fuzz: Fix leak when assembling datadir path string
[qemu/ar7.git] / bsd-user / main.c
blobac40d79bfaacb4545dfdb94e479f0fe34df6d192
1 /*
2 * qemu user main
4 * Copyright (c) 2003-2008 Fabrice Bellard
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, see <http://www.gnu.org/licenses/>.
20 #include "qemu/osdep.h"
21 #include "qemu-common.h"
22 #include "qemu/units.h"
23 #include "sysemu/tcg.h"
24 #include "qemu-version.h"
25 #include <machine/trap.h>
27 #include "qapi/error.h"
28 #include "qemu.h"
29 #include "qemu/config-file.h"
30 #include "qemu/error-report.h"
31 #include "qemu/path.h"
32 #include "qemu/help_option.h"
33 #include "qemu/module.h"
34 #include "cpu.h"
35 #include "exec/exec-all.h"
36 #include "tcg/tcg.h"
37 #include "qemu/timer.h"
38 #include "qemu/envlist.h"
39 #include "exec/log.h"
40 #include "trace/control.h"
42 int singlestep;
43 unsigned long mmap_min_addr;
44 unsigned long guest_base;
45 bool have_guest_base;
46 unsigned long reserved_va;
48 static const char *interp_prefix = CONFIG_QEMU_INTERP_PREFIX;
49 const char *qemu_uname_release;
50 extern char **environ;
51 enum BSDType bsd_type;
53 /* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
54 we allocate a bigger stack. Need a better solution, for example
55 by remapping the process stack directly at the right place */
56 unsigned long x86_stack_size = 512 * 1024;
58 void gemu_log(const char *fmt, ...)
60 va_list ap;
62 va_start(ap, fmt);
63 vfprintf(stderr, fmt, ap);
64 va_end(ap);
67 #if defined(TARGET_I386)
68 int cpu_get_pic_interrupt(CPUX86State *env)
70 return -1;
72 #endif
74 void fork_start(void)
78 void fork_end(int child)
80 if (child) {
81 gdbserver_fork(thread_cpu);
85 #ifdef TARGET_I386
86 /***********************************************************/
87 /* CPUX86 core interface */
89 uint64_t cpu_get_tsc(CPUX86State *env)
91 return cpu_get_host_ticks();
94 static void write_dt(void *ptr, unsigned long addr, unsigned long limit,
95 int flags)
97 unsigned int e1, e2;
98 uint32_t *p;
99 e1 = (addr << 16) | (limit & 0xffff);
100 e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
101 e2 |= flags;
102 p = ptr;
103 p[0] = tswap32(e1);
104 p[1] = tswap32(e2);
107 static uint64_t *idt_table;
108 #ifdef TARGET_X86_64
109 static void set_gate64(void *ptr, unsigned int type, unsigned int dpl,
110 uint64_t addr, unsigned int sel)
112 uint32_t *p, e1, e2;
113 e1 = (addr & 0xffff) | (sel << 16);
114 e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
115 p = ptr;
116 p[0] = tswap32(e1);
117 p[1] = tswap32(e2);
118 p[2] = tswap32(addr >> 32);
119 p[3] = 0;
121 /* only dpl matters as we do only user space emulation */
122 static void set_idt(int n, unsigned int dpl)
124 set_gate64(idt_table + n * 2, 0, dpl, 0, 0);
126 #else
127 static void set_gate(void *ptr, unsigned int type, unsigned int dpl,
128 uint32_t addr, unsigned int sel)
130 uint32_t *p, e1, e2;
131 e1 = (addr & 0xffff) | (sel << 16);
132 e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
133 p = ptr;
134 p[0] = tswap32(e1);
135 p[1] = tswap32(e2);
138 /* only dpl matters as we do only user space emulation */
139 static void set_idt(int n, unsigned int dpl)
141 set_gate(idt_table + n, 0, dpl, 0, 0);
143 #endif
145 void cpu_loop(CPUX86State *env)
147 CPUState *cs = env_cpu(env);
148 int trapnr;
149 abi_ulong pc;
150 //target_siginfo_t info;
152 for(;;) {
153 cpu_exec_start(cs);
154 trapnr = cpu_exec(cs);
155 cpu_exec_end(cs);
156 process_queued_cpu_work(cs);
158 switch(trapnr) {
159 case 0x80:
160 /* syscall from int $0x80 */
161 if (bsd_type == target_freebsd) {
162 abi_ulong params = (abi_ulong) env->regs[R_ESP] +
163 sizeof(int32_t);
164 int32_t syscall_nr = env->regs[R_EAX];
165 int32_t arg1, arg2, arg3, arg4, arg5, arg6, arg7, arg8;
167 if (syscall_nr == TARGET_FREEBSD_NR_syscall) {
168 get_user_s32(syscall_nr, params);
169 params += sizeof(int32_t);
170 } else if (syscall_nr == TARGET_FREEBSD_NR___syscall) {
