?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
sclpconsolelm: remove bogus check for -EAGAIN
[qemu.git] / qemu-char.c
blobcf6a27a1bcbf35d8f165cddb1cf0d0b007361f5d
1 /*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24 #include "qemu/osdep.h"
25 #include "qemu-common.h"
26 #include "qemu/cutils.h"
27 #include "monitor/monitor.h"
28 #include "sysemu/sysemu.h"
29 #include "sysemu/block-backend.h"
30 #include "qemu/error-report.h"
31 #include "qemu/timer.h"
32 #include "sysemu/char.h"
33 #include "hw/usb.h"
34 #include "qmp-commands.h"
35 #include "qapi/clone-visitor.h"
36 #include "qapi-visit.h"
37 #include "qemu/base64.h"
38 #include "io/channel-socket.h"
39 #include "io/channel-file.h"
40 #include "io/channel-tls.h"
41 #include "sysemu/replay.h"
42 #include "qemu/help_option.h"
43
44 #include <zlib.h>
45
46 #ifndef _WIN32
47 #include <sys/times.h>
48 #include <sys/wait.h>
49 #include <termios.h>
50 #include <sys/ioctl.h>
51 #include <sys/resource.h>
52 #include <sys/socket.h>
53 #include <netinet/in.h>
54 #include <net/if.h>
55 #include <arpa/inet.h>
56 #include <netdb.h>
57 #include <sys/select.h>
58 #ifdef CONFIG_BSD
59 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
60 #include <dev/ppbus/ppi.h>
61 #include <dev/ppbus/ppbconf.h>
62 #elif defined(__DragonFly__)
63 #include <dev/misc/ppi/ppi.h>
64 #include <bus/ppbus/ppbconf.h>
65 #endif
66 #else
67 #ifdef __linux__
68 #include <linux/ppdev.h>
69 #include <linux/parport.h>
70 #endif
71 #ifdef __sun__
72 #include <sys/ethernet.h>
73 #include <sys/sockio.h>
74 #include <netinet/arp.h>
75 #include <netinet/in.h>
76 #include <netinet/in_systm.h>
77 #include <netinet/ip.h>
78 #include <netinet/ip_icmp.h> // must come after ip.h
79 #include <netinet/udp.h>
80 #include <netinet/tcp.h>
81 #endif
82 #endif
83 #endif
84
85 #include "qemu/sockets.h"
86 #include "ui/qemu-spice.h"
87
88 #define READ_BUF_LEN 4096
89 #define READ_RETRIES 10
90 #define TCP_MAX_FDS 16
91
92 /***********************************************************/
93 /* Socket address helpers */
94
95 static char *SocketAddress_to_str(const char *prefix, SocketAddress *addr,
96 bool is_listen, bool is_telnet)
97 {
98 switch (addr->type) {
99 case SOCKET_ADDRESS_KIND_INET:
100 return g_strdup_printf("%s%s:%s:%s%s", prefix,
101 is_telnet ? "telnet" : "tcp",
102 addr->u.inet.data->host,
103 addr->u.inet.data->port,
104 is_listen ? ",server" : "");
105 break;
106 case SOCKET_ADDRESS_KIND_UNIX:
107 return g_strdup_printf("%sunix:%s%s", prefix,
108 addr->u.q_unix.data->path,
109 is_listen ? ",server" : "");
110 break;
111 case SOCKET_ADDRESS_KIND_FD:
112 return g_strdup_printf("%sfd:%s%s", prefix, addr->u.fd.data->str,
113 is_listen ? ",server" : "");
114 break;
115 default:
116 abort();
117 }
118 }
119
120 static char *sockaddr_to_str(struct sockaddr_storage *ss, socklen_t ss_len,
121 struct sockaddr_storage *ps, socklen_t ps_len,
122 bool is_listen, bool is_telnet)
123 {
124 char shost[NI_MAXHOST], sserv[NI_MAXSERV];
125 char phost[NI_MAXHOST], pserv[NI_MAXSERV];
126 const char *left = "", *right = "";
127
128 switch (ss->ss_family) {
129 #ifndef _WIN32
130 case AF_UNIX:
131 return g_strdup_printf("unix:%s%s",
132 ((struct sockaddr_un *)(ss))->sun_path,
133 is_listen ? ",server" : "");
134 #endif
135 case AF_INET6:
136 left = "[";
137 right = "]";
138 /* fall through */
139 case AF_INET:
140 getnameinfo((struct sockaddr *) ss, ss_len, shost, sizeof(shost),
141 sserv, sizeof(sserv), NI_NUMERICHOST | NI_NUMERICSERV);
142 getnameinfo((struct sockaddr *) ps, ps_len, phost, sizeof(phost),
143 pserv, sizeof(pserv), NI_NUMERICHOST | NI_NUMERICSERV);
144 return g_strdup_printf("%s:%s%s%s:%s%s <-> %s%s%s:%s",
145 is_telnet ? "telnet" : "tcp",
146 left, shost, right, sserv,
147 is_listen ? ",server" : "",
148 left, phost, right, pserv);
149
150 default:
151 return g_strdup_printf("unknown");
152 }
153 }
154
155 /***********************************************************/
156 /* character device */
157
158 static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
159 QTAILQ_HEAD_INITIALIZER(chardevs);
160
161 static void qemu_chr_free_common(CharDriverState *chr);
162
163 CharDriverState *qemu_chr_alloc(ChardevCommon *backend, Error **errp)
164 {
165 CharDriverState *chr = g_malloc0(sizeof(CharDriverState));
166 qemu_mutex_init(&chr->chr_write_lock);
167
168 if (backend->has_logfile) {
169 int flags = O_WRONLY | O_CREAT;
170 if (backend->has_logappend &&
171 backend->logappend) {
172 flags |= O_APPEND;
173 } else {
174 flags |= O_TRUNC;
175 }
176 chr->logfd = qemu_open(backend->logfile, flags, 0666);
177 if (chr->logfd < 0) {
178 error_setg_errno(errp, errno,
179 "Unable to open logfile %s",
180 backend->logfile);
181 g_free(chr);
182 return NULL;
183 }
184 } else {
185 chr->logfd = -1;
186 }
187
188 return chr;
189 }
190
191 void qemu_chr_be_event(CharDriverState *s, int event)
192 {
193 /* Keep track if the char device is open */
194 switch (event) {
195 case CHR_EVENT_OPENED:
196 s->be_open = 1;
197 break;
198 case CHR_EVENT_CLOSED:
199 s->be_open = 0;
200 break;
201 }
202
203 if (!s->chr_event)
204 return;
205 s->chr_event(s->handler_opaque, event);
206 }
207
208 void qemu_chr_be_generic_open(CharDriverState *s)
209 {
210 qemu_chr_be_event(s, CHR_EVENT_OPENED);
211 }
212
213
214 /* Not reporting errors from writing to logfile, as logs are
215 * defined to be "best effort" only */
216 static void qemu_chr_fe_write_log(CharDriverState *s,
217 const uint8_t *buf, size_t len)
218 {
219 size_t done = 0;
220 ssize_t ret;
221
222 if (s->logfd < 0) {
223 return;
224 }
225
226 while (done < len) {
227 retry:
228 ret = write(s->logfd, buf + done, len - done);
229 if (ret == -1 && errno == EAGAIN) {
230 g_usleep(100);
231 goto retry;
232 }
233
234 if (ret <= 0) {
235 return;
236 }
237 done += ret;
238 }
239 }
240
241 static int qemu_chr_fe_write_buffer(CharDriverState *s, const uint8_t *buf, int len, int *offset)
242 {
243 int res = 0;
244 *offset = 0;
245
246 qemu_mutex_lock(&s->chr_write_lock);
247 while (*offset < len) {
248 retry:
249 res = s->chr_write(s, buf + *offset, len - *offset);
250 if (res < 0 && errno == EAGAIN) {
251 g_usleep(100);
252 goto retry;
253 }
254
255 if (res <= 0) {
256 break;
257 }
258
259 *offset += res;
260 }
261 if (*offset > 0) {
262 qemu_chr_fe_write_log(s, buf, *offset);
263 }
264 qemu_mutex_unlock(&s->chr_write_lock);
265
266 return res;
267 }
268
269 int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
270 {
271 int ret;
272
273 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
274 int offset;
275 replay_char_write_event_load(&ret, &offset);
276 assert(offset <= len);
277 qemu_chr_fe_write_buffer(s, buf, offset, &offset);
278 return ret;
279 }
280
281 qemu_mutex_lock(&s->chr_write_lock);
282 ret = s->chr_write(s, buf, len);
283
284 if (ret > 0) {
285 qemu_chr_fe_write_log(s, buf, ret);
286 }
287
288 qemu_mutex_unlock(&s->chr_write_lock);
289
290 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
291 replay_char_write_event_save(ret, ret < 0 ? 0 : ret);
292 }
293
294 return ret;
295 }
296
297 int qemu_chr_fe_write_all(CharDriverState *s, const uint8_t *buf, int len)
298 {
299 int offset;
300 int res;
301
302 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
303 replay_char_write_event_load(&res, &offset);
304 assert(offset <= len);
305 qemu_chr_fe_write_buffer(s, buf, offset, &offset);
306 return res;
307 }
308
309 res = qemu_chr_fe_write_buffer(s, buf, len, &offset);
310
311 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
312 replay_char_write_event_save(res, offset);
313 }
314
315 if (res < 0) {
316 return res;
317 }
318 return offset;
319 }
320
321 int qemu_chr_fe_read_all(CharDriverState *s, uint8_t *buf, int len)
322 {
323 int offset = 0, counter = 10;
324 int res;
325
326 if (!s->chr_sync_read) {
327 return 0;
328 }
329
330 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
331 return replay_char_read_all_load(buf);
332 }
333
334 while (offset < len) {
335 retry:
336 res = s->chr_sync_read(s, buf + offset, len - offset);
337 if (res == -1 && errno == EAGAIN) {
338 g_usleep(100);
339 goto retry;
340 }
341
342 if (res == 0) {
343 break;
344 }
345
346 if (res < 0) {
347 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
348 replay_char_read_all_save_error(res);
349 }
350 return res;
351 }
352
353 offset += res;
354
355 if (!counter--) {
356 break;
357 }
358 }
359
360 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
361 replay_char_read_all_save_buf(buf, offset);
362 }
363 return offset;
364 }
365
366 int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
367 {
368 int res;
369 if (!s->chr_ioctl || s->replay) {
370 res = -ENOTSUP;
371 } else {
372 res = s->chr_ioctl(s, cmd, arg);
373 }
374
375 return res;
376 }
377
378 int qemu_chr_be_can_write(CharDriverState *s)
379 {
380 if (!s->chr_can_read)
381 return 0;
382 return s->chr_can_read(s->handler_opaque);
383 }
384
385 void qemu_chr_be_write_impl(CharDriverState *s, uint8_t *buf, int len)
386 {
387 if (s->chr_read) {
388 s->chr_read(s->handler_opaque, buf, len);
389 }
390 }
391
392 void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
393 {
394 if (s->replay) {
395 if (replay_mode == REPLAY_MODE_PLAY) {
396 return;
397 }
398 replay_chr_be_write(s, buf, len);
399 } else {
400 qemu_chr_be_write_impl(s, buf, len);
401 }
402 }
403
404 int qemu_chr_fe_get_msgfd(CharDriverState *s)
405 {
406 int fd;
407 int res = (qemu_chr_fe_get_msgfds(s, &fd, 1) == 1) ? fd : -1;
408 if (s->replay) {
409 fprintf(stderr,
410 "Replay: get msgfd is not supported for serial devices yet\n");
411 exit(1);
412 }
413 return res;
414 }
415
416 int qemu_chr_fe_get_msgfds(CharDriverState *s, int *fds, int len)
417 {
418 return s->get_msgfds ? s->get_msgfds(s, fds, len) : -1;
419 }
420
421 int qemu_chr_fe_set_msgfds(CharDriverState *s, int *fds, int num)
422 {
423 return s->set_msgfds ? s->set_msgfds(s, fds, num) : -1;
424 }
425
426 int qemu_chr_add_client(CharDriverState *s, int fd)
427 {
428 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
429 }
430
431 void qemu_chr_accept_input(CharDriverState *s)
432 {
433 if (s->chr_accept_input)
434 s->chr_accept_input(s);
435 qemu_notify_event();
436 }
437
438 void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
439 {
440 char buf[READ_BUF_LEN];
441 va_list ap;
442 va_start(ap, fmt);
443 vsnprintf(buf, sizeof(buf), fmt, ap);
444 qemu_chr_fe_write(s, (uint8_t *)buf, strlen(buf));
445 va_end(ap);
446 }
447
448 static void remove_fd_in_watch(CharDriverState *chr);
449
450 void qemu_chr_add_handlers(CharDriverState *s,
451 IOCanReadHandler *fd_can_read,
452 IOReadHandler *fd_read,
453 IOEventHandler *fd_event,
454 void *opaque)
455 {
456 int fe_open;
457
458 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
459 fe_open = 0;
460 remove_fd_in_watch(s);
461 } else {
462 fe_open = 1;
463 }
464 s->chr_can_read = fd_can_read;
465 s->chr_read = fd_read;
466 s->chr_event = fd_event;
467 s->handler_opaque = opaque;
468 if (fe_open && s->chr_update_read_handler)
469 s->chr_update_read_handler(s);
470
471 if (!s->explicit_fe_open) {
472 qemu_chr_fe_set_open(s, fe_open);
473 }
474
475 /* We're connecting to an already opened device, so let's make sure we
476 also get the open event */
477 if (fe_open && s->be_open) {
478 qemu_chr_be_generic_open(s);
479 }
480 }
481
482 static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
483 {
484 return len;
485 }
486
487 static CharDriverState *qemu_chr_open_null(const char *id,
488 ChardevBackend *backend,
489 ChardevReturn *ret,
490 Error **errp)
491 {
492 CharDriverState *chr;
493 ChardevCommon *common = backend->u.null.data;
494
495 chr = qemu_chr_alloc(common, errp);
496 if (!chr) {
497 return NULL;
498 }
499 chr->chr_write = null_chr_write;
500 chr->explicit_be_open = true;
501 return chr;
502 }
503
504 /* MUX driver for serial I/O splitting */
505 #define MAX_MUX 4
506 #define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
507 #define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
508 typedef struct {
509 IOCanReadHandler *chr_can_read[MAX_MUX];
510 IOReadHandler *chr_read[MAX_MUX];
511 IOEventHandler *chr_event[MAX_MUX];
512 void *ext_opaque[MAX_MUX];
513 CharDriverState *drv;
514 int focus;
515 int mux_cnt;
516 int term_got_escape;
517 int max_size;
518 /* Intermediate input buffer allows to catch escape sequences even if the
519 currently active device is not accepting any input - but only until it
520 is full as well. */
521 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
522 int prod[MAX_MUX];
523 int cons[MAX_MUX];
524 int timestamps;
525
526 /* Protected by the CharDriverState chr_write_lock. */
527 int linestart;
528 int64_t timestamps_start;
529 } MuxDriver;
530
531
532 /* Called with chr_write_lock held. */
533 static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
534 {
535 MuxDriver *d = chr->opaque;
536 int ret;
537 if (!d->timestamps) {
538 ret = qemu_chr_fe_write(d->drv, buf, len);
539 } else {
540 int i;
541
542 ret = 0;
543 for (i = 0; i < len; i++) {
544 if (d->linestart) {
545 char buf1[64];
546 int64_t ti;
547 int secs;
548
549 ti = qemu_clock_get_ms(QEMU_CLOCK_REALTIME);
550 if (d->timestamps_start == -1)
551 d->timestamps_start = ti;
552 ti -= d->timestamps_start;
553 secs = ti / 1000;
554 snprintf(buf1, sizeof(buf1),
555 "[%02d:%02d:%02d.%03d] ",
556 secs / 3600,
557 (secs / 60) % 60,
558 secs % 60,
559 (int)(ti % 1000));
560 qemu_chr_fe_write(d->drv, (uint8_t *)buf1, strlen(buf1));
561 d->linestart = 0;
562 }
563 ret += qemu_chr_fe_write(d->drv, buf+i, 1);
564 if (buf[i] == '\n') {
565 d->linestart = 1;
566 }
567 }
568 }
569 return ret;
570 }
571
572 static const char * const mux_help[] = {
573 "% h print this help\n\r",
574 "% x exit emulator\n\r",
575 "% s save disk data back to file (if -snapshot)\n\r",
576 "% t toggle console timestamps\n\r",
577 "% b send break (magic sysrq)\n\r",
578 "% c switch between console and monitor\n\r",
579 "% % sends %\n\r",
580 NULL
581 };
582
583 int term_escape_char = 0x01; /* ctrl-a is used for escape */
584 static void mux_print_help(CharDriverState *chr)
585 {
586 int i, j;
587 char ebuf[15] = "Escape-Char";
588 char cbuf[50] = "\n\r";
589
590 if (term_escape_char > 0 && term_escape_char < 26) {
591 snprintf(cbuf, sizeof(cbuf), "\n\r");
592 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
593 } else {
594 snprintf(cbuf, sizeof(cbuf),
595 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
596 term_escape_char);
597 }
598 qemu_chr_fe_write(chr, (uint8_t *)cbuf, strlen(cbuf));
599 for (i = 0; mux_help[i] != NULL; i++) {
600 for (j=0; mux_help[i][j] != '\0'; j++) {
601 if (mux_help[i][j] == '%')
602 qemu_chr_fe_write(chr, (uint8_t *)ebuf, strlen(ebuf));
603 else
604 qemu_chr_fe_write(chr, (uint8_t *)&mux_help[i][j], 1);
605 }
606 }
607 }
608
609 static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
610 {
611 if (d->chr_event[mux_nr])
612 d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
613 }
614
615 static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
616 {
617 if (d->term_got_escape) {
618 d->term_got_escape = 0;
619 if (ch == term_escape_char)
620 goto send_char;
621 switch(ch) {
622 case '?':
623 case 'h':
624 mux_print_help(chr);
625 break;
626 case 'x':
627 {
628 const char *term = "QEMU: Terminated\n\r";
629 qemu_chr_fe_write(chr, (uint8_t *)term, strlen(term));
630 exit(0);
631 break;
632 }
633 case 's':
634 blk_commit_all();
635 break;
636 case 'b':
637 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
638 break;
639 case 'c':
640 /* Switch to the next registered device */
641 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
642 d->focus++;
643 if (d->focus >= d->mux_cnt)
644 d->focus = 0;
645 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
646 break;
647 case 't':
648 d->timestamps = !d->timestamps;
649 d->timestamps_start = -1;
650 d->linestart = 0;
651 break;
652 }
653 } else if (ch == term_escape_char) {
654 d->term_got_escape = 1;
655 } else {
656 send_char:
657 return 1;
658 }
659 return 0;
660 }
661
662 static void mux_chr_accept_input(CharDriverState *chr)
663 {
664 MuxDriver *d = chr->opaque;
665 int m = d->focus;
666
667 while (d->prod[m] != d->cons[m] &&
668 d->chr_can_read[m] &&
669 d->chr_can_read[m](d->ext_opaque[m])) {
670 d->chr_read[m](d->ext_opaque[m],
671 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
672 }
673 }
674
675 static int mux_chr_can_read(void *opaque)
676 {
677 CharDriverState *chr = opaque;
678 MuxDriver *d = chr->opaque;
679 int m = d->focus;
680
681 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
682 return 1;
683 if (d->chr_can_read[m])
684 return d->chr_can_read[m](d->ext_opaque[m]);
685 return 0;
686 }
687
688 static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
689 {
690 CharDriverState *chr = opaque;
691 MuxDriver *d = chr->opaque;
692 int m = d->focus;
693 int i;
694
695 mux_chr_accept_input (opaque);
696
697 for(i = 0; i < size; i++)
698 if (mux_proc_byte(chr, d, buf[i])) {
699 if (d->prod[m] == d->cons[m] &&
700 d->chr_can_read[m] &&
701 d->chr_can_read[m](d->ext_opaque[m]))
702 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
703 else
704 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
705 }
706 }
707
708 static void mux_chr_event(void *opaque, int event)
709 {
710 CharDriverState *chr = opaque;
711 MuxDriver *d = chr->opaque;
712 int i;
713
714 /* Send the event to all registered listeners */
715 for (i = 0; i < d->mux_cnt; i++)
716 mux_chr_send_event(d, i, event);
717 }
718
719 static void mux_chr_update_read_handler(CharDriverState *chr)
720 {
721 MuxDriver *d = chr->opaque;
722
723 if (d->mux_cnt >= MAX_MUX) {
724 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
725 return;
726 }
727 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
728 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
729 d->chr_read[d->mux_cnt] = chr->chr_read;
730 d->chr_event[d->mux_cnt] = chr->chr_event;
731 /* Fix up the real driver with mux routines */
732 if (d->mux_cnt == 0) {
733 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
734 mux_chr_event, chr);
735 }
736 if (d->focus != -1) {
737 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
738 }
739 d->focus = d->mux_cnt;
740 d->mux_cnt++;
741 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
742 }
743
744 static bool muxes_realized;
745
746 /**
747 * Called after processing of default and command-line-specified
748 * chardevs to deliver CHR_EVENT_OPENED events to any FEs attached
749 * to a mux chardev. This is done here to ensure that
750 * output/prompts/banners are only displayed for the FE that has
751 * focus when initial command-line processing/machine init is
752 * completed.
