xFF00) >> 8;
 173         macaddr[5] = offset & 0xFF;
 174         return 0;
 175     } else {
 176         for(i = 0; i < 6; i++) {
 177             macaddr[i] = strtol(p, (char **)&p, 16);
 178             if (i == 5) {
 179                 if (*p != '\0')
 180                     return -1;
 181             } else {
 182                 if (*p != ':' && *p != '-')
 183                     return -1;
 184                 p++;
 185             }
 186         }
 187         return 0;
 188     }
 189
 190     return -1;
 191 }
 192
 193 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
 194 {
 195     const char *p, *p1;
 196     int len;
 197     p = *pp;
 198     p1 = strchr(p, sep);
 199     if (!p1)
 200         return -1;
 201     len = p1 - p;
 202     p1++;
 203     if (buf_size > 0) {
 204         if (len > buf_size - 1)
 205             len = buf_size - 1;
 206         memcpy(buf, p, len);
 207         buf[len] = '\0';
 208     }
 209     *pp = p1;
 210     return 0;
 211 }
 212
 213 int parse_host_src_port(struct sockaddr_in *haddr,
 214                         struct sockaddr_in *saddr,
 215                         const char *input_str)
 216 {
 217     char *str = strdup(input_str);
 218     char *host_str = str;
 219     char *src_str;
 220     const char *src_str2;
 221     char *ptr;
 222
 223     /*
 224      * Chop off any extra arguments at the end of the string which
 225      * would start with a comma, then fill in the src port information
 226      * if it was provided else use the "any address" and "any port".
 227      */
 228     if ((ptr = strchr(str,',')))
 229         *ptr = '\0';
 230
 231     if ((src_str = strchr(input_str,'@'))) {
 232         *src_str = '\0';
 233         src_str++;
 234     }
 235
 236     if (parse_host_port(haddr, host_str) < 0)
 237         goto fail;
 238
 239     src_str2 = src_str;
 240     if (!src_str || *src_str == '\0')
 241         src_str2 = ":0";
 242
 243     if (parse_host_port(saddr, src_str2) < 0)
 244         goto fail;
 245
 246     free(str);
 247     return(0);
 248
 249 fail:
 250     free(str);
 251     return -1;
 252 }
 253
 254 int parse_host_port(struct sockaddr_in *saddr, const char *str)
 255 {
 256     char buf[512];
 257     struct hostent *he;
 258     const char *p, *r;
 259     int port;
 260
 261     p = str;
 262     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
 263         return -1;
 264     saddr->sin_family = AF_INET;
 265     if (buf[0] == '\0') {
 266         saddr->sin_addr.s_addr = 0;
 267     } else {
 268         if (qemu_isdigit(buf[0])) {
 269             if (!inet_aton(buf, &saddr->sin_addr))
 270                 return -1;
 271         } else {
 272             if ((he = gethostbyname(buf)) == NULL)
 273                 return - 1;
 274             saddr->sin_addr = *(struct in_addr *)he->h_addr;
 275         }
 276     }
 277     port = strtol(p, (char **)&r, 0);
 278     if (r == p)
 279         return -1;
 280     saddr->sin_port = htons(port);
 281     return 0;
 282 }
 283
 284 #if !defined(_WIN32) && 0
 285 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
 286 {
 287     const char *p;
 288     int len;
 289
 290     len = MIN(108, strlen(str));
 291     p = strchr(str, ',');
 292     if (p)
 293         len = MIN(len, p - str);
 294
 295     memset(uaddr, 0, sizeof(*uaddr));
 296
 297     uaddr->sun_family = AF_UNIX;
 298     memcpy(uaddr->sun_path, str, len);
 299
 300     return 0;
 301 }
 302 #endif
 303
 304 void qemu_format_nic_info_str(VLANClientState *vc, uint8_t macaddr[6])
 305 {
 306     snprintf(vc->info_str, sizeof(vc->info_str),
 307              "model=%s,macaddr=%02x:%02x:%02x:%02x:%02x:%02x",
 308              vc->model,
 309              macaddr[0], macaddr[1], macaddr[2],
 310              macaddr[3], macaddr[4], macaddr[5]);
 311 }
 312
 313 static char *assign_name(VLANClientState *vc1, const char *model)
 314 {
 315     VLANState *vlan;
 316     char buf[256];
 317     int id = 0;
 318
 319     for (vlan = first_vlan; vlan; vlan = vlan->next) {
 320         VLANClientState *vc;
 321
 322         for (vc = vlan->first_client; vc; vc = vc->next)
 323             if (vc != vc1 && strcmp(vc->model, model) == 0)
 324                 id++;
 325     }
 326
 327     snprintf(buf, sizeof(buf), "%s.%d", model, id);
 328
 329     return strdup(buf);
 330 }
 331
 332 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
 333                                       const char *model,
 334                                       const char *name,
 335                                       NetCanReceive *can_receive,
 336                                       NetReceive *receive,
 337                                       NetReceiveIOV *receive_iov,
 338                                       NetCleanup *cleanup,
 339                                       void *opaque)
 340 {
 341     VLANClientState *vc, **pvc;
 342     vc = qemu_mallocz(sizeof(VLANClientState));
 343     vc->model = strdup(model);
 344     if (name)
 345         vc->name = strdup(name);
 346     else
 347         vc->name = assign_name(vc, model);
 348     vc->can_receive = can_receive;
 349     vc->receive = receive;
 350     vc->receive_iov = receive_iov;
 351     vc->cleanup = cleanup;
 352     vc->opaque = opaque;
 353     vc->vlan = vlan;
 354
 355     vc->next = NULL;
 356     pvc = &vlan->first_client;
 357     while (*pvc != NULL)
 358         pvc = &(*pvc)->next;
 359     *pvc = vc;
 360     return vc;
 361 }
 362
 363 void qemu_del_vlan_client(VLANClientState *vc)
 364 {
 365     VLANClientState **pvc = &vc->vlan->first_client;
 366
 367     while (*pvc != NULL)
 368         if (*pvc == vc) {
 369             *pvc = vc->next;
 370             if (vc->cleanup) {
 371                 vc->cleanup(vc);
 372             }
 373             free(vc->name);
 374             free(vc->model);
 375             qemu_free(vc);
 376             break;
 377         } else
 378             pvc = &(*pvc)->next;
 379 }
 380
 381 VLANClientState *qemu_find_vlan_client(VLANState *vlan, void *opaque)
 382 {
 383     VLANClientState **pvc = &vlan->first_client;
 384
 385     while (*pvc != NULL)
 386         if ((*pvc)->opaque == opaque)
 387             return *pvc;
 388         else
 389             pvc = &(*pvc)->next;
 390
 391     return NULL;
 392 }
 393
 394 int qemu_can_send_packet(VLANClientState *sender)
 395 {
 396     VLANState *vlan = sender->vlan;
 397     VLANClientState *vc;
 398
 399     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 400         if (vc == sender) {
 401             continue;
 402         }
 403
 404         /* no can_receive() handler, they can always receive */
 405         if (!vc->can_receive || vc->can_receive(vc)) {
 406             return 1;
 407         }
 408     }
 409     return 0;
 410 }
 411
 412 static int
 413 qemu_deliver_packet(VLANClientState *sender, const uint8_t *buf, int size)
 414 {
 415     VLANClientState *vc;
 416     int ret = -1;
 417
 418     for (vc = sender->vlan->first_client; vc != NULL; vc = vc->next) {
 419         ssize_t len;
 420
 421         if (vc == sender) {
 422             continue;
 423         }
 424
 425         if (vc->link_down) {
 426             ret = size;
 427             continue;
 428         }
 429
 430         len = vc->receive(vc, buf, size);
 431
 432         ret = (ret >= 0) ? ret : len;
 433     }
 434
 435     return ret;
 436 }
 437
 438 void qemu_send_packet(VLANClientState *vc, const uint8_t *buf, int size)
 439 {
 440     VLANState *vlan = vc->vlan;
 441     VLANPacket *packet;
 442
 443     if (vc->link_down)
 444         return;
 445
 446 #ifdef DEBUG_NET
 447     printf("vlan %d send:\n", vlan->id);
 448     hex_dump(stdout, buf, size);
 449 #endif
 450     if (vlan->delivering) {
 451         packet = qemu_malloc(sizeof(VLANPacket) + size);
 452         packet->next = vlan->send_queue;
 453         packet->sender = vc;
 454         packet->size = size;
 455         memcpy(packet->data, buf, size);
 456         vlan->send_queue = packet;
 457     } else {
 458         vlan->delivering = 1;
 459         qemu_deliver_packet(vc, buf, size);
 460         while ((packet = vlan->send_queue) != NULL) {
 461             vlan->send_queue = packet->next;
 462             qemu_deliver_packet(packet->sender, packet->data, packet->size);
 463             qemu_free(packet);
 464         }
 465         vlan->delivering = 0;
 466     }
 467 }
 468
 469 static ssize_t vc_sendv_compat(VLANClientState *vc, const struct iovec *iov,
 470                                int iovcnt)
 471 {
