qemu-ga: implement win32 guest-set-user-password
[qemu/ar7.git] / tests / ide-test.c
blob4a07e3a9d0de463f4a8e22d6f679fbc65f9583b3
1 /*
2 * IDE test cases
4 * Copyright (c) 2013 Kevin Wolf <kwolf@redhat.com>
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
25 #include <stdint.h>
26 #include <string.h>
27 #include <stdio.h>
29 #include <glib.h>
31 #include "libqtest.h"
32 #include "libqos/libqos.h"
33 #include "libqos/pci-pc.h"
34 #include "libqos/malloc-pc.h"
36 #include "qemu-common.h"
37 #include "hw/pci/pci_ids.h"
38 #include "hw/pci/pci_regs.h"
40 #define TEST_IMAGE_SIZE 64 * 1024 * 1024
42 #define IDE_PCI_DEV 1
43 #define IDE_PCI_FUNC 1
45 #define IDE_BASE 0x1f0
46 #define IDE_PRIMARY_IRQ 14
48 enum {
49 reg_data = 0x0,
50 reg_nsectors = 0x2,
51 reg_lba_low = 0x3,
52 reg_lba_middle = 0x4,
53 reg_lba_high = 0x5,
54 reg_device = 0x6,
55 reg_status = 0x7,
56 reg_command = 0x7,
59 enum {
60 BSY = 0x80,
61 DRDY = 0x40,
62 DF = 0x20,
63 DRQ = 0x08,
64 ERR = 0x01,
67 enum {
68 DEV = 0x10,
69 LBA = 0x40,
72 enum {
73 bmreg_cmd = 0x0,
74 bmreg_status = 0x2,
75 bmreg_prdt = 0x4,
78 enum {
79 CMD_READ_DMA = 0xc8,
80 CMD_WRITE_DMA = 0xca,
81 CMD_FLUSH_CACHE = 0xe7,
82 CMD_IDENTIFY = 0xec,
84 CMDF_ABORT = 0x100,
85 CMDF_NO_BM = 0x200,
88 enum {
89 BM_CMD_START = 0x1,
90 BM_CMD_WRITE = 0x8, /* write = from device to memory */
93 enum {
94 BM_STS_ACTIVE = 0x1,
95 BM_STS_ERROR = 0x2,
96 BM_STS_INTR = 0x4,
99 enum {
100 PRDT_EOT = 0x80000000,
103 #define assert_bit_set(data, mask) g_assert_cmphex((data) & (mask), ==, (mask))
104 #define assert_bit_clear(data, mask) g_assert_cmphex((data) & (mask), ==, 0)
106 static QPCIBus *pcibus = NULL;
107 static QGuestAllocator *guest_malloc;
109 static char tmp_path[] = "/tmp/qtest.XXXXXX";
110 static char debug_path[] = "/tmp/qtest-blkdebug.XXXXXX";
112 static void ide_test_start(const char *cmdline_fmt, ...)
