Fix mulscc with high bits set in either src1 or src2
[qemu/mini2440.git] / vl.c
blob18bcc1f31191d7758c9b3208f44e8141c5e0fe14
1 /*
2 * QEMU System Emulator
4 * Copyright (c) 2003-2008 Fabrice Bellard
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
24 #include "hw/hw.h"
25 #include "hw/boards.h"
26 #include "hw/usb.h"
27 #include "hw/pcmcia.h"
28 #include "hw/pc.h"
29 #include "hw/audiodev.h"
30 #include "hw/isa.h"
31 #include "hw/baum.h"
32 #include "net.h"
33 #include "console.h"
34 #include "sysemu.h"
35 #include "gdbstub.h"
36 #include "qemu-timer.h"
37 #include "qemu-char.h"
38 #include "block.h"
39 #include "audio/audio.h"
41 #include <unistd.h>
42 #include <fcntl.h>
43 #include <signal.h>
44 #include <time.h>
45 #include <errno.h>
46 #include <sys/time.h>
47 #include <zlib.h>
49 #ifndef _WIN32
50 #include <sys/times.h>
51 #include <sys/wait.h>
52 #include <termios.h>
53 #include <sys/poll.h>
54 #include <sys/mman.h>
55 #include <sys/ioctl.h>
56 #include <sys/socket.h>
57 #include <netinet/in.h>
58 #include <dirent.h>
59 #include <netdb.h>
60 #include <sys/select.h>
61 #include <arpa/inet.h>
62 #ifdef _BSD
63 #include <sys/stat.h>
64 #if !defined(__APPLE__) && !defined(__OpenBSD__)
65 #include <libutil.h>
66 #endif
67 #ifdef __OpenBSD__
68 #include <net/if.h>
69 #endif
70 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
71 #include <freebsd/stdlib.h>
72 #else
73 #ifndef __sun__
74 #include <linux/if.h>
75 #include <linux/if_tun.h>
76 #include <pty.h>
77 #include <malloc.h>
78 #include <linux/rtc.h>
80 /* For the benefit of older linux systems which don't supply it,
81 we use a local copy of hpet.h. */
82 /* #include <linux/hpet.h> */
83 #include "hpet.h"
85 #include <linux/ppdev.h>
86 #include <linux/parport.h>
87 #else
88 #include <sys/stat.h>
89 #include <sys/ethernet.h>
90 #include <sys/sockio.h>
91 #include <netinet/arp.h>
92 #include <netinet/in.h>
93 #include <netinet/in_systm.h>
94 #include <netinet/ip.h>
95 #include <netinet/ip_icmp.h> // must come after ip.h
96 #include <netinet/udp.h>
97 #include <netinet/tcp.h>
98 #include <net/if.h>
99 #include <syslog.h>
100 #include <stropts.h>
101 #endif
102 #endif
103 #else
104 #include <winsock2.h>
105 int inet_aton(const char *cp, struct in_addr *ia);
106 #endif
108 #if defined(CONFIG_SLIRP)
109 #include "libslirp.h"
110 #endif
112 #if defined(__OpenBSD__)
113 #include <util.h>
114 #endif
116 #if defined(CONFIG_VDE)
117 #include <libvdeplug.h>
118 #endif
120 #ifdef _WIN32
121 #include <malloc.h>
122 #include <sys/timeb.h>
123 #include <mmsystem.h>
124 #define getopt_long_only getopt_long
125 #define memalign(align, size) malloc(size)
126 #endif
128 #include "qemu_socket.h"
130 #ifdef CONFIG_SDL
131 #ifdef __APPLE__
132 #include <SDL/SDL.h>
133 #endif
134 #endif /* CONFIG_SDL */
136 #ifdef CONFIG_COCOA
137 #undef main
138 #define main qemu_main
139 #endif /* CONFIG_COCOA */
141 #include "disas.h"
143 #include "exec-all.h"
145 #define DEFAULT_NETWORK_SCRIPT "/etc/qemu-ifup"
146 #define DEFAULT_NETWORK_DOWN_SCRIPT "/etc/qemu-ifdown"
147 #ifdef __sun__
148 #define SMBD_COMMAND "/usr/sfw/sbin/smbd"
149 #else
150 #define SMBD_COMMAND "/usr/sbin/smbd"
151 #endif
153 //#define DEBUG_UNUSED_IOPORT
154 //#define DEBUG_IOPORT
156 #ifdef TARGET_PPC
157 #define DEFAULT_RAM_SIZE 144
158 #else
159 #define DEFAULT_RAM_SIZE 128
160 #endif
162 /* Max number of USB devices that can be specified on the commandline. */
163 #define MAX_USB_CMDLINE 8
165 /* XXX: use a two level table to limit memory usage */
166 #define MAX_IOPORTS 65536
168 const char *bios_dir = CONFIG_QEMU_SHAREDIR;
169 const char *bios_name = NULL;
170 void *ioport_opaque[MAX_IOPORTS];
171 IOPortReadFunc *ioport_read_table[3][MAX_IOPORTS];
172 IOPortWriteFunc *ioport_write_table[3][MAX_IOPORTS];
173 /* Note: drives_table[MAX_DRIVES] is a dummy block driver if none available
174 to store the VM snapshots */
175 DriveInfo drives_table[MAX_DRIVES+1];
176 int nb_drives;
177 /* point to the block driver where the snapshots are managed */
178 BlockDriverState *bs_snapshots;
179 int vga_ram_size;
180 static DisplayState display_state;
181 int nographic;
182 int curses;
183 const char* keyboard_layout = NULL;
184 int64_t ticks_per_sec;
185 ram_addr_t ram_size;
186 int pit_min_timer_count = 0;
187 int nb_nics;
188 NICInfo nd_table[MAX_NICS];
189 int vm_running;
190 static int rtc_utc = 1;
191 static int rtc_date_offset = -1; /* -1 means no change */
192 int cirrus_vga_enabled = 1;
193 int vmsvga_enabled = 0;
194 #ifdef TARGET_SPARC
195 int graphic_width = 1024;
196 int graphic_height = 768;
197 int graphic_depth = 8;
198 #else
199 int graphic_width = 800;
200 int graphic_height = 600;
201 int graphic_depth = 15;
202 #endif
203 int full_screen = 0;
204 int no_frame = 0;
205 int no_quit = 0;
206 CharDriverState *serial_hds[MAX_SERIAL_PORTS];
207 CharDriverState *parallel_hds[MAX_PARALLEL_PORTS];
208 #ifdef TARGET_I386
209 int win2k_install_hack = 0;
210 #endif
211 int usb_enabled = 0;
212 static VLANState *first_vlan;
213 int smp_cpus = 1;
214 const char *vnc_display;
215 #if defined(TARGET_SPARC)
216 #define MAX_CPUS 16
217 #elif defined(TARGET_I386)
218 #define MAX_CPUS 255
219 #else
220 #define MAX_CPUS 1
221 #endif
222 int acpi_enabled = 1;
223 int fd_bootchk = 1;
224 int no_reboot = 0;
225 int no_shutdown = 0;
226 int cursor_hide = 1;
227 int graphic_rotate = 0;
228 int daemonize = 0;
229 const char *option_rom[MAX_OPTION_ROMS];
230 int nb_option_roms;
231 int semihosting_enabled = 0;
232 int autostart = 1;
233 #ifdef TARGET_ARM
234 int old_param = 0;
235 #endif
236 const char *qemu_name;
237 int alt_grab = 0;
238 #ifdef TARGET_SPARC
239 unsigned int nb_prom_envs = 0;
240 const char *prom_envs[MAX_PROM_ENVS];
241 #endif
242 int nb_drives_opt;
243 struct drive_opt {
244 const char *file;
245 char opt[1024];
246 } drives_opt[MAX_DRIVES];
248 static CPUState *cur_cpu;
249 static CPUState *next_cpu;
250 static int event_pending = 1;
251 /* Conversion factor from emulated instructions to virtual clock ticks. */
252 static int icount_time_shift;
253 /* Arbitrarily pick 1MIPS as the minimum allowable speed. */
254 #define MAX_ICOUNT_SHIFT 10
255 /* Compensate for varying guest execution speed. */
256 static int64_t qemu_icount_bias;
257 QEMUTimer *icount_rt_timer;
258 QEMUTimer *icount_vm_timer;
260 #define TFR(expr) do { if ((expr) != -1) break; } while (errno == EINTR)
262 /***********************************************************/
263 /* x86 ISA bus support */
265 target_phys_addr_t isa_mem_base = 0;
266 PicState2 *isa_pic;
268 static IOPortReadFunc default_ioport_readb, default_ioport_readw, default_ioport_readl;
269 static IOPortWriteFunc default_ioport_writeb, default_ioport_writew, default_ioport_writel;
271 static uint32_t ioport_read(int index, uint32_t address)
273 static IOPortReadFunc *default_func[3] = {
274 default_ioport_readb,
275 default_ioport_readw,
276 default_ioport_readl
278 IOPortReadFunc *func = ioport_read_table[index][address];
279 if (!func)
280 func = default_func[index];
281 return func(ioport_opaque[address], address);
284 static void ioport_write(int index, uint32_t address, uint32_t data)
286 static IOPortWriteFunc *default_func[3] = {
287 default_ioport_writeb,
288 default_ioport_writew,
289 default_ioport_writel
291 IOPortWriteFunc *func = ioport_write_table[index][address];
292 if (!func)
293 func = default_func[index];
294 func(ioport_opaque[address], address, data);
297 static uint32_t default_ioport_readb(void *opaque, uint32_t address)
299 #ifdef DEBUG_UNUSED_IOPORT
300 fprintf(stderr, "unused inb: port=0x%04x\n", address);
301 #endif
302 return 0xff;
305 static void default_ioport_writeb(void *opaque, uint32_t address, uint32_t data)
307 #ifdef DEBUG_UNUSED_IOPORT
308 fprintf(stderr, "unused outb: port=0x%04x data=0x%02x\n", address, data);
309 #endif
312 /* default is to make two byte accesses */
313 static uint32_t default_ioport_readw(void *opaque, uint32_t address)
315 uint32_t data;
316 data = ioport_read(0, address);
317 address = (address + 1) & (MAX_IOPORTS - 1);
318 data |= ioport_read(0, address) << 8;
319 return data;
322 static void default_ioport_writew(void *opaque, uint32_t address, uint32_t data)
324 ioport_write(0, address, data & 0xff);
325 address = (address + 1) & (MAX_IOPORTS - 1);
326 ioport_write(0, address, (data >> 8) & 0xff);
329 static uint32_t default_ioport_readl(void *opaque, uint32_t address)
331 #ifdef DEBUG_UNUSED_IOPORT
332 fprintf(stderr, "unused inl: port=0x%04x\n", address);
333 #endif
334 return 0xffffffff;
337 static void default_ioport_writel(void *opaque, uint32_t address, uint32_t data)
339 #ifdef DEBUG_UNUSED_IOPORT
340 fprintf(stderr, "unused outl: port=0x%04x data=0x%02x\n", address, data);
341 #endif
344 /* size is the word size in byte */
345 int register_ioport_read(int start, int length, int size,
346 IOPortReadFunc *func, void *opaque)
348 int i, bsize;
350 if (size == 1) {
351 bsize = 0;
352 } else if (size == 2) {
353 bsize = 1;
354 } else if (size == 4) {
355 bsize = 2;
356 } else {
357 hw_error("register_ioport_read: invalid size");
358 return -1;
360 for(i = start; i < start + length; i += size) {
361 ioport_read_table[bsize][i] = func;
362 if (ioport_opaque[i] != NULL && ioport_opaque[i] != opaque)
363 hw_error("register_ioport_read: invalid opaque");
364 ioport_opaque[i] = opaque;
366 return 0;
369 /* size is the word size in byte */
370 int register_ioport_write(int start, int length, int size,
371 IOPortWriteFunc *func, void *opaque)
373 int i, bsize;
375 if (size == 1) {
376 bsize = 0;
377 } else if (size == 2) {
378 bsize = 1;
379 } else if (size == 4) {
380 bsize = 2;
381 } else {
382 hw_error("register_ioport_write: invalid size");
383 return -1;
385 for(i = start; i < start + length; i += size) {
386 ioport_write_table[bsize][i] = func;
387 if (ioport_opaque[i] != NULL && ioport_opaque[i] != opaque)
388 hw_error("register_ioport_write: invalid opaque");
389 ioport_opaque[i] = opaque;
391 return 0;
394 void isa_unassign_ioport(int start, int length)
396 int i;
398 for(i = start; i < start + length; i++) {
399 ioport_read_table[0][i] = default_ioport_readb;
400 ioport_read_table[1][i] = default_ioport_readw;
401 ioport_read_table[2][i] = default_ioport_readl;
403 ioport_write_table[0][i] = default_ioport_writeb;
404 ioport_write_table[1][i] = default_ioport_writew;
405 ioport_write_table[2][i] = default_ioport_writel;
409 /***********************************************************/
411 void cpu_outb(CPUState *env, int addr, int val)
413 #ifdef DEBUG_IOPORT
414 if (loglevel & CPU_LOG_IOPORT)
415 fprintf(logfile, "outb: %04x %02x\n", addr, val);
416 #endif
417 ioport_write(0, addr, val);
418 #ifdef USE_KQEMU
419 if (env)
420 env->last_io_time = cpu_get_time_fast();
421 #endif
424 void cpu_outw(CPUState *env, int addr, int val)
426 #ifdef DEBUG_IOPORT
427 if (loglevel & CPU_LOG_IOPORT)
428 fprintf(logfile, "outw: %04x %04x\n", addr, val);
429 #endif
430 ioport_write(1, addr, val);
431 #ifdef USE_KQEMU
432 if (env)
433 env->last_io_time = cpu_get_time_fast();
434 #endif
437 void cpu_outl(CPUState *env, int addr, int val)
439 #ifdef DEBUG_IOPORT
440 if (loglevel & CPU_LOG_IOPORT)
441 fprintf(logfile, "outl: %04x %08x\n", addr, val);
442 #endif
443 ioport_write(2, addr, val);
444 #ifdef USE_KQEMU
445 if (env)
446 env->last_io_time = cpu_get_time_fast();
447 #endif
450 int cpu_inb(CPUState *env, int addr)
452 int val;
453 val = ioport_read(0, addr);
454 #ifdef DEBUG_IOPORT
455 if (loglevel & CPU_LOG_IOPORT)
456 fprintf(logfile, "inb : %04x %02x\n", addr, val);
457 #endif
458 #ifdef USE_KQEMU
459 if (env)
460 env->last_io_time = cpu_get_time_fast();
461 #endif
462 return val;
465 int cpu_inw(CPUState *env, int addr)
467 int val;
468 val = ioport_read(1, addr);
469 #ifdef DEBUG_IOPORT
470 if (loglevel & CPU_LOG_IOPORT)
471 fprintf(logfile, "inw : %04x %04x\n", addr, val);
472 #endif
473 #ifdef USE_KQEMU
474 if (env)
475 env->last_io_time = cpu_get_time_fast();
476 #endif
477 return val;
480 int cpu_inl(CPUState *env, int addr)
482 int val;
483 val = ioport_read(2, addr);
484 #ifdef DEBUG_IOPORT
485 if (loglevel & CPU_LOG_IOPORT)
486 fprintf(logfile, "inl : %04x %08x\n", addr, val);
487 #endif
488 #ifdef USE_KQEMU
489 if (env)
490 env->last_io_time = cpu_get_time_fast();
491 #endif
492 return val;
495 /***********************************************************/
496 void hw_error(const char *fmt, ...)
498 va_list ap;
499 CPUState *env;
501 va_start(ap, fmt);
502 fprintf(stderr, "qemu: hardware error: ");
503 vfprintf(stderr, fmt, ap);
504 fprintf(stderr, "\n");
505 for(env = first_cpu; env != NULL; env = env->next_cpu) {
506 fprintf(stderr, "CPU #%d:\n", env->cpu_index);
507 #ifdef TARGET_I386
508 cpu_dump_state(env, stderr, fprintf, X86_DUMP_FPU);
509 #else
510 cpu_dump_state(env, stderr, fprintf, 0);
511 #endif
513 va_end(ap);
514 abort();
517 /***********************************************************/
518 /* keyboard/mouse */
520 static QEMUPutKBDEvent *qemu_put_kbd_event;
521 static void *qemu_put_kbd_event_opaque;
522 static QEMUPutMouseEntry *qemu_put_mouse_event_head;
523 static QEMUPutMouseEntry *qemu_put_mouse_event_current;
525 void qemu_add_kbd_event_handler(QEMUPutKBDEvent *func, void *opaque)
527 qemu_put_kbd_event_opaque = opaque;
528 qemu_put_kbd_event = func;
531 QEMUPutMouseEntry *qemu_add_mouse_event_handler(QEMUPutMouseEvent *func,
532 void *opaque, int absolute,
533 const char *name)
535 QEMUPutMouseEntry *s, *cursor;
537 s = qemu_mallocz(sizeof(QEMUPutMouseEntry));
538 if (!s)
539 return NULL;
541 s->qemu_put_mouse_event = func;
542 s->qemu_put_mouse_event_opaque = opaque;
543 s->qemu_put_mouse_event_absolute = absolute;
544 s->qemu_put_mouse_event_name = qemu_strdup(name);
545 s->next = NULL;
547 if (!qemu_put_mouse_event_head) {
548 qemu_put_mouse_event_head = qemu_put_mouse_event_current = s;
549 return s;
552 cursor = qemu_put_mouse_event_head;
553 while (cursor->next != NULL)
554 cursor = cursor->next;
556 cursor->next = s;
557 qemu_put_mouse_event_current = s;
559 return s;
562 void qemu_remove_mouse_event_handler(QEMUPutMouseEntry *entry)
564 QEMUPutMouseEntry *prev = NULL, *cursor;
566 if (!qemu_put_mouse_event_head || entry == NULL)
567 return;
569 cursor = qemu_put_mouse_event_head;
570 while (cursor != NULL && cursor != entry) {
571 prev = cursor;
572 cursor = cursor->next;
575 if (cursor == NULL) // does not exist or list empty
576 return;
577 else if (prev == NULL) { // entry is head
578 qemu_put_mouse_event_head = cursor->next;
579 if (qemu_put_mouse_event_current == entry)
580 qemu_put_mouse_event_current = cursor->next;
581 qemu_free(entry->qemu_put_mouse_event_name);
582 qemu_free(entry);
583 return;
586 prev->next = entry->next;
588 if (qemu_put_mouse_event_current == entry)
589 qemu_put_mouse_event_current = prev;
591 qemu_free(entry->qemu_put_mouse_event_name);
592 qemu_free(entry);
595 void kbd_put_keycode(int keycode)
597 if (qemu_put_kbd_event) {
598 qemu_put_kbd_event(qemu_put_kbd_event_opaque, keycode);
602 void kbd_mouse_event(int dx, int dy, int dz, int buttons_state)
604 QEMUPutMouseEvent *mouse_event;
605 void *mouse_event_opaque;
606 int width;
608 if (!qemu_put_mouse_event_current) {
609 return;
612 mouse_event =
613 qemu_put_mouse_event_current->qemu_put_mouse_event;
614 mouse_event_opaque =
615 qemu_put_mouse_event_current->qemu_put_mouse_event_opaque;
617 if (mouse_event) {
618 if (graphic_rotate) {
619 if (qemu_put_mouse_event_current->qemu_put_mouse_event_absolute)
620 width = 0x7fff;
621 else
622 width = graphic_width - 1;
623 mouse_event(mouse_event_opaque,
624 width - dy, dx, dz, buttons_state);
625 } else
626 mouse_event(mouse_event_opaque,
627 dx, dy, dz, buttons_state);
631 int kbd_mouse_is_absolute(void)
633 if (!qemu_put_mouse_event_current)
634 return 0;
636 return qemu_put_mouse_event_current->qemu_put_mouse_event_absolute;
639 void do_info_mice(void)
641 QEMUPutMouseEntry *cursor;
642 int index = 0;
644 if (!qemu_put_mouse_event_head) {
645 term_printf("No mouse devices connected\n");
646 return;
649 term_printf("Mouse devices available:\n");
650 cursor = qemu_put_mouse_event_head;
651 while (cursor != NULL) {
652 term_printf("%c Mouse #%d: %s\n",
653 (cursor == qemu_put_mouse_event_current ? '*' : ' '),
654 index, cursor->qemu_put_mouse_event_name);
655 index++;
656 cursor = cursor->next;
660 void do_mouse_set(int index)
662 QEMUPutMouseEntry *cursor;
663 int i = 0;
665 if (!qemu_put_mouse_event_head) {
666 term_printf("No mouse devices connected\n");
667 return;
670 cursor = qemu_put_mouse_event_head;
671 while (cursor != NULL && index != i) {
672 i++;
673 cursor = cursor->next;
676 if (cursor != NULL)
677 qemu_put_mouse_event_current = cursor;
678 else
679 term_printf("Mouse at given index not found\n");
682 /* compute with 96 bit intermediate result: (a*b)/c */
683 uint64_t muldiv64(uint64_t a, uint32_t b, uint32_t c)
685 union {
686 uint64_t ll;
687 struct {
688 #ifdef WORDS_BIGENDIAN
689 uint32_t high, low;
690 #else
691 uint32_t low, high;
692 #endif
693 } l;
694 } u, res;
695 uint64_t rl, rh;
697 u.ll = a;
698 rl = (uint64_t)u.l.low * (uint64_t)b;
699 rh = (uint64_t)u.l.high * (uint64_t)b;
700 rh += (rl >> 32);
701 res.l.high = rh / c;
702 res.l.low = (((rh % c) << 32) + (rl & 0xffffffff)) / c;
703 return res.ll;
706 /***********************************************************/
707 /* real time host monotonic timer */
709 #define QEMU_TIMER_BASE 1000000000LL
711 #ifdef WIN32
713 static int64_t clock_freq;
715 static void init_get_clock(void)
717 LARGE_INTEGER freq;
718 int ret;
719 ret = QueryPerformanceFrequency(&freq);
720 if (ret == 0) {
721 fprintf(stderr, "Could not calibrate ticks\n");
722 exit(1);
724 clock_freq = freq.QuadPart;
727 static int64_t get_clock(void)
729 LARGE_INTEGER ti;
730 QueryPerformanceCounter(&ti);
731 return muldiv64(ti.QuadPart, QEMU_TIMER_BASE, clock_freq);
734 #else
736 static int use_rt_clock;
738 static void init_get_clock(void)
740 use_rt_clock = 0;
741 #if defined(__linux__)
743 struct timespec ts;
744 if (clock_gettime(CLOCK_MONOTONIC, &ts) == 0) {
745 use_rt_clock = 1;
748 #endif
751 static int64_t get_clock(void)
753 #if defined(__linux__)
754 if (use_rt_clock) {
755 struct timespec ts;
756 clock_gettime(CLOCK_MONOTONIC, &ts);
757 return ts.tv_sec * 1000000000LL + ts.tv_nsec;
758 } else
759 #endif
761 /* XXX: using gettimeofday leads to problems if the date
762 changes, so it should be avoided. */
763 struct timeval tv;
764 gettimeofday(&tv, NULL);
765 return tv.tv_sec * 1000000000LL + (tv.tv_usec * 1000);
768 #endif
770 /* Return the virtual CPU time, based on the instruction counter. */
771 static int64_t cpu_get_icount(void)
773 int64_t icount;
774 CPUState *env = cpu_single_env;;
775 icount = qemu_icount;
776 if (env) {
777 if (!can_do_io(env))
778 fprintf(stderr, "Bad clock read\n");
779 icount -= (env->icount_decr.u16.low + env->icount_extra);
781 return qemu_icount_bias + (icount << icount_time_shift);
784 /***********************************************************/
785 /* guest cycle counter */
787 static int64_t cpu_ticks_prev;
788 static int64_t cpu_ticks_offset;
789 static int64_t cpu_clock_offset;
790 static int cpu_ticks_enabled;
792 /* return the host CPU cycle counter and handle stop/restart */
793 int64_t cpu_get_ticks(void)
795 if (use_icount) {
796 return cpu_get_icount();
798 if (!cpu_ticks_enabled) {
799 return cpu_ticks_offset;
800 } else {
801 int64_t ticks;
802 ticks = cpu_get_real_ticks();
803 if (cpu_ticks_prev > ticks) {
804 /* Note: non increasing ticks may happen if the host uses
805 software suspend */
806 cpu_ticks_offset += cpu_ticks_prev - ticks;
808 cpu_ticks_prev = ticks;
809 return ticks + cpu_ticks_offset;
813 /* return the host CPU monotonic timer and handle stop/restart */
814 static int64_t cpu_get_clock(void)
816 int64_t ti;
817 if (!cpu_ticks_enabled) {
818 return cpu_clock_offset;
819 } else {
820 ti = get_clock();
821 return ti + cpu_clock_offset;
825 /* enable cpu_get_ticks() */
826 void cpu_enable_ticks(void)
828 if (!cpu_ticks_enabled) {
829 cpu_ticks_offset -= cpu_get_real_ticks();
830 cpu_clock_offset -= get_clock();
831 cpu_ticks_enabled = 1;
835 /* disable cpu_get_ticks() : the clock is stopped. You must not call
836 cpu_get_ticks() after that. */
837 void cpu_disable_ticks(void)
839 if (cpu_ticks_enabled) {
840 cpu_ticks_offset = cpu_get_ticks();
841 cpu_clock_offset = cpu_get_clock();
842 cpu_ticks_enabled = 0;
846 /***********************************************************/
847 /* timers */
849 #define QEMU_TIMER_REALTIME 0
850 #define QEMU_TIMER_VIRTUAL 1
852 struct QEMUClock {
853 int type;
854 /* XXX: add frequency */
857 struct QEMUTimer {
858 QEMUClock *clock;
859 int64_t expire_time;
860 QEMUTimerCB *cb;
861 void *opaque;
862 struct QEMUTimer *next;
865 struct qemu_alarm_timer {
866 char const *name;
867 unsigned int flags;
869 int (*start)(struct qemu_alarm_timer *t);
870 void (*stop)(struct qemu_alarm_timer *t);
871 void (*rearm)(struct qemu_alarm_timer *t);
872 void *priv;
875 #define ALARM_FLAG_DYNTICKS 0x1
876 #define ALARM_FLAG_EXPIRED 0x2
878 static inline int alarm_has_dynticks(struct qemu_alarm_timer *t)
880 return t->flags & ALARM_FLAG_DYNTICKS;
883 static void qemu_rearm_alarm_timer(struct qemu_alarm_timer *t)
885 if (!alarm_has_dynticks(t))
886 return;
888 t->rearm(t);
891 /* TODO: MIN_TIMER_REARM_US should be optimized */
892 #define MIN_TIMER_REARM_US 250
894 static struct qemu_alarm_timer *alarm_timer;
896 #ifdef _WIN32
898 struct qemu_alarm_win32 {
899 MMRESULT timerId;
900 HANDLE host_alarm;
901 unsigned int period;
902 } alarm_win32_data = {0, NULL, -1};
904 static int win32_start_timer(struct qemu_alarm_timer *t);
905 static void win32_stop_timer(struct qemu_alarm_timer *t);
906 static void win32_rearm_timer(struct qemu_alarm_timer *t);
908 #else
910 static int unix_start_timer(struct qemu_alarm_timer *t);
911 static void unix_stop_timer(struct qemu_alarm_timer *t);
913 #ifdef __linux__
915 static int dynticks_start_timer(struct qemu_alarm_timer *t);
916 static void dynticks_stop_timer(struct qemu_alarm_timer *t);
917 static void dynticks_rearm_timer(struct qemu_alarm_timer *t);
919 static int hpet_start_timer(struct qemu_alarm_timer *t);
920 static void hpet_stop_timer(struct qemu_alarm_timer *t);
922 static int rtc_start_timer(struct qemu_alarm_timer *t);
923 static void rtc_stop_timer(struct qemu_alarm_timer *t);
925 #endif /* __linux__ */
927 #endif /* _WIN32 */
929 /* Correlation between real and virtual time is always going to be
930 fairly approximate, so ignore small variation.