 472     uint8_t buffer[4096];
 473     size_t offset = 0;
 474     int i;
 475
 476     for (i = 0; i < iovcnt; i++) {
 477         size_t len;
 478
 479         len = MIN(sizeof(buffer) - offset, iov[i].iov_len);
 480         memcpy(buffer + offset, iov[i].iov_base, len);
 481         offset += len;
 482     }
 483
 484     vc->receive(vc, buffer, offset);
 485
 486     return offset;
 487 }
 488
 489 static ssize_t calc_iov_length(const struct iovec *iov, int iovcnt)
 490 {
 491     size_t offset = 0;
 492     int i;
 493
 494     for (i = 0; i < iovcnt; i++)
 495         offset += iov[i].iov_len;
 496     return offset;
 497 }
 498
 499 ssize_t qemu_sendv_packet(VLANClientState *sender, const struct iovec *iov,
 500                           int iovcnt)
 501 {
 502     VLANState *vlan = sender->vlan;
 503     VLANClientState *vc;
 504     VLANPacket *packet;
 505     ssize_t max_len = 0;
 506     int i;
 507
 508     if (sender->link_down)
 509         return calc_iov_length(iov, iovcnt);
 510
 511     if (vlan->delivering) {
 512         max_len = calc_iov_length(iov, iovcnt);
 513
 514         packet = qemu_malloc(sizeof(VLANPacket) + max_len);
 515         packet->next = vlan->send_queue;
 516         packet->sender = sender;
 517         packet->size = 0;
 518         for (i = 0; i < iovcnt; i++) {
 519             size_t len = iov[i].iov_len;
 520
 521             memcpy(packet->data + packet->size, iov[i].iov_base, len);
 522             packet->size += len;
 523         }
 524         vlan->send_queue = packet;
 525     } else {
 526         vlan->delivering = 1;
 527
 528         for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
 529             ssize_t len = 0;
 530
 531             if (vc == sender) {
 532                 continue;
 533             }
 534             if (vc->link_down) {
 535                 len = calc_iov_length(iov, iovcnt);
 536             } else if (vc->receive_iov) {
 537                 len = vc->receive_iov(vc, iov, iovcnt);
 538             } else if (vc->receive) {
 539                 len = vc_sendv_compat(vc, iov, iovcnt);
 540             }
 541             max_len = MAX(max_len, len);
 542         }
 543
 544         while ((packet = vlan->send_queue) != NULL) {
 545             vlan->send_queue = packet->next;
 546             qemu_deliver_packet(packet->sender, packet->data, packet->size);
 547             qemu_free(packet);
 548         }
 549         vlan->delivering = 0;
 550     }
 551
 552     return max_len;
 553 }
 554
 555 static void config_error(Monitor *mon, const char *fmt, ...)
 556 {
 557     va_list ap;
 558
 559     va_start(ap, fmt);
 560     if (mon) {
 561         monitor_vprintf(mon, fmt, ap);
 562     } else {
 563         fprintf(stderr, "qemu: ");
 564         vfprintf(stderr, fmt, ap);
 565         exit(1);
 566     }
 567     va_end(ap);
 568 }
 569
 570 #if defined(CONFIG_SLIRP)
 571
 572 /* slirp network adapter */
 573
 574 struct slirp_config_str {
 575     struct slirp_config_str *next;
 576     const char *str;
 577 };
 578
 579 static int slirp_inited;
 580 static struct slirp_config_str *slirp_redirs;
 581 #ifndef _WIN32
 582 static const char *slirp_smb_export;
 583 #endif
 584 static VLANClientState *slirp_vc;
 585
 586 static void slirp_smb(const char *exported_dir);
 587 static void slirp_redirection(Monitor *mon, const char *redir_str);
 588
 589 int slirp_can_output(void)
 590 {
 591     return !slirp_vc || qemu_can_send_packet(slirp_vc);
 592 }
 593
 594 void slirp_output(const uint8_t *pkt, int pkt_len)
 595 {
 596 #ifdef DEBUG_SLIRP
 597     printf("slirp output:\n");
 598     hex_dump(stdout, pkt, pkt_len);
 599 #endif
 600     if (!slirp_vc)
 601         return;
 602     qemu_send_packet(slirp_vc, pkt, pkt_len);
 603 }
 604
 605 int slirp_is_inited(void)
 606 {
 607     return slirp_inited;
 608 }
 609
 610 static ssize_t slirp_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
 611 {
 612 #ifdef DEBUG_SLIRP
 613     printf("slirp input:\n");
 614     hex_dump(stdout, buf, size);
 615 #endif
 616     slirp_input(buf, size);
 617     return size;
 618 }
 619
 620 static int slirp_in_use;
 621
 622 static void net_slirp_cleanup(VLANClientState *vc)
 623 {
 624     slirp_in_use = 0;
 625 }
 626
 627 static int net_slirp_init(VLANState *vlan, const char *model, const char *name,
 628                           int restricted, const char *ip)
 629 {
 630     if (slirp_in_use) {
 631         /* slirp only supports a single instance so far */
 632         return -1;
 633     }
 634     if (!slirp_inited) {
 635         slirp_inited = 1;
 636         slirp_init(restricted, ip);
 637
 638         while (slirp_redirs) {
 639             struct slirp_config_str *config = slirp_redirs;
 640
 641             slirp_redirection(NULL, config->str);
 642             slirp_redirs = config->next;
 643             qemu_free(config);
 644         }
 645 #ifndef _WIN32
 646         if (slirp_smb_export) {
 647             slirp_smb(slirp_smb_export);
 648         }
 649 #endif
 650     }
 651
 652     slirp_vc = qemu_new_vlan_client(vlan, model, name, NULL, slirp_receive,
 653                                     NULL, net_slirp_cleanup, NULL);
 654     slirp_vc->info_str[0] = '\0';
 655     slirp_in_use = 1;
 656     return 0;
 657 }
 658
 659 static void net_slirp_redir_print(void *opaque, int is_udp,
 660                                   struct in_addr *laddr, u_int lport,
 661                                   struct in_addr *faddr, u_int fport)
 662 {
 663     Monitor *mon = (Monitor *)opaque;
 664     uint32_t h_addr;
 665     uint32_t g_addr;
 666     char buf[16];
 667
 668     h_addr = ntohl(faddr->s_addr);
 669     g_addr = ntohl(laddr->s_addr);
 670
 671     monitor_printf(mon, "  %s |", is_udp ? "udp" : "tcp" );
 672     snprintf(buf, 15, "%d.%d.%d.%d", (h_addr >> 24) & 0xff,
 673                                      (h_addr >> 16) & 0xff,
 674                                      (h_addr >> 8) & 0xff,
 675                                      (h_addr) & 0xff);
 676     monitor_printf(mon, " %15s |", buf);
 677     monitor_printf(mon, " %5d |", fport);
 678
 679     snprintf(buf, 15, "%d.%d.%d.%d", (g_addr >> 24) & 0xff,
 680                                      (g_addr >> 16) & 0xff,
 681                                      (g_addr >> 8) & 0xff,
 682                                      (g_addr) & 0xff);
 683     monitor_printf(mon, " %15s |", buf);
 684     monitor_printf(mon, " %5d\n", lport);
 685
 686 }
 687
 688 static void net_slirp_redir_list(Monitor *mon)
 689 {
 690     if (!mon)
 691         return;
 692
 693     monitor_printf(mon, " Prot |    Host Addr    | HPort |    Guest Addr   | GPort\n");
 694     monitor_printf(mon, "      |                 |       |                 |      \n");
 695     slirp_redir_loop(net_slirp_redir_print, mon);
 696 }
 697
 698 static void net_slirp_redir_rm(Monitor *mon, const char *port_str)
 699 {
 700     int host_port;
 701     char buf[256] = "";
 702     const char *p = port_str;
 703     int is_udp = 0;
 704     int n;
 705
 706     if (!mon)
 707         return;
 708
 709     if (!port_str || !port_str[0])
 710         goto fail_syntax;
 711
 712     get_str_sep(buf, sizeof(buf), &p, ':');
 713
 714     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 715         is_udp = 0;
 716     } else if (!strcmp(buf, "udp")) {
 717         is_udp = 1;
 718     } else {
 719         goto fail_syntax;
 720     }
 721
 722     host_port = atoi(p);
 723
 724     n = slirp_redir_rm(is_udp, host_port);
 725
 726     monitor_printf(mon, "removed %d redirections to %s port %d\n", n,
 727                         is_udp ? "udp" : "tcp", host_port);
 728     return;
 729
 730  fail_syntax:
 731     monitor_printf(mon, "invalid format\n");
 732 }
 733
 734 static void slirp_redirection(Monitor *mon, const char *redir_str)
 735 {
 736     struct in_addr guest_addr;
 737     int host_port, guest_port;
 738     const char *p;
 739     char buf[256], *r;
 740     int is_udp;
 741
 742     p = redir_str;
 743     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 744         goto fail_syntax;
 745     }
 746     if (!strcmp(buf, "tcp") || buf[0] == '\0') {
 747         is_udp = 0;
 748     } else if (!strcmp(buf, "udp")) {
 749         is_udp = 1;
 750     } else {
 751         goto fail_syntax;
 752     }
 753
 754     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 755         goto fail_syntax;
 756     }
 757     host_port = strtol(buf, &r, 0);
 758     if (r == buf) {
 759         goto fail_syntax;
 760     }
 761
 762     if (get_str_sep(buf, sizeof(buf), &p, ':') < 0) {