171 get_user_s32(syscall_nr, params);
172 params += sizeof(int64_t);
174 get_user_s32(arg1, params);
175 params += sizeof(int32_t);
176 get_user_s32(arg2, params);
177 params += sizeof(int32_t);
178 get_user_s32(arg3, params);
179 params += sizeof(int32_t);
180 get_user_s32(arg4, params);
181 params += sizeof(int32_t);
182 get_user_s32(arg5, params);
183 params += sizeof(int32_t);
184 get_user_s32(arg6, params);
185 params += sizeof(int32_t);
186 get_user_s32(arg7, params);
187 params += sizeof(int32_t);
188 get_user_s32(arg8, params);
189 env->regs[R_EAX] = do_freebsd_syscall(env,
190 syscall_nr,
191 arg1,
192 arg2,
193 arg3,
194 arg4,
195 arg5,
196 arg6,
197 arg7,
198 arg8);
199 } else { //if (bsd_type == target_openbsd)
200 env->regs[R_EAX] = do_openbsd_syscall(env,
201 env->regs[R_EAX],
202 env->regs[R_EBX],
203 env->regs[R_ECX],
204 env->regs[R_EDX],
205 env->regs[R_ESI],
206 env->regs[R_EDI],
207 env->regs[R_EBP]);
209 if (((abi_ulong)env->regs[R_EAX]) >= (abi_ulong)(-515)) {
210 env->regs[R_EAX] = -env->regs[R_EAX];
211 env->eflags |= CC_C;
212 } else {
213 env->eflags &= ~CC_C;
215 break;
216 #ifndef TARGET_ABI32
217 case EXCP_SYSCALL:
218 /* syscall from syscall instruction */
219 if (bsd_type == target_freebsd)
220 env->regs[R_EAX] = do_freebsd_syscall(env,
221 env->regs[R_EAX],
222 env->regs[R_EDI],
223 env->regs[R_ESI],
224 env->regs[R_EDX],
225 env->regs[R_ECX],
226 env->regs[8],
227 env->regs[9], 0, 0);
228 else { //if (bsd_type == target_openbsd)
229 env->regs[R_EAX] = do_openbsd_syscall(env,
230 env->regs[R_EAX],
231 env->regs[R_EDI],
232 env->regs[R_ESI],
233 env->regs[R_EDX],
234 env->regs[10],
235 env->regs[8],
236 env->regs[9]);
238 env->eip = env->exception_next_eip;
239 if (((abi_ulong)env->regs[R_EAX]) >= (abi_ulong)(-515)) {
240 env->regs[R_EAX] = -env->regs[R_EAX];
241 env->eflags |= CC_C;
242 } else {
243 env->eflags &= ~CC_C;
245 break;
246 #endif
247 #if 0
248 case EXCP0B_NOSEG:
249 case EXCP0C_STACK:
250 info.si_signo = SIGBUS;
251 info.si_errno = 0;
252 info.si_code = TARGET_SI_KERNEL;
253 info._sifields._sigfault._addr = 0;
254 queue_signal(env, info.si_signo, &info);
255 break;
256 case EXCP0D_GPF:
257 /* XXX: potential problem if ABI32 */
258 #ifndef TARGET_X86_64
259 if (env->eflags & VM_MASK) {
260 handle_vm86_fault(env);
261 } else
262 #endif
264 info.si_signo = SIGSEGV;
265 info.si_errno = 0;
266 info.si_code = TARGET_SI_KERNEL;
267 info._sifields._sigfault._addr = 0;
268 queue_signal(env, info.si_signo, &info);
270 break;
271 case EXCP0E_PAGE:
272 info.si_signo = SIGSEGV;
273 info.si_errno = 0;
274 if (!(env->error_code & 1))
275 info.si_code = TARGET_SEGV_MAPERR;
276 else
277 info.si_code = TARGET_SEGV_ACCERR;
278 info._sifields._sigfault._addr = env->cr[2];
279 queue_signal(env, info.si_signo, &info);
280 break;
281 case EXCP00_DIVZ:
282 #ifndef TARGET_X86_64
283 if (env->eflags & VM_MASK) {
284 handle_vm86_trap(env, trapnr);
285 } else
286 #endif
288 /* division by zero */
289 info.si_signo = SIGFPE;
290 info.si_errno = 0;
291 info.si_code = TARGET_FPE_INTDIV;
292 info._sifields._sigfault._addr = env->eip;
293 queue_signal(env, info.si_signo, &info);
295 break;
296 case EXCP01_DB:
297 case EXCP03_INT3:
298 #ifndef TARGET_X86_64
299 if (env->eflags & VM_MASK) {
300 handle_vm86_trap(env, trapnr);
301 } else
302 #endif
304 info.si_signo = SIGTRAP;
305 info.si_errno = 0;
306 if (trapnr == EXCP01_DB) {
307 info.si_code = TARGET_TRAP_BRKPT;
308 info._sifields._sigfault._addr = env->eip;
309 } else {
310 info.si_code = TARGET_SI_KERNEL;
311 info._sifields._sigfault._addr = 0;
313 queue_signal(env, info.si_signo, &info);
315 break;
316 case EXCP04_INTO:
317 case EXCP05_BOUND:
318 #ifndef TARGET_X86_64
319 if (env->eflags & VM_MASK) {
320 handle_vm86_trap(env, trapnr);
321 } else
322 #endif
324 info.si_signo = SIGSEGV;
325 info.si_errno = 0;
326 info.si_code = TARGET_SI_KERNEL;
