savevm.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for CONFIG_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #if defined(__NetBSD__)
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef CONFIG_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69 #endif
  70 #endif
  71 #endif
  72
  73 #ifdef _WIN32
  74 #include <windows.h>
  75 #include <malloc.h>
  76 #include <sys/timeb.h>
  77 #include <mmsystem.h>
  78 #define getopt_long_only getopt_long
  79 #define memalign(align, size) malloc(size)
  80 #endif
  81
  82 #include "qemu-common.h"
  83 #include "hw/hw.h"
  84 #include "net.h"
  85 #include "monitor.h"
  86 #include "sysemu.h"
  87 #include "qemu-timer.h"
  88 #include "qemu-char.h"
  89 #include "block.h"
  90 #include "audio/audio.h"
  91 #include "migration.h"
  92 #include "qemu_socket.h"
  93
  94 /* point to the block driver where the snapshots are managed */
  95 static BlockDriverState *bs_snapshots;
  96
  97 #define SELF_ANNOUNCE_ROUNDS 5
  98 #define ETH_P_EXPERIMENTAL 0x01F1 /* just a number */
  99 //#define ETH_P_EXPERIMENTAL 0x0012 /* make it the size of the packet */
 100 #define EXPERIMENTAL_MAGIC 0xf1f23f4f
 101
 102 static int announce_self_create(uint8_t *buf,
 103                                 uint8_t *mac_addr)
 104 {
 105     uint32_t magic = EXPERIMENTAL_MAGIC;
 106     uint16_t proto = htons(ETH_P_EXPERIMENTAL);
 107
 108     /* FIXME: should we send a different packet (arp/rarp/ping)? */
 109
 110     memset(buf, 0, 64);
 111     memset(buf, 0xff, 6);         /* h_dst */
 112     memcpy(buf + 6, mac_addr, 6); /* h_src */
 113     memcpy(buf + 12, &proto, 2);  /* h_proto */
 114     memcpy(buf + 14, &magic, 4);  /* magic */
 115
 116     return 64; /* len */
 117 }
 118
 119 static void qemu_announce_self_once(void *opaque)
 120 {
 121     int i, len;
 122     VLANState *vlan;
 123     VLANClientState *vc;
 124     uint8_t buf[256];
 125     static int count = SELF_ANNOUNCE_ROUNDS;
 126     QEMUTimer *timer = *(QEMUTimer **)opaque;
 127
 128     for (i = 0; i < MAX_NICS; i++) {
 129         if (!nd_table[i].used)
 130             continue;
 131         len = announce_self_create(buf, nd_table[i].macaddr);
 132         vlan = nd_table[i].vlan;
 133         for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
 134             vc->receive(vc, buf, len);
 135         }
 136     }
 137     if (count--) {
 138             qemu_mod_timer(timer, qemu_get_clock(rt_clock) + 100);
 139     } else {
 140             qemu_del_timer(timer);
 141             qemu_free_timer(timer);
 142     }
 143 }
 144
 145 void qemu_announce_self(void)
 146 {
 147         static QEMUTimer *timer;
 148         timer = qemu_new_timer(rt_clock, qemu_announce_self_once, &timer);
 149         qemu_announce_self_once(&timer);
 150 }
 151
 152 /***********************************************************/
 153 /* savevm/loadvm support */
 154
 155 #define IO_BUF_SIZE 32768
 156
 157 struct QEMUFile {
 158     QEMUFilePutBufferFunc *put_buffer;
 159     QEMUFileGetBufferFunc *get_buffer;
 160     QEMUFileCloseFunc *close;
 161     QEMUFileRateLimit *rate_limit;
 162     QEMUFileSetRateLimit *set_rate_limit;
 163     void *opaque;
 164     int is_write;
 165
 166     int64_t buf_offset; /* start of buffer when writing, end of buffer
 167                            when reading */
 168     int buf_index;
 169     int buf_size; /* 0 when writing */
 170     uint8_t buf[IO_BUF_SIZE];
 171
 172     int has_error;
 173 };
 174
 175 typedef struct QEMUFileStdio
 176 {
 177     FILE *stdio_file;
 178     QEMUFile *file;
 179 } QEMUFileStdio;
 180
 181 typedef struct QEMUFileSocket
 182 {
 183     int fd;
 184     QEMUFile *file;
 185 } QEMUFileSocket;
 186
 187 static int socket_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 188 {
 189     QEMUFileSocket *s = opaque;
 190     ssize_t len;
 191
 192     do {
 193         len = recv(s->fd, (void *)buf, size, 0);
 194     } while (len == -1 && socket_error() == EINTR);
 195
 196     if (len == -1)
 197         len = -socket_error();
 198
 199     return len;
 200 }
 201
 202 static int socket_close(void *opaque)
 203 {
 204     QEMUFileSocket *s = opaque;
 205     qemu_free(s);
 206     return 0;
 207 }
 208
 209 static int stdio_put_buffer(void *opaque, const uint8_t *buf, int64_t pos, int size)
 210 {
 211     QEMUFileStdio *s = opaque;
 212     return fwrite(buf, 1, size, s->stdio_file);
 213 }
 214
 215 static int stdio_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 216 {
 217     QEMUFileStdio *s = opaque;
 218     FILE *fp = s->stdio_file;
 219     int bytes;
 220
 221     do {
 222         clearerr(fp);
 223         bytes = fread(buf, 1, size, fp);
 224     } while ((bytes == 0) && ferror(fp) && (errno == EINTR));
 225     return bytes;
 226 }
 227
 228 static int stdio_pclose(void *opaque)
 229 {
 230     QEMUFileStdio *s = opaque;
 231     pclose(s->stdio_file);
 232     qemu_free(s);
 233     return 0;
 234 }
 235
 236 static int stdio_fclose(void *opaque)
 237 {
 238     QEMUFileStdio *s = opaque;
 239     fclose(s->stdio_file);
 240     qemu_free(s);
 241     return 0;
 242 }
 243
 244 QEMUFile *qemu_popen(FILE *stdio_file, const char *mode)
 245 {
 246     QEMUFileStdio *s;
 247
 248     if (stdio_file == NULL || mode == NULL || (mode[0] != 'r' && mode[0] != 'w') || mode[1] != 0) {
 249         fprintf(stderr, "qemu_popen: Argument validity check failed\n");
 250         return NULL;
 251     }
 252
 253     s = qemu_mallocz(sizeof(QEMUFileStdio));
 254
 255     s->stdio_file = stdio_file;
 256
 257     if(mode[0] == 'r') {
