4 * Copyright (c) 2003-2004 Fabrice Bellard
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
34 #include <sys/times.h>
39 #include <sys/ioctl.h>
40 #include <sys/socket.h>
46 #include <linux/if_tun.h>
49 #include <linux/rtc.h>
53 #if defined(CONFIG_SLIRP)
59 #include <sys/timeb.h>
61 #define getopt_long_only getopt_long
62 #define memalign(align, size) malloc(size)
66 #if defined(__linux__)
67 /* SDL use the pthreads and they modify sigaction. We don't
69 #if (__GLIBC__ > 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ >= 2))
70 extern void __libc_sigaction();
71 #define sigaction(sig, act, oact) __libc_sigaction(sig, act, oact)
73 extern void __sigaction();
74 #define sigaction(sig, act, oact) __sigaction(sig, act, oact)
76 #endif /* __linux__ */
77 #endif /* CONFIG_SDL */
85 #define DEFAULT_NETWORK_SCRIPT "/etc/qemu-ifup"
87 //#define DEBUG_UNUSED_IOPORT
88 //#define DEBUG_IOPORT
90 #if !defined(CONFIG_SOFTMMU)
91 #define PHYS_RAM_MAX_SIZE (256 * 1024 * 1024)
93 #define PHYS_RAM_MAX_SIZE (2047 * 1024 * 1024)
97 #define DEFAULT_RAM_SIZE 144
99 #define DEFAULT_RAM_SIZE 32
102 #define GUI_REFRESH_INTERVAL 30
104 /* XXX: use a two level table to limit memory usage */
105 #define MAX_IOPORTS 65536
107 const char *bios_dir
= CONFIG_QEMU_SHAREDIR
;
108 char phys_ram_file
[1024];
109 CPUState
*global_env
;
110 CPUState
*cpu_single_env
;
111 void *ioport_opaque
[MAX_IOPORTS
];
112 IOPortReadFunc
*ioport_read_table
[3][MAX_IOPORTS
];
113 IOPortWriteFunc
*ioport_write_table
[3][MAX_IOPORTS
];
114 BlockDriverState
*bs_table
[MAX_DISKS
], *fd_table
[MAX_FD
];
117 static DisplayState display_state
;
119 int64_t ticks_per_sec
;
120 int boot_device
= 'c';
122 static char network_script
[1024];
123 int pit_min_timer_count
= 0;
125 NetDriverState nd_table
[MAX_NICS
];
126 SerialState
*serial_console
;
127 QEMUTimer
*gui_timer
;
129 int audio_enabled
= 0;
131 int prep_enabled
= 0;
133 int cirrus_vga_enabled
= 0;
135 /***********************************************************/
136 /* x86 ISA bus support */
138 target_phys_addr_t isa_mem_base
= 0;
140 uint32_t default_ioport_readb(void *opaque
, uint32_t address
)
142 #ifdef DEBUG_UNUSED_IOPORT
143 fprintf(stderr
, "inb: port=0x%04x\n", address
);
148 void default_ioport_writeb(void *opaque
, uint32_t address
, uint32_t data
)
150 #ifdef DEBUG_UNUSED_IOPORT
151 fprintf(stderr
, "outb: port=0x%04x data=0x%02x\n", address
, data
);
155 /* default is to make two byte accesses */
156 uint32_t default_ioport_readw(void *opaque
, uint32_t address
)
159 data
= ioport_read_table
[0][address
](ioport_opaque
[address
], address
);
160 address
= (address
+ 1) & (MAX_IOPORTS
- 1);
161 data
|= ioport_read_table
[0][address
](ioport_opaque
[address
], address
) << 8;
165 void default_ioport_writew(void *opaque
, uint32_t address
, uint32_t data
)
167 ioport_write_table
[0][address
](ioport_opaque
[address
], address
, data
& 0xff);
168 address
= (address
+ 1) & (MAX_IOPORTS
- 1);
169 ioport_write_table
[0][address
](ioport_opaque
[address
], address
, (data
>> 8) & 0xff);
172 uint32_t default_ioport_readl(void *opaque
, uint32_t address
)
174 #ifdef DEBUG_UNUSED_IOPORT
175 fprintf(stderr
, "inl: port=0x%04x\n", address
);
180 void default_ioport_writel(void *opaque
, uint32_t address
, uint32_t data
)
182 #ifdef DEBUG_UNUSED_IOPORT
183 fprintf(stderr
, "outl: port=0x%04x data=0x%02x\n", address
, data
);
187 void init_ioports(void)
191 for(i
= 0; i
< MAX_IOPORTS
; i
++) {
192 ioport_read_table
[0][i
] = default_ioport_readb
;
193 ioport_write_table
[0][i
] = default_ioport_writeb
;
194 ioport_read_table
[1][i
] = default_ioport_readw
;
195 ioport_write_table
[1][i
] = default_ioport_writew
;
196 ioport_read_table
[2][i
] = default_ioport_readl
;
197 ioport_write_table
[2][i
] = default_ioport_writel
;
201 /* size is the word size in byte */
202 int register_ioport_read(int start
, int length
, int size
,
203 IOPortReadFunc
*func
, void *opaque
)
209 } else if (size
== 2) {
211 } else if (size
== 4) {
214 hw_error("register_ioport_read: invalid size");
217 for(i
= start
; i
< start
+ length
; i
+= size
) {
218 ioport_read_table
[bsize
][i
] = func
;
219 if (ioport_opaque
[i
] != NULL
&& ioport_opaque
[i
] != opaque
)
220 hw_error("register_ioport_read: invalid opaque");
221 ioport_opaque
[i
] = opaque
;
226 /* size is the word size in byte */
227 int register_ioport_write(int start
, int length
, int size
,
228 IOPortWriteFunc
*func
, void *opaque
)
234 } else if (size
== 2) {
236 } else if (size
== 4) {
239 hw_error("register_ioport_write: invalid size");
242 for(i
= start
; i
< start
+ length
; i
+= size
) {
243 ioport_write_table
[bsize
][i
] = func
;
244 if (ioport_opaque
[i
] != NULL
&& ioport_opaque
[i
] != opaque
)
245 hw_error("register_ioport_read: invalid opaque");
246 ioport_opaque
[i
] = opaque
;
251 void isa_unassign_ioport(int start
, int length
)
255 for(i
= start
; i
< start
+ length
; i
++) {
256 ioport_read_table
[0][i
] = default_ioport_readb
;
257 ioport_read_table
[1][i
] = default_ioport_readw
;
258 ioport_read_table
[2][i
] = default_ioport_readl
;
260 ioport_write_table
[0][i
] = default_ioport_writeb
;
261 ioport_write_table
[1][i
] = default_ioport_writew
;
262 ioport_write_table
[2][i
] = default_ioport_writel
;
266 void pstrcpy(char *buf
, int buf_size
, const char *str
)
276 if (c
== 0 || q
>= buf
+ buf_size
- 1)
283 /* strcat and truncate. */
284 char *pstrcat(char *buf
, int buf_size
, const char *s
)
289 pstrcpy(buf
+ len
, buf_size
- len
, s
);
293 /* return the size or -1 if error */
294 int load_image(const char *filename
, uint8_t *addr
)
297 fd
= open(filename
, O_RDONLY
| O_BINARY
);
300 size
= lseek(fd
, 0, SEEK_END
);
301 lseek(fd
, 0, SEEK_SET
);
302 if (read(fd
, addr
, size
) != size
) {
310 void cpu_outb(CPUState
*env
, int addr
, int val
)
313 if (loglevel
& CPU_LOG_IOPORT
)
314 fprintf(logfile
, "outb: %04x %02x\n", addr
, val
);
316 ioport_write_table
[0][addr
](ioport_opaque
[addr
], addr
, val
);
319 void cpu_outw(CPUState
*env
, int addr
, int val
)
322 if (loglevel
& CPU_LOG_IOPORT
)
323 fprintf(logfile
, "outw: %04x %04x\n", addr
, val
);
325 ioport_write_table
[1][addr
](ioport_opaque
[addr
], addr
, val
);
328 void cpu_outl(CPUState
*env
, int addr
, int val
)
331 if (loglevel
& CPU_LOG_IOPORT
)
332 fprintf(logfile
, "outl: %04x %08x\n", addr
, val
);
334 ioport_write_table
[2][addr
](ioport_opaque
[addr
], addr
, val
);
337 int cpu_inb(CPUState
*env
, int addr
)
340 val
= ioport_read_table
[0][addr
](ioport_opaque
[addr
], addr
);
342 if (loglevel
& CPU_LOG_IOPORT
)
343 fprintf(logfile
, "inb : %04x %02x\n", addr
, val
);
348 int cpu_inw(CPUState
*env
, int addr
)
351 val
= ioport_read_table
[1][addr
](ioport_opaque
[addr
], addr
);
353 if (loglevel
& CPU_LOG_IOPORT
)
354 fprintf(logfile
, "inw : %04x %04x\n", addr
, val
);
359 int cpu_inl(CPUState
*env
, int addr
)
362 val
= ioport_read_table
[2][addr
](ioport_opaque
[addr
], addr
);
364 if (loglevel
& CPU_LOG_IOPORT
)
365 fprintf(logfile
, "inl : %04x %08x\n", addr
, val
);
370 /***********************************************************/
371 void hw_error(const char *fmt
, ...)