753 *
754 * After this point, any new FE attached to any new or existing
755 * mux will receive CHR_EVENT_OPENED notifications for the BE
756 * immediately.
757 */
758 static void muxes_realize_done(Notifier *notifier, void *unused)
759 {
760 CharDriverState *chr;
761
762 QTAILQ_FOREACH(chr, &chardevs, next) {
763 if (chr->is_mux) {
764 MuxDriver *d = chr->opaque;
765 int i;
766
767 /* send OPENED to all already-attached FEs */
768 for (i = 0; i < d->mux_cnt; i++) {
769 mux_chr_send_event(d, i, CHR_EVENT_OPENED);
770 }
771 /* mark mux as OPENED so any new FEs will immediately receive
772 * OPENED event
773 */
774 qemu_chr_be_generic_open(chr);
775 }
776 }
777 muxes_realized = true;
778 }
779
780 static Notifier muxes_realize_notify = {
781 .notify = muxes_realize_done,
782 };
783
784 static GSource *mux_chr_add_watch(CharDriverState *s, GIOCondition cond)
785 {
786 MuxDriver *d = s->opaque;
787 return d->drv->chr_add_watch(d->drv, cond);
788 }
789
790 static void mux_chr_close(struct CharDriverState *chr)
791 {
792 MuxDriver *d = chr->opaque;
793
794 g_free(d);
795 }
796
797 static CharDriverState *qemu_chr_open_mux(const char *id,
798 ChardevBackend *backend,
799 ChardevReturn *ret, Error **errp)
800 {
801 ChardevMux *mux = backend->u.mux.data;
802 CharDriverState *chr, *drv;
803 MuxDriver *d;
804 ChardevCommon *common = qapi_ChardevMux_base(mux);
805
806 drv = qemu_chr_find(mux->chardev);
807 if (drv == NULL) {
808 error_setg(errp, "mux: base chardev %s not found", mux->chardev);
809 return NULL;
810 }
811
812 chr = qemu_chr_alloc(common, errp);
813 if (!chr) {
814 return NULL;
815 }
816 d = g_new0(MuxDriver, 1);
817
818 chr->opaque = d;
819 d->drv = drv;
820 d->focus = -1;
821 chr->chr_close = mux_chr_close;
822 chr->chr_write = mux_chr_write;
823 chr->chr_update_read_handler = mux_chr_update_read_handler;
824 chr->chr_accept_input = mux_chr_accept_input;
825 /* Frontend guest-open / -close notification is not support with muxes */
826 chr->chr_set_fe_open = NULL;
827 if (drv->chr_add_watch) {
828 chr->chr_add_watch = mux_chr_add_watch;
829 }
830 /* only default to opened state if we've realized the initial
831 * set of muxes
832 */
833 chr->explicit_be_open = muxes_realized ? 0 : 1;
834 chr->is_mux = 1;
835
836 return chr;
837 }
838
839
840 typedef struct IOWatchPoll
841 {
842 GSource parent;
843
844 QIOChannel *ioc;
845 GSource *src;
846
847 IOCanReadHandler *fd_can_read;
848 GSourceFunc fd_read;
849 void *opaque;
850 } IOWatchPoll;
851
852 static IOWatchPoll *io_watch_poll_from_source(GSource *source)
853 {
854 return container_of(source, IOWatchPoll, parent);
855 }
856
857 static gboolean io_watch_poll_prepare(GSource *source, gint *timeout_)
858 {
859 IOWatchPoll *iwp = io_watch_poll_from_source(source);
860 bool now_active = iwp->fd_can_read(iwp->opaque) > 0;
861 bool was_active = iwp->src != NULL;
862 if (was_active == now_active) {
863 return FALSE;
864 }
865
866 if (now_active) {
867 iwp->src = qio_channel_create_watch(
868 iwp->ioc, G_IO_IN | G_IO_ERR | G_IO_HUP | G_IO_NVAL);
869 g_source_set_callback(iwp->src, iwp->fd_read, iwp->opaque, NULL);
870 g_source_attach(iwp->src, NULL);
871 } else {
872 g_source_destroy(iwp->src);
873 g_source_unref(iwp->src);
874 iwp->src = NULL;
875 }
876 return FALSE;
877 }
878
879 static gboolean io_watch_poll_check(GSource *source)
880 {
881 return FALSE;
882 }
883
884 static gboolean io_watch_poll_dispatch(GSource *source, GSourceFunc callback,
885 gpointer user_data)
886 {
887 abort();
888 }
889
890 static void io_watch_poll_finalize(GSource *source)
891 {
892 /* Due to a glib bug, removing the last reference to a source
893 * inside a finalize callback causes recursive locking (and a
894 * deadlock). This is not a problem inside other callbacks,
895 * including dispatch callbacks, so we call io_remove_watch_poll
896 * to remove this source. At this point, iwp->src must
897 * be NULL, or we would leak it.
898 *
899 * This would be solved much more elegantly by child sources,
900 * but we support older glib versions that do not have them.
901 */
902 IOWatchPoll *iwp = io_watch_poll_from_source(source);
903 assert(iwp->src == NULL);
904 }
905
906 static GSourceFuncs io_watch_poll_funcs = {
907 .prepare = io_watch_poll_prepare,
908 .check = io_watch_poll_check,
909 .dispatch = io_watch_poll_dispatch,
910 .finalize = io_watch_poll_finalize,
911 };
912
913 /* Can only be used for read */
914 static guint io_add_watch_poll(QIOChannel *ioc,
915 IOCanReadHandler *fd_can_read,
916 QIOChannelFunc fd_read,
917 gpointer user_data)
918 {
919 IOWatchPoll *iwp;
920 int tag;
921
922 iwp = (IOWatchPoll *) g_source_new(&io_watch_poll_funcs, sizeof(IOWatchPoll));
923 iwp->fd_can_read = fd_can_read;
924 iwp->opaque = user_data;
925 iwp->ioc = ioc;
926 iwp->fd_read = (GSourceFunc) fd_read;
927 iwp->src = NULL;
928
929 tag = g_source_attach(&iwp->parent, NULL);
930 g_source_unref(&iwp->parent);
931 return tag;
932 }
933
934 static void io_remove_watch_poll(guint tag)
935 {
936 GSource *source;
937 IOWatchPoll *iwp;
938
939 g_return_if_fail (tag > 0);
940
941 source = g_main_context_find_source_by_id(NULL, tag);
942 g_return_if_fail (source != NULL);
943
944 iwp = io_watch_poll_from_source(source);
945 if (iwp->src) {
946 g_source_destroy(iwp->src);
947 g_source_unref(iwp->src);
948 iwp->src = NULL;
949 }
950 g_source_destroy(&iwp->parent);
951 }
952
953 static void remove_fd_in_watch(CharDriverState *chr)
954 {
955 if (chr->fd_in_tag) {
956 io_remove_watch_poll(chr->fd_in_tag);
957 chr->fd_in_tag = 0;
958 }
959 }
960
961
962 static int io_channel_send_full(QIOChannel *ioc,
963 const void *buf, size_t len,
964 int *fds, size_t nfds)
965 {
966 size_t offset = 0;
967
968 while (offset < len) {
969 ssize_t ret = 0;
970 struct iovec iov = { .iov_base = (char *)buf + offset,
971 .iov_len = len - offset };
972
973 ret = qio_channel_writev_full(
974 ioc, &iov, 1,
975 fds, nfds, NULL);
976 if (ret == QIO_CHANNEL_ERR_BLOCK) {
977 if (offset) {
978 return offset;
979 }
980
981 errno = EAGAIN;
982 return -1;
983 } else if (ret < 0) {
984 errno = EINVAL;
985 return -1;
986 }
987
988 offset += ret;
989 }
990
991 return offset;
992 }
993
994
995 #ifndef _WIN32
996 static int io_channel_send(QIOChannel *ioc, const void *buf, size_t len)
997 {
998 return io_channel_send_full(ioc, buf, len, NULL, 0);
999 }
1000
1001
1002 typedef struct FDCharDriver {
1003 CharDriverState *chr;
1004 QIOChannel *ioc_in, *ioc_out;
1005 int max_size;
1006 } FDCharDriver;
1007
1008 /* Called with chr_write_lock held. */
1009 static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1010 {
1011 FDCharDriver *s = chr->opaque;
1012
1013 return io_channel_send(s->ioc_out, buf, len);
1014 }
1015
1016 static gboolean fd_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
1017 {
1018 CharDriverState *chr = opaque;
1019 FDCharDriver *s = chr->opaque;
1020 int len;
1021 uint8_t buf[READ_BUF_LEN];
1022 ssize_t ret;
1023
1024 len = sizeof(buf);
1025 if (len > s->max_size) {
1026 len = s->max_size;
1027 }
1028 if (len == 0) {
1029 return TRUE;
1030 }
1031
1032 ret = qio_channel_read(
1033 chan, (gchar *)buf, len, NULL);
1034 if (ret == 0) {
1035 remove_fd_in_watch(chr);
1036 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1037 return FALSE;
1038 }
1039 if (ret > 0) {
1040 qemu_chr_be_write(chr, buf, ret);
1041 }
1042
1043 return TRUE;
1044 }
1045
1046 static int fd_chr_read_poll(void *opaque)
1047 {
1048 CharDriverState *chr = opaque;
1049 FDCharDriver *s = chr->opaque;
1050
1051 s->max_size = qemu_chr_be_can_write(chr);
1052 return s->max_size;
1053 }
1054
1055 static GSource *fd_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1056 {
1057 FDCharDriver *s = chr->opaque;
1058 return qio_channel_create_watch(s->ioc_out, cond);
1059 }
1060
1061 static void fd_chr_update_read_handler(CharDriverState *chr)
1062 {
1063 FDCharDriver *s = chr->opaque;
1064
1065 remove_fd_in_watch(chr);
1066 if (s->ioc_in) {
1067 chr->fd_in_tag = io_add_watch_poll(s->ioc_in,
1068 fd_chr_read_poll,
1069 fd_chr_read, chr);
1070 }
1071 }
1072
1073 static void fd_chr_close(struct CharDriverState *chr)
1074 {
1075 FDCharDriver *s = chr->opaque;
1076
1077 remove_fd_in_watch(chr);
1078 if (s->ioc_in) {
1079 object_unref(OBJECT(s->ioc_in));
1080 }
1081 if (s->ioc_out) {
1082 object_unref(OBJECT(s->ioc_out));
1083 }
1084
1085 g_free(s);
1086 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1087 }
1088
1089 /* open a character device to a unix fd */
1090 static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out,
1091 ChardevCommon *backend, Error **errp)
1092 {
1093 CharDriverState *chr;
1094 FDCharDriver *s;
1095
1096 chr = qemu_chr_alloc(backend, errp);
1097 if (!chr) {
1098 return NULL;
1099 }
1100 s = g_new0(FDCharDriver, 1);
1101 s->ioc_in = QIO_CHANNEL(qio_channel_file_new_fd(fd_in));
1102 s->ioc_out = QIO_CHANNEL(qio_channel_file_new_fd(fd_out));
1103 qemu_set_nonblock(fd_out);
1104 s->chr = chr;
1105 chr->opaque = s;
1106 chr->chr_add_watch = fd_chr_add_watch;
1107 chr->chr_write = fd_chr_write;
1108 chr->chr_update_read_handler = fd_chr_update_read_handler;
1109 chr->chr_close = fd_chr_close;
1110
1111 return chr;
1112 }
1113
1114 static CharDriverState *qemu_chr_open_pipe(const char *id,
1115 ChardevBackend *backend,
1116 ChardevReturn *ret,
1117 Error **errp)
1118 {
1119 ChardevHostdev *opts = backend->u.pipe.data;
1120 int fd_in, fd_out;
1121 char *filename_in;
1122 char *filename_out;
1123 const char *filename = opts->device;
1124 ChardevCommon *common = qapi_ChardevHostdev_base(opts);
1125
1126
1127 filename_in = g_strdup_printf("%s.in", filename);
1128 filename_out = g_strdup_printf("%s.out", filename);
1129 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
1130 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
1131 g_free(filename_in);
1132 g_free(filename_out);
1133 if (fd_in < 0 || fd_out < 0) {
1134 if (fd_in >= 0)
1135 close(fd_in);
1136 if (fd_out >= 0)
1137 close(fd_out);
1138 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
1139 if (fd_in < 0) {
1140 error_setg_file_open(errp, errno, filename);
1141 return NULL;
1142 }
1143 }
1144 return qemu_chr_open_fd(fd_in, fd_out, common, errp);
1145 }
1146
1147 /* init terminal so that we can grab keys */
1148 static struct termios oldtty;
1149 static int old_fd0_flags;
1150 static bool stdio_in_use;
1151 static bool stdio_allow_signal;
1152 static bool stdio_echo_state;
1153
1154 static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo);
1155
1156 static void term_exit(void)
1157 {
1158 tcsetattr (0, TCSANOW, &oldtty);
1159 fcntl(0, F_SETFL, old_fd0_flags);
1160 }
1161
1162 static void term_stdio_handler(int sig)
1163 {
1164 /* restore echo after resume from suspend. */
1165 qemu_chr_set_echo_stdio(NULL, stdio_echo_state);
1166 }
1167
1168 static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
1169 {
1170 struct termios tty;
1171
1172 stdio_echo_state = echo;
1173 tty = oldtty;
1174 if (!echo) {
1175 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1176 |INLCR|IGNCR|ICRNL|IXON);
1177 tty.c_oflag |= OPOST;
1178 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
1179 tty.c_cflag &= ~(CSIZE|PARENB);
1180 tty.c_cflag |= CS8;
1181 tty.c_cc[VMIN] = 1;
1182 tty.c_cc[VTIME] = 0;
1183 }
1184 if (!stdio_allow_signal)
1185 tty.c_lflag &= ~ISIG;
1186
1187 tcsetattr (0, TCSANOW, &tty);
1188 }
1189
1190 static void qemu_chr_close_stdio(struct CharDriverState *chr)
1191 {
1192 term_exit();
1193 fd_chr_close(chr);
1194 }
1195
1196 static CharDriverState *qemu_chr_open_stdio(const char *id,
1197 ChardevBackend *backend,
1198 ChardevReturn *ret,
1199 Error **errp)
1200 {
1201 ChardevStdio *opts = backend->u.stdio.data;
1202 CharDriverState *chr;
1203 struct sigaction act;
1204 ChardevCommon *common = qapi_ChardevStdio_base(opts);
1205
1206 if (is_daemonized()) {
1207 error_setg(errp, "cannot use stdio with -daemonize");
1208 return NULL;
1209 }
1210
1211 if (stdio_in_use) {
1212 error_setg(errp, "cannot use stdio by multiple character devices");
1213 return NULL;
1214 }
1215
1216 stdio_in_use = true;
1217 old_fd0_flags = fcntl(0, F_GETFL);
1218 tcgetattr(0, &oldtty);
1219 qemu_set_nonblock(0);
1220 atexit(term_exit);
1221
1222 memset(&act, 0, sizeof(act));
1223 act.sa_handler = term_stdio_handler;
1224 sigaction(SIGCONT, &act, NULL);
1225
1226 chr = qemu_chr_open_fd(0, 1, common, errp);
1227 chr->chr_close = qemu_chr_close_stdio;
1228 chr->chr_set_echo = qemu_chr_set_echo_stdio;
1229 if (opts->has_signal) {
1230 stdio_allow_signal = opts->signal;
1231 }
1232 qemu_chr_fe_set_echo(chr, false);
1233
1234 return chr;
1235 }
1236
1237 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
1238 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
1239 || defined(__GLIBC__)
1240
1241 #define HAVE_CHARDEV_SERIAL 1
1242 #define HAVE_CHARDEV_PTY 1
1243
1244 typedef struct {
1245 QIOChannel *ioc;
1246 int read_bytes;
1247
1248 /* Protected by the CharDriverState chr_write_lock. */
1249 int connected;
1250 guint timer_tag;
1251 guint open_tag;
1252 } PtyCharDriver;
1253
1254 static void pty_chr_update_read_handler_locked(CharDriverState *chr);
1255 static void pty_chr_state(CharDriverState *chr, int connected);
1256
1257 static gboolean pty_chr_timer(gpointer opaque)
1258 {
1259 struct CharDriverState *chr = opaque;
1260 PtyCharDriver *s = chr->opaque;
1261
1262 qemu_mutex_lock(&chr->chr_write_lock);
1263 s->timer_tag = 0;
1264 s->open_tag = 0;
1265 if (!s->connected) {
1266 /* Next poll ... */
1267 pty_chr_update_read_handler_locked(chr);
1268 }
1269 qemu_mutex_unlock(&chr->chr_write_lock);
1270 return FALSE;
1271 }
1272
1273 /* Called with chr_write_lock held. */
1274 static void pty_chr_rearm_timer(CharDriverState *chr, int ms)
1275 {
1276 PtyCharDriver *s = chr->opaque;
1277
1278 if (s->timer_tag) {
1279 g_source_remove(s->timer_tag);
1280 s->timer_tag = 0;
1281 }
1282
1283 if (ms == 1000) {
1284 s->timer_tag = g_timeout_add_seconds(1, pty_chr_timer, chr);
1285 } else {
1286 s->timer_tag = g_timeout_add(ms, pty_chr_timer, chr);
1287 }
1288 }
1289
1290 /* Called with chr_write_lock held. */
1291 static void pty_chr_update_read_handler_locked(CharDriverState *chr)
1292 {
1293 PtyCharDriver *s = chr->opaque;
1294 GPollFD pfd;
1295 int rc;
1296 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc);
1297
1298 pfd.fd = fioc->fd;
1299 pfd.events = G_IO_OUT;
1300 pfd.revents = 0;
1301 do {
1302 rc = g_poll(&pfd, 1, 0);
1303 } while (rc == -1 && errno == EINTR);
1304 assert(rc >= 0);
1305
1306 if (pfd.revents & G_IO_HUP) {
1307 pty_chr_state(chr, 0);
1308 } else {
1309 pty_chr_state(chr, 1);
1310 }
1311 }
1312
1313 static void pty_chr_update_read_handler(CharDriverState *chr)
1314 {
1315 qemu_mutex_lock(&chr->chr_write_lock);
1316 pty_chr_update_read_handler_locked(chr);
1317 qemu_mutex_unlock(&chr->chr_write_lock);
1318 }
1319
1320 /* Called with chr_write_lock held. */
1321 static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1322 {
1323 PtyCharDriver *s = chr->opaque;
1324
1325 if (!s->connected) {
1326 /* guest sends data, check for (re-)connect */
1327 pty_chr_update_read_handler_locked(chr);
1328 if (!s->connected) {
1329 return 0;
1330 }
1331 }
1332 return io_channel_send(s->ioc, buf, len);
1333 }
1334
1335 static GSource *pty_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1336 {
1337 PtyCharDriver *s = chr->opaque;
1338 if (!s->connected) {
1339 return NULL;
1340 }
1341 return qio_channel_create_watch(s->ioc, cond);
1342 }
1343
1344 static int pty_chr_read_poll(void *opaque)
1345 {
1346 CharDriverState *chr = opaque;
1347 PtyCharDriver *s = chr->opaque;
1348
1349 s->read_bytes = qemu_chr_be_can_write(chr);
1350 return s->read_bytes;
1351 }
1352
1353 static gboolean pty_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
1354 {
1355 CharDriverState *chr = opaque;
1356 PtyCharDriver *s = chr->opaque;
1357 gsize len;
1358 uint8_t buf[READ_BUF_LEN];
1359 ssize_t ret;
1360
1361 len = sizeof(buf);
1362 if (len > s->read_bytes)
1363 len = s->read_bytes;
1364 if (len == 0) {
1365 return TRUE;
1366 }
1367 ret = qio_channel_read(s->ioc, (char *)buf, len, NULL);
1368 if (ret <= 0) {
1369 pty_chr_state(chr, 0);
1370 return FALSE;
1371 } else {
1372 pty_chr_state(chr, 1);
1373 qemu_chr_be_write(chr, buf, ret);
1374 }
1375 return TRUE;
1376 }
1377
1378 static gboolean qemu_chr_be_generic_open_func(gpointer opaque)
1379 {
1380 CharDriverState *chr = opaque;
1381 PtyCharDriver *s = chr->opaque;
1382
1383 s->open_tag = 0;
1384 qemu_chr_be_generic_open(chr);
1385 return FALSE;
1386 }
1387
1388 /* Called with chr_write_lock held. */
1389 static void pty_chr_state(CharDriverState *chr, int connected)
1390 {
1391 PtyCharDriver *s = chr->opaque;
1392
1393 if (!connected) {
1394 if (s->open_tag) {
1395 g_source_remove(s->open_tag);
1396 s->open_tag = 0;
1397 }
1398 remove_fd_in_watch(chr);
1399 s->connected = 0;
1400 /* (re-)connect poll interval for idle guests: once per second.