 258         s->file = qemu_fopen_ops(s, NULL, stdio_get_buffer, stdio_pclose, NULL, NULL);
 259     } else {
 260         s->file = qemu_fopen_ops(s, stdio_put_buffer, NULL, stdio_pclose, NULL, NULL);
 261     }
 262     return s->file;
 263 }
 264
 265 QEMUFile *qemu_popen_cmd(const char *command, const char *mode)
 266 {
 267     FILE *popen_file;
 268
 269     popen_file = popen(command, mode);
 270     if(popen_file == NULL) {
 271         return NULL;
 272     }
 273
 274     return qemu_popen(popen_file, mode);
 275 }
 276
 277 int qemu_stdio_fd(QEMUFile *f)
 278 {
 279     QEMUFileStdio *p;
 280     int fd;
 281
 282     p = (QEMUFileStdio *)f->opaque;
 283     fd = fileno(p->stdio_file);
 284
 285     return fd;
 286 }
 287
 288 QEMUFile *qemu_fdopen(int fd, const char *mode)
 289 {
 290     QEMUFileStdio *s;
 291
 292     if (mode == NULL ||
 293         (mode[0] != 'r' && mode[0] != 'w') ||
 294         mode[1] != 'b' || mode[2] != 0) {
 295         fprintf(stderr, "qemu_fdopen: Argument validity check failed\n");
 296         return NULL;
 297     }
 298
 299     s = qemu_mallocz(sizeof(QEMUFileStdio));
 300     s->stdio_file = fdopen(fd, mode);
 301     if (!s->stdio_file)
 302         goto fail;
 303
 304     if(mode[0] == 'r') {
 305         s->file = qemu_fopen_ops(s, NULL, stdio_get_buffer, stdio_fclose, NULL, NULL);
 306     } else {
 307         s->file = qemu_fopen_ops(s, stdio_put_buffer, NULL, stdio_fclose, NULL, NULL);
 308     }
 309     return s->file;
 310
 311 fail:
 312     qemu_free(s);
 313     return NULL;
 314 }
 315
 316 QEMUFile *qemu_fopen_socket(int fd)
 317 {
 318     QEMUFileSocket *s = qemu_mallocz(sizeof(QEMUFileSocket));
 319
 320     s->fd = fd;
 321     s->file = qemu_fopen_ops(s, NULL, socket_get_buffer, socket_close, NULL, NULL);
 322     return s->file;
 323 }
 324
 325 static int file_put_buffer(void *opaque, const uint8_t *buf,
 326                             int64_t pos, int size)
 327 {
 328     QEMUFileStdio *s = opaque;
 329     fseek(s->stdio_file, pos, SEEK_SET);
 330     fwrite(buf, 1, size, s->stdio_file);
 331     return size;
 332 }
 333
 334 static int file_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 335 {
 336     QEMUFileStdio *s = opaque;
 337     fseek(s->stdio_file, pos, SEEK_SET);
 338     return fread(buf, 1, size, s->stdio_file);
 339 }
 340
 341 QEMUFile *qemu_fopen(const char *filename, const char *mode)
 342 {
 343     QEMUFileStdio *s;
 344
 345     if (mode == NULL ||
 346         (mode[0] != 'r' && mode[0] != 'w') ||
 347         mode[1] != 'b' || mode[2] != 0) {
 348         fprintf(stderr, "qemu_fdopen: Argument validity check failed\n");
 349         return NULL;
 350     }
 351
 352     s = qemu_mallocz(sizeof(QEMUFileStdio));
 353
 354     s->stdio_file = fopen(filename, mode);
 355     if (!s->stdio_file)
 356         goto fail;
 357
 358     if(mode[0] == 'w') {
 359         s->file = qemu_fopen_ops(s, file_put_buffer, NULL, stdio_fclose, NULL, NULL);
 360     } else {
 361         s->file = qemu_fopen_ops(s, NULL, file_get_buffer, stdio_fclose, NULL, NULL);
 362     }
 363     return s->file;
 364 fail:
 365     qemu_free(s);
 366     return NULL;
 367 }
 368
 369 static int block_put_buffer(void *opaque, const uint8_t *buf,
 370                            int64_t pos, int size)
 371 {
 372     bdrv_save_vmstate(opaque, buf, pos, size);
 373     return size;
 374 }
 375
 376 static int block_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 377 {
 378     return bdrv_load_vmstate(opaque, buf, pos, size);
 379 }
 380
 381 static int bdrv_fclose(void *opaque)
 382 {
 383     return 0;
 384 }
 385
 386 static QEMUFile *qemu_fopen_bdrv(BlockDriverState *bs, int is_writable)
 387 {
 388     if (is_writable)
 389         return qemu_fopen_ops(bs, block_put_buffer, NULL, bdrv_fclose, NULL, NULL);
 390     return qemu_fopen_ops(bs, NULL, block_get_buffer, bdrv_fclose, NULL, NULL);
 391 }
 392
 393 QEMUFile *qemu_fopen_ops(void *opaque, QEMUFilePutBufferFunc *put_buffer,
 394                          QEMUFileGetBufferFunc *get_buffer,
 395                          QEMUFileCloseFunc *close,
 396                          QEMUFileRateLimit *rate_limit,
 397                          QEMUFileSetRateLimit *set_rate_limit)
 398 {
 399     QEMUFile *f;
 400
 401     f = qemu_mallocz(sizeof(QEMUFile));
 402
 403     f->opaque = opaque;
 404     f->put_buffer = put_buffer;
 405     f->get_buffer = get_buffer;
 406     f->close = close;
 407     f->rate_limit = rate_limit;
 408     f->set_rate_limit = set_rate_limit;
 409     f->is_write = 0;
 410
 411     return f;
 412 }
 413
 414 int qemu_file_has_error(QEMUFile *f)
 415 {
 416     return f->has_error;
 417 }
 418
 419 void qemu_file_set_error(QEMUFile *f)
 420 {
 421     f->has_error = 1;
 422 }
 423
 424 void qemu_fflush(QEMUFile *f)
 425 {
 426     if (!f->put_buffer)
 427         return;
 428
 429     if (f->is_write && f->buf_index > 0) {
 430         int len;
 431
 432         len = f->put_buffer(f->opaque, f->buf, f->buf_offset, f->buf_index);
 433         if (len > 0)
 434             f->buf_offset += f->buf_index;
 435         else
 436             f->has_error = 1;
 437         f->buf_index = 0;
 438     }
 439 }
 440
 441 static void qemu_fill_buffer(QEMUFile *f)
 442 {
 443     int len;
 444
 445     if (!f->get_buffer)
 446         return;
 447
 448     if (f->is_write)
 449         abort();
 450
 451     len = f->get_buffer(f->opaque, f->buf, f->buf_offset, IO_BUF_SIZE);
 452     if (len > 0) {
 453         f->buf_index = 0;
 454         f->buf_size = len;
 455         f->buf_offset += len;