931 When the guest is idle real and virtual time will be aligned in
932 the IO wait loop. */
933 #define ICOUNT_WOBBLE (QEMU_TIMER_BASE / 10)
935 static void icount_adjust(void)
937 int64_t cur_time;
938 int64_t cur_icount;
939 int64_t delta;
940 static int64_t last_delta;
941 /* If the VM is not running, then do nothing. */
942 if (!vm_running)
943 return;
945 cur_time = cpu_get_clock();
946 cur_icount = qemu_get_clock(vm_clock);
947 delta = cur_icount - cur_time;
948 /* FIXME: This is a very crude algorithm, somewhat prone to oscillation. */
949 if (delta > 0
950 && last_delta + ICOUNT_WOBBLE < delta * 2
951 && icount_time_shift > 0) {
952 /* The guest is getting too far ahead. Slow time down. */
953 icount_time_shift--;
955 if (delta < 0
956 && last_delta - ICOUNT_WOBBLE > delta * 2
957 && icount_time_shift < MAX_ICOUNT_SHIFT) {
958 /* The guest is getting too far behind. Speed time up. */
959 icount_time_shift++;
961 last_delta = delta;
962 qemu_icount_bias = cur_icount - (qemu_icount << icount_time_shift);
965 static void icount_adjust_rt(void * opaque)
967 qemu_mod_timer(icount_rt_timer,
968 qemu_get_clock(rt_clock) + 1000);
969 icount_adjust();
972 static void icount_adjust_vm(void * opaque)
974 qemu_mod_timer(icount_vm_timer,
975 qemu_get_clock(vm_clock) + QEMU_TIMER_BASE / 10);
976 icount_adjust();
979 static void init_icount_adjust(void)
981 /* Have both realtime and virtual time triggers for speed adjustment.
982 The realtime trigger catches emulated time passing too slowly,
983 the virtual time trigger catches emulated time passing too fast.
984 Realtime triggers occur even when idle, so use them less frequently
985 than VM triggers. */
986 icount_rt_timer = qemu_new_timer(rt_clock, icount_adjust_rt, NULL);
987 qemu_mod_timer(icount_rt_timer,
988 qemu_get_clock(rt_clock) + 1000);
989 icount_vm_timer = qemu_new_timer(vm_clock, icount_adjust_vm, NULL);
990 qemu_mod_timer(icount_vm_timer,
991 qemu_get_clock(vm_clock) + QEMU_TIMER_BASE / 10);
994 static struct qemu_alarm_timer alarm_timers[] = {
995 #ifndef _WIN32
996 #ifdef __linux__
997 {"dynticks", ALARM_FLAG_DYNTICKS, dynticks_start_timer,
998 dynticks_stop_timer, dynticks_rearm_timer, NULL},
999 /* HPET - if available - is preferred */
1000 {"hpet", 0, hpet_start_timer, hpet_stop_timer, NULL, NULL},
1001 /* ...otherwise try RTC */
1002 {"rtc", 0, rtc_start_timer, rtc_stop_timer, NULL, NULL},
1003 #endif
1004 {"unix", 0, unix_start_timer, unix_stop_timer, NULL, NULL},
1005 #else
1006 {"dynticks", ALARM_FLAG_DYNTICKS, win32_start_timer,
1007 win32_stop_timer, win32_rearm_timer, &alarm_win32_data},
1008 {"win32", 0, win32_start_timer,
1009 win32_stop_timer, NULL, &alarm_win32_data},
1010 #endif
1011 {NULL, }
1014 static void show_available_alarms(void)
1016 int i;
1018 printf("Available alarm timers, in order of precedence:\n");
1019 for (i = 0; alarm_timers[i].name; i++)
1020 printf("%s\n", alarm_timers[i].name);
1023 static void configure_alarms(char const *opt)
1025 int i;
1026 int cur = 0;
1027 int count = (sizeof(alarm_timers) / sizeof(*alarm_timers)) - 1;
1028 char *arg;
1029 char *name;
1030 struct qemu_alarm_timer tmp;
1032 if (!strcmp(opt, "?")) {
1033 show_available_alarms();
1034 exit(0);
1037 arg = strdup(opt);
1039 /* Reorder the array */
1040 name = strtok(arg, ",");
1041 while (name) {
1042 for (i = 0; i < count && alarm_timers[i].name; i++) {
1043 if (!strcmp(alarm_timers[i].name, name))
1044 break;
1047 if (i == count) {
1048 fprintf(stderr, "Unknown clock %s\n", name);
1049 goto next;
1052 if (i < cur)
1053 /* Ignore */
1054 goto next;
1056 /* Swap */
1057 tmp = alarm_timers[i];
1058 alarm_timers[i] = alarm_timers[cur];
1059 alarm_timers[cur] = tmp;
1061 cur++;
1062 next:
1063 name = strtok(NULL, ",");
1066 free(arg);
1068 if (cur) {
1069 /* Disable remaining timers */
1070 for (i = cur; i < count; i++)
1071 alarm_timers[i].name = NULL;
1072 } else {
1073 show_available_alarms();
1074 exit(1);
1078 QEMUClock *rt_clock;
1079 QEMUClock *vm_clock;
1081 static QEMUTimer *active_timers[2];
1083 static QEMUClock *qemu_new_clock(int type)
1085 QEMUClock *clock;
1086 clock = qemu_mallocz(sizeof(QEMUClock));
1087 if (!clock)
1088 return NULL;
1089 clock->type = type;
1090 return clock;
1093 QEMUTimer *qemu_new_timer(QEMUClock *clock, QEMUTimerCB *cb, void *opaque)
1095 QEMUTimer *ts;
1097 ts = qemu_mallocz(sizeof(QEMUTimer));
1098 ts->clock = clock;
1099 ts->cb = cb;
1100 ts->opaque = opaque;
1101 return ts;
1104 void qemu_free_timer(QEMUTimer *ts)
1106 qemu_free(ts);
1109 /* stop a timer, but do not dealloc it */
1110 void qemu_del_timer(QEMUTimer *ts)
1112 QEMUTimer **pt, *t;
1114 /* NOTE: this code must be signal safe because
1115 qemu_timer_expired() can be called from a signal. */
1116 pt = &active_timers[ts->clock->type];
1117 for(;;) {
1118 t = *pt;
1119 if (!t)
1120 break;
1121 if (t == ts) {
1122 *pt = t->next;
1123 break;
1125 pt = &t->next;
1129 /* modify the current timer so that it will be fired when current_time
1130 >= expire_time. The corresponding callback will be called. */
1131 void qemu_mod_timer(QEMUTimer *ts, int64_t expire_time)
1133 QEMUTimer **pt, *t;
1135 qemu_del_timer(ts);
1137 /* add the timer in the sorted list */
1138 /* NOTE: this code must be signal safe because
1139 qemu_timer_expired() can be called from a signal. */
1140 pt = &active_timers[ts->clock->type];
1141 for(;;) {
1142 t = *pt;
1143 if (!t)
1144 break;
1145 if (t->expire_time > expire_time)
1146 break;
1147 pt = &t->next;
1149 ts->expire_time = expire_time;
1150 ts->next = *pt;
1151 *pt = ts;
1153 /* Rearm if necessary */
1154 if (pt == &active_timers[ts->clock->type]) {
1155 if ((alarm_timer->flags & ALARM_FLAG_EXPIRED) == 0) {
1156 qemu_rearm_alarm_timer(alarm_timer);
1158 /* Interrupt execution to force deadline recalculation. */
1159 if (use_icount && cpu_single_env) {
1160 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
1165 int qemu_timer_pending(QEMUTimer *ts)
1167 QEMUTimer *t;
1168 for(t = active_timers[ts->clock->type]; t != NULL; t = t->next) {
1169 if (t == ts)
1170 return 1;
1172 return 0;
1175 static inline int qemu_timer_expired(QEMUTimer *timer_head, int64_t current_time)
1177 if (!timer_head)
1178 return 0;
1179 return (timer_head->expire_time <= current_time);
1182 static void qemu_run_timers(QEMUTimer **ptimer_head, int64_t current_time)
1184 QEMUTimer *ts;
1186 for(;;) {
1187 ts = *ptimer_head;
1188 if (!ts || ts->expire_time > current_time)
1189 break;
1190 /* remove timer from the list before calling the callback */
1191 *ptimer_head = ts->next;
1192 ts->next = NULL;
1194 /* run the callback (the timer list can be modified) */
1195 ts->cb(ts->opaque);
1199 int64_t qemu_get_clock(QEMUClock *clock)
1201 switch(clock->type) {
1202 case QEMU_TIMER_REALTIME:
1203 return get_clock() / 1000000;
1204 default:
1205 case QEMU_TIMER_VIRTUAL:
1206 if (use_icount) {
1207 return cpu_get_icount();
1208 } else {
1209 return cpu_get_clock();
1214 static void init_timers(void)
1216 init_get_clock();
1217 ticks_per_sec = QEMU_TIMER_BASE;
1218 rt_clock = qemu_new_clock(QEMU_TIMER_REALTIME);
1219 vm_clock = qemu_new_clock(QEMU_TIMER_VIRTUAL);
1222 /* save a timer */
1223 void qemu_put_timer(QEMUFile *f, QEMUTimer *ts)
1225 uint64_t expire_time;
1227 if (qemu_timer_pending(ts)) {
1228 expire_time = ts->expire_time;
1229 } else {
1230 expire_time = -1;
1232 qemu_put_be64(f, expire_time);
1235 void qemu_get_timer(QEMUFile *f, QEMUTimer *ts)
1237 uint64_t expire_time;
1239 expire_time = qemu_get_be64(f);
1240 if (expire_time != -1) {
1241 qemu_mod_timer(ts, expire_time);
1242 } else {
1243 qemu_del_timer(ts);
1247 static void timer_save(QEMUFile *f, void *opaque)
1249 if (cpu_ticks_enabled) {
1250 hw_error("cannot save state if virtual timers are running");
1252 qemu_put_be64(f, cpu_ticks_offset);
1253 qemu_put_be64(f, ticks_per_sec);
1254 qemu_put_be64(f, cpu_clock_offset);
1257 static int timer_load(QEMUFile *f, void *opaque, int version_id)
1259 if (version_id != 1 && version_id != 2)
1260 return -EINVAL;
1261 if (cpu_ticks_enabled) {
1262 return -EINVAL;
1264 cpu_ticks_offset=qemu_get_be64(f);
1265 ticks_per_sec=qemu_get_be64(f);
1266 if (version_id == 2) {
1267 cpu_clock_offset=qemu_get_be64(f);
1269 return 0;
1272 #ifdef _WIN32
1273 void CALLBACK host_alarm_handler(UINT uTimerID, UINT uMsg,
1274 DWORD_PTR dwUser, DWORD_PTR dw1, DWORD_PTR dw2)
1275 #else
1276 static void host_alarm_handler(int host_signum)
1277 #endif
1279 #if 0
1280 #define DISP_FREQ 1000
1282 static int64_t delta_min = INT64_MAX;
1283 static int64_t delta_max, delta_cum, last_clock, delta, ti;
1284 static int count;
1285 ti = qemu_get_clock(vm_clock);
1286 if (last_clock != 0) {
1287 delta = ti - last_clock;
1288 if (delta < delta_min)
1289 delta_min = delta;
1290 if (delta > delta_max)
1291 delta_max = delta;
1292 delta_cum += delta;
1293 if (++count == DISP_FREQ) {
1294 printf("timer: min=%" PRId64 " us max=%" PRId64 " us avg=%" PRId64 " us avg_freq=%0.3f Hz\n",
1295 muldiv64(delta_min, 1000000, ticks_per_sec),
1296 muldiv64(delta_max, 1000000, ticks_per_sec),
1297 muldiv64(delta_cum, 1000000 / DISP_FREQ, ticks_per_sec),
1298 (double)ticks_per_sec / ((double)delta_cum / DISP_FREQ));
1299 count = 0;
1300 delta_min = INT64_MAX;
1301 delta_max = 0;
1302 delta_cum = 0;
1305 last_clock = ti;
1307 #endif
1308 if (alarm_has_dynticks(alarm_timer) ||
1309 (!use_icount &&
1310 qemu_timer_expired(active_timers[QEMU_TIMER_VIRTUAL],
1311 qemu_get_clock(vm_clock))) ||
1312 qemu_timer_expired(active_timers[QEMU_TIMER_REALTIME],
1313 qemu_get_clock(rt_clock))) {
1314 #ifdef _WIN32
1315 struct qemu_alarm_win32 *data = ((struct qemu_alarm_timer*)dwUser)->priv;
1316 SetEvent(data->host_alarm);
1317 #endif
1318 CPUState *env = next_cpu;
1320 alarm_timer->flags |= ALARM_FLAG_EXPIRED;
1322 if (env) {
1323 /* stop the currently executing cpu because a timer occured */
1324 cpu_interrupt(env, CPU_INTERRUPT_EXIT);
1325 #ifdef USE_KQEMU
1326 if (env->kqemu_enabled) {
1327 kqemu_cpu_interrupt(env);
1329 #endif
1331 event_pending = 1;
1335 static int64_t qemu_next_deadline(void)
1337 int64_t delta;
1339 if (active_timers[QEMU_TIMER_VIRTUAL]) {
1340 delta = active_timers[QEMU_TIMER_VIRTUAL]->expire_time -
1341 qemu_get_clock(vm_clock);
1342 } else {
1343 /* To avoid problems with overflow limit this to 2^32. */
1344 delta = INT32_MAX;
1347 if (delta < 0)
1348 delta = 0;
1350 return delta;
1353 static uint64_t qemu_next_deadline_dyntick(void)
1355 int64_t delta;
1356 int64_t rtdelta;
1358 if (use_icount)
1359 delta = INT32_MAX;
1360 else
1361 delta = (qemu_next_deadline() + 999) / 1000;
1363 if (active_timers[QEMU_TIMER_REALTIME]) {
1364 rtdelta = (active_timers[QEMU_TIMER_REALTIME]->expire_time -
1365 qemu_get_clock(rt_clock))*1000;
1366 if (rtdelta < delta)
1367 delta = rtdelta;
1370 if (delta < MIN_TIMER_REARM_US)
1371 delta = MIN_TIMER_REARM_US;
1373 return delta;
1376 #ifndef _WIN32
1378 #if defined(__linux__)
1380 #define RTC_FREQ 1024
1382 static void enable_sigio_timer(int fd)
1384 struct sigaction act;
1386 /* timer signal */
1387 sigfillset(&act.sa_mask);
1388 act.sa_flags = 0;
1389 act.sa_handler = host_alarm_handler;
1391 sigaction(SIGIO, &act, NULL);
1392 fcntl(fd, F_SETFL, O_ASYNC);
1393 fcntl(fd, F_SETOWN, getpid());
1396 static int hpet_start_timer(struct qemu_alarm_timer *t)
1398 struct hpet_info info;
1399 int r, fd;
1401 fd = open("/dev/hpet", O_RDONLY);
1402 if (fd < 0)
1403 return -1;
1405 /* Set frequency */
1406 r = ioctl(fd, HPET_IRQFREQ, RTC_FREQ);
1407 if (r < 0) {
1408 fprintf(stderr, "Could not configure '/dev/hpet' to have a 1024Hz timer. This is not a fatal\n"
1409 "error, but for better emulation accuracy type:\n"
1410 "'echo 1024 > /proc/sys/dev/hpet/max-user-freq' as root.\n");
1411 goto fail;
1414 /* Check capabilities */
1415 r = ioctl(fd, HPET_INFO, &info);
1416 if (r < 0)
1417 goto fail;
1419 /* Enable periodic mode */
1420 r = ioctl(fd, HPET_EPI, 0);
1421 if (info.hi_flags && (r < 0))
1422 goto fail;
1424 /* Enable interrupt */
1425 r = ioctl(fd, HPET_IE_ON, 0);
1426 if (r < 0)
1427 goto fail;
1429 enable_sigio_timer(fd);
1430 t->priv = (void *)(long)fd;
1432 return 0;
1433 fail:
1434 close(fd);
1435 return -1;
1438 static void hpet_stop_timer(struct qemu_alarm_timer *t)
1440 int fd = (long)t->priv;
1442 close(fd);
1445 static int rtc_start_timer(struct qemu_alarm_timer *t)
1447 int rtc_fd;
1448 unsigned long current_rtc_freq = 0;
1450 TFR(rtc_fd = open("/dev/rtc", O_RDONLY));
1451 if (rtc_fd < 0)
1452 return -1;
1453 ioctl(rtc_fd, RTC_IRQP_READ, &current_rtc_freq);
1454 if (current_rtc_freq != RTC_FREQ &&
1455 ioctl(rtc_fd, RTC_IRQP_SET, RTC_FREQ) < 0) {
1456 fprintf(stderr, "Could not configure '/dev/rtc' to have a 1024 Hz timer. This is not a fatal\n"
1457 "error, but for better emulation accuracy either use a 2.6 host Linux kernel or\n"
1458 "type 'echo 1024 > /proc/sys/dev/rtc/max-user-freq' as root.\n");
1459 goto fail;
1461 if (ioctl(rtc_fd, RTC_PIE_ON, 0) < 0) {
1462 fail:
1463 close(rtc_fd);
1464 return -1;
1467 enable_sigio_timer(rtc_fd);
1469 t->priv = (void *)(long)rtc_fd;
1471 return 0;
1474 static void rtc_stop_timer(struct qemu_alarm_timer *t)
1476 int rtc_fd = (long)t->priv;
1478 close(rtc_fd);
1481 static int dynticks_start_timer(struct qemu_alarm_timer *t)
1483 struct sigevent ev;
1484 timer_t host_timer;
1485 struct sigaction act;
1487 sigfillset(&act.sa_mask);
1488 act.sa_flags = 0;
1489 act.sa_handler = host_alarm_handler;
1491 sigaction(SIGALRM, &act, NULL);
1493 ev.sigev_value.sival_int = 0;
1494 ev.sigev_notify = SIGEV_SIGNAL;
1495 ev.sigev_signo = SIGALRM;
1497 if (timer_create(CLOCK_REALTIME, &ev, &host_timer)) {
1498 perror("timer_create");
1500 /* disable dynticks */
1501 fprintf(stderr, "Dynamic Ticks disabled\n");
1503 return -1;
1506 t->priv = (void *)host_timer;
1508 return 0;
1511 static void dynticks_stop_timer(struct qemu_alarm_timer *t)
1513 timer_t host_timer = (timer_t)t->priv;
1515 timer_delete(host_timer);
1518 static void dynticks_rearm_timer(struct qemu_alarm_timer *t)
1520 timer_t host_timer = (timer_t)t->priv;
1521 struct itimerspec timeout;
1522 int64_t nearest_delta_us = INT64_MAX;
1523 int64_t current_us;
1525 if (!active_timers[QEMU_TIMER_REALTIME] &&
1526 !active_timers[QEMU_TIMER_VIRTUAL])
1527 return;
1529 nearest_delta_us = qemu_next_deadline_dyntick();
1531 /* check whether a timer is already running */
1532 if (timer_gettime(host_timer, &timeout)) {
1533 perror("gettime");
1534 fprintf(stderr, "Internal timer error: aborting\n");
1535 exit(1);
1537 current_us = timeout.it_value.tv_sec * 1000000 + timeout.it_value.tv_nsec/1000;
1538 if (current_us && current_us <= nearest_delta_us)
1539 return;
1541 timeout.it_interval.tv_sec = 0;
1542 timeout.it_interval.tv_nsec = 0; /* 0 for one-shot timer */
1543 timeout.it_value.tv_sec = nearest_delta_us / 1000000;
1544 timeout.it_value.tv_nsec = (nearest_delta_us % 1000000) * 1000;
1545 if (timer_settime(host_timer, 0 /* RELATIVE */, &timeout, NULL)) {
1546 perror("settime");
1547 fprintf(stderr, "Internal timer error: aborting\n");
1548 exit(1);
1552 #endif /* defined(__linux__) */
1554 static int unix_start_timer(struct qemu_alarm_timer *t)
1556 struct sigaction act;
1557 struct itimerval itv;
1558 int err;
1560 /* timer signal */
1561 sigfillset(&act.sa_mask);
1562 act.sa_flags = 0;
1563 act.sa_handler = host_alarm_handler;
1565 sigaction(SIGALRM, &act, NULL);
1567 itv.it_interval.tv_sec = 0;
1568 /* for i386 kernel 2.6 to get 1 ms */
1569 itv.it_interval.tv_usec = 999;
1570 itv.it_value.tv_sec = 0;
1571 itv.it_value.tv_usec = 10 * 1000;
1573 err = setitimer(ITIMER_REAL, &itv, NULL);
1574 if (err)
1575 return -1;
1577 return 0;
1580 static void unix_stop_timer(struct qemu_alarm_timer *t)
1582 struct itimerval itv;
1584 memset(&itv, 0, sizeof(itv));
1585 setitimer(ITIMER_REAL, &itv, NULL);
1588 #endif /* !defined(_WIN32) */
1590 #ifdef _WIN32
1592 static int win32_start_timer(struct qemu_alarm_timer *t)
1594 TIMECAPS tc;
1595 struct qemu_alarm_win32 *data = t->priv;
1596 UINT flags;
1598 data->host_alarm = CreateEvent(NULL, FALSE, FALSE, NULL);
1599 if (!data->host_alarm) {
1600 perror("Failed CreateEvent");
1601 return -1;
1604 memset(&tc, 0, sizeof(tc));
1605 timeGetDevCaps(&tc, sizeof(tc));
1607 if (data->period < tc.wPeriodMin)
1608 data->period = tc.wPeriodMin;
1610 timeBeginPeriod(data->period);
1612 flags = TIME_CALLBACK_FUNCTION;
1613 if (alarm_has_dynticks(t))
1614 flags |= TIME_ONESHOT;
1615 else
1616 flags |= TIME_PERIODIC;
1618 data->timerId = timeSetEvent(1, // interval (ms)
1619 data->period, // resolution
1620 host_alarm_handler, // function
1621 (DWORD)t, // parameter
1622 flags);
1624 if (!data->timerId) {
1625 perror("Failed to initialize win32 alarm timer");
1627 timeEndPeriod(data->period);
1628 CloseHandle(data->host_alarm);
1629 return -1;
1632 qemu_add_wait_object(data->host_alarm, NULL, NULL);
1634 return 0;
1637 static void win32_stop_timer(struct qemu_alarm_timer *t)
1639 struct qemu_alarm_win32 *data = t->priv;
1641 timeKillEvent(data->timerId);
1642 timeEndPeriod(data->period);
1644 CloseHandle(data->host_alarm);
1647 static void win32_rearm_timer(struct qemu_alarm_timer *t)
1649 struct qemu_alarm_win32 *data = t->priv;
1650 uint64_t nearest_delta_us;
1652 if (!active_timers[QEMU_TIMER_REALTIME] &&
1653 !active_timers[QEMU_TIMER_VIRTUAL])
1654 return;
1656 nearest_delta_us = qemu_next_deadline_dyntick();
1657 nearest_delta_us /= 1000;
1659 timeKillEvent(data->timerId);
1661 data->timerId = timeSetEvent(1,
1662 data->period,
1663 host_alarm_handler,
1664 (DWORD)t,
1665 TIME_ONESHOT | TIME_PERIODIC);
1667 if (!data->timerId) {
1668 perror("Failed to re-arm win32 alarm timer");
1670 timeEndPeriod(data->period);
1671 CloseHandle(data->host_alarm);
1672 exit(1);
1676 #endif /* _WIN32 */
1678 static void init_timer_alarm(void)
1680 struct qemu_alarm_timer *t;
1681 int i, err = -1;
1683 for (i = 0; alarm_timers[i].name; i++) {
1684 t = &alarm_timers[i];
1686 err = t->start(t);
1687 if (!err)
1688 break;
1691 if (err) {
1692 fprintf(stderr, "Unable to find any suitable alarm timer.\n");
1693 fprintf(stderr, "Terminating\n");
1694 exit(1);
1697 alarm_timer = t;
1700 static void quit_timers(void)
1702 alarm_timer->stop(alarm_timer);
1703 alarm_timer = NULL;
1706 /***********************************************************/
1707 /* host time/date access */
1708 void qemu_get_timedate(struct tm *tm, int offset)
1710 time_t ti;
1711 struct tm *ret;
1713 time(&ti);
1714 ti += offset;
1715 if (rtc_date_offset == -1) {
1716 if (rtc_utc)
1717 ret = gmtime(&ti);
1718 else
1719 ret = localtime(&ti);
1720 } else {
1721 ti -= rtc_date_offset;
1722 ret = gmtime(&ti);
1725 memcpy(tm, ret, sizeof(struct tm));
1728 int qemu_timedate_diff(struct tm *tm)
1730 time_t seconds;
1732 if (rtc_date_offset == -1)
1733 if (rtc_utc)
1734 seconds = mktimegm(tm);
1735 else
1736 seconds = mktime(tm);
1737 else
1738 seconds = mktimegm(tm) + rtc_date_offset;
1740 return seconds - time(NULL);
1743 /***********************************************************/
1744 /* character device */
1746 static void qemu_chr_event(CharDriverState *s, int event)
1748 if (!s->chr_event)
1749 return;
1750 s->chr_event(s->handler_opaque, event);
1753 static void qemu_chr_reset_bh(void *opaque)
1755 CharDriverState *s = opaque;
1756 qemu_chr_event(s, CHR_EVENT_RESET);
1757 qemu_bh_delete(s->bh);
1758 s->bh = NULL;
1761 void qemu_chr_reset(CharDriverState *s)
1763 if (s->bh == NULL) {
1764 s->bh = qemu_bh_new(qemu_chr_reset_bh, s);
1765 qemu_bh_schedule(s->bh);
1769 int qemu_chr_write(CharDriverState *s, const uint8_t *buf, int len)
1771 return s->chr_write(s, buf, len);
1774 int qemu_chr_ioctl(CharDriverState *s, int cmd, void *arg)
1776 if (!s->chr_ioctl)
1777 return -ENOTSUP;
1778 return s->chr_ioctl(s, cmd, arg);
1781 int qemu_chr_can_read(CharDriverState *s)
1783 if (!s->chr_can_read)
1784 return 0;
1785 return s->chr_can_read(s->handler_opaque);
1788 void qemu_chr_read(CharDriverState *s, uint8_t *buf, int len)
1790 s->chr_read(s->handler_opaque, buf, len);
1793 void qemu_chr_accept_input(CharDriverState *s)
1795 if (s->chr_accept_input)
1796 s->chr_accept_input(s);
1799 void qemu_chr_printf(CharDriverState *s, const char *fmt, ...)
