4 * Copyright (c) 2003-2008 Fabrice Bellard
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, see <http://www.gnu.org/licenses/>.
20 #include "qemu/osdep.h"
21 #include "qemu/help-texts.h"
22 #include "qemu/units.h"
23 #include "qemu/accel.h"
24 #include "qemu-version.h"
25 #include <sys/syscall.h>
26 #include <sys/resource.h>
28 #include <linux/binfmts.h>
30 #include "qapi/error.h"
32 #include "user-internals.h"
33 #include "qemu/path.h"
34 #include "qemu/queue.h"
35 #include "qemu/config-file.h"
36 #include "qemu/cutils.h"
37 #include "qemu/error-report.h"
38 #include "qemu/help_option.h"
39 #include "qemu/module.h"
40 #include "qemu/plugin.h"
41 #include "exec/exec-all.h"
42 #include "exec/gdbstub.h"
43 #include "gdbstub/user.h"
45 #include "qemu/timer.h"
46 #include "qemu/envlist.h"
47 #include "qemu/guest-random.h"
49 #include "trace/control.h"
50 #include "target_elf.h"
51 #include "cpu_loop-common.h"
52 #include "crypto/init.h"
54 #include "signal-common.h"
56 #include "user-mmap.h"
57 #include "accel/tcg/perf.h"
59 #ifdef CONFIG_SEMIHOSTING
60 #include "semihosting/semihost.h"
63 #ifndef AT_FLAGS_PRESERVE_ARGV0
64 #define AT_FLAGS_PRESERVE_ARGV0_BIT 0
65 #define AT_FLAGS_PRESERVE_ARGV0 (1 << AT_FLAGS_PRESERVE_ARGV0_BIT)
69 char real_exec_path
[PATH_MAX
];
71 static bool opt_one_insn_per_tb
;
72 static const char *argv0
;
73 static const char *gdbstub
;
74 static envlist_t
*envlist
;
75 static const char *cpu_model
;
76 static const char *cpu_type
;
77 static const char *seed_optarg
;
78 unsigned long mmap_min_addr
;
83 * Used to implement backwards-compatibility for the `-strace`, and
84 * QEMU_STRACE options. Without this, the QEMU_LOG can be overwritten by
85 * -strace, or vice versa.
87 static bool enable_strace
;
90 * The last log mask given by the user in an environment variable or argument.
91 * Used to support command line arguments overriding environment variables.
93 static int last_log_mask
;
94 static const char *last_log_filename
;
97 * When running 32-on-64 we should make sure we can fit all of the possible
98 * guest address space into a contiguous chunk of virtual host memory.
100 * This way we will never overlap with our own libraries or binaries or stack
101 * or anything else that QEMU maps.
103 * Many cpus reserve the high bit (or more than one for some 64-bit cpus)
104 * of the address for the kernel. Some cpus rely on this and user space
105 * uses the high bit(s) for pointer tagging and the like. For them, we
106 * must preserve the expected address space.
108 #ifndef MAX_RESERVED_VA
109 # if HOST_LONG_BITS > TARGET_VIRT_ADDR_SPACE_BITS
110 # if TARGET_VIRT_ADDR_SPACE_BITS == 32 && \
111 (TARGET_LONG_BITS == 32 || defined(TARGET_ABI32))
112 # define MAX_RESERVED_VA(CPU) 0xfffffffful
114 # define MAX_RESERVED_VA(CPU) ((1ul << TARGET_VIRT_ADDR_SPACE_BITS) - 1)
117 # define MAX_RESERVED_VA(CPU) 0
121 unsigned long reserved_va
;
123 static void usage(int exitcode
);
125 static const char *interp_prefix
= CONFIG_QEMU_INTERP_PREFIX
;
126 const char *qemu_uname_release
;
128 #if !defined(TARGET_DEFAULT_STACK_SIZE)
129 /* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
130 we allocate a bigger stack. Need a better solution, for example
131 by remapping the process stack directly at the right place */
132 #define TARGET_DEFAULT_STACK_SIZE 8 * 1024 * 1024UL
135 unsigned long guest_stack_size
= TARGET_DEFAULT_STACK_SIZE
;
137 /***********************************************************/
138 /* Helper routines for implementing atomic operations. */
140 /* Make sure everything is in a consistent state for calling fork(). */
141 void fork_start(void)
146 qemu_plugin_user_prefork_lock();
149 void fork_end(int child
)
151 qemu_plugin_user_postfork(child
);
152 mmap_fork_end(child
);
154 CPUState
*cpu
, *next_cpu
;
155 /* Child processes created by fork() only have a single thread.
