4 * Copyright (c) 2003-2004 Fabrice Bellard
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
34 #include <sys/times.h>
39 #include <sys/ioctl.h>
40 #include <sys/socket.h>
46 #include <linux/if_tun.h>
49 #include <linux/rtc.h>
53 #if defined(CONFIG_SLIRP)
59 #include <sys/timeb.h>
61 #define getopt_long_only getopt_long
62 #define memalign(align, size) malloc(size)
66 #if defined(__linux__)
67 /* SDL use the pthreads and they modify sigaction. We don't
69 #if (__GLIBC__ > 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ >= 2))
70 extern void __libc_sigaction();
71 #define sigaction(sig, act, oact) __libc_sigaction(sig, act, oact)
73 extern void __sigaction();
74 #define sigaction(sig, act, oact) __sigaction(sig, act, oact)
76 #endif /* __linux__ */
77 #endif /* CONFIG_SDL */
85 #define DEFAULT_NETWORK_SCRIPT "/etc/qemu-ifup"
87 //#define DEBUG_UNUSED_IOPORT
88 //#define DEBUG_IOPORT
90 #if !defined(CONFIG_SOFTMMU)
91 #define PHYS_RAM_MAX_SIZE (256 * 1024 * 1024)
93 #define PHYS_RAM_MAX_SIZE (2047 * 1024 * 1024)
97 #define DEFAULT_RAM_SIZE 144
99 #define DEFAULT_RAM_SIZE 32
102 #define GUI_REFRESH_INTERVAL 30
104 /* XXX: use a two level table to limit memory usage */
105 #define MAX_IOPORTS 65536
107 const char *bios_dir
= CONFIG_QEMU_SHAREDIR
;
108 char phys_ram_file
[1024];
109 CPUState
*global_env
;
110 CPUState
*cpu_single_env
;
111 void *ioport_opaque
[MAX_IOPORTS
];
112 IOPortReadFunc
*ioport_read_table
[3][MAX_IOPORTS
];
113 IOPortWriteFunc
*ioport_write_table
[3][MAX_IOPORTS
];
114 BlockDriverState
*bs_table
[MAX_DISKS
], *fd_table
[MAX_FD
];
117 static DisplayState display_state
;
119 int64_t ticks_per_sec
;
120 int boot_device
= 'c';
122 static char network_script
[1024];
123 int pit_min_timer_count
= 0;
125 NetDriverState nd_table
[MAX_NICS
];
126 SerialState
*serial_console
;
127 QEMUTimer
*gui_timer
;
129 int audio_enabled
= 0;
131 int prep_enabled
= 0;
134 /***********************************************************/
135 /* x86 ISA bus support */
137 target_phys_addr_t isa_mem_base
= 0;
139 uint32_t default_ioport_readb(void *opaque
, uint32_t address
)
141 #ifdef DEBUG_UNUSED_IOPORT
142 fprintf(stderr
, "inb: port=0x%04x\n", address
);
147 void default_ioport_writeb(void *opaque
, uint32_t address
, uint32_t data
)
149 #ifdef DEBUG_UNUSED_IOPORT
150 fprintf(stderr
, "outb: port=0x%04x data=0x%02x\n", address
, data
);
154 /* default is to make two byte accesses */
155 uint32_t default_ioport_readw(void *opaque
, uint32_t address
)
158 data
= ioport_read_table
[0][address
](ioport_opaque
[address
], address
);
159 address
= (address
+ 1) & (MAX_IOPORTS
- 1);
160 data
|= ioport_read_table
[0][address
](ioport_opaque
[address
], address
) << 8;
164 void default_ioport_writew(void *opaque
, uint32_t address
, uint32_t data
)
166 ioport_write_table
[0][address
](ioport_opaque
[address
], address
, data
& 0xff);
167 address
= (address
+ 1) & (MAX_IOPORTS
- 1);
168 ioport_write_table
[0][address
](ioport_opaque
[address
], address
, (data
>> 8) & 0xff);
171 uint32_t default_ioport_readl(void *opaque
, uint32_t address
)
173 #ifdef DEBUG_UNUSED_IOPORT
174 fprintf(stderr
, "inl: port=0x%04x\n", address
);
179 void default_ioport_writel(void *opaque
, uint32_t address
, uint32_t data
)
181 #ifdef DEBUG_UNUSED_IOPORT
182 fprintf(stderr
, "outl: port=0x%04x data=0x%02x\n", address
, data
);
186 void init_ioports(void)
190 for(i
= 0; i
< MAX_IOPORTS
; i
++) {
191 ioport_read_table
[0][i
] = default_ioport_readb
;
192 ioport_write_table
[0][i
] = default_ioport_writeb
;
193 ioport_read_table
[1][i
] = default_ioport_readw
;
194 ioport_write_table
[1][i
] = default_ioport_writew
;
195 ioport_read_table
[2][i
] = default_ioport_readl
;
196 ioport_write_table
[2][i
] = default_ioport_writel
;
200 /* size is the word size in byte */
201 int register_ioport_read(int start
, int length
, int size
,
202 IOPortReadFunc
*func
, void *opaque
)
208 } else if (size
== 2) {
210 } else if (size
== 4) {
213 hw_error("register_ioport_read: invalid size");
216 for(i
= start
; i
< start
+ length
; i
+= size
) {
217 ioport_read_table
[bsize
][i
] = func
;
218 if (ioport_opaque
[i
] != NULL
&& ioport_opaque
[i
] != opaque
)
219 hw_error("register_ioport_read: invalid opaque");
220 ioport_opaque
[i
] = opaque
;
225 /* size is the word size in byte */
226 int register_ioport_write(int start
, int length
, int size
,
227 IOPortWriteFunc
*func
, void *opaque
)
233 } else if (size
== 2) {
235 } else if (size
== 4) {
238 hw_error("register_ioport_write: invalid size");
241 for(i
= start
; i
< start
+ length
; i
+= size
) {
242 ioport_write_table
[bsize
][i
] = func
;
243 if (ioport_opaque
[i
] != NULL
&& ioport_opaque
[i
] != opaque
)
244 hw_error("register_ioport_read: invalid opaque");
245 ioport_opaque
[i
] = opaque
;
250 void isa_unassign_ioport(int start
, int length
)
254 for(i
= start
; i
< start
+ length
; i
++) {
255 ioport_read_table
[0][i
] = default_ioport_readb
;
256 ioport_read_table
[1][i
] = default_ioport_readw
;
257 ioport_read_table
[2][i
] = default_ioport_readl
;
259 ioport_write_table
[0][i
] = default_ioport_writeb
;
260 ioport_write_table
[1][i
] = default_ioport_writew
;
261 ioport_write_table
[2][i
] = default_ioport_writel
;
265 void pstrcpy(char *buf
, int buf_size
, const char *str
)
275 if (c
== 0 || q
>= buf
+ buf_size
- 1)
282 /* strcat and truncate. */
283 char *pstrcat(char *buf
, int buf_size
, const char *s
)
288 pstrcpy(buf
+ len
, buf_size
- len
, s
);
292 /* return the size or -1 if error */
293 int load_image(const char *filename
, uint8_t *addr
)
296 fd
= open(filename
, O_RDONLY
| O_BINARY
);
299 size
= lseek(fd
, 0, SEEK_END
);
300 lseek(fd
, 0, SEEK_SET
);
301 if (read(fd
, addr
, size
) != size
) {
309 void cpu_outb(CPUState
*env
, int addr
, int val
)
312 if (loglevel
& CPU_LOG_IOPORT
)
313 fprintf(logfile
, "outb: %04x %02x\n", addr
, val
);
315 ioport_write_table
[0][addr
](ioport_opaque
[addr
], addr
, val
);
318 void cpu_outw(CPUState
*env
, int addr
, int val
)
321 if (loglevel
& CPU_LOG_IOPORT
)
322 fprintf(logfile
, "outw: %04x %04x\n", addr
, val
);
324 ioport_write_table
[1][addr
](ioport_opaque
[addr
], addr
, val
);
327 void cpu_outl(CPUState
*env
, int addr
, int val
)
330 if (loglevel
& CPU_LOG_IOPORT
)
331 fprintf(logfile
, "outl: %04x %08x\n", addr
, val
);
333 ioport_write_table
[2][addr
](ioport_opaque
[addr
], addr
, val
);
336 int cpu_inb(CPUState
*env
, int addr
)
339 val
= ioport_read_table
[0][addr
](ioport_opaque
[addr
], addr
);
341 if (loglevel
& CPU_LOG_IOPORT
)
342 fprintf(logfile
, "inb : %04x %02x\n", addr
, val
);
347 int cpu_inw(CPUState
*env
, int addr
)
350 val
= ioport_read_table
[1][addr
](ioport_opaque
[addr
], addr
);
352 if (loglevel
& CPU_LOG_IOPORT
)
353 fprintf(logfile
, "inw : %04x %04x\n", addr
, val
);
358 int cpu_inl(CPUState
*env
, int addr
)
361 val
= ioport_read_table
[2][addr
](ioport_opaque
[addr
], addr
);
363 if (loglevel
& CPU_LOG_IOPORT
)
364 fprintf(logfile
, "inl : %04x %08x\n", addr
, val
);
369 /***********************************************************/
370 void hw_error(const char *fmt
, ...)