1801 char buf[4096];
1802 va_list ap;
1803 va_start(ap, fmt);
1804 vsnprintf(buf, sizeof(buf), fmt, ap);
1805 qemu_chr_write(s, (uint8_t *)buf, strlen(buf));
1806 va_end(ap);
1809 void qemu_chr_send_event(CharDriverState *s, int event)
1811 if (s->chr_send_event)
1812 s->chr_send_event(s, event);
1815 void qemu_chr_add_handlers(CharDriverState *s,
1816 IOCanRWHandler *fd_can_read,
1817 IOReadHandler *fd_read,
1818 IOEventHandler *fd_event,
1819 void *opaque)
1821 s->chr_can_read = fd_can_read;
1822 s->chr_read = fd_read;
1823 s->chr_event = fd_event;
1824 s->handler_opaque = opaque;
1825 if (s->chr_update_read_handler)
1826 s->chr_update_read_handler(s);
1829 static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1831 return len;
1834 static CharDriverState *qemu_chr_open_null(void)
1836 CharDriverState *chr;
1838 chr = qemu_mallocz(sizeof(CharDriverState));
1839 if (!chr)
1840 return NULL;
1841 chr->chr_write = null_chr_write;
1842 return chr;
1845 /* MUX driver for serial I/O splitting */
1846 static int term_timestamps;
1847 static int64_t term_timestamps_start;
1848 #define MAX_MUX 4
1849 #define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
1850 #define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
1851 typedef struct {
1852 IOCanRWHandler *chr_can_read[MAX_MUX];
1853 IOReadHandler *chr_read[MAX_MUX];
1854 IOEventHandler *chr_event[MAX_MUX];
1855 void *ext_opaque[MAX_MUX];
1856 CharDriverState *drv;
1857 unsigned char buffer[MUX_BUFFER_SIZE];
1858 int prod;
1859 int cons;
1860 int mux_cnt;
1861 int term_got_escape;
1862 int max_size;
1863 } MuxDriver;
1866 static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1868 MuxDriver *d = chr->opaque;
1869 int ret;
1870 if (!term_timestamps) {
1871 ret = d->drv->chr_write(d->drv, buf, len);
1872 } else {
1873 int i;
1875 ret = 0;
1876 for(i = 0; i < len; i++) {
1877 ret += d->drv->chr_write(d->drv, buf+i, 1);
1878 if (buf[i] == '\n') {
1879 char buf1[64];
1880 int64_t ti;
1881 int secs;
1883 ti = get_clock();
1884 if (term_timestamps_start == -1)
1885 term_timestamps_start = ti;
1886 ti -= term_timestamps_start;
1887 secs = ti / 1000000000;
1888 snprintf(buf1, sizeof(buf1),
1889 "[%02d:%02d:%02d.%03d] ",
1890 secs / 3600,
1891 (secs / 60) % 60,
1892 secs % 60,
1893 (int)((ti / 1000000) % 1000));
1894 d->drv->chr_write(d->drv, (uint8_t *)buf1, strlen(buf1));
1898 return ret;
1901 static char *mux_help[] = {
1902 "% h print this help\n\r",
1903 "% x exit emulator\n\r",
1904 "% s save disk data back to file (if -snapshot)\n\r",
1905 "% t toggle console timestamps\n\r"
1906 "% b send break (magic sysrq)\n\r",
1907 "% c switch between console and monitor\n\r",
1908 "% % sends %\n\r",
1909 NULL
1912 static int term_escape_char = 0x01; /* ctrl-a is used for escape */
1913 static void mux_print_help(CharDriverState *chr)
1915 int i, j;
1916 char ebuf[15] = "Escape-Char";
1917 char cbuf[50] = "\n\r";
1919 if (term_escape_char > 0 && term_escape_char < 26) {
1920 snprintf(cbuf, sizeof(cbuf), "\n\r");
1921 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
1922 } else {
1923 snprintf(cbuf, sizeof(cbuf),
1924 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
1925 term_escape_char);
1927 chr->chr_write(chr, (uint8_t *)cbuf, strlen(cbuf));
1928 for (i = 0; mux_help[i] != NULL; i++) {
1929 for (j=0; mux_help[i][j] != '\0'; j++) {
1930 if (mux_help[i][j] == '%')
1931 chr->chr_write(chr, (uint8_t *)ebuf, strlen(ebuf));
1932 else
1933 chr->chr_write(chr, (uint8_t *)&mux_help[i][j], 1);
1938 static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
1940 if (d->term_got_escape) {
1941 d->term_got_escape = 0;
1942 if (ch == term_escape_char)
1943 goto send_char;
1944 switch(ch) {
1945 case '?':
1946 case 'h':
1947 mux_print_help(chr);
1948 break;
1949 case 'x':
1951 char *term = "QEMU: Terminated\n\r";
1952 chr->chr_write(chr,(uint8_t *)term,strlen(term));
1953 exit(0);
1954 break;
1956 case 's':
1958 int i;
1959 for (i = 0; i < nb_drives; i++) {
1960 bdrv_commit(drives_table[i].bdrv);
1963 break;
1964 case 'b':
1965 qemu_chr_event(chr, CHR_EVENT_BREAK);
1966 break;
1967 case 'c':
1968 /* Switch to the next registered device */
1969 chr->focus++;
1970 if (chr->focus >= d->mux_cnt)
1971 chr->focus = 0;
1972 break;
1973 case 't':
1974 term_timestamps = !term_timestamps;
1975 term_timestamps_start = -1;
1976 break;
1978 } else if (ch == term_escape_char) {
1979 d->term_got_escape = 1;
1980 } else {
1981 send_char:
1982 return 1;
1984 return 0;
1987 static void mux_chr_accept_input(CharDriverState *chr)
1989 int m = chr->focus;
1990 MuxDriver *d = chr->opaque;
1992 while (d->prod != d->cons &&
1993 d->chr_can_read[m] &&
1994 d->chr_can_read[m](d->ext_opaque[m])) {
1995 d->chr_read[m](d->ext_opaque[m],
1996 &d->buffer[d->cons++ & MUX_BUFFER_MASK], 1);
2000 static int mux_chr_can_read(void *opaque)
2002 CharDriverState *chr = opaque;
2003 MuxDriver *d = chr->opaque;
2005 if ((d->prod - d->cons) < MUX_BUFFER_SIZE)
2006 return 1;
2007 if (d->chr_can_read[chr->focus])
2008 return d->chr_can_read[chr->focus](d->ext_opaque[chr->focus]);
2009 return 0;
2012 static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
2014 CharDriverState *chr = opaque;
2015 MuxDriver *d = chr->opaque;
2016 int m = chr->focus;
2017 int i;
2019 mux_chr_accept_input (opaque);
2021 for(i = 0; i < size; i++)
2022 if (mux_proc_byte(chr, d, buf[i])) {
2023 if (d->prod == d->cons &&
2024 d->chr_can_read[m] &&
2025 d->chr_can_read[m](d->ext_opaque[m]))
2026 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
2027 else
2028 d->buffer[d->prod++ & MUX_BUFFER_MASK] = buf[i];
2032 static void mux_chr_event(void *opaque, int event)
2034 CharDriverState *chr = opaque;
2035 MuxDriver *d = chr->opaque;
2036 int i;
2038 /* Send the event to all registered listeners */
2039 for (i = 0; i < d->mux_cnt; i++)
2040 if (d->chr_event[i])
2041 d->chr_event[i](d->ext_opaque[i], event);
2044 static void mux_chr_update_read_handler(CharDriverState *chr)
2046 MuxDriver *d = chr->opaque;
2048 if (d->mux_cnt >= MAX_MUX) {
2049 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
2050 return;
2052 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
2053 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
2054 d->chr_read[d->mux_cnt] = chr->chr_read;
2055 d->chr_event[d->mux_cnt] = chr->chr_event;
2056 /* Fix up the real driver with mux routines */
2057 if (d->mux_cnt == 0) {
2058 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
2059 mux_chr_event, chr);
2061 chr->focus = d->mux_cnt;
2062 d->mux_cnt++;
2065 static CharDriverState *qemu_chr_open_mux(CharDriverState *drv)
2067 CharDriverState *chr;
2068 MuxDriver *d;
2070 chr = qemu_mallocz(sizeof(CharDriverState));
2071 if (!chr)
2072 return NULL;
2073 d = qemu_mallocz(sizeof(MuxDriver));
2074 if (!d) {
2075 free(chr);
2076 return NULL;
2079 chr->opaque = d;
2080 d->drv = drv;
2081 chr->focus = -1;
2082 chr->chr_write = mux_chr_write;
2083 chr->chr_update_read_handler = mux_chr_update_read_handler;
2084 chr->chr_accept_input = mux_chr_accept_input;
2085 return chr;
2089 #ifdef _WIN32
2091 static void socket_cleanup(void)
2093 WSACleanup();
2096 static int socket_init(void)
2098 WSADATA Data;
2099 int ret, err;
2101 ret = WSAStartup(MAKEWORD(2,2), &Data);
2102 if (ret != 0) {
2103 err = WSAGetLastError();
2104 fprintf(stderr, "WSAStartup: %d\n", err);
2105 return -1;
2107 atexit(socket_cleanup);
2108 return 0;
2111 static int send_all(int fd, const uint8_t *buf, int len1)
2113 int ret, len;
2115 len = len1;
2116 while (len > 0) {
2117 ret = send(fd, buf, len, 0);
2118 if (ret < 0) {
2119 int errno;
2120 errno = WSAGetLastError();
2121 if (errno != WSAEWOULDBLOCK) {
2122 return -1;
2124 } else if (ret == 0) {
2125 break;
2126 } else {
2127 buf += ret;
2128 len -= ret;
2131 return len1 - len;
2134 void socket_set_nonblock(int fd)
2136 unsigned long opt = 1;
2137 ioctlsocket(fd, FIONBIO, &opt);
2140 #else
2142 static int unix_write(int fd, const uint8_t *buf, int len1)
2144 int ret, len;
2146 len = len1;
2147 while (len > 0) {
2148 ret = write(fd, buf, len);
2149 if (ret < 0) {
2150 if (errno != EINTR && errno != EAGAIN)
2151 return -1;
2152 } else if (ret == 0) {
2153 break;
2154 } else {
2155 buf += ret;
2156 len -= ret;
2159 return len1 - len;
2162 static inline int send_all(int fd, const uint8_t *buf, int len1)
2164 return unix_write(fd, buf, len1);
2167 void socket_set_nonblock(int fd)
2169 int f;
2170 f = fcntl(fd, F_GETFL);
2171 fcntl(fd, F_SETFL, f | O_NONBLOCK);
2173 #endif /* !_WIN32 */
2175 #ifndef _WIN32
2177 typedef struct {
2178 int fd_in, fd_out;
2179 int max_size;
2180 } FDCharDriver;
2182 #define STDIO_MAX_CLIENTS 1
2183 static int stdio_nb_clients = 0;
2185 static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2187 FDCharDriver *s = chr->opaque;
2188 return unix_write(s->fd_out, buf, len);
2191 static int fd_chr_read_poll(void *opaque)
2193 CharDriverState *chr = opaque;
2194 FDCharDriver *s = chr->opaque;
2196 s->max_size = qemu_chr_can_read(chr);
2197 return s->max_size;
2200 static void fd_chr_read(void *opaque)
2202 CharDriverState *chr = opaque;
2203 FDCharDriver *s = chr->opaque;
2204 int size, len;
2205 uint8_t buf[1024];
2207 len = sizeof(buf);
2208 if (len > s->max_size)
2209 len = s->max_size;
2210 if (len == 0)
2211 return;
2212 size = read(s->fd_in, buf, len);
2213 if (size == 0) {
2214 /* FD has been closed. Remove it from the active list. */
2215 qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
2216 return;
2218 if (size > 0) {
2219 qemu_chr_read(chr, buf, size);
2223 static void fd_chr_update_read_handler(CharDriverState *chr)
2225 FDCharDriver *s = chr->opaque;
2227 if (s->fd_in >= 0) {
2228 if (nographic && s->fd_in == 0) {
2229 } else {
2230 qemu_set_fd_handler2(s->fd_in, fd_chr_read_poll,
2231 fd_chr_read, NULL, chr);
2236 static void fd_chr_close(struct CharDriverState *chr)
2238 FDCharDriver *s = chr->opaque;
2240 if (s->fd_in >= 0) {
2241 if (nographic && s->fd_in == 0) {
2242 } else {
2243 qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
2247 qemu_free(s);
2250 /* open a character device to a unix fd */
2251 static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
2253 CharDriverState *chr;
2254 FDCharDriver *s;
2256 chr = qemu_mallocz(sizeof(CharDriverState));
2257 if (!chr)
2258 return NULL;
2259 s = qemu_mallocz(sizeof(FDCharDriver));
2260 if (!s) {
2261 free(chr);
2262 return NULL;
2264 s->fd_in = fd_in;
2265 s->fd_out = fd_out;
2266 chr->opaque = s;
2267 chr->chr_write = fd_chr_write;
2268 chr->chr_update_read_handler = fd_chr_update_read_handler;
2269 chr->chr_close = fd_chr_close;
2271 qemu_chr_reset(chr);
2273 return chr;
2276 static CharDriverState *qemu_chr_open_file_out(const char *file_out)
2278 int fd_out;
2280 TFR(fd_out = open(file_out, O_WRONLY | O_TRUNC | O_CREAT | O_BINARY, 0666));
2281 if (fd_out < 0)
2282 return NULL;
2283 return qemu_chr_open_fd(-1, fd_out);
2286 static CharDriverState *qemu_chr_open_pipe(const char *filename)
2288 int fd_in, fd_out;
2289 char filename_in[256], filename_out[256];
2291 snprintf(filename_in, 256, "%s.in", filename);
2292 snprintf(filename_out, 256, "%s.out", filename);
2293 TFR(fd_in = open(filename_in, O_RDWR | O_BINARY));
2294 TFR(fd_out = open(filename_out, O_RDWR | O_BINARY));
2295 if (fd_in < 0 || fd_out < 0) {
2296 if (fd_in >= 0)
2297 close(fd_in);
2298 if (fd_out >= 0)
2299 close(fd_out);
2300 TFR(fd_in = fd_out = open(filename, O_RDWR | O_BINARY));
2301 if (fd_in < 0)
2302 return NULL;
2304 return qemu_chr_open_fd(fd_in, fd_out);
2308 /* for STDIO, we handle the case where several clients use it
2309 (nographic mode) */
2311 #define TERM_FIFO_MAX_SIZE 1
2313 static uint8_t term_fifo[TERM_FIFO_MAX_SIZE];
2314 static int term_fifo_size;
2316 static int stdio_read_poll(void *opaque)
2318 CharDriverState *chr = opaque;
2320 /* try to flush the queue if needed */
2321 if (term_fifo_size != 0 && qemu_chr_can_read(chr) > 0) {
2322 qemu_chr_read(chr, term_fifo, 1);
2323 term_fifo_size = 0;
2325 /* see if we can absorb more chars */
2326 if (term_fifo_size == 0)
2327 return 1;
2328 else
2329 return 0;
2332 static void stdio_read(void *opaque)
2334 int size;
2335 uint8_t buf[1];
2336 CharDriverState *chr = opaque;
2338 size = read(0, buf, 1);
2339 if (size == 0) {
2340 /* stdin has been closed. Remove it from the active list. */
2341 qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
2342 return;
2344 if (size > 0) {
2345 if (qemu_chr_can_read(chr) > 0) {
2346 qemu_chr_read(chr, buf, 1);
2347 } else if (term_fifo_size == 0) {
2348 term_fifo[term_fifo_size++] = buf[0];
2353 /* init terminal so that we can grab keys */
2354 static struct termios oldtty;
2355 static int old_fd0_flags;
2356 static int term_atexit_done;
2358 static void term_exit(void)
2360 tcsetattr (0, TCSANOW, &oldtty);
2361 fcntl(0, F_SETFL, old_fd0_flags);
2364 static void term_init(void)
2366 struct termios tty;
2368 tcgetattr (0, &tty);
2369 oldtty = tty;
2370 old_fd0_flags = fcntl(0, F_GETFL);
2372 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
2373 |INLCR|IGNCR|ICRNL|IXON);
2374 tty.c_oflag |= OPOST;
2375 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
2376 /* if graphical mode, we allow Ctrl-C handling */
2377 if (nographic)
2378 tty.c_lflag &= ~ISIG;
2379 tty.c_cflag &= ~(CSIZE|PARENB);
2380 tty.c_cflag |= CS8;
2381 tty.c_cc[VMIN] = 1;
2382 tty.c_cc[VTIME] = 0;
2384 tcsetattr (0, TCSANOW, &tty);
2386 if (!term_atexit_done++)
2387 atexit(term_exit);
2389 fcntl(0, F_SETFL, O_NONBLOCK);
2392 static void qemu_chr_close_stdio(struct CharDriverState *chr)
2394 term_exit();
2395 stdio_nb_clients--;
2396 qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
2397 fd_chr_close(chr);
2400 static CharDriverState *qemu_chr_open_stdio(void)
2402 CharDriverState *chr;
2404 if (stdio_nb_clients >= STDIO_MAX_CLIENTS)
2405 return NULL;
2406 chr = qemu_chr_open_fd(0, 1);
2407 chr->chr_close = qemu_chr_close_stdio;
2408 qemu_set_fd_handler2(0, stdio_read_poll, stdio_read, NULL, chr);
2409 stdio_nb_clients++;
2410 term_init();
2412 return chr;
2415 #ifdef __sun__
2416 /* Once Solaris has openpty(), this is going to be removed. */
2417 int openpty(int *amaster, int *aslave, char *name,
2418 struct termios *termp, struct winsize *winp)
2420 const char *slave;
2421 int mfd = -1, sfd = -1;
2423 *amaster = *aslave = -1;
2425 mfd = open("/dev/ptmx", O_RDWR | O_NOCTTY);
2426 if (mfd < 0)
2427 goto err;
2429 if (grantpt(mfd) == -1 || unlockpt(mfd) == -1)
2430 goto err;
2432 if ((slave = ptsname(mfd)) == NULL)
2433 goto err;
2435 if ((sfd = open(slave, O_RDONLY | O_NOCTTY)) == -1)
2436 goto err;
2438 if (ioctl(sfd, I_PUSH, "ptem") == -1 ||
2439 (termp != NULL && tcgetattr(sfd, termp) < 0))
2440 goto err;
2442 if (amaster)
2443 *amaster = mfd;
2444 if (aslave)
2445 *aslave = sfd;
2446 if (winp)
2447 ioctl(sfd, TIOCSWINSZ, winp);
2449 return 0;
2451 err:
2452 if (sfd != -1)
2453 close(sfd);
2454 close(mfd);
2455 return -1;
2458 void cfmakeraw (struct termios *termios_p)
2460 termios_p->c_iflag &=
2461 ~(IGNBRK|BRKINT|PARMRK|ISTRIP|INLCR|IGNCR|ICRNL|IXON);
2462 termios_p->c_oflag &= ~OPOST;
2463 termios_p->c_lflag &= ~(ECHO|ECHONL|ICANON|ISIG|IEXTEN);
2464 termios_p->c_cflag &= ~(CSIZE|PARENB);
2465 termios_p->c_cflag |= CS8;
2467 termios_p->c_cc[VMIN] = 0;
2468 termios_p->c_cc[VTIME] = 0;
2470 #endif
2472 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
2473 || defined(__NetBSD__) || defined(__OpenBSD__)
2475 typedef struct {
2476 int fd;
2477 int connected;
2478 int polling;
2479 int read_bytes;
2480 QEMUTimer *timer;
2481 } PtyCharDriver;
2483 static void pty_chr_update_read_handler(CharDriverState *chr);
2484 static void pty_chr_state(CharDriverState *chr, int connected);
2486 static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2488 PtyCharDriver *s = chr->opaque;
2490 if (!s->connected) {
2491 /* guest sends data, check for (re-)connect */
2492 pty_chr_update_read_handler(chr);
2493 return 0;
2495 return unix_write(s->fd, buf, len);
2498 static int pty_chr_read_poll(void *opaque)
2500 CharDriverState *chr = opaque;
2501 PtyCharDriver *s = chr->opaque;
2503 s->read_bytes = qemu_chr_can_read(chr);
2504 return s->read_bytes;
2507 static void pty_chr_read(void *opaque)
2509 CharDriverState *chr = opaque;
2510 PtyCharDriver *s = chr->opaque;
2511 int size, len;
2512 uint8_t buf[1024];
2514 len = sizeof(buf);
2515 if (len > s->read_bytes)
2516 len = s->read_bytes;
2517 if (len == 0)
2518 return;
2519 size = read(s->fd, buf, len);
2520 if ((size == -1 && errno == EIO) ||
2521 (size == 0)) {
2522 pty_chr_state(chr, 0);
2523 return;
2525 if (size > 0) {
2526 pty_chr_state(chr, 1);
2527 qemu_chr_read(chr, buf, size);
2531 static void pty_chr_update_read_handler(CharDriverState *chr)
2533 PtyCharDriver *s = chr->opaque;
2535 qemu_set_fd_handler2(s->fd, pty_chr_read_poll,
2536 pty_chr_read, NULL, chr);
2537 s->polling = 1;
2539 * Short timeout here: just need wait long enougth that qemu makes
2540 * it through the poll loop once. When reconnected we want a
2541 * short timeout so we notice it almost instantly. Otherwise
2542 * read() gives us -EIO instantly, making pty_chr_state() reset the
2543 * timeout to the normal (much longer) poll interval before the
2544 * timer triggers.
2546 qemu_mod_timer(s->timer, qemu_get_clock(rt_clock) + 10);
2549 static void pty_chr_state(CharDriverState *chr, int connected)
2551 PtyCharDriver *s = chr->opaque;
2553 if (!connected) {
2554 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2555 s->connected = 0;
2556 s->polling = 0;
2557 /* (re-)connect poll interval for idle guests: once per second.
2558 * We check more frequently in case the guests sends data to
2559 * the virtual device linked to our pty. */
2560 qemu_mod_timer(s->timer, qemu_get_clock(rt_clock) + 1000);
2561 } else {
2562 if (!s->connected)
2563 qemu_chr_reset(chr);
2564 s->connected = 1;
2568 static void pty_chr_timer(void *opaque)
2570 struct CharDriverState *chr = opaque;
2571 PtyCharDriver *s = chr->opaque;
2573 if (s->connected)
2574 return;
2575 if (s->polling) {
2576 /* If we arrive here without polling being cleared due
2577 * read returning -EIO, then we are (re-)connected */
2578 pty_chr_state(chr, 1);
2579 return;
2582 /* Next poll ... */
2583 pty_chr_update_read_handler(chr);
2586 static void pty_chr_close(struct CharDriverState *chr)
2588 PtyCharDriver *s = chr->opaque;
2590 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2591 close(s->fd);
2592 qemu_free(s);
2595 static CharDriverState *qemu_chr_open_pty(void)
2597 CharDriverState *chr;
2598 PtyCharDriver *s;
2599 struct termios tty;
2600 int slave_fd;
2601 #if defined(__OpenBSD__)
2602 char pty_name[PATH_MAX];
2603 #define q_ptsname(x) pty_name
2604 #else
2605 char *pty_name = NULL;
2606 #define q_ptsname(x) ptsname(x)
2607 #endif
2609 chr = qemu_mallocz(sizeof(CharDriverState));
2610 if (!chr)
2611 return NULL;
2612 s = qemu_mallocz(sizeof(PtyCharDriver));
2613 if (!s) {
2614 qemu_free(chr);
2615 return NULL;
2618 if (openpty(&s->fd, &slave_fd, pty_name, NULL, NULL) < 0) {
2619 return NULL;
2622 /* Set raw attributes on the pty. */
2623 cfmakeraw(&tty);
2624 tcsetattr(slave_fd, TCSAFLUSH, &tty);
2625 close(slave_fd);
2627 fprintf(stderr, "char device redirected to %s\n", q_ptsname(s->fd));
2629 chr->opaque = s;
2630 chr->chr_write = pty_chr_write;
2631 chr->chr_update_read_handler = pty_chr_update_read_handler;
2632 chr->chr_close = pty_chr_close;
2634 s->timer = qemu_new_timer(rt_clock, pty_chr_timer, chr);
2636 return chr;
2639 static void tty_serial_init(int fd, int speed,
2640 int parity, int data_bits, int stop_bits)
2642 struct termios tty;
2643 speed_t spd;
2645 #if 0
2646 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
2647 speed, parity, data_bits, stop_bits);
2648 #endif
2649 tcgetattr (fd, &tty);
2651 #define MARGIN 1.1
2652 if (speed <= 50 * MARGIN)
2653 spd = B50;
2654 else if (speed <= 75 * MARGIN)
2655 spd = B75;
2656 else if (speed <= 300 * MARGIN)
2657 spd = B300;
2658 else if (speed <= 600 * MARGIN)
2659 spd = B600;
2660 else if (speed <= 1200 * MARGIN)
2661 spd = B1200;
2662 else if (speed <= 2400 * MARGIN)
2663 spd = B2400;
2664 else if (speed <= 4800 * MARGIN)
2665 spd = B4800;
2666 else if (speed <= 9600 * MARGIN)
2667 spd = B9600;
2668 else if (speed <= 19200 * MARGIN)
2669 spd = B19200;
2670 else if (speed <= 38400 * MARGIN)
2671 spd = B38400;
2672 else if (speed <= 57600 * MARGIN)
2673 spd = B57600;
2674 else if (speed <= 115200 * MARGIN)
2675 spd = B115200;
2676 else
2677 spd = B115200;
2679 cfsetispeed(&tty, spd);
2680 cfsetospeed(&tty, spd);
2682 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
2683 |INLCR|IGNCR|ICRNL|IXON);
2684 tty.c_oflag |= OPOST;
2685 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
2686 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
2687 switch(data_bits) {
2688 default:
2689 case 8:
2690 tty.c_cflag |= CS8;
2691 break;
2692 case 7:
2693 tty.c_cflag |= CS7;
2694 break;
2695 case 6:
2696 tty.c_cflag |= CS6;
2697 break;
2698 case 5:
2699 tty.c_cflag |= CS5;
2700 break;
2702 switch(parity) {
2703 default:
2704 case 'N':
2705 break;
2706 case 'E':
2707 tty.c_cflag |= PARENB;
2708 break;
2709 case 'O':
2710 tty.c_cflag |= PARENB | PARODD;
2711 break;
2713 if (stop_bits == 2)
2714 tty.c_cflag |= CSTOPB;
2716 tcsetattr (fd, TCSANOW, &tty);
2719 static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
2721 FDCharDriver *s = chr->opaque;
2723 switch(cmd) {
2724 case CHR_IOCTL_SERIAL_SET_PARAMS:
2726 QEMUSerialSetParams *ssp = arg;
2727 tty_serial_init(s->fd_in, ssp->speed, ssp->parity,
2728 ssp->data_bits, ssp->stop_bits);
2730 break;
2731 case CHR_IOCTL_SERIAL_SET_BREAK:
2733 int enable = *(int *)arg;
2734 if (enable)
2735 tcsendbreak(s->fd_in, 1);
2737 break;
2738 case CHR_IOCTL_SERIAL_GET_TIOCM:
2740 int sarg = 0;
2741 int *targ = (int *)arg;
2742 ioctl(s->fd_in, TIOCMGET, &sarg);
2743 *targ = 0;
2744 if (sarg | TIOCM_CTS)
2745 *targ |= CHR_TIOCM_CTS;
2746 if (sarg | TIOCM_CAR)
2747 *targ |= CHR_TIOCM_CAR;
2748 if (sarg | TIOCM_DSR)
2749 *targ |= CHR_TIOCM_DSR;
2750 if (sarg | TIOCM_RI)
2751 *targ |= CHR_TIOCM_RI;
2752 if (sarg | TIOCM_DTR)
2753 *targ |= CHR_TIOCM_DTR;
2754 if (sarg | TIOCM_RTS)
2755 *targ |= CHR_TIOCM_RTS;
2757 break;
2758 case CHR_IOCTL_SERIAL_SET_TIOCM:
2760 int sarg = *(int *)arg;
2761 int targ = 0;
2762 if (sarg | CHR_TIOCM_DTR)
2763 targ |= TIOCM_DTR;
2764 if (sarg | CHR_TIOCM_RTS)
2765 targ |= TIOCM_RTS;
2766 ioctl(s->fd_in, TIOCMSET, &targ);
2768 break;
2769 default:
2770 return -ENOTSUP;
2772 return 0;
2775 static CharDriverState *qemu_chr_open_tty(const char *filename)
2777 CharDriverState *chr;
2778 int fd;
2780 TFR(fd = open(filename, O_RDWR | O_NONBLOCK));
2781 tty_serial_init(fd, 115200, 'N', 8, 1);
2782 chr = qemu_chr_open_fd(fd, fd);
2783 if (!chr) {
2784 close(fd);
2785 return NULL;
2787 chr->chr_ioctl = tty_serial_ioctl;
2788 qemu_chr_reset(chr);
2789 return chr;
2791 #else /* ! __linux__ && ! __sun__ */
2792 static CharDriverState *qemu_chr_open_pty(void)
2794 return NULL;
2796 #endif /* __linux__ || __sun__ */
2798 #if defined(__linux__)
2799 typedef struct {
2800 int fd;
2801 int mode;
2802 } ParallelCharDriver;
2804 static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
2806 if (s->mode != mode) {
2807 int m = mode;
2808 if (ioctl(s->fd, PPSETMODE, &m) < 0)
2809 return 0;
2810 s->mode = mode;
2812 return 1;
2815 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
2817 ParallelCharDriver *drv = chr->opaque;
2818 int fd = drv->fd;
2819 uint8_t b;
2821 switch(cmd) {
2822 case CHR_IOCTL_PP_READ_DATA:
2823 if (ioctl(fd, PPRDATA, &b) < 0)
2824 return -ENOTSUP;
2825 *(uint8_t *)arg = b;
2826 break;
2827 case CHR_IOCTL_PP_WRITE_DATA:
2828 b = *(uint8_t *)arg;
2829 if (ioctl(fd, PPWDATA, &b) < 0)
2830 return -ENOTSUP;
2831 break;
2832 case CHR_IOCTL_PP_READ_CONTROL:
2833 if (ioctl(fd, PPRCONTROL, &b) < 0)
2834 return -ENOTSUP;
2835 /* Linux gives only the lowest bits, and no way to know data
2836 direction! For better compatibility set the fixed upper
2837 bits. */
2838 *(uint8_t *)arg = b | 0xc0;
2839 break;
2840 case CHR_IOCTL_PP_WRITE_CONTROL:
2841 b = *(uint8_t *)arg;
2842 if (ioctl(fd, PPWCONTROL, &b) < 0)
2843 return -ENOTSUP;
2844 break;
2845 case CHR_IOCTL_PP_READ_STATUS:
2846 if (ioctl(fd, PPRSTATUS, &b) < 0)
2847 return -ENOTSUP;
2848 *(uint8_t *)arg = b;
2849 break;
2850 case CHR_IOCTL_PP_DATA_DIR:
2851 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
2852 return -ENOTSUP;
2853 break;
2854 case CHR_IOCTL_PP_EPP_READ_ADDR:
2855 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
2856 struct ParallelIOArg *parg = arg;
2857 int n = read(fd, parg->buffer, parg->count);
2858 if (n != parg->count) {
2859 return -EIO;
2862 break;
2863 case CHR_IOCTL_PP_EPP_READ:
2864 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
2865 struct ParallelIOArg *parg = arg;
2866 int n = read(fd, parg->buffer, parg->count);
2867 if (n != parg->count) {
2868 return -EIO;
2871 break;
2872 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
2873 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
2874 struct ParallelIOArg *parg = arg;