376 fprintf(stderr
, "qemu: hardware error: ");
377 vfprintf(stderr
, fmt
, ap
);
378 fprintf(stderr
, "\n");
380 cpu_x86_dump_state(global_env
, stderr
, X86_DUMP_FPU
| X86_DUMP_CCOP
);
382 cpu_dump_state(global_env
, stderr
, 0);
388 /***********************************************************/
391 static QEMUPutKBDEvent
*qemu_put_kbd_event
;
392 static void *qemu_put_kbd_event_opaque
;
393 static QEMUPutMouseEvent
*qemu_put_mouse_event
;
394 static void *qemu_put_mouse_event_opaque
;
396 void qemu_add_kbd_event_handler(QEMUPutKBDEvent
*func
, void *opaque
)
398 qemu_put_kbd_event_opaque
= opaque
;
399 qemu_put_kbd_event
= func
;
402 void qemu_add_mouse_event_handler(QEMUPutMouseEvent
*func
, void *opaque
)
404 qemu_put_mouse_event_opaque
= opaque
;
405 qemu_put_mouse_event
= func
;
408 void kbd_put_keycode(int keycode
)
410 if (qemu_put_kbd_event
) {
411 qemu_put_kbd_event(qemu_put_kbd_event_opaque
, keycode
);
415 void kbd_mouse_event(int dx
, int dy
, int dz
, int buttons_state
)
417 if (qemu_put_mouse_event
) {
418 qemu_put_mouse_event(qemu_put_mouse_event_opaque
,
419 dx
, dy
, dz
, buttons_state
);
423 /***********************************************************/
426 #if defined(__powerpc__)
428 static inline uint32_t get_tbl(void)
431 asm volatile("mftb %0" : "=r" (tbl
));
435 static inline uint32_t get_tbu(void)
438 asm volatile("mftbu %0" : "=r" (tbl
));
442 int64_t cpu_get_real_ticks(void)
445 /* NOTE: we test if wrapping has occurred */
451 return ((int64_t)h
<< 32) | l
;
454 #elif defined(__i386__)
456 int64_t cpu_get_real_ticks(void)
459 asm volatile ("rdtsc" : "=A" (val
));
463 #elif defined(__x86_64__)
465 int64_t cpu_get_real_ticks(void)
469 asm volatile("rdtsc" : "=a" (low
), "=d" (high
));
477 #error unsupported CPU
480 static int64_t cpu_ticks_offset
;
481 static int cpu_ticks_enabled
;
483 static inline int64_t cpu_get_ticks(void)
485 if (!cpu_ticks_enabled
) {
486 return cpu_ticks_offset
;
488 return cpu_get_real_ticks() + cpu_ticks_offset
;
492 /* enable cpu_get_ticks() */
493 void cpu_enable_ticks(void)
495 if (!cpu_ticks_enabled
) {
496 cpu_ticks_offset
-= cpu_get_real_ticks();
497 cpu_ticks_enabled
= 1;
501 /* disable cpu_get_ticks() : the clock is stopped. You must not call
502 cpu_get_ticks() after that. */
503 void cpu_disable_ticks(void)
505 if (cpu_ticks_enabled
) {
506 cpu_ticks_offset
= cpu_get_ticks();
507 cpu_ticks_enabled
= 0;
511 static int64_t get_clock(void)
516 return ((int64_t)tb
.time
* 1000 + (int64_t)tb
.millitm
) * 1000;
519 gettimeofday(&tv
, NULL
);
520 return tv
.tv_sec
* 1000000LL + tv
.tv_usec
;
524 void cpu_calibrate_ticks(void)
529 ticks
= cpu_get_real_ticks();
535 usec
= get_clock() - usec
;
536 ticks
= cpu_get_real_ticks() - ticks
;
537 ticks_per_sec
= (ticks
* 1000000LL + (usec
>> 1)) / usec
;
540 /* compute with 96 bit intermediate result: (a*b)/c */
541 uint64_t muldiv64(uint64_t a
, uint32_t b
, uint32_t c
)
546 #ifdef WORDS_BIGENDIAN
556 rl
= (uint64_t)u
.l
.low
* (uint64_t)b
;
557 rh
= (uint64_t)u
.l
.high
* (uint64_t)b
;
560 res
.l
.low
= (((rh
% c
) << 32) + (rl
& 0xffffffff)) / c
;
564 #define QEMU_TIMER_REALTIME 0
565 #define QEMU_TIMER_VIRTUAL 1
569 /* XXX: add frequency */
577 struct QEMUTimer
*next
;
583 static QEMUTimer
*active_timers
[2];
585 static MMRESULT timerID
;
587 /* frequency of the times() clock tick */
588 static int timer_freq
;
591 QEMUClock
*qemu_new_clock(int type
)
594 clock
= qemu_mallocz(sizeof(QEMUClock
));
601 QEMUTimer
*qemu_new_timer(QEMUClock
*clock
, QEMUTimerCB
*cb
, void *opaque
)
605 ts
= qemu_mallocz(sizeof(QEMUTimer
));
612 void qemu_free_timer(QEMUTimer
*ts
)
617 /* stop a timer, but do not dealloc it */
618 void qemu_del_timer(QEMUTimer
*ts
)
622 /* NOTE: this code must be signal safe because
623 qemu_timer_expired() can be called from a signal. */
624 pt
= &active_timers
[ts
->clock
->type
];
637 /* modify the current timer so that it will be fired when current_time
638 >= expire_time. The corresponding callback will be called. */
639 void qemu_mod_timer(QEMUTimer
*ts
, int64_t expire_time
)
645 /* add the timer in the sorted list */
646 /* NOTE: this code must be signal safe because
647 qemu_timer_expired() can be called from a signal. */
648 pt
= &active_timers
[ts
->clock
->type
];
653 if (t
->expire_time
> expire_time
)
657 ts
->expire_time
= expire_time
;
662 int qemu_timer_pending(QEMUTimer
*ts
)
665 for(t
= active_timers
[ts
->clock
->type
]; t
!= NULL
; t
= t
->next
) {
672 static inline int qemu_timer_expired(QEMUTimer
*timer_head
, int64_t current_time
)
676 return (timer_head
->expire_time
<= current_time
);
679 static void qemu_run_timers(QEMUTimer
**ptimer_head
, int64_t current_time
)
685 if (ts
->expire_time
> current_time
)
687 /* remove timer from the list before calling the callback */
688 *ptimer_head
= ts
->next
;
691 /* run the callback (the timer list can be modified) */
696 int64_t qemu_get_clock(QEMUClock
*clock
)
698 switch(clock
->type
) {
699 case QEMU_TIMER_REALTIME
:
701 return GetTickCount();
706 /* Note that using gettimeofday() is not a good solution
707 for timers because its value change when the date is
709 if (timer_freq
== 100) {
710 return times(&tp
) * 10;
712 return ((int64_t)times(&tp
) * 1000) / timer_freq
;
717 case QEMU_TIMER_VIRTUAL
:
718 return cpu_get_ticks();
723 void qemu_put_timer(QEMUFile
*f
, QEMUTimer
*ts
)
725 uint64_t expire_time
;
727 if (qemu_timer_pending(ts
)) {
728 expire_time
= ts
->expire_time
;
732 qemu_put_be64(f
, expire_time
);
735 void qemu_get_timer(QEMUFile
*f
, QEMUTimer
*ts
)
737 uint64_t expire_time
;
739 expire_time
= qemu_get_be64(f
);
740 if (expire_time
!= -1) {
741 qemu_mod_timer(ts
, expire_time
);
747 static void timer_save(QEMUFile
*f
, void *opaque
)
749 if (cpu_ticks_enabled
) {
750 hw_error("cannot save state if virtual timers are running");
752 qemu_put_be64s(f
, &cpu_ticks_offset
);
753 qemu_put_be64s(f
, &ticks_per_sec
);