 456     } else if (len != -EAGAIN)
 457         f->has_error = 1;
 458 }
 459
 460 int qemu_fclose(QEMUFile *f)
 461 {
 462     int ret = 0;
 463     qemu_fflush(f);
 464     if (f->close)
 465         ret = f->close(f->opaque);
 466     qemu_free(f);
 467     return ret;
 468 }
 469
 470 void qemu_file_put_notify(QEMUFile *f)
 471 {
 472     f->put_buffer(f->opaque, NULL, 0, 0);
 473 }
 474
 475 void qemu_put_buffer(QEMUFile *f, const uint8_t *buf, int size)
 476 {
 477     int l;
 478
 479     if (!f->has_error && f->is_write == 0 && f->buf_index > 0) {
 480         fprintf(stderr,
 481                 "Attempted to write to buffer while read buffer is not empty\n");
 482         abort();
 483     }
 484
 485     while (!f->has_error && size > 0) {
 486         l = IO_BUF_SIZE - f->buf_index;
 487         if (l > size)
 488             l = size;
 489         memcpy(f->buf + f->buf_index, buf, l);
 490         f->is_write = 1;
 491         f->buf_index += l;
 492         buf += l;
 493         size -= l;
 494         if (f->buf_index >= IO_BUF_SIZE)
 495             qemu_fflush(f);
 496     }
 497 }
 498
 499 void qemu_put_byte(QEMUFile *f, int v)
 500 {
 501     if (!f->has_error && f->is_write == 0 && f->buf_index > 0) {
 502         fprintf(stderr,
 503                 "Attempted to write to buffer while read buffer is not empty\n");
 504         abort();
 505     }
 506
 507     f->buf[f->buf_index++] = v;
 508     f->is_write = 1;
 509     if (f->buf_index >= IO_BUF_SIZE)
 510         qemu_fflush(f);
 511 }
 512
 513 int qemu_get_buffer(QEMUFile *f, uint8_t *buf, int size1)
 514 {
 515     int size, l;
 516
 517     if (f->is_write)
 518         abort();
 519
 520     size = size1;
 521     while (size > 0) {
 522         l = f->buf_size - f->buf_index;
 523         if (l == 0) {
 524             qemu_fill_buffer(f);
 525             l = f->buf_size - f->buf_index;
 526             if (l == 0)
 527                 break;
 528         }
 529         if (l > size)
 530             l = size;
 531         memcpy(buf, f->buf + f->buf_index, l);
 532         f->buf_index += l;
 533         buf += l;
 534         size -= l;
 535     }
 536     return size1 - size;
 537 }
 538
 539 int qemu_get_byte(QEMUFile *f)
 540 {
 541     if (f->is_write)
 542         abort();
 543
 544     if (f->buf_index >= f->buf_size) {
 545         qemu_fill_buffer(f);
 546         if (f->buf_index >= f->buf_size)
 547             return 0;
 548     }
 549     return f->buf[f->buf_index++];
 550 }
 551
 552 int64_t qemu_ftell(QEMUFile *f)
 553 {
 554     return f->buf_offset - f->buf_size + f->buf_index;
 555 }
 556
 557 int64_t qemu_fseek(QEMUFile *f, int64_t pos, int whence)
 558 {
 559     if (whence == SEEK_SET) {
 560         /* nothing to do */
 561     } else if (whence == SEEK_CUR) {
 562         pos += qemu_ftell(f);
 563     } else {
 564         /* SEEK_END not supported */
 565         return -1;
 566     }
 567     if (f->put_buffer) {
 568         qemu_fflush(f);
 569         f->buf_offset = pos;
 570     } else {
 571         f->buf_offset = pos;
 572         f->buf_index = 0;
 573         f->buf_size = 0;
 574     }
 575     return pos;
 576 }
 577
 578 int qemu_file_rate_limit(QEMUFile *f)
 579 {
 580     if (f->rate_limit)
 581         return f->rate_limit(f->opaque);
 582
 583     return 0;
 584 }
 585
 586 size_t qemu_file_set_rate_limit(QEMUFile *f, size_t new_rate)
 587 {
 588     /* any failed or completed migration keeps its state to allow probing of
 589      * migration data, but has no associated file anymore */
 590     if (f && f->set_rate_limit)
 591         return f->set_rate_limit(f->opaque, new_rate);
 592
 593     return 0;
 594 }
 595
 596 void qemu_put_be16(QEMUFile *f, unsigned int v)
 597 {
 598     qemu_put_byte(f, v >> 8);
 599     qemu_put_byte(f, v);
 600 }
 601
 602 void qemu_put_be32(QEMUFile *f, unsigned int v)
 603 {
 604     qemu_put_byte(f, v >> 24);
 605     qemu_put_byte(f, v >> 16);
 606     qemu_put_byte(f, v >> 8);
 607     qemu_put_byte(f, v);
 608 }
 609
 610 void qemu_put_be64(QEMUFile *f, uint64_t v)
 611 {
 612     qemu_put_be32(f, v >> 32);
 613     qemu_put_be32(f, v);
 614 }
 615
 616 unsigned int qemu_get_be16(QEMUFile *f)
 617 {
 618     unsigned int v;
 619     v = qemu_get_byte(f) << 8;
 620     v |= qemu_get_byte(f);
 621     return v;
 622 }
 623
 624 unsigned int qemu_get_be32(QEMUFile *f)
 625 {
 626     unsigned int v;
 627     v = qemu_get_byte(f) << 24;
 628     v |= qemu_get_byte(f) << 16;
 629     v |= qemu_get_byte(f) << 8;
 630     v |= qemu_get_byte(f);
 631     return v;
 632 }
 633
 634 uint64_t qemu_get_be64(QEMUFile *f)
 635 {
 636     uint64_t v;
 637     v = (uint64_t)qemu_get_be32(f) << 32;
 638     v |= qemu_get_be32(f);
 639     return v;
 640 }
 641
 642 /* 8 bit int */
 643
 644 static int get_int8(QEMUFile *f, void *pv, size_t size)
 645 {
 646     int8_t *v = pv;
 647     qemu_get_s8s(f, v);
 648     return 0;
 649 }
 650
 651 static void put_int8(QEMUFile *f, const void *pv, size_t size)
 652 {
 653     const int8_t *v = pv;
 654     qemu_put_s8s(f, v);
 655 }
 656
 657 const VMStateInfo vmstate_info_int8 = {
 658     .name = "int8",
 659     .get  = get_int8,
 660     .put  = put_int8,
 661 };
 662
 663 /* 16 bit int */
 664
 665 static int get_int16(QEMUFile *f, void *pv, size_t size)
 666 {
 667     int16_t *v = pv;
 668     qemu_get_sbe16s(f, v);
 669     return 0;
 670 }
 671
 672 static void put_int16(QEMUFile *f, const void *pv, size_t size)
 673 {
 674     const int16_t *v = pv;
 675     qemu_put_sbe16s(f, v);
 676 }
 677
 678 const VMStateInfo vmstate_info_int16 = {