375 fprintf(stderr
, "qemu: hardware error: ");
376 vfprintf(stderr
, fmt
, ap
);
377 fprintf(stderr
, "\n");
379 cpu_x86_dump_state(global_env
, stderr
, X86_DUMP_FPU
| X86_DUMP_CCOP
);
381 cpu_dump_state(global_env
, stderr
, 0);
387 /***********************************************************/
390 static QEMUPutKBDEvent
*qemu_put_kbd_event
;
391 static void *qemu_put_kbd_event_opaque
;
392 static QEMUPutMouseEvent
*qemu_put_mouse_event
;
393 static void *qemu_put_mouse_event_opaque
;
395 void qemu_add_kbd_event_handler(QEMUPutKBDEvent
*func
, void *opaque
)
397 qemu_put_kbd_event_opaque
= opaque
;
398 qemu_put_kbd_event
= func
;
401 void qemu_add_mouse_event_handler(QEMUPutMouseEvent
*func
, void *opaque
)
403 qemu_put_mouse_event_opaque
= opaque
;
404 qemu_put_mouse_event
= func
;
407 void kbd_put_keycode(int keycode
)
409 if (qemu_put_kbd_event
) {
410 qemu_put_kbd_event(qemu_put_kbd_event_opaque
, keycode
);
414 void kbd_mouse_event(int dx
, int dy
, int dz
, int buttons_state
)
416 if (qemu_put_mouse_event
) {
417 qemu_put_mouse_event(qemu_put_mouse_event_opaque
,
418 dx
, dy
, dz
, buttons_state
);
422 /***********************************************************/
425 #if defined(__powerpc__)
427 static inline uint32_t get_tbl(void)
430 asm volatile("mftb %0" : "=r" (tbl
));
434 static inline uint32_t get_tbu(void)
437 asm volatile("mftbu %0" : "=r" (tbl
));
441 int64_t cpu_get_real_ticks(void)
444 /* NOTE: we test if wrapping has occurred */
450 return ((int64_t)h
<< 32) | l
;
453 #elif defined(__i386__)
455 int64_t cpu_get_real_ticks(void)
458 asm volatile ("rdtsc" : "=A" (val
));
462 #elif defined(__x86_64__)
464 int64_t cpu_get_real_ticks(void)
468 asm volatile("rdtsc" : "=a" (low
), "=d" (high
));
476 #error unsupported CPU
479 static int64_t cpu_ticks_offset
;
480 static int cpu_ticks_enabled
;
482 static inline int64_t cpu_get_ticks(void)
484 if (!cpu_ticks_enabled
) {
485 return cpu_ticks_offset
;
487 return cpu_get_real_ticks() + cpu_ticks_offset
;
491 /* enable cpu_get_ticks() */
492 void cpu_enable_ticks(void)
494 if (!cpu_ticks_enabled
) {
495 cpu_ticks_offset
-= cpu_get_real_ticks();
496 cpu_ticks_enabled
= 1;
500 /* disable cpu_get_ticks() : the clock is stopped. You must not call
501 cpu_get_ticks() after that. */
502 void cpu_disable_ticks(void)
504 if (cpu_ticks_enabled
) {
505 cpu_ticks_offset
= cpu_get_ticks();
506 cpu_ticks_enabled
= 0;
510 static int64_t get_clock(void)
515 return ((int64_t)tb
.time
* 1000 + (int64_t)tb
.millitm
) * 1000;
518 gettimeofday(&tv
, NULL
);
519 return tv
.tv_sec
* 1000000LL + tv
.tv_usec
;
523 void cpu_calibrate_ticks(void)
528 ticks
= cpu_get_real_ticks();
534 usec
= get_clock() - usec
;
535 ticks
= cpu_get_real_ticks() - ticks
;
536 ticks_per_sec
= (ticks
* 1000000LL + (usec
>> 1)) / usec
;
539 /* compute with 96 bit intermediate result: (a*b)/c */
540 uint64_t muldiv64(uint64_t a
, uint32_t b
, uint32_t c
)
545 #ifdef WORDS_BIGENDIAN
555 rl
= (uint64_t)u
.l
.low
* (uint64_t)b
;
556 rh
= (uint64_t)u
.l
.high
* (uint64_t)b
;
559 res
.l
.low
= (((rh
% c
) << 32) + (rl
& 0xffffffff)) / c
;
563 #define QEMU_TIMER_REALTIME 0
564 #define QEMU_TIMER_VIRTUAL 1
568 /* XXX: add frequency */
576 struct QEMUTimer
*next
;
582 static QEMUTimer
*active_timers
[2];
584 static MMRESULT timerID
;
586 /* frequency of the times() clock tick */
587 static int timer_freq
;
590 QEMUClock
*qemu_new_clock(int type
)
593 clock
= qemu_mallocz(sizeof(QEMUClock
));
600 QEMUTimer
*qemu_new_timer(QEMUClock
*clock
, QEMUTimerCB
*cb
, void *opaque
)
604 ts
= qemu_mallocz(sizeof(QEMUTimer
));
611 void qemu_free_timer(QEMUTimer
*ts
)
616 /* stop a timer, but do not dealloc it */
617 void qemu_del_timer(QEMUTimer
*ts
)
621 /* NOTE: this code must be signal safe because
622 qemu_timer_expired() can be called from a signal. */
623 pt
= &active_timers
[ts
->clock
->type
];
636 /* modify the current timer so that it will be fired when current_time
637 >= expire_time. The corresponding callback will be called. */
638 void qemu_mod_timer(QEMUTimer
*ts
, int64_t expire_time
)
644 /* add the timer in the sorted list */
645 /* NOTE: this code must be signal safe because
646 qemu_timer_expired() can be called from a signal. */
647 pt
= &active_timers
[ts
->clock
->type
];
652 if (t
->expire_time
> expire_time
)
656 ts
->expire_time
= expire_time
;
661 int qemu_timer_pending(QEMUTimer
*ts
)
664 for(t
= active_timers
[ts
->clock
->type
]; t
!= NULL
; t
= t
->next
) {
671 static inline int qemu_timer_expired(QEMUTimer
*timer_head
, int64_t current_time
)
675 return (timer_head
->expire_time
<= current_time
);
678 static void qemu_run_timers(QEMUTimer
**ptimer_head
, int64_t current_time
)
684 if (ts
->expire_time
> current_time
)
686 /* remove timer from the list before calling the callback */
687 *ptimer_head
= ts
->next
;
690 /* run the callback (the timer list can be modified) */
695 int64_t qemu_get_clock(QEMUClock
*clock
)
697 switch(clock
->type
) {
698 case QEMU_TIMER_REALTIME
:
700 return GetTickCount();
705 /* Note that using gettimeofday() is not a good solution
706 for timers because its value change when the date is
708 if (timer_freq
== 100) {
709 return times(&tp
) * 10;
711 return ((int64_t)times(&tp
) * 1000) / timer_freq
;
716 case QEMU_TIMER_VIRTUAL
:
717 return cpu_get_ticks();
722 void qemu_put_timer(QEMUFile
*f
, QEMUTimer
*ts
)
724 uint64_t expire_time
;
726 if (qemu_timer_pending(ts
)) {
727 expire_time
= ts
->expire_time
;
731 qemu_put_be64(f
, expire_time
);
734 void qemu_get_timer(QEMUFile
*f
, QEMUTimer
*ts
)
736 uint64_t expire_time
;
738 expire_time
= qemu_get_be64(f
);
739 if (expire_time
!= -1) {
740 qemu_mod_timer(ts
, expire_time
);
746 static void timer_save(QEMUFile
*f
, void *opaque
)
748 if (cpu_ticks_enabled
) {
749 hw_error("cannot save state if virtual timers are running");
751 qemu_put_be64s(f
, &cpu_ticks_offset
);
752 qemu_put_be64s(f
, &ticks_per_sec