756 static int timer_load(QEMUFile
*f
, void *opaque
, int version_id
)
760 if (cpu_ticks_enabled
) {
763 qemu_get_be64s(f
, &cpu_ticks_offset
);
764 qemu_get_be64s(f
, &ticks_per_sec
);
769 void CALLBACK
host_alarm_handler(UINT uTimerID
, UINT uMsg
,
770 DWORD_PTR dwUser
, DWORD_PTR dw1
, DWORD_PTR dw2
)
772 static void host_alarm_handler(int host_signum
)
775 if (qemu_timer_expired(active_timers
[QEMU_TIMER_VIRTUAL
],
776 qemu_get_clock(vm_clock
)) ||
777 qemu_timer_expired(active_timers
[QEMU_TIMER_REALTIME
],
778 qemu_get_clock(rt_clock
))) {
779 /* stop the cpu because a timer occured */
780 cpu_interrupt(global_env
, CPU_INTERRUPT_EXIT
);
786 #if defined(__linux__)
788 #define RTC_FREQ 1024
792 static int start_rtc_timer(void)
794 rtc_fd
= open("/dev/rtc", O_RDONLY
);
797 if (ioctl(rtc_fd
, RTC_IRQP_SET
, RTC_FREQ
) < 0) {
798 fprintf(stderr
, "Could not configure '/dev/rtc' to have a 1024 Hz timer. This is not a fatal\n"
799 "error, but for better emulation accuracy either use a 2.6 host Linux kernel or\n"
800 "type 'echo 1024 > /proc/sys/dev/rtc/max-user-freq' as root.\n");
803 if (ioctl(rtc_fd
, RTC_PIE_ON
, 0) < 0) {
808 pit_min_timer_count
= PIT_FREQ
/ RTC_FREQ
;
814 static int start_rtc_timer(void)
819 #endif /* !defined(__linux__) */
821 #endif /* !defined(_WIN32) */
823 static void init_timers(void)
825 rt_clock
= qemu_new_clock(QEMU_TIMER_REALTIME
);
826 vm_clock
= qemu_new_clock(QEMU_TIMER_VIRTUAL
);
831 timerID
= timeSetEvent(10, // interval (ms)
833 host_alarm_handler
, // function
834 (DWORD
)&count
, // user parameter
835 TIME_PERIODIC
| TIME_CALLBACK_FUNCTION
);
837 perror("failed timer alarm");
841 pit_min_timer_count
= ((uint64_t)10000 * PIT_FREQ
) / 1000000;
844 struct sigaction act
;
845 struct itimerval itv
;
847 /* get times() syscall frequency */
848 timer_freq
= sysconf(_SC_CLK_TCK
);
851 sigfillset(&act
.sa_mask
);
853 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
854 act
.sa_flags
|= SA_ONSTACK
;
856 act
.sa_handler
= host_alarm_handler
;
857 sigaction(SIGALRM
, &act
, NULL
);
859 itv
.it_interval
.tv_sec
= 0;
860 itv
.it_interval
.tv_usec
= 1000;
861 itv
.it_value
.tv_sec
= 0;
862 itv
.it_value
.tv_usec
= 10 * 1000;
863 setitimer(ITIMER_REAL
, &itv
, NULL
);
864 /* we probe the tick duration of the kernel to inform the user if
865 the emulated kernel requested a too high timer frequency */
866 getitimer(ITIMER_REAL
, &itv
);
868 if (itv
.it_interval
.tv_usec
> 1000) {
869 /* try to use /dev/rtc to have a faster timer */
870 if (start_rtc_timer() < 0)
873 itv
.it_interval
.tv_sec
= 0;
874 itv
.it_interval
.tv_usec
= 0;
875 itv
.it_value
.tv_sec
= 0;
876 itv
.it_value
.tv_usec
= 0;
877 setitimer(ITIMER_REAL
, &itv
, NULL
);
880 sigaction(SIGIO
, &act
, NULL
);
881 fcntl(rtc_fd
, F_SETFL
, O_ASYNC
);
882 fcntl(rtc_fd
, F_SETOWN
, getpid());
885 pit_min_timer_count
= ((uint64_t)itv
.it_interval
.tv_usec
*
892 void quit_timers(void)
895 timeKillEvent(timerID
);
899 /***********************************************************/
904 int serial_open_device(void)
911 int serial_open_device(void)
913 char slave_name
[1024];
914 int master_fd
, slave_fd
;
916 if (serial_console
== NULL
&& nographic
) {
917 /* use console for serial port */
922 if (openpty(&master_fd
, &slave_fd
, slave_name
, NULL
, NULL
) < 0) {
923 fprintf(stderr
, "warning: could not create pseudo terminal for serial port\n");
926 fprintf(stderr
, "Serial port redirected to %s\n", slave_name
);
936 /***********************************************************/
937 /* Linux network device redirectors */
939 void hex_dump(FILE *f
, const uint8_t *buf
, int size
)
943 for(i
=0;i
<size
;i
+=16) {
947 fprintf(f
, "%08x ", i
);
950 fprintf(f
, " %02x", buf
[i
+j
]);
957 if (c
< ' ' || c
> '~')
965 void qemu_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
967 nd
->send_packet(nd
, buf
, size
);
970 void qemu_add_read_packet(NetDriverState
*nd
, IOCanRWHandler
*fd_can_read
,
971 IOReadHandler
*fd_read
, void *opaque
)
973 nd
->add_read_packet(nd
, fd_can_read
, fd_read
, opaque
);
976 /* dummy network adapter */
978 static void dummy_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
982 static void dummy_add_read_packet(NetDriverState
*nd
,
983 IOCanRWHandler
*fd_can_read
,
984 IOReadHandler
*fd_read
, void *opaque
)
988 static int net_dummy_init(NetDriverState
*nd
)
990 nd
->send_packet
= dummy_send_packet
;
991 nd
->add_read_packet
= dummy_add_read_packet
;
992 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "dummy");
996 #if defined(CONFIG_SLIRP)
998 /* slirp network adapter */
1000 static void *slirp_fd_opaque
;
1001 static IOCanRWHandler
*slirp_fd_can_read
;
1002 static IOReadHandler
*slirp_fd_read
;
1003 static int slirp_inited
;
1005 int slirp_can_output(void)
1007 return slirp_fd_can_read(slirp_fd_opaque
);
1010 void slirp_output(const uint8_t *pkt
, int pkt_len
)
1013 printf("output:\n");
1014 hex_dump(stdout
, pkt
, pkt_len
);
1016 slirp_fd_read(slirp_fd_opaque
, pkt
, pkt_len
);
1019 static void slirp_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
1023 hex_dump(stdout
, buf
, size
);
1025 slirp_input(buf
, size
);
1028 static void slirp_add_read_packet(NetDriverState
*nd
,
1029 IOCanRWHandler
*fd_can_read
,
1030 IOReadHandler
*fd_read
, void *opaque
)
1032 slirp_fd_opaque
= opaque
;
1033 slirp_fd_can_read
= fd_can_read
;
1034 slirp_fd_read
= fd_read
;
1037 static int net_slirp_init(NetDriverState
*nd
)
1039 if (!slirp_inited
) {
1043 nd
->send_packet
= slirp_send_packet
;
1044 nd
->add_read_packet
= slirp_add_read_packet
;
1045 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "slirp");
1049 #endif /* CONFIG_SLIRP */
1051 #if !defined(_WIN32)
1053 static int tun_open(char *ifname
, int ifname_size
)
1059 fd
= open("/dev/tap", O_RDWR
);
1061 fprintf(stderr
, "warning: could not open /dev/tap: no virtual network emulation\n");
1066 dev
= devname(s
.st_rdev
, S_IFCHR
);
1067 pstrcpy(ifname
, ifname_size
, dev
);