 679     .name = "int16",
 680     .get  = get_int16,
 681     .put  = put_int16,
 682 };
 683
 684 /* 32 bit int */
 685
 686 static int get_int32(QEMUFile *f, void *pv, size_t size)
 687 {
 688     int32_t *v = pv;
 689     qemu_get_sbe32s(f, v);
 690     return 0;
 691 }
 692
 693 static void put_int32(QEMUFile *f, const void *pv, size_t size)
 694 {
 695     const int32_t *v = pv;
 696     qemu_put_sbe32s(f, v);
 697 }
 698
 699 const VMStateInfo vmstate_info_int32 = {
 700     .name = "int32",
 701     .get  = get_int32,
 702     .put  = put_int32,
 703 };
 704
 705 /* 32 bit int. See that the received value is the same than the one
 706    in the field */
 707
 708 static int get_int32_equal(QEMUFile *f, void *pv, size_t size)
 709 {
 710     int32_t *v = pv;
 711     int32_t v2;
 712     qemu_get_sbe32s(f, &v2);
 713
 714     if (*v == v2)
 715         return 0;
 716     return -EINVAL;
 717 }
 718
 719 const VMStateInfo vmstate_info_int32_equal = {
 720     .name = "int32 equal",
 721     .get  = get_int32_equal,
 722     .put  = put_int32,
 723 };
 724
 725 /* 32 bit int. See that the received value is the less or the same
 726    than the one in the field */
 727
 728 static int get_int32_le(QEMUFile *f, void *pv, size_t size)
 729 {
 730     int32_t *old = pv;
 731     int32_t new;
 732     qemu_get_sbe32s(f, &new);
 733
 734     if (*old <= new)
 735         return 0;
 736     return -EINVAL;
 737 }
 738
 739 const VMStateInfo vmstate_info_int32_le = {
 740     .name = "int32 equal",
 741     .get  = get_int32_le,
 742     .put  = put_int32,
 743 };
 744
 745 /* 64 bit int */
 746
 747 static int get_int64(QEMUFile *f, void *pv, size_t size)
 748 {
 749     int64_t *v = pv;
 750     qemu_get_sbe64s(f, v);
 751     return 0;
 752 }
 753
 754 static void put_int64(QEMUFile *f, const void *pv, size_t size)
 755 {
 756     const int64_t *v = pv;
 757     qemu_put_sbe64s(f, v);
 758 }
 759
 760 const VMStateInfo vmstate_info_int64 = {
 761     .name = "int64",
 762     .get  = get_int64,
 763     .put  = put_int64,
 764 };
 765
 766 /* 8 bit unsigned int */
 767
 768 static int get_uint8(QEMUFile *f, void *pv, size_t size)
 769 {
 770     uint8_t *v = pv;
 771     qemu_get_8s(f, v);
 772     return 0;
 773 }
 774
 775 static void put_uint8(QEMUFile *f, const void *pv, size_t size)
 776 {
 777     const uint8_t *v = pv;
 778     qemu_put_8s(f, v);
 779 }
 780
 781 const VMStateInfo vmstate_info_uint8 = {
 782     .name = "uint8",
 783     .get  = get_uint8,
 784     .put  = put_uint8,
 785 };
 786
 787 /* 16 bit unsigned int */
 788
 789 static int get_uint16(QEMUFile *f, void *pv, size_t size)
 790 {
 791     uint16_t *v = pv;
 792     qemu_get_be16s(f, v);
 793     return 0;
 794 }
 795
 796 static void put_uint16(QEMUFile *f, const void *pv, size_t size)
 797 {
 798     const uint16_t *v = pv;
 799     qemu_put_be16s(f, v);
 800 }
 801
 802 const VMStateInfo vmstate_info_uint16 = {
 803     .name = "uint16",
 804     .get  = get_uint16,
 805     .put  = put_uint16,
 806 };
 807
 808 /* 32 bit unsigned int */
 809
 810 static int get_uint32(QEMUFile *f, void *pv, size_t size)
 811 {
 812     uint32_t *v = pv;
 813     qemu_get_be32s(f, v);
 814     return 0;
 815 }
 816
 817 static void put_uint32(QEMUFile *f, const void *pv, size_t size)
 818 {
 819     const uint32_t *v = pv;
 820     qemu_put_be32s(f, v);
 821 }
 822
 823 const VMStateInfo vmstate_info_uint32 = {
 824     .name = "uint32",
 825     .get  = get_uint32,
 826     .put  = put_uint32,
 827 };
 828
 829 /* 64 bit unsigned int */
 830
 831 static int get_uint64(QEMUFile *f, void *pv, size_t size)
 832 {
 833     uint64_t *v = pv;
 834     qemu_get_be64s(f, v);
 835     return 0;
 836 }
 837
 838 static void put_uint64(QEMUFile *f, const void *pv, size_t size)
 839 {
 840     const uint64_t *v = pv;
 841     qemu_put_be64s(f, v);
 842 }
 843
 844 const VMStateInfo vmstate_info_uint64 = {
 845     .name = "uint64",
 846     .get  = get_uint64,
 847     .put  = put_uint64,
 848 };
 849
 850 /* timers  */
 851
 852 static int get_timer(QEMUFile *f, void *pv, size_t size)
 853 {
 854     QEMUTimer *v = pv;
 855     qemu_get_timer(f, v);
 856     return 0;
 857 }
 858
 859 static void put_timer(QEMUFile *f, const void *pv, size_t size)
 860 {
 861     QEMUTimer *v = (void *)pv;
 862     qemu_put_timer(f, v);
 863 }
 864
 865 const VMStateInfo vmstate_info_timer = {
 866     .name = "timer",
 867     .get  = get_timer,
 868     .put  = put_timer,
 869 };
 870
 871 /* uint8_t buffers */
 872
 873 static int get_buffer(QEMUFile *f, void *pv, size_t size)
 874 {
 875     uint8_t *v = pv;
 876     qemu_get_buffer(f, v, size);
 877     return 0;
 878 }
 879
 880 static void put_buffer(QEMUFile *f, const void *pv, size_t size)
 881 {
 882     uint8_t *v = (void *)pv;
 883     qemu_put_buffer(f, v, size);
 884 }
 885
 886 const VMStateInfo vmstate_info_buffer = {
 887     .name = "buffer",
 888     .get  = get_buffer,
 889     .put  = put_buffer,
 890 };
 891
 892 typedef struct SaveStateEntry {
 893     char idstr[256];
 894     int instance_id;
 895     int version_id;
 896     int section_id;
 897     SaveLiveStateHandler *save_live_state;
 898     SaveStateHandler *save_state;
 899     LoadStateHandler *load_state;
 900     const VMStateDescription *vmsd;
 901     void *opaque;
 902     struct SaveStateEntry *next;
 903 } SaveStateEntry;
 904
 905 static SaveStateEntry *first_se;
 906 static int global_section_id;
 907
 908 /* TODO: Individual devices generally have very little idea about the rest
 909    of the system, so instance_id should be removed/replaced.