2875 int n = write(fd, parg->buffer, parg->count);
2876 if (n != parg->count) {
2877 return -EIO;
2880 break;
2881 case CHR_IOCTL_PP_EPP_WRITE:
2882 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
2883 struct ParallelIOArg *parg = arg;
2884 int n = write(fd, parg->buffer, parg->count);
2885 if (n != parg->count) {
2886 return -EIO;
2889 break;
2890 default:
2891 return -ENOTSUP;
2893 return 0;
2896 static void pp_close(CharDriverState *chr)
2898 ParallelCharDriver *drv = chr->opaque;
2899 int fd = drv->fd;
2901 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
2902 ioctl(fd, PPRELEASE);
2903 close(fd);
2904 qemu_free(drv);
2907 static CharDriverState *qemu_chr_open_pp(const char *filename)
2909 CharDriverState *chr;
2910 ParallelCharDriver *drv;
2911 int fd;
2913 TFR(fd = open(filename, O_RDWR));
2914 if (fd < 0)
2915 return NULL;
2917 if (ioctl(fd, PPCLAIM) < 0) {
2918 close(fd);
2919 return NULL;
2922 drv = qemu_mallocz(sizeof(ParallelCharDriver));
2923 if (!drv) {
2924 close(fd);
2925 return NULL;
2927 drv->fd = fd;
2928 drv->mode = IEEE1284_MODE_COMPAT;
2930 chr = qemu_mallocz(sizeof(CharDriverState));
2931 if (!chr) {
2932 qemu_free(drv);
2933 close(fd);
2934 return NULL;
2936 chr->chr_write = null_chr_write;
2937 chr->chr_ioctl = pp_ioctl;
2938 chr->chr_close = pp_close;
2939 chr->opaque = drv;
2941 qemu_chr_reset(chr);
2943 return chr;
2945 #endif /* __linux__ */
2947 #else /* _WIN32 */
2949 typedef struct {
2950 int max_size;
2951 HANDLE hcom, hrecv, hsend;
2952 OVERLAPPED orecv, osend;
2953 BOOL fpipe;
2954 DWORD len;
2955 } WinCharState;
2957 #define NSENDBUF 2048
2958 #define NRECVBUF 2048
2959 #define MAXCONNECT 1
2960 #define NTIMEOUT 5000
2962 static int win_chr_poll(void *opaque);
2963 static int win_chr_pipe_poll(void *opaque);
2965 static void win_chr_close(CharDriverState *chr)
2967 WinCharState *s = chr->opaque;
2969 if (s->hsend) {
2970 CloseHandle(s->hsend);
2971 s->hsend = NULL;
2973 if (s->hrecv) {
2974 CloseHandle(s->hrecv);
2975 s->hrecv = NULL;
2977 if (s->hcom) {
2978 CloseHandle(s->hcom);
2979 s->hcom = NULL;
2981 if (s->fpipe)
2982 qemu_del_polling_cb(win_chr_pipe_poll, chr);
2983 else
2984 qemu_del_polling_cb(win_chr_poll, chr);
2987 static int win_chr_init(CharDriverState *chr, const char *filename)
2989 WinCharState *s = chr->opaque;
2990 COMMCONFIG comcfg;
2991 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
2992 COMSTAT comstat;
2993 DWORD size;
2994 DWORD err;
2996 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2997 if (!s->hsend) {
2998 fprintf(stderr, "Failed CreateEvent\n");
2999 goto fail;
3001 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
3002 if (!s->hrecv) {
3003 fprintf(stderr, "Failed CreateEvent\n");
3004 goto fail;
3007 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
3008 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
3009 if (s->hcom == INVALID_HANDLE_VALUE) {
3010 fprintf(stderr, "Failed CreateFile (%lu)\n", GetLastError());
3011 s->hcom = NULL;
3012 goto fail;
3015 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
3016 fprintf(stderr, "Failed SetupComm\n");
3017 goto fail;
3020 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
3021 size = sizeof(COMMCONFIG);
3022 GetDefaultCommConfig(filename, &comcfg, &size);
3023 comcfg.dcb.DCBlength = sizeof(DCB);
3024 CommConfigDialog(filename, NULL, &comcfg);
3026 if (!SetCommState(s->hcom, &comcfg.dcb)) {
3027 fprintf(stderr, "Failed SetCommState\n");
3028 goto fail;
3031 if (!SetCommMask(s->hcom, EV_ERR)) {
3032 fprintf(stderr, "Failed SetCommMask\n");
3033 goto fail;
3036 cto.ReadIntervalTimeout = MAXDWORD;
3037 if (!SetCommTimeouts(s->hcom, &cto)) {
3038 fprintf(stderr, "Failed SetCommTimeouts\n");
3039 goto fail;
3042 if (!ClearCommError(s->hcom, &err, &comstat)) {
3043 fprintf(stderr, "Failed ClearCommError\n");
3044 goto fail;
3046 qemu_add_polling_cb(win_chr_poll, chr);
3047 return 0;
3049 fail:
3050 win_chr_close(chr);
3051 return -1;
3054 static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
3056 WinCharState *s = chr->opaque;
3057 DWORD len, ret, size, err;
3059 len = len1;
3060 ZeroMemory(&s->osend, sizeof(s->osend));
3061 s->osend.hEvent = s->hsend;
3062 while (len > 0) {
3063 if (s->hsend)
3064 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
3065 else
3066 ret = WriteFile(s->hcom, buf, len, &size, NULL);
3067 if (!ret) {
3068 err = GetLastError();
3069 if (err == ERROR_IO_PENDING) {
3070 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
3071 if (ret) {
3072 buf += size;
3073 len -= size;
3074 } else {
3075 break;
3077 } else {
3078 break;
3080 } else {
3081 buf += size;
3082 len -= size;
3085 return len1 - len;
3088 static int win_chr_read_poll(CharDriverState *chr)
3090 WinCharState *s = chr->opaque;
3092 s->max_size = qemu_chr_can_read(chr);
3093 return s->max_size;
3096 static void win_chr_readfile(CharDriverState *chr)
3098 WinCharState *s = chr->opaque;
3099 int ret, err;
3100 uint8_t buf[1024];
3101 DWORD size;
3103 ZeroMemory(&s->orecv, sizeof(s->orecv));
3104 s->orecv.hEvent = s->hrecv;
3105 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
3106 if (!ret) {
3107 err = GetLastError();
3108 if (err == ERROR_IO_PENDING) {
3109 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
3113 if (size > 0) {
3114 qemu_chr_read(chr, buf, size);
3118 static void win_chr_read(CharDriverState *chr)
3120 WinCharState *s = chr->opaque;
3122 if (s->len > s->max_size)
3123 s->len = s->max_size;
3124 if (s->len == 0)
3125 return;
3127 win_chr_readfile(chr);
3130 static int win_chr_poll(void *opaque)
3132 CharDriverState *chr = opaque;
3133 WinCharState *s = chr->opaque;
3134 COMSTAT status;
3135 DWORD comerr;
3137 ClearCommError(s->hcom, &comerr, &status);
3138 if (status.cbInQue > 0) {
3139 s->len = status.cbInQue;
3140 win_chr_read_poll(chr);
3141 win_chr_read(chr);
3142 return 1;
3144 return 0;
3147 static CharDriverState *qemu_chr_open_win(const char *filename)
3149 CharDriverState *chr;
3150 WinCharState *s;
3152 chr = qemu_mallocz(sizeof(CharDriverState));
3153 if (!chr)
3154 return NULL;
3155 s = qemu_mallocz(sizeof(WinCharState));
3156 if (!s) {
3157 free(chr);
3158 return NULL;
3160 chr->opaque = s;
3161 chr->chr_write = win_chr_write;
3162 chr->chr_close = win_chr_close;
3164 if (win_chr_init(chr, filename) < 0) {
3165 free(s);
3166 free(chr);
3167 return NULL;
3169 qemu_chr_reset(chr);
3170 return chr;
3173 static int win_chr_pipe_poll(void *opaque)
3175 CharDriverState *chr = opaque;
3176 WinCharState *s = chr->opaque;
3177 DWORD size;
3179 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
3180 if (size > 0) {
3181 s->len = size;
3182 win_chr_read_poll(chr);
3183 win_chr_read(chr);
3184 return 1;
3186 return 0;
3189 static int win_chr_pipe_init(CharDriverState *chr, const char *filename)
3191 WinCharState *s = chr->opaque;
3192 OVERLAPPED ov;
3193 int ret;
3194 DWORD size;
3195 char openname[256];
3197 s->fpipe = TRUE;
3199 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
3200 if (!s->hsend) {
3201 fprintf(stderr, "Failed CreateEvent\n");
3202 goto fail;
3204 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
3205 if (!s->hrecv) {
3206 fprintf(stderr, "Failed CreateEvent\n");
3207 goto fail;
3210 snprintf(openname, sizeof(openname), "\\\\.\\pipe\\%s", filename);
3211 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
3212 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
3213 PIPE_WAIT,
3214 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
3215 if (s->hcom == INVALID_HANDLE_VALUE) {
3216 fprintf(stderr, "Failed CreateNamedPipe (%lu)\n", GetLastError());
3217 s->hcom = NULL;
3218 goto fail;
3221 ZeroMemory(&ov, sizeof(ov));
3222 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
3223 ret = ConnectNamedPipe(s->hcom, &ov);
3224 if (ret) {
3225 fprintf(stderr, "Failed ConnectNamedPipe\n");
3226 goto fail;
3229 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
3230 if (!ret) {
3231 fprintf(stderr, "Failed GetOverlappedResult\n");
3232 if (ov.hEvent) {
3233 CloseHandle(ov.hEvent);
3234 ov.hEvent = NULL;
3236 goto fail;
3239 if (ov.hEvent) {
3240 CloseHandle(ov.hEvent);
3241 ov.hEvent = NULL;
3243 qemu_add_polling_cb(win_chr_pipe_poll, chr);
3244 return 0;
3246 fail:
3247 win_chr_close(chr);
3248 return -1;
3252 static CharDriverState *qemu_chr_open_win_pipe(const char *filename)
3254 CharDriverState *chr;
3255 WinCharState *s;
3257 chr = qemu_mallocz(sizeof(CharDriverState));
3258 if (!chr)
3259 return NULL;
3260 s = qemu_mallocz(sizeof(WinCharState));
3261 if (!s) {
3262 free(chr);
3263 return NULL;
3265 chr->opaque = s;
3266 chr->chr_write = win_chr_write;
3267 chr->chr_close = win_chr_close;
3269 if (win_chr_pipe_init(chr, filename) < 0) {
3270 free(s);
3271 free(chr);
3272 return NULL;
3274 qemu_chr_reset(chr);
3275 return chr;
3278 static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out)
3280 CharDriverState *chr;
3281 WinCharState *s;
3283 chr = qemu_mallocz(sizeof(CharDriverState));
3284 if (!chr)
3285 return NULL;
3286 s = qemu_mallocz(sizeof(WinCharState));
3287 if (!s) {
3288 free(chr);
3289 return NULL;
3291 s->hcom = fd_out;
3292 chr->opaque = s;
3293 chr->chr_write = win_chr_write;
3294 qemu_chr_reset(chr);
3295 return chr;
3298 static CharDriverState *qemu_chr_open_win_con(const char *filename)
3300 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE));
3303 static CharDriverState *qemu_chr_open_win_file_out(const char *file_out)
3305 HANDLE fd_out;
3307 fd_out = CreateFile(file_out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
3308 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
3309 if (fd_out == INVALID_HANDLE_VALUE)
3310 return NULL;
3312 return qemu_chr_open_win_file(fd_out);
3314 #endif /* !_WIN32 */
3316 /***********************************************************/
3317 /* UDP Net console */
3319 typedef struct {
3320 int fd;
3321 struct sockaddr_in daddr;
3322 uint8_t buf[1024];
3323 int bufcnt;
3324 int bufptr;
3325 int max_size;
3326 } NetCharDriver;
3328 static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
3330 NetCharDriver *s = chr->opaque;
3332 return sendto(s->fd, buf, len, 0,
3333 (struct sockaddr *)&s->daddr, sizeof(struct sockaddr_in));
3336 static int udp_chr_read_poll(void *opaque)
3338 CharDriverState *chr = opaque;
3339 NetCharDriver *s = chr->opaque;
3341 s->max_size = qemu_chr_can_read(chr);
3343 /* If there were any stray characters in the queue process them
3344 * first
3346 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
3347 qemu_chr_read(chr, &s->buf[s->bufptr], 1);
3348 s->bufptr++;
3349 s->max_size = qemu_chr_can_read(chr);
3351 return s->max_size;
3354 static void udp_chr_read(void *opaque)
3356 CharDriverState *chr = opaque;
3357 NetCharDriver *s = chr->opaque;
3359 if (s->max_size == 0)
3360 return;
3361 s->bufcnt = recv(s->fd, s->buf, sizeof(s->buf), 0);
3362 s->bufptr = s->bufcnt;
3363 if (s->bufcnt <= 0)
3364 return;
3366 s->bufptr = 0;
3367 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
3368 qemu_chr_read(chr, &s->buf[s->bufptr], 1);
3369 s->bufptr++;
3370 s->max_size = qemu_chr_can_read(chr);
3374 static void udp_chr_update_read_handler(CharDriverState *chr)
3376 NetCharDriver *s = chr->opaque;
3378 if (s->fd >= 0) {
3379 qemu_set_fd_handler2(s->fd, udp_chr_read_poll,
3380 udp_chr_read, NULL, chr);
3384 int parse_host_port(struct sockaddr_in *saddr, const char *str);
3385 #ifndef _WIN32
3386 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str);
3387 #endif
3388 int parse_host_src_port(struct sockaddr_in *haddr,
3389 struct sockaddr_in *saddr,
3390 const char *str);
3392 static CharDriverState *qemu_chr_open_udp(const char *def)
3394 CharDriverState *chr = NULL;
3395 NetCharDriver *s = NULL;
3396 int fd = -1;
3397 struct sockaddr_in saddr;
3399 chr = qemu_mallocz(sizeof(CharDriverState));
3400 if (!chr)
3401 goto return_err;
3402 s = qemu_mallocz(sizeof(NetCharDriver));
3403 if (!s)
3404 goto return_err;
3406 fd = socket(PF_INET, SOCK_DGRAM, 0);
3407 if (fd < 0) {
3408 perror("socket(PF_INET, SOCK_DGRAM)");
3409 goto return_err;
3412 if (parse_host_src_port(&s->daddr, &saddr, def) < 0) {
3413 printf("Could not parse: %s\n", def);
3414 goto return_err;
3417 if (bind(fd, (struct sockaddr *)&saddr, sizeof(saddr)) < 0)
3419 perror("bind");
3420 goto return_err;
3423 s->fd = fd;
3424 s->bufcnt = 0;
3425 s->bufptr = 0;
3426 chr->opaque = s;
3427 chr->chr_write = udp_chr_write;
3428 chr->chr_update_read_handler = udp_chr_update_read_handler;
3429 return chr;
3431 return_err:
3432 if (chr)
3433 free(chr);
3434 if (s)
3435 free(s);
3436 if (fd >= 0)
3437 closesocket(fd);
3438 return NULL;
3441 /***********************************************************/
3442 /* TCP Net console */
3444 typedef struct {
3445 int fd, listen_fd;
3446 int connected;
3447 int max_size;
3448 int do_telnetopt;
3449 int do_nodelay;
3450 int is_unix;
3451 } TCPCharDriver;
3453 static void tcp_chr_accept(void *opaque);
3455 static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
3457 TCPCharDriver *s = chr->opaque;
3458 if (s->connected) {
3459 return send_all(s->fd, buf, len);
3460 } else {
3461 /* XXX: indicate an error ? */
3462 return len;
3466 static int tcp_chr_read_poll(void *opaque)
3468 CharDriverState *chr = opaque;
3469 TCPCharDriver *s = chr->opaque;
3470 if (!s->connected)
3471 return 0;
3472 s->max_size = qemu_chr_can_read(chr);
3473 return s->max_size;
3476 #define IAC 255
3477 #define IAC_BREAK 243
3478 static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
3479 TCPCharDriver *s,
3480 uint8_t *buf, int *size)
3482 /* Handle any telnet client's basic IAC options to satisfy char by
3483 * char mode with no echo. All IAC options will be removed from
3484 * the buf and the do_telnetopt variable will be used to track the
3485 * state of the width of the IAC information.
3487 * IAC commands come in sets of 3 bytes with the exception of the
3488 * "IAC BREAK" command and the double IAC.
3491 int i;
3492 int j = 0;
3494 for (i = 0; i < *size; i++) {
3495 if (s->do_telnetopt > 1) {
3496 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
3497 /* Double IAC means send an IAC */
3498 if (j != i)
3499 buf[j] = buf[i];
3500 j++;
3501 s->do_telnetopt = 1;
3502 } else {
3503 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
3504 /* Handle IAC break commands by sending a serial break */
3505 qemu_chr_event(chr, CHR_EVENT_BREAK);
3506 s->do_telnetopt++;
3508 s->do_telnetopt++;
3510 if (s->do_telnetopt >= 4) {
3511 s->do_telnetopt = 1;
3513 } else {
3514 if ((unsigned char)buf[i] == IAC) {
3515 s->do_telnetopt = 2;
3516 } else {
3517 if (j != i)
3518 buf[j] = buf[i];
3519 j++;
3523 *size = j;
3526 static void tcp_chr_read(void *opaque)
3528 CharDriverState *chr = opaque;
3529 TCPCharDriver *s = chr->opaque;
3530 uint8_t buf[1024];
3531 int len, size;
3533 if (!s->connected || s->max_size <= 0)
3534 return;
3535 len = sizeof(buf);
3536 if (len > s->max_size)
3537 len = s->max_size;
3538 size = recv(s->fd, buf, len, 0);
3539 if (size == 0) {
3540 /* connection closed */
3541 s->connected = 0;
3542 if (s->listen_fd >= 0) {
3543 qemu_set_fd_handler(s->listen_fd, tcp_chr_accept, NULL, chr);
3545 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
3546 closesocket(s->fd);
3547 s->fd = -1;
3548 } else if (size > 0) {
3549 if (s->do_telnetopt)
3550 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
3551 if (size > 0)
3552 qemu_chr_read(chr, buf, size);
3556 static void tcp_chr_connect(void *opaque)
3558 CharDriverState *chr = opaque;
3559 TCPCharDriver *s = chr->opaque;
3561 s->connected = 1;
3562 qemu_set_fd_handler2(s->fd, tcp_chr_read_poll,
3563 tcp_chr_read, NULL, chr);
3564 qemu_chr_reset(chr);
3567 #define IACSET(x,a,b,c) x[0] = a; x[1] = b; x[2] = c;
3568 static void tcp_chr_telnet_init(int fd)
3570 char buf[3];
3571 /* Send the telnet negotion to put telnet in binary, no echo, single char mode */
3572 IACSET(buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
3573 send(fd, (char *)buf, 3, 0);
3574 IACSET(buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
3575 send(fd, (char *)buf, 3, 0);
3576 IACSET(buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
3577 send(fd, (char *)buf, 3, 0);
3578 IACSET(buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
3579 send(fd, (char *)buf, 3, 0);
3582 static void socket_set_nodelay(int fd)
3584 int val = 1;
3585 setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, (char *)&val, sizeof(val));
3588 static void tcp_chr_accept(void *opaque)
3590 CharDriverState *chr = opaque;
3591 TCPCharDriver *s = chr->opaque;
3592 struct sockaddr_in saddr;
3593 #ifndef _WIN32
3594 struct sockaddr_un uaddr;
3595 #endif
3596 struct sockaddr *addr;
3597 socklen_t len;
3598 int fd;
3600 for(;;) {
3601 #ifndef _WIN32
3602 if (s->is_unix) {
3603 len = sizeof(uaddr);
3604 addr = (struct sockaddr *)&uaddr;
3605 } else
3606 #endif
3608 len = sizeof(saddr);
3609 addr = (struct sockaddr *)&saddr;
3611 fd = accept(s->listen_fd, addr, &len);
3612 if (fd < 0 && errno != EINTR) {
3613 return;
3614 } else if (fd >= 0) {
3615 if (s->do_telnetopt)
3616 tcp_chr_telnet_init(fd);
3617 break;
3620 socket_set_nonblock(fd);
3621 if (s->do_nodelay)
3622 socket_set_nodelay(fd);
3623 s->fd = fd;
3624 qemu_set_fd_handler(s->listen_fd, NULL, NULL, NULL);
3625 tcp_chr_connect(chr);
3628 static void tcp_chr_close(CharDriverState *chr)
3630 TCPCharDriver *s = chr->opaque;
3631 if (s->fd >= 0)
3632 closesocket(s->fd);
3633 if (s->listen_fd >= 0)
3634 closesocket(s->listen_fd);
3635 qemu_free(s);
3638 static CharDriverState *qemu_chr_open_tcp(const char *host_str,
3639 int is_telnet,
3640 int is_unix)
3642 CharDriverState *chr = NULL;
3643 TCPCharDriver *s = NULL;
3644 int fd = -1, ret, err, val;
3645 int is_listen = 0;
3646 int is_waitconnect = 1;
3647 int do_nodelay = 0;
3648 const char *ptr;
3649 struct sockaddr_in saddr;
3650 #ifndef _WIN32
3651 struct sockaddr_un uaddr;
3652 #endif
3653 struct sockaddr *addr;
3654 socklen_t addrlen;
3656 #ifndef _WIN32
3657 if (is_unix) {
3658 addr = (struct sockaddr *)&uaddr;
3659 addrlen = sizeof(uaddr);
3660 if (parse_unix_path(&uaddr, host_str) < 0)
3661 goto fail;
3662 } else
3663 #endif
3665 addr = (struct sockaddr *)&saddr;
3666 addrlen = sizeof(saddr);
3667 if (parse_host_port(&saddr, host_str) < 0)
3668 goto fail;
3671 ptr = host_str;
3672 while((ptr = strchr(ptr,','))) {
3673 ptr++;
3674 if (!strncmp(ptr,"server",6)) {
3675 is_listen = 1;
3676 } else if (!strncmp(ptr,"nowait",6)) {
3677 is_waitconnect = 0;
3678 } else if (!strncmp(ptr,"nodelay",6)) {
3679 do_nodelay = 1;
3680 } else {
3681 printf("Unknown option: %s\n", ptr);
3682 goto fail;
3685 if (!is_listen)
3686 is_waitconnect = 0;
3688 chr = qemu_mallocz(sizeof(CharDriverState));
3689 if (!chr)
3690 goto fail;
3691 s = qemu_mallocz(sizeof(TCPCharDriver));
3692 if (!s)
3693 goto fail;
3695 #ifndef _WIN32
3696 if (is_unix)
3697 fd = socket(PF_UNIX, SOCK_STREAM, 0);
3698 else
3699 #endif
3700 fd = socket(PF_INET, SOCK_STREAM, 0);
3702 if (fd < 0)
3703 goto fail;
3705 if (!is_waitconnect)
3706 socket_set_nonblock(fd);
3708 s->connected = 0;
3709 s->fd = -1;
3710 s->listen_fd = -1;
3711 s->is_unix = is_unix;
3712 s->do_nodelay = do_nodelay && !is_unix;
3714 chr->opaque = s;
3715 chr->chr_write = tcp_chr_write;
3716 chr->chr_close = tcp_chr_close;
3718 if (is_listen) {
3719 /* allow fast reuse */
3720 #ifndef _WIN32
3721 if (is_unix) {
3722 char path[109];
3723 pstrcpy(path, sizeof(path), uaddr.sun_path);
3724 unlink(path);
3725 } else
3726 #endif
3728 val = 1;
3729 setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
3732 ret = bind(fd, addr, addrlen);
3733 if (ret < 0)
3734 goto fail;
3736 ret = listen(fd, 0);
3737 if (ret < 0)
3738 goto fail;
3740 s->listen_fd = fd;
3741 qemu_set_fd_handler(s->listen_fd, tcp_chr_accept, NULL, chr);
3742 if (is_telnet)
3743 s->do_telnetopt = 1;
3744 } else {
3745 for(;;) {
3746 ret = connect(fd, addr, addrlen);
3747 if (ret < 0) {
3748 err = socket_error();
3749 if (err == EINTR || err == EWOULDBLOCK) {
3750 } else if (err == EINPROGRESS) {
3751 break;
3752 #ifdef _WIN32
3753 } else if (err == WSAEALREADY) {
3754 break;
3755 #endif
3756 } else {
3757 goto fail;
3759 } else {
3760 s->connected = 1;
3761 break;
3764 s->fd = fd;
3765 socket_set_nodelay(fd);
3766 if (s->connected)
3767 tcp_chr_connect(chr);
3768 else
3769 qemu_set_fd_handler(s->fd, NULL, tcp_chr_connect, chr);
3772 if (is_listen && is_waitconnect) {
3773 printf("QEMU waiting for connection on: %s\n", host_str);
3774 tcp_chr_accept(chr);
3775 socket_set_nonblock(s->listen_fd);
3778 return chr;
3779 fail:
3780 if (fd >= 0)
3781 closesocket(fd);
3782 qemu_free(s);
3783 qemu_free(chr);
3784 return NULL;
3787 CharDriverState *qemu_chr_open(const char *filename)
3789 const char *p;
3791 if (!strcmp(filename, "vc")) {
3792 return text_console_init(&display_state, 0);
3793 } else if (strstart(filename, "vc:", &p)) {
3794 return text_console_init(&display_state, p);
3795 } else if (!strcmp(filename, "null")) {
3796 return qemu_chr_open_null();
3797 } else
3798 if (strstart(filename, "tcp:", &p)) {
3799 return qemu_chr_open_tcp(p, 0, 0);
3800 } else
3801 if (strstart(filename, "telnet:", &p)) {
3802 return qemu_chr_open_tcp(p, 1, 0);
3803 } else
3804 if (strstart(filename, "udp:", &p)) {
3805 return qemu_chr_open_udp(p);
3806 } else
3807 if (strstart(filename, "mon:", &p)) {
3808 CharDriverState *drv = qemu_chr_open(p);
3809 if (drv) {
3810 drv = qemu_chr_open_mux(drv);
3811 monitor_init(drv, !nographic);
3812 return drv;
3814 printf("Unable to open driver: %s\n", p);
3815 return 0;
3816 } else
3817 #ifndef _WIN32
3818 if (strstart(filename, "unix:", &p)) {
3819 return qemu_chr_open_tcp(p, 0, 1);
3820 } else if (strstart(filename, "file:", &p)) {
3821 return qemu_chr_open_file_out(p);
3822 } else if (strstart(filename, "pipe:", &p)) {
3823 return qemu_chr_open_pipe(p);
3824 } else if (!strcmp(filename, "pty")) {
3825 return qemu_chr_open_pty();
3826 } else if (!strcmp(filename, "stdio")) {
3827 return qemu_chr_open_stdio();
3828 } else
3829 #if defined(__linux__)
3830 if (strstart(filename, "/dev/parport", NULL)) {
3831 return qemu_chr_open_pp(filename);
3832 } else
3833 #endif
3834 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
3835 || defined(__NetBSD__) || defined(__OpenBSD__)
3836 if (strstart(filename, "/dev/", NULL)) {
3837 return qemu_chr_open_tty(filename);
3838 } else
3839 #endif
3840 #else /* !_WIN32 */
3841 if (strstart(filename, "COM", NULL)) {
3842 return qemu_chr_open_win(filename);
3843 } else
3844 if (strstart(filename, "pipe:", &p)) {
3845 return qemu_chr_open_win_pipe(p);
3846 } else
3847 if (strstart(filename, "con:", NULL)) {
3848 return qemu_chr_open_win_con(filename);
3849 } else
3850 if (strstart(filename, "file:", &p)) {
3851 return qemu_chr_open_win_file_out(p);
3852 } else
3853 #endif
3854 #ifdef CONFIG_BRLAPI
3855 if (!strcmp(filename, "braille")) {
3856 return chr_baum_init();
3857 } else
3858 #endif
3860 return NULL;
3864 void qemu_chr_close(CharDriverState *chr)
3866 if (chr->chr_close)
3867 chr->chr_close(chr);
3868 qemu_free(chr);
3871 /***********************************************************/
3872 /* network device redirectors */
3874 __attribute__ (( unused ))
3875 static void hex_dump(FILE *f, const uint8_t *buf, int size)
3877 int len, i, j, c;
3879 for(i=0;i<size;i+=16) {
3880 len = size - i;
3881 if (len > 16)
3882 len = 16;
3883 fprintf(f, "%08x ", i);
3884 for(j=0;j<16;j++) {
3885 if (j < len)
3886 fprintf(f, " %02x", buf[i+j]);
3887 else
3888 fprintf(f, " ");
3890 fprintf(f, " ");
3891 for(j=0;j<len;j++) {
3892 c = buf[i+j];
3893 if (c < ' ' || c > '~')
3894 c = '.';
3895 fprintf(f, "%c", c);
3897 fprintf(f, "\n");
3901 static int parse_macaddr(uint8_t *macaddr, const char *p)
3903 int i;
3904 char *last_char;
3905 long int offset;
3907 errno = 0;
3908 offset = strtol(p, &last_char, 0);
3909 if (0 == errno && '\0' == *last_char &&
3910 offset >= 0 && offset <= 0xFFFFFF) {
3911 macaddr[3] = (offset & 0xFF0000) >> 16;
3912 macaddr[4] = (offset & 0xFF00) >> 8;
3913 macaddr[5] = offset & 0xFF;
3914 return 0;
3915 } else {
3916 for(i = 0; i < 6; i++) {
3917 macaddr[i] = strtol(p, (char **)&p, 16);
3918 if (i == 5) {
3919 if (*p != '\0')
3920 return -1;
3921 } else {
3922 if (*p != ':' && *p != '-')
3923 return -1;
3924 p++;
3927 return 0;
3930 return -1;
3933 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
3935 const char *p, *p1;
3936 int len;
3937 p = *pp;
3938 p1 = strchr(p, sep);
3939 if (!p1)
3940 return -1;
3941 len = p1 - p;
3942 p1++;
3943 if (buf_size > 0) {
3944 if (len > buf_size - 1)
3945 len = buf_size - 1;
3946 memcpy(buf, p, len);
3947 buf[len] = '\0';
3949 *pp = p1;
3950 return 0;
3953 int parse_host_src_port(struct sockaddr_in *haddr,
3954 struct sockaddr_in *saddr,
3955 const char *input_str)
3957 char *str = strdup(input_str);
3958 char *host_str = str;
3959 char *src_str;
3960 char *ptr;
3963 * Chop off any extra arguments at the end of the string which
3964 * would start with a comma, then fill in the src port information
3965 * if it was provided else use the "any address" and "any port".