 763         goto fail_syntax;
 764     }
 765     if (buf[0] == '\0') {
 766         pstrcpy(buf, sizeof(buf), "10.0.2.15");
 767     }
 768     if (!inet_aton(buf, &guest_addr)) {
 769         goto fail_syntax;
 770     }
 771
 772     guest_port = strtol(p, &r, 0);
 773     if (r == p) {
 774         goto fail_syntax;
 775     }
 776
 777     if (slirp_redir(is_udp, host_port, guest_addr, guest_port) < 0) {
 778         config_error(mon, "could not set up redirection '%s'\n", redir_str);
 779     }
 780     return;
 781
 782  fail_syntax:
 783     config_error(mon, "invalid redirection format '%s'\n", redir_str);
 784 }
 785
 786 void net_slirp_redir(Monitor *mon, const char *redir_str, const char *redir_opt2)
 787 {
 788     struct slirp_config_str *config;
 789
 790     if (!slirp_inited) {
 791         if (mon) {
 792             monitor_printf(mon, "user mode network stack not in use\n");
 793         } else {
 794             config = qemu_malloc(sizeof(*config));
 795             config->str = redir_str;
 796             config->next = slirp_redirs;
 797             slirp_redirs = config;
 798         }
 799         return;
 800     }
 801
 802     if (!strcmp(redir_str, "remove")) {
 803         net_slirp_redir_rm(mon, redir_opt2);
 804         return;
 805     }
 806
 807     if (!strcmp(redir_str, "list")) {
 808         net_slirp_redir_list(mon);
 809         return;
 810     }
 811
 812     slirp_redirection(mon, redir_str);
 813 }
 814
 815 #ifndef _WIN32
 816
 817 static char smb_dir[1024];
 818
 819 static void erase_dir(char *dir_name)
 820 {
 821     DIR *d;
 822     struct dirent *de;
 823     char filename[1024];
 824
 825     /* erase all the files in the directory */
 826     if ((d = opendir(dir_name)) != NULL) {
 827         for(;;) {
 828             de = readdir(d);
 829             if (!de)
 830                 break;
 831             if (strcmp(de->d_name, ".") != 0 &&
 832                 strcmp(de->d_name, "..") != 0) {
 833                 snprintf(filename, sizeof(filename), "%s/%s",
 834                          smb_dir, de->d_name);
 835                 if (unlink(filename) != 0)  /* is it a directory? */
 836                     erase_dir(filename);
 837             }
 838         }
 839         closedir(d);
 840         rmdir(dir_name);
 841     }
 842 }
 843
 844 /* automatic user mode samba server configuration */
 845 static void smb_exit(void)
 846 {
 847     erase_dir(smb_dir);
 848 }
 849
 850 static void slirp_smb(const char *exported_dir)
 851 {
 852     char smb_conf[1024];
 853     char smb_cmdline[1024];
 854     FILE *f;
 855
 856     /* XXX: better tmp dir construction */
 857     snprintf(smb_dir, sizeof(smb_dir), "/tmp/qemu-smb.%ld", (long)getpid());
 858     if (mkdir(smb_dir, 0700) < 0) {
 859         fprintf(stderr, "qemu: could not create samba server dir '%s'\n", smb_dir);
 860         exit(1);
 861     }
 862     snprintf(smb_conf, sizeof(smb_conf), "%s/%s", smb_dir, "smb.conf");
 863
 864     f = fopen(smb_conf, "w");
 865     if (!f) {
 866         fprintf(stderr, "qemu: could not create samba server configuration file '%s'\n", smb_conf);
 867         exit(1);
 868     }
 869     fprintf(f,
 870             "[global]\n"
 871             "private dir=%s\n"
 872             "smb ports=0\n"
 873             "socket address=127.0.0.1\n"
 874             "pid directory=%s\n"
 875             "lock directory=%s\n"
 876             "log file=%s/log.smbd\n"
 877             "smb passwd file=%s/smbpasswd\n"
 878             "security = share\n"
 879             "[qemu]\n"
 880             "path=%s\n"
 881             "read only=no\n"
 882             "guest ok=yes\n",
 883             smb_dir,
 884             smb_dir,
 885             smb_dir,
 886             smb_dir,
 887             smb_dir,
 888             exported_dir
 889             );
 890     fclose(f);
 891     atexit(smb_exit);
 892
 893     snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
 894              SMBD_COMMAND, smb_conf);
 895
 896     slirp_add_exec(0, smb_cmdline, 4, 139);
 897 }
 898
 899 /* automatic user mode samba server configuration */
 900 void net_slirp_smb(const char *exported_dir)
 901 {
 902     if (slirp_smb_export) {
 903         fprintf(stderr, "-smb given twice\n");
 904         exit(1);
 905     }
 906     slirp_smb_export = exported_dir;
 907     if (slirp_inited) {
 908         slirp_smb(exported_dir);
 909     }
 910 }
 911
 912 #endif /* !defined(_WIN32) */
 913
 914 void do_info_slirp(Monitor *mon)
 915 {
 916     slirp_stats();
 917 }
 918
 919 struct VMChannel {
 920     CharDriverState *hd;
 921     int port;
 922 };
 923
 924 static int vmchannel_can_read(void *opaque)
 925 {
 926     struct VMChannel *vmc = (struct VMChannel*)opaque;
 927     return slirp_socket_can_recv(4, vmc->port);
 928 }
 929
 930 static void vmchannel_read(void *opaque, const uint8_t *buf, int size)
 931 {
 932     struct VMChannel *vmc = (struct VMChannel*)opaque;
 933     slirp_socket_recv(4, vmc->port, buf, size);
 934 }
 935
 936 #endif /* CONFIG_SLIRP */
 937
 938 #if !defined(_WIN32)
 939
 940 typedef struct TAPState {
 941     VLANClientState *vc;
 942     int fd;
 943     char down_script[1024];
 944     char down_script_arg[128];
 945     uint8_t buf[4096];
 946 } TAPState;
 947
 948 static int launch_script(const char *setup_script, const char *ifname, int fd);
 949
 950 static ssize_t tap_receive_iov(VLANClientState *vc, const struct iovec *iov,
 951                                int iovcnt)
 952 {
 953     TAPState *s = vc->opaque;
 954     ssize_t len;
 955
 956     do {
 957         len = writev(s->fd, iov, iovcnt);
 958     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
 959
 960     return len;
 961 }
 962
 963 static ssize_t tap_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
 964 {
 965     TAPState *s = vc->opaque;
 966     ssize_t len;
 967
 968     do {
 969         len = write(s->fd, buf, size);
 970     } while (len == -1 && (errno == EINTR || errno == EAGAIN));
 971
 972     return len;
 973 }
 974
 975 static int tap_can_send(void *opaque)
 976 {
 977     TAPState *s = opaque;
 978
 979     return qemu_can_send_packet(s->vc);
 980 }
 981
 982 #ifdef __sun__
 983 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
 984 {
 985     struct strbuf sbuf;
 986     int f = 0;
 987
 988     sbuf.maxlen = maxlen;
 989     sbuf.buf = (char *)buf;
 990
 991     return getmsg(tapfd, NULL, &sbuf, &f) >= 0 ? sbuf.len : -1;
 992 }
 993 #else
 994 static ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
 995 {
 996     return read(tapfd, buf, maxlen);
 997 }
 998 #endif
 999
1000 static void tap_send(void *opaque)
1001 {
1002     TAPState *s = opaque;
1003     int size;
1004
1005     size = tap_read_packet(s->fd, s->buf, sizeof(s->buf));
1006     if (size > 0) {
1007         qemu_send_packet(s->vc, s->buf, size);
1008     }
1009 }
1010
1011 static void tap_cleanup(VLANClientState *vc)
1012 {
1013     TAPState *s = vc->opaque;
1014
1015     if (s->down_script[0])
1016         launch_script(s->down_script, s->down_script_arg, s->fd);
1017
1018     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1019     close(s->fd);
1020     qemu_free(s);
1021 }
1022
1023 /* fd support */
1024
1025 static TAPState *net_tap_fd_init(VLANState *vlan,
1026                                  const char *model,
1027                                  const char *name,
1028                                  int fd)
1029 {
1030     TAPState *s;
1031
1032     s = qemu_mallocz(sizeof(TAPState));
1033     s->fd = fd;
1034     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, tap_receive,
1035                                  tap_receive_iov, tap_cleanup, s);
1036     qemu_set_fd_handler2(s->fd, tap_can_send, tap_send, NULL, s);
1037     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "fd=%d", fd);
1038     return s;
1039 }
1040
1041 #if defined (HOST_BSD) || defined (__FreeBSD_kernel__)
1042 static int tap_open(char *ifname, int ifname_size)
1043 {
1044     int fd;
1045     char *dev;
1046     struct stat s;
1047
1048     TFR(fd = open("/dev/tap", O_RDWR));
1049     if (fd < 0) {
1050         fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
1051         return -1;
1052     }
1053
1054     fstat(fd, &s);
1055     dev = devname(s.st_rdev, S_IFCHR);
1056     pstrcpy(ifname, ifname_size, dev);
1057
1058     fcntl(fd, F_SETFL, O_NONBLOCK);
1059     return fd;
1060 }
1061 #elif defined(__sun__)
1062 #define TUNNEWPPA       (('T'<<16) | 0x0001)
1063 /*
1064  * Allocate TAP device, returns opened fd.