114 va_list ap;
115 char *cmdline;
117 va_start(ap, cmdline_fmt);
118 cmdline = g_strdup_vprintf(cmdline_fmt, ap);
119 va_end(ap);
121 qtest_start(cmdline);
122 guest_malloc = pc_alloc_init();
124 g_free(cmdline);
127 static void ide_test_quit(void)
129 pc_alloc_uninit(guest_malloc);
130 guest_malloc = NULL;
131 qtest_end();
134 static QPCIDevice *get_pci_device(uint16_t *bmdma_base)
136 QPCIDevice *dev;
137 uint16_t vendor_id, device_id;
139 if (!pcibus) {
140 pcibus = qpci_init_pc();
143 /* Find PCI device and verify it's the right one */
144 dev = qpci_device_find(pcibus, QPCI_DEVFN(IDE_PCI_DEV, IDE_PCI_FUNC));
145 g_assert(dev != NULL);
147 vendor_id = qpci_config_readw(dev, PCI_VENDOR_ID);
148 device_id = qpci_config_readw(dev, PCI_DEVICE_ID);
149 g_assert(vendor_id == PCI_VENDOR_ID_INTEL);
150 g_assert(device_id == PCI_DEVICE_ID_INTEL_82371SB_1);
152 /* Map bmdma BAR */
153 *bmdma_base = (uint16_t)(uintptr_t) qpci_iomap(dev, 4, NULL);
155 qpci_device_enable(dev);
157 return dev;
160 static void free_pci_device(QPCIDevice *dev)
162 /* libqos doesn't have a function for this, so free it manually */
163 g_free(dev);
166 typedef struct PrdtEntry {
167 uint32_t addr;
168 uint32_t size;
169 } QEMU_PACKED PrdtEntry;
171 #define assert_bit_set(data, mask) g_assert_cmphex((data) & (mask), ==, (mask))
172 #define assert_bit_clear(data, mask) g_assert_cmphex((data) & (mask), ==, 0)
174 static int send_dma_request(int cmd, uint64_t sector, int nb_sectors,
175 PrdtEntry *prdt, int prdt_entries)
177 QPCIDevice *dev;
178 uint16_t bmdma_base;
179 uintptr_t guest_prdt;
180 size_t len;
181 bool from_dev;
182 uint8_t status;
183 int flags;
185 dev = get_pci_device(&bmdma_base);
187 flags = cmd & ~0xff;
188 cmd &= 0xff;
190 switch (cmd) {
191 case CMD_READ_DMA:
192 from_dev = true;
193 break;
194 case CMD_WRITE_DMA:
195 from_dev = false;
196 break;
197 default:
198 g_assert_not_reached();
201 if (flags & CMDF_NO_BM) {
202 qpci_config_writew(dev, PCI_COMMAND,
203 PCI_COMMAND_IO | PCI_COMMAND_MEMORY);
206 /* Select device 0 */
207 outb(IDE_BASE + reg_device, 0 | LBA);
209 /* Stop any running transfer, clear any pending interrupt */
210 outb(bmdma_base + bmreg_cmd, 0);
211 outb(bmdma_base + bmreg_status, BM_STS_INTR);
213 /* Setup PRDT */
214 len = sizeof(*prdt) * prdt_entries;
215 guest_prdt = guest_alloc(guest_malloc, len);
216 memwrite(guest_prdt, prdt, len);
217 outl(bmdma_base + bmreg_prdt, guest_prdt);
219 /* ATA DMA command */
220 outb(IDE_BASE + reg_nsectors, nb_sectors);
222 outb(IDE_BASE + reg_lba_low, sector & 0xff);
223 outb(IDE_BASE + reg_lba_middle, (sector >> 8) & 0xff);
224 outb(IDE_BASE + reg_lba_high, (sector >> 16) & 0xff);
226 outb(IDE_BASE + reg_command, cmd);
228 /* Start DMA transfer */
229 outb(bmdma_base + bmreg_cmd, BM_CMD_START | (from_dev ? BM_CMD_WRITE : 0));
231 if (flags & CMDF_ABORT) {
232 outb(bmdma_base + bmreg_cmd, 0);
235 /* Wait for the DMA transfer to complete */
236 do {
237 status = inb(bmdma_base + bmreg_status);
238 } while ((status & (BM_STS_ACTIVE | BM_STS_INTR)) == BM_STS_ACTIVE);
240 g_assert_cmpint(get_irq(IDE_PRIMARY_IRQ), ==, !!(status & BM_STS_INTR));
242 /* Check IDE status code */
243 assert_bit_set(inb(IDE_BASE + reg_status), DRDY);
244 assert_bit_clear(inb(IDE_BASE + reg_status), BSY | DRQ);
246 /* Reading the status register clears the IRQ */
247 g_assert(!get_irq(IDE_PRIMARY_IRQ));