156 Discard information about the parent threads. */
157 CPU_FOREACH_SAFE(cpu
, next_cpu
) {
158 if (cpu
!= thread_cpu
) {
159 QTAILQ_REMOVE_RCU(&cpus
, cpu
, node
);
162 qemu_init_cpu_list();
163 gdbserver_fork(thread_cpu
);
168 * qemu_init_cpu_list() reinitialized the child exclusive state, but we
169 * also need to keep current_cpu consistent, so call end_exclusive() for
170 * both child and parent.
175 __thread CPUState
*thread_cpu
;
177 bool qemu_cpu_is_self(CPUState
*cpu
)
179 return thread_cpu
== cpu
;
182 void qemu_cpu_kick(CPUState
*cpu
)
187 void task_settid(TaskState
*ts
)
189 if (ts
->ts_tid
== 0) {
190 ts
->ts_tid
= (pid_t
)syscall(SYS_gettid
);
194 void stop_all_tasks(void)
197 * We trust that when using NPTL, start_exclusive()
198 * handles thread stopping correctly.
203 /* Assumes contents are already zeroed. */
204 void init_task_state(TaskState
*ts
)
210 ts
->sigaltstack_used
= (struct target_sigaltstack
) {
213 .ss_flags
= TARGET_SS_DISABLE
,
216 /* Capture task start time relative to system boot */
218 ticks_per_sec
= sysconf(_SC_CLK_TCK
);
220 if ((ticks_per_sec
> 0) && !clock_gettime(CLOCK_BOOTTIME
, &bt
)) {
221 /* start_boottime is expressed in clock ticks */
222 ts
->start_boottime
= bt
.tv_sec
* (uint64_t) ticks_per_sec
;
223 ts
->start_boottime
+= bt
.tv_nsec
* (uint64_t) ticks_per_sec
/
224 NANOSECONDS_PER_SECOND
;
228 CPUArchState
*cpu_copy(CPUArchState
*env
)
230 CPUState
*cpu
= env_cpu(env
);
231 CPUState
*new_cpu
= cpu_create(cpu_type
);
232 CPUArchState
*new_env
= new_cpu
->env_ptr
;
235 /* Reset non arch specific state */
238 new_cpu
->tcg_cflags
= cpu
->tcg_cflags
;
239 memcpy(new_env
, env
, sizeof(CPUArchState
));
240 #if defined(TARGET_I386) || defined(TARGET_X86_64)
241 new_env
->gdt
.base
= target_mmap(0, sizeof(uint64_t) * TARGET_GDT_ENTRIES
,
242 PROT_READ
| PROT_WRITE
,
243 MAP_ANONYMOUS
| MAP_PRIVATE
, -1, 0);
244 memcpy(g2h_untagged(new_env
->gdt
.base
), g2h_untagged(env
->gdt
.base
),
245 sizeof(uint64_t) * TARGET_GDT_ENTRIES
);
246 OBJECT(new_cpu
)->free
= OBJECT(cpu
)->free
;
249 /* Clone all break/watchpoints.
