4 * Copyright IBM, Corp. 2011
7 * Anthony Liguori <aliguori@us.ibm.com>
9 * This work is licensed under the terms of the GNU GPL, version 2 or later.
10 * See the COPYING file in the top-level directory.
14 #include "sysemu/qtest.h"
16 #include "sysemu/char.h"
17 #include "exec/ioport.h"
18 #include "exec/memory.h"
20 #include "sysemu/accel.h"
21 #include "sysemu/sysemu.h"
22 #include "sysemu/cpus.h"
23 #include "qemu/config-file.h"
24 #include "qemu/option.h"
25 #include "qemu/error-report.h"
31 static DeviceState
*irq_intercept_dev
;
32 static FILE *qtest_log_fp
;
33 static CharDriverState
*qtest_chr
;
34 static GString
*inbuf
;
35 static int irq_levels
[MAX_IRQ
];
36 static qemu_timeval start_time
;
37 static bool qtest_opened
;
39 #define FMT_timeval "%ld.%06ld"
44 * Line based protocol, request/response based. Server can send async messages
45 * so clients should always handle many async messages before the response
52 * The qtest client is completely in charge of the QEMU_CLOCK_VIRTUAL. qtest commands
53 * let you adjust the value of the clock (monotonically). All the commands
54 * return the current value of the clock in nanoseconds.
59 * Advance the clock to the next deadline. Useful when waiting for
60 * asynchronous events.
65 * Advance the clock by NS nanoseconds.
70 * Advance the clock to NS nanoseconds (do nothing if it's already past).
72 * PIO and memory access:
101 * > writeq ADDR VALUE
119 * > write ADDR SIZE DATA
122 * ADDR, SIZE, VALUE are all integers parsed with strtoul() with a base of 0.
124 * DATA is an arbitrarily long hex number prefixed with '0x'. If it's smaller
125 * than the expected size, the value will be zero filled at the end of the data
130 * > irq_intercept_in QOM-PATH
133 * > irq_intercept_out QOM-PATH
136 * Attach to the gpio-in (resp. gpio-out) pins exported by the device at
137 * QOM-PATH. When the pin is triggered, one of the following async messages
138 * will be printed to the qtest stream:
143 * where NUM is an IRQ number. For the PC, interrupts can be intercepted
144 * simply with "irq_intercept_in ioapic" (note that IRQ0 comes out with
145 * NUM=0 even though it is remapped to GSI 2).
148 static int hex2nib(char ch
)
150 if (ch
>= '0' && ch
<= '9') {
152 } else if (ch
>= 'a' && ch
<= 'f') {
153 return 10 + (ch
- 'a');
154 } else if (ch
>= 'A' && ch
<= 'F') {
155 return 10 + (ch
- 'A');
161 static void qtest_get_time(qemu_timeval
*tv
)
163 qemu_gettimeofday(tv
);
164 tv
->tv_sec
-= start_time
.tv_sec
;
165 tv
->tv_usec
-= start_time
.tv_usec
;
166 if (tv
->tv_usec
< 0) {
167 tv
->tv_usec
+= 1000000;
172 static void qtest_send_prefix(CharDriverState
*chr
)
176 if (!qtest_log_fp
|| !qtest_opened
) {
181 fprintf(qtest_log_fp
, "[S +" FMT_timeval
"] ",
182 (long) tv
.tv_sec
, (long) tv
.tv_usec
);
185 static void GCC_FMT_ATTR(2, 3) qtest_send(CharDriverState
*chr
,
186 const char *fmt
, ...)
