scsi-generic: avoid out-of-bounds access to VPD page list
[qemu/ar7.git] / include / hw / ipmi / ipmi.h
blob0affe5a4d864bc4a495acd56611594940da53227
1 /*
2 * IPMI base class
4 * Copyright (c) 2015 Corey Minyard, MontaVista Software, LLC
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
25 #ifndef HW_IPMI_H
26 #define HW_IPMI_H
28 #include "exec/memory.h"
29 #include "qemu-common.h"
30 #include "hw/qdev.h"
32 #define MAX_IPMI_MSG_SIZE 300
34 enum ipmi_op {
35 IPMI_RESET_CHASSIS,
36 IPMI_POWEROFF_CHASSIS,
37 IPMI_POWERON_CHASSIS,
38 IPMI_POWERCYCLE_CHASSIS,
39 IPMI_PULSE_DIAG_IRQ,
40 IPMI_SHUTDOWN_VIA_ACPI_OVERTEMP,
41 IPMI_SEND_NMI
44 #define IPMI_CC_INVALID_CMD 0xc1
45 #define IPMI_CC_COMMAND_INVALID_FOR_LUN 0xc2
46 #define IPMI_CC_TIMEOUT 0xc3
47 #define IPMI_CC_OUT_OF_SPACE 0xc4
48 #define IPMI_CC_INVALID_RESERVATION 0xc5
49 #define IPMI_CC_REQUEST_DATA_TRUNCATED 0xc6
50 #define IPMI_CC_REQUEST_DATA_LENGTH_INVALID 0xc7
51 #define IPMI_CC_PARM_OUT_OF_RANGE 0xc9
52 #define IPMI_CC_CANNOT_RETURN_REQ_NUM_BYTES 0xca
53 #define IPMI_CC_REQ_ENTRY_NOT_PRESENT 0xcb
54 #define IPMI_CC_INVALID_DATA_FIELD 0xcc
55 #define IPMI_CC_BMC_INIT_IN_PROGRESS 0xd2
56 #define IPMI_CC_COMMAND_NOT_SUPPORTED 0xd5
58 #define IPMI_NETFN_APP 0x06
60 #define IPMI_DEBUG 1
62 /* Specified in the SMBIOS spec. */
63 #define IPMI_SMBIOS_KCS 0x01
64 #define IPMI_SMBIOS_SMIC 0x02
65 #define IPMI_SMBIOS_BT 0x03
66 #define IPMI_SMBIOS_SSIF 0x04
69 * Used for transferring information to interfaces that add
70 * entries to firmware tables.
72 typedef struct IPMIFwInfo {
73 const char *interface_name;
74 int interface_type;
75 uint8_t ipmi_spec_major_revision;
76 uint8_t ipmi_spec_minor_revision;
77 uint8_t i2c_slave_address;
78 uint32_t uuid;
80 uint64_t base_address;
81 uint64_t register_length;
82 uint8_t register_spacing;
83 enum {
84 IPMI_MEMSPACE_IO,
85 IPMI_MEMSPACE_MEM32,
86 IPMI_MEMSPACE_MEM64,
87 IPMI_MEMSPACE_SMBUS
88 } memspace;
90 int interrupt_number;
91 enum {
92 IPMI_LEVEL_IRQ,
93 IPMI_EDGE_IRQ
94 } irq_type;
95 } IPMIFwInfo;
98 * Called by each instantiated IPMI interface device to get it's uuid.
100 uint32_t ipmi_next_uuid(void);
102 /* IPMI Interface types (KCS, SMIC, BT) are prefixed with this */
103 #define TYPE_IPMI_INTERFACE_PREFIX "ipmi-interface-"
106 * An IPMI Interface, the interface for talking between the target
107 * and the BMC.
109 #define TYPE_IPMI_INTERFACE "ipmi-interface"
110 #define IPMI_INTERFACE(obj) \
111 INTERFACE_CHECK(IPMIInterface, (obj), TYPE_IPMI_INTERFACE)
112 #define IPMI_INTERFACE_CLASS(class) \
113 OBJECT_CLASS_CHECK(IPMIInterfaceClass, (class), TYPE_IPMI_INTERFACE)
114 #define IPMI_INTERFACE_GET_CLASS(class) \
115 OBJECT_GET_CLASS(IPMIInterfaceClass, (class), TYPE_IPMI_INTERFACE)
117 typedef struct IPMIInterface {
118 Object parent;
119 } IPMIInterface;
121 typedef struct IPMIInterfaceClass {
122 InterfaceClass parent;
124 void (*init)(struct IPMIInterface *s, Error **errp);
127 * Perform various operations on the hardware. If checkonly is
128 * true, it will return if the operation can be performed, but it
129 * will not do the operation.
131 int (*do_hw_op)(struct IPMIInterface *s, enum ipmi_op op, int checkonly);
134 * Enable/disable irqs on the interface when the BMC requests this.