);
755 static int timer_load(QEMUFile
*f
, void *opaque
, int version_id
)
759 if (cpu_ticks_enabled
) {
762 qemu_get_be64s(f
, &cpu_ticks_offset
);
763 qemu_get_be64s(f
, &ticks_per_sec
);
768 void CALLBACK
host_alarm_handler(UINT uTimerID
, UINT uMsg
,
769 DWORD_PTR dwUser
, DWORD_PTR dw1
, DWORD_PTR dw2
)
771 static void host_alarm_handler(int host_signum
)
774 if (qemu_timer_expired(active_timers
[QEMU_TIMER_VIRTUAL
],
775 qemu_get_clock(vm_clock
)) ||
776 qemu_timer_expired(active_timers
[QEMU_TIMER_REALTIME
],
777 qemu_get_clock(rt_clock
))) {
778 /* stop the cpu because a timer occured */
779 cpu_interrupt(global_env
, CPU_INTERRUPT_EXIT
);
785 #if defined(__linux__)
787 #define RTC_FREQ 1024
791 static int start_rtc_timer(void)
793 rtc_fd
= open("/dev/rtc", O_RDONLY
);
796 if (ioctl(rtc_fd
, RTC_IRQP_SET
, RTC_FREQ
) < 0) {
797 fprintf(stderr
, "Could not configure '/dev/rtc' to have a 1024 Hz timer. This is not a fatal\n"
798 "error, but for better emulation accuracy either use a 2.6 host Linux kernel or\n"
799 "type 'echo 1024 > /proc/sys/dev/rtc/max-user-freq' as root.\n");
802 if (ioctl(rtc_fd
, RTC_PIE_ON
, 0) < 0) {
807 pit_min_timer_count
= PIT_FREQ
/ RTC_FREQ
;
813 static int start_rtc_timer(void)
818 #endif /* !defined(__linux__) */
820 #endif /* !defined(_WIN32) */
822 static void init_timers(void)
824 rt_clock
= qemu_new_clock(QEMU_TIMER_REALTIME
);
825 vm_clock
= qemu_new_clock(QEMU_TIMER_VIRTUAL
);
830 timerID
= timeSetEvent(10, // interval (ms)
832 host_alarm_handler
, // function
833 (DWORD
)&count
, // user parameter
834 TIME_PERIODIC
| TIME_CALLBACK_FUNCTION
);
836 perror("failed timer alarm");
840 pit_min_timer_count
= ((uint64_t)10000 * PIT_FREQ
) / 1000000;
843 struct sigaction act
;
844 struct itimerval itv
;
846 /* get times() syscall frequency */
847 timer_freq
= sysconf(_SC_CLK_TCK
);
850 sigfillset(&act
.sa_mask
);
852 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
853 act
.sa_flags
|= SA_ONSTACK
;
855 act
.sa_handler
= host_alarm_handler
;
856 sigaction(SIGALRM
, &act
, NULL
);
858 itv
.it_interval
.tv_sec
= 0;
859 itv
.it_interval
.tv_usec
= 1000;
860 itv
.it_value
.tv_sec
= 0;
861 itv
.it_value
.tv_usec
= 10 * 1000;
862 setitimer(ITIMER_REAL
, &itv
, NULL
);
863 /* we probe the tick duration of the kernel to inform the user if
864 the emulated kernel requested a too high timer frequency */
865 getitimer(ITIMER_REAL
, &itv
);
867 if (itv
.it_interval
.tv_usec
> 1000) {
868 /* try to use /dev/rtc to have a faster timer */
869 if (start_rtc_timer() < 0)
872 itv
.it_interval
.tv_sec
= 0;
873 itv
.it_interval
.tv_usec
= 0;
874 itv
.it_value
.tv_sec
= 0;
875 itv
.it_value
.tv_usec
= 0;
876 setitimer(ITIMER_REAL
, &itv
, NULL
);
879 sigaction(SIGIO
, &act
, NULL
);
880 fcntl(rtc_fd
, F_SETFL
, O_ASYNC
);
881 fcntl(rtc_fd
, F_SETOWN
, getpid());
884 pit_min_timer_count
= ((uint64_t)itv
.it_interval
.tv_usec
*
891 void quit_timers(void)
894 timeKillEvent(timerID
);
898 /***********************************************************/
903 int serial_open_device(void)
910 int serial_open_device(void)
912 char slave_name
[1024];
913 int master_fd
, slave_fd
;
915 if (serial_console
== NULL
&& nographic
) {
916 /* use console for serial port */
921 if (openpty(&master_fd
, &slave_fd
, slave_name
, NULL
, NULL
) < 0) {
922 fprintf(stderr
, "warning: could not create pseudo terminal for serial port\n");
925 fprintf(stderr
, "Serial port redirected to %s\n", slave_name
);
935 /***********************************************************/
936 /* Linux network device redirectors */
938 void hex_dump(FILE *f
, const uint8_t *buf
, int size
)
942 for(i
=0;i
<size
;i
+=16) {
946 fprintf(f
, "%08x ", i
);
949 fprintf(f
, " %02x", buf
[i
+j
]);
956 if (c
< ' ' || c
> '~')
964 void qemu_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
966 nd
->send_packet(nd
, buf
, size
);
969 void qemu_add_read_packet(NetDriverState
*nd
, IOCanRWHandler
*fd_can_read
,
970 IOReadHandler
*fd_read
, void *opaque
)
972 nd
->add_read_packet(nd
, fd_can_read
, fd_read
, opaque
);
975 /* dummy network adapter */
977 static void dummy_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
981 static void dummy_add_read_packet(NetDriverState
*nd
,
982 IOCanRWHandler
*fd_can_read
,
983 IOReadHandler
*fd_read
, void *opaque
)
987 static int net_dummy_init(NetDriverState
*nd
)
989 nd
->send_packet
= dummy_send_packet
;
990 nd
->add_read_packet
= dummy_add_read_packet
;
991 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "dummy");
995 #if defined(CONFIG_SLIRP)
997 /* slirp network adapter */
999 static void *slirp_fd_opaque
;
1000 static IOCanRWHandler
*slirp_fd_can_read
;
1001 static IOReadHandler
*slirp_fd_read
;
1002 static int slirp_inited
;
1004 int slirp_can_output(void)
1006 return slirp_fd_can_read(slirp_fd_opaque
);
1009 void slirp_output(const uint8_t *pkt
, int pkt_len
)
1012 printf("output:\n");
1013 hex_dump(stdout
, pkt
, pkt_len
);
1015 slirp_fd_read(slirp_fd_opaque
, pkt
, pkt_len
);
1018 static void slirp_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
1022 hex_dump(stdout
, buf
, size
);
1024 slirp_input(buf
, size
);
1027 static void slirp_add_read_packet(NetDriverState
*nd
,
1028 IOCanRWHandler
*fd_can_read
,
1029 IOReadHandler
*fd_read
, void *opaque
)
1031 slirp_fd_opaque
= opaque
;
1032 slirp_fd_can_read
= fd_can_read
;
1033 slirp_fd_read
= fd_read
;
1036 static int net_slirp_init(NetDriverState
*nd
)
1038 if (!slirp_inited
) {
1042 nd
->send_packet
= slirp_send_packet
;
1043 nd
->add_read_packet
= slirp_add_read_packet
;
1044 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "slirp");
1048 #endif /* CONFIG_SLIRP */
1050 #if !defined(_WIN32)
1052 static int tun_open(char *ifname
, int ifname_size
)
1058 fd
= open("/dev/tap", O_RDWR
);
1060 fprintf(stderr
, "warning: could not open /dev/tap: no virtual network emulation\n");
1065 dev
= devname(s
.st_rdev
, S_IFCHR
);