 910    Meanwhile pass -1 as instance_id if you do not already have a clearly
 911    distinguishing id for all instances of your device class. */
 912 int register_savevm_live(const char *idstr,
 913                          int instance_id,
 914                          int version_id,
 915                          SaveLiveStateHandler *save_live_state,
 916                          SaveStateHandler *save_state,
 917                          LoadStateHandler *load_state,
 918                          void *opaque)
 919 {
 920     SaveStateEntry *se, **pse;
 921
 922     se = qemu_malloc(sizeof(SaveStateEntry));
 923     pstrcpy(se->idstr, sizeof(se->idstr), idstr);
 924     se->instance_id = (instance_id == -1) ? 0 : instance_id;
 925     se->version_id = version_id;
 926     se->section_id = global_section_id++;
 927     se->save_live_state = save_live_state;
 928     se->save_state = save_state;
 929     se->load_state = load_state;
 930     se->opaque = opaque;
 931     se->vmsd = NULL;
 932     se->next = NULL;
 933
 934     /* add at the end of list */
 935     pse = &first_se;
 936     while (*pse != NULL) {
 937         if (instance_id == -1
 938                 && strcmp(se->idstr, (*pse)->idstr) == 0
 939                 && se->instance_id <= (*pse)->instance_id)
 940             se->instance_id = (*pse)->instance_id + 1;
 941         pse = &(*pse)->next;
 942     }
 943     *pse = se;
 944     return 0;
 945 }
 946
 947 int register_savevm(const char *idstr,
 948                     int instance_id,
 949                     int version_id,
 950                     SaveStateHandler *save_state,
 951                     LoadStateHandler *load_state,
 952                     void *opaque)
 953 {
 954     return register_savevm_live(idstr, instance_id, version_id,
 955                                 NULL, save_state, load_state, opaque);
 956 }
 957
 958 void unregister_savevm(const char *idstr, void *opaque)
 959 {
 960     SaveStateEntry **pse;
 961
 962     pse = &first_se;
 963     while (*pse != NULL) {
 964         if (strcmp((*pse)->idstr, idstr) == 0 && (*pse)->opaque == opaque) {
 965             SaveStateEntry *next = (*pse)->next;
 966             qemu_free(*pse);
 967             *pse = next;
 968             continue;
 969         }
 970         pse = &(*pse)->next;
 971     }
 972 }
 973
 974 int vmstate_register(int instance_id, const VMStateDescription *vmsd,
 975                      void *opaque)
 976 {
 977     SaveStateEntry *se, **pse;
 978
 979     se = qemu_malloc(sizeof(SaveStateEntry));
 980     pstrcpy(se->idstr, sizeof(se->idstr), vmsd->name);
 981     se->instance_id = (instance_id == -1) ? 0 : instance_id;
 982     se->version_id = vmsd->version_id;
 983     se->section_id = global_section_id++;
 984     se->save_live_state = NULL;
 985     se->save_state = NULL;
 986     se->load_state = NULL;
 987     se->opaque = opaque;
 988     se->vmsd = vmsd;
 989     se->next = NULL;
 990
 991     /* add at the end of list */
 992     pse = &first_se;
 993     while (*pse != NULL) {
 994         if (instance_id == -1
 995                 && strcmp(se->idstr, (*pse)->idstr) == 0
 996                 && se->instance_id <= (*pse)->instance_id)
 997             se->instance_id = (*pse)->instance_id + 1;
 998         pse = &(*pse)->next;
 999     }
1000     *pse = se;
1001     return 0;
1002 }
1003
1004 void vmstate_unregister(const char *idstr,  void *opaque)
1005 {
1006     SaveStateEntry **pse;
1007
1008     pse = &first_se;
1009     while (*pse != NULL) {
1010         if (strcmp((*pse)->idstr, idstr) == 0 && (*pse)->opaque == opaque) {
1011             SaveStateEntry *next = (*pse)->next;
1012             qemu_free(*pse);
1013             *pse = next;
1014             continue;
1015         }
1016         pse = &(*pse)->next;
1017     }
1018 }
1019
1020 int vmstate_load_state(QEMUFile *f, const VMStateDescription *vmsd,
1021                        void *opaque, int version_id)
1022 {
1023     VMStateField *field = vmsd->fields;
1024
1025     if (version_id > vmsd->version_id) {
1026         return -EINVAL;
1027     }
1028     if (version_id < vmsd->minimum_version_id_old) {
1029         return -EINVAL;
1030     }
1031     if  (version_id < vmsd->minimum_version_id) {
1032         return vmsd->load_state_old(f, opaque, version_id);
1033     }
1034     while(field->name) {
1035         if (field->version_id <= version_id) {
1036             void *base_addr = opaque + field->offset;
1037             int ret, i, n_elems = 1;
1038
1039             if (field->flags & VMS_ARRAY) {
1040                 n_elems = field->num;
1041             } else if (field->flags & VMS_VARRAY) {
1042                 n_elems = *(size_t *)(opaque+field->num_offset);
1043             }
1044             if (field->flags & VMS_POINTER) {
1045                 base_addr = *(void **)base_addr;
1046             }
1047             for (i = 0; i < n_elems; i++) {
1048                 void *addr = base_addr + field->size * i;
1049
1050                 if (field->flags & VMS_STRUCT) {
1051                     ret = vmstate_load_state(f, field->vmsd, addr, field->vmsd->version_id);
1052                 } else {
1053                     ret = field->info->get(f, addr, field->size);
1054
1055                 }
1056                 if (ret < 0) {
1057                     return ret;
1058                 }
1059             }
1060         }
1061         field++;
1062     }
1063     if (vmsd->run_after_load)
1064         return vmsd->run_after_load(opaque);
1065     return 0;
1066 }
1067
1068 void vmstate_save_state(QEMUFile *f, const VMStateDescription *vmsd,
1069                         const void *opaque)
1070 {
1071     VMStateField *field = vmsd->fields;
1072
1073     while(field->name) {
1074         const void *base_addr = opaque + field->offset;
1075         int i, n_elems = 1;
1076
1077         if (field->flags & VMS_ARRAY) {
1078             n_elems = field->num;
1079         } else if (field->flags & VMS_VARRAY) {
1080             n_elems = *(size_t *)(opaque+field->num_offset);
1081         }
1082         if (field->flags & VMS_POINTER) {
1083             base_addr = *(void **)base_addr;
1084         }
1085         for (i = 0; i < n_elems; i++) {
1086             const void *addr = base_addr + field->size * i;
1087
1088             if (field->flags & VMS_STRUCT) {
1089                 vmstate_save_state(f, field->vmsd, addr);
1090             } else {
1091                 field->info->put(f, addr, field->size);
