4 * Copyright (c) 2003-2008 Fabrice Bellard
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, see <http://www.gnu.org/licenses/>.
20 #include "qemu/osdep.h"
21 #include "qemu-common.h"
22 #include "qemu/units.h"
23 #include "sysemu/tcg.h"
24 #include "qemu-version.h"
25 #include <sys/syscall.h>
26 #include <sys/resource.h>
28 #include "qapi/error.h"
30 #include "qemu/path.h"
31 #include "qemu/queue.h"
32 #include "qemu/config-file.h"
33 #include "qemu/cutils.h"
34 #include "qemu/error-report.h"
35 #include "qemu/help_option.h"
36 #include "qemu/module.h"
38 #include "exec/exec-all.h"
40 #include "qemu/timer.h"
41 #include "qemu/envlist.h"
42 #include "qemu/guest-random.h"
44 #include "trace/control.h"
45 #include "target_elf.h"
46 #include "cpu_loop-common.h"
47 #include "crypto/init.h"
52 static const char *argv0
;
53 static int gdbstub_port
;
54 static envlist_t
*envlist
;
55 static const char *cpu_model
;
56 static const char *cpu_type
;
57 static const char *seed_optarg
;
58 unsigned long mmap_min_addr
;
59 unsigned long guest_base
;
63 * When running 32-on-64 we should make sure we can fit all of the possible
64 * guest address space into a contiguous chunk of virtual host memory.
66 * This way we will never overlap with our own libraries or binaries or stack
67 * or anything else that QEMU maps.
69 * Many cpus reserve the high bit (or more than one for some 64-bit cpus)
70 * of the address for the kernel. Some cpus rely on this and user space
71 * uses the high bit(s) for pointer tagging and the like. For them, we
72 * must preserve the expected address space.
74 #ifndef MAX_RESERVED_VA
75 # if HOST_LONG_BITS > TARGET_VIRT_ADDR_SPACE_BITS
76 # if TARGET_VIRT_ADDR_SPACE_BITS == 32 && \
77 (TARGET_LONG_BITS == 32 || defined(TARGET_ABI32))
78 /* There are a number of places where we assign reserved_va to a variable
79 of type abi_ulong and expect it to fit. Avoid the last page. */
80 # define MAX_RESERVED_VA(CPU) (0xfffffffful & TARGET_PAGE_MASK)
82 # define MAX_RESERVED_VA(CPU) (1ul << TARGET_VIRT_ADDR_SPACE_BITS)
85 # define MAX_RESERVED_VA(CPU) 0
89 unsigned long reserved_va
;
91 static void usage(int exitcode
);
93 static const char *interp_prefix
= CONFIG_QEMU_INTERP_PREFIX
;
94 const char *qemu_uname_release
;
96 /* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
97 we allocate a bigger stack. Need a better solution, for example
98 by remapping the process stack directly at the right place */
99 unsigned long guest_stack_size
= 8 * 1024 * 1024UL;
101 void gemu_log(const char *fmt
, ...)
106 vfprintf(stderr
, fmt
, ap
);
110 #if defined(TARGET_I386)
111 int cpu_get_pic_interrupt(CPUX86State
*env
)
117 /***********************************************************/
118 /* Helper routines for implementing atomic operations. */
120 /* Make sure everything is in a consistent state for calling fork(). */
121 void fork_start(void)
128 void fork_end(int child
)
130 mmap_fork_end(child
);
132 CPUState
*cpu
, *next_cpu
;
133 /* Child processes created by fork() only have a single thread.
134 Discard information about the parent threads. */
135 CPU_FOREACH_SAFE(cpu
, next_cpu
) {
136 if (cpu
!= thread_cpu
) {
137 QTAILQ_REMOVE_RCU(&cpus
, cpu
, node
);
140 qemu_init_cpu_list();
141 gdbserver_fork(thread_cpu
);
142 /* qemu_init_cpu_list() takes care of reinitializing the
143 * exclusive state, so we don't need to end_exclusive() here.