1069 fcntl(fd
, F_SETFL
, O_NONBLOCK
);
1073 static int tun_open(char *ifname
, int ifname_size
)
1078 fd
= open("/dev/net/tun", O_RDWR
);
1080 fprintf(stderr
, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1083 memset(&ifr
, 0, sizeof(ifr
));
1084 ifr
.ifr_flags
= IFF_TAP
| IFF_NO_PI
;
1085 pstrcpy(ifr
.ifr_name
, IFNAMSIZ
, "tun%d");
1086 ret
= ioctl(fd
, TUNSETIFF
, (void *) &ifr
);
1088 fprintf(stderr
, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1092 printf("Connected to host network interface: %s\n", ifr
.ifr_name
);
1093 pstrcpy(ifname
, ifname_size
, ifr
.ifr_name
);
1094 fcntl(fd
, F_SETFL
, O_NONBLOCK
);
1099 static void tun_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
1101 write(nd
->fd
, buf
, size
);
1104 static void tun_add_read_packet(NetDriverState
*nd
,
1105 IOCanRWHandler
*fd_can_read
,
1106 IOReadHandler
*fd_read
, void *opaque
)
1108 qemu_add_fd_read_handler(nd
->fd
, fd_can_read
, fd_read
, opaque
);
1111 static int net_tun_init(NetDriverState
*nd
)
1117 nd
->fd
= tun_open(nd
->ifname
, sizeof(nd
->ifname
));
1121 /* try to launch network init script */
1126 *parg
++ = network_script
;
1127 *parg
++ = nd
->ifname
;
1129 execv(network_script
, args
);
1132 while (waitpid(pid
, &status
, 0) != pid
);
1133 if (!WIFEXITED(status
) ||
1134 WEXITSTATUS(status
) != 0) {
1135 fprintf(stderr
, "%s: could not launch network script\n",
1139 nd
->send_packet
= tun_send_packet
;
1140 nd
->add_read_packet
= tun_add_read_packet
;
1144 static int net_fd_init(NetDriverState
*nd
, int fd
)
1147 nd
->send_packet
= tun_send_packet
;
1148 nd
->add_read_packet
= tun_add_read_packet
;
1149 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "tunfd");
1153 #endif /* !_WIN32 */
1155 /***********************************************************/
1160 static void term_exit(void)
1164 static void term_init(void)
1170 /* init terminal so that we can grab keys */
1171 static struct termios oldtty
;
1173 static void term_exit(void)
1175 tcsetattr (0, TCSANOW
, &oldtty
);
1178 static void term_init(void)
1182 tcgetattr (0, &tty
);
1185 tty
.c_iflag
&= ~(IGNBRK
|BRKINT
|PARMRK
|ISTRIP
1186 |INLCR
|IGNCR
|ICRNL
|IXON
);
1187 tty
.c_oflag
|= OPOST
;
1188 tty
.c_lflag
&= ~(ECHO
|ECHONL
|ICANON
|IEXTEN
);
1189 /* if graphical mode, we allow Ctrl-C handling */
1191 tty
.c_lflag
&= ~ISIG
;
1192 tty
.c_cflag
&= ~(CSIZE
|PARENB
);
1195 tty
.c_cc
[VTIME
] = 0;
1197 tcsetattr (0, TCSANOW
, &tty
);
1201 fcntl(0, F_SETFL
, O_NONBLOCK
);
1206 static void dumb_update(DisplayState
*ds
, int x
, int y
, int w
, int h
)
1210 static void dumb_resize(DisplayState
*ds
, int w
, int h
)
1214 static void dumb_refresh(DisplayState
*ds
)
1216 vga_update_display();
1219 void dumb_display_init(DisplayState
*ds
)
1224 ds
->dpy_update
= dumb_update
;
1225 ds
->dpy_resize
= dumb_resize
;
1226 ds
->dpy_refresh
= dumb_refresh
;
1229 #if !defined(CONFIG_SOFTMMU)
1230 /***********************************************************/
1231 /* cpu signal handler */
1232 static void host_segv_handler(int host_signum
, siginfo_t
*info
,
1235 if (cpu_signal_handler(host_signum
, info
, puc
))
1242 /***********************************************************/
1245 #define MAX_IO_HANDLERS 64
1247 typedef struct IOHandlerRecord
{
1249 IOCanRWHandler
*fd_can_read
;
1250 IOReadHandler
*fd_read
;
1252 /* temporary data */
1255 struct IOHandlerRecord
*next
;
1258 static IOHandlerRecord
*first_io_handler
;
1260 int qemu_add_fd_read_handler(int fd
, IOCanRWHandler
*fd_can_read
,
1261 IOReadHandler
*fd_read
, void *opaque
)
1263 IOHandlerRecord
*ioh
;
1265 ioh
= qemu_mallocz(sizeof(IOHandlerRecord
));
1269 ioh
->fd_can_read
= fd_can_read
;
1270 ioh
->fd_read
= fd_read
;
1271 ioh
->opaque
= opaque
;
1272 ioh
->next
= first_io_handler
;
1273 first_io_handler
= ioh
;
1277 void qemu_del_fd_read_handler(int fd
)
1279 IOHandlerRecord
**pioh
, *ioh
;
1281 pioh
= &first_io_handler
;
1286 if (ioh
->fd
== fd
) {
1294 /***********************************************************/
1295 /* savevm/loadvm support */
1297 void qemu_put_buffer(QEMUFile
*f
, const uint8_t *buf
, int size
)
1299 fwrite(buf
, 1, size
, f
);
1302 void qemu_put_byte(QEMUFile
*f
, int v
)
1307 void qemu_put_be16(QEMUFile
*f
, unsigned int v
)
1309 qemu_put_byte(f
, v
>> 8);
1310 qemu_put_byte(f
, v
);
1313 void qemu_put_be32(QEMUFile
*f
, unsigned int v
)
1315 qemu_put_byte(f
, v
>> 24);
1316 qemu_put_byte(f
, v
>> 16);
1317 qemu_put_byte(f
, v
>> 8);
1318 qemu_put_byte(f
, v
);
1321 void qemu_put_be64(QEMUFile
*f
, uint64_t v
)
1323 qemu_put_be32(f
, v
>> 32);
1324 qemu_put_be32(f
, v
);
1327 int qemu_get_buffer(QEMUFile
*f
, uint8_t *buf
, int size
)
1329 return fread(buf
, 1, size
, f
);
1332 int qemu_get_byte(QEMUFile
*f
)
1342 unsigned int qemu_get_be16(QEMUFile
*f
)
1345 v
= qemu_get_byte(f
) << 8;
1346 v
|= qemu_get_byte(f
);
1350 unsigned int qemu_get_be32(QEMUFile
*f
)
1353 v
= qemu_get_byte(f
) << 24;
1354 v
|= qemu_get_byte(f
) << 16;
1355 v
|= qemu_get_byte(f
) << 8;
1356 v
|= qemu_get_byte(f
);
1360 uint64_t qemu_get_be64(QEMUFile
*f
)
1363 v
= (uint64_t)qemu_get_be32(f
) << 32;
1364 v
|= qemu_get_be32(f
);
1368 int64_t qemu_ftell(QEMUFile
*f
)
1373 int64_t qemu_fseek(QEMUFile
*f
, int64_t pos
, int whence
)
1375 if (fseek(f
, pos
, whence
) < 0)
1380 typedef struct SaveStateEntry
{
1384 SaveStateHandler
*save_state
;
1385 LoadStateHandler
*load_state
;
1387 struct SaveStateEntry
*next
;
1390 static SaveStateEntry
*first_se
;
1392 int register_savevm(const char *idstr
,
1395 SaveStateHandler
*save_state
,
1396 LoadStateHandler
*load_state
,
1399 SaveStateEntry
*se
, **pse
;
1401 se
= qemu_malloc(sizeof(SaveStateEntry
));
1404 pstrcpy(se
->idstr
, sizeof(se
->idstr
), idstr
);
1405 se
->instance_id
= instance_id
;
1406 se
->version_id
= version_id
;
1407 se
->save_state
= save_state
;
1408 se
->load_state
= load_state
;
1409 se
->opaque
= opaque
;
1412 /* add at the end of list */