1401 * We check more frequently in case the guests sends data to
1402 * the virtual device linked to our pty. */
1403 pty_chr_rearm_timer(chr, 1000);
1404 } else {
1405 if (s->timer_tag) {
1406 g_source_remove(s->timer_tag);
1407 s->timer_tag = 0;
1408 }
1409 if (!s->connected) {
1410 g_assert(s->open_tag == 0);
1411 s->connected = 1;
1412 s->open_tag = g_idle_add(qemu_chr_be_generic_open_func, chr);
1413 }
1414 if (!chr->fd_in_tag) {
1415 chr->fd_in_tag = io_add_watch_poll(s->ioc,
1416 pty_chr_read_poll,
1417 pty_chr_read, chr);
1418 }
1419 }
1420 }
1421
1422 static void pty_chr_close(struct CharDriverState *chr)
1423 {
1424 PtyCharDriver *s = chr->opaque;
1425
1426 qemu_mutex_lock(&chr->chr_write_lock);
1427 pty_chr_state(chr, 0);
1428 object_unref(OBJECT(s->ioc));
1429 if (s->timer_tag) {
1430 g_source_remove(s->timer_tag);
1431 s->timer_tag = 0;
1432 }
1433 qemu_mutex_unlock(&chr->chr_write_lock);
1434 g_free(s);
1435 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1436 }
1437
1438 static CharDriverState *qemu_chr_open_pty(const char *id,
1439 ChardevBackend *backend,
1440 ChardevReturn *ret,
1441 Error **errp)
1442 {
1443 CharDriverState *chr;
1444 PtyCharDriver *s;
1445 int master_fd, slave_fd;
1446 char pty_name[PATH_MAX];
1447 ChardevCommon *common = backend->u.pty.data;
1448
1449 master_fd = qemu_openpty_raw(&slave_fd, pty_name);
1450 if (master_fd < 0) {
1451 error_setg_errno(errp, errno, "Failed to create PTY");
1452 return NULL;
1453 }
1454
1455 close(slave_fd);
1456 qemu_set_nonblock(master_fd);
1457
1458 chr = qemu_chr_alloc(common, errp);
1459 if (!chr) {
1460 close(master_fd);
1461 return NULL;
1462 }
1463
1464 chr->filename = g_strdup_printf("pty:%s", pty_name);
1465 ret->pty = g_strdup(pty_name);
1466 ret->has_pty = true;
1467
1468 fprintf(stderr, "char device redirected to %s (label %s)\n",
1469 pty_name, id);
1470
1471 s = g_new0(PtyCharDriver, 1);
1472 chr->opaque = s;
1473 chr->chr_write = pty_chr_write;
1474 chr->chr_update_read_handler = pty_chr_update_read_handler;
1475 chr->chr_close = pty_chr_close;
1476 chr->chr_add_watch = pty_chr_add_watch;
1477 chr->explicit_be_open = true;
1478
1479 s->ioc = QIO_CHANNEL(qio_channel_file_new_fd(master_fd));
1480 s->timer_tag = 0;
1481
1482 return chr;
1483 }
1484
1485 static void tty_serial_init(int fd, int speed,
1486 int parity, int data_bits, int stop_bits)
1487 {
1488 struct termios tty;
1489 speed_t spd;
1490
1491 #if 0
1492 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1493 speed, parity, data_bits, stop_bits);
1494 #endif
1495 tcgetattr (fd, &tty);
1496
1497 #define check_speed(val) if (speed <= val) { spd = B##val; break; }
1498 speed = speed * 10 / 11;
1499 do {
1500 check_speed(50);
1501 check_speed(75);
1502 check_speed(110);
1503 check_speed(134);
1504 check_speed(150);
1505 check_speed(200);
1506 check_speed(300);
1507 check_speed(600);
1508 check_speed(1200);
1509 check_speed(1800);
1510 check_speed(2400);
1511 check_speed(4800);
1512 check_speed(9600);
1513 check_speed(19200);
1514 check_speed(38400);
1515 /* Non-Posix values follow. They may be unsupported on some systems. */
1516 check_speed(57600);
1517 check_speed(115200);
1518 #ifdef B230400
1519 check_speed(230400);
1520 #endif
1521 #ifdef B460800
1522 check_speed(460800);
1523 #endif
1524 #ifdef B500000
1525 check_speed(500000);
1526 #endif
1527 #ifdef B576000
1528 check_speed(576000);
1529 #endif
1530 #ifdef B921600
1531 check_speed(921600);
1532 #endif
1533 #ifdef B1000000
1534 check_speed(1000000);
1535 #endif
1536 #ifdef B1152000
1537 check_speed(1152000);
1538 #endif
1539 #ifdef B1500000
1540 check_speed(1500000);
1541 #endif
1542 #ifdef B2000000
1543 check_speed(2000000);
1544 #endif
1545 #ifdef B2500000
1546 check_speed(2500000);
1547 #endif
1548 #ifdef B3000000
1549 check_speed(3000000);
1550 #endif
1551 #ifdef B3500000
1552 check_speed(3500000);
1553 #endif
1554 #ifdef B4000000
1555 check_speed(4000000);
1556 #endif
1557 spd = B115200;
1558 } while (0);
1559
1560 cfsetispeed(&tty, spd);
1561 cfsetospeed(&tty, spd);
1562
1563 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1564 |INLCR|IGNCR|ICRNL|IXON);
1565 tty.c_oflag |= OPOST;
1566 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1567 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1568 switch(data_bits) {
1569 default:
1570 case 8:
1571 tty.c_cflag |= CS8;
1572 break;
1573 case 7:
1574 tty.c_cflag |= CS7;
1575 break;
1576 case 6:
1577 tty.c_cflag |= CS6;
1578 break;
1579 case 5:
1580 tty.c_cflag |= CS5;
1581 break;
1582 }
1583 switch(parity) {
1584 default:
1585 case 'N':
1586 break;
1587 case 'E':
1588 tty.c_cflag |= PARENB;
1589 break;
1590 case 'O':
1591 tty.c_cflag |= PARENB | PARODD;
1592 break;
1593 }
1594 if (stop_bits == 2)
1595 tty.c_cflag |= CSTOPB;
1596
1597 tcsetattr (fd, TCSANOW, &tty);
1598 }
1599
1600 static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1601 {
1602 FDCharDriver *s = chr->opaque;
1603 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc_in);
1604
1605 switch(cmd) {
1606 case CHR_IOCTL_SERIAL_SET_PARAMS:
1607 {
1608 QEMUSerialSetParams *ssp = arg;
1609 tty_serial_init(fioc->fd,
1610 ssp->speed, ssp->parity,
1611 ssp->data_bits, ssp->stop_bits);
1612 }
1613 break;
1614 case CHR_IOCTL_SERIAL_SET_BREAK:
1615 {
1616 int enable = *(int *)arg;
1617 if (enable) {
1618 tcsendbreak(fioc->fd, 1);
1619 }
1620 }
1621 break;
1622 case CHR_IOCTL_SERIAL_GET_TIOCM:
1623 {
1624 int sarg = 0;
1625 int *targ = (int *)arg;
1626 ioctl(fioc->fd, TIOCMGET, &sarg);
1627 *targ = 0;
1628 if (sarg & TIOCM_CTS)
1629 *targ |= CHR_TIOCM_CTS;
1630 if (sarg & TIOCM_CAR)
1631 *targ |= CHR_TIOCM_CAR;
1632 if (sarg & TIOCM_DSR)
1633 *targ |= CHR_TIOCM_DSR;
1634 if (sarg & TIOCM_RI)
1635 *targ |= CHR_TIOCM_RI;
1636 if (sarg & TIOCM_DTR)
1637 *targ |= CHR_TIOCM_DTR;
1638 if (sarg & TIOCM_RTS)
1639 *targ |= CHR_TIOCM_RTS;
1640 }
1641 break;
1642 case CHR_IOCTL_SERIAL_SET_TIOCM:
1643 {
1644 int sarg = *(int *)arg;
1645 int targ = 0;
1646 ioctl(fioc->fd, TIOCMGET, &targ);
1647 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1648 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1649 if (sarg & CHR_TIOCM_CTS)
1650 targ |= TIOCM_CTS;
1651 if (sarg & CHR_TIOCM_CAR)
1652 targ |= TIOCM_CAR;
1653 if (sarg & CHR_TIOCM_DSR)
1654 targ |= TIOCM_DSR;
1655 if (sarg & CHR_TIOCM_RI)
1656 targ |= TIOCM_RI;
1657 if (sarg & CHR_TIOCM_DTR)
1658 targ |= TIOCM_DTR;
1659 if (sarg & CHR_TIOCM_RTS)
1660 targ |= TIOCM_RTS;
1661 ioctl(fioc->fd, TIOCMSET, &targ);
1662 }
1663 break;
1664 default:
1665 return -ENOTSUP;
1666 }
1667 return 0;
1668 }
1669
1670 static void qemu_chr_close_tty(CharDriverState *chr)
1671 {
1672 fd_chr_close(chr);
1673 }
1674
1675 static CharDriverState *qemu_chr_open_tty_fd(int fd,
1676 ChardevCommon *backend,
1677 Error **errp)
1678 {
1679 CharDriverState *chr;
1680
1681 tty_serial_init(fd, 115200, 'N', 8, 1);
1682 chr = qemu_chr_open_fd(fd, fd, backend, errp);
1683 chr->chr_ioctl = tty_serial_ioctl;
1684 chr->chr_close = qemu_chr_close_tty;
1685 return chr;
1686 }
1687 #endif /* __linux__ || __sun__ */
1688
1689 #if defined(__linux__)
1690
1691 #define HAVE_CHARDEV_PARPORT 1
1692
1693 typedef struct {
1694 int fd;
1695 int mode;
1696 } ParallelCharDriver;
1697
1698 static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1699 {
1700 if (s->mode != mode) {
1701 int m = mode;
1702 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1703 return 0;
1704 s->mode = mode;
1705 }
1706 return 1;
1707 }
1708
1709 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1710 {
1711 ParallelCharDriver *drv = chr->opaque;
1712 int fd = drv->fd;
1713 uint8_t b;
1714
1715 switch(cmd) {
1716 case CHR_IOCTL_PP_READ_DATA:
1717 if (ioctl(fd, PPRDATA, &b) < 0)
1718 return -ENOTSUP;
1719 *(uint8_t *)arg = b;
1720 break;
1721 case CHR_IOCTL_PP_WRITE_DATA:
1722 b = *(uint8_t *)arg;
1723 if (ioctl(fd, PPWDATA, &b) < 0)
1724 return -ENOTSUP;
1725 break;
1726 case CHR_IOCTL_PP_READ_CONTROL:
1727 if (ioctl(fd, PPRCONTROL, &b) < 0)
1728 return -ENOTSUP;
1729 /* Linux gives only the lowest bits, and no way to know data
1730 direction! For better compatibility set the fixed upper
1731 bits. */
1732 *(uint8_t *)arg = b | 0xc0;
1733 break;
1734 case CHR_IOCTL_PP_WRITE_CONTROL:
1735 b = *(uint8_t *)arg;
1736 if (ioctl(fd, PPWCONTROL, &b) < 0)
1737 return -ENOTSUP;
1738 break;
1739 case CHR_IOCTL_PP_READ_STATUS:
1740 if (ioctl(fd, PPRSTATUS, &b) < 0)
1741 return -ENOTSUP;
1742 *(uint8_t *)arg = b;
1743 break;
1744 case CHR_IOCTL_PP_DATA_DIR:
1745 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1746 return -ENOTSUP;
1747 break;
1748 case CHR_IOCTL_PP_EPP_READ_ADDR:
1749 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1750 struct ParallelIOArg *parg = arg;
1751 int n = read(fd, parg->buffer, parg->count);
1752 if (n != parg->count) {
1753 return -EIO;
1754 }
1755 }
1756 break;
1757 case CHR_IOCTL_PP_EPP_READ:
1758 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1759 struct ParallelIOArg *parg = arg;
1760 int n = read(fd, parg->buffer, parg->count);
1761 if (n != parg->count) {
1762 return -EIO;
1763 }
1764 }
1765 break;
1766 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1767 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1768 struct ParallelIOArg *parg = arg;
1769 int n = write(fd, parg->buffer, parg->count);
1770 if (n != parg->count) {
1771 return -EIO;
1772 }
1773 }
1774 break;
1775 case CHR_IOCTL_PP_EPP_WRITE:
1776 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1777 struct ParallelIOArg *parg = arg;
1778 int n = write(fd, parg->buffer, parg->count);
1779 if (n != parg->count) {
1780 return -EIO;
1781 }
1782 }
1783 break;
1784 default:
1785 return -ENOTSUP;
1786 }
1787 return 0;
1788 }
1789
1790 static void pp_close(CharDriverState *chr)
1791 {
1792 ParallelCharDriver *drv = chr->opaque;
1793 int fd = drv->fd;
1794
1795 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1796 ioctl(fd, PPRELEASE);
1797 close(fd);
1798 g_free(drv);
1799 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1800 }
1801
1802 static CharDriverState *qemu_chr_open_pp_fd(int fd,
1803 ChardevCommon *backend,
1804 Error **errp)
1805 {
1806 CharDriverState *chr;
1807 ParallelCharDriver *drv;
1808
1809 if (ioctl(fd, PPCLAIM) < 0) {
1810 error_setg_errno(errp, errno, "not a parallel port");
1811 close(fd);
1812 return NULL;
1813 }
1814
1815 chr = qemu_chr_alloc(backend, errp);
1816 if (!chr) {
1817 return NULL;
1818 }
1819
1820 drv = g_new0(ParallelCharDriver, 1);
1821 chr->opaque = drv;
1822 chr->chr_write = null_chr_write;
1823 chr->chr_ioctl = pp_ioctl;
1824 chr->chr_close = pp_close;
1825
1826 drv->fd = fd;
1827 drv->mode = IEEE1284_MODE_COMPAT;
1828
1829 return chr;
1830 }
1831 #endif /* __linux__ */
1832
1833 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
1834
1835 #define HAVE_CHARDEV_PARPORT 1
1836
1837 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1838 {
1839 int fd = (int)(intptr_t)chr->opaque;
1840 uint8_t b;
1841
1842 switch(cmd) {
1843 case CHR_IOCTL_PP_READ_DATA:
1844 if (ioctl(fd, PPIGDATA, &b) < 0)
1845 return -ENOTSUP;
1846 *(uint8_t *)arg = b;
1847 break;
1848 case CHR_IOCTL_PP_WRITE_DATA:
1849 b = *(uint8_t *)arg;
1850 if (ioctl(fd, PPISDATA, &b) < 0)
1851 return -ENOTSUP;
1852 break;
1853 case CHR_IOCTL_PP_READ_CONTROL:
1854 if (ioctl(fd, PPIGCTRL, &b) < 0)
1855 return -ENOTSUP;
1856 *(uint8_t *)arg = b;
1857 break;
1858 case CHR_IOCTL_PP_WRITE_CONTROL:
1859 b = *(uint8_t *)arg;
1860 if (ioctl(fd, PPISCTRL, &b) < 0)
1861 return -ENOTSUP;
1862 break;
1863 case CHR_IOCTL_PP_READ_STATUS:
1864 if (ioctl(fd, PPIGSTATUS, &b) < 0)
1865 return -ENOTSUP;
1866 *(uint8_t *)arg = b;
1867 break;
1868 default:
1869 return -ENOTSUP;
1870 }
1871 return 0;
1872 }
1873
1874 static CharDriverState *qemu_chr_open_pp_fd(int fd,
1875 ChardevCommon *backend,
1876 Error **errp)
1877 {
1878 CharDriverState *chr;
1879
1880 chr = qemu_chr_alloc(backend, errp);
1881 if (!chr) {
1882 return NULL;
1883 }
1884 chr->opaque = (void *)(intptr_t)fd;
1885 chr->chr_write = null_chr_write;
1886 chr->chr_ioctl = pp_ioctl;
1887 chr->explicit_be_open = true;
1888 return chr;
1889 }
1890 #endif
1891
1892 #else /* _WIN32 */
1893
1894 #define HAVE_CHARDEV_SERIAL 1
1895
1896 typedef struct {
1897 int max_size;
1898 HANDLE hcom, hrecv, hsend;
1899 OVERLAPPED orecv;
1900 BOOL fpipe;
1901 DWORD len;
1902
1903 /* Protected by the CharDriverState chr_write_lock. */
1904 OVERLAPPED osend;
1905 } WinCharState;
1906
1907 typedef struct {
1908 HANDLE hStdIn;
1909 HANDLE hInputReadyEvent;
1910 HANDLE hInputDoneEvent;
1911 HANDLE hInputThread;
1912 uint8_t win_stdio_buf;
1913 } WinStdioCharState;
1914
1915 #define NSENDBUF 2048
1916 #define NRECVBUF 2048
1917 #define MAXCONNECT 1
1918 #define NTIMEOUT 5000
1919
1920 static int win_chr_poll(void *opaque);
1921 static int win_chr_pipe_poll(void *opaque);
1922
1923 static void win_chr_close(CharDriverState *chr)
1924 {
1925 WinCharState *s = chr->opaque;
1926
1927 if (s->hsend) {
1928 CloseHandle(s->hsend);
1929 s->hsend = NULL;
1930 }
1931 if (s->hrecv) {
1932 CloseHandle(s->hrecv);
1933 s->hrecv = NULL;
1934 }
1935 if (s->hcom) {
1936 CloseHandle(s->hcom);
1937 s->hcom = NULL;
1938 }
1939 if (s->fpipe)
1940 qemu_del_polling_cb(win_chr_pipe_poll, chr);
1941 else
1942 qemu_del_polling_cb(win_chr_poll, chr);
1943
1944 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1945 }
1946
1947 static int win_chr_init(CharDriverState *chr, const char *filename, Error **errp)
1948 {
1949 WinCharState *s = chr->opaque;
1950 COMMCONFIG comcfg;
1951 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
1952 COMSTAT comstat;
1953 DWORD size;
1954 DWORD err;
1955
1956 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1957 if (!s->hsend) {
1958 error_setg(errp, "Failed CreateEvent");
1959 goto fail;
1960 }
1961 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1962 if (!s->hrecv) {
1963 error_setg(errp, "Failed CreateEvent");
1964 goto fail;
1965 }
1966
1967 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
1968 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
1969 if (s->hcom == INVALID_HANDLE_VALUE) {
1970 error_setg(errp, "Failed CreateFile (%lu)", GetLastError());
1971 s->hcom = NULL;
1972 goto fail;
1973 }
1974
1975 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
1976 error_setg(errp, "Failed SetupComm");
1977 goto fail;
1978 }
1979