327 info._sifields._sigfault._addr = 0;
328 queue_signal(env, info.si_signo, &info);
330 break;
331 case EXCP06_ILLOP:
332 info.si_signo = SIGILL;
333 info.si_errno = 0;
334 info.si_code = TARGET_ILL_ILLOPN;
335 info._sifields._sigfault._addr = env->eip;
336 queue_signal(env, info.si_signo, &info);
337 break;
338 #endif
339 case EXCP_INTERRUPT:
340 /* just indicate that signals should be handled asap */
341 break;
342 #if 0
343 case EXCP_DEBUG:
345 int sig;
347 sig = gdb_handlesig (env, TARGET_SIGTRAP);
348 if (sig)
350 info.si_signo = sig;
351 info.si_errno = 0;
352 info.si_code = TARGET_TRAP_BRKPT;
353 queue_signal(env, info.si_signo, &info);
356 break;
357 #endif
358 default:
359 pc = env->segs[R_CS].base + env->eip;
360 fprintf(stderr, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n",
361 (long)pc, trapnr);
362 abort();
364 process_pending_signals(env);
367 #endif
369 #ifdef TARGET_SPARC
370 #define SPARC64_STACK_BIAS 2047
372 //#define DEBUG_WIN
373 /* WARNING: dealing with register windows _is_ complicated. More info
374 can be found at http://www.sics.se/~psm/sparcstack.html */
375 static inline int get_reg_index(CPUSPARCState *env, int cwp, int index)
377 index = (index + cwp * 16) % (16 * env->nwindows);
378 /* wrap handling : if cwp is on the last window, then we use the
379 registers 'after' the end */
380 if (index < 8 && env->cwp == env->nwindows - 1)
381 index += 16 * env->nwindows;
382 return index;
385 /* save the register window 'cwp1' */
386 static inline void save_window_offset(CPUSPARCState *env, int cwp1)
388 unsigned int i;
389 abi_ulong sp_ptr;
391 sp_ptr = env->regbase[get_reg_index(env, cwp1, 6)];
392 #ifdef TARGET_SPARC64
393 if (sp_ptr & 3)
394 sp_ptr += SPARC64_STACK_BIAS;
395 #endif
396 #if defined(DEBUG_WIN)
397 printf("win_overflow: sp_ptr=0x" TARGET_ABI_FMT_lx " save_cwp=%d\n",
398 sp_ptr, cwp1);
399 #endif
400 for(i = 0; i < 16; i++) {
401 /* FIXME - what to do if put_user() fails? */
402 put_user_ual(env->regbase[get_reg_index(env, cwp1, 8 + i)], sp_ptr);
403 sp_ptr += sizeof(abi_ulong);
407 static void save_window(CPUSPARCState *env)
409 #ifndef TARGET_SPARC64
410 unsigned int new_wim;
411 new_wim = ((env->wim >> 1) | (env->wim << (env->nwindows - 1))) &
412 ((1LL << env->nwindows) - 1);
413 save_window_offset(env, cpu_cwp_dec(env, env->cwp - 2));
414 env->wim = new_wim;
415 #else
417 * cansave is zero if the spill trap handler is triggered by `save` and
418 * nonzero if triggered by a `flushw`
420 save_window_offset(env, cpu_cwp_dec(env, env->cwp - env->cansave - 2));
421 env->cansave++;
422 env->canrestore--;
423 #endif
426 static void restore_window(CPUSPARCState *env)
428 #ifndef TARGET_SPARC64
429 unsigned int new_wim;
430 #endif
431 unsigned int i, cwp1;
432 abi_ulong sp_ptr;
434 #ifndef TARGET_SPARC64
435 new_wim = ((env->wim << 1) | (env->wim >> (env->nwindows - 1))) &
436 ((1LL << env->nwindows) - 1);
437 #endif
439 /* restore the invalid window */
440 cwp1 = cpu_cwp_inc(env, env->cwp + 1);
441 sp_ptr = env->regbase[get_reg_index(env, cwp1, 6)];
442 #ifdef TARGET_SPARC64
443 if (sp_ptr & 3)
444 sp_ptr += SPARC64_STACK_BIAS;
445 #endif
446 #if defined(DEBUG_WIN)
447 printf("win_underflow: sp_ptr=0x" TARGET_ABI_FMT_lx " load_cwp=%d\n",
448 sp_ptr, cwp1);
449 #endif
450 for(i = 0; i < 16; i++) {
451 /* FIXME - what to do if get_user() fails? */
452 get_user_ual(env->regbase[get_reg_index(env, cwp1, 8 + i)], sp_ptr);
453 sp_ptr += sizeof(abi_ulong);
455 #ifdef TARGET_SPARC64
456 env->canrestore++;
457 if (env->cleanwin < env->nwindows - 1)
458 env->cleanwin++;
459 env->cansave--;
460 #else
461 env->wim = new_wim;
462 #endif
465 static void flush_windows(CPUSPARCState *env)
467 int offset, cwp1;
469 offset = 1;
470 for(;;) {
471 /* if restore would invoke restore_window(), then we can stop */
472 cwp1 = cpu_cwp_inc(env, env->cwp + offset);
473 #ifndef TARGET_SPARC64
474 if (env->wim & (1 << cwp1))