1066 pstrcpy(ifname
, ifname_size
, dev
);
1068 fcntl(fd
, F_SETFL
, O_NONBLOCK
);
1072 static int tun_open(char *ifname
, int ifname_size
)
1077 fd
= open("/dev/net/tun", O_RDWR
);
1079 fprintf(stderr
, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1082 memset(&ifr
, 0, sizeof(ifr
));
1083 ifr
.ifr_flags
= IFF_TAP
| IFF_NO_PI
;
1084 pstrcpy(ifr
.ifr_name
, IFNAMSIZ
, "tun%d");
1085 ret
= ioctl(fd
, TUNSETIFF
, (void *) &ifr
);
1087 fprintf(stderr
, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1091 printf("Connected to host network interface: %s\n", ifr
.ifr_name
);
1092 pstrcpy(ifname
, ifname_size
, ifr
.ifr_name
);
1093 fcntl(fd
, F_SETFL
, O_NONBLOCK
);
1098 static void tun_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
1100 write(nd
->fd
, buf
, size
);
1103 static void tun_add_read_packet(NetDriverState
*nd
,
1104 IOCanRWHandler
*fd_can_read
,
1105 IOReadHandler
*fd_read
, void *opaque
)
1107 qemu_add_fd_read_handler(nd
->fd
, fd_can_read
, fd_read
, opaque
);
1110 static int net_tun_init(NetDriverState
*nd
)
1116 nd
->fd
= tun_open(nd
->ifname
, sizeof(nd
->ifname
));
1120 /* try to launch network init script */
1125 *parg
++ = network_script
;
1126 *parg
++ = nd
->ifname
;
1128 execv(network_script
, args
);
1131 while (waitpid(pid
, &status
, 0) != pid
);
1132 if (!WIFEXITED(status
) ||
1133 WEXITSTATUS(status
) != 0) {
1134 fprintf(stderr
, "%s: could not launch network script\n",
1138 nd
->send_packet
= tun_send_packet
;
1139 nd
->add_read_packet
= tun_add_read_packet
;
1143 static int net_fd_init(NetDriverState
*nd
, int fd
)
1146 nd
->send_packet
= tun_send_packet
;
1147 nd
->add_read_packet
= tun_add_read_packet
;
1148 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "tunfd");
1152 #endif /* !_WIN32 */
1154 /***********************************************************/
1159 static void term_exit(void)
1163 static void term_init(void)
1169 /* init terminal so that we can grab keys */
1170 static struct termios oldtty
;
1172 static void term_exit(void)
1174 tcsetattr (0, TCSANOW
, &oldtty
);
1177 static void term_init(void)
1181 tcgetattr (0, &tty
);
1184 tty
.c_iflag
&= ~(IGNBRK
|BRKINT
|PARMRK
|ISTRIP
1185 |INLCR
|IGNCR
|ICRNL
|IXON
);
1186 tty
.c_oflag
|= OPOST
;
1187 tty
.c_lflag
&= ~(ECHO
|ECHONL
|ICANON
|IEXTEN
);
1188 /* if graphical mode, we allow Ctrl-C handling */
1190 tty
.c_lflag
&= ~ISIG
;
1191 tty
.c_cflag
&= ~(CSIZE
|PARENB
);
1194 tty
.c_cc
[VTIME
] = 0;
1196 tcsetattr (0, TCSANOW
, &tty
);
1200 fcntl(0, F_SETFL
, O_NONBLOCK
);
1205 static void dumb_update(DisplayState
*ds
, int x
, int y
, int w
, int h
)
1209 static void dumb_resize(DisplayState
*ds
, int w
, int h
)
1213 static void dumb_refresh(DisplayState
*ds
)
1215 vga_update_display();
1218 void dumb_display_init(DisplayState
*ds
)
1223 ds
->dpy_update
= dumb_update
;
1224 ds
->dpy_resize
= dumb_resize
;
1225 ds
->dpy_refresh
= dumb_refresh
;
1228 #if !defined(CONFIG_SOFTMMU)
1229 /***********************************************************/
1230 /* cpu signal handler */
1231 static void host_segv_handler(int host_signum
, siginfo_t
*info
,
1234 if (cpu_signal_handler(host_signum
, info
, puc
))
1241 /***********************************************************/
1244 #define MAX_IO_HANDLERS 64
1246 typedef struct IOHandlerRecord
{
1248 IOCanRWHandler
*fd_can_read
;
1249 IOReadHandler
*fd_read
;
1251 /* temporary data */
1254 struct IOHandlerRecord
*next
;
1257 static IOHandlerRecord
*first_io_handler
;
1259 int qemu_add_fd_read_handler(int fd
, IOCanRWHandler
*fd_can_read
,
1260 IOReadHandler
*fd_read
, void *opaque
)
1262 IOHandlerRecord
*ioh
;
1264 ioh
= qemu_mallocz(sizeof(IOHandlerRecord
));
1268 ioh
->fd_can_read
= fd_can_read
;
1269 ioh
->fd_read
= fd_read
;
1270 ioh
->opaque
= opaque
;
1271 ioh
->next
= first_io_handler
;
1272 first_io_handler
= ioh
;
1276 void qemu_del_fd_read_handler(int fd
)
1278 IOHandlerRecord
**pioh
, *ioh
;
1280 pioh
= &first_io_handler
;
1285 if (ioh
->fd
== fd
) {
1293 /***********************************************************/
1294 /* savevm/loadvm support */
1296 void qemu_put_buffer(QEMUFile
*f
, const uint8_t *buf
, int size
)
1298 fwrite(buf
, 1, size
, f
);
1301 void qemu_put_byte(QEMUFile
*f
, int v
)
1306 void qemu_put_be16(QEMUFile
*f
, unsigned int v
)
1308 qemu_put_byte(f
, v
>> 8);
1309 qemu_put_byte(f
, v
);
1312 void qemu_put_be32(QEMUFile
*f
, unsigned int v
)
1314 qemu_put_byte(f
, v
>> 24);
1315 qemu_put_byte(f
, v
>> 16);
1316 qemu_put_byte(f
, v
>> 8);
1317 qemu_put_byte(f
, v
);
1320 void qemu_put_be64(QEMUFile
*f
, uint64_t v
)
1322 qemu_put_be32(f
, v
>> 32);
1323 qemu_put_be32(f
, v
);
1326 int qemu_get_buffer(QEMUFile
*f
, uint8_t *buf
, int size
)
1328 return fread(buf
, 1, size
, f
);
1331 int qemu_get_byte(QEMUFile
*f
)
1341 unsigned int qemu_get_be16(QEMUFile
*f
)
1344 v
= qemu_get_byte(f
) << 8;
1345 v
|= qemu_get_byte(f
);
1349 unsigned int qemu_get_be32(QEMUFile
*f
)
1352 v
= qemu_get_byte(f
) << 24;
1353 v
|= qemu_get_byte(f
) << 16;
1354 v
|= qemu_get_byte(f
) << 8;
1355 v
|= qemu_get_byte(f
);
1359 uint64_t qemu_get_be64(QEMUFile
*f
)
1362 v
= (uint64_t)qemu_get_be32(f
) << 32;
1363 v
|= qemu_get_be32(f
);
1367 int64_t qemu_ftell(QEMUFile
*f
)
1372 int64_t qemu_fseek(QEMUFile
*f
, int64_t pos
, int whence
)
1374 if (fseek(f
, pos
, whence
) < 0)
1379 typedef struct SaveStateEntry
{
1383 SaveStateHandler
*save_state
;
1384 LoadStateHandler
*load_state
;
1386 struct SaveStateEntry
*next
;
1389 static SaveStateEntry
*first_se
;
1391 int register_savevm(const char *idstr
,
1394 SaveStateHandler
*save_state
,
1395 LoadStateHandler
*load_state
,
1398 SaveStateEntry
*se
, **pse
;
1400 se
= qemu_malloc(sizeof(SaveStateEntry
));
1403 pstrcpy(se
->idstr
, sizeof(se
->idstr
), idstr
);
1404 se
->instance_id
= instance_id
;
1405 se
->version_id
= version_id
;
1406 se
->save_state
= save_state
;
1407 se
->load_state
= load_state
;
1408 se