1414 while (*pse
!= NULL
)
1415 pse
= &(*pse
)->next
;
1420 #define QEMU_VM_FILE_MAGIC 0x5145564d
1421 #define QEMU_VM_FILE_VERSION 0x00000001
1423 int qemu_savevm(const char *filename
)
1427 int len
, len_pos
, cur_pos
, saved_vm_running
, ret
;
1429 saved_vm_running
= vm_running
;
1432 f
= fopen(filename
, "wb");
1438 qemu_put_be32(f
, QEMU_VM_FILE_MAGIC
);
1439 qemu_put_be32(f
, QEMU_VM_FILE_VERSION
);
1441 for(se
= first_se
; se
!= NULL
; se
= se
->next
) {
1443 len
= strlen(se
->idstr
);
1444 qemu_put_byte(f
, len
);
1445 qemu_put_buffer(f
, se
->idstr
, len
);
1447 qemu_put_be32(f
, se
->instance_id
);
1448 qemu_put_be32(f
, se
->version_id
);
1450 /* record size: filled later */
1452 qemu_put_be32(f
, 0);
1454 se
->save_state(f
, se
->opaque
);
1456 /* fill record size */
1458 len
= ftell(f
) - len_pos
- 4;
1459 fseek(f
, len_pos
, SEEK_SET
);
1460 qemu_put_be32(f
, len
);
1461 fseek(f
, cur_pos
, SEEK_SET
);
1467 if (saved_vm_running
)
1472 static SaveStateEntry
*find_se(const char *idstr
, int instance_id
)
1476 for(se
= first_se
; se
!= NULL
; se
= se
->next
) {
1477 if (!strcmp(se
->idstr
, idstr
) &&
1478 instance_id
== se
->instance_id
)
1484 int qemu_loadvm(const char *filename
)
1488 int len
, cur_pos
, ret
, instance_id
, record_len
, version_id
;
1489 int saved_vm_running
;
1493 saved_vm_running
= vm_running
;
1496 f
= fopen(filename
, "rb");
1502 v
= qemu_get_be32(f
);
1503 if (v
!= QEMU_VM_FILE_MAGIC
)
1505 v
= qemu_get_be32(f
);
1506 if (v
!= QEMU_VM_FILE_VERSION
) {
1513 #if defined (DO_TB_FLUSH)
1514 tb_flush(global_env
);
1516 len
= qemu_get_byte(f
);
1519 qemu_get_buffer(f
, idstr
, len
);
1521 instance_id
= qemu_get_be32(f
);
1522 version_id
= qemu_get_be32(f
);
1523 record_len
= qemu_get_be32(f
);
1525 printf("idstr=%s instance=0x%x version=%d len=%d\n",
1526 idstr
, instance_id
, version_id
, record_len
);
1529 se
= find_se(idstr
, instance_id
);
1531 fprintf(stderr
, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
1532 instance_id
, idstr
);
1534 ret
= se
->load_state(f
, se
->opaque
, version_id
);
1536 fprintf(stderr
, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1537 instance_id
, idstr
);
1540 /* always seek to exact end of record */
1541 qemu_fseek(f
, cur_pos
+ record_len
, SEEK_SET
);
1546 if (saved_vm_running
)
1551 /***********************************************************/
1552 /* cpu save/restore */
1554 #if defined(TARGET_I386)
1556 static void cpu_put_seg(QEMUFile
*f
, SegmentCache
*dt
)
1558 qemu_put_be32(f
, (uint32_t)dt
->base
);
1559 qemu_put_be32(f
, dt
->limit
);
1560 qemu_put_be32(f
, dt
->flags
);
1563 static void cpu_get_seg(QEMUFile
*f
, SegmentCache
*dt
)
1565 dt
->base
= (uint8_t *)qemu_get_be32(f
);
1566 dt
->limit
= qemu_get_be32(f
);
1567 dt
->flags
= qemu_get_be32(f
);
1570 void cpu_save(QEMUFile
*f
, void *opaque
)
1572 CPUState
*env
= opaque
;
1573 uint16_t fptag
, fpus
, fpuc
;
1577 for(i
= 0; i
< 8; i
++)
1578 qemu_put_be32s(f
, &env
->regs
[i
]);
1579 qemu_put_be32s(f
, &env
->eip
);
1580 qemu_put_be32s(f
, &env
->eflags
);
1581 qemu_put_be32s(f
, &env
->eflags
);
1582 hflags
= env
->hflags
; /* XXX: suppress most of the redundant hflags */
1583 qemu_put_be32s(f
, &hflags
);
1587 fpus
= (env
->fpus
& ~0x3800) | (env
->fpstt
& 0x7) << 11;
1589 for (i
=7; i
>=0; i
--) {
1591 if (env
->fptags
[i
]) {
1596 qemu_put_be16s(f
, &fpuc
);
1597 qemu_put_be16s(f
, &fpus
);
1598 qemu_put_be16s(f
, &fptag
);
1600 for(i
= 0; i
< 8; i
++) {
1603 cpu_get_fp80(&mant
, &exp
, env
->fpregs
[i
]);
1604 qemu_put_be64(f
, mant
);
1605 qemu_put_be16(f
, exp
);
1608 for(i
= 0; i
< 6; i
++)
1609 cpu_put_seg(f
, &env
->segs
[i
]);
1610 cpu_put_seg(f
, &env
->ldt
);
1611 cpu_put_seg(f
, &env
->tr
);
1612 cpu_put_seg(f
, &env
->gdt
);
1613 cpu_put_seg(f
, &env
->idt
);
1615 qemu_put_be32s(f
, &env
->sysenter_cs
);
1616 qemu_put_be32s(f
, &env
->sysenter_esp
);
1617 qemu_put_be32s(f
, &env
->sysenter_eip
);
1619 qemu_put_be32s(f
, &env
->cr
[0]);
1620 qemu_put_be32s(f
, &env
->cr
[2]);
1621 qemu_put_be32s(f
, &env
->cr
[3]);
1622 qemu_put_be32s(f
, &env
->cr
[4]);
1624 for(i
= 0; i
< 8; i
++)
1625 qemu_put_be32s(f
, &env
->dr
[i
]);
1628 qemu_put_be32s(f
, &env
->a20_mask
);
1631 int cpu_load(QEMUFile
*f
, void *opaque
, int version_id
)
1633 CPUState
*env
= opaque
;
1636 uint16_t fpus
, fpuc
, fptag
;
1638 if (version_id
!= 1)
1640 for(i
= 0; i
< 8; i
++)
1641 qemu_get_be32s(f
, &env
->regs
[i
]);
1642 qemu_get_be32s(f
, &env
->eip
);
1643 qemu_get_be32s(f
, &env
->eflags
);
1644 qemu_get_be32s(f
, &env
->eflags
);
1645 qemu_get_be32s(f
, &hflags
);
1647 qemu_get_be16s(f
, &fpuc
);
1648 qemu_get_be16s(f
, &fpus
);
1649 qemu_get_be16s(f
, &fptag
);
1651 for(i
= 0; i
< 8; i
++) {
1654 mant
= qemu_get_be64(f
);
1655 exp
= qemu_get_be16(f
);
1656 env
->fpregs
[i
] = cpu_set_fp80(mant
, exp
);
1660 env
->fpstt
= (fpus
>> 11) & 7;
1661 env
->fpus
= fpus
& ~0x3800;
1662 for(i
= 0; i
< 8; i
++) {
1663 env
->fptags
[i
] = ((fptag
& 3) == 3);
1667 for(i
= 0; i
< 6; i
++)
1668 cpu_get_seg(f
, &env
->segs
[i
]);
1669 cpu_get_seg(f
, &env
->ldt
);
1670 cpu_get_seg(f
, &env
->tr
);
1671 cpu_get_seg(f
, &env
->gdt
);
1672 cpu_get_seg(f
, &env
->idt
);
1674 qemu_get_be32s(f
, &env
->sysenter_cs
);
1675 qemu_get_be32s(f
, &env
->sysenter_esp
);
1676 qemu_get_be32s(f
, &env
->sysenter_eip
);
1678 qemu_get_be32s(f
, &env
->cr
[0]);
1679 qemu_get_be32s(f
, &env
->cr
[2]);
1680 qemu_get_be32s(f
, &env
->cr
[3]);
1681 qemu_get_be32s(f
, &env
->cr
[4]);
1683 for(i
= 0; i
< 8; i
++)
1684 qemu_get_be32s(f
, &env
->dr
[i
]);
1687 qemu_get_be32s(f
, &env
->a20_mask
);
1689 /* XXX: compute hflags from scratch, except for CPL and IIF */
1690 env
->hflags
= hflags
;
1695 #elif defined(TARGET_PPC)
1696 void cpu_save(QEMUFile
*f
, void *opaque
)
1700 int cpu_load(QEMUFile
*f
, void *opaque
, int version_id
)
1706 #warning No CPU save/restore functions
1710 /***********************************************************/