136 void (*set_irq_enable)(struct IPMIInterface *s, int val);
139 * Handle an event that occurred on the interface, generally the.
140 * target writing to a register.
142 void (*handle_if_event)(struct IPMIInterface *s);
145 * The interfaces use this to perform certain ops
147 void (*set_atn)(struct IPMIInterface *s, int val, int irq);
150 * Got an IPMI warm/cold reset.
152 void (*reset)(struct IPMIInterface *s, bool is_cold);
155 * Handle a response from the bmc.
157 void (*handle_rsp)(struct IPMIInterface *s, uint8_t msg_id,
158 unsigned char *rsp, unsigned int rsp_len);
161 * Set by the owner to hold the backend data for the interface.
163 void *(*get_backend_data)(struct IPMIInterface *s);
166 * Return the firmware info for a device.
168 void (*get_fwinfo)(struct IPMIInterface *s, IPMIFwInfo *info);
169 } IPMIInterfaceClass;
172 * Define a BMC simulator (or perhaps a connection to a real BMC)
174 #define TYPE_IPMI_BMC "ipmi-bmc"
175 #define IPMI_BMC(obj) \
176 OBJECT_CHECK(IPMIBmc, (obj), TYPE_IPMI_BMC)
177 #define IPMI_BMC_CLASS(obj_class) \
178 OBJECT_CLASS_CHECK(IPMIBmcClass, (obj_class), TYPE_IPMI_BMC)
179 #define IPMI_BMC_GET_CLASS(obj) \
180 OBJECT_GET_CLASS(IPMIBmcClass, (obj), TYPE_IPMI_BMC)
182 typedef struct IPMIBmc {
183 DeviceState parent;
185 uint8_t slave_addr;
187 IPMIInterface *intf;
188 } IPMIBmc;
190 typedef struct IPMIBmcClass {
191 DeviceClass parent;
193 /* Called when the system resets to report to the bmc. */
194 void (*handle_reset)(struct IPMIBmc *s);
197 * Handle a command to the bmc.
199 void (*handle_command)(struct IPMIBmc *s,
200 uint8_t *cmd, unsigned int cmd_len,
201 unsigned int max_cmd_len,
202 uint8_t msg_id);
203 } IPMIBmcClass;
206 * Add a link property to obj that points to a BMC.
208 void ipmi_bmc_find_and_link(Object *obj, Object **bmc);
210 #ifdef IPMI_DEBUG
211 #define ipmi_debug(fs, ...) \
212 fprintf(stderr, "IPMI (%s): " fs, __func__, ##__VA_ARGS__)
213 #else
214 #define ipmi_debug(fs, ...)
215 #endif
217 struct ipmi_sdr_header {
218 uint8_t rec_id[2];
219 uint8_t sdr_version; /* 0x51 */
220 uint8_t rec_type;
221 uint8_t rec_length;
223 #define IPMI_SDR_HEADER_SIZE sizeof(struct ipmi_sdr_header)
225 #define ipmi_sdr_recid(sdr) ((sdr)->rec_id[0] | ((sdr)->rec_id[1] << 8))
226 #define ipmi_sdr_length(sdr) ((sdr)->rec_length + IPMI_SDR_HEADER_SIZE)
229 * 43.2 SDR Type 02h. Compact Sensor Record
231 #define IPMI_SDR_COMPACT_TYPE 2
233 struct ipmi_sdr_compact {
234 struct ipmi_sdr_header header;
236 uint8_t sensor_owner_id;
237 uint8_t sensor_owner_lun;
238 uint8_t sensor_owner_number; /* byte 8 */
239 uint8_t entity_id;
240 uint8_t entity_instance;
241 uint8_t sensor_init;
242 uint8_t sensor_caps;
243 uint8_t sensor_type;
244 uint8_t reading_type;
245 uint8_t assert_mask[2]; /* byte 16 */
246 uint8_t deassert_mask[2];
247 uint8_t discrete_mask[2];
248 uint8_t sensor_unit1;
249 uint8_t sensor_unit2;
250 uint8_t sensor_unit3;
251 uint8_t sensor_direction[2]; /* byte 24 */
252 uint8_t positive_threshold;
253 uint8_t negative_threshold;
254 uint8_t reserved[3];
255 uint8_t oem;
256 uint8_t id_str_len; /* byte 32 */
257 uint8_t id_string[16];
260 typedef uint8_t ipmi_sdr_compact_buffer[sizeof(struct ipmi_sdr_compact)];
262 int ipmi_bmc_sdr_find(IPMIBmc *b, uint16_t recid,
263 const struct ipmi_sdr_compact **sdr, uint16_t *nextrec);
264 void ipmi_bmc_gen_event(IPMIBmc *b, uint8_t *evt, bool log);
266 #endif