1092             }
1093         }
1094         field++;
1095     }
1096 }
1097
1098 static int vmstate_load(QEMUFile *f, SaveStateEntry *se, int version_id)
1099 {
1100     if (!se->vmsd) {         /* Old style */
1101         return se->load_state(f, se->opaque, version_id);
1102     }
1103     return vmstate_load_state(f, se->vmsd, se->opaque, version_id);
1104 }
1105
1106 static void vmstate_save(QEMUFile *f, SaveStateEntry *se)
1107 {
1108     if (!se->vmsd) {         /* Old style */
1109         se->save_state(f, se->opaque);
1110         return;
1111     }
1112     vmstate_save_state(f,se->vmsd, se->opaque);
1113 }
1114
1115 #define QEMU_VM_FILE_MAGIC           0x5145564d
1116 #define QEMU_VM_FILE_VERSION_COMPAT  0x00000002
1117 #define QEMU_VM_FILE_VERSION         0x00000003
1118
1119 #define QEMU_VM_EOF                  0x00
1120 #define QEMU_VM_SECTION_START        0x01
1121 #define QEMU_VM_SECTION_PART         0x02
1122 #define QEMU_VM_SECTION_END          0x03
1123 #define QEMU_VM_SECTION_FULL         0x04
1124
1125 int qemu_savevm_state_begin(QEMUFile *f)
1126 {
1127     SaveStateEntry *se;
1128
1129     qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
1130     qemu_put_be32(f, QEMU_VM_FILE_VERSION);
1131
1132     for (se = first_se; se != NULL; se = se->next) {
1133         int len;
1134
1135         if (se->save_live_state == NULL)
1136             continue;
1137
1138         /* Section type */
1139         qemu_put_byte(f, QEMU_VM_SECTION_START);
1140         qemu_put_be32(f, se->section_id);
1141
1142         /* ID string */
1143         len = strlen(se->idstr);
1144         qemu_put_byte(f, len);
1145         qemu_put_buffer(f, (uint8_t *)se->idstr, len);
1146
1147         qemu_put_be32(f, se->instance_id);
1148         qemu_put_be32(f, se->version_id);
1149
1150         se->save_live_state(f, QEMU_VM_SECTION_START, se->opaque);
1151     }
1152
1153     if (qemu_file_has_error(f))
1154         return -EIO;
1155
1156     return 0;
1157 }
1158
1159 int qemu_savevm_state_iterate(QEMUFile *f)
1160 {
1161     SaveStateEntry *se;
1162     int ret = 1;
1163
1164     for (se = first_se; se != NULL; se = se->next) {
1165         if (se->save_live_state == NULL)
1166             continue;
1167
1168         /* Section type */
1169         qemu_put_byte(f, QEMU_VM_SECTION_PART);
1170         qemu_put_be32(f, se->section_id);
1171
1172         ret &= !!se->save_live_state(f, QEMU_VM_SECTION_PART, se->opaque);
1173     }
1174
1175     if (ret)
1176         return 1;
1177
1178     if (qemu_file_has_error(f))
1179         return -EIO;
1180
1181     return 0;
1182 }
1183
1184 int qemu_savevm_state_complete(QEMUFile *f)
1185 {
1186     SaveStateEntry *se;
1187
1188     for (se = first_se; se != NULL; se = se->next) {
1189         if (se->save_live_state == NULL)
1190             continue;
1191
1192         /* Section type */
1193         qemu_put_byte(f, QEMU_VM_SECTION_END);
1194         qemu_put_be32(f, se->section_id);
1195
1196         se->save_live_state(f, QEMU_VM_SECTION_END, se->opaque);
1197     }
1198
1199     for(se = first_se; se != NULL; se = se->next) {
1200         int len;
1201
1202         if (se->save_state == NULL && se->vmsd == NULL)
1203             continue;
1204
1205         /* Section type */
1206         qemu_put_byte(f, QEMU_VM_SECTION_FULL);
1207         qemu_put_be32(f, se->section_id);
1208
1209         /* ID string */
1210         len = strlen(se->idstr);
1211         qemu_put_byte(f, len);
1212         qemu_put_buffer(f, (uint8_t *)se->idstr, len);
1213
1214         qemu_put_be32(f, se->instance_id);
1215         qemu_put_be32(f, se->version_id);
1216
1217         vmstate_save(f, se);
1218     }
1219
1220     qemu_put_byte(f, QEMU_VM_EOF);
1221
1222     if (qemu_file_has_error(f))
1223         return -EIO;
1224
1225     return 0;
1226 }
1227
1228 int qemu_savevm_state(QEMUFile *f)
1229 {
1230     int saved_vm_running;
1231     int ret;
1232
1233     saved_vm_running = vm_running;
1234     vm_stop(0);
1235
1236     bdrv_flush_all();
1237
1238     ret = qemu_savevm_state_begin(f);
1239     if (ret < 0)
1240         goto out;
1241
1242     do {
1243         ret = qemu_savevm_state_iterate(f);
1244         if (ret < 0)
1245             goto out;
1246     } while (ret == 0);
1247
1248     ret = qemu_savevm_state_complete(f);
1249
1250 out:
1251     if (qemu_file_has_error(f))
1252         ret = -EIO;
1253
1254     if (!ret && saved_vm_running)
1255         vm_start();
1256
1257     return ret;
1258 }
1259
1260 static SaveStateEntry *find_se(const char *idstr, int instance_id)
1261 {
1262     SaveStateEntry *se;
1263
1264     for(se = first_se; se != NULL; se = se->next) {
1265         if (!strcmp(se->idstr, idstr) &&
1266             instance_id == se->instance_id)
1267             return se;
1268     }
1269     return NULL;
1270 }
1271
1272 typedef struct LoadStateEntry {
1273     SaveStateEntry *se;
1274     int section_id;
1275     int version_id;
1276     struct LoadStateEntry *next;
1277 } LoadStateEntry;
1278
1279 static int qemu_loadvm_state_v2(QEMUFile *f)
1280 {
1281     SaveStateEntry *se;
1282     int len, ret, instance_id, record_len, version_id;
1283     int64_t total_len, end_pos, cur_pos;
1284     char idstr[256];
1285
1286     total_len = qemu_get_be64(f);
1287     end_pos = total_len + qemu_ftell(f);
1288     for(;;) {
1289         if (qemu_ftell(f) >= end_pos)
1290             break;
1291         len = qemu_get_byte(f);
1292         qemu_get_buffer(f, (uint8_t *)idstr, len);
1293         idstr[len] = '\0';
1294         instance_id = qemu_get_be32(f);
1295         version_id = qemu_get_be32(f);
1296         record_len = qemu_get_be32(f);
1297         cur_pos = qemu_ftell(f);
1298         se = find_se(idstr, instance_id);
1299         if (!se) {
1300             fprintf(stderr, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
1301                     instance_id, idstr);
1302         } else {
1303             ret = vmstate_load(f, se, version_id);
1304             if (ret < 0) {
1305                 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1306                         instance_id, idstr);
1307                 return ret;
1308             }
1309         }
1310         /* always seek to exact end of record */
1311         qemu_fseek(f, cur_pos + record_len, SEEK_SET);
1312     }
1313
1314     if (qemu_file_has_error(f))
1315         return -EIO;
1316
1317     return 0;
1318 }
1319
1320 int qemu_loadvm_state(QEMUFile *f)
1321 {
1322     LoadStateEntry *first_le = NULL;