250 Note: Once we support ptrace with hw-debug register access, make sure
251 BP_CPU break/watchpoints are handled correctly on clone. */
252 QTAILQ_INIT(&new_cpu
->breakpoints
);
253 QTAILQ_FOREACH(bp
, &cpu
->breakpoints
, entry
) {
254 cpu_breakpoint_insert(new_cpu
, bp
->pc
, bp
->flags
, NULL
);
260 static void handle_arg_help(const char *arg
)
265 static void handle_arg_log(const char *arg
)
267 last_log_mask
= qemu_str_to_log_mask(arg
);
268 if (!last_log_mask
) {
269 qemu_print_log_usage(stdout
);
274 static void handle_arg_dfilter(const char *arg
)
276 qemu_set_dfilter_ranges(arg
, &error_fatal
);
279 static void handle_arg_log_filename(const char *arg
)
281 last_log_filename
= arg
;
284 static void handle_arg_set_env(const char *arg
)
288 while ((token
= strsep(&p
, ",")) != NULL
) {
289 if (envlist_setenv(envlist
, token
) != 0) {
296 static void handle_arg_unset_env(const char *arg
)
300 while ((token
= strsep(&p
, ",")) != NULL
) {
301 if (envlist_unsetenv(envlist
, token
) != 0) {
308 static void handle_arg_argv0(const char *arg
)
313 static void handle_arg_stack_size(const char *arg
)
316 guest_stack_size
= strtoul(arg
, &p
, 0);
317 if (guest_stack_size
== 0) {
322 guest_stack_size
*= MiB
;
323 } else if (*p
== 'k' || *p
== 'K') {
324 guest_stack_size
*= KiB
;
328 static void handle_arg_ld_prefix(const char *arg
)
330 interp_prefix
= strdup(arg
);
333 static void handle_arg_pagesize(const char *arg
)
335 qemu_host_page_size
= atoi(arg
);
336 if (qemu_host_page_size
== 0 ||
337 (qemu_host_page_size
& (qemu_host_page_size
- 1)) != 0) {
338 fprintf(stderr
, "page size must be a power of two\n");
343 static void handle_arg_seed(const char *arg
)
348 static void handle_arg_gdb(const char *arg
)
350 gdbstub
= g_strdup(arg
);
353 static void handle_arg_uname(const char *arg
)
355 qemu_uname_release
= strdup(arg
);
358 static void handle_arg_cpu(const char *arg
)
360 cpu_model
= strdup(arg
);
361 if (cpu_model
== NULL
|| is_help_option(cpu_model
)) {
367 static void handle_arg_guest_base(const char *arg
)
369 guest_base
= strtol(arg
, NULL
, 0);
370 have_guest_base
= true;
373 static void handle_arg_reserved_va(const char *arg
)
379 val
= strtoul(arg
, &p
, 0);
393 unsigned long unshifted
= val
;
396 if (val
>> shift
!= unshifted
) {
397 fprintf(stderr
, "Reserved virtual address too big\n");
402 fprintf(stderr
, "Unrecognised -R size suffix '%s'\n", p
);
405 /* The representation is size - 1, with 0 remaining "default". */
406 reserved_va
= val
? val
- 1 : 0;
409 static void handle_arg_one_insn_per_tb(const char *arg
)
411 opt_one_insn_per_tb
= true;
414 static void handle_arg_strace(const char *arg
)
416 enable_strace
= true;
419 static void handle_arg_version(const char *arg
)
421 printf("qemu-" TARGET_NAME
" version " QEMU_FULL_VERSION
422 "\n" QEMU_COPYRIGHT
"\n");
426 static void handle_arg_trace(const char *arg
)
428 trace_opt_parse(arg
);
431 #if defined(TARGET_XTENSA)
432 static void handle_arg_abi_call0(const char *arg
)
434 xtensa_set_abi_call0();
438 static void handle_arg_perfmap(const char *arg
)
440 perf_enable_perfmap();
443 static void handle_arg_jitdump(const char *arg
)
445 perf_enable_jitdump();
448 static QemuPluginList plugins
= QTAILQ_HEAD_INITIALIZER(plugins
);
451 static void handle_arg_plugin(const char *arg
)
453 qemu_plugin_opt_parse(arg
, &plugins
);
457 struct qemu_argument
{