1065  * Stores dev name in the first arg(must be large enough).
1066  */
1067 static int tap_alloc(char *dev, size_t dev_size)
1068 {
1069     int tap_fd, if_fd, ppa = -1;
1070     static int ip_fd = 0;
1071     char *ptr;
1072
1073     static int arp_fd = 0;
1074     int ip_muxid, arp_muxid;
1075     struct strioctl  strioc_if, strioc_ppa;
1076     int link_type = I_PLINK;;
1077     struct lifreq ifr;
1078     char actual_name[32] = "";
1079
1080     memset(&ifr, 0x0, sizeof(ifr));
1081
1082     if( *dev ){
1083        ptr = dev;
1084        while( *ptr && !qemu_isdigit((int)*ptr) ) ptr++;
1085        ppa = atoi(ptr);
1086     }
1087
1088     /* Check if IP device was opened */
1089     if( ip_fd )
1090        close(ip_fd);
1091
1092     TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
1093     if (ip_fd < 0) {
1094        syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
1095        return -1;
1096     }
1097
1098     TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
1099     if (tap_fd < 0) {
1100        syslog(LOG_ERR, "Can't open /dev/tap");
1101        return -1;
1102     }
1103
1104     /* Assign a new PPA and get its unit number. */
1105     strioc_ppa.ic_cmd = TUNNEWPPA;
1106     strioc_ppa.ic_timout = 0;
1107     strioc_ppa.ic_len = sizeof(ppa);
1108     strioc_ppa.ic_dp = (char *)&ppa;
1109     if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
1110        syslog (LOG_ERR, "Can't assign new interface");
1111
1112     TFR(if_fd = open("/dev/tap", O_RDWR, 0));
1113     if (if_fd < 0) {
1114        syslog(LOG_ERR, "Can't open /dev/tap (2)");
1115        return -1;
1116     }
1117     if(ioctl(if_fd, I_PUSH, "ip") < 0){
1118        syslog(LOG_ERR, "Can't push IP module");
1119        return -1;
1120     }
1121
1122     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
1123         syslog(LOG_ERR, "Can't get flags\n");
1124
1125     snprintf (actual_name, 32, "tap%d", ppa);
1126     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1127
1128     ifr.lifr_ppa = ppa;
1129     /* Assign ppa according to the unit number returned by tun device */
1130
1131     if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
1132         syslog (LOG_ERR, "Can't set PPA %d", ppa);
1133     if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
1134         syslog (LOG_ERR, "Can't get flags\n");
1135     /* Push arp module to if_fd */
1136     if (ioctl (if_fd, I_PUSH, "arp") < 0)
1137         syslog (LOG_ERR, "Can't push ARP module (2)");
1138
1139     /* Push arp module to ip_fd */
1140     if (ioctl (ip_fd, I_POP, NULL) < 0)
1141         syslog (LOG_ERR, "I_POP failed\n");
1142     if (ioctl (ip_fd, I_PUSH, "arp") < 0)
1143         syslog (LOG_ERR, "Can't push ARP module (3)\n");
1144     /* Open arp_fd */
1145     TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
1146     if (arp_fd < 0)
1147        syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
1148
1149     /* Set ifname to arp */
1150     strioc_if.ic_cmd = SIOCSLIFNAME;
1151     strioc_if.ic_timout = 0;
1152     strioc_if.ic_len = sizeof(ifr);
1153     strioc_if.ic_dp = (char *)&ifr;
1154     if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
1155         syslog (LOG_ERR, "Can't set ifname to arp\n");
1156     }
1157
1158     if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
1159        syslog(LOG_ERR, "Can't link TAP device to IP");
1160        return -1;
1161     }
1162
1163     if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
1164         syslog (LOG_ERR, "Can't link TAP device to ARP");
1165
1166     close (if_fd);
1167
1168     memset(&ifr, 0x0, sizeof(ifr));
1169     pstrcpy(ifr.lifr_name, sizeof(ifr.lifr_name), actual_name);
1170     ifr.lifr_ip_muxid  = ip_muxid;
1171     ifr.lifr_arp_muxid = arp_muxid;
1172
1173     if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
1174     {
1175       ioctl (ip_fd, I_PUNLINK , arp_muxid);
1176       ioctl (ip_fd, I_PUNLINK, ip_muxid);
1177       syslog (LOG_ERR, "Can't set multiplexor id");
1178     }
1179
1180     snprintf(dev, dev_size, "tap%d", ppa);
1181     return tap_fd;
1182 }
1183
1184 static int tap_open(char *ifname, int ifname_size)
1185 {
1186     char  dev[10]="";
1187     int fd;
1188     if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
1189        fprintf(stderr, "Cannot allocate TAP device\n");
1190        return -1;
1191     }
1192     pstrcpy(ifname, ifname_size, dev);
1193     fcntl(fd, F_SETFL, O_NONBLOCK);
1194     return fd;
1195 }
1196 #elif defined (_AIX)
1197 static int tap_open(char *ifname, int ifname_size)
1198 {
1199     fprintf (stderr, "no tap on AIX\n");
1200     return -1;
1201 }
1202 #else
1203 static int tap_open(char *ifname, int ifname_size)
1204 {
1205     struct ifreq ifr;
1206     int fd, ret;
1207
1208     TFR(fd = open("/dev/net/tun", O_RDWR));
1209     if (fd < 0) {
1210         fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1211         return -1;
1212     }
1213     memset(&ifr, 0, sizeof(ifr));
1214     ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
1215     if (ifname[0] != '\0')
1216         pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
1217     else
1218         pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
1219     ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
1220     if (ret != 0) {
1221         fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1222         close(fd);
1223         return -1;
1224     }
1225     pstrcpy(ifname, ifname_size, ifr.ifr_name);
1226     fcntl(fd, F_SETFL, O_NONBLOCK);
1227     return fd;
1228 }
1229 #endif
1230
1231 static int launch_script(const char *setup_script, const char *ifname, int fd)
1232 {
1233     sigset_t oldmask, mask;
1234     int pid, status;
1235     char *args[3];
1236     char **parg;
1237
1238     sigemptyset(&mask);
1239     sigaddset(&mask, SIGCHLD);
1240     sigprocmask(SIG_BLOCK, &mask, &oldmask);
1241
1242     /* try to launch network script */
1243     pid = fork();
1244     if (pid == 0) {
1245         int open_max = sysconf(_SC_OPEN_MAX), i;
1246
1247         for (i = 0; i < open_max; i++) {
1248             if (i != STDIN_FILENO &&
1249                 i != STDOUT_FILENO &&
1250                 i != STDERR_FILENO &&
1251                 i != fd) {
1252                 close(i);
1253             }
1254         }
1255         parg = args;
1256         *parg++ = (char *)setup_script;
1257         *parg++ = (char *)ifname;
1258         *parg++ = NULL;
1259         execv(setup_script, args);
1260         _exit(1);
1261     } else if (pid > 0) {
1262         while (waitpid(pid, &status, 0) != pid) {
1263             /* loop */
1264         }
1265         sigprocmask(SIG_SETMASK, &oldmask, NULL);
1266
1267         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
1268             return 0;
1269         }
1270     }
1271     fprintf(stderr, "%s: could not launch network script\n", setup_script);
1272     return -1;
1273 }
1274
1275 static int net_tap_init(VLANState *vlan, const char *model,
1276                         const char *name, const char *ifname1,
1277                         const char *setup_script, const char *down_script)
1278 {
1279     TAPState *s;
1280     int fd;
1281     char ifname[128];
1282
1283     if (ifname1 != NULL)
1284         pstrcpy(ifname, sizeof(ifname), ifname1);
1285     else
1286         ifname[0] = '\0';
1287     TFR(fd = tap_open(ifname, sizeof(ifname)));
1288     if (fd < 0)
1289         return -1;
1290
1291     if (!setup_script || !strcmp(setup_script, "no"))
1292         setup_script = "";
1293     if (setup_script[0] != '\0') {
1294         if (launch_script(setup_script, ifname, fd))
1295             return -1;
1296     }
1297     s = net_tap_fd_init(vlan, model, name, fd);
1298     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1299              "ifname=%s,script=%s,downscript=%s",
1300              ifname, setup_script, down_script);
1301     if (down_script && strcmp(down_script, "no")) {
1302         snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
1303         snprintf(s->down_script_arg, sizeof(s->down_script_arg), "%s", ifname);
1304     }
1305     return 0;
1306 }
1307
1308 #endif /* !_WIN32 */
1309
1310 #if defined(CONFIG_VDE)
1311 typedef struct VDEState {
1312     VLANClientState *vc;
1313     VDECONN *vde;
1314 } VDEState;
1315
1316 static void vde_to_qemu(void *opaque)
1317 {
1318     VDEState *s = opaque;
1319     uint8_t buf[4096];
1320     int size;
1321
1322     size = vde_recv(s->vde, (char *)buf, sizeof(buf), 0);
1323     if (size > 0) {
1324         qemu_send_packet(s->vc, buf, size);
1325     }
1326 }
1327
1328 static ssize_t vde_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1329 {
1330     VDEState *s = vc->opaque;
1331     ssize ret;
1332
1333     do {
1334       ret = vde_send(s->vde, (const char *)buf, size, 0);
1335     } while (ret < 0 && errno == EINTR);
1336
1337     return ret;
1338 }
1339
1340 static void vde_cleanup(VLANClientState *vc)
1341 {
1342     VDEState *s = vc->opaque;
1343     qemu_set_fd_handler(vde_datafd(s->vde), NULL, NULL, NULL);
1344     vde_close(s->vde);