249 /* Stop DMA transfer if still active */
250 if (status & BM_STS_ACTIVE) {
251 outb(bmdma_base + bmreg_cmd, 0);
254 free_pci_device(dev);
256 return status;
259 static void test_bmdma_simple_rw(void)
261 uint8_t status;
262 uint8_t *buf;
263 uint8_t *cmpbuf;
264 size_t len = 512;
265 uintptr_t guest_buf = guest_alloc(guest_malloc, len);
267 PrdtEntry prdt[] = {
269 .addr = cpu_to_le32(guest_buf),
270 .size = cpu_to_le32(len | PRDT_EOT),
274 buf = g_malloc(len);
275 cmpbuf = g_malloc(len);
277 /* Write 0x55 pattern to sector 0 */
278 memset(buf, 0x55, len);
279 memwrite(guest_buf, buf, len);
281 status = send_dma_request(CMD_WRITE_DMA, 0, 1, prdt, ARRAY_SIZE(prdt));
282 g_assert_cmphex(status, ==, BM_STS_INTR);
283 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
285 /* Write 0xaa pattern to sector 1 */
286 memset(buf, 0xaa, len);
287 memwrite(guest_buf, buf, len);
289 status = send_dma_request(CMD_WRITE_DMA, 1, 1, prdt, ARRAY_SIZE(prdt));
290 g_assert_cmphex(status, ==, BM_STS_INTR);
291 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
293 /* Read and verify 0x55 pattern in sector 0 */
294 memset(cmpbuf, 0x55, len);
296 status = send_dma_request(CMD_READ_DMA, 0, 1, prdt, ARRAY_SIZE(prdt));
297 g_assert_cmphex(status, ==, BM_STS_INTR);
298 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
300 memread(guest_buf, buf, len);
301 g_assert(memcmp(buf, cmpbuf, len) == 0);
303 /* Read and verify 0xaa pattern in sector 1 */
304 memset(cmpbuf, 0xaa, len);
306 status = send_dma_request(CMD_READ_DMA, 1, 1, prdt, ARRAY_SIZE(prdt));
307 g_assert_cmphex(status, ==, BM_STS_INTR);
308 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
310 memread(guest_buf, buf, len);
311 g_assert(memcmp(buf, cmpbuf, len) == 0);
314 g_free(buf);
315 g_free(cmpbuf);
318 static void test_bmdma_short_prdt(void)
320 uint8_t status;
322 PrdtEntry prdt[] = {
324 .addr = 0,
325 .size = cpu_to_le32(0x10 | PRDT_EOT),
329 /* Normal request */
330 status = send_dma_request(CMD_READ_DMA, 0, 1,
331 prdt, ARRAY_SIZE(prdt));
332 g_assert_cmphex(status, ==, 0);
333 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
335 /* Abort the request before it completes */
336 status = send_dma_request(CMD_READ_DMA | CMDF_ABORT, 0, 1,
337 prdt, ARRAY_SIZE(prdt));
338 g_assert_cmphex(status, ==, 0);
339 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
342 static void test_bmdma_one_sector_short_prdt(void)
344 uint8_t status;
346 /* Read 2 sectors but only give 1 sector in PRDT */
347 PrdtEntry prdt[] = {
349 .addr = 0,
350 .size = cpu_to_le32(0x200 | PRDT_EOT),
354 /* Normal request */
355 status = send_dma_request(CMD_READ_DMA, 0, 2,
356 prdt, ARRAY_SIZE(prdt));
357 g_assert_cmphex(status, ==, 0);
358 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
360 /* Abort the request before it completes */
361 status = send_dma_request(CMD_READ_DMA | CMDF_ABORT, 0, 2,
362 prdt, ARRAY_SIZE(prdt));
363 g_assert_cmphex(status, ==, 0);
364 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
367 static void test_bmdma_long_prdt(void)
369 uint8_t status;
371 PrdtEntry prdt[] = {
373 .addr = 0,
374 .size = cpu_to_le32(0x1000 | PRDT_EOT),
378 /* Normal request */
379 status = send_dma_request(CMD_READ_DMA, 0, 1,
380 prdt, ARRAY_SIZE(prdt));
381 g_assert_cmphex(status, ==, BM_STS_ACTIVE | BM_STS_INTR);
382 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