3967 if ((ptr = strchr(str,',')))
3968 *ptr = '\0';
3970 if ((src_str = strchr(input_str,'@'))) {
3971 *src_str = '\0';
3972 src_str++;
3975 if (parse_host_port(haddr, host_str) < 0)
3976 goto fail;
3978 if (!src_str || *src_str == '\0')
3979 src_str = ":0";
3981 if (parse_host_port(saddr, src_str) < 0)
3982 goto fail;
3984 free(str);
3985 return(0);
3987 fail:
3988 free(str);
3989 return -1;
3992 int parse_host_port(struct sockaddr_in *saddr, const char *str)
3994 char buf[512];
3995 struct hostent *he;
3996 const char *p, *r;
3997 int port;
3999 p = str;
4000 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4001 return -1;
4002 saddr->sin_family = AF_INET;
4003 if (buf[0] == '\0') {
4004 saddr->sin_addr.s_addr = 0;
4005 } else {
4006 if (isdigit(buf[0])) {
4007 if (!inet_aton(buf, &saddr->sin_addr))
4008 return -1;
4009 } else {
4010 if ((he = gethostbyname(buf)) == NULL)
4011 return - 1;
4012 saddr->sin_addr = *(struct in_addr *)he->h_addr;
4015 port = strtol(p, (char **)&r, 0);
4016 if (r == p)
4017 return -1;
4018 saddr->sin_port = htons(port);
4019 return 0;
4022 #ifndef _WIN32
4023 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
4025 const char *p;
4026 int len;
4028 len = MIN(108, strlen(str));
4029 p = strchr(str, ',');
4030 if (p)
4031 len = MIN(len, p - str);
4033 memset(uaddr, 0, sizeof(*uaddr));
4035 uaddr->sun_family = AF_UNIX;
4036 memcpy(uaddr->sun_path, str, len);
4038 return 0;
4040 #endif
4042 /* find or alloc a new VLAN */
4043 VLANState *qemu_find_vlan(int id)
4045 VLANState **pvlan, *vlan;
4046 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
4047 if (vlan->id == id)
4048 return vlan;
4050 vlan = qemu_mallocz(sizeof(VLANState));
4051 if (!vlan)
4052 return NULL;
4053 vlan->id = id;
4054 vlan->next = NULL;
4055 pvlan = &first_vlan;
4056 while (*pvlan != NULL)
4057 pvlan = &(*pvlan)->next;
4058 *pvlan = vlan;
4059 return vlan;
4062 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
4063 IOReadHandler *fd_read,
4064 IOCanRWHandler *fd_can_read,
4065 void *opaque)
4067 VLANClientState *vc, **pvc;
4068 vc = qemu_mallocz(sizeof(VLANClientState));
4069 if (!vc)
4070 return NULL;
4071 vc->fd_read = fd_read;
4072 vc->fd_can_read = fd_can_read;
4073 vc->opaque = opaque;
4074 vc->vlan = vlan;
4076 vc->next = NULL;
4077 pvc = &vlan->first_client;
4078 while (*pvc != NULL)
4079 pvc = &(*pvc)->next;
4080 *pvc = vc;
4081 return vc;
4084 void qemu_del_vlan_client(VLANClientState *vc)
4086 VLANClientState **pvc = &vc->vlan->first_client;
4088 while (*pvc != NULL)
4089 if (*pvc == vc) {
4090 *pvc = vc->next;
4091 free(vc);
4092 break;
4093 } else
4094 pvc = &(*pvc)->next;
4097 int qemu_can_send_packet(VLANClientState *vc1)
4099 VLANState *vlan = vc1->vlan;
4100 VLANClientState *vc;
4102 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
4103 if (vc != vc1) {
4104 if (vc->fd_can_read && vc->fd_can_read(vc->opaque))
4105 return 1;
4108 return 0;
4111 void qemu_send_packet(VLANClientState *vc1, const uint8_t *buf, int size)
4113 VLANState *vlan = vc1->vlan;
4114 VLANClientState *vc;
4116 #if 0
4117 printf("vlan %d send:\n", vlan->id);
4118 hex_dump(stdout, buf, size);
4119 #endif
4120 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
4121 if (vc != vc1) {
4122 vc->fd_read(vc->opaque, buf, size);
4127 #if defined(CONFIG_SLIRP)
4129 /* slirp network adapter */
4131 static int slirp_inited;
4132 static VLANClientState *slirp_vc;
4134 int slirp_can_output(void)
4136 return !slirp_vc || qemu_can_send_packet(slirp_vc);
4139 void slirp_output(const uint8_t *pkt, int pkt_len)
4141 #if 0
4142 printf("slirp output:\n");
4143 hex_dump(stdout, pkt, pkt_len);
4144 #endif
4145 if (!slirp_vc)
4146 return;
4147 qemu_send_packet(slirp_vc, pkt, pkt_len);
4150 static void slirp_receive(void *opaque, const uint8_t *buf, int size)
4152 #if 0
4153 printf("slirp input:\n");
4154 hex_dump(stdout, buf, size);
4155 #endif
4156 slirp_input(buf, size);
4159 static int net_slirp_init(VLANState *vlan)
4161 if (!slirp_inited) {
4162 slirp_inited = 1;
4163 slirp_init();
4165 slirp_vc = qemu_new_vlan_client(vlan,
4166 slirp_receive, NULL, NULL);
4167 snprintf(slirp_vc->info_str, sizeof(slirp_vc->info_str), "user redirector");
4168 return 0;
4171 static void net_slirp_redir(const char *redir_str)
4173 int is_udp;
4174 char buf[256], *r;
4175 const char *p;
4176 struct in_addr guest_addr;
4177 int host_port, guest_port;
4179 if (!slirp_inited) {
4180 slirp_inited = 1;
4181 slirp_init();
4184 p = redir_str;
4185 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4186 goto fail;
4187 if (!strcmp(buf, "tcp")) {
4188 is_udp = 0;
4189 } else if (!strcmp(buf, "udp")) {
4190 is_udp = 1;
4191 } else {
4192 goto fail;
4195 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4196 goto fail;
4197 host_port = strtol(buf, &r, 0);
4198 if (r == buf)
4199 goto fail;
4201 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4202 goto fail;
4203 if (buf[0] == '\0') {
4204 pstrcpy(buf, sizeof(buf), "10.0.2.15");
4206 if (!inet_aton(buf, &guest_addr))
4207 goto fail;
4209 guest_port = strtol(p, &r, 0);
4210 if (r == p)
4211 goto fail;
4213 if (slirp_redir(is_udp, host_port, guest_addr, guest_port) < 0) {
4214 fprintf(stderr, "qemu: could not set up redirection\n");
4215 exit(1);
4217 return;
4218 fail:
4219 fprintf(stderr, "qemu: syntax: -redir [tcp|udp]:host-port:[guest-host]:guest-port\n");
4220 exit(1);
4223 #ifndef _WIN32
4225 char smb_dir[1024];
4227 static void erase_dir(char *dir_name)
4229 DIR *d;
4230 struct dirent *de;
4231 char filename[1024];
4233 /* erase all the files in the directory */
4234 if ((d = opendir(dir_name)) != 0) {
4235 for(;;) {
4236 de = readdir(d);
4237 if (!de)
4238 break;
4239 if (strcmp(de->d_name, ".") != 0 &&
4240 strcmp(de->d_name, "..") != 0) {
4241 snprintf(filename, sizeof(filename), "%s/%s",
4242 smb_dir, de->d_name);
4243 if (unlink(filename) != 0) /* is it a directory? */
4244 erase_dir(filename);
4247 closedir(d);
4248 rmdir(dir_name);
4252 /* automatic user mode samba server configuration */
4253 static void smb_exit(void)
4255 erase_dir(smb_dir);
4258 /* automatic user mode samba server configuration */
4259 static void net_slirp_smb(const char *exported_dir)
4261 char smb_conf[1024];
4262 char smb_cmdline[1024];
4263 FILE *f;
4265 if (!slirp_inited) {
4266 slirp_inited = 1;
4267 slirp_init();
4270 /* XXX: better tmp dir construction */
4271 snprintf(smb_dir, sizeof(smb_dir), "/tmp/qemu-smb.%d", getpid());
4272 if (mkdir(smb_dir, 0700) < 0) {
4273 fprintf(stderr, "qemu: could not create samba server dir '%s'\n", smb_dir);
4274 exit(1);
4276 snprintf(smb_conf, sizeof(smb_conf), "%s/%s", smb_dir, "smb.conf");
4278 f = fopen(smb_conf, "w");
4279 if (!f) {
4280 fprintf(stderr, "qemu: could not create samba server configuration file '%s'\n", smb_conf);
4281 exit(1);
4283 fprintf(f,
4284 "[global]\n"
4285 "private dir=%s\n"
4286 "smb ports=0\n"
4287 "socket address=127.0.0.1\n"
4288 "pid directory=%s\n"
4289 "lock directory=%s\n"
4290 "log file=%s/log.smbd\n"
4291 "smb passwd file=%s/smbpasswd\n"
4292 "security = share\n"
4293 "[qemu]\n"
4294 "path=%s\n"
4295 "read only=no\n"
4296 "guest ok=yes\n",
4297 smb_dir,
4298 smb_dir,
4299 smb_dir,
4300 smb_dir,
4301 smb_dir,
4302 exported_dir
4304 fclose(f);
4305 atexit(smb_exit);
4307 snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
4308 SMBD_COMMAND, smb_conf);
4310 slirp_add_exec(0, smb_cmdline, 4, 139);
4313 #endif /* !defined(_WIN32) */
4314 void do_info_slirp(void)
4316 slirp_stats();
4319 #endif /* CONFIG_SLIRP */
4321 #if !defined(_WIN32)
4323 typedef struct TAPState {
4324 VLANClientState *vc;
4325 int fd;
4326 char down_script[1024];
4327 } TAPState;
4329 static void tap_receive(void *opaque, const uint8_t *buf, int size)
4331 TAPState *s = opaque;
4332 int ret;
4333 for(;;) {
4334 ret = write(s->fd, buf, size);
4335 if (ret < 0 && (errno == EINTR || errno == EAGAIN)) {
4336 } else {
4337 break;
4342 static void tap_send(void *opaque)
4344 TAPState *s = opaque;
4345 uint8_t buf[4096];
4346 int size;
4348 #ifdef __sun__
4349 struct strbuf sbuf;
4350 int f = 0;
4351 sbuf.maxlen = sizeof(buf);
4352 sbuf.buf = buf;
4353 size = getmsg(s->fd, NULL, &sbuf, &f) >=0 ? sbuf.len : -1;
4354 #else
4355 size = read(s->fd, buf, sizeof(buf));
4356 #endif
4357 if (size > 0) {
4358 qemu_send_packet(s->vc, buf, size);
4362 /* fd support */
4364 static TAPState *net_tap_fd_init(VLANState *vlan, int fd)
4366 TAPState *s;
4368 s = qemu_mallocz(sizeof(TAPState));
4369 if (!s)
4370 return NULL;
4371 s->fd = fd;
4372 s->vc = qemu_new_vlan_client(vlan, tap_receive, NULL, s);
4373 qemu_set_fd_handler(s->fd, tap_send, NULL, s);
4374 snprintf(s->vc->info_str, sizeof(s->vc->info_str), "tap: fd=%d", fd);
4375 return s;
4378 #if defined (_BSD) || defined (__FreeBSD_kernel__)
4379 static int tap_open(char *ifname, int ifname_size)
4381 int fd;
4382 char *dev;
4383 struct stat s;
4385 TFR(fd = open("/dev/tap", O_RDWR));
4386 if (fd < 0) {
4387 fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
4388 return -1;
4391 fstat(fd, &s);
4392 dev = devname(s.st_rdev, S_IFCHR);
4393 pstrcpy(ifname, ifname_size, dev);
4395 fcntl(fd, F_SETFL, O_NONBLOCK);
4396 return fd;
4398 #elif defined(__sun__)
4399 #define TUNNEWPPA (('T'<<16) | 0x0001)
4401 * Allocate TAP device, returns opened fd.
4402 * Stores dev name in the first arg(must be large enough).
4404 int tap_alloc(char *dev, size_t dev_size)
4406 int tap_fd, if_fd, ppa = -1;
4407 static int ip_fd = 0;
4408 char *ptr;
4410 static int arp_fd = 0;
4411 int ip_muxid, arp_muxid;
4412 struct strioctl strioc_if, strioc_ppa;
4413 int link_type = I_PLINK;;
4414 struct lifreq ifr;
4415 char actual_name[32] = "";
4417 memset(&ifr, 0x0, sizeof(ifr));
4419 if( *dev ){
4420 ptr = dev;
4421 while( *ptr && !isdigit((int)*ptr) ) ptr++;
4422 ppa = atoi(ptr);
4425 /* Check if IP device was opened */
4426 if( ip_fd )
4427 close(ip_fd);
4429 TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
4430 if (ip_fd < 0) {
4431 syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
4432 return -1;
4435 TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
4436 if (tap_fd < 0) {
4437 syslog(LOG_ERR, "Can't open /dev/tap");
4438 return -1;
4441 /* Assign a new PPA and get its unit number. */
4442 strioc_ppa.ic_cmd = TUNNEWPPA;
4443 strioc_ppa.ic_timout = 0;
4444 strioc_ppa.ic_len = sizeof(ppa);
4445 strioc_ppa.ic_dp = (char *)&ppa;
4446 if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
4447 syslog (LOG_ERR, "Can't assign new interface");
4449 TFR(if_fd = open("/dev/tap", O_RDWR, 0));
4450 if (if_fd < 0) {
4451 syslog(LOG_ERR, "Can't open /dev/tap (2)");
4452 return -1;
4454 if(ioctl(if_fd, I_PUSH, "ip") < 0){
4455 syslog(LOG_ERR, "Can't push IP module");
4456 return -1;
4459 if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
4460 syslog(LOG_ERR, "Can't get flags\n");
4462 snprintf (actual_name, 32, "tap%d", ppa);
4463 strncpy (ifr.lifr_name, actual_name, sizeof (ifr.lifr_name));
4465 ifr.lifr_ppa = ppa;
4466 /* Assign ppa according to the unit number returned by tun device */
4468 if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
4469 syslog (LOG_ERR, "Can't set PPA %d", ppa);
4470 if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
4471 syslog (LOG_ERR, "Can't get flags\n");
4472 /* Push arp module to if_fd */
4473 if (ioctl (if_fd, I_PUSH, "arp") < 0)
4474 syslog (LOG_ERR, "Can't push ARP module (2)");
4476 /* Push arp module to ip_fd */
4477 if (ioctl (ip_fd, I_POP, NULL) < 0)
4478 syslog (LOG_ERR, "I_POP failed\n");
4479 if (ioctl (ip_fd, I_PUSH, "arp") < 0)
4480 syslog (LOG_ERR, "Can't push ARP module (3)\n");
4481 /* Open arp_fd */
4482 TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
4483 if (arp_fd < 0)
4484 syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
4486 /* Set ifname to arp */
4487 strioc_if.ic_cmd = SIOCSLIFNAME;
4488 strioc_if.ic_timout = 0;
4489 strioc_if.ic_len = sizeof(ifr);
4490 strioc_if.ic_dp = (char *)&ifr;
4491 if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
4492 syslog (LOG_ERR, "Can't set ifname to arp\n");
4495 if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
4496 syslog(LOG_ERR, "Can't link TAP device to IP");
4497 return -1;
4500 if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
4501 syslog (LOG_ERR, "Can't link TAP device to ARP");
4503 close (if_fd);
4505 memset(&ifr, 0x0, sizeof(ifr));
4506 strncpy (ifr.lifr_name, actual_name, sizeof (ifr.lifr_name));
4507 ifr.lifr_ip_muxid = ip_muxid;
4508 ifr.lifr_arp_muxid = arp_muxid;
4510 if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
4512 ioctl (ip_fd, I_PUNLINK , arp_muxid);
4513 ioctl (ip_fd, I_PUNLINK, ip_muxid);
4514 syslog (LOG_ERR, "Can't set multiplexor id");
4517 snprintf(dev, dev_size, "tap%d", ppa);
4518 return tap_fd;
4521 static int tap_open(char *ifname, int ifname_size)
4523 char dev[10]="";
4524 int fd;
4525 if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
4526 fprintf(stderr, "Cannot allocate TAP device\n");
4527 return -1;
4529 pstrcpy(ifname, ifname_size, dev);
4530 fcntl(fd, F_SETFL, O_NONBLOCK);
4531 return fd;
4533 #else
4534 static int tap_open(char *ifname, int ifname_size)
4536 struct ifreq ifr;
4537 int fd, ret;
4539 TFR(fd = open("/dev/net/tun", O_RDWR));
4540 if (fd < 0) {
4541 fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
4542 return -1;
4544 memset(&ifr, 0, sizeof(ifr));
4545 ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
4546 if (ifname[0] != '\0')
4547 pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
4548 else
4549 pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
4550 ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
4551 if (ret != 0) {
4552 fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
4553 close(fd);
4554 return -1;
4556 pstrcpy(ifname, ifname_size, ifr.ifr_name);
4557 fcntl(fd, F_SETFL, O_NONBLOCK);
4558 return fd;
4560 #endif
4562 static int launch_script(const char *setup_script, const char *ifname, int fd)
4564 int pid, status;
4565 char *args[3];
4566 char **parg;
4568 /* try to launch network script */
4569 pid = fork();
4570 if (pid >= 0) {
4571 if (pid == 0) {
4572 int open_max = sysconf (_SC_OPEN_MAX), i;
4573 for (i = 0; i < open_max; i++)
4574 if (i != STDIN_FILENO &&
4575 i != STDOUT_FILENO &&
4576 i != STDERR_FILENO &&
4577 i != fd)
4578 close(i);
4580 parg = args;
4581 *parg++ = (char *)setup_script;
4582 *parg++ = (char *)ifname;
4583 *parg++ = NULL;
4584 execv(setup_script, args);
4585 _exit(1);
4587 while (waitpid(pid, &status, 0) != pid);
4588 if (!WIFEXITED(status) ||
4589 WEXITSTATUS(status) != 0) {
4590 fprintf(stderr, "%s: could not launch network script\n",
4591 setup_script);
4592 return -1;
4595 return 0;
4598 static int net_tap_init(VLANState *vlan, const char *ifname1,
4599 const char *setup_script, const char *down_script)
4601 TAPState *s;
4602 int fd;
4603 char ifname[128];
4605 if (ifname1 != NULL)
4606 pstrcpy(ifname, sizeof(ifname), ifname1);
4607 else
4608 ifname[0] = '\0';
4609 TFR(fd = tap_open(ifname, sizeof(ifname)));
4610 if (fd < 0)
4611 return -1;
4613 if (!setup_script || !strcmp(setup_script, "no"))
4614 setup_script = "";
4615 if (setup_script[0] != '\0') {
4616 if (launch_script(setup_script, ifname, fd))
4617 return -1;
4619 s = net_tap_fd_init(vlan, fd);
4620 if (!s)
4621 return -1;
4622 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
4623 "tap: ifname=%s setup_script=%s", ifname, setup_script);
4624 if (down_script && strcmp(down_script, "no"))
4625 snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
4626 return 0;
4629 #endif /* !_WIN32 */
4631 #if defined(CONFIG_VDE)
4632 typedef struct VDEState {
4633 VLANClientState *vc;
4634 VDECONN *vde;
4635 } VDEState;
4637 static void vde_to_qemu(void *opaque)
4639 VDEState *s = opaque;
4640 uint8_t buf[4096];
4641 int size;
4643 size = vde_recv(s->vde, buf, sizeof(buf), 0);
4644 if (size > 0) {
4645 qemu_send_packet(s->vc, buf, size);
4649 static void vde_from_qemu(void *opaque, const uint8_t *buf, int size)
4651 VDEState *s = opaque;
4652 int ret;
4653 for(;;) {
4654 ret = vde_send(s->vde, buf, size, 0);
4655 if (ret < 0 && errno == EINTR) {
4656 } else {
4657 break;
4662 static int net_vde_init(VLANState *vlan, const char *sock, int port,
4663 const char *group, int mode)
4665 VDEState *s;
4666 char *init_group = strlen(group) ? (char *)group : NULL;
4667 char *init_sock = strlen(sock) ? (char *)sock : NULL;
4669 struct vde_open_args args = {
4670 .port = port,
4671 .group = init_group,
4672 .mode = mode,
4675 s = qemu_mallocz(sizeof(VDEState));
4676 if (!s)
4677 return -1;
4678 s->vde = vde_open(init_sock, "QEMU", &args);
4679 if (!s->vde){
4680 free(s);
4681 return -1;
4683 s->vc = qemu_new_vlan_client(vlan, vde_from_qemu, NULL, s);
4684 qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
4685 snprintf(s->vc->info_str, sizeof(s->vc->info_str), "vde: sock=%s fd=%d",
4686 sock, vde_datafd(s->vde));
4687 return 0;
4689 #endif
4691 /* network connection */
4692 typedef struct NetSocketState {
4693 VLANClientState *vc;
4694 int fd;
4695 int state; /* 0 = getting length, 1 = getting data */
4696 int index;
4697 int packet_len;
4698 uint8_t buf[4096];
4699 struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
4700 } NetSocketState;
4702 typedef struct NetSocketListenState {
4703 VLANState *vlan;
4704 int fd;
4705 } NetSocketListenState;
4707 /* XXX: we consider we can send the whole packet without blocking */
4708 static void net_socket_receive(void *opaque, const uint8_t *buf, int size)
4710 NetSocketState *s = opaque;
4711 uint32_t len;
4712 len = htonl(size);
4714 send_all(s->fd, (const uint8_t *)&len, sizeof(len));
4715 send_all(s->fd, buf, size);
4718 static void net_socket_receive_dgram(void *opaque, const uint8_t *buf, int size)
4720 NetSocketState *s = opaque;
4721 sendto(s->fd, buf, size, 0,
4722 (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
4725 static void net_socket_send(void *opaque)
4727 NetSocketState *s = opaque;
4728 int l, size, err;
4729 uint8_t buf1[4096];
4730 const uint8_t *buf;
4732 size = recv(s->fd, buf1, sizeof(buf1), 0);
4733 if (size < 0) {
4734 err = socket_error();
4735 if (err != EWOULDBLOCK)
4736 goto eoc;
4737 } else if (size == 0) {
4738 /* end of connection */
4739 eoc:
4740 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
4741 closesocket(s->fd);
4742 return;
4744 buf = buf1;
4745 while (size > 0) {
4746 /* reassemble a packet from the network */
4747 switch(s->state) {
4748 case 0:
4749 l = 4 - s->index;
4750 if (l > size)
4751 l = size;
4752 memcpy(s->buf + s->index, buf, l);
4753 buf += l;
4754 size -= l;
4755 s->index += l;
4756 if (s->index == 4) {
4757 /* got length */
4758 s->packet_len = ntohl(*(uint32_t *)s->buf);
4759 s->index = 0;
4760 s->state = 1;
4762 break;
4763 case 1:
4764 l = s->packet_len - s->index;
4765 if (l > size)
4766 l = size;
4767 memcpy(s->buf + s->index, buf, l);
4768 s->index += l;
4769 buf += l;
4770 size -= l;
4771 if (s->index >= s->packet_len) {
4772 qemu_send_packet(s->vc, s->buf, s->packet_len);
4773 s->index = 0;
4774 s->state = 0;
4776 break;
4781 static void net_socket_send_dgram(void *opaque)
4783 NetSocketState *s = opaque;
4784 int size;
4786 size = recv(s->fd, s->buf, sizeof(s->buf), 0);
4787 if (size < 0)
4788 return;
4789 if (size == 0) {
4790 /* end of connection */
4791 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
4792 return;
4794 qemu_send_packet(s->vc, s->buf, size);
4797 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
4799 struct ip_mreq imr;
4800 int fd;
4801 int val, ret;
4802 if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
4803 fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
4804 inet_ntoa(mcastaddr->sin_addr),
4805 (int)ntohl(mcastaddr->sin_addr.s_addr));
4806 return -1;
4809 fd = socket(PF_INET, SOCK_DGRAM, 0);
4810 if (fd < 0) {
4811 perror("socket(PF_INET, SOCK_DGRAM)");
4812 return -1;
4815 val = 1;
4816 ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
4817 (const char *)&val, sizeof(val));
4818 if (ret < 0) {
4819 perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
4820 goto fail;
4823 ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
4824 if (ret < 0) {
4825 perror("bind");
4826 goto fail;
4829 /* Add host to multicast group */
4830 imr.imr_multiaddr = mcastaddr->sin_addr;
4831 imr.imr_interface.s_addr = htonl(INADDR_ANY);
4833 ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
4834 (const char *)&imr, sizeof(struct ip_mreq));
4835 if (ret < 0) {
4836 perror("setsockopt(IP_ADD_MEMBERSHIP)");
4837 goto fail;
4840 /* Force mcast msgs to loopback (eg. several QEMUs in same host */
4841 val = 1;
4842 ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
4843 (const char *)&val, sizeof(val));
4844 if (ret < 0) {
4845 perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
4846 goto fail;
4849 socket_set_nonblock(fd);
4850 return fd;
4851 fail:
4852 if (fd >= 0)
4853 closesocket(fd);
4854 return -1;
4857 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan, int fd,
4858 int is_connected)
4860 struct sockaddr_in saddr;
4861 int newfd;
4862 socklen_t saddr_len;
4863 NetSocketState *s;
4865 /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
4866 * Because this may be "shared" socket from a "master" process, datagrams would be recv()
4867 * by ONLY ONE process: we must "clone" this dgram socket --jjo
4870 if (is_connected) {
4871 if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
4872 /* must be bound */
4873 if (saddr.sin_addr.s_addr==0) {
4874 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
4875 fd);
4876 return NULL;
4878 /* clone dgram socket */
4879 newfd = net_socket_mcast_create(&saddr);
4880 if (newfd < 0) {
4881 /* error already reported by net_socket_mcast_create() */
4882 close(fd);
4883 return NULL;
4885 /* clone newfd to fd, close newfd */
4886 dup2(newfd, fd);
4887 close(newfd);
4889 } else {
4890 fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
4891 fd, strerror(errno));
4892 return NULL;
4896 s = qemu_mallocz(sizeof(NetSocketState));
4897 if (!s)
4898 return NULL;
4899 s->fd = fd;
4901 s->vc = qemu_new_vlan_client(vlan, net_socket_receive_dgram, NULL, s);