1345     qemu_free(s);
1346 }
1347
1348 static int net_vde_init(VLANState *vlan, const char *model,
1349                         const char *name, const char *sock,
1350                         int port, const char *group, int mode)
1351 {
1352     VDEState *s;
1353     char *init_group = strlen(group) ? (char *)group : NULL;
1354     char *init_sock = strlen(sock) ? (char *)sock : NULL;
1355
1356     struct vde_open_args args = {
1357         .port = port,
1358         .group = init_group,
1359         .mode = mode,
1360     };
1361
1362     s = qemu_mallocz(sizeof(VDEState));
1363     s->vde = vde_open(init_sock, (char *)"QEMU", &args);
1364     if (!s->vde){
1365         free(s);
1366         return -1;
1367     }
1368     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, vde_receive,
1369                                  NULL, vde_cleanup, s);
1370     qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
1371     snprintf(s->vc->info_str, sizeof(s->vc->info_str), "sock=%s,fd=%d",
1372              sock, vde_datafd(s->vde));
1373     return 0;
1374 }
1375 #endif
1376
1377 /* network connection */
1378 typedef struct NetSocketState {
1379     VLANClientState *vc;
1380     int fd;
1381     int state; /* 0 = getting length, 1 = getting data */
1382     unsigned int index;
1383     unsigned int packet_len;
1384     uint8_t buf[4096];
1385     struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
1386 } NetSocketState;
1387
1388 typedef struct NetSocketListenState {
1389     VLANState *vlan;
1390     char *model;
1391     char *name;
1392     int fd;
1393 } NetSocketListenState;
1394
1395 /* XXX: we consider we can send the whole packet without blocking */
1396 static ssize_t net_socket_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1397 {
1398     NetSocketState *s = vc->opaque;
1399     uint32_t len;
1400     len = htonl(size);
1401
1402     send_all(s->fd, (const uint8_t *)&len, sizeof(len));
1403     return send_all(s->fd, buf, size);
1404 }
1405
1406 static ssize_t net_socket_receive_dgram(VLANClientState *vc, const uint8_t *buf, size_t size)
1407 {
1408     NetSocketState *s = vc->opaque;
1409
1410     return sendto(s->fd, buf, size, 0,
1411                   (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
1412 }
1413
1414 static void net_socket_send(void *opaque)
1415 {
1416     NetSocketState *s = opaque;
1417     int size, err;
1418     unsigned l;
1419     uint8_t buf1[4096];
1420     const uint8_t *buf;
1421
1422     size = recv(s->fd, buf1, sizeof(buf1), 0);
1423     if (size < 0) {
1424         err = socket_error();
1425         if (err != EWOULDBLOCK)
1426             goto eoc;
1427     } else if (size == 0) {
1428         /* end of connection */
1429     eoc:
1430         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1431         closesocket(s->fd);
1432         return;
1433     }
1434     buf = buf1;
1435     while (size > 0) {
1436         /* reassemble a packet from the network */
1437         switch(s->state) {
1438         case 0:
1439             l = 4 - s->index;
1440             if (l > size)
1441                 l = size;
1442             memcpy(s->buf + s->index, buf, l);
1443             buf += l;
1444             size -= l;
1445             s->index += l;
1446             if (s->index == 4) {
1447                 /* got length */
1448                 s->packet_len = ntohl(*(uint32_t *)s->buf);
1449                 s->index = 0;
1450                 s->state = 1;
1451             }
1452             break;
1453         case 1:
1454             l = s->packet_len - s->index;
1455             if (l > size)
1456                 l = size;
1457             if (s->index + l <= sizeof(s->buf)) {
1458                 memcpy(s->buf + s->index, buf, l);
1459             } else {
1460                 fprintf(stderr, "serious error: oversized packet received,"
1461                     "connection terminated.\n");
1462                 s->state = 0;
1463                 goto eoc;
1464             }
1465
1466             s->index += l;
1467             buf += l;
1468             size -= l;
1469             if (s->index >= s->packet_len) {
1470                 qemu_send_packet(s->vc, s->buf, s->packet_len);
1471                 s->index = 0;
1472                 s->state = 0;
1473             }
1474             break;
1475         }
1476     }
1477 }
1478
1479 static void net_socket_send_dgram(void *opaque)
1480 {
1481     NetSocketState *s = opaque;
1482     int size;
1483
1484     size = recv(s->fd, s->buf, sizeof(s->buf), 0);
1485     if (size < 0)
1486         return;
1487     if (size == 0) {
1488         /* end of connection */
1489         qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1490         return;
1491     }
1492     qemu_send_packet(s->vc, s->buf, size);
1493 }
1494
1495 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
1496 {
1497     struct ip_mreq imr;
1498     int fd;
1499     int val, ret;
1500     if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
1501         fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
1502                 inet_ntoa(mcastaddr->sin_addr),
1503                 (int)ntohl(mcastaddr->sin_addr.s_addr));
1504         return -1;
1505
1506     }
1507     fd = socket(PF_INET, SOCK_DGRAM, 0);
1508     if (fd < 0) {
1509         perror("socket(PF_INET, SOCK_DGRAM)");
1510         return -1;
1511     }
1512
1513     val = 1;
1514     ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
1515                    (const char *)&val, sizeof(val));
1516     if (ret < 0) {
1517         perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
1518         goto fail;
1519     }
1520
1521     ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
1522     if (ret < 0) {
1523         perror("bind");
1524         goto fail;
1525     }
1526
1527     /* Add host to multicast group */
1528     imr.imr_multiaddr = mcastaddr->sin_addr;
1529     imr.imr_interface.s_addr = htonl(INADDR_ANY);
1530
1531     ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
1532                      (const char *)&imr, sizeof(struct ip_mreq));
1533     if (ret < 0) {
1534         perror("setsockopt(IP_ADD_MEMBERSHIP)");
1535         goto fail;
1536     }
1537
1538     /* Force mcast msgs to loopback (eg. several QEMUs in same host */
1539     val = 1;
1540     ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
1541                    (const char *)&val, sizeof(val));
1542     if (ret < 0) {
1543         perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
1544         goto fail;
1545     }
1546
1547     socket_set_nonblock(fd);
1548     return fd;
1549 fail:
1550     if (fd >= 0)
1551         closesocket(fd);
1552     return -1;
1553 }
1554
1555 static void net_socket_cleanup(VLANClientState *vc)
1556 {
1557     NetSocketState *s = vc->opaque;
1558     qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
1559     close(s->fd);
1560     qemu_free(s);
1561 }
1562
1563 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan,
1564                                                 const char *model,
1565                                                 const char *name,
1566                                                 int fd, int is_connected)
1567 {
1568     struct sockaddr_in saddr;
1569     int newfd;
1570     socklen_t saddr_len;
1571     NetSocketState *s;
1572
1573     /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
1574      * Because this may be "shared" socket from a "master" process, datagrams would be recv()
1575      * by ONLY ONE process: we must "clone" this dgram socket --jjo
1576      */
1577
1578     if (is_connected) {
1579         if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
1580             /* must be bound */
1581             if (saddr.sin_addr.s_addr==0) {
1582                 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
1583                         fd);
1584                 return NULL;
1585             }
1586             /* clone dgram socket */
1587             newfd = net_socket_mcast_create(&saddr);
1588             if (newfd < 0) {
1589                 /* error already reported by net_socket_mcast_create() */
1590                 close(fd);
1591                 return NULL;
1592             }
1593             /* clone newfd to fd, close newfd */
1594             dup2(newfd, fd);
1595             close(newfd);
1596
1597         } else {
1598             fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
1599                     fd, strerror(errno));
1600             return NULL;
1601         }
1602     }
1603
1604     s = qemu_mallocz(sizeof(NetSocketState));
1605     s->fd = fd;
1606
1607     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive_dgram,
1608                                  NULL, net_socket_cleanup, s);
1609     qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
1610
1611     /* mcast: save bound address as dst */
1612     if (is_connected) s->dgram_dst=saddr;
1613
1614     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1615             "socket: fd=%d (%s mcast=%s:%d)",
1616             fd, is_connected? "cloned" : "",