384 /* Abort the request before it completes */
385 status = send_dma_request(CMD_READ_DMA | CMDF_ABORT, 0, 1,
386 prdt, ARRAY_SIZE(prdt));
387 g_assert_cmphex(status, ==, BM_STS_INTR);
388 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
391 static void test_bmdma_no_busmaster(void)
393 uint8_t status;
395 /* No PRDT_EOT, each entry addr 0/size 64k, and in theory qemu shouldn't be
396 * able to access it anyway because the Bus Master bit in the PCI command
397 * register isn't set. This is complete nonsense, but it used to be pretty
398 * good at confusing and occasionally crashing qemu. */
399 PrdtEntry prdt[4096] = { };
401 status = send_dma_request(CMD_READ_DMA | CMDF_NO_BM, 0, 512,
402 prdt, ARRAY_SIZE(prdt));
404 /* Not entirely clear what the expected result is, but this is what we get
405 * in practice. At least we want to be aware of any changes. */
406 g_assert_cmphex(status, ==, BM_STS_ACTIVE | BM_STS_INTR);
407 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
410 static void test_bmdma_setup(void)
412 ide_test_start(
413 "-drive file=%s,if=ide,serial=%s,cache=writeback,format=raw "
414 "-global ide-hd.ver=%s",
415 tmp_path, "testdisk", "version");
416 qtest_irq_intercept_in(global_qtest, "ioapic");
419 static void test_bmdma_teardown(void)
421 ide_test_quit();
424 static void string_cpu_to_be16(uint16_t *s, size_t bytes)
426 g_assert((bytes & 1) == 0);
427 bytes /= 2;
429 while (bytes--) {
430 *s = cpu_to_be16(*s);
431 s++;
435 static void test_identify(void)
437 uint8_t data;
438 uint16_t buf[256];
439 int i;
440 int ret;
442 ide_test_start(
443 "-drive file=%s,if=ide,serial=%s,cache=writeback,format=raw "
444 "-global ide-hd.ver=%s",
445 tmp_path, "testdisk", "version");
447 /* IDENTIFY command on device 0*/
448 outb(IDE_BASE + reg_device, 0);
449 outb(IDE_BASE + reg_command, CMD_IDENTIFY);
451 /* Read in the IDENTIFY buffer and check registers */
452 data = inb(IDE_BASE + reg_device);
453 g_assert_cmpint(data & DEV, ==, 0);
455 for (i = 0; i < 256; i++) {
456 data = inb(IDE_BASE + reg_status);
457 assert_bit_set(data, DRDY | DRQ);
458 assert_bit_clear(data, BSY | DF | ERR);
460 ((uint16_t*) buf)[i] = inw(IDE_BASE + reg_data);
463 data = inb(IDE_BASE + reg_status);
464 assert_bit_set(data, DRDY);
465 assert_bit_clear(data, BSY | DF | ERR | DRQ);
467 /* Check serial number/version in the buffer */
468 string_cpu_to_be16(&buf[10], 20);
469 ret = memcmp(&buf[10], "testdisk ", 20);
470 g_assert(ret == 0);
472 string_cpu_to_be16(&buf[23], 8);
473 ret = memcmp(&buf[23], "version ", 8);
474 g_assert(ret == 0);
476 /* Write cache enabled bit */
477 assert_bit_set(buf[85], 0x20);
479 ide_test_quit();
482 static void test_flush(void)
484 uint8_t data;
486 ide_test_start(
487 "-drive file=blkdebug::%s,if=ide,cache=writeback,format=raw",
488 tmp_path);
490 /* Delay the completion of the flush request until we explicitly do it */
491 qmp_discard_response("{'execute':'human-monitor-command', 'arguments': {"
492 " 'command-line':"
493 " 'qemu-io ide0-hd0 \"break flush_to_os A\"'} }");
495 /* FLUSH CACHE command on device 0*/
496 outb(IDE_BASE + reg_device, 0);
497 outb(IDE_BASE + reg_command, CMD_FLUSH_CACHE);
499 /* Check status while request is in flight*/
500 data = inb(IDE_BASE + reg_status);
501 assert_bit_set(data, BSY | DRDY);
502 assert_bit_clear(data, DF | ERR | DRQ);