193 len
= vsnprintf(buffer
, sizeof(buffer
), fmt
, ap
);
196 qemu_chr_fe_write_all(chr
, (uint8_t *)buffer
, len
);
197 if (qtest_log_fp
&& qtest_opened
) {
198 fprintf(qtest_log_fp
, "%s", buffer
);
202 static void qtest_irq_handler(void *opaque
, int n
, int level
)
204 qemu_irq old_irq
= *(qemu_irq
*)opaque
;
205 qemu_set_irq(old_irq
, level
);
207 if (irq_levels
[n
] != level
) {
208 CharDriverState
*chr
= qtest_chr
;
209 irq_levels
[n
] = level
;
210 qtest_send_prefix(chr
);
211 qtest_send(chr
, "IRQ %s %d\n",
212 level
? "raise" : "lower", n
);
216 static void qtest_process_command(CharDriverState
*chr
, gchar
**words
)
218 const gchar
*command
;
229 fprintf(qtest_log_fp
, "[R +" FMT_timeval
"]",
230 (long) tv
.tv_sec
, (long) tv
.tv_usec
);
231 for (i
= 0; words
[i
]; i
++) {
232 fprintf(qtest_log_fp
, " %s", words
[i
]);
234 fprintf(qtest_log_fp
, "\n");
238 if (strcmp(words
[0], "irq_intercept_out") == 0
239 || strcmp(words
[0], "irq_intercept_in") == 0) {
244 dev
= DEVICE(object_resolve_path(words
[1], NULL
));
246 qtest_send_prefix(chr
);
247 qtest_send(chr
, "FAIL Unknown device\n");
251 if (irq_intercept_dev
) {
252 qtest_send_prefix(chr
);
253 if (irq_intercept_dev
!= dev
) {
254 qtest_send(chr
, "FAIL IRQ intercept already enabled\n");
256 qtest_send(chr
, "OK\n");
261 QLIST_FOREACH(ngl
, &dev
->gpios
, node
) {
262 /* We don't support intercept of named GPIOs yet */
266 if (words
[0][14] == 'o') {
268 for (i
= 0; i
< ngl
->num_out
; ++i
) {
269 qemu_irq
*disconnected
= g_new0(qemu_irq
, 1);
270 qemu_irq icpt
= qemu_allocate_irq(qtest_irq_handler
,
273 *disconnected
= qdev_intercept_gpio_out(dev
, icpt
,
277 qemu_irq_intercept_in(ngl
->in
, qtest_irq_handler
,
281 irq_intercept_dev
= dev
;
282 qtest_send_prefix(chr
);
283 qtest_send(chr
, "OK\n");
285 } else if (strcmp(words
[0], "outb") == 0 ||
286 strcmp(words
[0], "outw") == 0 ||
287 strcmp(words
[0], "outl") == 0) {
291 g_assert(words
[1] && words
[2]);
292 addr
= strtoul(words
[1], NULL
, 0);
293 value
= strtoul(words
[2], NULL
, 0);
295 if (words
[0][3] == 'b') {
296 cpu_outb(addr
, value
);
297 } else if (words
[0][3] == 'w') {
298 cpu_outw(addr
, value
);
299 } else if (words
[0][3] == 'l') {
300 cpu_outl(addr
, value
);
302 qtest_send_prefix(chr
);
303 qtest_send(chr
, "OK\n");
304 } else if (strcmp(words
[0], "inb") == 0 ||
305 strcmp(words
[0], "inw") == 0 ||
306 strcmp(words
[0], "inl") == 0) {
308 uint32_t value
= -1U;
311 addr
= strtoul(words
[1], NULL
, 0);
313 if (words
[0][2] == 'b') {
314 value
= cpu_inb(addr
);
315 } else if (words
[0][2] == 'w') {
316 value
= cpu_inw(addr
);
317 } else if (words
[0][2] == 'l') {
318 value
= cpu_inl(addr
);
320 qtest_send_prefix(chr
);
321 qtest_send(chr
, "OK 0x%04x\n", value
);
322 } else if (strcmp(words
[0], "writeb") == 0 ||
323 strcmp(words
[0], "writew") == 0 ||
324 strcmp(words
[0], "writel") == 0 ||
325 strcmp(words
[0], "writeq") == 0) {