1617             inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1618     return s;
1619 }
1620
1621 static void net_socket_connect(void *opaque)
1622 {
1623     NetSocketState *s = opaque;
1624     qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
1625 }
1626
1627 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan,
1628                                                  const char *model,
1629                                                  const char *name,
1630                                                  int fd, int is_connected)
1631 {
1632     NetSocketState *s;
1633     s = qemu_mallocz(sizeof(NetSocketState));
1634     s->fd = fd;
1635     s->vc = qemu_new_vlan_client(vlan, model, name, NULL, net_socket_receive,
1636                                  NULL, net_socket_cleanup, s);
1637     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1638              "socket: fd=%d", fd);
1639     if (is_connected) {
1640         net_socket_connect(s);
1641     } else {
1642         qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
1643     }
1644     return s;
1645 }
1646
1647 static NetSocketState *net_socket_fd_init(VLANState *vlan,
1648                                           const char *model, const char *name,
1649                                           int fd, int is_connected)
1650 {
1651     int so_type=-1, optlen=sizeof(so_type);
1652
1653     if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
1654         (socklen_t *)&optlen)< 0) {
1655         fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
1656         return NULL;
1657     }
1658     switch(so_type) {
1659     case SOCK_DGRAM:
1660         return net_socket_fd_init_dgram(vlan, model, name, fd, is_connected);
1661     case SOCK_STREAM:
1662         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1663     default:
1664         /* who knows ... this could be a eg. a pty, do warn and continue as stream */
1665         fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
1666         return net_socket_fd_init_stream(vlan, model, name, fd, is_connected);
1667     }
1668     return NULL;
1669 }
1670
1671 static void net_socket_accept(void *opaque)
1672 {
1673     NetSocketListenState *s = opaque;
1674     NetSocketState *s1;
1675     struct sockaddr_in saddr;
1676     socklen_t len;
1677     int fd;
1678
1679     for(;;) {
1680         len = sizeof(saddr);
1681         fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
1682         if (fd < 0 && errno != EINTR) {
1683             return;
1684         } else if (fd >= 0) {
1685             break;
1686         }
1687     }
1688     s1 = net_socket_fd_init(s->vlan, s->model, s->name, fd, 1);
1689     if (!s1) {
1690         closesocket(fd);
1691     } else {
1692         snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
1693                  "socket: connection from %s:%d",
1694                  inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1695     }
1696 }
1697
1698 static int net_socket_listen_init(VLANState *vlan,
1699                                   const char *model,
1700                                   const char *name,
1701                                   const char *host_str)
1702 {
1703     NetSocketListenState *s;
1704     int fd, val, ret;
1705     struct sockaddr_in saddr;
1706
1707     if (parse_host_port(&saddr, host_str) < 0)
1708         return -1;
1709
1710     s = qemu_mallocz(sizeof(NetSocketListenState));
1711
1712     fd = socket(PF_INET, SOCK_STREAM, 0);
1713     if (fd < 0) {
1714         perror("socket");
1715         return -1;
1716     }
1717     socket_set_nonblock(fd);
1718
1719     /* allow fast reuse */
1720     val = 1;
1721     setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
1722
1723     ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
1724     if (ret < 0) {
1725         perror("bind");
1726         return -1;
1727     }
1728     ret = listen(fd, 0);
1729     if (ret < 0) {
1730         perror("listen");
1731         return -1;
1732     }
1733     s->vlan = vlan;
1734     s->model = strdup(model);
1735     s->name = name ? strdup(name) : NULL;
1736     s->fd = fd;
1737     qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
1738     return 0;
1739 }
1740
1741 static int net_socket_connect_init(VLANState *vlan,
1742                                    const char *model,
1743                                    const char *name,
1744                                    const char *host_str)
1745 {
1746     NetSocketState *s;
1747     int fd, connected, ret, err;
1748     struct sockaddr_in saddr;
1749
1750     if (parse_host_port(&saddr, host_str) < 0)
1751         return -1;
1752
1753     fd = socket(PF_INET, SOCK_STREAM, 0);
1754     if (fd < 0) {
1755         perror("socket");
1756         return -1;
1757     }
1758     socket_set_nonblock(fd);
1759
1760     connected = 0;
1761     for(;;) {
1762         ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
1763         if (ret < 0) {
1764             err = socket_error();
1765             if (err == EINTR || err == EWOULDBLOCK) {
1766             } else if (err == EINPROGRESS) {
1767                 break;
1768 #ifdef _WIN32
1769             } else if (err == WSAEALREADY) {
1770                 break;
1771 #endif
1772             } else {
1773                 perror("connect");
1774                 closesocket(fd);
1775                 return -1;
1776             }
1777         } else {
1778             connected = 1;
1779             break;
1780         }
1781     }
1782     s = net_socket_fd_init(vlan, model, name, fd, connected);
1783     if (!s)
1784         return -1;
1785     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1786              "socket: connect to %s:%d",
1787              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1788     return 0;
1789 }
1790
1791 static int net_socket_mcast_init(VLANState *vlan,
1792                                  const char *model,
1793                                  const char *name,
1794                                  const char *host_str)
1795 {
1796     NetSocketState *s;
1797     int fd;
1798     struct sockaddr_in saddr;
1799
1800     if (parse_host_port(&saddr, host_str) < 0)
1801         return -1;
1802
1803
1804     fd = net_socket_mcast_create(&saddr);
1805     if (fd < 0)
1806         return -1;
1807
1808     s = net_socket_fd_init(vlan, model, name, fd, 0);
1809     if (!s)
1810         return -1;
1811
1812     s->dgram_dst = saddr;
1813
1814     snprintf(s->vc->info_str, sizeof(s->vc->info_str),
1815              "socket: mcast=%s:%d",
1816              inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
1817     return 0;
1818
1819 }
1820
1821 typedef struct DumpState {
1822     VLANClientState *pcap_vc;
1823     int fd;
1824     int pcap_caplen;
1825 } DumpState;
1826
1827 #define PCAP_MAGIC 0xa1b2c3d4
1828
1829 struct pcap_file_hdr {
1830     uint32_t magic;
1831     uint16_t version_major;
1832     uint16_t version_minor;
1833     int32_t thiszone;
1834     uint32_t sigfigs;
1835     uint32_t snaplen;
1836     uint32_t linktype;
1837 };
1838
1839 struct pcap_sf_pkthdr {
1840     struct {
1841         int32_t tv_sec;
1842         int32_t tv_usec;
1843     } ts;
1844     uint32_t caplen;
1845     uint32_t len;
1846 };
1847
1848 static ssize_t dump_receive(VLANClientState *vc, const uint8_t *buf, size_t size)
1849 {
1850     DumpState *s = vc->opaque;
1851     struct pcap_sf_pkthdr hdr;
1852     int64_t ts;
1853     int caplen;
1854
1855     /* Early return in case of previous error. */
1856     if (s->fd < 0) {
1857         return size;
1858     }
1859
1860     ts = muldiv64(qemu_get_clock(vm_clock), 1000000, ticks_per_sec);
1861     caplen = size > s->pcap_caplen ? s->pcap_caplen : size;
1862
1863     hdr.ts.tv_sec = ts / 1000000;
1864     hdr.ts.tv_usec = ts % 1000000;
1865     hdr.caplen = caplen;
1866     hdr.len = size;
1867     if (write(s->fd, &hdr, sizeof(hdr)) != sizeof(hdr) ||
1868         write(s->fd, buf, caplen) != caplen) {
1869         qemu_log("-net dump write error - stop dump\n");
1870         close(s->fd);
1871         s->fd = -1;
1872     }
1873
1874     return size;
1875 }
1876
1877 static void net_dump_cleanup(VLANClientState *vc)
1878 {
1879     DumpState *s = vc->opaque;
1880
1881     close(s->fd);
1882     qemu_free(s);
1883 }
1884
1885 static int net_dump_init(Monitor *mon, VLANState *vlan, const char *device,
1886                          const char *name, const char *filename, int len)
1887 {
1888     struct pcap_file_hdr hdr;
1889     DumpState *s;
1890
1891     s = qemu_malloc(sizeof(DumpState));
1892
1893     s->fd = open(filename, O_CREAT | O_WRONLY, 0644);
1894     if (s->fd < 0) {
1895         config_error(mon, "-net dump: can't open %s\n", filename);
1896         return -1;
1897     }
1898
1899     s->pcap_caplen = len;
1900
1901     hdr.magic = PCAP_MAGIC;
1902     hdr.version_major = 2;
1903     hdr.version_minor = 4;
1904     hdr.thiszone = 0;
1905     hdr.sigfigs = 0;
1906     hdr.snaplen = s->pcap_caplen;
1907     hdr.linktype = 1;
1908
1909     if (write(s->fd, &hdr, sizeof(hdr)) < sizeof(hdr)) {