151 __thread CPUState
*thread_cpu
;
153 bool qemu_cpu_is_self(CPUState
*cpu
)
155 return thread_cpu
== cpu
;
158 void qemu_cpu_kick(CPUState
*cpu
)
163 void task_settid(TaskState
*ts
)
165 if (ts
->ts_tid
== 0) {
166 ts
->ts_tid
= (pid_t
)syscall(SYS_gettid
);
170 void stop_all_tasks(void)
173 * We trust that when using NPTL, start_exclusive()
174 * handles thread stopping correctly.
179 /* Assumes contents are already zeroed. */
180 void init_task_state(TaskState
*ts
)
183 ts
->sigaltstack_used
= (struct target_sigaltstack
) {
186 .ss_flags
= TARGET_SS_DISABLE
,
190 CPUArchState
*cpu_copy(CPUArchState
*env
)
192 CPUState
*cpu
= env_cpu(env
);
193 CPUState
*new_cpu
= cpu_create(cpu_type
);
194 CPUArchState
*new_env
= new_cpu
->env_ptr
;
198 /* Reset non arch specific state */
201 memcpy(new_env
, env
, sizeof(CPUArchState
));
203 /* Clone all break/watchpoints.
204 Note: Once we support ptrace with hw-debug register access, make sure
205 BP_CPU break/watchpoints are handled correctly on clone. */
206 QTAILQ_INIT(&new_cpu
->breakpoints
);
207 QTAILQ_INIT(&new_cpu
->watchpoints
);
208 QTAILQ_FOREACH(bp
, &cpu
->breakpoints
, entry
) {
209 cpu_breakpoint_insert(new_cpu
, bp
->pc
, bp
->flags
, NULL
);
211 QTAILQ_FOREACH(wp
, &cpu
->watchpoints
, entry
) {
212 cpu_watchpoint_insert(new_cpu
, wp
->vaddr
, wp
->len
, wp
->flags
, NULL
);
218 static void handle_arg_help(const char *arg
)
223 static void handle_arg_log(const char *arg
)
227 mask
= qemu_str_to_log_mask(arg
);
229 qemu_print_log_usage(stdout
);
232 qemu_log_needs_buffers();
236 static void handle_arg_dfilter(const char *arg
)
238 qemu_set_dfilter_ranges(arg
, &error_fatal
);
241 static void handle_arg_log_filename(const char *arg
)
243 qemu_set_log_filename(arg
, &error_fatal
);
246 static void handle_arg_set_env(const char *arg
)
250 while ((token
= strsep(&p
, ",")) != NULL
) {
251 if (envlist_setenv(envlist
, token
) != 0) {
258 static void handle_arg_unset_env(const char *arg
)
262 while ((token
= strsep(&p
, ",")) != NULL
) {
263 if (envlist_unsetenv(envlist
, token
) != 0) {
270 static void handle_arg_argv0(const char *arg
)
275 static void handle_arg_stack_size(const char *arg
)
278 guest_stack_size
= strtoul(arg
, &p
, 0);
279 if (guest_stack_size
== 0) {
284 guest_stack_size
*= MiB
;
285 } else if (*p
== 'k' || *p
== 'K') {
286 guest_stack_size
*= KiB
;
290 static void handle_arg_ld_prefix(const char *arg
)
292 interp_prefix
= strdup(arg
);
295 static void handle_arg_pagesize(const char *arg
)
297 qemu_host_page_size
= atoi(arg
);
298 if (qemu_host_page_size
== 0 ||
299 (qemu_host_page_size
& (qemu_host_page_size
- 1)) != 0) {
300 fprintf(stderr
, "page size must be a power of two\n");
305 static void handle_arg_seed(const char *arg
)
310 static void handle_arg_gdb(const char *arg
)
312 gdbstub_port
= atoi(arg
);
315 static void handle_arg_uname(const char *arg
)
317 qemu_uname_release
= strdup(arg
);
320 static void handle_arg_cpu(const char *arg
)
322 cpu_model
= strdup(arg
);
323 if (cpu_model
== NULL
|| is_help_option(cpu_model