475 break;
476 #else
477 if (env->canrestore == 0)
478 break;
479 env->cansave++;
480 env->canrestore--;
481 #endif
482 save_window_offset(env, cwp1);
483 offset++;
485 cwp1 = cpu_cwp_inc(env, env->cwp + 1);
486 #ifndef TARGET_SPARC64
487 /* set wim so that restore will reload the registers */
488 env->wim = 1 << cwp1;
489 #endif
490 #if defined(DEBUG_WIN)
491 printf("flush_windows: nb=%d\n", offset - 1);
492 #endif
495 void cpu_loop(CPUSPARCState *env)
497 CPUState *cs = env_cpu(env);
498 int trapnr, ret, syscall_nr;
499 //target_siginfo_t info;
501 while (1) {
502 cpu_exec_start(cs);
503 trapnr = cpu_exec(cs);
504 cpu_exec_end(cs);
505 process_queued_cpu_work(cs);
507 switch (trapnr) {
508 #ifndef TARGET_SPARC64
509 case 0x80:
510 #else
511 /* FreeBSD uses 0x141 for syscalls too */
512 case 0x141:
513 if (bsd_type != target_freebsd)
514 goto badtrap;
515 case 0x100:
516 #endif
517 syscall_nr = env->gregs[1];
518 if (bsd_type == target_freebsd)
519 ret = do_freebsd_syscall(env, syscall_nr,
520 env->regwptr[0], env->regwptr[1],
521 env->regwptr[2], env->regwptr[3],
522 env->regwptr[4], env->regwptr[5], 0, 0);
523 else if (bsd_type == target_netbsd)
524 ret = do_netbsd_syscall(env, syscall_nr,
525 env->regwptr[0], env->regwptr[1],
526 env->regwptr[2], env->regwptr[3],
527 env->regwptr[4], env->regwptr[5]);
528 else { //if (bsd_type == target_openbsd)
529 #if defined(TARGET_SPARC64)
530 syscall_nr &= ~(TARGET_OPENBSD_SYSCALL_G7RFLAG |
531 TARGET_OPENBSD_SYSCALL_G2RFLAG);
532 #endif
533 ret = do_openbsd_syscall(env, syscall_nr,
534 env->regwptr[0], env->regwptr[1],
535 env->regwptr[2], env->regwptr[3],
536 env->regwptr[4], env->regwptr[5]);
538 if ((unsigned int)ret >= (unsigned int)(-515)) {
539 ret = -ret;
540 #if defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
541 env->xcc |= PSR_CARRY;
542 #else
543 env->psr |= PSR_CARRY;
544 #endif
545 } else {
546 #if defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
547 env->xcc &= ~PSR_CARRY;
548 #else
549 env->psr &= ~PSR_CARRY;
550 #endif
552 env->regwptr[0] = ret;
553 /* next instruction */
554 #if defined(TARGET_SPARC64)
555 if (bsd_type == target_openbsd &&
556 env->gregs[1] & TARGET_OPENBSD_SYSCALL_G2RFLAG) {
557 env->pc = env->gregs[2];
558 env->npc = env->pc + 4;
559 } else if (bsd_type == target_openbsd &&
560 env->gregs[1] & TARGET_OPENBSD_SYSCALL_G7RFLAG) {
561 env->pc = env->gregs[7];
562 env->npc = env->pc + 4;
563 } else {
564 env->pc = env->npc;
565 env->npc = env->npc + 4;
567 #else
568 env->pc = env->npc;
569 env->npc = env->npc + 4;
570 #endif
571 break;
572 case 0x83: /* flush windows */
573 #ifdef TARGET_ABI32
574 case 0x103:
575 #endif
576 flush_windows(env);
577 /* next instruction */
578 env->pc = env->npc;
579 env->npc = env->npc + 4;
580 break;
581 #ifndef TARGET_SPARC64
582 case TT_WIN_OVF: /* window overflow */
583 save_window(env);
584 break;
585 case TT_WIN_UNF: /* window underflow */
586 restore_window(env);
587 break;
588 case TT_TFAULT:
589 case TT_DFAULT:
590 #if 0
592 info.si_signo = SIGSEGV;
593 info.si_errno = 0;
594 /* XXX: check env->error_code */
595 info.si_code = TARGET_SEGV_MAPERR;
596 info._sifields._sigfault._addr = env->mmuregs[4];
597 queue_signal(env, info.si_signo, &info);
599 #endif
600 break;
601 #else
602 case TT_SPILL: /* window overflow */
603 save_window(env);
604 break;
605 case TT_FILL: /* window underflow */
606 restore_window(env);
607 break;
608 case TT_TFAULT:
609 case TT_DFAULT:
610 #if 0
612 info.si_signo = SIGSEGV;
613 info.si_errno = 0;
614 /* XXX: check env->error_code */
615 info.si_code = TARGET_SEGV_MAPERR;
616 if (trapnr == TT_DFAULT)
617 info._sifields._sigfault._addr = env->dmmuregs[4];
618 else
619 info._sifields._sigfault._addr = env->tsptr->tpc;
620 //queue_signal(env, info.si_signo, &info);
622 #endif
623 break;
624 #endif
625 case EXCP_INTERRUPT:
626 /* just indicate that signals should be handled asap */