461 void (*handle_opt
)(const char *arg
);
466 static const struct qemu_argument arg_table
[] = {
467 {"h", "", false, handle_arg_help
,
468 "", "print this help"},
469 {"help", "", false, handle_arg_help
,
471 {"g", "QEMU_GDB", true, handle_arg_gdb
,
472 "port", "wait gdb connection to 'port'"},
473 {"L", "QEMU_LD_PREFIX", true, handle_arg_ld_prefix
,
474 "path", "set the elf interpreter prefix to 'path'"},
475 {"s", "QEMU_STACK_SIZE", true, handle_arg_stack_size
,
476 "size", "set the stack size to 'size' bytes"},
477 {"cpu", "QEMU_CPU", true, handle_arg_cpu
,
478 "model", "select CPU (-cpu help for list)"},
479 {"E", "QEMU_SET_ENV", true, handle_arg_set_env
,
480 "var=value", "sets targets environment variable (see below)"},
481 {"U", "QEMU_UNSET_ENV", true, handle_arg_unset_env
,
482 "var", "unsets targets environment variable (see below)"},
483 {"0", "QEMU_ARGV0", true, handle_arg_argv0
,
484 "argv0", "forces target process argv[0] to be 'argv0'"},
485 {"r", "QEMU_UNAME", true, handle_arg_uname
,
486 "uname", "set qemu uname release string to 'uname'"},
487 {"B", "QEMU_GUEST_BASE", true, handle_arg_guest_base
,
488 "address", "set guest_base address to 'address'"},
489 {"R", "QEMU_RESERVED_VA", true, handle_arg_reserved_va
,
490 "size", "reserve 'size' bytes for guest virtual address space"},
491 {"d", "QEMU_LOG", true, handle_arg_log
,
492 "item[,...]", "enable logging of specified items "
493 "(use '-d help' for a list of items)"},
494 {"dfilter", "QEMU_DFILTER", true, handle_arg_dfilter
,
495 "range[,...]","filter logging based on address range"},
496 {"D", "QEMU_LOG_FILENAME", true, handle_arg_log_filename
,
497 "logfile", "write logs to 'logfile' (default stderr)"},
498 {"p", "QEMU_PAGESIZE", true, handle_arg_pagesize
,
499 "pagesize", "set the host page size to 'pagesize'"},
501 "QEMU_ONE_INSN_PER_TB", false, handle_arg_one_insn_per_tb
,
502 "", "run with one guest instruction per emulated TB"},
503 {"singlestep", "QEMU_SINGLESTEP", false, handle_arg_one_insn_per_tb
,
504 "", "deprecated synonym for -one-insn-per-tb"},
505 {"strace", "QEMU_STRACE", false, handle_arg_strace
,
506 "", "log system calls"},
507 {"seed", "QEMU_RAND_SEED", true, handle_arg_seed
,
508 "", "Seed for pseudo-random number generator"},
509 {"trace", "QEMU_TRACE", true, handle_arg_trace
,
510 "", "[[enable=]<pattern>][,events=<file>][,file=<file>]"},
512 {"plugin", "QEMU_PLUGIN", true, handle_arg_plugin
,
513 "", "[file=]<file>[,<argname>=<argvalue>]"},
515 {"version", "QEMU_VERSION", false, handle_arg_version
,
516 "", "display version information and exit"},
517 #if defined(TARGET_XTENSA)
518 {"xtensa-abi-call0", "QEMU_XTENSA_ABI_CALL0", false, handle_arg_abi_call0
,
519 "", "assume CALL0 Xtensa ABI"},
521 {"perfmap", "QEMU_PERFMAP", false, handle_arg_perfmap
,
522 "", "Generate a /tmp/perf-${pid}.map file for perf"},
523 {"jitdump", "QEMU_JITDUMP", false, handle_arg_jitdump
,
524 "", "Generate a jit-${pid}.dump file for perf"},
525 {NULL
, NULL
, false, NULL
, NULL
, NULL
}
528 static void usage(int exitcode
)
530 const struct qemu_argument
*arginfo
;
534 printf("usage: qemu-" TARGET_NAME
" [options] program [arguments...]\n"
535 "Linux CPU emulator (compiled for " TARGET_NAME
" emulation)\n"
537 "Options and associated environment variables:\n"
540 /* Calculate column widths. We must always have at least enough space
541 * for the column header.