1910         config_error(mon, "-net dump write error: %s\n", strerror(errno));
1911         close(s->fd);
1912         qemu_free(s);
1913         return -1;
1914     }
1915
1916     s->pcap_vc = qemu_new_vlan_client(vlan, device, name, NULL, dump_receive, NULL,
1917                                       net_dump_cleanup, s);
1918     snprintf(s->pcap_vc->info_str, sizeof(s->pcap_vc->info_str),
1919              "dump to %s (len=%d)", filename, len);
1920     return 0;
1921 }
1922
1923 /* find or alloc a new VLAN */
1924 VLANState *qemu_find_vlan(int id)
1925 {
1926     VLANState **pvlan, *vlan;
1927     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
1928         if (vlan->id == id)
1929             return vlan;
1930     }
1931     vlan = qemu_mallocz(sizeof(VLANState));
1932     vlan->id = id;
1933     vlan->next = NULL;
1934     pvlan = &first_vlan;
1935     while (*pvlan != NULL)
1936         pvlan = &(*pvlan)->next;
1937     *pvlan = vlan;
1938     return vlan;
1939 }
1940
1941 static int nic_get_free_idx(void)
1942 {
1943     int index;
1944
1945     for (index = 0; index < MAX_NICS; index++)
1946         if (!nd_table[index].used)
1947             return index;
1948     return -1;
1949 }
1950
1951 void qemu_check_nic_model(NICInfo *nd, const char *model)
1952 {
1953     const char *models[2];
1954
1955     models[0] = model;
1956     models[1] = NULL;
1957
1958     qemu_check_nic_model_list(nd, models, model);
1959 }
1960
1961 void qemu_check_nic_model_list(NICInfo *nd, const char * const *models,
1962                                const char *default_model)
1963 {
1964     int i, exit_status = 0;
1965
1966     if (!nd->model)
1967         nd->model = strdup(default_model);
1968
1969     if (strcmp(nd->model, "?") != 0) {
1970         for (i = 0 ; models[i]; i++)
1971             if (strcmp(nd->model, models[i]) == 0)
1972                 return;
1973
1974         fprintf(stderr, "qemu: Unsupported NIC model: %s\n", nd->model);
1975         exit_status = 1;
1976     }
1977
1978     fprintf(stderr, "qemu: Supported NIC models: ");
1979     for (i = 0 ; models[i]; i++)
1980         fprintf(stderr, "%s%c", models[i], models[i+1] ? ',' : '\n');
1981
1982     exit(exit_status);
1983 }
1984
1985 int net_client_init(Monitor *mon, const char *device, const char *p)
1986 {
1987     static const char * const fd_params[] = {
1988         "vlan", "name", "fd", NULL
1989     };
1990     char buf[1024];
1991     int vlan_id, ret;
1992     VLANState *vlan;
1993     char *name = NULL;
1994
1995     vlan_id = 0;
1996     if (get_param_value(buf, sizeof(buf), "vlan", p)) {
1997         vlan_id = strtol(buf, NULL, 0);
1998     }
1999     vlan = qemu_find_vlan(vlan_id);
2000
2001     if (get_param_value(buf, sizeof(buf), "name", p)) {
2002         name = qemu_strdup(buf);
2003     }
2004     if (!strcmp(device, "nic")) {
2005         static const char * const nic_params[] = {
2006             "vlan", "name", "macaddr", "model", NULL
2007         };
2008         NICInfo *nd;
2009         uint8_t *macaddr;
2010         int idx = nic_get_free_idx();
2011
2012         if (check_params(buf, sizeof(buf), nic_params, p) < 0) {
2013             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2014             ret = -1;
2015             goto out;
2016         }
2017         if (idx == -1 || nb_nics >= MAX_NICS) {
2018             config_error(mon, "Too Many NICs\n");
2019             ret = -1;
2020             goto out;
2021         }
2022         nd = &nd_table[idx];
2023         macaddr = nd->macaddr;
2024         macaddr[0] = 0x52;
2025         macaddr[1] = 0x54;
2026         macaddr[2] = 0x00;
2027         macaddr[3] = 0x12;
2028         macaddr[4] = 0x34;
2029         macaddr[5] = 0x56 + idx;
2030
2031         if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
2032             if (parse_macaddr(macaddr, buf) < 0) {
2033                 config_error(mon, "invalid syntax for ethernet address\n");
2034                 ret = -1;
2035                 goto out;
2036             }
2037         }
2038         if (get_param_value(buf, sizeof(buf), "model", p)) {
2039             nd->model = strdup(buf);
2040         }
2041         nd->vlan = vlan;
2042         nd->name = name;
2043         nd->used = 1;
2044         name = NULL;
2045         nb_nics++;
2046         vlan->nb_guest_devs++;
2047         ret = idx;
2048     } else
2049     if (!strcmp(device, "none")) {
2050         if (*p != '\0') {
2051             config_error(mon, "'none' takes no parameters\n");
2052             ret = -1;
2053             goto out;
2054         }
2055         /* does nothing. It is needed to signal that no network cards
2056            are wanted */
2057         ret = 0;
2058     } else
2059 #ifdef CONFIG_SLIRP
2060     if (!strcmp(device, "user")) {
2061         static const char * const slirp_params[] = {
2062             "vlan", "name", "hostname", "restrict", "ip", NULL
2063         };
2064         int restricted = 0;
2065         char *ip = NULL;
2066
2067         if (check_params(buf, sizeof(buf), slirp_params, p) < 0) {
2068             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2069             ret = -1;
2070             goto out;
2071         }
2072         if (get_param_value(buf, sizeof(buf), "hostname", p)) {
2073             pstrcpy(slirp_hostname, sizeof(slirp_hostname), buf);
2074         }
2075         if (get_param_value(buf, sizeof(buf), "restrict", p)) {
2076             restricted = (buf[0] == 'y') ? 1 : 0;
2077         }
2078         if (get_param_value(buf, sizeof(buf), "ip", p)) {
2079             ip = qemu_strdup(buf);
2080         }
2081         vlan->nb_host_devs++;
2082         ret = net_slirp_init(vlan, device, name, restricted, ip);
2083         qemu_free(ip);
2084     } else if (!strcmp(device, "channel")) {
2085         long port;
2086         char name[20], *devname;
2087         struct VMChannel *vmc;
2088
2089         port = strtol(p, &devname, 10);
2090         devname++;
2091         if (port < 1 || port > 65535) {
2092             config_error(mon, "vmchannel wrong port number\n");
2093             ret = -1;
2094             goto out;
2095         }
2096         vmc = malloc(sizeof(struct VMChannel));
2097         snprintf(name, 20, "vmchannel%ld", port);
2098         vmc->hd = qemu_chr_open(name, devname, NULL);
2099         if (!vmc->hd) {
2100             config_error(mon, "could not open vmchannel device '%s'\n",
2101                          devname);
2102             ret = -1;
2103             goto out;
2104         }
2105         vmc->port = port;
2106         slirp_add_exec(3, vmc->hd, 4, port);
2107         qemu_chr_add_handlers(vmc->hd, vmchannel_can_read, vmchannel_read,
2108                 NULL, vmc);
2109         ret = 0;
2110     } else
2111 #endif
2112 #ifdef _WIN32
2113     if (!strcmp(device, "tap")) {
2114         static const char * const tap_params[] = {
2115             "vlan", "name", "ifname", NULL
2116         };
2117         char ifname[64];
2118
2119         if (check_params(buf, sizeof(buf), tap_params, p) < 0) {
2120             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2121             ret = -1;
2122             goto out;
2123         }
2124         if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2125             config_error(mon, "tap: no interface name\n");
2126             ret = -1;
2127             goto out;
2128         }
2129         vlan->nb_host_devs++;
2130         ret = tap_win32_init(vlan, device, name, ifname);
2131     } else
2132 #elif defined (_AIX)
2133 #else
2134     if (!strcmp(device, "tap")) {
2135         char ifname[64], chkbuf[64];
2136         char setup_script[1024], down_script[1024];
2137         int fd;
2138         vlan->nb_host_devs++;
2139         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2140             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2141                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2142                 ret = -1;
2143                 goto out;
2144             }
2145             fd = strtol(buf, NULL, 0);
2146             fcntl(fd, F_SETFL, O_NONBLOCK);
2147             net_tap_fd_init(vlan, device, name, fd);
2148             ret = 0;
2149         } else {
2150             static const char * const tap_params[] = {
2151                 "vlan", "name", "ifname", "script", "downscript", NULL
2152             };
2153             if (check_params(chkbuf, sizeof(chkbuf), tap_params, p) < 0) {
2154                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2155                 ret = -1;
2156                 goto out;
2157             }
2158             if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2159                 ifname[0] = '\0';
2160             }
2161             if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
2162                 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
2163             }
2164             if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
2165                 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
2166             }