329 g_assert(words
[1] && words
[2]);
330 addr
= strtoull(words
[1], NULL
, 0);
331 value
= strtoull(words
[2], NULL
, 0);
333 if (words
[0][5] == 'b') {
334 uint8_t data
= value
;
335 cpu_physical_memory_write(addr
, &data
, 1);
336 } else if (words
[0][5] == 'w') {
337 uint16_t data
= value
;
339 cpu_physical_memory_write(addr
, &data
, 2);
340 } else if (words
[0][5] == 'l') {
341 uint32_t data
= value
;
343 cpu_physical_memory_write(addr
, &data
, 4);
344 } else if (words
[0][5] == 'q') {
345 uint64_t data
= value
;
347 cpu_physical_memory_write(addr
, &data
, 8);
349 qtest_send_prefix(chr
);
350 qtest_send(chr
, "OK\n");
351 } else if (strcmp(words
[0], "readb") == 0 ||
352 strcmp(words
[0], "readw") == 0 ||
353 strcmp(words
[0], "readl") == 0 ||
354 strcmp(words
[0], "readq") == 0) {
356 uint64_t value
= UINT64_C(-1);
359 addr
= strtoull(words
[1], NULL
, 0);
361 if (words
[0][4] == 'b') {
363 cpu_physical_memory_read(addr
, &data
, 1);
365 } else if (words
[0][4] == 'w') {
367 cpu_physical_memory_read(addr
, &data
, 2);
368 value
= tswap16(data
);
369 } else if (words
[0][4] == 'l') {
371 cpu_physical_memory_read(addr
, &data
, 4);
372 value
= tswap32(data
);
373 } else if (words
[0][4] == 'q') {
374 cpu_physical_memory_read(addr
, &value
, 8);
377 qtest_send_prefix(chr
);
378 qtest_send(chr
, "OK 0x%016" PRIx64
"\n", value
);
379 } else if (strcmp(words
[0], "read") == 0) {
380 uint64_t addr
, len
, i
;
383 g_assert(words
[1] && words
[2]);
384 addr
= strtoull(words
[1], NULL
, 0);
385 len
= strtoull(words
[2], NULL
, 0);
387 data
= g_malloc(len
);
388 cpu_physical_memory_read(addr
, data
, len
);
390 qtest_send_prefix(chr
);
391 qtest_send(chr
, "OK 0x");
392 for (i
= 0; i
< len
; i
++) {
393 qtest_send(chr
, "%02x", data
[i
]);
395 qtest_send(chr
, "\n");
398 } else if (strcmp(words
[0], "write") == 0) {
399 uint64_t addr
, len
, i
;
403 g_assert(words
[1] && words
[2] && words
[3]);
404 addr
= strtoull(words
[1], NULL
, 0);
405 len
= strtoull(words
[2], NULL
, 0);
407 data_len
= strlen(words
[3]);
409 qtest_send(chr
, "ERR invalid argument size\n");
413 data
= g_malloc(len
);
414 for (i
= 0; i
< len
; i
++) {
415 if ((i
* 2 + 4) <= data_len
) {
416 data
[i
] = hex2nib(words
[3][i
* 2 + 2]) << 4;
417 data
[i
] |= hex2nib(words
[3][i
* 2 + 3]);
422 cpu_physical_memory_write(addr
, data
, len
);
425 qtest_send_prefix(chr
);
426 qtest_send(chr
, "OK\n");
427 } else if (qtest_enabled() && strcmp(words
[0], "clock_step") == 0) {
431 ns
= strtoll(words
[1], NULL
, 0);
433 ns
= qemu_clock_deadline_ns_all(QEMU_CLOCK_VIRTUAL
);
435 qtest_clock_warp(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
) + ns
);
436 qtest_send_prefix(chr
);
437 qtest_send(chr
, "OK %"PRIi64
"\n", (int64_t)qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
));
438 } else if (qtest_enabled() && strcmp(words
[0], "clock_set") == 0) {
442 ns
= strtoll(words
[1], NULL
, 0);