1980 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
1981 size = sizeof(COMMCONFIG);
1982 GetDefaultCommConfig(filename, &comcfg, &size);
1983 comcfg.dcb.DCBlength = sizeof(DCB);
1984 CommConfigDialog(filename, NULL, &comcfg);
1985
1986 if (!SetCommState(s->hcom, &comcfg.dcb)) {
1987 error_setg(errp, "Failed SetCommState");
1988 goto fail;
1989 }
1990
1991 if (!SetCommMask(s->hcom, EV_ERR)) {
1992 error_setg(errp, "Failed SetCommMask");
1993 goto fail;
1994 }
1995
1996 cto.ReadIntervalTimeout = MAXDWORD;
1997 if (!SetCommTimeouts(s->hcom, &cto)) {
1998 error_setg(errp, "Failed SetCommTimeouts");
1999 goto fail;
2000 }
2001
2002 if (!ClearCommError(s->hcom, &err, &comstat)) {
2003 error_setg(errp, "Failed ClearCommError");
2004 goto fail;
2005 }
2006 qemu_add_polling_cb(win_chr_poll, chr);
2007 return 0;
2008
2009 fail:
2010 win_chr_close(chr);
2011 return -1;
2012 }
2013
2014 /* Called with chr_write_lock held. */
2015 static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
2016 {
2017 WinCharState *s = chr->opaque;
2018 DWORD len, ret, size, err;
2019
2020 len = len1;
2021 ZeroMemory(&s->osend, sizeof(s->osend));
2022 s->osend.hEvent = s->hsend;
2023 while (len > 0) {
2024 if (s->hsend)
2025 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
2026 else
2027 ret = WriteFile(s->hcom, buf, len, &size, NULL);
2028 if (!ret) {
2029 err = GetLastError();
2030 if (err == ERROR_IO_PENDING) {
2031 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
2032 if (ret) {
2033 buf += size;
2034 len -= size;
2035 } else {
2036 break;
2037 }
2038 } else {
2039 break;
2040 }
2041 } else {
2042 buf += size;
2043 len -= size;
2044 }
2045 }
2046 return len1 - len;
2047 }
2048
2049 static int win_chr_read_poll(CharDriverState *chr)
2050 {
2051 WinCharState *s = chr->opaque;
2052
2053 s->max_size = qemu_chr_be_can_write(chr);
2054 return s->max_size;
2055 }
2056
2057 static void win_chr_readfile(CharDriverState *chr)
2058 {
2059 WinCharState *s = chr->opaque;
2060 int ret, err;
2061 uint8_t buf[READ_BUF_LEN];
2062 DWORD size;
2063
2064 ZeroMemory(&s->orecv, sizeof(s->orecv));
2065 s->orecv.hEvent = s->hrecv;
2066 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
2067 if (!ret) {
2068 err = GetLastError();
2069 if (err == ERROR_IO_PENDING) {
2070 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
2071 }
2072 }
2073
2074 if (size > 0) {
2075 qemu_chr_be_write(chr, buf, size);
2076 }
2077 }
2078
2079 static void win_chr_read(CharDriverState *chr)
2080 {
2081 WinCharState *s = chr->opaque;
2082
2083 if (s->len > s->max_size)
2084 s->len = s->max_size;
2085 if (s->len == 0)
2086 return;
2087
2088 win_chr_readfile(chr);
2089 }
2090
2091 static int win_chr_poll(void *opaque)
2092 {
2093 CharDriverState *chr = opaque;
2094 WinCharState *s = chr->opaque;
2095 COMSTAT status;
2096 DWORD comerr;
2097
2098 ClearCommError(s->hcom, &comerr, &status);
2099 if (status.cbInQue > 0) {
2100 s->len = status.cbInQue;
2101 win_chr_read_poll(chr);
2102 win_chr_read(chr);
2103 return 1;
2104 }
2105 return 0;
2106 }
2107
2108 static CharDriverState *qemu_chr_open_win_path(const char *filename,
2109 ChardevCommon *backend,
2110 Error **errp)
2111 {
2112 CharDriverState *chr;
2113 WinCharState *s;
2114
2115 chr = qemu_chr_alloc(backend, errp);
2116 if (!chr) {
2117 return NULL;
2118 }
2119 s = g_new0(WinCharState, 1);
2120 chr->opaque = s;
2121 chr->chr_write = win_chr_write;
2122 chr->chr_close = win_chr_close;
2123
2124 if (win_chr_init(chr, filename, errp) < 0) {
2125 g_free(s);
2126 qemu_chr_free_common(chr);
2127 return NULL;
2128 }
2129 return chr;
2130 }
2131
2132 static int win_chr_pipe_poll(void *opaque)
2133 {
2134 CharDriverState *chr = opaque;
2135 WinCharState *s = chr->opaque;
2136 DWORD size;
2137
2138 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
2139 if (size > 0) {
2140 s->len = size;
2141 win_chr_read_poll(chr);
2142 win_chr_read(chr);
2143 return 1;
2144 }
2145 return 0;
2146 }
2147
2148 static int win_chr_pipe_init(CharDriverState *chr, const char *filename,
2149 Error **errp)
2150 {
2151 WinCharState *s = chr->opaque;
2152 OVERLAPPED ov;
2153 int ret;
2154 DWORD size;
2155 char *openname;
2156
2157 s->fpipe = TRUE;
2158
2159 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2160 if (!s->hsend) {
2161 error_setg(errp, "Failed CreateEvent");
2162 goto fail;
2163 }
2164 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
2165 if (!s->hrecv) {
2166 error_setg(errp, "Failed CreateEvent");
2167 goto fail;
2168 }
2169
2170 openname = g_strdup_printf("\\\\.\\pipe\\%s", filename);
2171 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
2172 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
2173 PIPE_WAIT,
2174 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
2175 g_free(openname);
2176 if (s->hcom == INVALID_HANDLE_VALUE) {
2177 error_setg(errp, "Failed CreateNamedPipe (%lu)", GetLastError());
2178 s->hcom = NULL;
2179 goto fail;
2180 }
2181
2182 ZeroMemory(&ov, sizeof(ov));
2183 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
2184 ret = ConnectNamedPipe(s->hcom, &ov);
2185 if (ret) {
2186 error_setg(errp, "Failed ConnectNamedPipe");
2187 goto fail;
2188 }
2189
2190 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
2191 if (!ret) {
2192 error_setg(errp, "Failed GetOverlappedResult");
2193 if (ov.hEvent) {
2194 CloseHandle(ov.hEvent);
2195 ov.hEvent = NULL;
2196 }
2197 goto fail;
2198 }
2199
2200 if (ov.hEvent) {
2201 CloseHandle(ov.hEvent);
2202 ov.hEvent = NULL;
2203 }
2204 qemu_add_polling_cb(win_chr_pipe_poll, chr);
2205 return 0;
2206
2207 fail:
2208 win_chr_close(chr);
2209 return -1;
2210 }
2211
2212
2213 static CharDriverState *qemu_chr_open_pipe(const char *id,
2214 ChardevBackend *backend,
2215 ChardevReturn *ret,
2216 Error **errp)
2217 {
2218 ChardevHostdev *opts = backend->u.pipe.data;
2219 const char *filename = opts->device;
2220 CharDriverState *chr;
2221 WinCharState *s;
2222 ChardevCommon *common = qapi_ChardevHostdev_base(opts);
2223
2224 chr = qemu_chr_alloc(common, errp);
2225 if (!chr) {
2226 return NULL;
2227 }
2228 s = g_new0(WinCharState, 1);
2229 chr->opaque = s;
2230 chr->chr_write = win_chr_write;
2231 chr->chr_close = win_chr_close;
2232
2233 if (win_chr_pipe_init(chr, filename, errp) < 0) {
2234 g_free(s);
2235 qemu_chr_free_common(chr);
2236 return NULL;
2237 }
2238 return chr;
2239 }
2240
2241 static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out,
2242 ChardevCommon *backend,
2243 Error **errp)
2244 {
2245 CharDriverState *chr;
2246 WinCharState *s;
2247
2248 chr = qemu_chr_alloc(backend, errp);
2249 if (!chr) {
2250 return NULL;
2251 }
2252 s = g_new0(WinCharState, 1);
2253 s->hcom = fd_out;
2254 chr->opaque = s;
2255 chr->chr_write = win_chr_write;
2256 return chr;
2257 }
2258
2259 static CharDriverState *qemu_chr_open_win_con(const char *id,
2260 ChardevBackend *backend,
2261 ChardevReturn *ret,
2262 Error **errp)
2263 {
2264 ChardevCommon *common = backend->u.console.data;
2265 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE),
2266 common, errp);
2267 }
2268
2269 static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
2270 {
2271 HANDLE hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
2272 DWORD dwSize;
2273 int len1;
2274
2275 len1 = len;
2276
2277 while (len1 > 0) {
2278 if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
2279 break;
2280 }
2281 buf += dwSize;
2282 len1 -= dwSize;
2283 }
2284
2285 return len - len1;
2286 }
2287
2288 static void win_stdio_wait_func(void *opaque)
2289 {
2290 CharDriverState *chr = opaque;
2291 WinStdioCharState *stdio = chr->opaque;
2292 INPUT_RECORD buf[4];
2293 int ret;
2294 DWORD dwSize;
2295 int i;
2296
2297 ret = ReadConsoleInput(stdio->hStdIn, buf, ARRAY_SIZE(buf), &dwSize);
2298
2299 if (!ret) {
2300 /* Avoid error storm */
2301 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2302 return;
2303 }
2304
2305 for (i = 0; i < dwSize; i++) {
2306 KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
2307
2308 if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
2309 int j;
2310 if (kev->uChar.AsciiChar != 0) {
2311 for (j = 0; j < kev->wRepeatCount; j++) {
2312 if (qemu_chr_be_can_write(chr)) {
2313 uint8_t c = kev->uChar.AsciiChar;
2314 qemu_chr_be_write(chr, &c, 1);
2315 }
2316 }
2317 }
2318 }
2319 }
2320 }
2321
2322 static DWORD WINAPI win_stdio_thread(LPVOID param)
2323 {
2324 CharDriverState *chr = param;
2325 WinStdioCharState *stdio = chr->opaque;
2326 int ret;
2327 DWORD dwSize;
2328
2329 while (1) {
2330
2331 /* Wait for one byte */
2332 ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
2333
2334 /* Exit in case of error, continue if nothing read */
2335 if (!ret) {
2336 break;
2337 }
2338 if (!dwSize) {
2339 continue;
2340 }
2341
2342 /* Some terminal emulator returns \r\n for Enter, just pass \n */
2343 if (stdio->win_stdio_buf == '\r') {
2344 continue;
2345 }
2346
2347 /* Signal the main thread and wait until the byte was eaten */
2348 if (!SetEvent(stdio->hInputReadyEvent)) {
2349 break;
2350 }
2351 if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
2352 != WAIT_OBJECT_0) {
2353 break;
2354 }
2355 }
2356
2357 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2358 return 0;
2359 }
2360
2361 static void win_stdio_thread_wait_func(void *opaque)
2362 {
2363 CharDriverState *chr = opaque;
2364 WinStdioCharState *stdio = chr->opaque;
2365
2366 if (qemu_chr_be_can_write(chr)) {
2367 qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
2368 }
2369
2370 SetEvent(stdio->hInputDoneEvent);
2371 }
2372
2373 static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
2374 {
2375 WinStdioCharState *stdio = chr->opaque;
2376 DWORD dwMode = 0;
2377
2378 GetConsoleMode(stdio->hStdIn, &dwMode);
2379
2380 if (echo) {
2381 SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
2382 } else {
2383 SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
2384 }
2385 }
2386
2387 static void win_stdio_close(CharDriverState *chr)
2388 {
2389 WinStdioCharState *stdio = chr->opaque;
2390
2391 if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
2392 CloseHandle(stdio->hInputReadyEvent);
2393 }
2394 if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
2395 CloseHandle(stdio->hInputDoneEvent);
2396 }
2397 if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
2398 TerminateThread(stdio->hInputThread, 0);
2399 }
2400
2401 g_free(chr->opaque);
2402 g_free(chr);
2403 }
2404
2405 static CharDriverState *qemu_chr_open_stdio(const char *id,
2406 ChardevBackend *backend,
2407 ChardevReturn *ret,
2408 Error **errp)
2409 {
2410 CharDriverState *chr;
2411 WinStdioCharState *stdio;
2412 DWORD dwMode;
2413 int is_console = 0;
2414 ChardevCommon *common = qapi_ChardevStdio_base(backend->u.stdio.data);
2415
2416 chr = qemu_chr_alloc(common, errp);
2417 if (!chr) {
2418 return NULL;
2419 }
2420 stdio = g_new0(WinStdioCharState, 1);
2421
2422 stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
2423 if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
2424 error_setg(errp, "cannot open stdio: invalid handle");
2425 return NULL;
2426 }
2427
2428 is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
2429
2430 chr->opaque = stdio;
2431 chr->chr_write = win_stdio_write;
2432 chr->chr_close = win_stdio_close;
2433
2434 if (is_console) {
2435 if (qemu_add_wait_object(stdio->hStdIn,
2436 win_stdio_wait_func, chr)) {
2437 error_setg(errp, "qemu_add_wait_object: failed");
2438 goto err1;
2439 }
2440 } else {
2441 DWORD dwId;
2442
2443 stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2444 stdio->hInputDoneEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2445 if (stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
2446 || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
2447 error_setg(errp, "cannot create event");
2448 goto err2;
2449 }
2450 if (qemu_add_wait_object(stdio->hInputReadyEvent,
2451 win_stdio_thread_wait_func, chr)) {
2452 error_setg(errp, "qemu_add_wait_object: failed");
2453 goto err2;
2454 }
2455 stdio->hInputThread = CreateThread(NULL, 0, win_stdio_thread,
2456 chr, 0, &dwId);
2457
2458 if (stdio->hInputThread == INVALID_HANDLE_VALUE) {
2459 error_setg(errp, "cannot create stdio thread");
2460 goto err3;
2461 }
2462 }
2463
2464 dwMode |= ENABLE_LINE_INPUT;
2465
2466 if (is_console) {
2467 /* set the terminal in raw mode */
2468 /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2469 dwMode |= ENABLE_PROCESSED_INPUT;
2470 }
2471
2472 SetConsoleMode(stdio->hStdIn, dwMode);
2473
2474 chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2475 qemu_chr_fe_set_echo(chr, false);
2476
2477 return chr;
2478
2479 err3:
2480 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2481 err2:
2482 CloseHandle(stdio->hInputReadyEvent);
2483 CloseHandle(stdio->hInputDoneEvent);
2484 err1:
2485 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2486 return NULL;
2487 }
2488 #endif /* !_WIN32 */
2489
2490
2491 /***********************************************************/
2492 /* UDP Net console */
2493
2494 typedef struct {
2495 QIOChannel *ioc;
2496 uint8_t buf[READ_BUF_LEN];
2497 int bufcnt;
2498 int bufptr;
2499 int max_size;
2500 } NetCharDriver;
2501
2502 /* Called with chr_write_lock held. */
2503 static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2504 {
2505 NetCharDriver *s = chr->opaque;
2506
2507 return qio_channel_write(
2508 s->ioc, (const char *)buf, len, NULL);
2509 }
2510
2511 static int udp_chr_read_poll(void *opaque)
2512 {
2513 CharDriverState *chr = opaque;
2514 NetCharDriver *s = chr->opaque;
2515
2516 s->max_size = qemu_chr_be_can_write(chr);
2517
2518 /* If there were any stray characters in the queue process them
2519 * first
2520 */
2521 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2522 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2523 s->bufptr++;
2524 s->max_size = qemu_chr_be_can_write(chr);
2525 }
2526 return s->max_size;
2527 }
2528
2529 static gboolean udp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
2530 {
2531 CharDriverState *chr = opaque;
2532 NetCharDriver *s = chr->opaque;
2533 ssize_t ret;
2534
2535 if (s->max_size == 0) {
2536 return TRUE;
2537 }
2538 ret = qio_channel_read(
2539 s->ioc, (char *)s->buf, sizeof(s->buf), NULL);
2540 if (ret <= 0) {
2541 remove_fd_in_watch(chr);
2542 return FALSE;
2543 }
2544 s->bufcnt = ret;
2545
2546 s->bufptr = 0;