4902 qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
4904 /* mcast: save bound address as dst */
4905 if (is_connected) s->dgram_dst=saddr;
4907 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
4908 "socket: fd=%d (%s mcast=%s:%d)",
4909 fd, is_connected? "cloned" : "",
4910 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
4911 return s;
4914 static void net_socket_connect(void *opaque)
4916 NetSocketState *s = opaque;
4917 qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
4920 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan, int fd,
4921 int is_connected)
4923 NetSocketState *s;
4924 s = qemu_mallocz(sizeof(NetSocketState));
4925 if (!s)
4926 return NULL;
4927 s->fd = fd;
4928 s->vc = qemu_new_vlan_client(vlan,
4929 net_socket_receive, NULL, s);
4930 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
4931 "socket: fd=%d", fd);
4932 if (is_connected) {
4933 net_socket_connect(s);
4934 } else {
4935 qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
4937 return s;
4940 static NetSocketState *net_socket_fd_init(VLANState *vlan, int fd,
4941 int is_connected)
4943 int so_type=-1, optlen=sizeof(so_type);
4945 if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
4946 (socklen_t *)&optlen)< 0) {
4947 fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
4948 return NULL;
4950 switch(so_type) {
4951 case SOCK_DGRAM:
4952 return net_socket_fd_init_dgram(vlan, fd, is_connected);
4953 case SOCK_STREAM:
4954 return net_socket_fd_init_stream(vlan, fd, is_connected);
4955 default:
4956 /* who knows ... this could be a eg. a pty, do warn and continue as stream */
4957 fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
4958 return net_socket_fd_init_stream(vlan, fd, is_connected);
4960 return NULL;
4963 static void net_socket_accept(void *opaque)
4965 NetSocketListenState *s = opaque;
4966 NetSocketState *s1;
4967 struct sockaddr_in saddr;
4968 socklen_t len;
4969 int fd;
4971 for(;;) {
4972 len = sizeof(saddr);
4973 fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
4974 if (fd < 0 && errno != EINTR) {
4975 return;
4976 } else if (fd >= 0) {
4977 break;
4980 s1 = net_socket_fd_init(s->vlan, fd, 1);
4981 if (!s1) {
4982 closesocket(fd);
4983 } else {
4984 snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
4985 "socket: connection from %s:%d",
4986 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
4990 static int net_socket_listen_init(VLANState *vlan, const char *host_str)
4992 NetSocketListenState *s;
4993 int fd, val, ret;
4994 struct sockaddr_in saddr;
4996 if (parse_host_port(&saddr, host_str) < 0)
4997 return -1;
4999 s = qemu_mallocz(sizeof(NetSocketListenState));
5000 if (!s)
5001 return -1;
5003 fd = socket(PF_INET, SOCK_STREAM, 0);
5004 if (fd < 0) {
5005 perror("socket");
5006 return -1;
5008 socket_set_nonblock(fd);
5010 /* allow fast reuse */
5011 val = 1;
5012 setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
5014 ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
5015 if (ret < 0) {
5016 perror("bind");
5017 return -1;
5019 ret = listen(fd, 0);
5020 if (ret < 0) {
5021 perror("listen");
5022 return -1;
5024 s->vlan = vlan;
5025 s->fd = fd;
5026 qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
5027 return 0;
5030 static int net_socket_connect_init(VLANState *vlan, const char *host_str)
5032 NetSocketState *s;
5033 int fd, connected, ret, err;
5034 struct sockaddr_in saddr;
5036 if (parse_host_port(&saddr, host_str) < 0)
5037 return -1;
5039 fd = socket(PF_INET, SOCK_STREAM, 0);
5040 if (fd < 0) {
5041 perror("socket");
5042 return -1;
5044 socket_set_nonblock(fd);
5046 connected = 0;
5047 for(;;) {
5048 ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
5049 if (ret < 0) {
5050 err = socket_error();
5051 if (err == EINTR || err == EWOULDBLOCK) {
5052 } else if (err == EINPROGRESS) {
5053 break;
5054 #ifdef _WIN32
5055 } else if (err == WSAEALREADY) {
5056 break;
5057 #endif
5058 } else {
5059 perror("connect");
5060 closesocket(fd);
5061 return -1;
5063 } else {
5064 connected = 1;
5065 break;
5068 s = net_socket_fd_init(vlan, fd, connected);
5069 if (!s)
5070 return -1;
5071 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
5072 "socket: connect to %s:%d",
5073 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
5074 return 0;
5077 static int net_socket_mcast_init(VLANState *vlan, const char *host_str)
5079 NetSocketState *s;
5080 int fd;
5081 struct sockaddr_in saddr;
5083 if (parse_host_port(&saddr, host_str) < 0)
5084 return -1;
5087 fd = net_socket_mcast_create(&saddr);
5088 if (fd < 0)
5089 return -1;
5091 s = net_socket_fd_init(vlan, fd, 0);
5092 if (!s)
5093 return -1;
5095 s->dgram_dst = saddr;
5097 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
5098 "socket: mcast=%s:%d",
5099 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
5100 return 0;
5104 static const char *get_opt_name(char *buf, int buf_size, const char *p)
5106 char *q;
5108 q = buf;
5109 while (*p != '\0' && *p != '=') {
5110 if (q && (q - buf) < buf_size - 1)
5111 *q++ = *p;
5112 p++;
5114 if (q)
5115 *q = '\0';
5117 return p;
5120 static const char *get_opt_value(char *buf, int buf_size, const char *p)
5122 char *q;
5124 q = buf;
5125 while (*p != '\0') {
5126 if (*p == ',') {
5127 if (*(p + 1) != ',')
5128 break;
5129 p++;
5131 if (q && (q - buf) < buf_size - 1)
5132 *q++ = *p;
5133 p++;
5135 if (q)
5136 *q = '\0';
5138 return p;
5141 static int get_param_value(char *buf, int buf_size,
5142 const char *tag, const char *str)
5144 const char *p;
5145 char option[128];
5147 p = str;
5148 for(;;) {
5149 p = get_opt_name(option, sizeof(option), p);
5150 if (*p != '=')
5151 break;
5152 p++;
5153 if (!strcmp(tag, option)) {
5154 (void)get_opt_value(buf, buf_size, p);
5155 return strlen(buf);
5156 } else {
5157 p = get_opt_value(NULL, 0, p);
5159 if (*p != ',')
5160 break;
5161 p++;
5163 return 0;
5166 static int check_params(char *buf, int buf_size,
5167 char **params, const char *str)
5169 const char *p;
5170 int i;
5172 p = str;
5173 for(;;) {
5174 p = get_opt_name(buf, buf_size, p);
5175 if (*p != '=')
5176 return -1;
5177 p++;
5178 for(i = 0; params[i] != NULL; i++)
5179 if (!strcmp(params[i], buf))
5180 break;
5181 if (params[i] == NULL)
5182 return -1;
5183 p = get_opt_value(NULL, 0, p);
5184 if (*p != ',')
5185 break;
5186 p++;
5188 return 0;
5191 static int net_client_init(const char *device, const char *p)
5193 char buf[1024];
5194 int vlan_id, ret;
5195 VLANState *vlan;
5197 vlan_id = 0;
5198 if (get_param_value(buf, sizeof(buf), "vlan", p)) {
5199 vlan_id = strtol(buf, NULL, 0);
5201 vlan = qemu_find_vlan(vlan_id);
5202 if (!vlan) {
5203 fprintf(stderr, "Could not create vlan %d\n", vlan_id);
5204 return -1;
5206 if (!strcmp(device, "nic")) {
5207 NICInfo *nd;
5208 uint8_t *macaddr;
5210 if (nb_nics >= MAX_NICS) {
5211 fprintf(stderr, "Too Many NICs\n");
5212 return -1;
5214 nd = &nd_table[nb_nics];
5215 macaddr = nd->macaddr;
5216 macaddr[0] = 0x52;
5217 macaddr[1] = 0x54;
5218 macaddr[2] = 0x00;
5219 macaddr[3] = 0x12;
5220 macaddr[4] = 0x34;
5221 macaddr[5] = 0x56 + nb_nics;
5223 if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
5224 if (parse_macaddr(macaddr, buf) < 0) {
5225 fprintf(stderr, "invalid syntax for ethernet address\n");
5226 return -1;
5229 if (get_param_value(buf, sizeof(buf), "model", p)) {
5230 nd->model = strdup(buf);
5232 nd->vlan = vlan;
5233 nb_nics++;
5234 vlan->nb_guest_devs++;
5235 ret = 0;
5236 } else
5237 if (!strcmp(device, "none")) {
5238 /* does nothing. It is needed to signal that no network cards
5239 are wanted */
5240 ret = 0;
5241 } else
5242 #ifdef CONFIG_SLIRP
5243 if (!strcmp(device, "user")) {
5244 if (get_param_value(buf, sizeof(buf), "hostname", p)) {
5245 pstrcpy(slirp_hostname, sizeof(slirp_hostname), buf);
5247 vlan->nb_host_devs++;
5248 ret = net_slirp_init(vlan);
5249 } else
5250 #endif
5251 #ifdef _WIN32
5252 if (!strcmp(device, "tap")) {
5253 char ifname[64];
5254 if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
5255 fprintf(stderr, "tap: no interface name\n");
5256 return -1;
5258 vlan->nb_host_devs++;
5259 ret = tap_win32_init(vlan, ifname);
5260 } else
5261 #else
5262 if (!strcmp(device, "tap")) {
5263 char ifname[64];
5264 char setup_script[1024], down_script[1024];
5265 int fd;
5266 vlan->nb_host_devs++;
5267 if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
5268 fd = strtol(buf, NULL, 0);
5269 fcntl(fd, F_SETFL, O_NONBLOCK);
5270 ret = -1;
5271 if (net_tap_fd_init(vlan, fd))
5272 ret = 0;
5273 } else {
5274 if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
5275 ifname[0] = '\0';
5277 if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
5278 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
5280 if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
5281 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
5283 ret = net_tap_init(vlan, ifname, setup_script, down_script);
5285 } else
5286 #endif
5287 if (!strcmp(device, "socket")) {
5288 if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
5289 int fd;
5290 fd = strtol(buf, NULL, 0);
5291 ret = -1;
5292 if (net_socket_fd_init(vlan, fd, 1))
5293 ret = 0;
5294 } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
5295 ret = net_socket_listen_init(vlan, buf);
5296 } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
5297 ret = net_socket_connect_init(vlan, buf);
5298 } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
5299 ret = net_socket_mcast_init(vlan, buf);
5300 } else {
5301 fprintf(stderr, "Unknown socket options: %s\n", p);
5302 return -1;
5304 vlan->nb_host_devs++;
5305 } else
5306 #ifdef CONFIG_VDE
5307 if (!strcmp(device, "vde")) {
5308 char vde_sock[1024], vde_group[512];
5309 int vde_port, vde_mode;
5310 vlan->nb_host_devs++;
5311 if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
5312 vde_sock[0] = '\0';
5314 if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
5315 vde_port = strtol(buf, NULL, 10);
5316 } else {
5317 vde_port = 0;
5319 if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
5320 vde_group[0] = '\0';
5322 if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
5323 vde_mode = strtol(buf, NULL, 8);
5324 } else {
5325 vde_mode = 0700;
5327 ret = net_vde_init(vlan, vde_sock, vde_port, vde_group, vde_mode);
5328 } else
5329 #endif
5331 fprintf(stderr, "Unknown network device: %s\n", device);
5332 return -1;
5334 if (ret < 0) {
5335 fprintf(stderr, "Could not initialize device '%s'\n", device);
5338 return ret;
5341 static int net_client_parse(const char *str)
5343 const char *p;
5344 char *q;
5345 char device[64];
5347 p = str;
5348 q = device;
5349 while (*p != '\0' && *p != ',') {
5350 if ((q - device) < sizeof(device) - 1)
5351 *q++ = *p;
5352 p++;
5354 *q = '\0';
5355 if (*p == ',')
5356 p++;
5358 return net_client_init(device, p);
5361 void do_info_network(void)
5363 VLANState *vlan;
5364 VLANClientState *vc;
5366 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
5367 term_printf("VLAN %d devices:\n", vlan->id);
5368 for(vc = vlan->first_client; vc != NULL; vc = vc->next)
5369 term_printf(" %s\n", vc->info_str);
5373 #define HD_ALIAS "index=%d,media=disk"
5374 #ifdef TARGET_PPC
5375 #define CDROM_ALIAS "index=1,media=cdrom"
5376 #else
5377 #define CDROM_ALIAS "index=2,media=cdrom"
5378 #endif
5379 #define FD_ALIAS "index=%d,if=floppy"
5380 #define PFLASH_ALIAS "if=pflash"
5381 #define MTD_ALIAS "if=mtd"
5382 #define SD_ALIAS "index=0,if=sd"
5384 static int drive_add(const char *file, const char *fmt, ...)
5386 va_list ap;
5388 if (nb_drives_opt >= MAX_DRIVES) {
5389 fprintf(stderr, "qemu: too many drives\n");
5390 exit(1);
5393 drives_opt[nb_drives_opt].file = file;
5394 va_start(ap, fmt);
5395 vsnprintf(drives_opt[nb_drives_opt].opt,
5396 sizeof(drives_opt[0].opt), fmt, ap);
5397 va_end(ap);
5399 return nb_drives_opt++;
5402 int drive_get_index(BlockInterfaceType type, int bus, int unit)
5404 int index;
5406 /* seek interface, bus and unit */
5408 for (index = 0; index < nb_drives; index++)
5409 if (drives_table[index].type == type &&
5410 drives_table[index].bus == bus &&
5411 drives_table[index].unit == unit)
5412 return index;
5414 return -1;
5417 int drive_get_max_bus(BlockInterfaceType type)
5419 int max_bus;
5420 int index;
5422 max_bus = -1;
5423 for (index = 0; index < nb_drives; index++) {
5424 if(drives_table[index].type == type &&
5425 drives_table[index].bus > max_bus)
5426 max_bus = drives_table[index].bus;
5428 return max_bus;
5431 static void bdrv_format_print(void *opaque, const char *name)
5433 fprintf(stderr, " %s", name);
5436 static int drive_init(struct drive_opt *arg, int snapshot,
5437 QEMUMachine *machine)
5439 char buf[128];
5440 char file[1024];
5441 char devname[128];
5442 const char *mediastr = "";
5443 BlockInterfaceType type;
5444 enum { MEDIA_DISK, MEDIA_CDROM } media;
5445 int bus_id, unit_id;
5446 int cyls, heads, secs, translation;
5447 BlockDriverState *bdrv;
5448 BlockDriver *drv = NULL;
5449 int max_devs;
5450 int index;
5451 int cache;
5452 int bdrv_flags;
5453 char *str = arg->opt;
5454 char *params[] = { "bus", "unit", "if", "index", "cyls", "heads",
5455 "secs", "trans", "media", "snapshot", "file",
5456 "cache", "format", NULL };
5458 if (check_params(buf, sizeof(buf), params, str) < 0) {
5459 fprintf(stderr, "qemu: unknown parameter '%s' in '%s'\n",
5460 buf, str);
5461 return -1;
5464 file[0] = 0;
5465 cyls = heads = secs = 0;
5466 bus_id = 0;
5467 unit_id = -1;
5468 translation = BIOS_ATA_TRANSLATION_AUTO;
5469 index = -1;
5470 cache = 1;
5472 if (!strcmp(machine->name, "realview") ||
5473 !strcmp(machine->name, "SS-5") ||
5474 !strcmp(machine->name, "SS-10") ||
5475 !strcmp(machine->name, "SS-600MP") ||
5476 !strcmp(machine->name, "versatilepb") ||
5477 !strcmp(machine->name, "versatileab")) {
5478 type = IF_SCSI;
5479 max_devs = MAX_SCSI_DEVS;
5480 pstrcpy(devname, sizeof(devname), "scsi");
5481 } else {
5482 type = IF_IDE;
5483 max_devs = MAX_IDE_DEVS;
5484 pstrcpy(devname, sizeof(devname), "ide");
5486 media = MEDIA_DISK;
5488 /* extract parameters */
5490 if (get_param_value(buf, sizeof(buf), "bus", str)) {
5491 bus_id = strtol(buf, NULL, 0);
5492 if (bus_id < 0) {
5493 fprintf(stderr, "qemu: '%s' invalid bus id\n", str);
5494 return -1;
5498 if (get_param_value(buf, sizeof(buf), "unit", str)) {
5499 unit_id = strtol(buf, NULL, 0);
5500 if (unit_id < 0) {
5501 fprintf(stderr, "qemu: '%s' invalid unit id\n", str);
5502 return -1;
5506 if (get_param_value(buf, sizeof(buf), "if", str)) {
5507 pstrcpy(devname, sizeof(devname), buf);
5508 if (!strcmp(buf, "ide")) {
5509 type = IF_IDE;
5510 max_devs = MAX_IDE_DEVS;
5511 } else if (!strcmp(buf, "scsi")) {
5512 type = IF_SCSI;
5513 max_devs = MAX_SCSI_DEVS;
5514 } else if (!strcmp(buf, "floppy")) {
5515 type = IF_FLOPPY;
5516 max_devs = 0;
5517 } else if (!strcmp(buf, "pflash")) {
5518 type = IF_PFLASH;
5519 max_devs = 0;
5520 } else if (!strcmp(buf, "mtd")) {
5521 type = IF_MTD;
5522 max_devs = 0;
5523 } else if (!strcmp(buf, "sd")) {
5524 type = IF_SD;
5525 max_devs = 0;
5526 } else {
5527 fprintf(stderr, "qemu: '%s' unsupported bus type '%s'\n", str, buf);
5528 return -1;
5532 if (get_param_value(buf, sizeof(buf), "index", str)) {
5533 index = strtol(buf, NULL, 0);
5534 if (index < 0) {
5535 fprintf(stderr, "qemu: '%s' invalid index\n", str);
5536 return -1;
5540 if (get_param_value(buf, sizeof(buf), "cyls", str)) {
5541 cyls = strtol(buf, NULL, 0);
5544 if (get_param_value(buf, sizeof(buf), "heads", str)) {
5545 heads = strtol(buf, NULL, 0);
5548 if (get_param_value(buf, sizeof(buf), "secs", str)) {
5549 secs = strtol(buf, NULL, 0);
5552 if (cyls || heads || secs) {
5553 if (cyls < 1 || cyls > 16383) {
5554 fprintf(stderr, "qemu: '%s' invalid physical cyls number\n", str);
5555 return -1;
5557 if (heads < 1 || heads > 16) {
5558 fprintf(stderr, "qemu: '%s' invalid physical heads number\n", str);
5559 return -1;
5561 if (secs < 1 || secs > 63) {
5562 fprintf(stderr, "qemu: '%s' invalid physical secs number\n", str);
5563 return -1;
5567 if (get_param_value(buf, sizeof(buf), "trans", str)) {
5568 if (!cyls) {
5569 fprintf(stderr,
5570 "qemu: '%s' trans must be used with cyls,heads and secs\n",
5571 str);
5572 return -1;
5574 if (!strcmp(buf, "none"))
5575 translation = BIOS_ATA_TRANSLATION_NONE;
5576 else if (!strcmp(buf, "lba"))
5577 translation = BIOS_ATA_TRANSLATION_LBA;
5578 else if (!strcmp(buf, "auto"))
5579 translation = BIOS_ATA_TRANSLATION_AUTO;
5580 else {
5581 fprintf(stderr, "qemu: '%s' invalid translation type\n", str);
5582 return -1;
5586 if (get_param_value(buf, sizeof(buf), "media", str)) {
5587 if (!strcmp(buf, "disk")) {
5588 media = MEDIA_DISK;
5589 } else if (!strcmp(buf, "cdrom")) {
5590 if (cyls || secs || heads) {
5591 fprintf(stderr,
5592 "qemu: '%s' invalid physical CHS format\n", str);
5593 return -1;
5595 media = MEDIA_CDROM;
5596 } else {
5597 fprintf(stderr, "qemu: '%s' invalid media\n", str);
5598 return -1;
5602 if (get_param_value(buf, sizeof(buf), "snapshot", str)) {
5603 if (!strcmp(buf, "on"))
5604 snapshot = 1;
5605 else if (!strcmp(buf, "off"))
5606 snapshot = 0;
5607 else {
5608 fprintf(stderr, "qemu: '%s' invalid snapshot option\n", str);
5609 return -1;
5613 if (get_param_value(buf, sizeof(buf), "cache", str)) {
5614 if (!strcmp(buf, "off"))
5615 cache = 0;
5616 else if (!strcmp(buf, "on"))
5617 cache = 1;
5618 else {
5619 fprintf(stderr, "qemu: invalid cache option\n");
5620 return -1;
5624 if (get_param_value(buf, sizeof(buf), "format", str)) {
5625 if (strcmp(buf, "?") == 0) {
5626 fprintf(stderr, "qemu: Supported formats:");
5627 bdrv_iterate_format(bdrv_format_print, NULL);
5628 fprintf(stderr, "\n");
5629 return -1;
5631 drv = bdrv_find_format(buf);
5632 if (!drv) {
5633 fprintf(stderr, "qemu: '%s' invalid format\n", buf);
5634 return -1;
5638 if (arg->file == NULL)
5639 get_param_value(file, sizeof(file), "file", str);
5640 else
5641 pstrcpy(file, sizeof(file), arg->file);
5643 /* compute bus and unit according index */
5645 if (index != -1) {
5646 if (bus_id != 0 || unit_id != -1) {
5647 fprintf(stderr,
5648 "qemu: '%s' index cannot be used with bus and unit\n", str);
5649 return -1;
5651 if (max_devs == 0)
5653 unit_id = index;
5654 bus_id = 0;
5655 } else {
5656 unit_id = index % max_devs;
5657 bus_id = index / max_devs;
5661 /* if user doesn't specify a unit_id,
5662 * try to find the first free
5665 if (unit_id == -1) {
5666 unit_id = 0;
5667 while (drive_get_index(type, bus_id, unit_id) != -1) {
5668 unit_id++;
5669 if (max_devs && unit_id >= max_devs) {
5670 unit_id -= max_devs;
5671 bus_id++;
5676 /* check unit id */
5678 if (max_devs && unit_id >= max_devs) {
5679 fprintf(stderr, "qemu: '%s' unit %d too big (max is %d)\n",
5680 str, unit_id, max_devs - 1);
5681 return -1;
5685 * ignore multiple definitions
5688 if (drive_get_index(type, bus_id, unit_id) != -1)
5689 return 0;
5691 /* init */
5693 if (type == IF_IDE || type == IF_SCSI)
5694 mediastr = (media == MEDIA_CDROM) ? "-cd" : "-hd";
5695 if (max_devs)
5696 snprintf(buf, sizeof(buf), "%s%i%s%i",
5697 devname, bus_id, mediastr, unit_id);
5698 else
5699 snprintf(buf, sizeof(buf), "%s%s%i",
5700 devname, mediastr, unit_id);
5701 bdrv = bdrv_new(buf);
5702 drives_table[nb_drives].bdrv = bdrv;
5703 drives_table[nb_drives].type = type;
5704 drives_table[nb_drives].bus = bus_id;
5705 drives_table[nb_drives].unit = unit_id;
5706 nb_drives++;
5708 switch(type) {
5709 case IF_IDE:
5710 case IF_SCSI:
5711 switch(media) {
5712 case MEDIA_DISK:
5713 if (cyls != 0) {
5714 bdrv_set_geometry_hint(bdrv, cyls, heads, secs);
5715 bdrv_set_translation_hint(bdrv, translation);
5717 break;
5718 case MEDIA_CDROM:
5719 bdrv_set_type_hint(bdrv, BDRV_TYPE_CDROM);
5720 break;
5722 break;
5723 case IF_SD:
5724 /* FIXME: This isn't really a floppy, but it's a reasonable
5725 approximation. */
5726 case IF_FLOPPY:
5727 bdrv_set_type_hint(bdrv, BDRV_TYPE_FLOPPY);
5728 break;
5729 case IF_PFLASH:
5730 case IF_MTD:
5731 break;
5733 if (!file[0])
5734 return 0;
5735 bdrv_flags = 0;
5736 if (snapshot)
5737 bdrv_flags |= BDRV_O_SNAPSHOT;
5738 if (!cache)
5739 bdrv_flags |= BDRV_O_DIRECT;
5740 if (bdrv_open2(bdrv, file, bdrv_flags, drv) < 0 || qemu_key_check(bdrv, file)) {
5741 fprintf(stderr, "qemu: could not open disk image %s\n",
5742 file);
5743 return -1;
5745 return 0;
5748 /***********************************************************/
5749 /* USB devices */
5751 static USBPort *used_usb_ports;
5752 static USBPort *free_usb_ports;
5754 /* ??? Maybe change this to register a hub to keep track of the topology. */
5755 void qemu_register_usb_port(USBPort *port, void *opaque, int index,
5756 usb_attachfn attach)
5758 port->opaque = opaque;
5759 port->index = index;
5760 port->attach = attach;
5761 port->next = free_usb_ports;
5762 free_usb_ports = port;
5765 int usb_device_add_dev(USBDevice *dev)
5767 USBPort *port;
5769 /* Find a USB port to add the device to. */
5770 port = free_usb_ports;
5771 if (!port->next) {
5772 USBDevice *hub;
5774 /* Create a new hub and chain it on. */
5775 free_usb_ports = NULL;
5776 port->next = used_usb_ports;
5777 used_usb_ports = port;
5779 hub = usb_hub_init(VM_USB_HUB_SIZE);
5780 usb_attach(port, hub);
5781 port = free_usb_ports;
5784 free_usb_ports = port->next;
5785 port->next = used_usb_ports;
5786 used_usb_ports = port;
5787 usb_attach(port, dev);
5788 return 0;
5791 static int usb_device_add(const char *devname)
5793 const char *p;
5794 USBDevice *dev;
5796 if (!free_usb_ports)
5797 return -1;
5799 if (strstart(devname, "host:", &p)) {
5800 dev = usb_host_device_open(p);
5801 } else if (!strcmp(devname, "mouse")) {
5802 dev = usb_mouse_init();
5803 } else if (!strcmp(devname, "tablet")) {
5804 dev = usb_tablet_init();
5805 } else if (!strcmp(devname, "keyboard")) {
5806 dev = usb_keyboard_init();
5807 } else if (strstart(devname, "disk:", &p)) {
5808 dev = usb_msd_init(p);
5809 } else if (!strcmp(devname, "wacom-tablet")) {
5810 dev = usb_wacom_init();
5811 } else if (strstart(devname, "serial:", &p)) {
5812 dev = usb_serial_init(p);
5813 #ifdef CONFIG_BRLAPI
5814 } else if (!strcmp(devname, "braille")) {
5815 dev = usb_baum_init();
5816 #endif
5817 } else if (strstart(devname, "net:", &p)) {