->opaque
= opaque
;
1411 /* add at the end of list */
1413 while (*pse
!= NULL
)
1414 pse
= &(*pse
)->next
;
1419 #define QEMU_VM_FILE_MAGIC 0x5145564d
1420 #define QEMU_VM_FILE_VERSION 0x00000001
1422 int qemu_savevm(const char *filename
)
1426 int len
, len_pos
, cur_pos
, saved_vm_running
, ret
;
1428 saved_vm_running
= vm_running
;
1431 f
= fopen(filename
, "wb");
1437 qemu_put_be32(f
, QEMU_VM_FILE_MAGIC
);
1438 qemu_put_be32(f
, QEMU_VM_FILE_VERSION
);
1440 for(se
= first_se
; se
!= NULL
; se
= se
->next
) {
1442 len
= strlen(se
->idstr
);
1443 qemu_put_byte(f
, len
);
1444 qemu_put_buffer(f
, se
->idstr
, len
);
1446 qemu_put_be32(f
, se
->instance_id
);
1447 qemu_put_be32(f
, se
->version_id
);
1449 /* record size: filled later */
1451 qemu_put_be32(f
, 0);
1453 se
->save_state(f
, se
->opaque
);
1455 /* fill record size */
1457 len
= ftell(f
) - len_pos
- 4;
1458 fseek(f
, len_pos
, SEEK_SET
);
1459 qemu_put_be32(f
, len
);
1460 fseek(f
, cur_pos
, SEEK_SET
);
1466 if (saved_vm_running
)
1471 static SaveStateEntry
*find_se(const char *idstr
, int instance_id
)
1475 for(se
= first_se
; se
!= NULL
; se
= se
->next
) {
1476 if (!strcmp(se
->idstr
, idstr
) &&
1477 instance_id
== se
->instance_id
)
1483 int qemu_loadvm(const char *filename
)
1487 int len
, cur_pos
, ret
, instance_id
, record_len
, version_id
;
1488 int saved_vm_running
;
1492 saved_vm_running
= vm_running
;
1495 f
= fopen(filename
, "rb");
1501 v
= qemu_get_be32(f
);
1502 if (v
!= QEMU_VM_FILE_MAGIC
)
1504 v
= qemu_get_be32(f
);
1505 if (v
!= QEMU_VM_FILE_VERSION
) {
1512 #if defined (DO_TB_FLUSH)
1513 tb_flush(global_env
);
1515 len
= qemu_get_byte(f
);
1518 qemu_get_buffer(f
, idstr
, len
);
1520 instance_id
= qemu_get_be32(f
);
1521 version_id
= qemu_get_be32(f
);
1522 record_len
= qemu_get_be32(f
);
1524 printf("idstr=%s instance=0x%x version=%d len=%d\n",
1525 idstr
, instance_id
, version_id
, record_len
);
1528 se
= find_se(idstr
, instance_id
);
1530 fprintf(stderr
, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
1531 instance_id
, idstr
);
1533 ret
= se
->load_state(f
, se
->opaque
, version_id
);
1535 fprintf(stderr
, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1536 instance_id
, idstr
);
1539 /* always seek to exact end of record */
1540 qemu_fseek(f
, cur_pos
+ record_len
, SEEK_SET
);
1545 if (saved_vm_running
)
1550 /***********************************************************/
1551 /* cpu save/restore */
1553 #if defined(TARGET_I386)
1555 static void cpu_put_seg(QEMUFile
*f
, SegmentCache
*dt
)
1557 qemu_put_be32(f
, (uint32_t)dt
->base
);
1558 qemu_put_be32(f
, dt
->limit
);
1559 qemu_put_be32(f
, dt
->flags
);
1562 static void cpu_get_seg(QEMUFile
*f
, SegmentCache
*dt
)
1564 dt
->base
= (uint8_t *)qemu_get_be32(f
);
1565 dt
->limit
= qemu_get_be32(f
);
1566 dt
->flags
= qemu_get_be32(f
);
1569 void cpu_save(QEMUFile
*f
, void *opaque
)
1571 CPUState
*env
= opaque
;
1572 uint16_t fptag
, fpus
, fpuc
;
1576 for(i
= 0; i
< 8; i
++)
1577 qemu_put_be32s(f
, &env
->regs
[i
]);
1578 qemu_put_be32s(f
, &env
->eip
);
1579 qemu_put_be32s(f
, &env
->eflags
);
1580 qemu_put_be32s(f
, &env
->eflags
);
1581 hflags
= env
->hflags
; /* XXX: suppress most of the redundant hflags */
1582 qemu_put_be32s(f
, &hflags
);
1586 fpus
= (env
->fpus
& ~0x3800) | (env
->fpstt
& 0x7) << 11;
1588 for (i
=7; i
>=0; i
--) {
1590 if (env
->fptags
[i
]) {
1595 qemu_put_be16s(f
, &fpuc
);
1596 qemu_put_be16s(f
, &fpus
);
1597 qemu_put_be16s(f
, &fptag
);
1599 for(i
= 0; i
< 8; i
++) {
1602 cpu_get_fp80(&mant
, &exp
, env
->fpregs
[i
]);
1603 qemu_put_be64(f
, mant
);
1604 qemu_put_be16(f
, exp
);
1607 for(i
= 0; i
< 6; i
++)
1608 cpu_put_seg(f
, &env
->segs
[i
]);
1609 cpu_put_seg(f
, &env
->ldt
);
1610 cpu_put_seg(f
, &env
->tr
);
1611 cpu_put_seg(f
, &env
->gdt
);
1612 cpu_put_seg(f
, &env
->idt
);
1614 qemu_put_be32s(f
, &env
->sysenter_cs
);
1615 qemu_put_be32s(f
, &env
->sysenter_esp
);
1616 qemu_put_be32s(f
, &env
->sysenter_eip
);
1618 qemu_put_be32s(f
, &env
->cr
[0]);
1619 qemu_put_be32s(f
, &env
->cr
[2]);
1620 qemu_put_be32s(f
, &env
->cr
[3]);
1621 qemu_put_be32s(f
, &env
->cr
[4]);
1623 for(i
= 0; i
< 8; i
++)
1624 qemu_put_be32s(f
, &env
->dr
[i
]);
1627 qemu_put_be32s(f
, &env
->a20_mask
);
1630 int cpu_load(QEMUFile
*f
, void *opaque
, int version_id
)
1632 CPUState
*env
= opaque
;
1635 uint16_t fpus
, fpuc
, fptag
;
1637 if (version_id
!= 1)
1639 for(i
= 0; i
< 8; i
++)
1640 qemu_get_be32s(f
, &env
->regs
[i
]);
1641 qemu_get_be32s(f
, &env
->eip
);
1642 qemu_get_be32s(f
, &env
->eflags
);
1643 qemu_get_be32s(f
, &env
->eflags
);
1644 qemu_get_be32s(f
, &hflags
);
1646 qemu_get_be16s(f
, &fpuc
);
1647 qemu_get_be16s(f
, &fpus
);
1648 qemu_get_be16s(f
, &fptag
);
1650 for(i
= 0; i
< 8; i
++) {
1653 mant
= qemu_get_be64(f
);
1654 exp
= qemu_get_be16(f
);
1655 env
->fpregs
[i
] = cpu_set_fp80(mant
, exp
);
1659 env
->fpstt
= (fpus
>> 11) & 7;
1660 env
->fpus
= fpus
& ~0x3800;
1661 for(i
= 0; i
< 8; i
++) {
1662 env
->fptags
[i
] = ((fptag
& 3) == 3);
1666 for(i
= 0; i
< 6; i
++)
1667 cpu_get_seg(f
, &env
->segs
[i
]);
1668 cpu_get_seg(f
, &env
->ldt
);
1669 cpu_get_seg(f
, &env
->tr
);
1670 cpu_get_seg(f
, &env
->gdt
);
1671 cpu_get_seg(f
, &env
->idt
);
1673 qemu_get_be32s(f
, &env
->sysenter_cs
);
1674 qemu_get_be32s(f
, &env
->sysenter_esp
);
1675 qemu_get_be32s(f
, &env
->sysenter_eip
);
1677 qemu_get_be32s(f
, &env
->cr
[0]);
1678 qemu_get_be32s(f
, &env
->cr
[2]);
1679 qemu_get_be32s(f
, &env
->cr
[3]);
1680 qemu_get_be32s(f
, &env
->cr
[4]);
1682 for(i
= 0; i
< 8; i
++)
1683 qemu_get_be32s(f
, &env
->dr
[i
]);
1686 qemu_get_be32s(f
, &env
->a20_mask
);
1688 /* XXX: compute hflags from scratch, except for CPL and IIF */
1689 env
->hflags
= hflags
;
1694 #elif defined(TARGET_PPC)
1695 void cpu_save(QEMUFile
*f
, void *opaque
)
1699 int cpu_load(QEMUFile
*f
, void *opaque
, int version_id
)
1705 #warning No CPU save/restore functions