2547 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2548 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2549 s->bufptr++;
2550 s->max_size = qemu_chr_be_can_write(chr);
2551 }
2552
2553 return TRUE;
2554 }
2555
2556 static void udp_chr_update_read_handler(CharDriverState *chr)
2557 {
2558 NetCharDriver *s = chr->opaque;
2559
2560 remove_fd_in_watch(chr);
2561 if (s->ioc) {
2562 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2563 udp_chr_read_poll,
2564 udp_chr_read, chr);
2565 }
2566 }
2567
2568 static void udp_chr_close(CharDriverState *chr)
2569 {
2570 NetCharDriver *s = chr->opaque;
2571
2572 remove_fd_in_watch(chr);
2573 if (s->ioc) {
2574 object_unref(OBJECT(s->ioc));
2575 }
2576 g_free(s);
2577 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2578 }
2579
2580 static CharDriverState *qemu_chr_open_udp(QIOChannelSocket *sioc,
2581 ChardevCommon *backend,
2582 Error **errp)
2583 {
2584 CharDriverState *chr = NULL;
2585 NetCharDriver *s = NULL;
2586
2587 chr = qemu_chr_alloc(backend, errp);
2588 if (!chr) {
2589 return NULL;
2590 }
2591 s = g_new0(NetCharDriver, 1);
2592
2593 s->ioc = QIO_CHANNEL(sioc);
2594 s->bufcnt = 0;
2595 s->bufptr = 0;
2596 chr->opaque = s;
2597 chr->chr_write = udp_chr_write;
2598 chr->chr_update_read_handler = udp_chr_update_read_handler;
2599 chr->chr_close = udp_chr_close;
2600 /* be isn't opened until we get a connection */
2601 chr->explicit_be_open = true;
2602 return chr;
2603 }
2604
2605 /***********************************************************/
2606 /* TCP Net console */
2607
2608 typedef struct {
2609 QIOChannel *ioc; /* Client I/O channel */
2610 QIOChannelSocket *sioc; /* Client master channel */
2611 QIOChannelSocket *listen_ioc;
2612 guint listen_tag;
2613 QCryptoTLSCreds *tls_creds;
2614 int connected;
2615 int max_size;
2616 int do_telnetopt;
2617 int do_nodelay;
2618 int is_unix;
2619 int *read_msgfds;
2620 size_t read_msgfds_num;
2621 int *write_msgfds;
2622 size_t write_msgfds_num;
2623
2624 SocketAddress *addr;
2625 bool is_listen;
2626 bool is_telnet;
2627
2628 guint reconnect_timer;
2629 int64_t reconnect_time;
2630 bool connect_err_reported;
2631 } TCPCharDriver;
2632
2633 static gboolean socket_reconnect_timeout(gpointer opaque);
2634
2635 static void qemu_chr_socket_restart_timer(CharDriverState *chr)
2636 {
2637 TCPCharDriver *s = chr->opaque;
2638 assert(s->connected == 0);
2639 s->reconnect_timer = g_timeout_add_seconds(s->reconnect_time,
2640 socket_reconnect_timeout, chr);
2641 }
2642
2643 static void check_report_connect_error(CharDriverState *chr,
2644 Error *err)
2645 {
2646 TCPCharDriver *s = chr->opaque;
2647
2648 if (!s->connect_err_reported) {
2649 error_report("Unable to connect character device %s: %s",
2650 chr->label, error_get_pretty(err));
2651 s->connect_err_reported = true;
2652 }
2653 qemu_chr_socket_restart_timer(chr);
2654 }
2655
2656 static gboolean tcp_chr_accept(QIOChannel *chan,
2657 GIOCondition cond,
2658 void *opaque);
2659
2660 /* Called with chr_write_lock held. */
2661 static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2662 {
2663 TCPCharDriver *s = chr->opaque;
2664 if (s->connected) {
2665 int ret = io_channel_send_full(s->ioc, buf, len,
2666 s->write_msgfds,
2667 s->write_msgfds_num);
2668
2669 /* free the written msgfds, no matter what */
2670 if (s->write_msgfds_num) {
2671 g_free(s->write_msgfds);
2672 s->write_msgfds = 0;
2673 s->write_msgfds_num = 0;
2674 }
2675
2676 return ret;
2677 } else {
2678 /* XXX: indicate an error ? */
2679 return len;
2680 }
2681 }
2682
2683 static int tcp_chr_read_poll(void *opaque)
2684 {
2685 CharDriverState *chr = opaque;
2686 TCPCharDriver *s = chr->opaque;
2687 if (!s->connected)
2688 return 0;
2689 s->max_size = qemu_chr_be_can_write(chr);
2690 return s->max_size;
2691 }
2692
2693 #define IAC 255
2694 #define IAC_BREAK 243
2695 static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2696 TCPCharDriver *s,
2697 uint8_t *buf, int *size)
2698 {
2699 /* Handle any telnet client's basic IAC options to satisfy char by
2700 * char mode with no echo. All IAC options will be removed from
2701 * the buf and the do_telnetopt variable will be used to track the
2702 * state of the width of the IAC information.
2703 *
2704 * IAC commands come in sets of 3 bytes with the exception of the
2705 * "IAC BREAK" command and the double IAC.
2706 */
2707
2708 int i;
2709 int j = 0;
2710
2711 for (i = 0; i < *size; i++) {
2712 if (s->do_telnetopt > 1) {
2713 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2714 /* Double IAC means send an IAC */
2715 if (j != i)
2716 buf[j] = buf[i];
2717 j++;
2718 s->do_telnetopt = 1;
2719 } else {
2720 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2721 /* Handle IAC break commands by sending a serial break */
2722 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
2723 s->do_telnetopt++;
2724 }
2725 s->do_telnetopt++;
2726 }
2727 if (s->do_telnetopt >= 4) {
2728 s->do_telnetopt = 1;
2729 }
2730 } else {
2731 if ((unsigned char)buf[i] == IAC) {
2732 s->do_telnetopt = 2;
2733 } else {
2734 if (j != i)
2735 buf[j] = buf[i];
2736 j++;
2737 }
2738 }
2739 }
2740 *size = j;
2741 }
2742
2743 static int tcp_get_msgfds(CharDriverState *chr, int *fds, int num)
2744 {
2745 TCPCharDriver *s = chr->opaque;
2746 int to_copy = (s->read_msgfds_num < num) ? s->read_msgfds_num : num;
2747
2748 assert(num <= TCP_MAX_FDS);
2749
2750 if (to_copy) {
2751 int i;
2752
2753 memcpy(fds, s->read_msgfds, to_copy * sizeof(int));
2754
2755 /* Close unused fds */
2756 for (i = to_copy; i < s->read_msgfds_num; i++) {
2757 close(s->read_msgfds[i]);
2758 }
2759
2760 g_free(s->read_msgfds);
2761 s->read_msgfds = 0;
2762 s->read_msgfds_num = 0;
2763 }
2764
2765 return to_copy;
2766 }
2767
2768 static int tcp_set_msgfds(CharDriverState *chr, int *fds, int num)
2769 {
2770 TCPCharDriver *s = chr->opaque;
2771
2772 /* clear old pending fd array */
2773 g_free(s->write_msgfds);
2774 s->write_msgfds = NULL;
2775 s->write_msgfds_num = 0;
2776
2777 if (!s->connected ||
2778 !qio_channel_has_feature(s->ioc,
2779 QIO_CHANNEL_FEATURE_FD_PASS)) {
2780 return -1;
2781 }
2782
2783 if (num) {
2784 s->write_msgfds = g_new(int, num);
2785 memcpy(s->write_msgfds, fds, num * sizeof(int));
2786 }
2787
2788 s->write_msgfds_num = num;
2789
2790 return 0;
2791 }
2792
2793 static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2794 {
2795 TCPCharDriver *s = chr->opaque;
2796 struct iovec iov = { .iov_base = buf, .iov_len = len };
2797 int ret;
2798 size_t i;
2799 int *msgfds = NULL;
2800 size_t msgfds_num = 0;
2801
2802 if (qio_channel_has_feature(s->ioc, QIO_CHANNEL_FEATURE_FD_PASS)) {
2803 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2804 &msgfds, &msgfds_num,
2805 NULL);
2806 } else {
2807 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2808 NULL, NULL,
2809 NULL);
2810 }
2811
2812 if (ret == QIO_CHANNEL_ERR_BLOCK) {
2813 errno = EAGAIN;
2814 ret = -1;
2815 } else if (ret == -1) {
2816 errno = EIO;
2817 }
2818
2819 if (msgfds_num) {
2820 /* close and clean read_msgfds */
2821 for (i = 0; i < s->read_msgfds_num; i++) {
2822 close(s->read_msgfds[i]);
2823 }
2824
2825 if (s->read_msgfds_num) {
2826 g_free(s->read_msgfds);
2827 }
2828
2829 s->read_msgfds = msgfds;
2830 s->read_msgfds_num = msgfds_num;
2831 }
2832
2833 for (i = 0; i < s->read_msgfds_num; i++) {
2834 int fd = s->read_msgfds[i];
2835 if (fd < 0) {
2836 continue;
2837 }
2838
2839 /* O_NONBLOCK is preserved across SCM_RIGHTS so reset it */
2840 qemu_set_block(fd);
2841
2842 #ifndef MSG_CMSG_CLOEXEC
2843 qemu_set_cloexec(fd);
2844 #endif
2845 }
2846
2847 return ret;
2848 }
2849
2850 static GSource *tcp_chr_add_watch(CharDriverState *chr, GIOCondition cond)
2851 {
2852 TCPCharDriver *s = chr->opaque;
2853 return qio_channel_create_watch(s->ioc, cond);
2854 }
2855
2856 static void tcp_chr_free_connection(CharDriverState *chr)
2857 {
2858 TCPCharDriver *s = chr->opaque;
2859 int i;
2860
2861 if (!s->connected) {
2862 return;
2863 }
2864
2865 if (s->read_msgfds_num) {
2866 for (i = 0; i < s->read_msgfds_num; i++) {
2867 close(s->read_msgfds[i]);
2868 }
2869 g_free(s->read_msgfds);
2870 s->read_msgfds = NULL;
2871 s->read_msgfds_num = 0;
2872 }
2873
2874 tcp_set_msgfds(chr, NULL, 0);
2875 remove_fd_in_watch(chr);
2876 object_unref(OBJECT(s->sioc));
2877 s->sioc = NULL;
2878 object_unref(OBJECT(s->ioc));
2879 s->ioc = NULL;
2880 g_free(chr->filename);
2881 chr->filename = NULL;
2882 s->connected = 0;
2883 }
2884
2885 static void tcp_chr_disconnect(CharDriverState *chr)
2886 {
2887 TCPCharDriver *s = chr->opaque;
2888
2889 if (!s->connected) {
2890 return;
2891 }
2892
2893 tcp_chr_free_connection(chr);
2894
2895 if (s->listen_ioc) {
2896 s->listen_tag = qio_channel_add_watch(
2897 QIO_CHANNEL(s->listen_ioc), G_IO_IN, tcp_chr_accept, chr, NULL);
2898 }
2899 chr->filename = SocketAddress_to_str("disconnected:", s->addr,
2900 s->is_listen, s->is_telnet);
2901 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2902 if (s->reconnect_time) {
2903 qemu_chr_socket_restart_timer(chr);
2904 }
2905 }
2906
2907 static gboolean tcp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
2908 {
2909 CharDriverState *chr = opaque;
2910 TCPCharDriver *s = chr->opaque;
2911 uint8_t buf[READ_BUF_LEN];
2912 int len, size;
2913
2914 if (!s->connected || s->max_size <= 0) {
2915 return TRUE;
2916 }
2917 len = sizeof(buf);
2918 if (len > s->max_size)
2919 len = s->max_size;
2920 size = tcp_chr_recv(chr, (void *)buf, len);
2921 if (size == 0 || size == -1) {
2922 /* connection closed */
2923 tcp_chr_disconnect(chr);
2924 } else if (size > 0) {
2925 if (s->do_telnetopt)
2926 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
2927 if (size > 0)
2928 qemu_chr_be_write(chr, buf, size);
2929 }
2930
2931 return TRUE;
2932 }
2933
2934 static int tcp_chr_sync_read(CharDriverState *chr, const uint8_t *buf, int len)
2935 {
2936 TCPCharDriver *s = chr->opaque;
2937 int size;
2938
2939 if (!s->connected) {
2940 return 0;
2941 }
2942
2943 size = tcp_chr_recv(chr, (void *) buf, len);
2944 if (size == 0) {
2945 /* connection closed */
2946 tcp_chr_disconnect(chr);
2947 }
2948
2949 return size;
2950 }
2951
2952 static void tcp_chr_connect(void *opaque)
2953 {
2954 CharDriverState *chr = opaque;
2955 TCPCharDriver *s = chr->opaque;
2956
2957 g_free(chr->filename);
2958 chr->filename = sockaddr_to_str(
2959 &s->sioc->localAddr, s->sioc->localAddrLen,
2960 &s->sioc->remoteAddr, s->sioc->remoteAddrLen,
2961 s->is_listen, s->is_telnet);
2962
2963 s->connected = 1;
2964 if (s->ioc) {
2965 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2966 tcp_chr_read_poll,
2967 tcp_chr_read, chr);
2968 }
2969 qemu_chr_be_generic_open(chr);
2970 }
2971
2972 static void tcp_chr_update_read_handler(CharDriverState *chr)
2973 {
2974 TCPCharDriver *s = chr->opaque;
2975
2976 if (!s->connected) {
2977 return;
2978 }
2979
2980 remove_fd_in_watch(chr);
2981 if (s->ioc) {
2982 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2983 tcp_chr_read_poll,
2984 tcp_chr_read, chr);
2985 }
2986 }
2987
2988 typedef struct {
2989 CharDriverState *chr;
2990 char buf[12];
2991 size_t buflen;
2992 } TCPCharDriverTelnetInit;
2993
2994 static gboolean tcp_chr_telnet_init_io(QIOChannel *ioc,
2995 GIOCondition cond G_GNUC_UNUSED,
2996 gpointer user_data)
2997 {
2998 TCPCharDriverTelnetInit *init = user_data;
2999 ssize_t ret;
3000
3001 ret = qio_channel_write(ioc, init->buf, init->buflen, NULL);
3002 if (ret < 0) {
3003 if (ret == QIO_CHANNEL_ERR_BLOCK) {
3004 ret = 0;
3005 } else {
3006 tcp_chr_disconnect(init->chr);
3007 return FALSE;
3008 }
3009 }
3010 init->buflen -= ret;
3011
3012 if (init->buflen == 0) {
3013 tcp_chr_connect(init->chr);
3014 return FALSE;
3015 }
3016
3017 memmove(init->buf, init->buf + ret, init->buflen);
3018
3019 return TRUE;
3020 }
3021
3022 static void tcp_chr_telnet_init(CharDriverState *chr)
3023 {
3024 TCPCharDriver *s = chr->opaque;
3025 TCPCharDriverTelnetInit *init =
3026 g_new0(TCPCharDriverTelnetInit, 1);
3027 size_t n = 0;
3028
3029 init->chr = chr;
3030 init->buflen = 12;
3031
3032 #define IACSET(x, a, b, c) \
3033 do { \
3034 x[n++] = a; \
3035 x[n++] = b; \
3036 x[n++] = c; \
3037 } while (0)
3038
3039 /* Prep the telnet negotion to put telnet in binary,
3040 * no echo, single char mode */
3041 IACSET(init->buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
3042 IACSET(init->buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
3043 IACSET(init->buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
3044 IACSET(init->buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
3045
3046 #undef IACSET
3047
3048 qio_channel_add_watch(
3049 s->ioc, G_IO_OUT,
3050 tcp_chr_telnet_init_io,
3051 init, NULL);
3052 }
3053
3054
3055 static void tcp_chr_tls_handshake(Object *source,
3056 Error *err,
3057 gpointer user_data)
3058 {
3059 CharDriverState *chr = user_data;
3060 TCPCharDriver *s = chr->opaque;
3061
3062 if (err) {
3063 tcp_chr_disconnect(chr);
3064 } else {
3065 if (s->do_telnetopt) {
3066 tcp_chr_telnet_init(chr);
3067 } else {
3068 tcp_chr_connect(chr);
3069 }
3070 }
3071 }
3072
3073
3074 static void tcp_chr_tls_init(CharDriverState *chr)
3075 {
3076 TCPCharDriver *s = chr->opaque;
3077 QIOChannelTLS *tioc;
3078 Error *err = NULL;
3079
3080 if (s->is_listen) {
3081 tioc = qio_channel_tls_new_server(
3082 s->ioc, s->tls_creds,
3083 NULL, /* XXX Use an ACL */
3084 &err);
3085 } else {
3086 tioc = qio_channel_tls_new_client(
3087 s->ioc, s->tls_creds,
3088 s->addr->u.inet.data->host,
3089 &err);
3090 }
3091 if (tioc == NULL) {
3092 error_free(err);
3093 tcp_chr_disconnect(chr);
3094 }
3095 object_unref(OBJECT(s->ioc));
3096 s->ioc = QIO_CHANNEL(tioc);
3097
3098 qio_channel_tls_handshake(tioc,
3099 tcp_chr_tls_handshake,
3100 chr,
3101 NULL);
3102 }
3103
3104
3105 static int tcp_chr_new_client(CharDriverState *chr, QIOChannelSocket *sioc)
3106 {
3107 TCPCharDriver *s = chr->opaque;
3108 if (s->ioc != NULL) {
3109 return -1;
3110 }
3111
3112 s->ioc = QIO_CHANNEL(sioc);
3113 object_ref(OBJECT(sioc));
3114 s->sioc = sioc;
3115 object_ref(OBJECT(sioc));
3116
3117 qio_channel_set_blocking(s->ioc, false, NULL);
3118
3119 if (s->do_nodelay) {
3120 qio_channel_set_delay(s->ioc, false);
3121 }
3122 if (s->listen_tag) {
3123 g_source_remove(s->listen_tag);
3124 s->listen_tag = 0;
3125 }
3126
3127 if (s->tls_creds) {
3128 tcp_chr_tls_init(chr);
3129 } else {