543 maxarglen
= strlen("Argument");
544 maxenvlen
= strlen("Env-variable");
546 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
547 int arglen
= strlen(arginfo
->argv
);
548 if (arginfo
->has_arg
) {
549 arglen
+= strlen(arginfo
->example
) + 1;
551 if (strlen(arginfo
->env
) > maxenvlen
) {
552 maxenvlen
= strlen(arginfo
->env
);
554 if (arglen
> maxarglen
) {
559 printf("%-*s %-*s Description\n", maxarglen
+1, "Argument",
560 maxenvlen
, "Env-variable");
562 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
563 if (arginfo
->has_arg
) {
564 printf("-%s %-*s %-*s %s\n", arginfo
->argv
,
565 (int)(maxarglen
- strlen(arginfo
->argv
) - 1),
566 arginfo
->example
, maxenvlen
, arginfo
->env
, arginfo
->help
);
568 printf("-%-*s %-*s %s\n", maxarglen
, arginfo
->argv
,
569 maxenvlen
, arginfo
->env
,
576 "QEMU_LD_PREFIX = %s\n"
577 "QEMU_STACK_SIZE = %ld byte\n",
582 "You can use -E and -U options or the QEMU_SET_ENV and\n"
583 "QEMU_UNSET_ENV environment variables to set and unset\n"
584 "environment variables for the target process.\n"
585 "It is possible to provide several variables by separating them\n"
586 "by commas in getsubopt(3) style. Additionally it is possible to\n"
587 "provide the -E and -U options multiple times.\n"
588 "The following lines are equivalent:\n"
589 " -E var1=val2 -E var2=val2 -U LD_PRELOAD -U LD_DEBUG\n"
590 " -E var1=val2,var2=val2 -U LD_PRELOAD,LD_DEBUG\n"
591 " QEMU_SET_ENV=var1=val2,var2=val2 QEMU_UNSET_ENV=LD_PRELOAD,LD_DEBUG\n"
592 "Note that if you provide several changes to a single variable\n"
593 "the last change will stay in effect.\n"
595 QEMU_HELP_BOTTOM
"\n");
600 static int parse_args(int argc
, char **argv
)
604 const struct qemu_argument
*arginfo
;
606 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
607 if (arginfo
->env
== NULL
) {
611 r
= getenv(arginfo
->env
);
613 arginfo
->handle_opt(r
);
619 if (optind
>= argc
) {
628 if (!strcmp(r
, "-")) {
631 /* Treat --foo the same as -foo. */
636 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
637 if (!strcmp(r
, arginfo
->argv
)) {
638 if (arginfo
->has_arg
) {
639 if (optind
>= argc
) {
640 (void) fprintf(stderr
,
641 "qemu: missing argument for option '%s'\n", r
);
644 arginfo
->handle_opt(argv
[optind
]);
647 arginfo
->handle_opt(NULL
);
653 /* no option matched the current argv */
654 if (arginfo
->handle_opt
== NULL
) {
655 (void) fprintf(stderr
, "qemu: unknown option '%s'\n", r
);
660 if (optind
>= argc
) {
661 (void) fprintf(stderr
, "qemu: no user program specified\n");
665 exec_path
= argv
[optind
];
670 int main(int argc
, char **argv
, char **envp
)
672 struct target_pt_regs regs1
, *regs
= ®s1
;
673 struct image_info info1
, *info
= &info1
;
674 struct linux_binprm bprm
;
679 char **target_environ
, **wrk
;
685 unsigned long max_reserved_va
;
689 module_call_init(MODULE_INIT_TRACE
);
690 qemu_init_cpu_list();
691 module_call_init(MODULE_INIT_QOM
);
693 envlist
= envlist_create();
696 * add current environment into the list
697 * envlist_setenv adds to the front of the list; to preserve environ
698 * order add from back to front
700 for (wrk
= environ
; *wrk
!= NULL
; wrk
++) {
703 while (wrk
!= environ
) {
705 (void) envlist_setenv(envlist
, *wrk
);
708 /* Read the stack limit from the kernel. If it's "unlimited",
709 then we can do little else besides use the default. */
712 if (getrlimit(RLIMIT_STACK
, &lim
) == 0
713 && lim
.rlim_cur
!= RLIM_INFINITY
714 && lim
.rlim_cur
== (target_long
)lim
.rlim_cur
715 && lim
.rlim_cur
> guest_stack_size
) {
716 guest_stack_size
= lim
.rlim_cur
;
722 qemu_add_opts(&qemu_trace_opts
);
723 qemu_plugin_add_opts();
725 optind
= parse_args(argc
, argv
);
727 qemu_set_log_filename_flags(last_log_filename
,
728 last_log_mask
| (enable_strace
* LOG_STRACE
),
731 if (!trace_init_backends()) {