)) {
324 /* XXX: implement xxx_cpu_list for targets that still miss it */
325 #if defined(cpu_list)
332 static void handle_arg_guest_base(const char *arg
)
334 guest_base
= strtol(arg
, NULL
, 0);
338 static void handle_arg_reserved_va(const char *arg
)
342 reserved_va
= strtoul(arg
, &p
, 0);
356 unsigned long unshifted
= reserved_va
;
358 reserved_va
<<= shift
;
359 if (reserved_va
>> shift
!= unshifted
) {
360 fprintf(stderr
, "Reserved virtual address too big\n");
365 fprintf(stderr
, "Unrecognised -R size suffix '%s'\n", p
);
370 static void handle_arg_singlestep(const char *arg
)
375 static void handle_arg_strace(const char *arg
)
380 static void handle_arg_version(const char *arg
)
382 printf("qemu-" TARGET_NAME
" version " QEMU_FULL_VERSION
383 "\n" QEMU_COPYRIGHT
"\n");
387 static char *trace_file
;
388 static void handle_arg_trace(const char *arg
)
391 trace_file
= trace_opt_parse(arg
);
394 #if defined(TARGET_XTENSA)
395 static void handle_arg_abi_call0(const char *arg
)
397 xtensa_set_abi_call0();
401 struct qemu_argument
{
405 void (*handle_opt
)(const char *arg
);
410 static const struct qemu_argument arg_table
[] = {
411 {"h", "", false, handle_arg_help
,
412 "", "print this help"},
413 {"help", "", false, handle_arg_help
,
415 {"g", "QEMU_GDB", true, handle_arg_gdb
,
416 "port", "wait gdb connection to 'port'"},
417 {"L", "QEMU_LD_PREFIX", true, handle_arg_ld_prefix
,
418 "path", "set the elf interpreter prefix to 'path'"},
419 {"s", "QEMU_STACK_SIZE", true, handle_arg_stack_size
,
420 "size", "set the stack size to 'size' bytes"},
421 {"cpu", "QEMU_CPU", true, handle_arg_cpu
,
422 "model", "select CPU (-cpu help for list)"},
423 {"E", "QEMU_SET_ENV", true, handle_arg_set_env
,
424 "var=value", "sets targets environment variable (see below)"},
425 {"U", "QEMU_UNSET_ENV", true, handle_arg_unset_env
,
426 "var", "unsets targets environment variable (see below)"},
427 {"0", "QEMU_ARGV0", true, handle_arg_argv0
,
428 "argv0", "forces target process argv[0] to be 'argv0'"},
429 {"r", "QEMU_UNAME", true, handle_arg_uname
,
430 "uname", "set qemu uname release string to 'uname'"},
431 {"B", "QEMU_GUEST_BASE", true, handle_arg_guest_base
,
432 "address", "set guest_base address to 'address'"},
433 {"R", "QEMU_RESERVED_VA", true, handle_arg_reserved_va
,
434 "size", "reserve 'size' bytes for guest virtual address space"},
435 {"d", "QEMU_LOG", true, handle_arg_log
,
436 "item[,...]", "enable logging of specified items "
437 "(use '-d help' for a list of items)"},
438 {"dfilter", "QEMU_DFILTER", true, handle_arg_dfilter
,
439 "range[,...]","filter logging based on address range"},
440 {"D", "QEMU_LOG_FILENAME", true, handle_arg_log_filename
,
441 "logfile", "write logs to 'logfile' (default stderr)"},
442 {"p", "QEMU_PAGESIZE", true, handle_arg_pagesize
,
443 "pagesize", "set the host page size to 'pagesize'"},
444 {"singlestep", "QEMU_SINGLESTEP", false, handle_arg_singlestep
,
445 "", "run in singlestep mode"},
446 {"strace", "QEMU_STRACE", false, handle_arg_strace
,
447 "", "log system calls"},