2167             ret = net_tap_init(vlan, device, name, ifname, setup_script, down_script);
2168         }
2169     } else
2170 #endif
2171     if (!strcmp(device, "socket")) {
2172         char chkbuf[64];
2173         if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2174             int fd;
2175             if (check_params(chkbuf, sizeof(chkbuf), fd_params, p) < 0) {
2176                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2177                 ret = -1;
2178                 goto out;
2179             }
2180             fd = strtol(buf, NULL, 0);
2181             ret = -1;
2182             if (net_socket_fd_init(vlan, device, name, fd, 1))
2183                 ret = 0;
2184         } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
2185             static const char * const listen_params[] = {
2186                 "vlan", "name", "listen", NULL
2187             };
2188             if (check_params(chkbuf, sizeof(chkbuf), listen_params, p) < 0) {
2189                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2190                 ret = -1;
2191                 goto out;
2192             }
2193             ret = net_socket_listen_init(vlan, device, name, buf);
2194         } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
2195             static const char * const connect_params[] = {
2196                 "vlan", "name", "connect", NULL
2197             };
2198             if (check_params(chkbuf, sizeof(chkbuf), connect_params, p) < 0) {
2199                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2200                 ret = -1;
2201                 goto out;
2202             }
2203             ret = net_socket_connect_init(vlan, device, name, buf);
2204         } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
2205             static const char * const mcast_params[] = {
2206                 "vlan", "name", "mcast", NULL
2207             };
2208             if (check_params(chkbuf, sizeof(chkbuf), mcast_params, p) < 0) {
2209                 config_error(mon, "invalid parameter '%s' in '%s'\n", chkbuf, p);
2210                 ret = -1;
2211                 goto out;
2212             }
2213             ret = net_socket_mcast_init(vlan, device, name, buf);
2214         } else {
2215             config_error(mon, "Unknown socket options: %s\n", p);
2216             ret = -1;
2217             goto out;
2218         }
2219         vlan->nb_host_devs++;
2220     } else
2221 #ifdef CONFIG_VDE
2222     if (!strcmp(device, "vde")) {
2223         static const char * const vde_params[] = {
2224             "vlan", "name", "sock", "port", "group", "mode", NULL
2225         };
2226         char vde_sock[1024], vde_group[512];
2227         int vde_port, vde_mode;
2228
2229         if (check_params(buf, sizeof(buf), vde_params, p) < 0) {
2230             config_error(mon, "invalid parameter '%s' in '%s'\n", buf, p);
2231             ret = -1;
2232             goto out;
2233         }
2234         vlan->nb_host_devs++;
2235         if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
2236             vde_sock[0] = '\0';
2237         }
2238         if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
2239             vde_port = strtol(buf, NULL, 10);
2240         } else {
2241             vde_port = 0;
2242         }
2243         if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
2244             vde_group[0] = '\0';
2245         }
2246         if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
2247             vde_mode = strtol(buf, NULL, 8);
2248         } else {
2249             vde_mode = 0700;
2250         }
2251         ret = net_vde_init(vlan, device, name, vde_sock, vde_port, vde_group, vde_mode);
2252     } else
2253 #endif
2254     if (!strcmp(device, "dump")) {
2255         int len = 65536;
2256
2257         if (get_param_value(buf, sizeof(buf), "len", p) > 0) {
2258             len = strtol(buf, NULL, 0);
2259         }
2260         if (!get_param_value(buf, sizeof(buf), "file", p)) {
2261             snprintf(buf, sizeof(buf), "qemu-vlan%d.pcap", vlan_id);
2262         }
2263         ret = net_dump_init(mon, vlan, device, name, buf, len);
2264     } else {
2265         config_error(mon, "Unknown network device: %s\n", device);
2266         ret = -1;
2267         goto out;
2268     }
2269     if (ret < 0) {
2270         config_error(mon, "Could not initialize device '%s'\n", device);
2271     }
2272 out:
2273     qemu_free(name);
2274     return ret;
2275 }
2276
2277 void net_client_uninit(NICInfo *nd)
2278 {
2279     nd->vlan->nb_guest_devs--;
2280     nb_nics--;
2281     nd->used = 0;
2282     free((void *)nd->model);
2283 }
2284
2285 static int net_host_check_device(const char *device)
2286 {
2287     int i;
2288     const char *valid_param_list[] = { "tap", "socket", "dump"
2289 #ifdef CONFIG_SLIRP
2290                                        ,"user"
2291 #endif
2292 #ifdef CONFIG_VDE
2293                                        ,"vde"
2294 #endif
2295     };
2296     for (i = 0; i < sizeof(valid_param_list) / sizeof(char *); i++) {
2297         if (!strncmp(valid_param_list[i], device,
2298                      strlen(valid_param_list[i])))
2299             return 1;
2300     }
2301
2302     return 0;
2303 }
2304
2305 void net_host_device_add(Monitor *mon, const char *device, const char *opts)
2306 {
2307     if (!net_host_check_device(device)) {
2308         monitor_printf(mon, "invalid host network device %s\n", device);
2309         return;
2310     }
2311     if (net_client_init(mon, device, opts ? opts : "") < 0) {
2312         monitor_printf(mon, "adding host network device %s failed\n", device);
2313     }
2314 }
2315
2316 void net_host_device_remove(Monitor *mon, int vlan_id, const char *device)
2317 {
2318     VLANState *vlan;
2319     VLANClientState *vc;
2320
2321     vlan = qemu_find_vlan(vlan_id);
2322
2323     for (vc = vlan->first_client; vc != NULL; vc = vc->next) {
2324         if (!strcmp(vc->name, device)) {
2325             break;
2326         }
2327     }
2328
2329     if (!vc) {
2330         monitor_printf(mon, "can't find device %s\n", device);
2331         return;
2332     }
2333     if (!net_host_check_device(vc->model)) {
2334         monitor_printf(mon, "invalid host network device %s\n", device);
2335         return;
2336     }
2337     qemu_del_vlan_client(vc);
2338 }
2339
2340 int net_client_parse(const char *str)
2341 {
2342     const char *p;
2343     char *q;
2344     char device[64];
2345
2346     p = str;
2347     q = device;
2348     while (*p != '\0' && *p != ',') {
2349         if ((q - device) < sizeof(device) - 1)
2350             *q++ = *p;
2351         p++;
2352     }
2353     *q = '\0';
2354     if (*p == ',')
2355         p++;
2356
2357     return net_client_init(NULL, device, p);
2358 }
2359
2360 void do_info_network(Monitor *mon)
2361 {
2362     VLANState *vlan;
2363     VLANClientState *vc;
2364
2365     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2366         monitor_printf(mon, "VLAN %d devices:\n", vlan->id);
2367         for(vc = vlan->first_client; vc != NULL; vc = vc->next)
2368             monitor_printf(mon, "  %s: %s\n", vc->name, vc->info_str);
2369     }
2370 }
2371
2372 int do_set_link(Monitor *mon, const char *name, const char *up_or_down)
2373 {
2374     VLANState *vlan;
2375     VLANClientState *vc = NULL;
2376
2377     for (vlan = first_vlan; vlan != NULL; vlan = vlan->next)
2378         for (vc = vlan->first_client; vc != NULL; vc = vc->next)
2379             if (strcmp(vc->name, name) == 0)
2380                 goto done;
2381 done:
2382
2383     if (!vc) {
2384         monitor_printf(mon, "could not find network device '%s'", name);
2385         return 0;
2386     }
2387
2388     if (strcmp(up_or_down, "up") == 0)
2389         vc->link_down = 0;
2390     else if (strcmp(up_or_down, "down") == 0)
2391         vc->link_down = 1;
2392     else
2393         monitor_printf(mon, "invalid link status '%s'; only 'up' or 'down' "
2394                        "valid\n", up_or_down);
2395
2396     if (vc->link_status_changed)
2397         vc->link_status_changed(vc);
2398
2399     return 1;
2400 }
2401
2402 void net_cleanup(void)
2403 {
2404     VLANState *vlan;
2405
2406     /* close network clients */
2407     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2408         VLANClientState *vc = vlan->first_client;
2409
2410         while (vc) {
2411             VLANClientState *next = vc->next;
2412
2413             qemu_del_vlan_client(vc);
2414
2415             vc = next;
2416         }
2417     }
2418 }
2419
2420 void net_client_check(void)
2421 {
2422     VLANState *vlan;
2423
2424     for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2425         if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
2426             continue;
2427         if (vlan->nb_guest_devs == 0)
2428             fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
2429         if (vlan->nb_host_devs == 0)
2430             fprintf(stderr,
2431                     "Warning: vlan %d is not connected to host network\n",
2432                     vlan->id);
2433     }
2434 }