1711 /* ram save/restore */
1713 /* we just avoid storing empty pages */
1714 static void ram_put_page(QEMUFile
*f
, const uint8_t *buf
, int len
)
1719 for(i
= 1; i
< len
; i
++) {
1723 qemu_put_byte(f
, 1);
1724 qemu_put_byte(f
, v
);
1727 qemu_put_byte(f
, 0);
1728 qemu_put_buffer(f
, buf
, len
);
1731 static int ram_get_page(QEMUFile
*f
, uint8_t *buf
, int len
)
1735 v
= qemu_get_byte(f
);
1738 if (qemu_get_buffer(f
, buf
, len
) != len
)
1742 v
= qemu_get_byte(f
);
1743 memset(buf
, v
, len
);
1751 static void ram_save(QEMUFile
*f
, void *opaque
)
1754 qemu_put_be32(f
, phys_ram_size
);
1755 for(i
= 0; i
< phys_ram_size
; i
+= TARGET_PAGE_SIZE
) {
1756 ram_put_page(f
, phys_ram_base
+ i
, TARGET_PAGE_SIZE
);
1760 static int ram_load(QEMUFile
*f
, void *opaque
, int version_id
)
1764 if (version_id
!= 1)
1766 if (qemu_get_be32(f
) != phys_ram_size
)
1768 for(i
= 0; i
< phys_ram_size
; i
+= TARGET_PAGE_SIZE
) {
1769 ret
= ram_get_page(f
, phys_ram_base
+ i
, TARGET_PAGE_SIZE
);
1776 /***********************************************************/
1777 /* main execution loop */
1779 void gui_update(void *opaque
)
1781 display_state
.dpy_refresh(&display_state
);
1782 qemu_mod_timer(gui_timer
, GUI_REFRESH_INTERVAL
+ qemu_get_clock(rt_clock
));
1785 /* XXX: support several handlers */
1786 VMStopHandler
*vm_stop_cb
;
1787 VMStopHandler
*vm_stop_opaque
;
1789 int qemu_add_vm_stop_handler(VMStopHandler
*cb
, void *opaque
)
1792 vm_stop_opaque
= opaque
;
1796 void qemu_del_vm_stop_handler(VMStopHandler
*cb
, void *opaque
)
1809 void vm_stop(int reason
)
1812 cpu_disable_ticks();
1816 vm_stop_cb(vm_stop_opaque
, reason
);
1825 struct pollfd ufds
[MAX_IO_HANDLERS
+ 1], *pf
;
1826 IOHandlerRecord
*ioh
, *ioh_next
;
1831 CPUState
*env
= global_env
;
1835 ret
= cpu_exec(env
);
1836 if (reset_requested
) {
1837 ret
= EXCP_INTERRUPT
;
1840 if (ret
== EXCP_DEBUG
) {
1841 vm_stop(EXCP_DEBUG
);
1843 /* if hlt instruction, we wait until the next IRQ */
1844 /* XXX: use timeout computed from timers */
1845 if (ret
== EXCP_HLT
)
1858 /* poll any events */
1859 /* XXX: separate device handlers from system ones */
1861 for(ioh
= first_io_handler
; ioh
!= NULL
; ioh
= ioh
->next
) {
1862 if (!ioh
->fd_can_read
) {
1865 pf
->events
= POLLIN
;
1869 max_size
= ioh
->fd_can_read(ioh
->opaque
);
1871 if (max_size
> sizeof(buf
))
1872 max_size
= sizeof(buf
);
1874 pf
->events
= POLLIN
;
1881 ioh
->max_size
= max_size
;
1884 ret
= poll(ufds
, pf
- ufds
, timeout
);
1886 /* XXX: better handling of removal */
1887 for(ioh
= first_io_handler
; ioh
!= NULL
; ioh
= ioh_next
) {
1888 ioh_next
= ioh
->next
;
1891 if (pf
->revents
& POLLIN
) {
1892 if (ioh
->max_size
== 0) {
1893 /* just a read event */
1894 ioh
->fd_read(ioh
->opaque
, NULL
, 0);
1896 n
= read(ioh
->fd
, buf
, ioh
->max_size
);
1898 ioh
->fd_read(ioh
->opaque
, buf
, n
);
1899 } else if (errno
!= EAGAIN
) {
1900 ioh
->fd_read(ioh
->opaque
, NULL
, -errno
);
1908 #if defined(CONFIG_SLIRP)
1909 /* XXX: merge with poll() */
1911 fd_set rfds
, wfds
, xfds
;
1919 slirp_select_fill(&nfds
, &rfds
, &wfds
, &xfds
);
1922 ret
= select(nfds
+ 1, &rfds
, &wfds
, &xfds
, &tv
);
1924 slirp_select_poll(&rfds
, &wfds
, &xfds
);
1932 qemu_run_timers(&active_timers
[QEMU_TIMER_VIRTUAL
],
1933 qemu_get_clock(vm_clock
));
1935 if (audio_enabled
) {
1936 /* XXX: add explicit timer */
1940 /* run dma transfers, if any */
1944 /* real time timers */
1945 qemu_run_timers(&active_timers
[QEMU_TIMER_REALTIME
],
1946 qemu_get_clock(rt_clock
));
1948 cpu_disable_ticks();
1954 printf("QEMU PC emulator version " QEMU_VERSION
", Copyright (c) 2003-2004 Fabrice Bellard\n"
1955 "usage: %s [options] [disk_image]\n"
1957 "'disk_image' is a raw hard image image for IDE hard disk 0\n"
1959 "Standard options:\n"
1960 "-fda/-fdb file use 'file' as floppy disk 0/1 image\n"
1961 "-hda/-hdb file use 'file' as IDE hard disk 0/1 image\n"
1962 "-hdc/-hdd file use 'file' as IDE hard disk 2/3 image\n"
1963 "-cdrom file use 'file' as IDE cdrom image (cdrom is ide1 master)\n"
1964 "-boot [a|b|c|d] boot on floppy (a, b), hard disk (c) or CD-ROM (d)\n"
1965 "-snapshot write to temporary files instead of disk image files\n"
1966 "-m megs set virtual RAM size to megs MB [default=%d]\n"
1967 "-nographic disable graphical output and redirect serial I/Os to console\n"
1968 "-enable-audio enable audio support\n"
1969 "-localtime set the real time clock to local time [default=utc]\n"
1971 "Network options:\n"
1972 "-nics n simulate 'n' network cards [default=1]\n"
1973 "-macaddr addr set the mac address of the first interface\n"
1974 "-n script set tap/tun network init script [default=%s]\n"
1975 "-tun-fd fd use this fd as already opened tap/tun interface\n"
1977 "-user-net use user mode network stack [default if no tap/tun script]\n"
1979 "-dummy-net use dummy network stack\n"
1981 "Linux boot specific:\n"
1982 "-kernel bzImage use 'bzImage' as kernel image\n"
1983 "-append cmdline use 'cmdline' as kernel command line\n"
1984 "-initrd file use 'file' as initial ram disk\n"
1986 "Debug/Expert options:\n"
1987 "-S freeze CPU at startup (use 'c' to start execution)\n"
1988 "-s wait gdb connection to port %d\n"
1989 "-p port change gdb connection port\n"
1990 "-d item1,... output log to %s (use -d ? for a list of log items)\n"
1991 "-hdachs c,h,s force hard disk 0 geometry (usually qemu can guess it)\n"
1992 "-L path set the directory for the BIOS and VGA BIOS\n"
1993 #ifdef USE_CODE_COPY
1994 "-no-code-copy disable code copy acceleration\n"
1998 "During emulation, use C-a h to get terminal commands:\n",
1999 #ifdef CONFIG_SOFTMMU
2005 DEFAULT_NETWORK_SCRIPT
,
2006 DEFAULT_GDBSTUB_PORT
,
2009 #ifndef CONFIG_SOFTMMU
2011 "NOTE: this version of QEMU is faster but it needs slightly patched OSes to\n"
2012 "work. Please use the 'qemu' executable to have a more accurate (but slower)\n"
2018 #define HAS_ARG 0x0001
2031 QEMU_OPTION_snapshot
,