3130 if (s->do_telnetopt) {
3131 tcp_chr_telnet_init(chr);
3132 } else {
3133 tcp_chr_connect(chr);
3134 }
3135 }
3136
3137 return 0;
3138 }
3139
3140
3141 static int tcp_chr_add_client(CharDriverState *chr, int fd)
3142 {
3143 int ret;
3144 QIOChannelSocket *sioc;
3145
3146 sioc = qio_channel_socket_new_fd(fd, NULL);
3147 if (!sioc) {
3148 return -1;
3149 }
3150 ret = tcp_chr_new_client(chr, sioc);
3151 object_unref(OBJECT(sioc));
3152 return ret;
3153 }
3154
3155 static gboolean tcp_chr_accept(QIOChannel *channel,
3156 GIOCondition cond,
3157 void *opaque)
3158 {
3159 CharDriverState *chr = opaque;
3160 QIOChannelSocket *sioc;
3161
3162 sioc = qio_channel_socket_accept(QIO_CHANNEL_SOCKET(channel),
3163 NULL);
3164 if (!sioc) {
3165 return TRUE;
3166 }
3167
3168 tcp_chr_new_client(chr, sioc);
3169
3170 object_unref(OBJECT(sioc));
3171
3172 return TRUE;
3173 }
3174
3175 static int tcp_chr_wait_connected(CharDriverState *chr, Error **errp)
3176 {
3177 TCPCharDriver *s = chr->opaque;
3178 QIOChannelSocket *sioc;
3179
3180 /* It can't wait on s->connected, since it is set asynchronously
3181 * in TLS and telnet cases, only wait for an accepted socket */
3182 while (!s->ioc) {
3183 if (s->is_listen) {
3184 fprintf(stderr, "QEMU waiting for connection on: %s\n",
3185 chr->filename);
3186 qio_channel_set_blocking(QIO_CHANNEL(s->listen_ioc), true, NULL);
3187 tcp_chr_accept(QIO_CHANNEL(s->listen_ioc), G_IO_IN, chr);
3188 qio_channel_set_blocking(QIO_CHANNEL(s->listen_ioc), false, NULL);
3189 } else {
3190 sioc = qio_channel_socket_new();
3191 if (qio_channel_socket_connect_sync(sioc, s->addr, errp) < 0) {
3192 object_unref(OBJECT(sioc));
3193 return -1;
3194 }
3195 tcp_chr_new_client(chr, sioc);
3196 object_unref(OBJECT(sioc));
3197 }
3198 }
3199
3200 return 0;
3201 }
3202
3203 int qemu_chr_wait_connected(CharDriverState *chr, Error **errp)
3204 {
3205 if (chr->chr_wait_connected) {
3206 return chr->chr_wait_connected(chr, errp);
3207 }
3208
3209 return 0;
3210 }
3211
3212 static void tcp_chr_close(CharDriverState *chr)
3213 {
3214 TCPCharDriver *s = chr->opaque;
3215
3216 tcp_chr_free_connection(chr);
3217
3218 if (s->reconnect_timer) {
3219 g_source_remove(s->reconnect_timer);
3220 s->reconnect_timer = 0;
3221 }
3222 qapi_free_SocketAddress(s->addr);
3223 if (s->listen_tag) {
3224 g_source_remove(s->listen_tag);
3225 s->listen_tag = 0;
3226 }
3227 if (s->listen_ioc) {
3228 object_unref(OBJECT(s->listen_ioc));
3229 }
3230 if (s->tls_creds) {
3231 object_unref(OBJECT(s->tls_creds));
3232 }
3233 g_free(s);
3234 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
3235 }
3236
3237
3238 static void qemu_chr_socket_connected(Object *src, Error *err, void *opaque)
3239 {
3240 QIOChannelSocket *sioc = QIO_CHANNEL_SOCKET(src);
3241 CharDriverState *chr = opaque;
3242 TCPCharDriver *s = chr->opaque;
3243
3244 if (err) {
3245 check_report_connect_error(chr, err);
3246 object_unref(src);
3247 return;
3248 }
3249
3250 s->connect_err_reported = false;
3251 tcp_chr_new_client(chr, sioc);
3252 object_unref(OBJECT(sioc));
3253 }
3254
3255
3256 /*********************************************************/
3257 /* Ring buffer chardev */
3258
3259 typedef struct {
3260 size_t size;
3261 size_t prod;
3262 size_t cons;
3263 uint8_t *cbuf;
3264 } RingBufCharDriver;
3265
3266 static size_t ringbuf_count(const CharDriverState *chr)
3267 {
3268 const RingBufCharDriver *d = chr->opaque;
3269
3270 return d->prod - d->cons;
3271 }
3272
3273 /* Called with chr_write_lock held. */
3274 static int ringbuf_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
3275 {
3276 RingBufCharDriver *d = chr->opaque;
3277 int i;
3278
3279 if (!buf || (len < 0)) {
3280 return -1;
3281 }
3282
3283 for (i = 0; i < len; i++ ) {
3284 d->cbuf[d->prod++ & (d->size - 1)] = buf[i];
3285 if (d->prod - d->cons > d->size) {
3286 d->cons = d->prod - d->size;
3287 }
3288 }
3289
3290 return 0;
3291 }
3292
3293 static int ringbuf_chr_read(CharDriverState *chr, uint8_t *buf, int len)
3294 {
3295 RingBufCharDriver *d = chr->opaque;
3296 int i;
3297
3298 qemu_mutex_lock(&chr->chr_write_lock);
3299 for (i = 0; i < len && d->cons != d->prod; i++) {
3300 buf[i] = d->cbuf[d->cons++ & (d->size - 1)];
3301 }
3302 qemu_mutex_unlock(&chr->chr_write_lock);
3303
3304 return i;
3305 }
3306
3307 static void ringbuf_chr_close(struct CharDriverState *chr)
3308 {
3309 RingBufCharDriver *d = chr->opaque;
3310
3311 g_free(d->cbuf);
3312 g_free(d);
3313 chr->opaque = NULL;
3314 }
3315
3316 static CharDriverState *qemu_chr_open_ringbuf(const char *id,
3317 ChardevBackend *backend,
3318 ChardevReturn *ret,
3319 Error **errp)
3320 {
3321 ChardevRingbuf *opts = backend->u.ringbuf.data;
3322 ChardevCommon *common = qapi_ChardevRingbuf_base(opts);
3323 CharDriverState *chr;
3324 RingBufCharDriver *d;
3325
3326 chr = qemu_chr_alloc(common, errp);
3327 if (!chr) {
3328 return NULL;
3329 }
3330 d = g_malloc(sizeof(*d));
3331
3332 d->size = opts->has_size ? opts->size : 65536;
3333
3334 /* The size must be power of 2 */
3335 if (d->size & (d->size - 1)) {
3336 error_setg(errp, "size of ringbuf chardev must be power of two");
3337 goto fail;
3338 }
3339
3340 d->prod = 0;
3341 d->cons = 0;
3342 d->cbuf = g_malloc0(d->size);
3343
3344 chr->opaque = d;
3345 chr->chr_write = ringbuf_chr_write;
3346 chr->chr_close = ringbuf_chr_close;
3347
3348 return chr;
3349
3350 fail:
3351 g_free(d);
3352 qemu_chr_free_common(chr);
3353 return NULL;
3354 }
3355
3356 bool chr_is_ringbuf(const CharDriverState *chr)
3357 {
3358 return chr->chr_write == ringbuf_chr_write;
3359 }
3360
3361 void qmp_ringbuf_write(const char *device, const char *data,
3362 bool has_format, enum DataFormat format,
3363 Error **errp)
3364 {
3365 CharDriverState *chr;
3366 const uint8_t *write_data;
3367 int ret;
3368 gsize write_count;
3369
3370 chr = qemu_chr_find(device);
3371 if (!chr) {
3372 error_setg(errp, "Device '%s' not found", device);
3373 return;
3374 }
3375
3376 if (!chr_is_ringbuf(chr)) {
3377 error_setg(errp,"%s is not a ringbuf device", device);
3378 return;
3379 }
3380
3381 if (has_format && (format == DATA_FORMAT_BASE64)) {
3382 write_data = qbase64_decode(data, -1,
3383 &write_count,
3384 errp);
3385 if (!write_data) {
3386 return;
3387 }
3388 } else {
3389 write_data = (uint8_t *)data;
3390 write_count = strlen(data);
3391 }
3392
3393 ret = ringbuf_chr_write(chr, write_data, write_count);
3394
3395 if (write_data != (uint8_t *)data) {
3396 g_free((void *)write_data);
3397 }
3398
3399 if (ret < 0) {
3400 error_setg(errp, "Failed to write to device %s", device);
3401 return;
3402 }
3403 }
3404
3405 char *qmp_ringbuf_read(const char *device, int64_t size,
3406 bool has_format, enum DataFormat format,
3407 Error **errp)
3408 {
3409 CharDriverState *chr;
3410 uint8_t *read_data;
3411 size_t count;
3412 char *data;
3413
3414 chr = qemu_chr_find(device);
3415 if (!chr) {
3416 error_setg(errp, "Device '%s' not found", device);
3417 return NULL;
3418 }
3419
3420 if (!chr_is_ringbuf(chr)) {
3421 error_setg(errp,"%s is not a ringbuf device", device);
3422 return NULL;
3423 }
3424
3425 if (size <= 0) {
3426 error_setg(errp, "size must be greater than zero");
3427 return NULL;
3428 }
3429
3430 count = ringbuf_count(chr);
3431 size = size > count ? count : size;
3432 read_data = g_malloc(size + 1);
3433
3434 ringbuf_chr_read(chr, read_data, size);
3435
3436 if (has_format && (format == DATA_FORMAT_BASE64)) {
3437 data = g_base64_encode(read_data, size);
3438 g_free(read_data);
3439 } else {
3440 /*
3441 * FIXME should read only complete, valid UTF-8 characters up
3442 * to @size bytes. Invalid sequences should be replaced by a
3443 * suitable replacement character. Except when (and only
3444 * when) ring buffer lost characters since last read, initial
3445 * continuation characters should be dropped.
3446 */
3447 read_data[size] = 0;
3448 data = (char *)read_data;
3449 }
3450
3451 return data;
3452 }
3453
3454 QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
3455 {
3456 char host[65], port[33], width[8], height[8];
3457 int pos;
3458 const char *p;
3459 QemuOpts *opts;
3460 Error *local_err = NULL;
3461
3462 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
3463 if (local_err) {
3464 error_report_err(local_err);
3465 return NULL;
3466 }
3467
3468 if (strstart(filename, "mon:", &p)) {
3469 filename = p;
3470 qemu_opt_set(opts, "mux", "on", &error_abort);
3471 if (strcmp(filename, "stdio") == 0) {
3472 /* Monitor is muxed to stdio: do not exit on Ctrl+C by default
3473 * but pass it to the guest. Handle this only for compat syntax,
3474 * for -chardev syntax we have special option for this.
3475 * This is what -nographic did, redirecting+muxing serial+monitor
3476 * to stdio causing Ctrl+C to be passed to guest. */
3477 qemu_opt_set(opts, "signal", "off", &error_abort);
3478 }
3479 }
3480
3481 if (strcmp(filename, "null") == 0 ||
3482 strcmp(filename, "pty") == 0 ||
3483 strcmp(filename, "msmouse") == 0 ||
3484 strcmp(filename, "braille") == 0 ||
3485 strcmp(filename, "testdev") == 0 ||
3486 strcmp(filename, "stdio") == 0) {
3487 qemu_opt_set(opts, "backend", filename, &error_abort);
3488 return opts;
3489 }
3490 if (strstart(filename, "vc", &p)) {
3491 qemu_opt_set(opts, "backend", "vc", &error_abort);
3492 if (*p == ':') {
3493 if (sscanf(p+1, "%7[0-9]x%7[0-9]", width, height) == 2) {
3494 /* pixels */
3495 qemu_opt_set(opts, "width", width, &error_abort);
3496 qemu_opt_set(opts, "height", height, &error_abort);
3497 } else if (sscanf(p+1, "%7[0-9]Cx%7[0-9]C", width, height) == 2) {
3498 /* chars */
3499 qemu_opt_set(opts, "cols", width, &error_abort);
3500 qemu_opt_set(opts, "rows", height, &error_abort);
3501 } else {
3502 goto fail;
3503 }
3504 }
3505 return opts;
3506 }
3507 if (strcmp(filename, "con:") == 0) {
3508 qemu_opt_set(opts, "backend", "console", &error_abort);
3509 return opts;
3510 }
3511 if (strstart(filename, "COM", NULL)) {
3512 qemu_opt_set(opts, "backend", "serial", &error_abort);
3513 qemu_opt_set(opts, "path", filename, &error_abort);
3514 return opts;
3515 }
3516 if (strstart(filename, "file:", &p)) {
3517 qemu_opt_set(opts, "backend", "file", &error_abort);
3518 qemu_opt_set(opts, "path", p, &error_abort);
3519 return opts;
3520 }
3521 if (strstart(filename, "pipe:", &p)) {
3522 qemu_opt_set(opts, "backend", "pipe", &error_abort);
3523 qemu_opt_set(opts, "path", p, &error_abort);
3524 return opts;
3525 }
3526 if (strstart(filename, "tcp:", &p) ||
3527 strstart(filename, "telnet:", &p)) {
3528 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3529 host[0] = 0;
3530 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
3531 goto fail;
3532 }
3533 qemu_opt_set(opts, "backend", "socket", &error_abort);
3534 qemu_opt_set(opts, "host", host, &error_abort);
3535 qemu_opt_set(opts, "port", port, &error_abort);
3536 if (p[pos] == ',') {
3537 qemu_opts_do_parse(opts, p+pos+1, NULL, &local_err);
3538 if (local_err) {
3539 error_report_err(local_err);
3540 goto fail;
3541 }
3542 }
3543 if (strstart(filename, "telnet:", &p))
3544 qemu_opt_set(opts, "telnet", "on", &error_abort);
3545 return opts;
3546 }
3547 if (strstart(filename, "udp:", &p)) {
3548 qemu_opt_set(opts, "backend", "udp", &error_abort);
3549 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
3550 host[0] = 0;
3551 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
3552 goto fail;
3553 }
3554 }
3555 qemu_opt_set(opts, "host", host, &error_abort);
3556 qemu_opt_set(opts, "port", port, &error_abort);
3557 if (p[pos] == '@') {
3558 p += pos + 1;
3559 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3560 host[0] = 0;
3561 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
3562 goto fail;
3563 }
3564 }
3565 qemu_opt_set(opts, "localaddr", host, &error_abort);
3566 qemu_opt_set(opts, "localport", port, &error_abort);
3567 }
3568 return opts;
3569 }
3570 if (strstart(filename, "unix:", &p)) {
3571 qemu_opt_set(opts, "backend", "socket", &error_abort);
3572 qemu_opts_do_parse(opts, p, "path", &local_err);
3573 if (local_err) {
3574 error_report_err(local_err);
3575 goto fail;
3576 }
3577 return opts;
3578 }
3579 if (strstart(filename, "/dev/parport", NULL) ||
3580 strstart(filename, "/dev/ppi", NULL)) {
3581 qemu_opt_set(opts, "backend", "parport", &error_abort);
3582 qemu_opt_set(opts, "path", filename, &error_abort);
3583 return opts;
3584 }
3585 if (strstart(filename, "/dev/", NULL)) {
3586 qemu_opt_set(opts, "backend", "tty", &error_abort);
3587 qemu_opt_set(opts, "path", filename, &error_abort);
3588 return opts;
3589 }
3590
3591 fail:
3592 qemu_opts_del(opts);
3593 return NULL;
3594 }
3595
3596 void qemu_chr_parse_common(QemuOpts *opts, ChardevCommon *backend)
3597 {
3598 const char *logfile = qemu_opt_get(opts, "logfile");
3599
3600 backend->has_logfile = logfile != NULL;
3601 backend->logfile = logfile ? g_strdup(logfile) : NULL;
3602
3603 backend->has_logappend = true;
3604 backend->logappend = qemu_opt_get_bool(opts, "logappend", false);
3605 }
3606
3607
3608 static void qemu_chr_parse_file_out(QemuOpts *opts, ChardevBackend *backend,
3609 Error **errp)
3610 {
3611 const char *path = qemu_opt_get(opts, "path");
3612 ChardevFile *file;
3613
3614 if (path == NULL) {
3615 error_setg(errp, "chardev: file: no filename given");
3616 return;
3617 }
3618 file = backend->u.file.data = g_new0(ChardevFile, 1);
3619 qemu_chr_parse_common(opts, qapi_ChardevFile_base(file));
3620 file->out = g_strdup(path);
3621
3622 file->has_append = true;
3623 file->append = qemu_opt_get_bool(opts, "append", false);
3624 }
3625
3626 static void qemu_chr_parse_stdio(QemuOpts *opts, ChardevBackend *backend,
3627 Error **errp)
3628 {
3629 ChardevStdio *stdio;
3630
3631 stdio = backend->u.stdio.data = g_new0(ChardevStdio, 1);
3632 qemu_chr_parse_common(opts, qapi_ChardevStdio_base(stdio));
3633 stdio->has_signal = true;
3634 stdio->signal = qemu_opt_get_bool(opts, "signal", true);
3635 }
3636
3637 #ifdef HAVE_CHARDEV_SERIAL
3638 static void qemu_chr_parse_serial(QemuOpts *opts, ChardevBackend *backend,
3639 Error **errp)
3640 {
3641 const char *device = qemu_opt_get(opts, "path");
3642 ChardevHostdev *serial;
3643
3644 if (device == NULL) {
3645 error_setg(errp, "chardev: serial/tty: no device path given");
3646 return;
3647 }
3648 serial = backend->u.serial.data = g_new0(ChardevHostdev, 1);
3649 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(serial));