1323     uint8_t section_type;
1324     unsigned int v;
1325     int ret;
1326
1327     v = qemu_get_be32(f);
1328     if (v != QEMU_VM_FILE_MAGIC)
1329         return -EINVAL;
1330
1331     v = qemu_get_be32(f);
1332     if (v == QEMU_VM_FILE_VERSION_COMPAT)
1333         return qemu_loadvm_state_v2(f);
1334     if (v != QEMU_VM_FILE_VERSION)
1335         return -ENOTSUP;
1336
1337     while ((section_type = qemu_get_byte(f)) != QEMU_VM_EOF) {
1338         uint32_t instance_id, version_id, section_id;
1339         LoadStateEntry *le;
1340         SaveStateEntry *se;
1341         char idstr[257];
1342         int len;
1343
1344         switch (section_type) {
1345         case QEMU_VM_SECTION_START:
1346         case QEMU_VM_SECTION_FULL:
1347             /* Read section start */
1348             section_id = qemu_get_be32(f);
1349             len = qemu_get_byte(f);
1350             qemu_get_buffer(f, (uint8_t *)idstr, len);
1351             idstr[len] = 0;
1352             instance_id = qemu_get_be32(f);
1353             version_id = qemu_get_be32(f);
1354
1355             /* Find savevm section */
1356             se = find_se(idstr, instance_id);
1357             if (se == NULL) {
1358                 fprintf(stderr, "Unknown savevm section or instance '%s' %d\n", idstr, instance_id);
1359                 ret = -EINVAL;
1360                 goto out;
1361             }
1362
1363             /* Validate version */
1364             if (version_id > se->version_id) {
1365                 fprintf(stderr, "savevm: unsupported version %d for '%s' v%d\n",
1366                         version_id, idstr, se->version_id);
1367                 ret = -EINVAL;
1368                 goto out;
1369             }
1370
1371             /* Add entry */
1372             le = qemu_mallocz(sizeof(*le));
1373
1374             le->se = se;
1375             le->section_id = section_id;
1376             le->version_id = version_id;
1377             le->next = first_le;
1378             first_le = le;
1379
1380             ret = vmstate_load(f, le->se, le->version_id);
1381             if (ret < 0) {
1382                 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1383                         instance_id, idstr);
1384                 goto out;
1385             }
1386             break;
1387         case QEMU_VM_SECTION_PART:
1388         case QEMU_VM_SECTION_END:
1389             section_id = qemu_get_be32(f);
1390
1391             for (le = first_le; le && le->section_id != section_id; le = le->next);
1392             if (le == NULL) {
1393                 fprintf(stderr, "Unknown savevm section %d\n", section_id);
1394                 ret = -EINVAL;
1395                 goto out;
1396             }
1397
1398             ret = vmstate_load(f, le->se, le->version_id);
1399             if (ret < 0) {
1400                 fprintf(stderr, "qemu: warning: error while loading state section id %d\n",
1401                         section_id);
1402                 goto out;
1403             }
1404             break;
1405         default:
1406             fprintf(stderr, "Unknown savevm section type %d\n", section_type);
1407             ret = -EINVAL;
1408             goto out;
1409         }
1410     }
1411
1412     ret = 0;
1413
1414 out:
1415     while (first_le) {
1416         LoadStateEntry *le = first_le;
1417         first_le = first_le->next;
1418         qemu_free(le);
1419     }
1420
1421     if (qemu_file_has_error(f))
1422         ret = -EIO;
1423
1424     return ret;
1425 }
1426
1427 /* device can contain snapshots */
1428 static int bdrv_can_snapshot(BlockDriverState *bs)
1429 {
1430     return (bs &&
1431             !bdrv_is_removable(bs) &&
1432             !bdrv_is_read_only(bs));
1433 }
1434
1435 /* device must be snapshots in order to have a reliable snapshot */
1436 static int bdrv_has_snapshot(BlockDriverState *bs)
1437 {
1438     return (bs &&
1439             !bdrv_is_removable(bs) &&
1440             !bdrv_is_read_only(bs));
1441 }
1442
1443 static BlockDriverState *get_bs_snapshots(void)
1444 {
1445     BlockDriverState *bs;
1446     DriveInfo *dinfo;
1447
1448     if (bs_snapshots)
1449         return bs_snapshots;
1450     TAILQ_FOREACH(dinfo, &drives, next) {
1451         bs = dinfo->bdrv;
1452         if (bdrv_can_snapshot(bs))
1453             goto ok;
1454     }
1455     return NULL;
1456  ok:
1457     bs_snapshots = bs;
1458     return bs;
1459 }
1460
1461 static int bdrv_snapshot_find(BlockDriverState *bs, QEMUSnapshotInfo *sn_info,
1462                               const char *name)
1463 {
1464     QEMUSnapshotInfo *sn_tab, *sn;
1465     int nb_sns, i, ret;
1466
1467     ret = -ENOENT;
1468     nb_sns = bdrv_snapshot_list(bs, &sn_tab);
1469     if (nb_sns < 0)
1470         return ret;
1471     for(i = 0; i < nb_sns; i++) {
1472         sn = &sn_tab[i];
1473         if (!strcmp(sn->id_str, name) || !strcmp(sn->name, name)) {
1474             *sn_info = *sn;
1475             ret = 0;
1476             break;
1477         }
1478     }
1479     qemu_free(sn_tab);
1480     return ret;
1481 }
1482
1483 void do_savevm(Monitor *mon, const QDict *qdict)
1484 {
1485     DriveInfo *dinfo;
1486     BlockDriverState *bs, *bs1;
1487     QEMUSnapshotInfo sn1, *sn = &sn1, old_sn1, *old_sn = &old_sn1;
1488     int must_delete, ret;
1489     QEMUFile *f;
1490     int saved_vm_running;
1491     uint32_t vm_state_size;
1492 #ifdef _WIN32
1493     struct _timeb tb;
1494 #else
1495     struct timeval tv;
1496 #endif
1497     const char *name = qdict_get_try_str(qdict, "name");
1498
1499     bs = get_bs_snapshots();
1500     if (!bs) {
1501         monitor_printf(mon, "No block device can accept snapshots\n");
1502         return;
1503     }
1504
1505     /* ??? Should this occur after vm_stop?  */
1506     qemu_aio_flush();
1507
1508     saved_vm_running = vm_running;
1509     vm_stop(0);
1510
1511     must_delete = 0;
1512     if (name) {
1513         ret = bdrv_snapshot_find(bs, old_sn, name);
1514         if (ret >= 0) {
1515             must_delete = 1;
1516         }
1517     }
1518     memset(sn, 0, sizeof(*sn));
1519     if (must_delete) {
1520         pstrcpy(sn->name, sizeof(sn->name), old_sn->name);
1521         pstrcpy(sn->id_str, sizeof(sn->id_str), old_sn->id_str);
1522     } else {
1523         if (name)
1524             pstrcpy(sn->name, sizeof(sn->name), name);
1525     }
1526
1527     /* fill auxiliary fields */
1528 #ifdef _WIN32
1529     _ftime(&tb);
1530     sn->date_sec = tb.time;