2033 QEMU_OPTION_nographic
,
2034 QEMU_OPTION_enable_audio
,
2037 QEMU_OPTION_macaddr
,
2040 QEMU_OPTION_user_net
,
2041 QEMU_OPTION_dummy_net
,
2053 QEMU_OPTION_no_code_copy
,
2056 QEMU_OPTION_localtime
,
2057 QEMU_OPTION_cirrusvga
,
2060 typedef struct QEMUOption
{
2066 const QEMUOption qemu_options
[] = {
2067 { "h", 0, QEMU_OPTION_h
},
2069 { "fda", HAS_ARG
, QEMU_OPTION_fda
},
2070 { "fdb", HAS_ARG
, QEMU_OPTION_fdb
},
2071 { "hda", HAS_ARG
, QEMU_OPTION_hda
},
2072 { "hdb", HAS_ARG
, QEMU_OPTION_hdb
},
2073 { "hdc", HAS_ARG
, QEMU_OPTION_hdc
},
2074 { "hdd", HAS_ARG
, QEMU_OPTION_hdd
},
2075 { "cdrom", HAS_ARG
, QEMU_OPTION_cdrom
},
2076 { "boot", HAS_ARG
, QEMU_OPTION_boot
},
2077 { "snapshot", 0, QEMU_OPTION_snapshot
},
2078 { "m", HAS_ARG
, QEMU_OPTION_m
},
2079 { "nographic", 0, QEMU_OPTION_nographic
},
2080 { "enable-audio", 0, QEMU_OPTION_enable_audio
},
2082 { "nics", HAS_ARG
, QEMU_OPTION_nics
},
2083 { "macaddr", HAS_ARG
, QEMU_OPTION_macaddr
},
2084 { "n", HAS_ARG
, QEMU_OPTION_n
},
2085 { "tun-fd", HAS_ARG
, QEMU_OPTION_tun_fd
},
2087 { "user-net", 0, QEMU_OPTION_user_net
},
2089 { "dummy-net", 0, QEMU_OPTION_dummy_net
},
2091 { "kernel", HAS_ARG
, QEMU_OPTION_kernel
},
2092 { "append", HAS_ARG
, QEMU_OPTION_append
},
2093 { "initrd", HAS_ARG
, QEMU_OPTION_initrd
},
2095 { "S", 0, QEMU_OPTION_S
},
2096 { "s", 0, QEMU_OPTION_s
},
2097 { "p", HAS_ARG
, QEMU_OPTION_p
},
2098 { "d", HAS_ARG
, QEMU_OPTION_d
},
2099 { "hdachs", HAS_ARG
, QEMU_OPTION_hdachs
},
2100 { "L", HAS_ARG
, QEMU_OPTION_L
},
2101 { "no-code-copy", 0, QEMU_OPTION_no_code_copy
},
2103 { "prep", 0, QEMU_OPTION_prep
},
2105 { "localtime", 0, QEMU_OPTION_localtime
},
2107 /* temporary options */
2108 { "pci", 0, QEMU_OPTION_pci
},
2109 { "cirrusvga", 0, QEMU_OPTION_cirrusvga
},
2113 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2115 /* this stack is only used during signal handling */
2116 #define SIGNAL_STACK_SIZE 32768
2118 static uint8_t *signal_stack
;
2122 #define NET_IF_TUN 0
2123 #define NET_IF_USER 1
2124 #define NET_IF_DUMMY 2
2126 int main(int argc
, char **argv
)
2128 #ifdef CONFIG_GDBSTUB
2129 int use_gdbstub
, gdbstub_port
;
2132 int snapshot
, linux_boot
;
2134 const char *initrd_filename
;
2135 const char *hd_filename
[MAX_DISKS
], *fd_filename
[MAX_FD
];
2136 const char *kernel_filename
, *kernel_cmdline
;
2137 DisplayState
*ds
= &display_state
;
2138 int cyls
, heads
, secs
;
2139 int start_emulation
= 1;
2141 int net_if_type
, nb_tun_fds
, tun_fds
[MAX_NICS
];
2143 const char *r
, *optarg
;
2145 #if !defined(CONFIG_SOFTMMU)
2146 /* we never want that malloc() uses mmap() */
2147 mallopt(M_MMAP_THRESHOLD
, 4096 * 1024);
2149 initrd_filename
= NULL
;
2150 for(i
= 0; i
< MAX_FD
; i
++)
2151 fd_filename
[i
] = NULL
;
2152 for(i
= 0; i
< MAX_DISKS
; i
++)
2153 hd_filename
[i
] = NULL
;
2154 ram_size
= DEFAULT_RAM_SIZE
* 1024 * 1024;
2155 vga_ram_size
= VGA_RAM_SIZE
;
2156 bios_size
= BIOS_SIZE
;
2157 pstrcpy(network_script
, sizeof(network_script
), DEFAULT_NETWORK_SCRIPT
);
2158 #ifdef CONFIG_GDBSTUB
2160 gdbstub_port
= DEFAULT_GDBSTUB_PORT
;
2164 kernel_filename
= NULL
;
2165 kernel_cmdline
= "";
2167 cyls
= heads
= secs
= 0;
2172 /* default mac address of the first network interface */
2186 hd_filename
[0] = argv
[optind
++];
2188 const QEMUOption
*popt
;
2191 popt
= qemu_options
;
2194 fprintf(stderr
, "%s: invalid option -- '%s'\n",
2198 if (!strcmp(popt
->name
, r
+ 1))
2202 if (popt
->flags
& HAS_ARG
) {
2203 if (optind
>= argc
) {
2204 fprintf(stderr
, "%s: option '%s' requires an argument\n",
2208 optarg
= argv
[optind
++];
2213 switch(popt
->index
) {
2214 case QEMU_OPTION_initrd
:
2215 initrd_filename
= optarg
;
2217 case QEMU_OPTION_hda
:
2218 hd_filename
[0] = optarg
;
2220 case QEMU_OPTION_hdb
:
2221 hd_filename
[1] = optarg
;
2223 case QEMU_OPTION_snapshot
:
2226 case QEMU_OPTION_hdachs
:
2230 cyls
= strtol(p
, (char **)&p
, 0);
2234 heads
= strtol(p
, (char **)&p
, 0);
2238 secs
= strtol(p
, (char **)&p
, 0);
2245 case QEMU_OPTION_nographic
:
2248 case QEMU_OPTION_kernel
:
2249 kernel_filename
= optarg
;
2251 case QEMU_OPTION_append
:
2252 kernel_cmdline
= optarg
;
2254 case QEMU_OPTION_tun_fd
:
2258 net_if_type
= NET_IF_TUN
;
2259 if (nb_tun_fds
< MAX_NICS
) {
2260 fd
= strtol(optarg
, (char **)&p
, 0);
2262 fprintf(stderr
, "qemu: invalid fd for network interface %d\n", nb_tun_fds
);
2265 tun_fds
[nb_tun_fds
++] = fd
;
2269 case QEMU_OPTION_hdc
:
2270 hd_filename
[2] = optarg
;
2273 case QEMU_OPTION_hdd
:
2274 hd_filename
[3] = optarg
;
2276 case QEMU_OPTION_cdrom
:
2277 hd_filename
[2] = optarg
;
2280 case QEMU_OPTION_boot
:
2281 boot_device
= optarg
[0];
2282 if (boot_device
!= 'a' && boot_device
!= 'b' &&
2283 boot_device
!= 'c' && boot_device
!= 'd') {
2284 fprintf(stderr
, "qemu: invalid boot device '%c'\n", boot_device
);
2288 case QEMU_OPTION_fda
:
2289 fd_filename
[0] = optarg
;
2291 case QEMU_OPTION_fdb
:
2292 fd_filename
[1] = optarg
;
2294 case QEMU_OPTION_no_code_copy
:
2295 code_copy_enabled
= 0;
2297 case QEMU_OPTION_nics
:
2298 nb_nics
= atoi(optarg
);
2299 if (nb_nics
< 0 || nb_nics
> MAX_NICS
) {
2300 fprintf(stderr
, "qemu: invalid number of network interfaces\n");
2304 case QEMU_OPTION_macaddr
:
2309 for(i
= 0; i
< 6; i
++) {
2310 macaddr
[i
] = strtol(p
, (char **)&p
, 16);
2317 fprintf(stderr
, "qemu: invalid syntax for ethernet address\n");
2325 case QEMU_OPTION_user_net
:
2326 net_if_type
= NET_IF_USER
;
2328 case QEMU_OPTION_dummy_net
:
2329 net_if_type
= NET_IF_DUMMY
;
2331 case QEMU_OPTION_enable_audio
:
2338 ram_size
= atoi(optarg
) * 1024 * 1024;
2341 if (ram_size
> PHYS_RAM_MAX_SIZE
) {
2342 fprintf(stderr
, "qemu: at most %d MB RAM can be simulated\n",
2343 PHYS_RAM_MAX_SIZE
/ (1024 * 1024));
2352 mask
= cpu_str_to_log_mask(optarg
);
2354 printf("Log items (comma separated):\n");
2355 for(item
= cpu_log_items
; item
->mask
!= 0; item
++) {
2356 printf("%-10s %s\n", item
->name