3650 serial->device = g_strdup(device);
3651 }
3652 #endif
3653
3654 #ifdef HAVE_CHARDEV_PARPORT
3655 static void qemu_chr_parse_parallel(QemuOpts *opts, ChardevBackend *backend,
3656 Error **errp)
3657 {
3658 const char *device = qemu_opt_get(opts, "path");
3659 ChardevHostdev *parallel;
3660
3661 if (device == NULL) {
3662 error_setg(errp, "chardev: parallel: no device path given");
3663 return;
3664 }
3665 parallel = backend->u.parallel.data = g_new0(ChardevHostdev, 1);
3666 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(parallel));
3667 parallel->device = g_strdup(device);
3668 }
3669 #endif
3670
3671 static void qemu_chr_parse_pipe(QemuOpts *opts, ChardevBackend *backend,
3672 Error **errp)
3673 {
3674 const char *device = qemu_opt_get(opts, "path");
3675 ChardevHostdev *dev;
3676
3677 if (device == NULL) {
3678 error_setg(errp, "chardev: pipe: no device path given");
3679 return;
3680 }
3681 dev = backend->u.pipe.data = g_new0(ChardevHostdev, 1);
3682 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(dev));
3683 dev->device = g_strdup(device);
3684 }
3685
3686 static void qemu_chr_parse_ringbuf(QemuOpts *opts, ChardevBackend *backend,
3687 Error **errp)
3688 {
3689 int val;
3690 ChardevRingbuf *ringbuf;
3691
3692 ringbuf = backend->u.ringbuf.data = g_new0(ChardevRingbuf, 1);
3693 qemu_chr_parse_common(opts, qapi_ChardevRingbuf_base(ringbuf));
3694
3695 val = qemu_opt_get_size(opts, "size", 0);
3696 if (val != 0) {
3697 ringbuf->has_size = true;
3698 ringbuf->size = val;
3699 }
3700 }
3701
3702 static void qemu_chr_parse_mux(QemuOpts *opts, ChardevBackend *backend,
3703 Error **errp)
3704 {
3705 const char *chardev = qemu_opt_get(opts, "chardev");
3706 ChardevMux *mux;
3707
3708 if (chardev == NULL) {
3709 error_setg(errp, "chardev: mux: no chardev given");
3710 return;
3711 }
3712 mux = backend->u.mux.data = g_new0(ChardevMux, 1);
3713 qemu_chr_parse_common(opts, qapi_ChardevMux_base(mux));
3714 mux->chardev = g_strdup(chardev);
3715 }
3716
3717 static void qemu_chr_parse_socket(QemuOpts *opts, ChardevBackend *backend,
3718 Error **errp)
3719 {
3720 bool is_listen = qemu_opt_get_bool(opts, "server", false);
3721 bool is_waitconnect = is_listen && qemu_opt_get_bool(opts, "wait", true);
3722 bool is_telnet = qemu_opt_get_bool(opts, "telnet", false);
3723 bool do_nodelay = !qemu_opt_get_bool(opts, "delay", true);
3724 int64_t reconnect = qemu_opt_get_number(opts, "reconnect", 0);
3725 const char *path = qemu_opt_get(opts, "path");
3726 const char *host = qemu_opt_get(opts, "host");
3727 const char *port = qemu_opt_get(opts, "port");
3728 const char *tls_creds = qemu_opt_get(opts, "tls-creds");
3729 SocketAddress *addr;
3730 ChardevSocket *sock;
3731
3732 if (!path) {
3733 if (!host) {
3734 error_setg(errp, "chardev: socket: no host given");
3735 return;
3736 }
3737 if (!port) {
3738 error_setg(errp, "chardev: socket: no port given");
3739 return;
3740 }
3741 } else {
3742 if (tls_creds) {
3743 error_setg(errp, "TLS can only be used over TCP socket");
3744 return;
3745 }
3746 }
3747
3748 sock = backend->u.socket.data = g_new0(ChardevSocket, 1);
3749 qemu_chr_parse_common(opts, qapi_ChardevSocket_base(sock));
3750
3751 sock->has_nodelay = true;
3752 sock->nodelay = do_nodelay;
3753 sock->has_server = true;
3754 sock->server = is_listen;
3755 sock->has_telnet = true;
3756 sock->telnet = is_telnet;
3757 sock->has_wait = true;
3758 sock->wait = is_waitconnect;
3759 sock->has_reconnect = true;
3760 sock->reconnect = reconnect;
3761 sock->tls_creds = g_strdup(tls_creds);
3762
3763 addr = g_new0(SocketAddress, 1);
3764 if (path) {
3765 UnixSocketAddress *q_unix;
3766 addr->type = SOCKET_ADDRESS_KIND_UNIX;
3767 q_unix = addr->u.q_unix.data = g_new0(UnixSocketAddress, 1);
3768 q_unix->path = g_strdup(path);
3769 } else {
3770 addr->type = SOCKET_ADDRESS_KIND_INET;
3771 addr->u.inet.data = g_new(InetSocketAddress, 1);
3772 *addr->u.inet.data = (InetSocketAddress) {
3773 .host = g_strdup(host),
3774 .port = g_strdup(port),
3775 .has_to = qemu_opt_get(opts, "to"),
3776 .to = qemu_opt_get_number(opts, "to", 0),
3777 .has_ipv4 = qemu_opt_get(opts, "ipv4"),
3778 .ipv4 = qemu_opt_get_bool(opts, "ipv4", 0),
3779 .has_ipv6 = qemu_opt_get(opts, "ipv6"),
3780 .ipv6 = qemu_opt_get_bool(opts, "ipv6", 0),
3781 };
3782 }
3783 sock->addr = addr;
3784 }
3785
3786 static void qemu_chr_parse_udp(QemuOpts *opts, ChardevBackend *backend,
3787 Error **errp)
3788 {
3789 const char *host = qemu_opt_get(opts, "host");
3790 const char *port = qemu_opt_get(opts, "port");
3791 const char *localaddr = qemu_opt_get(opts, "localaddr");
3792 const char *localport = qemu_opt_get(opts, "localport");
3793 bool has_local = false;
3794 SocketAddress *addr;
3795 ChardevUdp *udp;
3796
3797 if (host == NULL || strlen(host) == 0) {
3798 host = "localhost";
3799 }
3800 if (port == NULL || strlen(port) == 0) {
3801 error_setg(errp, "chardev: udp: remote port not specified");
3802 return;
3803 }
3804 if (localport == NULL || strlen(localport) == 0) {
3805 localport = "0";
3806 } else {
3807 has_local = true;
3808 }
3809 if (localaddr == NULL || strlen(localaddr) == 0) {
3810 localaddr = "";
3811 } else {
3812 has_local = true;
3813 }
3814
3815 udp = backend->u.udp.data = g_new0(ChardevUdp, 1);
3816 qemu_chr_parse_common(opts, qapi_ChardevUdp_base(udp));
3817
3818 addr = g_new0(SocketAddress, 1);
3819 addr->type = SOCKET_ADDRESS_KIND_INET;
3820 addr->u.inet.data = g_new(InetSocketAddress, 1);
3821 *addr->u.inet.data = (InetSocketAddress) {
3822 .host = g_strdup(host),
3823 .port = g_strdup(port),
3824 .has_ipv4 = qemu_opt_get(opts, "ipv4"),
3825 .ipv4 = qemu_opt_get_bool(opts, "ipv4", 0),
3826 .has_ipv6 = qemu_opt_get(opts, "ipv6"),
3827 .ipv6 = qemu_opt_get_bool(opts, "ipv6", 0),
3828 };
3829 udp->remote = addr;
3830
3831 if (has_local) {
3832 udp->has_local = true;
3833 addr = g_new0(SocketAddress, 1);
3834 addr->type = SOCKET_ADDRESS_KIND_INET;
3835 addr->u.inet.data = g_new(InetSocketAddress, 1);
3836 *addr->u.inet.data = (InetSocketAddress) {
3837 .host = g_strdup(localaddr),
3838 .port = g_strdup(localport),
3839 };
3840 udp->local = addr;
3841 }
3842 }
3843
3844 typedef struct CharDriver {
3845 const char *name;
3846 ChardevBackendKind kind;
3847 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp);
3848 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
3849 ChardevReturn *ret, Error **errp);
3850 } CharDriver;
3851
3852 static GSList *backends;
3853
3854 void register_char_driver(const char *name, ChardevBackendKind kind,
3855 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp),
3856 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
3857 ChardevReturn *ret, Error **errp))
3858 {
3859 CharDriver *s;
3860
3861 s = g_malloc0(sizeof(*s));
3862 s->name = g_strdup(name);
3863 s->kind = kind;
3864 s->parse = parse;
3865 s->create = create;
3866
3867 backends = g_slist_append(backends, s);
3868 }
3869
3870 CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
3871 void (*init)(struct CharDriverState *s),
3872 Error **errp)
3873 {
3874 Error *local_err = NULL;
3875 CharDriver *cd;
3876 CharDriverState *chr;
3877 GSList *i;
3878 ChardevReturn *ret = NULL;
3879 ChardevBackend *backend;
3880 const char *id = qemu_opts_id(opts);
3881 char *bid = NULL;
3882
3883 if (qemu_opt_get(opts, "backend") == NULL) {
3884 error_setg(errp, "chardev: \"%s\" missing backend",
3885 qemu_opts_id(opts));
3886 goto err;
3887 }
3888
3889 if (is_help_option(qemu_opt_get(opts, "backend"))) {
3890 fprintf(stderr, "Available chardev backend types:\n");
3891 for (i = backends; i; i = i->next) {
3892 cd = i->data;
3893 fprintf(stderr, "%s\n", cd->name);
3894 }
3895 exit(!is_help_option(qemu_opt_get(opts, "backend")));
3896 }
3897
3898 if (id == NULL) {
3899 error_setg(errp, "chardev: no id specified");
3900 goto err;
3901 }
3902
3903 for (i = backends; i; i = i->next) {
3904 cd = i->data;
3905
3906 if (strcmp(cd->name, qemu_opt_get(opts, "backend")) == 0) {
3907 break;
3908 }
3909 }
3910 if (i == NULL) {
3911 error_setg(errp, "chardev: backend \"%s\" not found",
3912 qemu_opt_get(opts, "backend"));
3913 goto err;
3914 }
3915
3916 backend = g_new0(ChardevBackend, 1);
3917
3918 if (qemu_opt_get_bool(opts, "mux", 0)) {
3919 bid = g_strdup_printf("%s-base", id);
3920 }
3921
3922 chr = NULL;
3923 backend->type = cd->kind;
3924 if (cd->parse) {
3925 cd->parse(opts, backend, &local_err);
3926 if (local_err) {
3927 error_propagate(errp, local_err);
3928 goto qapi_out;
3929 }
3930 } else {
3931 ChardevCommon *cc = g_new0(ChardevCommon, 1);
3932 qemu_chr_parse_common(opts, cc);
3933 backend->u.null.data = cc; /* Any ChardevCommon member would work */
3934 }
3935
3936 ret = qmp_chardev_add(bid ? bid : id, backend, errp);
3937 if (!ret) {
3938 goto qapi_out;
3939 }
3940
3941 if (bid) {
3942 qapi_free_ChardevBackend(backend);
3943 qapi_free_ChardevReturn(ret);
3944 backend = g_new0(ChardevBackend, 1);
3945 backend->u.mux.data = g_new0(ChardevMux, 1);
3946 backend->type = CHARDEV_BACKEND_KIND_MUX;
3947 backend->u.mux.data->chardev = g_strdup(bid);
3948 ret = qmp_chardev_add(id, backend, errp);
3949 if (!ret) {
3950 chr = qemu_chr_find(bid);
3951 qemu_chr_delete(chr);
3952 chr = NULL;
3953 goto qapi_out;
3954 }
3955 }
3956
3957 chr = qemu_chr_find(id);
3958 chr->opts = opts;
3959
3960 qapi_out:
3961 qapi_free_ChardevBackend(backend);
3962 qapi_free_ChardevReturn(ret);
3963 g_free(bid);
3964 return chr;
3965
3966 err:
3967 qemu_opts_del(opts);
3968 return NULL;
3969 }
3970
3971 CharDriverState *qemu_chr_new_noreplay(const char *label, const char *filename,
3972 void (*init)(struct CharDriverState *s))
3973 {
3974 const char *p;
3975 CharDriverState *chr;
3976 QemuOpts *opts;
3977 Error *err = NULL;
3978
3979 if (strstart(filename, "chardev:", &p)) {
3980 return qemu_chr_find(p);
3981 }
3982
3983 opts = qemu_chr_parse_compat(label, filename);
3984 if (!opts)
3985 return NULL;
3986
3987 chr = qemu_chr_new_from_opts(opts, init, &err);
3988 if (err) {
3989 error_report_err(err);
3990 }
3991 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
3992 qemu_chr_fe_claim_no_fail(chr);
3993 monitor_init(chr, MONITOR_USE_READLINE);
3994 }
3995 return chr;
3996 }
3997
3998 CharDriverState *qemu_chr_new(const char *label, const char *filename, void (*init)(struct CharDriverState *s))
3999 {
4000 CharDriverState *chr;
4001 chr = qemu_chr_new_noreplay(label, filename, init);
4002 if (chr) {
4003 chr->replay = replay_mode != REPLAY_MODE_NONE;
4004 if (chr->replay && chr->chr_ioctl) {
4005 fprintf(stderr,
4006 "Replay: ioctl is not supported for serial devices yet\n");
4007 }
4008 replay_register_char_driver(chr);
4009 }
4010 return chr;
4011 }
4012
4013 void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
4014 {
4015 if (chr->chr_set_echo) {
4016 chr->chr_set_echo(chr, echo);
4017 }
4018 }
4019
4020 void qemu_chr_fe_set_open(struct CharDriverState *chr, int fe_open)
4021 {
4022 if (chr->fe_open == fe_open) {
4023 return;
4024 }
4025 chr->fe_open = fe_open;
4026 if (chr->chr_set_fe_open) {
4027 chr->chr_set_fe_open(chr, fe_open);
4028 }
4029 }
4030
4031 void qemu_chr_fe_event(struct CharDriverState *chr, int event)
4032 {
4033 if (chr->chr_fe_event) {
4034 chr->chr_fe_event(chr, event);
4035 }
4036 }
4037
4038 guint qemu_chr_fe_add_watch(CharDriverState *s, GIOCondition cond,
4039 GIOFunc func, void *user_data)
4040 {
4041 GSource *src;
4042 guint tag;
4043
4044 if (s->chr_add_watch == NULL) {
4045 return 0;
4046 }
4047
4048 src = s->chr_add_watch(s, cond);
4049 if (!src) {
4050 return 0;
4051 }
4052
4053 g_source_set_callback(src, (GSourceFunc)func, user_data, NULL);
4054 tag = g_source_attach(src, NULL);
4055 g_source_unref(src);
4056
4057 return tag;
4058 }
4059
4060 int qemu_chr_fe_claim(CharDriverState *s)
4061 {
4062 if (s->avail_connections < 1) {
4063 return -1;
4064 }
4065 s->avail_connections--;
4066 return 0;
4067 }
4068
4069 void qemu_chr_fe_claim_no_fail(CharDriverState *s)
4070 {
4071 if (qemu_chr_fe_claim(s) != 0) {
4072 fprintf(stderr, "%s: error chardev \"%s\" already used\n",
4073 __func__, s->label);
4074 exit(1);
4075 }
4076 }
4077
4078 void qemu_chr_fe_release(CharDriverState *s)
4079 {
4080 s->avail_connections++;
4081 }
4082
4083 void qemu_chr_disconnect(CharDriverState *chr)
4084 {
4085 if (chr->chr_disconnect) {
4086 chr->chr_disconnect(chr);
4087 }
4088 }
4089
4090 static void qemu_chr_free_common(CharDriverState *chr)
4091 {
4092 g_free(chr->filename);
4093 g_free(chr->label);
4094 qemu_opts_del(chr->opts);
4095 if (chr->logfd != -1) {
4096 close(chr->logfd);
4097 }
4098 qemu_mutex_destroy(&chr->chr_write_lock);
4099 g_free(chr);
4100 }
4101
4102 void qemu_chr_free(CharDriverState *chr)
4103 {
4104 if (chr->chr_close) {
4105 chr->chr_close(chr);
4106 }
4107 qemu_chr_free_common(chr);
4108 }
4109
4110 void qemu_chr_delete(CharDriverState *chr)
4111 {
4112 QTAILQ_REMOVE(&chardevs, chr, next);
4113 qemu_chr_free(chr);
4114 }
4115
4116 ChardevInfoList *qmp_query_chardev(Error **errp)
4117 {
4118 ChardevInfoList *chr_list = NULL;
4119 CharDriverState *chr;
4120
4121 QTAILQ_FOREACH(chr, &chardevs, next) {
4122 ChardevInfoList *info = g_malloc0(sizeof(*info));
4123 info->value = g_malloc0(sizeof(*info->value));
4124 info->value->label = g_strdup(chr->label);
4125 info->value->filename = g_strdup(chr->filename);
4126 info->value->frontend_open = chr->fe_open;
4127
4128 info->next = chr_list;
4129 chr_list = info;
4130 }
4131
4132 return chr_list;
4133 }
4134
4135 ChardevBackendInfoList *qmp_query_chardev_backends(Error **errp)
4136 {
4137 ChardevBackendInfoList *backend_list = NULL;
4138 CharDriver *c = NULL;
4139 GSList *i = NULL;
4140
4141 for (i = backends; i; i = i->next) {
4142 ChardevBackendInfoList *info = g_malloc0(sizeof(*info));
4143 c = i->data;
4144 info->value = g_malloc0(sizeof(*info->value));
4145 info->value->name = g_strdup(c->name);
4146
4147 info->next = backend_list;
4148 backend_list = info;
4149 }
4150
4151 return backend_list;
4152 }
4153
4154 CharDriverState *qemu_chr_find(const char *name)
4155 {
4156 CharDriverState *chr;
4157
4158 QTAILQ_FOREACH(chr, &chardevs, next) {
4159 if (strcmp(chr->label, name) != 0)
4160 continue;
4161 return chr;
4162 }
4163 return NULL;
4164 }
4165
4166 QemuOptsList qemu_chardev_opts = {
4167 .name = "chardev",
4168 .implied_opt_name = "backend",