5818 int nic = nb_nics;
5820 if (net_client_init("nic", p) < 0)
5821 return -1;
5822 nd_table[nic].model = "usb";
5823 dev = usb_net_init(&nd_table[nic]);
5824 } else {
5825 return -1;
5827 if (!dev)
5828 return -1;
5830 return usb_device_add_dev(dev);
5833 int usb_device_del_addr(int bus_num, int addr)
5835 USBPort *port;
5836 USBPort **lastp;
5837 USBDevice *dev;
5839 if (!used_usb_ports)
5840 return -1;
5842 if (bus_num != 0)
5843 return -1;
5845 lastp = &used_usb_ports;
5846 port = used_usb_ports;
5847 while (port && port->dev->addr != addr) {
5848 lastp = &port->next;
5849 port = port->next;
5852 if (!port)
5853 return -1;
5855 dev = port->dev;
5856 *lastp = port->next;
5857 usb_attach(port, NULL);
5858 dev->handle_destroy(dev);
5859 port->next = free_usb_ports;
5860 free_usb_ports = port;
5861 return 0;
5864 static int usb_device_del(const char *devname)
5866 int bus_num, addr;
5867 const char *p;
5869 if (!used_usb_ports)
5870 return -1;
5872 p = strchr(devname, '.');
5873 if (!p)
5874 return -1;
5875 bus_num = strtoul(devname, NULL, 0);
5876 addr = strtoul(p + 1, NULL, 0);
5878 return usb_device_del_addr(bus_num, addr);
5881 void do_usb_add(const char *devname)
5883 usb_device_add(devname);
5886 void do_usb_del(const char *devname)
5888 usb_device_del(devname);
5891 void usb_info(void)
5893 USBDevice *dev;
5894 USBPort *port;
5895 const char *speed_str;
5897 if (!usb_enabled) {
5898 term_printf("USB support not enabled\n");
5899 return;
5902 for (port = used_usb_ports; port; port = port->next) {
5903 dev = port->dev;
5904 if (!dev)
5905 continue;
5906 switch(dev->speed) {
5907 case USB_SPEED_LOW:
5908 speed_str = "1.5";
5909 break;
5910 case USB_SPEED_FULL:
5911 speed_str = "12";
5912 break;
5913 case USB_SPEED_HIGH:
5914 speed_str = "480";
5915 break;
5916 default:
5917 speed_str = "?";
5918 break;
5920 term_printf(" Device %d.%d, Speed %s Mb/s, Product %s\n",
5921 0, dev->addr, speed_str, dev->devname);
5925 /***********************************************************/
5926 /* PCMCIA/Cardbus */
5928 static struct pcmcia_socket_entry_s {
5929 struct pcmcia_socket_s *socket;
5930 struct pcmcia_socket_entry_s *next;
5931 } *pcmcia_sockets = 0;
5933 void pcmcia_socket_register(struct pcmcia_socket_s *socket)
5935 struct pcmcia_socket_entry_s *entry;
5937 entry = qemu_malloc(sizeof(struct pcmcia_socket_entry_s));
5938 entry->socket = socket;
5939 entry->next = pcmcia_sockets;
5940 pcmcia_sockets = entry;
5943 void pcmcia_socket_unregister(struct pcmcia_socket_s *socket)
5945 struct pcmcia_socket_entry_s *entry, **ptr;
5947 ptr = &pcmcia_sockets;
5948 for (entry = *ptr; entry; ptr = &entry->next, entry = *ptr)
5949 if (entry->socket == socket) {
5950 *ptr = entry->next;
5951 qemu_free(entry);
5955 void pcmcia_info(void)
5957 struct pcmcia_socket_entry_s *iter;
5958 if (!pcmcia_sockets)
5959 term_printf("No PCMCIA sockets\n");
5961 for (iter = pcmcia_sockets; iter; iter = iter->next)
5962 term_printf("%s: %s\n", iter->socket->slot_string,
5963 iter->socket->attached ? iter->socket->card_string :
5964 "Empty");
5967 /***********************************************************/
5968 /* dumb display */
5970 static void dumb_update(DisplayState *ds, int x, int y, int w, int h)
5974 static void dumb_resize(DisplayState *ds, int w, int h)
5978 static void dumb_refresh(DisplayState *ds)
5980 #if defined(CONFIG_SDL)
5981 vga_hw_update();
5982 #endif
5985 static void dumb_display_init(DisplayState *ds)
5987 ds->data = NULL;
5988 ds->linesize = 0;
5989 ds->depth = 0;
5990 ds->dpy_update = dumb_update;
5991 ds->dpy_resize = dumb_resize;
5992 ds->dpy_refresh = dumb_refresh;
5993 ds->gui_timer_interval = 500;
5994 ds->idle = 1;
5997 /***********************************************************/
5998 /* I/O handling */
6000 #define MAX_IO_HANDLERS 64
6002 typedef struct IOHandlerRecord {
6003 int fd;
6004 IOCanRWHandler *fd_read_poll;
6005 IOHandler *fd_read;
6006 IOHandler *fd_write;
6007 int deleted;
6008 void *opaque;
6009 /* temporary data */
6010 struct pollfd *ufd;
6011 struct IOHandlerRecord *next;
6012 } IOHandlerRecord;
6014 static IOHandlerRecord *first_io_handler;
6016 /* XXX: fd_read_poll should be suppressed, but an API change is
6017 necessary in the character devices to suppress fd_can_read(). */
6018 int qemu_set_fd_handler2(int fd,
6019 IOCanRWHandler *fd_read_poll,
6020 IOHandler *fd_read,
6021 IOHandler *fd_write,
6022 void *opaque)
6024 IOHandlerRecord **pioh, *ioh;
6026 if (!fd_read && !fd_write) {
6027 pioh = &first_io_handler;
6028 for(;;) {
6029 ioh = *pioh;
6030 if (ioh == NULL)
6031 break;
6032 if (ioh->fd == fd) {
6033 ioh->deleted = 1;
6034 break;
6036 pioh = &ioh->next;
6038 } else {
6039 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
6040 if (ioh->fd == fd)
6041 goto found;
6043 ioh = qemu_mallocz(sizeof(IOHandlerRecord));
6044 if (!ioh)
6045 return -1;
6046 ioh->next = first_io_handler;
6047 first_io_handler = ioh;
6048 found:
6049 ioh->fd = fd;
6050 ioh->fd_read_poll = fd_read_poll;
6051 ioh->fd_read = fd_read;
6052 ioh->fd_write = fd_write;
6053 ioh->opaque = opaque;
6054 ioh->deleted = 0;
6056 return 0;
6059 int qemu_set_fd_handler(int fd,
6060 IOHandler *fd_read,
6061 IOHandler *fd_write,
6062 void *opaque)
6064 return qemu_set_fd_handler2(fd, NULL, fd_read, fd_write, opaque);
6067 /***********************************************************/
6068 /* Polling handling */
6070 typedef struct PollingEntry {
6071 PollingFunc *func;
6072 void *opaque;
6073 struct PollingEntry *next;
6074 } PollingEntry;
6076 static PollingEntry *first_polling_entry;
6078 int qemu_add_polling_cb(PollingFunc *func, void *opaque)
6080 PollingEntry **ppe, *pe;
6081 pe = qemu_mallocz(sizeof(PollingEntry));
6082 if (!pe)
6083 return -1;
6084 pe->func = func;
6085 pe->opaque = opaque;
6086 for(ppe = &first_polling_entry; *ppe != NULL; ppe = &(*ppe)->next);
6087 *ppe = pe;
6088 return 0;
6091 void qemu_del_polling_cb(PollingFunc *func, void *opaque)
6093 PollingEntry **ppe, *pe;
6094 for(ppe = &first_polling_entry; *ppe != NULL; ppe = &(*ppe)->next) {
6095 pe = *ppe;
6096 if (pe->func == func && pe->opaque == opaque) {
6097 *ppe = pe->next;
6098 qemu_free(pe);
6099 break;
6104 #ifdef _WIN32
6105 /***********************************************************/
6106 /* Wait objects support */
6107 typedef struct WaitObjects {
6108 int num;
6109 HANDLE events[MAXIMUM_WAIT_OBJECTS + 1];
6110 WaitObjectFunc *func[MAXIMUM_WAIT_OBJECTS + 1];
6111 void *opaque[MAXIMUM_WAIT_OBJECTS + 1];
6112 } WaitObjects;
6114 static WaitObjects wait_objects = {0};
6116 int qemu_add_wait_object(HANDLE handle, WaitObjectFunc *func, void *opaque)
6118 WaitObjects *w = &wait_objects;
6120 if (w->num >= MAXIMUM_WAIT_OBJECTS)
6121 return -1;
6122 w->events[w->num] = handle;
6123 w->func[w->num] = func;
6124 w->opaque[w->num] = opaque;
6125 w->num++;
6126 return 0;
6129 void qemu_del_wait_object(HANDLE handle, WaitObjectFunc *func, void *opaque)
6131 int i, found;
6132 WaitObjects *w = &wait_objects;
6134 found = 0;
6135 for (i = 0; i < w->num; i++) {
6136 if (w->events[i] == handle)
6137 found = 1;
6138 if (found) {
6139 w->events[i] = w->events[i + 1];
6140 w->func[i] = w->func[i + 1];
6141 w->opaque[i] = w->opaque[i + 1];
6144 if (found)
6145 w->num--;
6147 #endif
6149 /***********************************************************/
6150 /* savevm/loadvm support */
6152 #define IO_BUF_SIZE 32768
6154 struct QEMUFile {
6155 FILE *outfile;
6156 BlockDriverState *bs;
6157 int is_file;
6158 int is_writable;
6159 int64_t base_offset;
6160 int64_t buf_offset; /* start of buffer when writing, end of buffer
6161 when reading */
6162 int buf_index;
6163 int buf_size; /* 0 when writing */
6164 uint8_t buf[IO_BUF_SIZE];
6167 QEMUFile *qemu_fopen(const char *filename, const char *mode)
6169 QEMUFile *f;
6171 f = qemu_mallocz(sizeof(QEMUFile));
6172 if (!f)
6173 return NULL;
6174 if (!strcmp(mode, "wb")) {
6175 f->is_writable = 1;
6176 } else if (!strcmp(mode, "rb")) {
6177 f->is_writable = 0;
6178 } else {
6179 goto fail;
6181 f->outfile = fopen(filename, mode);
6182 if (!f->outfile)
6183 goto fail;
6184 f->is_file = 1;
6185 return f;
6186 fail:
6187 if (f->outfile)
6188 fclose(f->outfile);
6189 qemu_free(f);
6190 return NULL;
6193 static QEMUFile *qemu_fopen_bdrv(BlockDriverState *bs, int64_t offset, int is_writable)
6195 QEMUFile *f;
6197 f = qemu_mallocz(sizeof(QEMUFile));
6198 if (!f)
6199 return NULL;
6200 f->is_file = 0;
6201 f->bs = bs;
6202 f->is_writable = is_writable;
6203 f->base_offset = offset;
6204 return f;
6207 void qemu_fflush(QEMUFile *f)
6209 if (!f->is_writable)
6210 return;
6211 if (f->buf_index > 0) {
6212 if (f->is_file) {
6213 fseek(f->outfile, f->buf_offset, SEEK_SET);
6214 fwrite(f->buf, 1, f->buf_index, f->outfile);
6215 } else {
6216 bdrv_pwrite(f->bs, f->base_offset + f->buf_offset,
6217 f->buf, f->buf_index);
6219 f->buf_offset += f->buf_index;
6220 f->buf_index = 0;
6224 static void qemu_fill_buffer(QEMUFile *f)
6226 int len;
6228 if (f->is_writable)
6229 return;
6230 if (f->is_file) {
6231 fseek(f->outfile, f->buf_offset, SEEK_SET);
6232 len = fread(f->buf, 1, IO_BUF_SIZE, f->outfile);
6233 if (len < 0)
6234 len = 0;
6235 } else {
6236 len = bdrv_pread(f->bs, f->base_offset + f->buf_offset,
6237 f->buf, IO_BUF_SIZE);
6238 if (len < 0)
6239 len = 0;
6241 f->buf_index = 0;
6242 f->buf_size = len;
6243 f->buf_offset += len;
6246 void qemu_fclose(QEMUFile *f)
6248 if (f->is_writable)
6249 qemu_fflush(f);
6250 if (f->is_file) {
6251 fclose(f->outfile);
6253 qemu_free(f);
6256 void qemu_put_buffer(QEMUFile *f, const uint8_t *buf, int size)
6258 int l;
6259 while (size > 0) {
6260 l = IO_BUF_SIZE - f->buf_index;
6261 if (l > size)
6262 l = size;
6263 memcpy(f->buf + f->buf_index, buf, l);
6264 f->buf_index += l;
6265 buf += l;
6266 size -= l;
6267 if (f->buf_index >= IO_BUF_SIZE)
6268 qemu_fflush(f);
6272 void qemu_put_byte(QEMUFile *f, int v)
6274 f->buf[f->buf_index++] = v;
6275 if (f->buf_index >= IO_BUF_SIZE)
6276 qemu_fflush(f);
6279 int qemu_get_buffer(QEMUFile *f, uint8_t *buf, int size1)
6281 int size, l;
6283 size = size1;
6284 while (size > 0) {
6285 l = f->buf_size - f->buf_index;
6286 if (l == 0) {
6287 qemu_fill_buffer(f);
6288 l = f->buf_size - f->buf_index;
6289 if (l == 0)
6290 break;
6292 if (l > size)
6293 l = size;
6294 memcpy(buf, f->buf + f->buf_index, l);
6295 f->buf_index += l;
6296 buf += l;
6297 size -= l;
6299 return size1 - size;
6302 int qemu_get_byte(QEMUFile *f)
6304 if (f->buf_index >= f->buf_size) {
6305 qemu_fill_buffer(f);
6306 if (f->buf_index >= f->buf_size)
6307 return 0;
6309 return f->buf[f->buf_index++];
6312 int64_t qemu_ftell(QEMUFile *f)
6314 return f->buf_offset - f->buf_size + f->buf_index;
6317 int64_t qemu_fseek(QEMUFile *f, int64_t pos, int whence)
6319 if (whence == SEEK_SET) {
6320 /* nothing to do */
6321 } else if (whence == SEEK_CUR) {
6322 pos += qemu_ftell(f);
6323 } else {
6324 /* SEEK_END not supported */
6325 return -1;
6327 if (f->is_writable) {
6328 qemu_fflush(f);
6329 f->buf_offset = pos;
6330 } else {
6331 f->buf_offset = pos;
6332 f->buf_index = 0;
6333 f->buf_size = 0;
6335 return pos;
6338 void qemu_put_be16(QEMUFile *f, unsigned int v)
6340 qemu_put_byte(f, v >> 8);
6341 qemu_put_byte(f, v);
6344 void qemu_put_be32(QEMUFile *f, unsigned int v)
6346 qemu_put_byte(f, v >> 24);
6347 qemu_put_byte(f, v >> 16);
6348 qemu_put_byte(f, v >> 8);
6349 qemu_put_byte(f, v);
6352 void qemu_put_be64(QEMUFile *f, uint64_t v)
6354 qemu_put_be32(f, v >> 32);
6355 qemu_put_be32(f, v);
6358 unsigned int qemu_get_be16(QEMUFile *f)
6360 unsigned int v;
6361 v = qemu_get_byte(f) << 8;
6362 v |= qemu_get_byte(f);
6363 return v;
6366 unsigned int qemu_get_be32(QEMUFile *f)
6368 unsigned int v;
6369 v = qemu_get_byte(f) << 24;
6370 v |= qemu_get_byte(f) << 16;
6371 v |= qemu_get_byte(f) << 8;
6372 v |= qemu_get_byte(f);
6373 return v;
6376 uint64_t qemu_get_be64(QEMUFile *f)
6378 uint64_t v;
6379 v = (uint64_t)qemu_get_be32(f) << 32;
6380 v |= qemu_get_be32(f);
6381 return v;
6384 typedef struct SaveStateEntry {
6385 char idstr[256];
6386 int instance_id;
6387 int version_id;
6388 SaveStateHandler *save_state;
6389 LoadStateHandler *load_state;
6390 void *opaque;
6391 struct SaveStateEntry *next;
6392 } SaveStateEntry;
6394 static SaveStateEntry *first_se;
6396 /* TODO: Individual devices generally have very little idea about the rest
6397 of the system, so instance_id should be removed/replaced.
6398 Meanwhile pass -1 as instance_id if you do not already have a clearly
6399 distinguishing id for all instances of your device class. */
6400 int register_savevm(const char *idstr,
6401 int instance_id,
6402 int version_id,
6403 SaveStateHandler *save_state,
6404 LoadStateHandler *load_state,
6405 void *opaque)
6407 SaveStateEntry *se, **pse;
6409 se = qemu_malloc(sizeof(SaveStateEntry));
6410 if (!se)
6411 return -1;
6412 pstrcpy(se->idstr, sizeof(se->idstr), idstr);
6413 se->instance_id = (instance_id == -1) ? 0 : instance_id;
6414 se->version_id = version_id;
6415 se->save_state = save_state;
6416 se->load_state = load_state;
6417 se->opaque = opaque;
6418 se->next = NULL;
6420 /* add at the end of list */
6421 pse = &first_se;
6422 while (*pse != NULL) {
6423 if (instance_id == -1
6424 && strcmp(se->idstr, (*pse)->idstr) == 0
6425 && se->instance_id <= (*pse)->instance_id)
6426 se->instance_id = (*pse)->instance_id + 1;
6427 pse = &(*pse)->next;
6429 *pse = se;
6430 return 0;
6433 #define QEMU_VM_FILE_MAGIC 0x5145564d
6434 #define QEMU_VM_FILE_VERSION 0x00000002
6436 static int qemu_savevm_state(QEMUFile *f)
6438 SaveStateEntry *se;
6439 int len, ret;
6440 int64_t cur_pos, len_pos, total_len_pos;
6442 qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
6443 qemu_put_be32(f, QEMU_VM_FILE_VERSION);
6444 total_len_pos = qemu_ftell(f);
6445 qemu_put_be64(f, 0); /* total size */
6447 for(se = first_se; se != NULL; se = se->next) {
6448 if (se->save_state == NULL)
6449 /* this one has a loader only, for backwards compatibility */
6450 continue;
6452 /* ID string */
6453 len = strlen(se->idstr);
6454 qemu_put_byte(f, len);
6455 qemu_put_buffer(f, (uint8_t *)se->idstr, len);
6457 qemu_put_be32(f, se->instance_id);
6458 qemu_put_be32(f, se->version_id);
6460 /* record size: filled later */
6461 len_pos = qemu_ftell(f);
6462 qemu_put_be32(f, 0);
6463 se->save_state(f, se->opaque);
6465 /* fill record size */
6466 cur_pos = qemu_ftell(f);
6467 len = cur_pos - len_pos - 4;
6468 qemu_fseek(f, len_pos, SEEK_SET);
6469 qemu_put_be32(f, len);
6470 qemu_fseek(f, cur_pos, SEEK_SET);
6472 cur_pos = qemu_ftell(f);
6473 qemu_fseek(f, total_len_pos, SEEK_SET);
6474 qemu_put_be64(f, cur_pos - total_len_pos - 8);
6475 qemu_fseek(f, cur_pos, SEEK_SET);
6477 ret = 0;
6478 return ret;
6481 static SaveStateEntry *find_se(const char *idstr, int instance_id)
6483 SaveStateEntry *se;
6485 for(se = first_se; se != NULL; se = se->next) {
6486 if (!strcmp(se->idstr, idstr) &&
6487 instance_id == se->instance_id)
6488 return se;
6490 return NULL;
6493 static int qemu_loadvm_state(QEMUFile *f)
6495 SaveStateEntry *se;
6496 int len, ret, instance_id, record_len, version_id;
6497 int64_t total_len, end_pos, cur_pos;
6498 unsigned int v;
6499 char idstr[256];
6501 v = qemu_get_be32(f);
6502 if (v != QEMU_VM_FILE_MAGIC)
6503 goto fail;
6504 v = qemu_get_be32(f);
6505 if (v != QEMU_VM_FILE_VERSION) {
6506 fail:
6507 ret = -1;
6508 goto the_end;
6510 total_len = qemu_get_be64(f);
6511 end_pos = total_len + qemu_ftell(f);
6512 for(;;) {
6513 if (qemu_ftell(f) >= end_pos)
6514 break;
6515 len = qemu_get_byte(f);
6516 qemu_get_buffer(f, (uint8_t *)idstr, len);
6517 idstr[len] = '\0';
6518 instance_id = qemu_get_be32(f);
6519 version_id = qemu_get_be32(f);
6520 record_len = qemu_get_be32(f);
6521 #if 0
6522 printf("idstr=%s instance=0x%x version=%d len=%d\n",
6523 idstr, instance_id, version_id, record_len);
6524 #endif
6525 cur_pos = qemu_ftell(f);
6526 se = find_se(idstr, instance_id);
6527 if (!se) {
6528 fprintf(stderr, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
6529 instance_id, idstr);
6530 } else {
6531 ret = se->load_state(f, se->opaque, version_id);
6532 if (ret < 0) {
6533 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
6534 instance_id, idstr);
6537 /* always seek to exact end of record */
6538 qemu_fseek(f, cur_pos + record_len, SEEK_SET);
6540 ret = 0;
6541 the_end:
6542 return ret;
6545 /* device can contain snapshots */
6546 static int bdrv_can_snapshot(BlockDriverState *bs)
6548 return (bs &&
6549 !bdrv_is_removable(bs) &&
6550 !bdrv_is_read_only(bs));
6553 /* device must be snapshots in order to have a reliable snapshot */
6554 static int bdrv_has_snapshot(BlockDriverState *bs)
6556 return (bs &&
6557 !bdrv_is_removable(bs) &&
6558 !bdrv_is_read_only(bs));
6561 static BlockDriverState *get_bs_snapshots(void)
6563 BlockDriverState *bs;
6564 int i;
6566 if (bs_snapshots)
6567 return bs_snapshots;
6568 for(i = 0; i <= nb_drives; i++) {
6569 bs = drives_table[i].bdrv;
6570 if (bdrv_can_snapshot(bs))
6571 goto ok;
6573 return NULL;
6575 bs_snapshots = bs;
6576 return bs;
6579 static int bdrv_snapshot_find(BlockDriverState *bs, QEMUSnapshotInfo *sn_info,
6580 const char *name)
6582 QEMUSnapshotInfo *sn_tab, *sn;
6583 int nb_sns, i, ret;
6585 ret = -ENOENT;
6586 nb_sns = bdrv_snapshot_list(bs, &sn_tab);
6587 if (nb_sns < 0)
6588 return ret;
6589 for(i = 0; i < nb_sns; i++) {
6590 sn = &sn_tab[i];
6591 if (!strcmp(sn->id_str, name) || !strcmp(sn->name, name)) {
6592 *sn_info = *sn;
6593 ret = 0;
6594 break;
6597 qemu_free(sn_tab);
6598 return ret;
6601 void do_savevm(const char *name)
6603 BlockDriverState *bs, *bs1;
6604 QEMUSnapshotInfo sn1, *sn = &sn1, old_sn1, *old_sn = &old_sn1;
6605 int must_delete, ret, i;
6606 BlockDriverInfo bdi1, *bdi = &bdi1;
6607 QEMUFile *f;
6608 int saved_vm_running;
6609 #ifdef _WIN32
6610 struct _timeb tb;
6611 #else
6612 struct timeval tv;
6613 #endif
6615 bs = get_bs_snapshots();
6616 if (!bs) {
6617 term_printf("No block device can accept snapshots\n");
6618 return;
6621 /* ??? Should this occur after vm_stop? */
6622 qemu_aio_flush();
6624 saved_vm_running = vm_running;
6625 vm_stop(0);
6627 must_delete = 0;
6628 if (name) {
6629 ret = bdrv_snapshot_find(bs, old_sn, name);
6630 if (ret >= 0) {
6631 must_delete = 1;
6634 memset(sn, 0, sizeof(*sn));
6635 if (must_delete) {
6636 pstrcpy(sn->name, sizeof(sn->name), old_sn->name);
6637 pstrcpy(sn->id_str, sizeof(sn->id_str), old_sn->id_str);
6638 } else {
6639 if (name)
6640 pstrcpy(sn->name, sizeof(sn->name), name);
6643 /* fill auxiliary fields */
6644 #ifdef _WIN32
6645 _ftime(&tb);
6646 sn->date_sec = tb.time;
6647 sn->date_nsec = tb.millitm * 1000000;
6648 #else
6649 gettimeofday(&tv, NULL);
6650 sn->date_sec = tv.tv_sec;
6651 sn->date_nsec = tv.tv_usec * 1000;
6652 #endif
6653 sn->vm_clock_nsec = qemu_get_clock(vm_clock);
6655 if (bdrv_get_info(bs, bdi) < 0 || bdi->vm_state_offset <= 0) {
6656 term_printf("Device %s does not support VM state snapshots\n",
6657 bdrv_get_device_name(bs));
6658 goto the_end;
6661 /* save the VM state */
6662 f = qemu_fopen_bdrv(bs, bdi->vm_state_offset, 1);
6663 if (!f) {
6664 term_printf("Could not open VM state file\n");
6665 goto the_end;
6667 ret = qemu_savevm_state(f);
6668 sn->vm_state_size = qemu_ftell(f);
6669 qemu_fclose(f);
6670 if (ret < 0) {
6671 term_printf("Error %d while writing VM\n", ret);
6672 goto the_end;
6675 /* create the snapshots */
6677 for(i = 0; i < nb_drives; i++) {
6678 bs1 = drives_table[i].bdrv;
6679 if (bdrv_has_snapshot(bs1)) {
6680 if (must_delete) {
6681 ret = bdrv_snapshot_delete(bs1, old_sn->id_str);
6682 if (ret < 0) {
6683 term_printf("Error while deleting snapshot on '%s'\n",
6684 bdrv_get_device_name(bs1));
6687 ret = bdrv_snapshot_create(bs1, sn);
6688 if (ret < 0) {
6689 term_printf("Error while creating snapshot on '%s'\n",
6690 bdrv_get_device_name(bs1));
6695 the_end:
6696 if (saved_vm_running)
6697 vm_start();
6700 void do_loadvm(const char *name)
6702 BlockDriverState *bs, *bs1;
6703 BlockDriverInfo bdi1, *bdi = &bdi1;
6704 QEMUFile *f;
6705 int i, ret;
6706 int saved_vm_running;
6708 bs = get_bs_snapshots();
6709 if (!bs) {
6710 term_printf("No block device supports snapshots\n");
6711 return;
6714 /* Flush all IO requests so they don't interfere with the new state. */
6715 qemu_aio_flush();
6717 saved_vm_running = vm_running;
6718 vm_stop(0);
6720 for(i = 0; i <= nb_drives; i++) {
6721 bs1 = drives_table[i].bdrv;
6722 if (bdrv_has_snapshot(bs1)) {
6723 ret = bdrv_snapshot_goto(bs1, name);
6724 if (ret < 0) {
6725 if (bs != bs1)
6726 term_printf("Warning: ");
6727 switch(ret) {
6728 case -ENOTSUP:
6729 term_printf("Snapshots not supported on device '%s'\n",
6730 bdrv_get_device_name(bs1));
6731 break;
6732 case -ENOENT:
6733 term_printf("Could not find snapshot '%s' on device '%s'\n",
6734 name, bdrv_get_device_name(bs1));
6735 break;
6736 default:
6737 term_printf("Error %d while activating snapshot on '%s'\n",
6738 ret, bdrv_get_device_name(bs1));
6739 break;
6741 /* fatal on snapshot block device */
6742 if (bs == bs1)
6743 goto the_end;
6748 if (bdrv_get_info(bs, bdi) < 0 || bdi->vm_state_offset <= 0) {
6749 term_printf("Device %s does not support VM state snapshots\n",
6750 bdrv_get_device_name(bs));
6751 return;
6754 /* restore the VM state */
6755 f = qemu_fopen_bdrv(bs, bdi->vm_state_offset, 0);
6756 if (!f) {
6757 term_printf("Could not open VM state file\n");
6758 goto the_end;
6760 ret = qemu_loadvm_state(f);
6761 qemu_fclose(f);
6762 if (ret < 0) {
6763 term_printf("Error %d while loading VM state\n", ret);
6765 the_end:
6766 if (saved_vm_running)
6767 vm_start();
6770 void do_delvm(const char *name)
6772 BlockDriverState *bs, *bs1;
6773 int i, ret;
6775 bs = get_bs_snapshots();
6776 if (!bs) {
6777 term_printf("No block device supports snapshots\n");
6778 return;
6781 for(i = 0; i <= nb_drives; i++) {
6782 bs1 = drives_table[i].bdrv;
6783 if (bdrv_has_snapshot(bs1)) {
6784 ret = bdrv_snapshot_delete(bs1, name);
6785 if (ret < 0) {
6786 if (ret == -ENOTSUP)
6787 term_printf("Snapshots not supported on device '%s'\n",
6788 bdrv_get_device_name(bs1));
6789 else