504 /* Complete the command */
505 qmp_discard_response("{'execute':'human-monitor-command', 'arguments': {"
506 " 'command-line':"
507 " 'qemu-io ide0-hd0 \"resume A\"'} }");
509 /* Check registers */
510 data = inb(IDE_BASE + reg_device);
511 g_assert_cmpint(data & DEV, ==, 0);
513 do {
514 data = inb(IDE_BASE + reg_status);
515 } while (data & BSY);
517 assert_bit_set(data, DRDY);
518 assert_bit_clear(data, BSY | DF | ERR | DRQ);
520 ide_test_quit();
523 static void test_retry_flush(const char *machine)
525 uint8_t data;
526 const char *s;
528 prepare_blkdebug_script(debug_path, "flush_to_disk");
530 ide_test_start(
531 "-vnc none "
532 "-drive file=blkdebug:%s:%s,if=ide,cache=writeback,format=raw,"
533 "rerror=stop,werror=stop",
534 debug_path, tmp_path);
536 /* FLUSH CACHE command on device 0*/
537 outb(IDE_BASE + reg_device, 0);
538 outb(IDE_BASE + reg_command, CMD_FLUSH_CACHE);
540 /* Check status while request is in flight*/
541 data = inb(IDE_BASE + reg_status);
542 assert_bit_set(data, BSY | DRDY);
543 assert_bit_clear(data, DF | ERR | DRQ);
545 qmp_eventwait("STOP");
547 /* Complete the command */
548 s = "{'execute':'cont' }";
549 qmp_discard_response(s);
551 /* Check registers */
552 data = inb(IDE_BASE + reg_device);
553 g_assert_cmpint(data & DEV, ==, 0);
555 do {
556 data = inb(IDE_BASE + reg_status);
557 } while (data & BSY);
559 assert_bit_set(data, DRDY);
560 assert_bit_clear(data, BSY | DF | ERR | DRQ);
562 ide_test_quit();
565 static void test_flush_nodev(void)
567 ide_test_start("");
569 /* FLUSH CACHE command on device 0*/
570 outb(IDE_BASE + reg_device, 0);
571 outb(IDE_BASE + reg_command, CMD_FLUSH_CACHE);
573 /* Just testing that qemu doesn't crash... */
575 ide_test_quit();
578 static void test_pci_retry_flush(const char *machine)
580 test_retry_flush("pc");
583 static void test_isa_retry_flush(const char *machine)
585 test_retry_flush("isapc");
588 int main(int argc, char **argv)
590 const char *arch = qtest_get_arch();
591 int fd;
592 int ret;
594 /* Check architecture */
595 if (strcmp(arch, "i386") && strcmp(arch, "x86_64")) {
596 g_test_message("Skipping test for non-x86\n");
597 return 0;
600 /* Create temporary blkdebug instructions */
601 fd = mkstemp(debug_path);
602 g_assert(fd >= 0);
603 close(fd);
605 /* Create a temporary raw image */
606 fd = mkstemp(tmp_path);
607 g_assert(fd >= 0);
608 ret = ftruncate(fd, TEST_IMAGE_SIZE);
609 g_assert(ret == 0);
610 close(fd);
612 /* Run the tests */
613 g_test_init(&argc, &argv, NULL);
615 qtest_add_func("/ide/identify", test_identify);
617 qtest_add_func("/ide/bmdma/setup", test_bmdma_setup);
618 qtest_add_func("/ide/bmdma/simple_rw", test_bmdma_simple_rw);
619 qtest_add_func("/ide/bmdma/short_prdt", test_bmdma_short_prdt);
620 qtest_add_func("/ide/bmdma/one_sector_short_prdt",
621 test_bmdma_one_sector_short_prdt);
622 qtest_add_func("/ide/bmdma/long_prdt", test_bmdma_long_prdt);
623 qtest_add_func("/ide/bmdma/no_busmaster", test_bmdma_no_busmaster);
624 qtest_add_func("/ide/bmdma/teardown", test_bmdma_teardown);
626 qtest_add_func("/ide/flush", test_flush);
627 qtest_add_func("/ide/flush/nodev", test_flush_nodev);
628 qtest_add_func("/ide/flush/retry_pci", test_pci_retry_flush);
629 qtest_add_func("/ide/flush/retry_isa", test_isa_retry_flush);
631 ret = g_test_run();
633 /* Cleanup */
634 unlink(tmp_path);
635 unlink(debug_path);
637 return ret;