735 qemu_plugin_load_list(&plugins
, &error_fatal
);
738 memset(regs
, 0, sizeof(struct target_pt_regs
));
740 /* Zero out image_info */
741 memset(info
, 0, sizeof(struct image_info
));
743 memset(&bprm
, 0, sizeof (bprm
));
745 /* Scan interp_prefix dir for replacement files. */
746 init_paths(interp_prefix
);
748 init_qemu_uname_release();
751 * Manage binfmt-misc open-binary flag
753 execfd
= qemu_getauxval(AT_EXECFD
);
755 execfd
= open(exec_path
, O_RDONLY
);
757 printf("Error while loading %s: %s\n", exec_path
, strerror(errno
));
762 /* Resolve executable file name to full path name */
763 if (realpath(exec_path
, real_exec_path
)) {
764 exec_path
= real_exec_path
;
768 * get binfmt_misc flags
770 preserve_argv0
= !!(qemu_getauxval(AT_FLAGS
) & AT_FLAGS_PRESERVE_ARGV0
);
773 * Manage binfmt-misc preserve-arg[0] flag
774 * argv[optind] full path to the binary
775 * argv[optind + 1] original argv[0]
777 if (optind
+ 1 < argc
&& preserve_argv0
) {
781 if (cpu_model
== NULL
) {
782 cpu_model
= cpu_get_model(get_elf_eflags(execfd
));
784 cpu_type
= parse_cpu_option(cpu_model
);
786 /* init tcg before creating CPUs and to get qemu_host_page_size */
788 AccelState
*accel
= current_accel();
789 AccelClass
*ac
= ACCEL_GET_CLASS(accel
);
791 accel_init_interfaces(ac
);
792 object_property_set_bool(OBJECT(accel
), "one-insn-per-tb",
793 opt_one_insn_per_tb
, &error_abort
);
794 ac
->init_machine(NULL
);
796 cpu
= cpu_create(cpu_type
);
802 * Reserving too much vm space via mmap can run into problems
803 * with rlimits, oom due to page table creation, etc. We will
804 * still try it, if directed by the command-line option, but
807 max_reserved_va
= MAX_RESERVED_VA(cpu
);
808 if (reserved_va
!= 0) {
809 if ((reserved_va
+ 1) % qemu_host_page_size
) {
810 char *s
= size_to_str(qemu_host_page_size
);
811 fprintf(stderr
, "Reserved virtual address not aligned mod %s\n", s
);
815 if (max_reserved_va
&& reserved_va
> max_reserved_va
) {
816 fprintf(stderr
, "Reserved virtual address too big\n");
819 } else if (HOST_LONG_BITS
== 64 && TARGET_VIRT_ADDR_SPACE_BITS
<= 32) {
820 /* MAX_RESERVED_VA + 1 is a large power of 2, so is aligned. */
821 reserved_va
= max_reserved_va
;
825 * Temporarily disable
826 * "comparison is always false due to limited range of data type"
827 * due to comparison between (possible) uint64_t and uintptr_t.
829 #pragma GCC diagnostic push
830 #pragma GCC diagnostic ignored "-Wtype-limits"
833 * Select an initial value for task_unmapped_base that is in range.
836 if (TASK_UNMAPPED_BASE
< reserved_va
) {
837 task_unmapped_base
= TASK_UNMAPPED_BASE
;
839 /* The most common default formula is TASK_SIZE / 3. */
840 task_unmapped_base
= TARGET_PAGE_ALIGN(reserved_va
/ 3);
842 } else if (TASK_UNMAPPED_BASE
< UINTPTR_MAX
) {
843 task_unmapped_base
= TASK_UNMAPPED_BASE
;
845 /* 32-bit host: pick something medium size. */
846 task_unmapped_base
= 0x10000000;
848 mmap_next_start
= task_unmapped_base
;
850 /* Similarly for elf_et_dyn_base. */
852 if (ELF_ET_DYN_BASE
< reserved_va
) {
853 elf_et_dyn_base
= ELF_ET_DYN_BASE
;
855 /* The most common default formula is TASK_SIZE / 3 * 2. */
856 elf_et_dyn_base
= TARGET_PAGE_ALIGN(reserved_va
/ 3) * 2;
858 } else if (ELF_ET_DYN_BASE
< UINTPTR_MAX
) {
859 elf_et_dyn_base
= ELF_ET_DYN_BASE
;
861 /* 32-bit host: pick something medium size. */
862 elf_et_dyn_base
= 0x18000000;
865 #pragma GCC diagnostic pop
869 if (seed_optarg
!= NULL
) {
870 qemu_guest_random_seed_main(seed_optarg
, &err
);
875 error_reportf_err(err
, "cannot initialize crypto: ");
880 target_environ
= envlist_to_environ(envlist
, NULL
);
881 envlist_free(envlist
);
884 * Read in mmap_min_addr kernel parameter. This value is used
885 * When loading the ELF image to determine whether guest_base
886 * is needed. It is also used in mmap_find_vma.