627 break;
628 case EXCP_DEBUG:
630 #if 0
631 int sig =
632 #endif
633 gdb_handlesig(cs, TARGET_SIGTRAP);
634 #if 0
635 if (sig)
637 info.si_signo = sig;
638 info.si_errno = 0;
639 info.si_code = TARGET_TRAP_BRKPT;
640 //queue_signal(env, info.si_signo, &info);
642 #endif
644 break;
645 default:
646 #ifdef TARGET_SPARC64
647 badtrap:
648 #endif
649 printf ("Unhandled trap: 0x%x\n", trapnr);
650 cpu_dump_state(cs, stderr, 0);
651 exit (1);
653 process_pending_signals (env);
657 #endif
659 static void usage(void)
661 printf("qemu-" TARGET_NAME " version " QEMU_FULL_VERSION
662 "\n" QEMU_COPYRIGHT "\n"
663 "usage: qemu-" TARGET_NAME " [options] program [arguments...]\n"
664 "BSD CPU emulator (compiled for %s emulation)\n"
665 "\n"
666 "Standard options:\n"
667 "-h print this help\n"
668 "-g port wait gdb connection to port\n"
669 "-L path set the elf interpreter prefix (default=%s)\n"
670 "-s size set the stack size in bytes (default=%ld)\n"
671 "-cpu model select CPU (-cpu help for list)\n"
672 "-drop-ld-preload drop LD_PRELOAD for target process\n"
673 "-E var=value sets/modifies targets environment variable(s)\n"
674 "-U var unsets targets environment variable(s)\n"
675 "-B address set guest_base address to address\n"
676 "-bsd type select emulated BSD type FreeBSD/NetBSD/OpenBSD (default)\n"
677 "\n"
678 "Debug options:\n"
679 "-d item1[,...] enable logging of specified items\n"
680 " (use '-d help' for a list of log items)\n"
681 "-D logfile write logs to 'logfile' (default stderr)\n"
682 "-p pagesize set the host page size to 'pagesize'\n"
683 "-singlestep always run in singlestep mode\n"
684 "-strace log system calls\n"
685 "-trace [[enable=]<pattern>][,events=<file>][,file=<file>]\n"
686 " specify tracing options\n"
687 "\n"
688 "Environment variables:\n"
689 "QEMU_STRACE Print system calls and arguments similar to the\n"
690 " 'strace' program. Enable by setting to any value.\n"
691 "You can use -E and -U options to set/unset environment variables\n"
692 "for target process. It is possible to provide several variables\n"
693 "by repeating the option. For example:\n"
694 " -E var1=val2 -E var2=val2 -U LD_PRELOAD -U LD_DEBUG\n"
695 "Note that if you provide several changes to single variable\n"
696 "last change will stay in effect.\n"
697 "\n"
698 QEMU_HELP_BOTTOM "\n"
700 TARGET_NAME,
701 interp_prefix,
702 x86_stack_size);
703 exit(1);
706 THREAD CPUState *thread_cpu;
708 bool qemu_cpu_is_self(CPUState *cpu)
710 return thread_cpu == cpu;
713 void qemu_cpu_kick(CPUState *cpu)
715 cpu_exit(cpu);
718 /* Assumes contents are already zeroed. */
719 void init_task_state(TaskState *ts)
721 int i;
723 ts->used = 1;
724 ts->first_free = ts->sigqueue_table;
725 for (i = 0; i < MAX_SIGQUEUE_SIZE - 1; i++) {
726 ts->sigqueue_table[i].next = &ts->sigqueue_table[i + 1];
728 ts->sigqueue_table[i].next = NULL;
731 int main(int argc, char **argv)
733 const char *filename;
734 const char *cpu_model;
735 const char *cpu_type;
736 const char *log_file = NULL;
737 const char *log_mask = NULL;
738 struct target_pt_regs regs1, *regs = &regs1;
739 struct image_info info1, *info = &info1;
740 TaskState ts1, *ts = &ts1;
741 CPUArchState *env;
742 CPUState *cpu;
743 int optind;
744 const char *r;
745 const char *gdbstub = NULL;
746 char **target_environ, **wrk;
747 envlist_t *envlist = NULL;
748 char *trace_file = NULL;
749 bsd_type = target_openbsd;
751 if (argc <= 1)
752 usage();
754 error_init(argv[0]);
755 module_call_init(MODULE_INIT_TRACE);
756 qemu_init_cpu_list();
757 module_call_init(MODULE_INIT_QOM);
759 envlist = envlist_create();
761 /* add current environment into the list */
762 for (wrk = environ; *wrk != NULL; wrk++) {
763 (void) envlist_setenv(envlist, *wrk);
766 cpu_model = NULL;
768 qemu_add_opts(&qemu_trace_opts);
770 optind = 1;
771 for (;;) {
772 if (optind >= argc)
773 break;
774 r = argv[optind];
775 if (r[0] != '-')
776 break;