448 {"seed", "QEMU_RAND_SEED", true, handle_arg_seed
,
449 "", "Seed for pseudo-random number generator"},
450 {"trace", "QEMU_TRACE", true, handle_arg_trace
,
451 "", "[[enable=]<pattern>][,events=<file>][,file=<file>]"},
452 {"version", "QEMU_VERSION", false, handle_arg_version
,
453 "", "display version information and exit"},
454 #if defined(TARGET_XTENSA)
455 {"xtensa-abi-call0", "QEMU_XTENSA_ABI_CALL0", false, handle_arg_abi_call0
,
456 "", "assume CALL0 Xtensa ABI"},
458 {NULL
, NULL
, false, NULL
, NULL
, NULL
}
461 static void usage(int exitcode
)
463 const struct qemu_argument
*arginfo
;
467 printf("usage: qemu-" TARGET_NAME
" [options] program [arguments...]\n"
468 "Linux CPU emulator (compiled for " TARGET_NAME
" emulation)\n"
470 "Options and associated environment variables:\n"
473 /* Calculate column widths. We must always have at least enough space
474 * for the column header.
476 maxarglen
= strlen("Argument");
477 maxenvlen
= strlen("Env-variable");
479 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
480 int arglen
= strlen(arginfo
->argv
);
481 if (arginfo
->has_arg
) {
482 arglen
+= strlen(arginfo
->example
) + 1;
484 if (strlen(arginfo
->env
) > maxenvlen
) {
485 maxenvlen
= strlen(arginfo
->env
);
487 if (arglen
> maxarglen
) {
492 printf("%-*s %-*s Description\n", maxarglen
+1, "Argument",
493 maxenvlen
, "Env-variable");
495 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
496 if (arginfo
->has_arg
) {
497 printf("-%s %-*s %-*s %s\n", arginfo
->argv
,
498 (int)(maxarglen
- strlen(arginfo
->argv
) - 1),
499 arginfo
->example
, maxenvlen
, arginfo
->env
, arginfo
->help
);
501 printf("-%-*s %-*s %s\n", maxarglen
, arginfo
->argv
,
502 maxenvlen
, arginfo
->env
,
509 "QEMU_LD_PREFIX = %s\n"
510 "QEMU_STACK_SIZE = %ld byte\n",
515 "You can use -E and -U options or the QEMU_SET_ENV and\n"
516 "QEMU_UNSET_ENV environment variables to set and unset\n"
517 "environment variables for the target process.\n"
518 "It is possible to provide several variables by separating them\n"
519 "by commas in getsubopt(3) style. Additionally it is possible to\n"
520 "provide the -E and -U options multiple times.\n"
521 "The following lines are equivalent:\n"
522 " -E var1=val2 -E var2=val2 -U LD_PRELOAD -U LD_DEBUG\n"
523 " -E var1=val2,var2=val2 -U LD_PRELOAD,LD_DEBUG\n"
524 " QEMU_SET_ENV=var1=val2,var2=val2 QEMU_UNSET_ENV=LD_PRELOAD,LD_DEBUG\n"
525 "Note that if you provide several changes to a single variable\n"
526 "the last change will stay in effect.\n"
528 QEMU_HELP_BOTTOM
"\n");
533 static int parse_args(int argc
, char **argv
)
537 const struct qemu_argument
*arginfo
;
539 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
540 if (arginfo
->env
== NULL
) {
544 r
= getenv(arginfo
->env
);
546 arginfo
->handle_opt(r
);
552 if (optind
>= argc
) {
561 if (!strcmp(r
, "-")) {
564 /* Treat --foo the same as -foo. */
569 for (arginfo
= arg_table
; arginfo
->handle_opt
!= NULL
; arginfo
++) {
570 if (!strcmp(r
, arginfo
->argv
)) {
571 if (arginfo
->has_arg
) {
572 if (optind
>= argc