, item
->help
);
2364 pstrcpy(network_script
, sizeof(network_script
), optarg
);
2366 #ifdef CONFIG_GDBSTUB
2371 gdbstub_port
= atoi(optarg
);
2378 start_emulation
= 0;
2380 case QEMU_OPTION_pci
:
2383 case QEMU_OPTION_prep
:
2386 case QEMU_OPTION_localtime
:
2389 case QEMU_OPTION_cirrusvga
:
2390 cirrus_vga_enabled
= 1;
2396 linux_boot
= (kernel_filename
!= NULL
);
2398 if (!linux_boot
&& hd_filename
[0] == '\0' && hd_filename
[2] == '\0' &&
2399 fd_filename
[0] == '\0')
2402 /* boot to cd by default if no hard disk */
2403 if (hd_filename
[0] == '\0' && boot_device
== 'c') {
2404 if (fd_filename
[0] != '\0')
2410 #if !defined(CONFIG_SOFTMMU)
2411 /* must avoid mmap() usage of glibc by setting a buffer "by hand" */
2413 static uint8_t stdout_buf
[4096];
2414 setvbuf(stdout
, stdout_buf
, _IOLBF
, sizeof(stdout_buf
));
2417 setvbuf(stdout
, NULL
, _IOLBF
, 0);
2420 /* init host network redirectors */
2421 if (net_if_type
== -1) {
2422 net_if_type
= NET_IF_TUN
;
2423 #if defined(CONFIG_SLIRP)
2424 if (access(network_script
, R_OK
) < 0) {
2425 net_if_type
= NET_IF_USER
;
2430 for(i
= 0; i
< nb_nics
; i
++) {
2431 NetDriverState
*nd
= &nd_table
[i
];
2433 /* init virtual mac address */
2434 nd
->macaddr
[0] = macaddr
[0];
2435 nd
->macaddr
[1] = macaddr
[1];
2436 nd
->macaddr
[2] = macaddr
[2];
2437 nd
->macaddr
[3] = macaddr
[3];
2438 nd
->macaddr
[4] = macaddr
[4];
2439 nd
->macaddr
[5] = macaddr
[5] + i
;
2440 switch(net_if_type
) {
2441 #if defined(CONFIG_SLIRP)
2446 #if !defined(_WIN32)
2448 if (i
< nb_tun_fds
) {
2449 net_fd_init(nd
, tun_fds
[i
]);
2451 if (net_tun_init(nd
) < 0)
2463 /* init the memory */
2464 phys_ram_size
= ram_size
+ vga_ram_size
+ bios_size
;
2466 #ifdef CONFIG_SOFTMMU
2468 /* mallocs are always aligned on BSD. */
2469 phys_ram_base
= malloc(phys_ram_size
);
2471 phys_ram_base
= memalign(TARGET_PAGE_SIZE
, phys_ram_size
);
2473 if (!phys_ram_base
) {
2474 fprintf(stderr
, "Could not allocate physical memory\n");
2478 /* as we must map the same page at several addresses, we must use
2483 tmpdir
= getenv("QEMU_TMPDIR");
2486 snprintf(phys_ram_file
, sizeof(phys_ram_file
), "%s/vlXXXXXX", tmpdir
);
2487 if (mkstemp(phys_ram_file
) < 0) {
2488 fprintf(stderr
, "Could not create temporary memory file '%s'\n",
2492 phys_ram_fd
= open(phys_ram_file
, O_CREAT
| O_TRUNC
| O_RDWR
, 0600);
2493 if (phys_ram_fd
< 0) {
2494 fprintf(stderr
, "Could not open temporary memory file '%s'\n",
2498 ftruncate(phys_ram_fd
, phys_ram_size
);
2499 unlink(phys_ram_file
);
2500 phys_ram_base
= mmap(get_mmap_addr(phys_ram_size
),
2502 PROT_WRITE
| PROT_READ
, MAP_SHARED
| MAP_FIXED
,
2504 if (phys_ram_base
== MAP_FAILED
) {
2505 fprintf(stderr
, "Could not map physical memory\n");
2511 /* we always create the cdrom drive, even if no disk is there */
2513 bs_table
[2] = bdrv_new("cdrom");
2514 bdrv_set_type_hint(bs_table
[2], BDRV_TYPE_CDROM
);
2517 /* open the virtual block devices */
2518 for(i
= 0; i
< MAX_DISKS
; i
++) {
2519 if (hd_filename
[i
]) {
2522 snprintf(buf
, sizeof(buf
), "hd%c", i
+ 'a');
2523 bs_table
[i
] = bdrv_new(buf
);
2525 if (bdrv_open(bs_table
[i
], hd_filename
[i
], snapshot
) < 0) {
2526 fprintf(stderr
, "qemu: could not open hard disk image '%s\n",
2530 if (i
== 0 && cyls
!= 0)
2531 bdrv_set_geometry_hint(bs_table
[i
], cyls
, heads
, secs
);
2535 /* we always create at least one floppy disk */
2536 fd_table
[0] = bdrv_new("fda");
2537 bdrv_set_type_hint(fd_table
[0], BDRV_TYPE_FLOPPY
);
2539 for(i
= 0; i
< MAX_FD
; i
++) {
2540 if (fd_filename
[i
]) {
2543 snprintf(buf
, sizeof(buf
), "fd%c", i
+ 'a');
2544 fd_table
[i
] = bdrv_new(buf
);
2545 bdrv_set_type_hint(fd_table
[i
], BDRV_TYPE_FLOPPY
);
2547 if (fd_filename
[i
] != '\0') {
2548 if (bdrv_open(fd_table
[i
], fd_filename
[i
], snapshot
) < 0) {
2549 fprintf(stderr
, "qemu: could not open floppy disk image '%s'\n",
2557 /* init CPU state */
2560 cpu_single_env
= env
;
2562 register_savevm("timer", 0, 1, timer_save
, timer_load
, env
);
2563 register_savevm("cpu", 0, 1, cpu_save
, cpu_load
, env
);
2564 register_savevm("ram", 0, 1, ram_save
, ram_load
, NULL
);
2567 cpu_calibrate_ticks();
2571 dumb_display_init(ds
);
2574 sdl_display_init(ds
);
2576 dumb_display_init(ds
);
2580 /* setup cpu signal handlers for MMU / self modifying code handling */
2581 #if !defined(CONFIG_SOFTMMU)
2583 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2586 signal_stack
= memalign(16, SIGNAL_STACK_SIZE
);
2587 stk
.ss_sp
= signal_stack
;
2588 stk
.ss_size
= SIGNAL_STACK_SIZE
;
2591 if (sigaltstack(&stk
, NULL
) < 0) {
2592 perror("sigaltstack");
2598 struct sigaction act
;
2600 sigfillset(&act
.sa_mask
);
2601 act
.sa_flags
= SA_SIGINFO
;
2602 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2603 act
.sa_flags
|= SA_ONSTACK
;
2605 act
.sa_sigaction
= host_segv_handler
;
2606 sigaction(SIGSEGV
, &act
, NULL
);
2607 sigaction(SIGBUS
, &act
, NULL
);
2608 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2609 sigaction(SIGFPE
, &act
, NULL
);
2616 struct sigaction act
;
2617 sigfillset(&act
.sa_mask
);
2619 act
.sa_handler
= SIG_IGN
;
2620 sigaction(SIGPIPE
, &act
, NULL
);
2625 #if defined(TARGET_I386)
2626 pc_init(ram_size
, vga_ram_size
, boot_device
,
2627 ds
, fd_filename
, snapshot
,
2628 kernel_filename
, kernel_cmdline
, initrd_filename
);
2629 #elif defined(TARGET_PPC)
2630 ppc_init(ram_size
, vga_ram_size
, boot_device
,
2631 ds
, fd_filename
, snapshot
,
2632 kernel_filename
, kernel_cmdline
, initrd_filename
);
2635 /* launched after the device init so that it can display or not a
2639 gui_timer
= qemu_new_timer(rt_clock
, gui_update
, NULL
);
2640 qemu_mod_timer(gui_timer
, qemu_get_clock(rt_clock
));
2642 #ifdef CONFIG_GDBSTUB
2644 if (gdbserver_start(gdbstub_port
) < 0) {
2645 fprintf(stderr
, "Could not open gdbserver socket on port %d\n",
2649 printf("Waiting gdb connection on port %d\n", gdbstub_port
);
2653 if (start_emulation
)