1709 /***********************************************************/
1710 /* ram save/restore */
1712 /* we just avoid storing empty pages */
1713 static void ram_put_page(QEMUFile
*f
, const uint8_t *buf
, int len
)
1718 for(i
= 1; i
< len
; i
++) {
1722 qemu_put_byte(f
, 1);
1723 qemu_put_byte(f
, v
);
1726 qemu_put_byte(f
, 0);
1727 qemu_put_buffer(f
, buf
, len
);
1730 static int ram_get_page(QEMUFile
*f
, uint8_t *buf
, int len
)
1734 v
= qemu_get_byte(f
);
1737 if (qemu_get_buffer(f
, buf
, len
) != len
)
1741 v
= qemu_get_byte(f
);
1742 memset(buf
, v
, len
);
1750 static void ram_save(QEMUFile
*f
, void *opaque
)
1753 qemu_put_be32(f
, phys_ram_size
);
1754 for(i
= 0; i
< phys_ram_size
; i
+= TARGET_PAGE_SIZE
) {
1755 ram_put_page(f
, phys_ram_base
+ i
, TARGET_PAGE_SIZE
);
1759 static int ram_load(QEMUFile
*f
, void *opaque
, int version_id
)
1763 if (version_id
!= 1)
1765 if (qemu_get_be32(f
) != phys_ram_size
)
1767 for(i
= 0; i
< phys_ram_size
; i
+= TARGET_PAGE_SIZE
) {
1768 ret
= ram_get_page(f
, phys_ram_base
+ i
, TARGET_PAGE_SIZE
);
1775 /***********************************************************/
1776 /* main execution loop */
1778 void gui_update(void *opaque
)
1780 display_state
.dpy_refresh(&display_state
);
1781 qemu_mod_timer(gui_timer
, GUI_REFRESH_INTERVAL
+ qemu_get_clock(rt_clock
));
1784 /* XXX: support several handlers */
1785 VMStopHandler
*vm_stop_cb
;
1786 VMStopHandler
*vm_stop_opaque
;
1788 int qemu_add_vm_stop_handler(VMStopHandler
*cb
, void *opaque
)
1791 vm_stop_opaque
= opaque
;
1795 void qemu_del_vm_stop_handler(VMStopHandler
*cb
, void *opaque
)
1808 void vm_stop(int reason
)
1811 cpu_disable_ticks();
1815 vm_stop_cb(vm_stop_opaque
, reason
);
1824 struct pollfd ufds
[MAX_IO_HANDLERS
+ 1], *pf
;
1825 IOHandlerRecord
*ioh
, *ioh_next
;
1830 CPUState
*env
= global_env
;
1834 ret
= cpu_exec(env
);
1835 if (reset_requested
) {
1836 ret
= EXCP_INTERRUPT
;
1839 if (ret
== EXCP_DEBUG
) {
1840 vm_stop(EXCP_DEBUG
);
1842 /* if hlt instruction, we wait until the next IRQ */
1843 /* XXX: use timeout computed from timers */
1844 if (ret
== EXCP_HLT
)
1857 /* poll any events */
1858 /* XXX: separate device handlers from system ones */
1860 for(ioh
= first_io_handler
; ioh
!= NULL
; ioh
= ioh
->next
) {
1861 if (!ioh
->fd_can_read
) {
1864 pf
->events
= POLLIN
;
1868 max_size
= ioh
->fd_can_read(ioh
->opaque
);
1870 if (max_size
> sizeof(buf
))
1871 max_size
= sizeof(buf
);
1873 pf
->events
= POLLIN
;
1880 ioh
->max_size
= max_size
;
1883 ret
= poll(ufds
, pf
- ufds
, timeout
);
1885 /* XXX: better handling of removal */
1886 for(ioh
= first_io_handler
; ioh
!= NULL
; ioh
= ioh_next
) {
1887 ioh_next
= ioh
->next
;
1890 if (pf
->revents
& POLLIN
) {
1891 if (ioh
->max_size
== 0) {
1892 /* just a read event */
1893 ioh
->fd_read(ioh
->opaque
, NULL
, 0);
1895 n
= read(ioh
->fd
, buf
, ioh
->max_size
);
1897 ioh
->fd_read(ioh
->opaque
, buf
, n
);
1898 } else if (errno
!= EAGAIN
) {
1899 ioh
->fd_read(ioh
->opaque
, NULL
, -errno
);
1907 #if defined(CONFIG_SLIRP)
1908 /* XXX: merge with poll() */
1910 fd_set rfds
, wfds
, xfds
;
1918 slirp_select_fill(&nfds
, &rfds
, &wfds
, &xfds
);
1921 ret
= select(nfds
+ 1, &rfds
, &wfds
, &xfds
, &tv
);
1923 slirp_select_poll(&rfds
, &wfds
, &xfds
);
1931 qemu_run_timers(&active_timers
[QEMU_TIMER_VIRTUAL
],
1932 qemu_get_clock(vm_clock
));
1934 if (audio_enabled
) {
1935 /* XXX: add explicit timer */
1939 /* run dma transfers, if any */
1943 /* real time timers */
1944 qemu_run_timers(&active_timers
[QEMU_TIMER_REALTIME
],
1945 qemu_get_clock(rt_clock
));
1947 cpu_disable_ticks();
1953 printf("QEMU PC emulator version " QEMU_VERSION
", Copyright (c) 2003-2004 Fabrice Bellard\n"
1954 "usage: %s [options] [disk_image]\n"
1956 "'disk_image' is a raw hard image image for IDE hard disk 0\n"
1958 "Standard options:\n"
1959 "-fda/-fdb file use 'file' as floppy disk 0/1 image\n"
1960 "-hda/-hdb file use 'file' as IDE hard disk 0/1 image\n"
1961 "-hdc/-hdd file use 'file' as IDE hard disk 2/3 image\n"
1962 "-cdrom file use 'file' as IDE cdrom image (cdrom is ide1 master)\n"
1963 "-boot [a|b|c|d] boot on floppy (a, b), hard disk (c) or CD-ROM (d)\n"
1964 "-snapshot write to temporary files instead of disk image files\n"
1965 "-m megs set virtual RAM size to megs MB [default=%d]\n"
1966 "-nographic disable graphical output and redirect serial I/Os to console\n"
1967 "-enable-audio enable audio support\n"
1968 "-localtime set the real time clock to local time [default=utc]\n"
1970 "Network options:\n"
1971 "-nics n simulate 'n' network cards [default=1]\n"
1972 "-macaddr addr set the mac address of the first interface\n"
1973 "-n script set tap/tun network init script [default=%s]\n"
1974 "-tun-fd fd use this fd as already opened tap/tun interface\n"
1976 "-user-net use user mode network stack [default if no tap/tun script]\n"
1978 "-dummy-net use dummy network stack\n"
1980 "Linux boot specific:\n"
1981 "-kernel bzImage use 'bzImage' as kernel image\n"
1982 "-append cmdline use 'cmdline' as kernel command line\n"
1983 "-initrd file use 'file' as initial ram disk\n"
1985 "Debug/Expert options:\n"
1986 "-S freeze CPU at startup (use 'c' to start execution)\n"
1987 "-s wait gdb connection to port %d\n"
1988 "-p port change gdb connection port\n"
1989 "-d item1,... output log to %s (use -d ? for a list of log items)\n"
1990 "-hdachs c,h,s force hard disk 0 geometry (usually qemu can guess it)\n"
1991 "-L path set the directory for the BIOS and VGA BIOS\n"
1992 #ifdef USE_CODE_COPY
1993 "-no-code-copy disable code copy acceleration\n"
1997 "During emulation, use C-a h to get terminal commands:\n",
1998 #ifdef CONFIG_SOFTMMU
2004 DEFAULT_NETWORK_SCRIPT
,
2005 DEFAULT_GDBSTUB_PORT
,
2008 #ifndef CONFIG_SOFTMMU
2010 "NOTE: this version of QEMU is faster but it needs slightly patched OSes to\n"
2011 "work. Please use the 'qemu' executable to have a more accurate (but slower)\n"