443 qtest_clock_warp(ns
);
444 qtest_send_prefix(chr
);
445 qtest_send(chr
, "OK %"PRIi64
"\n", (int64_t)qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
));
447 qtest_send_prefix(chr
);
448 qtest_send(chr
, "FAIL Unknown command `%s'\n", words
[0]);
452 static void qtest_process_inbuf(CharDriverState
*chr
, GString
*inbuf
)
456 while ((end
= strchr(inbuf
->str
, '\n')) != NULL
) {
461 offset
= end
- inbuf
->str
;
463 cmd
= g_string_new_len(inbuf
->str
, offset
);
464 g_string_erase(inbuf
, 0, offset
+ 1);
466 words
= g_strsplit(cmd
->str
, " ", 0);
467 qtest_process_command(chr
, words
);
470 g_string_free(cmd
, TRUE
);
474 static void qtest_read(void *opaque
, const uint8_t *buf
, int size
)
476 CharDriverState
*chr
= opaque
;
478 g_string_append_len(inbuf
, (const gchar
*)buf
, size
);
479 qtest_process_inbuf(chr
, inbuf
);
482 static int qtest_can_read(void *opaque
)
487 static void qtest_event(void *opaque
, int event
)
492 case CHR_EVENT_OPENED
:
494 * We used to call qemu_system_reset() here, hoping we could
495 * use the same process for multiple tests that way. Never
496 * used. Injects an extra reset even when it's not used, and
497 * that can mess up tests, e.g. -boot once.
499 for (i
= 0; i
< ARRAY_SIZE(irq_levels
); i
++) {
502 qemu_gettimeofday(&start_time
);
505 fprintf(qtest_log_fp
, "[I " FMT_timeval
"] OPENED\n",
506 (long) start_time
.tv_sec
, (long) start_time
.tv_usec
);
509 case CHR_EVENT_CLOSED
:
510 qtest_opened
= false;
514 fprintf(qtest_log_fp
, "[I +" FMT_timeval
"] CLOSED\n",
515 (long) tv
.tv_sec
, (long) tv
.tv_usec
);
523 static void configure_qtest_icount(const char *options
)
525 QemuOpts
*opts
= qemu_opts_parse(qemu_find_opts("icount"), options
, 1);
526 configure_icount(opts
, &error_abort
);
530 static int qtest_init_accel(MachineState
*ms
)
532 configure_qtest_icount("0");
536 void qtest_init(const char *qtest_chrdev
, const char *qtest_log
, Error
**errp
)
538 CharDriverState
*chr
;
540 chr
= qemu_chr_new("qtest", qtest_chrdev
, NULL
);
543 error_setg(errp
, "Failed to initialize device for qtest: \"%s\"",
549 if (strcmp(qtest_log
, "none") != 0) {
550 qtest_log_fp
= fopen(qtest_log
, "w+");
553 qtest_log_fp
= stderr
;
556 qemu_chr_add_handlers(chr
, qtest_can_read
, qtest_read
, qtest_event
, chr
);
557 qemu_chr_fe_set_echo(chr
, true);
559 inbuf
= g_string_new("");
563 bool qtest_driver(void)
568 static void qtest_accel_class_init(ObjectClass
*oc
, void *data
)
570 AccelClass
*ac
= ACCEL_CLASS(oc
);
572 ac
->available
= qtest_available
;
573 ac
->init_machine
= qtest_init_accel
;
574 ac
->allowed
= &qtest_allowed
;
577 #define TYPE_QTEST_ACCEL ACCEL_CLASS_NAME("qtest")
579 static const TypeInfo qtest_accel_type
= {
580 .name
= TYPE_QTEST_ACCEL
,
581 .parent
= TYPE_ACCEL
,
582 .class_init
= qtest_accel_class_init
,
585 static void qtest_type_init(void)
587 type_register_static(&qtest_accel_type
);
590 type_init(qtest_type_init
);