) {
573 (void) fprintf(stderr
,
574 "qemu: missing argument for option '%s'\n", r
);
577 arginfo
->handle_opt(argv
[optind
]);
580 arginfo
->handle_opt(NULL
);
586 /* no option matched the current argv */
587 if (arginfo
->handle_opt
== NULL
) {
588 (void) fprintf(stderr
, "qemu: unknown option '%s'\n", r
);
593 if (optind
>= argc
) {
594 (void) fprintf(stderr
, "qemu: no user program specified\n");
598 exec_path
= argv
[optind
];
603 int main(int argc
, char **argv
, char **envp
)
605 struct target_pt_regs regs1
, *regs
= ®s1
;
606 struct image_info info1
, *info
= &info1
;
607 struct linux_binprm bprm
;
612 char **target_environ
, **wrk
;
618 unsigned long max_reserved_va
;
621 module_call_init(MODULE_INIT_TRACE
);
622 qemu_init_cpu_list();
623 module_call_init(MODULE_INIT_QOM
);
625 envlist
= envlist_create();
627 /* add current environment into the list */
628 for (wrk
= environ
; *wrk
!= NULL
; wrk
++) {
629 (void) envlist_setenv(envlist
, *wrk
);
632 /* Read the stack limit from the kernel. If it's "unlimited",
633 then we can do little else besides use the default. */
636 if (getrlimit(RLIMIT_STACK
, &lim
) == 0
637 && lim
.rlim_cur
!= RLIM_INFINITY
638 && lim
.rlim_cur
== (target_long
)lim
.rlim_cur
) {
639 guest_stack_size
= lim
.rlim_cur
;
645 qemu_add_opts(&qemu_trace_opts
);
647 optind
= parse_args(argc
, argv
);
649 if (!trace_init_backends()) {
652 trace_init_file(trace_file
);
655 memset(regs
, 0, sizeof(struct target_pt_regs
));
657 /* Zero out image_info */
658 memset(info
, 0, sizeof(struct image_info
));
660 memset(&bprm
, 0, sizeof (bprm
));
662 /* Scan interp_prefix dir for replacement files. */
663 init_paths(interp_prefix
);
665 init_qemu_uname_release();
667 execfd
= qemu_getauxval(AT_EXECFD
);
669 execfd
= open(exec_path
, O_RDONLY
);
671 printf("Error while loading %s: %s\n", exec_path
, strerror(errno
));
676 if (cpu_model
== NULL
) {
677 cpu_model
= cpu_get_model(get_elf_eflags(execfd
));
679 cpu_type
= parse_cpu_option(cpu_model
);
681 /* init tcg before creating CPUs and to get qemu_host_page_size */
684 cpu
= cpu_create(cpu_type
);
690 * Reserving too much vm space via mmap can run into problems
691 * with rlimits, oom due to page table creation, etc. We will
692 * still try it, if directed by the command-line option, but
695 max_reserved_va
= MAX_RESERVED_VA(cpu
);
696 if (reserved_va
!= 0) {
697 if (max_reserved_va
&& reserved_va
> max_reserved_va
) {
698 fprintf(stderr
, "Reserved virtual address too big\n");
701 } else if (HOST_LONG_BITS
== 64 && TARGET_VIRT_ADDR_SPACE_BITS
<= 32) {
703 * reserved_va must be aligned with the host page size
704 * as it is used with mmap()
706 reserved_va
= max_reserved_va
& qemu_host_page_mask
;
711 if (seed_optarg
!= NULL
) {
712 qemu_guest_random_seed_main(seed_optarg
, &err
);
717 error_reportf_err(err
, "cannot initialize crypto: ");
722 target_environ
= envlist_to_environ(envlist
, NULL
);
723 envlist_free(envlist
);
726 * Now that page sizes are configured in tcg_exec_init() we can do
727 * proper page alignment for guest_base.