2017 #define HAS_ARG 0x0001
2030 QEMU_OPTION_snapshot
,
2032 QEMU_OPTION_nographic
,
2033 QEMU_OPTION_enable_audio
,
2036 QEMU_OPTION_macaddr
,
2039 QEMU_OPTION_user_net
,
2040 QEMU_OPTION_dummy_net
,
2052 QEMU_OPTION_no_code_copy
,
2055 QEMU_OPTION_localtime
,
2058 typedef struct QEMUOption
{
2064 const QEMUOption qemu_options
[] = {
2065 { "h", 0, QEMU_OPTION_h
},
2067 { "fda", HAS_ARG
, QEMU_OPTION_fda
},
2068 { "fdb", HAS_ARG
, QEMU_OPTION_fdb
},
2069 { "hda", HAS_ARG
, QEMU_OPTION_hda
},
2070 { "hdb", HAS_ARG
, QEMU_OPTION_hdb
},
2071 { "hdc", HAS_ARG
, QEMU_OPTION_hdc
},
2072 { "hdd", HAS_ARG
, QEMU_OPTION_hdd
},
2073 { "cdrom", HAS_ARG
, QEMU_OPTION_cdrom
},
2074 { "boot", HAS_ARG
, QEMU_OPTION_boot
},
2075 { "snapshot", 0, QEMU_OPTION_snapshot
},
2076 { "m", HAS_ARG
, QEMU_OPTION_m
},
2077 { "nographic", 0, QEMU_OPTION_nographic
},
2078 { "enable-audio", 0, QEMU_OPTION_enable_audio
},
2080 { "nics", HAS_ARG
, QEMU_OPTION_nics
},
2081 { "macaddr", HAS_ARG
, QEMU_OPTION_macaddr
},
2082 { "n", HAS_ARG
, QEMU_OPTION_n
},
2083 { "tun-fd", HAS_ARG
, QEMU_OPTION_tun_fd
},
2085 { "user-net", 0, QEMU_OPTION_user_net
},
2087 { "dummy-net", 0, QEMU_OPTION_dummy_net
},
2089 { "kernel", HAS_ARG
, QEMU_OPTION_kernel
},
2090 { "append", HAS_ARG
, QEMU_OPTION_append
},
2091 { "initrd", HAS_ARG
, QEMU_OPTION_initrd
},
2093 { "S", 0, QEMU_OPTION_S
},
2094 { "s", 0, QEMU_OPTION_s
},
2095 { "p", HAS_ARG
, QEMU_OPTION_p
},
2096 { "d", HAS_ARG
, QEMU_OPTION_d
},
2097 { "hdachs", HAS_ARG
, QEMU_OPTION_hdachs
},
2098 { "L", HAS_ARG
, QEMU_OPTION_L
},
2099 { "no-code-copy", 0, QEMU_OPTION_no_code_copy
},
2101 /* temporary options */
2102 { "pci", 0, QEMU_OPTION_pci
},
2104 { "prep", 0, QEMU_OPTION_prep
},
2106 { "localtime", 0, QEMU_OPTION_localtime
},
2110 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2112 /* this stack is only used during signal handling */
2113 #define SIGNAL_STACK_SIZE 32768
2115 static uint8_t *signal_stack
;
2119 #define NET_IF_TUN 0
2120 #define NET_IF_USER 1
2121 #define NET_IF_DUMMY 2
2123 int main(int argc
, char **argv
)
2125 #ifdef CONFIG_GDBSTUB
2126 int use_gdbstub
, gdbstub_port
;
2129 int snapshot
, linux_boot
;
2131 const char *initrd_filename
;
2132 const char *hd_filename
[MAX_DISKS
], *fd_filename
[MAX_FD
];
2133 const char *kernel_filename
, *kernel_cmdline
;
2134 DisplayState
*ds
= &display_state
;
2135 int cyls
, heads
, secs
;
2136 int start_emulation
= 1;
2138 int net_if_type
, nb_tun_fds
, tun_fds
[MAX_NICS
];
2140 const char *r
, *optarg
;
2142 #if !defined(CONFIG_SOFTMMU)
2143 /* we never want that malloc() uses mmap() */
2144 mallopt(M_MMAP_THRESHOLD
, 4096 * 1024);
2146 initrd_filename
= NULL
;
2147 for(i
= 0; i
< MAX_FD
; i
++)
2148 fd_filename
[i
] = NULL
;
2149 for(i
= 0; i
< MAX_DISKS
; i
++)
2150 hd_filename
[i
] = NULL
;
2151 ram_size
= DEFAULT_RAM_SIZE
* 1024 * 1024;
2152 vga_ram_size
= VGA_RAM_SIZE
;
2153 bios_size
= BIOS_SIZE
;
2154 pstrcpy(network_script
, sizeof(network_script
), DEFAULT_NETWORK_SCRIPT
);
2155 #ifdef CONFIG_GDBSTUB
2157 gdbstub_port
= DEFAULT_GDBSTUB_PORT
;
2161 kernel_filename
= NULL
;
2162 kernel_cmdline
= "";
2164 cyls
= heads
= secs
= 0;
2169 /* default mac address of the first network interface */
2183 hd_filename
[0] = argv
[optind
++];
2185 const QEMUOption
*popt
;
2188 popt
= qemu_options
;
2191 fprintf(stderr
, "%s: invalid option -- '%s'\n",
2195 if (!strcmp(popt
->name
, r
+ 1))
2199 if (popt
->flags
& HAS_ARG
) {
2200 if (optind
>= argc
) {
2201 fprintf(stderr
, "%s: option '%s' requires an argument\n",
2205 optarg
= argv
[optind
++];
2210 switch(popt
->index
) {
2211 case QEMU_OPTION_initrd
:
2212 initrd_filename
= optarg
;
2214 case QEMU_OPTION_hda
:
2215 hd_filename
[0] = optarg
;
2217 case QEMU_OPTION_hdb
:
2218 hd_filename
[1] = optarg
;
2220 case QEMU_OPTION_snapshot
:
2223 case QEMU_OPTION_hdachs
:
2227 cyls
= strtol(p
, (char **)&p
, 0);
2231 heads
= strtol(p
, (char **)&p
, 0);
2235 secs
= strtol(p
, (char **)&p
, 0);
2242 case QEMU_OPTION_nographic
:
2245 case QEMU_OPTION_kernel
:
2246 kernel_filename
= optarg
;
2248 case QEMU_OPTION_append
:
2249 kernel_cmdline
= optarg
;
2251 case QEMU_OPTION_tun_fd
:
2255 net_if_type
= NET_IF_TUN
;
2256 if (nb_tun_fds
< MAX_NICS
) {
2257 fd
= strtol(optarg
, (char **)&p
, 0);
2259 fprintf(stderr
, "qemu: invalid fd for network interface %d\n", nb_tun_fds
);
2262 tun_fds
[nb_tun_fds
++] = fd
;
2266 case QEMU_OPTION_hdc
:
2267 hd_filename
[2] = optarg
;
2270 case QEMU_OPTION_hdd
:
2271 hd_filename
[3] = optarg
;
2273 case QEMU_OPTION_cdrom
:
2274 hd_filename
[2] = optarg
;
2277 case QEMU_OPTION_boot
:
2278 boot_device
= optarg
[0];
2279 if (boot_device
!= 'a' && boot_device
!= 'b' &&
2280 boot_device
!= 'c' && boot_device
!= 'd') {
2281 fprintf(stderr
, "qemu: invalid boot device '%c'\n", boot_device
);
2285 case QEMU_OPTION_fda
:
2286 fd_filename
[0] = optarg
;
2288 case QEMU_OPTION_fdb
:
2289 fd_filename
[1] = optarg
;
2291 case QEMU_OPTION_no_code_copy
:
2292 code_copy_enabled
= 0;
2294 case QEMU_OPTION_nics
:
2295 nb_nics
= atoi(optarg
);
2296 if (nb_nics
< 0 || nb_nics
> MAX_NICS
) {
2297 fprintf(stderr
, "qemu: invalid number of network interfaces\n");
2301 case QEMU_OPTION_macaddr
:
2306 for(i
= 0; i
< 6; i
++) {
2307 macaddr
[i
] = strtol(p
, (char **)&p
, 16);
2314 fprintf(stderr
, "qemu: invalid syntax for ethernet address\n");
2322 case QEMU_OPTION_user_net
:
2323 net_if_type
= NET_IF_USER
;
2325 case QEMU_OPTION_dummy_net
:
2326 net_if_type
= NET_IF_DUMMY
;
2328 case QEMU_OPTION_enable_audio
:
2335 ram_size
= atoi(optarg
) * 1024 * 1024;
2338 if (ram_size
> PHYS_RAM_MAX_SIZE
) {
2339 fprintf(stderr
, "qemu: at most %d MB RAM can be simulated\n",
2340 PHYS_RAM_MAX_SIZE
/ (1024 * 1024));
2349 mask
= cpu_str_to_log_mask(optarg
);
2351 printf("Log items (comma separated):\n");
2352 for(item
= cpu_log_items
; item
->mask
!= 0; item