777 optind++;
778 r++;
779 if (!strcmp(r, "-")) {
780 break;
781 } else if (!strcmp(r, "d")) {
782 if (optind >= argc) {
783 break;
785 log_mask = argv[optind++];
786 } else if (!strcmp(r, "D")) {
787 if (optind >= argc) {
788 break;
790 log_file = argv[optind++];
791 } else if (!strcmp(r, "E")) {
792 r = argv[optind++];
793 if (envlist_setenv(envlist, r) != 0)
794 usage();
795 } else if (!strcmp(r, "ignore-environment")) {
796 envlist_free(envlist);
797 envlist = envlist_create();
798 } else if (!strcmp(r, "U")) {
799 r = argv[optind++];
800 if (envlist_unsetenv(envlist, r) != 0)
801 usage();
802 } else if (!strcmp(r, "s")) {
803 r = argv[optind++];
804 x86_stack_size = strtol(r, (char **)&r, 0);
805 if (x86_stack_size <= 0)
806 usage();
807 if (*r == 'M')
808 x86_stack_size *= MiB;
809 else if (*r == 'k' || *r == 'K')
810 x86_stack_size *= KiB;
811 } else if (!strcmp(r, "L")) {
812 interp_prefix = argv[optind++];
813 } else if (!strcmp(r, "p")) {
814 qemu_host_page_size = atoi(argv[optind++]);
815 if (qemu_host_page_size == 0 ||
816 (qemu_host_page_size & (qemu_host_page_size - 1)) != 0) {
817 fprintf(stderr, "page size must be a power of two\n");
818 exit(1);
820 } else if (!strcmp(r, "g")) {
821 gdbstub = g_strdup(argv[optind++]);
822 } else if (!strcmp(r, "r")) {
823 qemu_uname_release = argv[optind++];
824 } else if (!strcmp(r, "cpu")) {
825 cpu_model = argv[optind++];
826 if (is_help_option(cpu_model)) {
827 /* XXX: implement xxx_cpu_list for targets that still miss it */
828 #if defined(cpu_list)
829 cpu_list();
830 #endif
831 exit(1);
833 } else if (!strcmp(r, "B")) {
834 guest_base = strtol(argv[optind++], NULL, 0);
835 have_guest_base = true;
836 } else if (!strcmp(r, "drop-ld-preload")) {
837 (void) envlist_unsetenv(envlist, "LD_PRELOAD");
838 } else if (!strcmp(r, "bsd")) {
839 if (!strcasecmp(argv[optind], "freebsd")) {
840 bsd_type = target_freebsd;
841 } else if (!strcasecmp(argv[optind], "netbsd")) {
842 bsd_type = target_netbsd;
843 } else if (!strcasecmp(argv[optind], "openbsd")) {
844 bsd_type = target_openbsd;
845 } else {
846 usage();
848 optind++;
849 } else if (!strcmp(r, "singlestep")) {
850 singlestep = 1;
851 } else if (!strcmp(r, "strace")) {
852 do_strace = 1;
853 } else if (!strcmp(r, "trace")) {
854 g_free(trace_file);
855 trace_file = trace_opt_parse(optarg);
856 } else {
857 usage();
861 /* init debug */
862 qemu_log_needs_buffers();
863 qemu_set_log_filename(log_file, &error_fatal);
864 if (log_mask) {
865 int mask;
867 mask = qemu_str_to_log_mask(log_mask);
868 if (!mask) {
869 qemu_print_log_usage(stdout);
870 exit(1);
872 qemu_set_log(mask);
875 if (optind >= argc) {
876 usage();
878 filename = argv[optind];
880 if (!trace_init_backends()) {
881 exit(1);
883 trace_init_file(trace_file);
885 /* Zero out regs */
886 memset(regs, 0, sizeof(struct target_pt_regs));
888 /* Zero out image_info */
889 memset(info, 0, sizeof(struct image_info));
891 /* Scan interp_prefix dir for replacement files. */
892 init_paths(interp_prefix);
894 if (cpu_model == NULL) {
895 #if defined(TARGET_I386)
896 #ifdef TARGET_X86_64
897 cpu_model = "qemu64";
898 #else
899 cpu_model = "qemu32";
900 #endif
901 #elif defined(TARGET_SPARC)
902 #ifdef TARGET_SPARC64
903 cpu_model = "TI UltraSparc II";
904 #else
905 cpu_model = "Fujitsu MB86904";
906 #endif
907 #else
908 cpu_model = "any";
909 #endif
912 /* init tcg before creating CPUs and to get qemu_host_page_size */
913 tcg_exec_init(0);
915 cpu_type = parse_cpu_option(cpu_model);
916 cpu = cpu_create(cpu_type);
917 env = cpu->env_ptr;
918 #if defined(TARGET_SPARC) || defined(TARGET_PPC)
919 cpu_reset(cpu);
920 #endif
921 thread_cpu = cpu;
923 if (getenv("QEMU_STRACE")) {
924 do_strace = 1;
927 target_environ = envlist_to_environ(envlist, NULL);
928 envlist_free(envlist);
931 * Now that page sizes are configured in tcg_exec_init() we can do
932 * proper page alignment for guest_base.