4169 .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
4170 .desc = {
4171 {
4172 .name = "backend",
4173 .type = QEMU_OPT_STRING,
4174 },{
4175 .name = "path",
4176 .type = QEMU_OPT_STRING,
4177 },{
4178 .name = "host",
4179 .type = QEMU_OPT_STRING,
4180 },{
4181 .name = "port",
4182 .type = QEMU_OPT_STRING,
4183 },{
4184 .name = "localaddr",
4185 .type = QEMU_OPT_STRING,
4186 },{
4187 .name = "localport",
4188 .type = QEMU_OPT_STRING,
4189 },{
4190 .name = "to",
4191 .type = QEMU_OPT_NUMBER,
4192 },{
4193 .name = "ipv4",
4194 .type = QEMU_OPT_BOOL,
4195 },{
4196 .name = "ipv6",
4197 .type = QEMU_OPT_BOOL,
4198 },{
4199 .name = "wait",
4200 .type = QEMU_OPT_BOOL,
4201 },{
4202 .name = "server",
4203 .type = QEMU_OPT_BOOL,
4204 },{
4205 .name = "delay",
4206 .type = QEMU_OPT_BOOL,
4207 },{
4208 .name = "reconnect",
4209 .type = QEMU_OPT_NUMBER,
4210 },{
4211 .name = "telnet",
4212 .type = QEMU_OPT_BOOL,
4213 },{
4214 .name = "tls-creds",
4215 .type = QEMU_OPT_STRING,
4216 },{
4217 .name = "width",
4218 .type = QEMU_OPT_NUMBER,
4219 },{
4220 .name = "height",
4221 .type = QEMU_OPT_NUMBER,
4222 },{
4223 .name = "cols",
4224 .type = QEMU_OPT_NUMBER,
4225 },{
4226 .name = "rows",
4227 .type = QEMU_OPT_NUMBER,
4228 },{
4229 .name = "mux",
4230 .type = QEMU_OPT_BOOL,
4231 },{
4232 .name = "signal",
4233 .type = QEMU_OPT_BOOL,
4234 },{
4235 .name = "name",
4236 .type = QEMU_OPT_STRING,
4237 },{
4238 .name = "debug",
4239 .type = QEMU_OPT_NUMBER,
4240 },{
4241 .name = "size",
4242 .type = QEMU_OPT_SIZE,
4243 },{
4244 .name = "chardev",
4245 .type = QEMU_OPT_STRING,
4246 },{
4247 .name = "append",
4248 .type = QEMU_OPT_BOOL,
4249 },{
4250 .name = "logfile",
4251 .type = QEMU_OPT_STRING,
4252 },{
4253 .name = "logappend",
4254 .type = QEMU_OPT_BOOL,
4255 },
4256 { /* end of list */ }
4257 },
4258 };
4259
4260 #ifdef _WIN32
4261
4262 static CharDriverState *qmp_chardev_open_file(const char *id,
4263 ChardevBackend *backend,
4264 ChardevReturn *ret,
4265 Error **errp)
4266 {
4267 ChardevFile *file = backend->u.file.data;
4268 ChardevCommon *common = qapi_ChardevFile_base(file);
4269 HANDLE out;
4270 DWORD accessmode;
4271 DWORD flags;
4272
4273 if (file->has_in) {
4274 error_setg(errp, "input file not supported");
4275 return NULL;
4276 }
4277
4278 if (file->has_append && file->append) {
4279 /* Append to file if it already exists. */
4280 accessmode = FILE_GENERIC_WRITE & ~FILE_WRITE_DATA;
4281 flags = OPEN_ALWAYS;
4282 } else {
4283 /* Truncate file if it already exists. */
4284 accessmode = GENERIC_WRITE;
4285 flags = CREATE_ALWAYS;
4286 }
4287
4288 out = CreateFile(file->out, accessmode, FILE_SHARE_READ, NULL, flags,
4289 FILE_ATTRIBUTE_NORMAL, NULL);
4290 if (out == INVALID_HANDLE_VALUE) {
4291 error_setg(errp, "open %s failed", file->out);
4292 return NULL;
4293 }
4294 return qemu_chr_open_win_file(out, common, errp);
4295 }
4296
4297 static CharDriverState *qmp_chardev_open_serial(const char *id,
4298 ChardevBackend *backend,
4299 ChardevReturn *ret,
4300 Error **errp)
4301 {
4302 ChardevHostdev *serial = backend->u.serial.data;
4303 ChardevCommon *common = qapi_ChardevHostdev_base(serial);
4304 return qemu_chr_open_win_path(serial->device, common, errp);
4305 }
4306
4307 #else /* WIN32 */
4308
4309 static int qmp_chardev_open_file_source(char *src, int flags,
4310 Error **errp)
4311 {
4312 int fd = -1;
4313
4314 TFR(fd = qemu_open(src, flags, 0666));
4315 if (fd == -1) {
4316 error_setg_file_open(errp, errno, src);
4317 }
4318 return fd;
4319 }
4320
4321 static CharDriverState *qmp_chardev_open_file(const char *id,
4322 ChardevBackend *backend,
4323 ChardevReturn *ret,
4324 Error **errp)
4325 {
4326 ChardevFile *file = backend->u.file.data;
4327 ChardevCommon *common = qapi_ChardevFile_base(file);
4328 int flags, in = -1, out;
4329
4330 flags = O_WRONLY | O_CREAT | O_BINARY;
4331 if (file->has_append && file->append) {
4332 flags |= O_APPEND;
4333 } else {
4334 flags |= O_TRUNC;
4335 }
4336
4337 out = qmp_chardev_open_file_source(file->out, flags, errp);
4338 if (out < 0) {
4339 return NULL;
4340 }
4341
4342 if (file->has_in) {
4343 flags = O_RDONLY;
4344 in = qmp_chardev_open_file_source(file->in, flags, errp);
4345 if (in < 0) {
4346 qemu_close(out);
4347 return NULL;
4348 }
4349 }
4350
4351 return qemu_chr_open_fd(in, out, common, errp);
4352 }
4353
4354 #ifdef HAVE_CHARDEV_SERIAL
4355 static CharDriverState *qmp_chardev_open_serial(const char *id,
4356 ChardevBackend *backend,
4357 ChardevReturn *ret,
4358 Error **errp)
4359 {
4360 ChardevHostdev *serial = backend->u.serial.data;
4361 ChardevCommon *common = qapi_ChardevHostdev_base(serial);
4362 int fd;
4363
4364 fd = qmp_chardev_open_file_source(serial->device, O_RDWR, errp);
4365 if (fd < 0) {
4366 return NULL;
4367 }
4368 qemu_set_nonblock(fd);
4369 return qemu_chr_open_tty_fd(fd, common, errp);
4370 }
4371 #endif
4372
4373 #ifdef HAVE_CHARDEV_PARPORT
4374 static CharDriverState *qmp_chardev_open_parallel(const char *id,
4375 ChardevBackend *backend,
4376 ChardevReturn *ret,
4377 Error **errp)
4378 {
4379 ChardevHostdev *parallel = backend->u.parallel.data;
4380 ChardevCommon *common = qapi_ChardevHostdev_base(parallel);
4381 int fd;
4382
4383 fd = qmp_chardev_open_file_source(parallel->device, O_RDWR, errp);
4384 if (fd < 0) {
4385 return NULL;
4386 }
4387 return qemu_chr_open_pp_fd(fd, common, errp);
4388 }
4389 #endif
4390
4391 #endif /* WIN32 */
4392
4393 static gboolean socket_reconnect_timeout(gpointer opaque)
4394 {
4395 CharDriverState *chr = opaque;
4396 TCPCharDriver *s = chr->opaque;
4397 QIOChannelSocket *sioc;
4398
4399 s->reconnect_timer = 0;
4400
4401 if (chr->be_open) {
4402 return false;
4403 }
4404
4405 sioc = qio_channel_socket_new();
4406 qio_channel_socket_connect_async(sioc, s->addr,
4407 qemu_chr_socket_connected,
4408 chr, NULL);
4409
4410 return false;
4411 }
4412
4413 static CharDriverState *qmp_chardev_open_socket(const char *id,
4414 ChardevBackend *backend,
4415 ChardevReturn *ret,
4416 Error **errp)
4417 {
4418 CharDriverState *chr;
4419 TCPCharDriver *s;
4420 ChardevSocket *sock = backend->u.socket.data;
4421 SocketAddress *addr = sock->addr;
4422 bool do_nodelay = sock->has_nodelay ? sock->nodelay : false;
4423 bool is_listen = sock->has_server ? sock->server : true;
4424 bool is_telnet = sock->has_telnet ? sock->telnet : false;
4425 bool is_waitconnect = sock->has_wait ? sock->wait : false;
4426 int64_t reconnect = sock->has_reconnect ? sock->reconnect : 0;
4427 ChardevCommon *common = qapi_ChardevSocket_base(sock);
4428 QIOChannelSocket *sioc = NULL;
4429
4430 chr = qemu_chr_alloc(common, errp);
4431 if (!chr) {
4432 return NULL;
4433 }
4434 s = g_new0(TCPCharDriver, 1);
4435
4436 s->is_unix = addr->type == SOCKET_ADDRESS_KIND_UNIX;
4437 s->is_listen = is_listen;
4438 s->is_telnet = is_telnet;
4439 s->do_nodelay = do_nodelay;
4440 if (sock->tls_creds) {
4441 Object *creds;
4442 creds = object_resolve_path_component(
4443 object_get_objects_root(), sock->tls_creds);
4444 if (!creds) {
4445 error_setg(errp, "No TLS credentials with id '%s'",
4446 sock->tls_creds);
4447 goto error;
4448 }
4449 s->tls_creds = (QCryptoTLSCreds *)
4450 object_dynamic_cast(creds,
4451 TYPE_QCRYPTO_TLS_CREDS);
4452 if (!s->tls_creds) {
4453 error_setg(errp, "Object with id '%s' is not TLS credentials",
4454 sock->tls_creds);
4455 goto error;
4456 }
4457 object_ref(OBJECT(s->tls_creds));
4458 if (is_listen) {
4459 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_SERVER) {
4460 error_setg(errp, "%s",
4461 "Expected TLS credentials for server endpoint");
4462 goto error;
4463 }
4464 } else {
4465 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT) {
4466 error_setg(errp, "%s",
4467 "Expected TLS credentials for client endpoint");
4468 goto error;
4469 }
4470 }
4471 }
4472
4473 s->addr = QAPI_CLONE(SocketAddress, sock->addr);
4474
4475 chr->opaque = s;
4476 chr->chr_wait_connected = tcp_chr_wait_connected;
4477 chr->chr_write = tcp_chr_write;
4478 chr->chr_sync_read = tcp_chr_sync_read;
4479 chr->chr_close = tcp_chr_close;
4480 chr->chr_disconnect = tcp_chr_disconnect;
4481 chr->get_msgfds = tcp_get_msgfds;
4482 chr->set_msgfds = tcp_set_msgfds;
4483 chr->chr_add_client = tcp_chr_add_client;
4484 chr->chr_add_watch = tcp_chr_add_watch;
4485 chr->chr_update_read_handler = tcp_chr_update_read_handler;
4486 /* be isn't opened until we get a connection */
4487 chr->explicit_be_open = true;
4488
4489 chr->filename = SocketAddress_to_str("disconnected:",
4490 addr, is_listen, is_telnet);
4491
4492 if (is_listen) {
4493 if (is_telnet) {
4494 s->do_telnetopt = 1;
4495 }
4496 } else if (reconnect > 0) {
4497 s->reconnect_time = reconnect;
4498 }
4499
4500 if (s->reconnect_time) {
4501 sioc = qio_channel_socket_new();
4502 qio_channel_socket_connect_async(sioc, s->addr,
4503 qemu_chr_socket_connected,
4504 chr, NULL);
4505 } else {
4506 if (s->is_listen) {
4507 sioc = qio_channel_socket_new();
4508 if (qio_channel_socket_listen_sync(sioc, s->addr, errp) < 0) {
4509 goto error;
4510 }
4511 s->listen_ioc = sioc;
4512 if (is_waitconnect &&
4513 qemu_chr_wait_connected(chr, errp) < 0) {
4514 goto error;
4515 }
4516 if (!s->ioc) {
4517 s->listen_tag = qio_channel_add_watch(
4518 QIO_CHANNEL(s->listen_ioc), G_IO_IN,
4519 tcp_chr_accept, chr, NULL);
4520 }
4521 } else if (qemu_chr_wait_connected(chr, errp) < 0) {
4522 goto error;
4523 }
4524 }
4525
4526 return chr;
4527
4528 error:
4529 if (sioc) {
4530 object_unref(OBJECT(sioc));
4531 }
4532 if (s->tls_creds) {
4533 object_unref(OBJECT(s->tls_creds));
4534 }
4535 g_free(s);
4536 qemu_chr_free_common(chr);
4537 return NULL;
4538 }
4539
4540 static CharDriverState *qmp_chardev_open_udp(const char *id,
4541 ChardevBackend *backend,
4542 ChardevReturn *ret,
4543 Error **errp)
4544 {
4545 ChardevUdp *udp = backend->u.udp.data;
4546 ChardevCommon *common = qapi_ChardevUdp_base(udp);
4547 QIOChannelSocket *sioc = qio_channel_socket_new();
4548
4549 if (qio_channel_socket_dgram_sync(sioc,
4550 udp->local, udp->remote,
4551 errp) < 0) {
4552 object_unref(OBJECT(sioc));
4553 return NULL;
4554 }
4555 return qemu_chr_open_udp(sioc, common, errp);
4556 }
4557
4558 ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
4559 Error **errp)
4560 {
4561 ChardevReturn *ret = g_new0(ChardevReturn, 1);
4562 CharDriverState *chr = NULL;
4563 Error *local_err = NULL;
4564 GSList *i;
4565 CharDriver *cd;
4566
4567 chr = qemu_chr_find(id);
4568 if (chr) {
4569 error_setg(errp, "Chardev '%s' already exists", id);
4570 g_free(ret);
4571 return NULL;
4572 }
4573
4574 for (i = backends; i; i = i->next) {
4575 cd = i->data;
4576
4577 if (cd->kind == backend->type) {
4578 chr = cd->create(id, backend, ret, &local_err);
4579 if (local_err) {
4580 error_propagate(errp, local_err);
4581 goto out_error;
4582 }
4583 break;
4584 }
4585 }
4586
4587 if (chr == NULL) {
4588 assert(!i);
4589 error_setg(errp, "chardev backend not available");
4590 goto out_error;
4591 }
4592
4593 chr->label = g_strdup(id);
4594 chr->avail_connections =
4595 (backend->type == CHARDEV_BACKEND_KIND_MUX) ? MAX_MUX : 1;
4596 if (!chr->filename) {
4597 chr->filename = g_strdup(ChardevBackendKind_lookup[backend->type]);
4598 }
4599 if (!chr->explicit_be_open) {
4600 qemu_chr_be_event(chr, CHR_EVENT_OPENED);
4601 }
4602 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
4603 return ret;
4604
4605 out_error:
4606 g_free(ret);
4607 return NULL;
4608 }
4609
4610 void qmp_chardev_remove(const char *id, Error **errp)
4611 {
4612 CharDriverState *chr;
4613
4614 chr = qemu_chr_find(id);
4615 if (chr == NULL) {
4616 error_setg(errp, "Chardev '%s' not found", id);
4617 return;
4618 }
4619 if (chr->chr_can_read || chr->chr_read ||
4620 chr->chr_event || chr->handler_opaque) {
4621 error_setg(errp, "Chardev '%s' is busy", id);
4622 return;
4623 }
4624 if (chr->replay) {
4625 error_setg(errp,
4626 "Chardev '%s' cannot be unplugged in record/replay mode", id);
4627 return;
4628 }
4629 qemu_chr_delete(chr);
4630 }
4631
4632 void qemu_chr_cleanup(void)
4633 {
4634 CharDriverState *chr, *tmp;
4635
4636 QTAILQ_FOREACH_SAFE(chr, &chardevs, next, tmp) {
4637 qemu_chr_delete(chr);
4638 }
4639 }
4640
4641 static void register_types(void)
4642 {
4643 register_char_driver("null", CHARDEV_BACKEND_KIND_NULL, NULL,
4644 qemu_chr_open_null);
4645 register_char_driver("socket", CHARDEV_BACKEND_KIND_SOCKET,
4646 qemu_chr_parse_socket, qmp_chardev_open_socket);
4647 register_char_driver("udp", CHARDEV_BACKEND_KIND_UDP, qemu_chr_parse_udp,
4648 qmp_chardev_open_udp);
4649 register_char_driver("ringbuf", CHARDEV_BACKEND_KIND_RINGBUF,
4650 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
4651 register_char_driver("file", CHARDEV_BACKEND_KIND_FILE,
4652 qemu_chr_parse_file_out, qmp_chardev_open_file);
4653 register_char_driver("stdio", CHARDEV_BACKEND_KIND_STDIO,
4654 qemu_chr_parse_stdio, qemu_chr_open_stdio);
4655 #if defined HAVE_CHARDEV_SERIAL
4656 register_char_driver("serial", CHARDEV_BACKEND_KIND_SERIAL,
4657 qemu_chr_parse_serial, qmp_chardev_open_serial);
4658 register_char_driver("tty", CHARDEV_BACKEND_KIND_SERIAL,
4659 qemu_chr_parse_serial, qmp_chardev_open_serial);
4660 #endif
4661 #ifdef HAVE_CHARDEV_PARPORT
4662 register_char_driver("parallel", CHARDEV_BACKEND_KIND_PARALLEL,
4663 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4664 register_char_driver("parport", CHARDEV_BACKEND_KIND_PARALLEL,
4665 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4666 #endif
4667 #ifdef HAVE_CHARDEV_PTY
4668 register_char_driver("pty", CHARDEV_BACKEND_KIND_PTY, NULL,
4669 qemu_chr_open_pty);
4670 #endif
4671 #ifdef _WIN32
4672 register_char_driver("console", CHARDEV_BACKEND_KIND_CONSOLE, NULL,
4673 qemu_chr_open_win_con);
4674 #endif
4675 register_char_driver("pipe", CHARDEV_BACKEND_KIND_PIPE,
4676 qemu_chr_parse_pipe, qemu_chr_open_pipe);
4677 register_char_driver("mux", CHARDEV_BACKEND_KIND_MUX, qemu_chr_parse_mux,
4678 qemu_chr_open_mux);
4679 /* Bug-compatibility: */
4680 register_char_driver("memory", CHARDEV_BACKEND_KIND_MEMORY,
4681 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
4682 /* this must be done after machine init, since we register FEs with muxes
4683 * as part of realize functions like serial_isa_realizefn when -nographic
4684 * is specified
4685 */
4686 qemu_add_machine_init_done_notifier(&muxes_realize_notify);
4687 }
4688
4689 type_init(register_types);
QEmu