++) {
2353 printf("%-10s %s\n", item
->name
, item
->help
);
2361 pstrcpy(network_script
, sizeof(network_script
), optarg
);
2363 #ifdef CONFIG_GDBSTUB
2368 gdbstub_port
= atoi(optarg
);
2375 start_emulation
= 0;
2377 case QEMU_OPTION_pci
:
2380 case QEMU_OPTION_prep
:
2383 case QEMU_OPTION_localtime
:
2390 linux_boot
= (kernel_filename
!= NULL
);
2392 if (!linux_boot
&& hd_filename
[0] == '\0' && hd_filename
[2] == '\0' &&
2393 fd_filename
[0] == '\0')
2396 /* boot to cd by default if no hard disk */
2397 if (hd_filename
[0] == '\0' && boot_device
== 'c') {
2398 if (fd_filename
[0] != '\0')
2404 #if !defined(CONFIG_SOFTMMU)
2405 /* must avoid mmap() usage of glibc by setting a buffer "by hand" */
2407 static uint8_t stdout_buf
[4096];
2408 setvbuf(stdout
, stdout_buf
, _IOLBF
, sizeof(stdout_buf
));
2411 setvbuf(stdout
, NULL
, _IOLBF
, 0);
2414 /* init host network redirectors */
2415 if (net_if_type
== -1) {
2416 net_if_type
= NET_IF_TUN
;
2417 #if defined(CONFIG_SLIRP)
2418 if (access(network_script
, R_OK
) < 0) {
2419 net_if_type
= NET_IF_USER
;
2424 for(i
= 0; i
< nb_nics
; i
++) {
2425 NetDriverState
*nd
= &nd_table
[i
];
2427 /* init virtual mac address */
2428 nd
->macaddr
[0] = macaddr
[0];
2429 nd
->macaddr
[1] = macaddr
[1];
2430 nd
->macaddr
[2] = macaddr
[2];
2431 nd
->macaddr
[3] = macaddr
[3];
2432 nd
->macaddr
[4] = macaddr
[4];
2433 nd
->macaddr
[5] = macaddr
[5] + i
;
2434 switch(net_if_type
) {
2435 #if defined(CONFIG_SLIRP)
2440 #if !defined(_WIN32)
2442 if (i
< nb_tun_fds
) {
2443 net_fd_init(nd
, tun_fds
[i
]);
2445 if (net_tun_init(nd
) < 0)
2457 /* init the memory */
2458 phys_ram_size
= ram_size
+ vga_ram_size
+ bios_size
;
2460 #ifdef CONFIG_SOFTMMU
2462 /* mallocs are always aligned on BSD. */
2463 phys_ram_base
= malloc(phys_ram_size
);
2465 phys_ram_base
= memalign(TARGET_PAGE_SIZE
, phys_ram_size
);
2467 if (!phys_ram_base
) {
2468 fprintf(stderr
, "Could not allocate physical memory\n");
2472 /* as we must map the same page at several addresses, we must use
2477 tmpdir
= getenv("QEMU_TMPDIR");
2480 snprintf(phys_ram_file
, sizeof(phys_ram_file
), "%s/vlXXXXXX", tmpdir
);
2481 if (mkstemp(phys_ram_file
) < 0) {
2482 fprintf(stderr
, "Could not create temporary memory file '%s'\n",
2486 phys_ram_fd
= open(phys_ram_file
, O_CREAT
| O_TRUNC
| O_RDWR
, 0600);
2487 if (phys_ram_fd
< 0) {
2488 fprintf(stderr
, "Could not open temporary memory file '%s'\n",
2492 ftruncate(phys_ram_fd
, phys_ram_size
);
2493 unlink(phys_ram_file
);
2494 phys_ram_base
= mmap(get_mmap_addr(phys_ram_size
),
2496 PROT_WRITE
| PROT_READ
, MAP_SHARED
| MAP_FIXED
,
2498 if (phys_ram_base
== MAP_FAILED
) {
2499 fprintf(stderr
, "Could not map physical memory\n");
2505 /* we always create the cdrom drive, even if no disk is there */
2507 bs_table
[2] = bdrv_new("cdrom");
2508 bdrv_set_type_hint(bs_table
[2], BDRV_TYPE_CDROM
);
2511 /* open the virtual block devices */
2512 for(i
= 0; i
< MAX_DISKS
; i
++) {
2513 if (hd_filename
[i
]) {
2516 snprintf(buf
, sizeof(buf
), "hd%c", i
+ 'a');
2517 bs_table
[i
] = bdrv_new(buf
);
2519 if (bdrv_open(bs_table
[i
], hd_filename
[i
], snapshot
) < 0) {
2520 fprintf(stderr
, "qemu: could not open hard disk image '%s\n",
2524 if (i
== 0 && cyls
!= 0)
2525 bdrv_set_geometry_hint(bs_table
[i
], cyls
, heads
, secs
);
2529 /* we always create at least one floppy disk */
2530 fd_table
[0] = bdrv_new("fda");
2531 bdrv_set_type_hint(fd_table
[0], BDRV_TYPE_FLOPPY
);
2533 for(i
= 0; i
< MAX_FD
; i
++) {
2534 if (fd_filename
[i
]) {
2537 snprintf(buf
, sizeof(buf
), "fd%c", i
+ 'a');
2538 fd_table
[i
] = bdrv_new(buf
);
2539 bdrv_set_type_hint(fd_table
[i
], BDRV_TYPE_FLOPPY
);
2541 if (fd_filename
[i
] != '\0') {
2542 if (bdrv_open(fd_table
[i
], fd_filename
[i
], snapshot
) < 0) {
2543 fprintf(stderr
, "qemu: could not open floppy disk image '%s'\n",
2551 /* init CPU state */
2554 cpu_single_env
= env
;
2556 register_savevm("timer", 0, 1, timer_save
, timer_load
, env
);
2557 register_savevm("cpu", 0, 1, cpu_save
, cpu_load
, env
);
2558 register_savevm("ram", 0, 1, ram_save
, ram_load
, NULL
);
2561 cpu_calibrate_ticks();
2565 dumb_display_init(ds
);
2568 sdl_display_init(ds
);
2570 dumb_display_init(ds
);
2574 /* setup cpu signal handlers for MMU / self modifying code handling */
2575 #if !defined(CONFIG_SOFTMMU)
2577 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2580 signal_stack
= memalign(16, SIGNAL_STACK_SIZE
);
2581 stk
.ss_sp
= signal_stack
;
2582 stk
.ss_size
= SIGNAL_STACK_SIZE
;
2585 if (sigaltstack(&stk
, NULL
) < 0) {
2586 perror("sigaltstack");
2592 struct sigaction act
;
2594 sigfillset(&act
.sa_mask
);
2595 act
.sa_flags
= SA_SIGINFO
;
2596 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2597 act
.sa_flags
|= SA_ONSTACK
;
2599 act
.sa_sigaction
= host_segv_handler
;
2600 sigaction(SIGSEGV
, &act
, NULL
);
2601 sigaction(SIGBUS
, &act
, NULL
);
2602 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2603 sigaction(SIGFPE
, &act
, NULL
);
2610 struct sigaction act
;
2611 sigfillset(&act
.sa_mask
);
2613 act
.sa_handler
= SIG_IGN
;
2614 sigaction(SIGPIPE
, &act
, NULL
);
2619 #if defined(TARGET_I386)
2620 pc_init(ram_size
, vga_ram_size
, boot_device
,
2621 ds
, fd_filename
, snapshot
,
2622 kernel_filename
, kernel_cmdline
, initrd_filename
);
2623 #elif defined(TARGET_PPC)
2624 ppc_init(ram_size
, vga_ram_size
, boot_device
,
2625 ds
, fd_filename
, snapshot
,
2626 kernel_filename
, kernel_cmdline
, initrd_filename
);
2629 /* launched after the device init so that it can display or not a
2633 gui_timer
= qemu_new_timer(rt_clock
, gui_update
, NULL
);
2634 qemu_mod_timer(gui_timer
, qemu_get_clock(rt_clock
));
2636 #ifdef CONFIG_GDBSTUB
2638 if (gdbserver_start(gdbstub_port
) < 0) {
2639 fprintf(stderr
, "Could not open gdbserver socket on port %d\n",
2643 printf("Waiting gdb connection on port %d\n", gdbstub_port
);
2647 if (start_emulation
)