934 guest_base = HOST_PAGE_ALIGN(guest_base);
937 * Read in mmap_min_addr kernel parameter. This value is used
938 * When loading the ELF image to determine whether guest_base
939 * is needed.
941 * When user has explicitly set the quest base, we skip this
942 * test.
944 if (!have_guest_base) {
945 FILE *fp;
947 if ((fp = fopen("/proc/sys/vm/mmap_min_addr", "r")) != NULL) {
948 unsigned long tmp;
949 if (fscanf(fp, "%lu", &tmp) == 1) {
950 mmap_min_addr = tmp;
951 qemu_log_mask(CPU_LOG_PAGE, "host mmap_min_addr=0x%lx\n", mmap_min_addr);
953 fclose(fp);
957 if (loader_exec(filename, argv+optind, target_environ, regs, info) != 0) {
958 printf("Error loading %s\n", filename);
959 _exit(1);
962 for (wrk = target_environ; *wrk; wrk++) {
963 g_free(*wrk);
966 g_free(target_environ);
968 if (qemu_loglevel_mask(CPU_LOG_PAGE)) {
969 qemu_log("guest_base 0x%lx\n", guest_base);
970 log_page_dump("binary load");
972 qemu_log("start_brk 0x" TARGET_ABI_FMT_lx "\n", info->start_brk);
973 qemu_log("end_code 0x" TARGET_ABI_FMT_lx "\n", info->end_code);
974 qemu_log("start_code 0x" TARGET_ABI_FMT_lx "\n",
975 info->start_code);
976 qemu_log("start_data 0x" TARGET_ABI_FMT_lx "\n",
977 info->start_data);
978 qemu_log("end_data 0x" TARGET_ABI_FMT_lx "\n", info->end_data);
979 qemu_log("start_stack 0x" TARGET_ABI_FMT_lx "\n",
980 info->start_stack);
981 qemu_log("brk 0x" TARGET_ABI_FMT_lx "\n", info->brk);
982 qemu_log("entry 0x" TARGET_ABI_FMT_lx "\n", info->entry);
985 target_set_brk(info->brk);
986 syscall_init();
987 signal_init();
989 /* Now that we've loaded the binary, GUEST_BASE is fixed. Delay
990 generating the prologue until now so that the prologue can take
991 the real value of GUEST_BASE into account. */
992 tcg_prologue_init(tcg_ctx);
993 tcg_region_init();
995 /* build Task State */
996 memset(ts, 0, sizeof(TaskState));
997 init_task_state(ts);
998 ts->info = info;
999 cpu->opaque = ts;
1001 #if defined(TARGET_I386)
1002 env->cr[0] = CR0_PG_MASK | CR0_WP_MASK | CR0_PE_MASK;
1003 env->hflags |= HF_PE_MASK | HF_CPL_MASK;
1004 if (env->features[FEAT_1_EDX] & CPUID_SSE) {
1005 env->cr[4] |= CR4_OSFXSR_MASK;
1006 env->hflags |= HF_OSFXSR_MASK;
1008 #ifndef TARGET_ABI32
1009 /* enable 64 bit mode if possible */
1010 if (!(env->features[FEAT_8000_0001_EDX] & CPUID_EXT2_LM)) {
1011 fprintf(stderr, "The selected x86 CPU does not support 64 bit mode\n");
1012 exit(1);
1014 env->cr[4] |= CR4_PAE_MASK;
1015 env->efer |= MSR_EFER_LMA | MSR_EFER_LME;
1016 env->hflags |= HF_LMA_MASK;
1017 #endif
1019 /* flags setup : we activate the IRQs by default as in user mode */
1020 env->eflags |= IF_MASK;
1022 /* linux register setup */
1023 #ifndef TARGET_ABI32
1024 env->regs[R_EAX] = regs->rax;
1025 env->regs[R_EBX] = regs->rbx;
1026 env->regs[R_ECX] = regs->rcx;
1027 env->regs[R_EDX] = regs->rdx;
1028 env->regs[R_ESI] = regs->rsi;
1029 env->regs[R_EDI] = regs->rdi;
1030 env->regs[R_EBP] = regs->rbp;
1031 env->regs[R_ESP] = regs->rsp;
1032 env->eip = regs->rip;