729 guest_base
= HOST_PAGE_ALIGN(guest_base
);
731 if (reserved_va
|| have_guest_base
) {
732 guest_base
= init_guest_space(guest_base
, reserved_va
, 0,
734 if (guest_base
== (unsigned long)-1) {
735 fprintf(stderr
, "Unable to reserve 0x%lx bytes of virtual address "
736 "space for use as guest address space (check your virtual "
737 "memory ulimit setting or reserve less using -R option)\n",
743 mmap_next_start
= reserved_va
;
748 * Read in mmap_min_addr kernel parameter. This value is used
749 * When loading the ELF image to determine whether guest_base
750 * is needed. It is also used in mmap_find_vma.
755 if ((fp
= fopen("/proc/sys/vm/mmap_min_addr", "r")) != NULL
) {
757 if (fscanf(fp
, "%lu", &tmp
) == 1) {
759 qemu_log_mask(CPU_LOG_PAGE
, "host mmap_min_addr=0x%lx\n", mmap_min_addr
);
766 * Prepare copy of argv vector for target.
768 target_argc
= argc
- optind
;
769 target_argv
= calloc(target_argc
+ 1, sizeof (char *));
770 if (target_argv
== NULL
) {
771 (void) fprintf(stderr
, "Unable to allocate memory for target_argv\n");
776 * If argv0 is specified (using '-0' switch) we replace
777 * argv[0] pointer with the given one.
781 target_argv
[i
++] = strdup(argv0
);
783 for (; i
< target_argc
; i
++) {
784 target_argv
[i
] = strdup(argv
[optind
+ i
]);
786 target_argv
[target_argc
] = NULL
;
788 ts
= g_new0(TaskState
, 1);
790 /* build Task State */
796 ret
= loader_exec(execfd
, exec_path
, target_argv
, target_environ
, regs
,
799 printf("Error while loading %s: %s\n", exec_path
, strerror(-ret
));
803 for (wrk
= target_environ
; *wrk
; wrk
++) {
807 g_free(target_environ
);
809 if (qemu_loglevel_mask(CPU_LOG_PAGE
)) {
810 qemu_log("guest_base 0x%lx\n", guest_base
);
813 qemu_log("start_brk 0x" TARGET_ABI_FMT_lx
"\n", info
->start_brk
);
814 qemu_log("end_code 0x" TARGET_ABI_FMT_lx
"\n", info
->end_code
);
815 qemu_log("start_code 0x" TARGET_ABI_FMT_lx
"\n", info
->start_code
);
816 qemu_log("start_data 0x" TARGET_ABI_FMT_lx
"\n", info
->start_data
);
817 qemu_log("end_data 0x" TARGET_ABI_FMT_lx
"\n", info
->end_data
);
818 qemu_log("start_stack 0x" TARGET_ABI_FMT_lx
"\n", info
->start_stack
);
819 qemu_log("brk 0x" TARGET_ABI_FMT_lx
"\n", info
->brk
);
820 qemu_log("entry 0x" TARGET_ABI_FMT_lx
"\n", info
->entry
);
821 qemu_log("argv_start 0x" TARGET_ABI_FMT_lx
"\n", info
->arg_start
);
822 qemu_log("env_start 0x" TARGET_ABI_FMT_lx
"\n",
823 info
->arg_end
+ (abi_ulong
)sizeof(abi_ulong
));
824 qemu_log("auxv_start 0x" TARGET_ABI_FMT_lx
"\n", info
->saved_auxv
);
827 target_set_brk(info
->brk
);
831 /* Now that we've loaded the binary, GUEST_BASE is fixed. Delay
832 generating the prologue until now so that the prologue can take
833 the real value of GUEST_BASE into account. */
834 tcg_prologue_init(tcg_ctx
);
837 target_cpu_copy_regs(env
, regs
);
840 if (gdbserver_start(gdbstub_port
) < 0) {
841 fprintf(stderr
, "qemu: could not open gdbserver on port %d\n",
845 gdb_handlesig(cpu
, 0);