891 if ((fp
= fopen("/proc/sys/vm/mmap_min_addr", "r")) != NULL
) {
893 if (fscanf(fp
, "%lu", &tmp
) == 1 && tmp
!= 0) {
895 qemu_log_mask(CPU_LOG_PAGE
, "host mmap_min_addr=0x%lx\n",
903 * We prefer to not make NULL pointers accessible to QEMU.
904 * If we're in a chroot with no /proc, fall back to 1 page.
906 if (mmap_min_addr
== 0) {
907 mmap_min_addr
= qemu_host_page_size
;
908 qemu_log_mask(CPU_LOG_PAGE
,
909 "host mmap_min_addr=0x%lx (fallback)\n",
914 * Prepare copy of argv vector for target.
916 target_argc
= argc
- optind
;
917 target_argv
= calloc(target_argc
+ 1, sizeof (char *));
918 if (target_argv
== NULL
) {
919 (void) fprintf(stderr
, "Unable to allocate memory for target_argv\n");
924 * If argv0 is specified (using '-0' switch) we replace
925 * argv[0] pointer with the given one.
929 target_argv
[i
++] = strdup(argv0
);
931 for (; i
< target_argc
; i
++) {
932 target_argv
[i
] = strdup(argv
[optind
+ i
]);
934 target_argv
[target_argc
] = NULL
;
936 ts
= g_new0(TaskState
, 1);
938 /* build Task State */
946 ret
= loader_exec(execfd
, exec_path
, target_argv
, target_environ
, regs
,
949 printf("Error while loading %s: %s\n", exec_path
, strerror(-ret
));
953 for (wrk
= target_environ
; *wrk
; wrk
++) {
957 g_free(target_environ
);
959 if (qemu_loglevel_mask(CPU_LOG_PAGE
)) {
960 FILE *f
= qemu_log_trylock();
962 fprintf(f
, "guest_base %p\n", (void *)guest_base
);
963 fprintf(f
, "page layout changed following binary load\n");
966 fprintf(f
, "end_code 0x" TARGET_ABI_FMT_lx
"\n",
968 fprintf(f
, "start_code 0x" TARGET_ABI_FMT_lx
"\n",
970 fprintf(f
, "start_data 0x" TARGET_ABI_FMT_lx
"\n",
972 fprintf(f
, "end_data 0x" TARGET_ABI_FMT_lx
"\n",
974 fprintf(f
, "start_stack 0x" TARGET_ABI_FMT_lx
"\n",
976 fprintf(f
, "brk 0x" TARGET_ABI_FMT_lx
"\n",
978 fprintf(f
, "entry 0x" TARGET_ABI_FMT_lx
"\n",
980 fprintf(f
, "argv_start 0x" TARGET_ABI_FMT_lx
"\n",
982 fprintf(f
, "env_start 0x" TARGET_ABI_FMT_lx
"\n",
984 fprintf(f
, "auxv_start 0x" TARGET_ABI_FMT_lx
"\n",
990 target_set_brk(info
->brk
);
994 /* Now that we've loaded the binary, GUEST_BASE is fixed. Delay
995 generating the prologue until now so that the prologue can take
996 the real value of GUEST_BASE into account. */
997 tcg_prologue_init(tcg_ctx
);
999 target_cpu_copy_regs(env
, regs
);
1002 if (gdbserver_start(gdbstub
) < 0) {
1003 fprintf(stderr
, "qemu: could not open gdbserver on %s\n",
1007 gdb_handlesig(cpu
, 0);
1010 #ifdef CONFIG_SEMIHOSTING
1011 qemu_semihosting_guestfd_init();