1033 #else
1034 env->regs[R_EAX] = regs->eax;
1035 env->regs[R_EBX] = regs->ebx;
1036 env->regs[R_ECX] = regs->ecx;
1037 env->regs[R_EDX] = regs->edx;
1038 env->regs[R_ESI] = regs->esi;
1039 env->regs[R_EDI] = regs->edi;
1040 env->regs[R_EBP] = regs->ebp;
1041 env->regs[R_ESP] = regs->esp;
1042 env->eip = regs->eip;
1043 #endif
1045 /* linux interrupt setup */
1046 #ifndef TARGET_ABI32
1047 env->idt.limit = 511;
1048 #else
1049 env->idt.limit = 255;
1050 #endif
1051 env->idt.base = target_mmap(0, sizeof(uint64_t) * (env->idt.limit + 1),
1052 PROT_READ|PROT_WRITE,
1053 MAP_ANONYMOUS|MAP_PRIVATE, -1, 0);
1054 idt_table = g2h(env->idt.base);
1055 set_idt(0, 0);
1056 set_idt(1, 0);
1057 set_idt(2, 0);
1058 set_idt(3, 3);
1059 set_idt(4, 3);
1060 set_idt(5, 0);
1061 set_idt(6, 0);
1062 set_idt(7, 0);
1063 set_idt(8, 0);
1064 set_idt(9, 0);
1065 set_idt(10, 0);
1066 set_idt(11, 0);
1067 set_idt(12, 0);
1068 set_idt(13, 0);
1069 set_idt(14, 0);
1070 set_idt(15, 0);
1071 set_idt(16, 0);
1072 set_idt(17, 0);
1073 set_idt(18, 0);
1074 set_idt(19, 0);
1075 set_idt(0x80, 3);
1077 /* linux segment setup */
1079 uint64_t *gdt_table;
1080 env->gdt.base = target_mmap(0, sizeof(uint64_t) * TARGET_GDT_ENTRIES,
1081 PROT_READ|PROT_WRITE,
1082 MAP_ANONYMOUS|MAP_PRIVATE, -1, 0);
1083 env->gdt.limit = sizeof(uint64_t) * TARGET_GDT_ENTRIES - 1;
1084 gdt_table = g2h(env->gdt.base);
1085 #ifdef TARGET_ABI32
1086 write_dt(&gdt_table[__USER_CS >> 3], 0, 0xfffff,
1087 DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
1088 (3 << DESC_DPL_SHIFT) | (0xa << DESC_TYPE_SHIFT));
1089 #else
1090 /* 64 bit code segment */
1091 write_dt(&gdt_table[__USER_CS >> 3], 0, 0xfffff,
1092 DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
1093 DESC_L_MASK |
1094 (3 << DESC_DPL_SHIFT) | (0xa << DESC_TYPE_SHIFT));
1095 #endif
1096 write_dt(&gdt_table[__USER_DS >> 3], 0, 0xfffff,
1097 DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
1098 (3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
1101 cpu_x86_load_seg(env, R_CS, __USER_CS);
1102 cpu_x86_load_seg(env, R_SS, __USER_DS);
1103 #ifdef TARGET_ABI32
1104 cpu_x86_load_seg(env, R_DS, __USER_DS);
1105 cpu_x86_load_seg(env, R_ES, __USER_DS);
1106 cpu_x86_load_seg(env, R_FS, __USER_DS);
1107 cpu_x86_load_seg(env, R_GS, __USER_DS);
1108 /* This hack makes Wine work... */
1109 env->segs[R_FS].selector = 0;
1110 #else
1111 cpu_x86_load_seg(env, R_DS, 0);
1112 cpu_x86_load_seg(env, R_ES, 0);
1113 cpu_x86_load_seg(env, R_FS, 0);
1114 cpu_x86_load_seg(env, R_GS, 0);
1115 #endif
1116 #elif defined(TARGET_SPARC)
1118 int i;
1119 env->pc = regs->pc;
1120 env->npc = regs->npc;
1121 env->y = regs->y;
1122 for(i = 0; i < 8; i++)
1123 env->gregs[i] = regs->u_regs[i];
1124 for(i = 0; i < 8; i++)
1125 env->regwptr[i] = regs->u_regs[i + 8];
1127 #else
1128 #error unsupported target CPU
1129 #endif
1131 if (gdbstub) {
1132 gdbserver_start(gdbstub);
1133 gdb_handlesig(cpu, 0);
1135 cpu_loop(env);
1136 /* never exits */
1137 return 0;