1531     sn->date_nsec = tb.millitm * 1000000;
1532 #else
1533     gettimeofday(&tv, NULL);
1534     sn->date_sec = tv.tv_sec;
1535     sn->date_nsec = tv.tv_usec * 1000;
1536 #endif
1537     sn->vm_clock_nsec = qemu_get_clock(vm_clock);
1538
1539     /* save the VM state */
1540     f = qemu_fopen_bdrv(bs, 1);
1541     if (!f) {
1542         monitor_printf(mon, "Could not open VM state file\n");
1543         goto the_end;
1544     }
1545     ret = qemu_savevm_state(f);
1546     vm_state_size = qemu_ftell(f);
1547     qemu_fclose(f);
1548     if (ret < 0) {
1549         monitor_printf(mon, "Error %d while writing VM\n", ret);
1550         goto the_end;
1551     }
1552
1553     /* create the snapshots */
1554
1555     TAILQ_FOREACH(dinfo, &drives, next) {
1556         bs1 = dinfo->bdrv;
1557         if (bdrv_has_snapshot(bs1)) {
1558             if (must_delete) {
1559                 ret = bdrv_snapshot_delete(bs1, old_sn->id_str);
1560                 if (ret < 0) {
1561                     monitor_printf(mon,
1562                                    "Error while deleting snapshot on '%s'\n",
1563                                    bdrv_get_device_name(bs1));
1564                 }
1565             }
1566             /* Write VM state size only to the image that contains the state */
1567             sn->vm_state_size = (bs == bs1 ? vm_state_size : 0);
1568             ret = bdrv_snapshot_create(bs1, sn);
1569             if (ret < 0) {
1570                 monitor_printf(mon, "Error while creating snapshot on '%s'\n",
1571                                bdrv_get_device_name(bs1));
1572             }
1573         }
1574     }
1575
1576  the_end:
1577     if (saved_vm_running)
1578         vm_start();
1579 }
1580
1581 int load_vmstate(Monitor *mon, const char *name)
1582 {
1583     DriveInfo *dinfo;
1584     BlockDriverState *bs, *bs1;
1585     QEMUSnapshotInfo sn;
1586     QEMUFile *f;
1587     int ret;
1588
1589     bs = get_bs_snapshots();
1590     if (!bs) {
1591         monitor_printf(mon, "No block device supports snapshots\n");
1592         return -EINVAL;
1593     }
1594
1595     /* Flush all IO requests so they don't interfere with the new state.  */
1596     qemu_aio_flush();
1597
1598     TAILQ_FOREACH(dinfo, &drives, next) {
1599         bs1 = dinfo->bdrv;
1600         if (bdrv_has_snapshot(bs1)) {
1601             ret = bdrv_snapshot_goto(bs1, name);
1602             if (ret < 0) {
1603                 if (bs != bs1)
1604                     monitor_printf(mon, "Warning: ");
1605                 switch(ret) {
1606                 case -ENOTSUP:
1607                     monitor_printf(mon,
1608                                    "Snapshots not supported on device '%s'\n",
1609                                    bdrv_get_device_name(bs1));
1610                     break;
1611                 case -ENOENT:
1612                     monitor_printf(mon, "Could not find snapshot '%s' on "
1613                                    "device '%s'\n",
1614                                    name, bdrv_get_device_name(bs1));
1615                     break;
1616                 default:
1617                     monitor_printf(mon, "Error %d while activating snapshot on"
1618                                    " '%s'\n", ret, bdrv_get_device_name(bs1));
1619                     break;
1620                 }
1621                 /* fatal on snapshot block device */
1622                 if (bs == bs1)
1623                     return 0;
1624             }
1625         }
1626     }
1627
1628     /* Don't even try to load empty VM states */
1629     ret = bdrv_snapshot_find(bs, &sn, name);
1630     if ((ret >= 0) && (sn.vm_state_size == 0))
1631         return -EINVAL;
1632
1633     /* restore the VM state */
1634     f = qemu_fopen_bdrv(bs, 0);
1635     if (!f) {
1636         monitor_printf(mon, "Could not open VM state file\n");
1637         return -EINVAL;
1638     }
1639     ret = qemu_loadvm_state(f);
1640     qemu_fclose(f);
1641     if (ret < 0) {
1642         monitor_printf(mon, "Error %d while loading VM state\n", ret);
1643         return ret;
1644     }
1645     return 0;
1646 }
1647
1648 void do_delvm(Monitor *mon, const QDict *qdict)
1649 {
1650     DriveInfo *dinfo;
1651     BlockDriverState *bs, *bs1;
1652     int ret;
1653     const char *name = qdict_get_str(qdict, "name");
1654
1655     bs = get_bs_snapshots();
1656     if (!bs) {
1657         monitor_printf(mon, "No block device supports snapshots\n");
1658         return;
1659     }
1660
1661     TAILQ_FOREACH(dinfo, &drives, next) {
1662         bs1 = dinfo->bdrv;
1663         if (bdrv_has_snapshot(bs1)) {
1664             ret = bdrv_snapshot_delete(bs1, name);
1665             if (ret < 0) {
1666                 if (ret == -ENOTSUP)
1667                     monitor_printf(mon,
1668                                    "Snapshots not supported on device '%s'\n",
1669                                    bdrv_get_device_name(bs1));
1670                 else
1671                     monitor_printf(mon, "Error %d while deleting snapshot on "
1672                                    "'%s'\n", ret, bdrv_get_device_name(bs1));
1673             }
1674         }
1675     }
1676 }
1677
1678 void do_info_snapshots(Monitor *mon)
1679 {
1680     DriveInfo *dinfo;
1681     BlockDriverState *bs, *bs1;
1682     QEMUSnapshotInfo *sn_tab, *sn;
1683     int nb_sns, i;
1684     char buf[256];
1685
1686     bs = get_bs_snapshots();
1687     if (!bs) {
1688         monitor_printf(mon, "No available block device supports snapshots\n");
1689         return;
1690     }
1691     monitor_printf(mon, "Snapshot devices:");
1692     TAILQ_FOREACH(dinfo, &drives, next) {
1693         bs1 = dinfo->bdrv;
1694         if (bdrv_has_snapshot(bs1)) {
1695             if (bs == bs1)
1696                 monitor_printf(mon, " %s", bdrv_get_device_name(bs1));
1697         }
1698     }
1699     monitor_printf(mon, "\n");
1700
1701     nb_sns = bdrv_snapshot_list(bs, &sn_tab);
1702     if (nb_sns < 0) {
1703         monitor_printf(mon, "bdrv_snapshot_list: error %d\n", nb_sns);
1704         return;
1705     }
1706     monitor_printf(mon, "Snapshot list (from %s):\n",
1707                    bdrv_get_device_name(bs));
1708     monitor_printf(mon, "%s\n", bdrv_snapshot_dump(buf, sizeof(buf), NULL));
1709     for(i = 0; i < nb_sns; i++) {
1710         sn = &sn_tab[i];
1711         monitor_printf(mon, "%s\n", bdrv_snapshot_dump(buf, sizeof(buf), sn));
1712     }
1713     qemu_free(sn_tab);
1714 }