6790 term_printf("Error %d while deleting snapshot on '%s'\n",
6791 ret, bdrv_get_device_name(bs1));
6797 void do_info_snapshots(void)
6799 BlockDriverState *bs, *bs1;
6800 QEMUSnapshotInfo *sn_tab, *sn;
6801 int nb_sns, i;
6802 char buf[256];
6804 bs = get_bs_snapshots();
6805 if (!bs) {
6806 term_printf("No available block device supports snapshots\n");
6807 return;
6809 term_printf("Snapshot devices:");
6810 for(i = 0; i <= nb_drives; i++) {
6811 bs1 = drives_table[i].bdrv;
6812 if (bdrv_has_snapshot(bs1)) {
6813 if (bs == bs1)
6814 term_printf(" %s", bdrv_get_device_name(bs1));
6817 term_printf("\n");
6819 nb_sns = bdrv_snapshot_list(bs, &sn_tab);
6820 if (nb_sns < 0) {
6821 term_printf("bdrv_snapshot_list: error %d\n", nb_sns);
6822 return;
6824 term_printf("Snapshot list (from %s):\n", bdrv_get_device_name(bs));
6825 term_printf("%s\n", bdrv_snapshot_dump(buf, sizeof(buf), NULL));
6826 for(i = 0; i < nb_sns; i++) {
6827 sn = &sn_tab[i];
6828 term_printf("%s\n", bdrv_snapshot_dump(buf, sizeof(buf), sn));
6830 qemu_free(sn_tab);
6833 /***********************************************************/
6834 /* ram save/restore */
6836 static int ram_get_page(QEMUFile *f, uint8_t *buf, int len)
6838 int v;
6840 v = qemu_get_byte(f);
6841 switch(v) {
6842 case 0:
6843 if (qemu_get_buffer(f, buf, len) != len)
6844 return -EIO;
6845 break;
6846 case 1:
6847 v = qemu_get_byte(f);
6848 memset(buf, v, len);
6849 break;
6850 default:
6851 return -EINVAL;
6853 return 0;
6856 static int ram_load_v1(QEMUFile *f, void *opaque)
6858 int ret;
6859 ram_addr_t i;
6861 if (qemu_get_be32(f) != phys_ram_size)
6862 return -EINVAL;
6863 for(i = 0; i < phys_ram_size; i+= TARGET_PAGE_SIZE) {
6864 ret = ram_get_page(f, phys_ram_base + i, TARGET_PAGE_SIZE);
6865 if (ret)
6866 return ret;
6868 return 0;
6871 #define BDRV_HASH_BLOCK_SIZE 1024
6872 #define IOBUF_SIZE 4096
6873 #define RAM_CBLOCK_MAGIC 0xfabe
6875 typedef struct RamCompressState {
6876 z_stream zstream;
6877 QEMUFile *f;
6878 uint8_t buf[IOBUF_SIZE];
6879 } RamCompressState;
6881 static int ram_compress_open(RamCompressState *s, QEMUFile *f)
6883 int ret;
6884 memset(s, 0, sizeof(*s));
6885 s->f = f;
6886 ret = deflateInit2(&s->zstream, 1,
6887 Z_DEFLATED, 15,
6888 9, Z_DEFAULT_STRATEGY);
6889 if (ret != Z_OK)
6890 return -1;
6891 s->zstream.avail_out = IOBUF_SIZE;
6892 s->zstream.next_out = s->buf;
6893 return 0;
6896 static void ram_put_cblock(RamCompressState *s, const uint8_t *buf, int len)
6898 qemu_put_be16(s->f, RAM_CBLOCK_MAGIC);
6899 qemu_put_be16(s->f, len);
6900 qemu_put_buffer(s->f, buf, len);
6903 static int ram_compress_buf(RamCompressState *s, const uint8_t *buf, int len)
6905 int ret;
6907 s->zstream.avail_in = len;
6908 s->zstream.next_in = (uint8_t *)buf;
6909 while (s->zstream.avail_in > 0) {
6910 ret = deflate(&s->zstream, Z_NO_FLUSH);
6911 if (ret != Z_OK)
6912 return -1;
6913 if (s->zstream.avail_out == 0) {
6914 ram_put_cblock(s, s->buf, IOBUF_SIZE);
6915 s->zstream.avail_out = IOBUF_SIZE;
6916 s->zstream.next_out = s->buf;
6919 return 0;
6922 static void ram_compress_close(RamCompressState *s)
6924 int len, ret;
6926 /* compress last bytes */
6927 for(;;) {
6928 ret = deflate(&s->zstream, Z_FINISH);
6929 if (ret == Z_OK || ret == Z_STREAM_END) {
6930 len = IOBUF_SIZE - s->zstream.avail_out;
6931 if (len > 0) {
6932 ram_put_cblock(s, s->buf, len);
6934 s->zstream.avail_out = IOBUF_SIZE;
6935 s->zstream.next_out = s->buf;
6936 if (ret == Z_STREAM_END)
6937 break;
6938 } else {
6939 goto fail;
6942 fail:
6943 deflateEnd(&s->zstream);
6946 typedef struct RamDecompressState {
6947 z_stream zstream;
6948 QEMUFile *f;
6949 uint8_t buf[IOBUF_SIZE];
6950 } RamDecompressState;
6952 static int ram_decompress_open(RamDecompressState *s, QEMUFile *f)
6954 int ret;
6955 memset(s, 0, sizeof(*s));
6956 s->f = f;
6957 ret = inflateInit(&s->zstream);
6958 if (ret != Z_OK)
6959 return -1;
6960 return 0;
6963 static int ram_decompress_buf(RamDecompressState *s, uint8_t *buf, int len)
6965 int ret, clen;
6967 s->zstream.avail_out = len;
6968 s->zstream.next_out = buf;
6969 while (s->zstream.avail_out > 0) {
6970 if (s->zstream.avail_in == 0) {
6971 if (qemu_get_be16(s->f) != RAM_CBLOCK_MAGIC)
6972 return -1;
6973 clen = qemu_get_be16(s->f);
6974 if (clen > IOBUF_SIZE)
6975 return -1;
6976 qemu_get_buffer(s->f, s->buf, clen);
6977 s->zstream.avail_in = clen;
6978 s->zstream.next_in = s->buf;
6980 ret = inflate(&s->zstream, Z_PARTIAL_FLUSH);
6981 if (ret != Z_OK && ret != Z_STREAM_END) {
6982 return -1;
6985 return 0;
6988 static void ram_decompress_close(RamDecompressState *s)
6990 inflateEnd(&s->zstream);
6993 static void ram_save(QEMUFile *f, void *opaque)
6995 ram_addr_t i;
6996 RamCompressState s1, *s = &s1;
6997 uint8_t buf[10];
6999 qemu_put_be32(f, phys_ram_size);
7000 if (ram_compress_open(s, f) < 0)
7001 return;
7002 for(i = 0; i < phys_ram_size; i+= BDRV_HASH_BLOCK_SIZE) {
7003 #if 0
7004 if (tight_savevm_enabled) {
7005 int64_t sector_num;
7006 int j;
7008 /* find if the memory block is available on a virtual
7009 block device */
7010 sector_num = -1;
7011 for(j = 0; j < nb_drives; j++) {
7012 sector_num = bdrv_hash_find(drives_table[j].bdrv,
7013 phys_ram_base + i,
7014 BDRV_HASH_BLOCK_SIZE);
7015 if (sector_num >= 0)
7016 break;
7018 if (j == nb_drives)
7019 goto normal_compress;
7020 buf[0] = 1;
7021 buf[1] = j;
7022 cpu_to_be64wu((uint64_t *)(buf + 2), sector_num);
7023 ram_compress_buf(s, buf, 10);
7024 } else
7025 #endif
7027 // normal_compress:
7028 buf[0] = 0;
7029 ram_compress_buf(s, buf, 1);
7030 ram_compress_buf(s, phys_ram_base + i, BDRV_HASH_BLOCK_SIZE);
7033 ram_compress_close(s);
7036 static int ram_load(QEMUFile *f, void *opaque, int version_id)
7038 RamDecompressState s1, *s = &s1;
7039 uint8_t buf[10];
7040 ram_addr_t i;
7042 if (version_id == 1)
7043 return ram_load_v1(f, opaque);
7044 if (version_id != 2)
7045 return -EINVAL;
7046 if (qemu_get_be32(f) != phys_ram_size)
7047 return -EINVAL;
7048 if (ram_decompress_open(s, f) < 0)
7049 return -EINVAL;
7050 for(i = 0; i < phys_ram_size; i+= BDRV_HASH_BLOCK_SIZE) {
7051 if (ram_decompress_buf(s, buf, 1) < 0) {
7052 fprintf(stderr, "Error while reading ram block header\n");
7053 goto error;
7055 if (buf[0] == 0) {
7056 if (ram_decompress_buf(s, phys_ram_base + i, BDRV_HASH_BLOCK_SIZE) < 0) {
7057 fprintf(stderr, "Error while reading ram block address=0x%08" PRIx64, (uint64_t)i);
7058 goto error;
7060 } else
7061 #if 0
7062 if (buf[0] == 1) {
7063 int bs_index;
7064 int64_t sector_num;
7066 ram_decompress_buf(s, buf + 1, 9);
7067 bs_index = buf[1];
7068 sector_num = be64_to_cpupu((const uint64_t *)(buf + 2));
7069 if (bs_index >= nb_drives) {
7070 fprintf(stderr, "Invalid block device index %d\n", bs_index);
7071 goto error;
7073 if (bdrv_read(drives_table[bs_index].bdrv, sector_num,
7074 phys_ram_base + i,
7075 BDRV_HASH_BLOCK_SIZE / 512) < 0) {
7076 fprintf(stderr, "Error while reading sector %d:%" PRId64 "\n",
7077 bs_index, sector_num);
7078 goto error;
7080 } else
7081 #endif
7083 error:
7084 printf("Error block header\n");
7085 return -EINVAL;
7088 ram_decompress_close(s);
7089 return 0;
7092 /***********************************************************/
7093 /* bottom halves (can be seen as timers which expire ASAP) */
7095 struct QEMUBH {
7096 QEMUBHFunc *cb;
7097 void *opaque;
7098 int scheduled;
7099 QEMUBH *next;
7102 static QEMUBH *first_bh = NULL;
7104 QEMUBH *qemu_bh_new(QEMUBHFunc *cb, void *opaque)
7106 QEMUBH *bh;
7107 bh = qemu_mallocz(sizeof(QEMUBH));
7108 if (!bh)
7109 return NULL;
7110 bh->cb = cb;
7111 bh->opaque = opaque;
7112 return bh;
7115 int qemu_bh_poll(void)
7117 QEMUBH *bh, **pbh;
7118 int ret;
7120 ret = 0;
7121 for(;;) {
7122 pbh = &first_bh;
7123 bh = *pbh;
7124 if (!bh)
7125 break;
7126 ret = 1;
7127 *pbh = bh->next;
7128 bh->scheduled = 0;
7129 bh->cb(bh->opaque);
7131 return ret;
7134 void qemu_bh_schedule(QEMUBH *bh)
7136 CPUState *env = cpu_single_env;
7137 if (bh->scheduled)
7138 return;
7139 bh->scheduled = 1;
7140 bh->next = first_bh;
7141 first_bh = bh;
7143 /* stop the currently executing CPU to execute the BH ASAP */
7144 if (env) {
7145 cpu_interrupt(env, CPU_INTERRUPT_EXIT);
7149 void qemu_bh_cancel(QEMUBH *bh)
7151 QEMUBH **pbh;
7152 if (bh->scheduled) {
7153 pbh = &first_bh;
7154 while (*pbh != bh)
7155 pbh = &(*pbh)->next;
7156 *pbh = bh->next;
7157 bh->scheduled = 0;
7161 void qemu_bh_delete(QEMUBH *bh)
7163 qemu_bh_cancel(bh);
7164 qemu_free(bh);
7167 /***********************************************************/
7168 /* machine registration */
7170 QEMUMachine *first_machine = NULL;
7172 int qemu_register_machine(QEMUMachine *m)
7174 QEMUMachine **pm;
7175 pm = &first_machine;
7176 while (*pm != NULL)
7177 pm = &(*pm)->next;
7178 m->next = NULL;
7179 *pm = m;
7180 return 0;
7183 static QEMUMachine *find_machine(const char *name)
7185 QEMUMachine *m;
7187 for(m = first_machine; m != NULL; m = m->next) {
7188 if (!strcmp(m->name, name))
7189 return m;
7191 return NULL;
7194 /***********************************************************/
7195 /* main execution loop */
7197 static void gui_update(void *opaque)
7199 DisplayState *ds = opaque;
7200 ds->dpy_refresh(ds);
7201 qemu_mod_timer(ds->gui_timer,
7202 (ds->gui_timer_interval ?
7203 ds->gui_timer_interval :
7204 GUI_REFRESH_INTERVAL)
7205 + qemu_get_clock(rt_clock));
7208 struct vm_change_state_entry {
7209 VMChangeStateHandler *cb;
7210 void *opaque;
7211 LIST_ENTRY (vm_change_state_entry) entries;
7214 static LIST_HEAD(vm_change_state_head, vm_change_state_entry) vm_change_state_head;
7216 VMChangeStateEntry *qemu_add_vm_change_state_handler(VMChangeStateHandler *cb,
7217 void *opaque)
7219 VMChangeStateEntry *e;
7221 e = qemu_mallocz(sizeof (*e));
7222 if (!e)
7223 return NULL;
7225 e->cb = cb;
7226 e->opaque = opaque;
7227 LIST_INSERT_HEAD(&vm_change_state_head, e, entries);
7228 return e;
7231 void qemu_del_vm_change_state_handler(VMChangeStateEntry *e)
7233 LIST_REMOVE (e, entries);
7234 qemu_free (e);
7237 static void vm_state_notify(int running)
7239 VMChangeStateEntry *e;
7241 for (e = vm_change_state_head.lh_first; e; e = e->entries.le_next) {
7242 e->cb(e->opaque, running);
7246 /* XXX: support several handlers */
7247 static VMStopHandler *vm_stop_cb;
7248 static void *vm_stop_opaque;
7250 int qemu_add_vm_stop_handler(VMStopHandler *cb, void *opaque)
7252 vm_stop_cb = cb;
7253 vm_stop_opaque = opaque;
7254 return 0;
7257 void qemu_del_vm_stop_handler(VMStopHandler *cb, void *opaque)
7259 vm_stop_cb = NULL;
7262 void vm_start(void)
7264 if (!vm_running) {
7265 cpu_enable_ticks();
7266 vm_running = 1;
7267 vm_state_notify(1);
7268 qemu_rearm_alarm_timer(alarm_timer);
7272 void vm_stop(int reason)
7274 if (vm_running) {
7275 cpu_disable_ticks();
7276 vm_running = 0;
7277 if (reason != 0) {
7278 if (vm_stop_cb) {
7279 vm_stop_cb(vm_stop_opaque, reason);
7282 vm_state_notify(0);
7286 /* reset/shutdown handler */
7288 typedef struct QEMUResetEntry {
7289 QEMUResetHandler *func;
7290 void *opaque;
7291 struct QEMUResetEntry *next;
7292 } QEMUResetEntry;
7294 static QEMUResetEntry *first_reset_entry;
7295 static int reset_requested;
7296 static int shutdown_requested;
7297 static int powerdown_requested;
7299 int qemu_shutdown_requested(void)
7301 int r = shutdown_requested;
7302 shutdown_requested = 0;
7303 return r;
7306 int qemu_reset_requested(void)
7308 int r = reset_requested;
7309 reset_requested = 0;
7310 return r;
7313 int qemu_powerdown_requested(void)
7315 int r = powerdown_requested;
7316 powerdown_requested = 0;
7317 return r;
7320 void qemu_register_reset(QEMUResetHandler *func, void *opaque)
7322 QEMUResetEntry **pre, *re;
7324 pre = &first_reset_entry;
7325 while (*pre != NULL)
7326 pre = &(*pre)->next;
7327 re = qemu_mallocz(sizeof(QEMUResetEntry));
7328 re->func = func;
7329 re->opaque = opaque;
7330 re->next = NULL;
7331 *pre = re;
7334 void qemu_system_reset(void)
7336 QEMUResetEntry *re;
7338 /* reset all devices */
7339 for(re = first_reset_entry; re != NULL; re = re->next) {
7340 re->func(re->opaque);
7344 void qemu_system_reset_request(void)
7346 if (no_reboot) {
7347 shutdown_requested = 1;
7348 } else {
7349 reset_requested = 1;
7351 if (cpu_single_env)
7352 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
7355 void qemu_system_shutdown_request(void)
7357 shutdown_requested = 1;
7358 if (cpu_single_env)
7359 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
7362 void qemu_system_powerdown_request(void)
7364 powerdown_requested = 1;
7365 if (cpu_single_env)
7366 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
7369 void main_loop_wait(int timeout)
7371 IOHandlerRecord *ioh;
7372 fd_set rfds, wfds, xfds;
7373 int ret, nfds;
7374 #ifdef _WIN32
7375 int ret2, i;
7376 #endif
7377 struct timeval tv;
7378 PollingEntry *pe;
7381 /* XXX: need to suppress polling by better using win32 events */
7382 ret = 0;
7383 for(pe = first_polling_entry; pe != NULL; pe = pe->next) {
7384 ret |= pe->func(pe->opaque);
7386 #ifdef _WIN32
7387 if (ret == 0) {
7388 int err;
7389 WaitObjects *w = &wait_objects;
7391 ret = WaitForMultipleObjects(w->num, w->events, FALSE, timeout);
7392 if (WAIT_OBJECT_0 + 0 <= ret && ret <= WAIT_OBJECT_0 + w->num - 1) {
7393 if (w->func[ret - WAIT_OBJECT_0])
7394 w->func[ret - WAIT_OBJECT_0](w->opaque[ret - WAIT_OBJECT_0]);
7396 /* Check for additional signaled events */
7397 for(i = (ret - WAIT_OBJECT_0 + 1); i < w->num; i++) {
7399 /* Check if event is signaled */
7400 ret2 = WaitForSingleObject(w->events[i], 0);
7401 if(ret2 == WAIT_OBJECT_0) {
7402 if (w->func[i])
7403 w->func[i](w->opaque[i]);
7404 } else if (ret2 == WAIT_TIMEOUT) {
7405 } else {
7406 err = GetLastError();
7407 fprintf(stderr, "WaitForSingleObject error %d %d\n", i, err);
7410 } else if (ret == WAIT_TIMEOUT) {
7411 } else {
7412 err = GetLastError();
7413 fprintf(stderr, "WaitForMultipleObjects error %d %d\n", ret, err);
7416 #endif
7417 /* poll any events */
7418 /* XXX: separate device handlers from system ones */
7419 nfds = -1;
7420 FD_ZERO(&rfds);
7421 FD_ZERO(&wfds);
7422 FD_ZERO(&xfds);
7423 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
7424 if (ioh->deleted)
7425 continue;
7426 if (ioh->fd_read &&
7427 (!ioh->fd_read_poll ||
7428 ioh->fd_read_poll(ioh->opaque) != 0)) {
7429 FD_SET(ioh->fd, &rfds);
7430 if (ioh->fd > nfds)
7431 nfds = ioh->fd;
7433 if (ioh->fd_write) {
7434 FD_SET(ioh->fd, &wfds);
7435 if (ioh->fd > nfds)
7436 nfds = ioh->fd;
7440 tv.tv_sec = 0;
7441 #ifdef _WIN32
7442 tv.tv_usec = 0;
7443 #else
7444 tv.tv_usec = timeout * 1000;
7445 #endif
7446 #if defined(CONFIG_SLIRP)
7447 if (slirp_inited) {
7448 slirp_select_fill(&nfds, &rfds, &wfds, &xfds);
7450 #endif
7451 ret = select(nfds + 1, &rfds, &wfds, &xfds, &tv);
7452 if (ret > 0) {
7453 IOHandlerRecord **pioh;
7455 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
7456 if (!ioh->deleted && ioh->fd_read && FD_ISSET(ioh->fd, &rfds)) {
7457 ioh->fd_read(ioh->opaque);
7459 if (!ioh->deleted && ioh->fd_write && FD_ISSET(ioh->fd, &wfds)) {
7460 ioh->fd_write(ioh->opaque);
7464 /* remove deleted IO handlers */
7465 pioh = &first_io_handler;
7466 while (*pioh) {
7467 ioh = *pioh;
7468 if (ioh->deleted) {
7469 *pioh = ioh->next;
7470 qemu_free(ioh);
7471 } else
7472 pioh = &ioh->next;
7475 #if defined(CONFIG_SLIRP)
7476 if (slirp_inited) {
7477 if (ret < 0) {
7478 FD_ZERO(&rfds);
7479 FD_ZERO(&wfds);
7480 FD_ZERO(&xfds);
7482 slirp_select_poll(&rfds, &wfds, &xfds);
7484 #endif
7486 if (vm_running) {
7487 if (likely(!(cur_cpu->singlestep_enabled & SSTEP_NOTIMER)))
7488 qemu_run_timers(&active_timers[QEMU_TIMER_VIRTUAL],
7489 qemu_get_clock(vm_clock));
7490 /* run dma transfers, if any */
7491 DMA_run();
7494 /* real time timers */
7495 qemu_run_timers(&active_timers[QEMU_TIMER_REALTIME],
7496 qemu_get_clock(rt_clock));
7498 if (alarm_timer->flags & ALARM_FLAG_EXPIRED) {
7499 alarm_timer->flags &= ~(ALARM_FLAG_EXPIRED);
7500 qemu_rearm_alarm_timer(alarm_timer);
7503 /* Check bottom-halves last in case any of the earlier events triggered
7504 them. */
7505 qemu_bh_poll();
7509 static int main_loop(void)
7511 int ret, timeout;
7512 #ifdef CONFIG_PROFILER
7513 int64_t ti;
7514 #endif
7515 CPUState *env;
7517 cur_cpu = first_cpu;
7518 next_cpu = cur_cpu->next_cpu ?: first_cpu;
7519 for(;;) {
7520 if (vm_running) {
7522 for(;;) {
7523 /* get next cpu */
7524 env = next_cpu;
7525 #ifdef CONFIG_PROFILER
7526 ti = profile_getclock();
7527 #endif
7528 if (use_icount) {
7529 int64_t count;
7530 int decr;
7531 qemu_icount -= (env->icount_decr.u16.low + env->icount_extra);
7532 env->icount_decr.u16.low = 0;
7533 env->icount_extra = 0;
7534 count = qemu_next_deadline();
7535 count = (count + (1 << icount_time_shift) - 1)
7536 >> icount_time_shift;
7537 qemu_icount += count;
7538 decr = (count > 0xffff) ? 0xffff : count;
7539 count -= decr;
7540 env->icount_decr.u16.low = decr;
7541 env->icount_extra = count;
7543 ret = cpu_exec(env);
7544 #ifdef CONFIG_PROFILER
7545 qemu_time += profile_getclock() - ti;
7546 #endif
7547 if (use_icount) {
7548 /* Fold pending instructions back into the
7549 instruction counter, and clear the interrupt flag. */
7550 qemu_icount -= (env->icount_decr.u16.low
7551 + env->icount_extra);
7552 env->icount_decr.u32 = 0;
7553 env->icount_extra = 0;
7555 next_cpu = env->next_cpu ?: first_cpu;
7556 if (event_pending && likely(ret != EXCP_DEBUG)) {
7557 ret = EXCP_INTERRUPT;
7558 event_pending = 0;
7559 break;
7561 if (ret == EXCP_HLT) {
7562 /* Give the next CPU a chance to run. */
7563 cur_cpu = env;
7564 continue;
7566 if (ret != EXCP_HALTED)
7567 break;
7568 /* all CPUs are halted ? */
7569 if (env == cur_cpu)
7570 break;
7572 cur_cpu = env;
7574 if (shutdown_requested) {
7575 ret = EXCP_INTERRUPT;
7576 if (no_shutdown) {
7577 vm_stop(0);
7578 no_shutdown = 0;
7580 else
7581 break;
7583 if (reset_requested) {
7584 reset_requested = 0;
7585 qemu_system_reset();
7586 ret = EXCP_INTERRUPT;
7588 if (powerdown_requested) {
7589 powerdown_requested = 0;
7590 qemu_system_powerdown();
7591 ret = EXCP_INTERRUPT;
7593 if (unlikely(ret == EXCP_DEBUG)) {
7594 vm_stop(EXCP_DEBUG);
7596 /* If all cpus are halted then wait until the next IRQ */
7597 /* XXX: use timeout computed from timers */
7598 if (ret == EXCP_HALTED) {
7599 if (use_icount) {
7600 int64_t add;
7601 int64_t delta;
7602 /* Advance virtual time to the next event. */
7603 if (use_icount == 1) {
7604 /* When not using an adaptive execution frequency
7605 we tend to get badly out of sync with real time,
7606 so just delay for a reasonable amount of time. */
7607 delta = 0;
7608 } else {
7609 delta = cpu_get_icount() - cpu_get_clock();
7611 if (delta > 0) {
7612 /* If virtual time is ahead of real time then just
7613 wait for IO. */
7614 timeout = (delta / 1000000) + 1;
7615 } else {
7616 /* Wait for either IO to occur or the next
7617 timer event. */
7618 add = qemu_next_deadline();
7619 /* We advance the timer before checking for IO.
7620 Limit the amount we advance so that early IO
7621 activity won't get the guest too far ahead. */
7622 if (add > 10000000)
7623 add = 10000000;
7624 delta += add;
7625 add = (add + (1 << icount_time_shift) - 1)
7626 >> icount_time_shift;
7627 qemu_icount += add;
7628 timeout = delta / 1000000;
7629 if (timeout < 0)
7630 timeout = 0;
7632 } else {
7633 timeout = 10;
7635 } else {
7636 timeout = 0;
7638 } else {
7639 if (shutdown_requested)
7640 break;
7641 timeout = 10;
7643 #ifdef CONFIG_PROFILER
7644 ti = profile_getclock();
7645 #endif
7646 main_loop_wait(timeout);
7647 #ifdef CONFIG_PROFILER
7648 dev_time += profile_getclock() - ti;
7649 #endif
7651 cpu_disable_ticks();
7652 return ret;
7655 static void help(int exitcode)
7657 printf("QEMU PC emulator version " QEMU_VERSION ", Copyright (c) 2003-2008 Fabrice Bellard\n"
7658 "usage: %s [options] [disk_image]\n"
7659 "\n"
7660 "'disk_image' is a raw hard image image for IDE hard disk 0\n"
7661 "\n"
7662 "Standard options:\n"
7663 "-M machine select emulated machine (-M ? for list)\n"
7664 "-cpu cpu select CPU (-cpu ? for list)\n"
7665 "-fda/-fdb file use 'file' as floppy disk 0/1 image\n"
7666 "-hda/-hdb file use 'file' as IDE hard disk 0/1 image\n"
7667 "-hdc/-hdd file use 'file' as IDE hard disk 2/3 image\n"
7668 "-cdrom file use 'file' as IDE cdrom image (cdrom is ide1 master)\n"
7669 "-drive [file=file][,if=type][,bus=n][,unit=m][,media=d][,index=i]\n"
7670 " [,cyls=c,heads=h,secs=s[,trans=t]][,snapshot=on|off]\n"
7671 " [,cache=on|off][,format=f]\n"
7672 " use 'file' as a drive image\n"
7673 "-mtdblock file use 'file' as on-board Flash memory image\n"
7674 "-sd file use 'file' as SecureDigital card image\n"
7675 "-pflash file use 'file' as a parallel flash image\n"
7676 "-boot [a|c|d|n] boot on floppy (a), hard disk (c), CD-ROM (d), or network (n)\n"
7677 "-snapshot write to temporary files instead of disk image files\n"
7678 #ifdef CONFIG_SDL
7679 "-no-frame open SDL window without a frame and window decorations\n"
7680 "-alt-grab use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt)\n"
7681 "-no-quit disable SDL window close capability\n"
7682 #endif
7683 #ifdef TARGET_I386
7684 "-no-fd-bootchk disable boot signature checking for floppy disks\n"
7685 #endif
7686 "-m megs set virtual RAM size to megs MB [default=%d]\n"
7687 "-smp n set the number of CPUs to 'n' [default=1]\n"
7688 "-nographic disable graphical output and redirect serial I/Os to console\n"
7689 "-portrait rotate graphical output 90 deg left (only PXA LCD)\n"
7690 #ifndef _WIN32
7691 "-k language use keyboard layout (for example \"fr\" for French)\n"
7692 #endif
7693 #ifdef HAS_AUDIO
7694 "-audio-help print list of audio drivers and their options\n"
7695 "-soundhw c1,... enable audio support\n"
7696 " and only specified sound cards (comma separated list)\n"
7697 " use -soundhw ? to get the list of supported cards\n"
7698 " use -soundhw all to enable all of them\n"
7699 #endif
7700 "-localtime set the real time clock to local time [default=utc]\n"
7701 "-full-screen start in full screen\n"
7702 #ifdef TARGET_I386
7703 "-win2k-hack use it when installing Windows 2000 to avoid a disk full bug\n"
7704 #endif
7705 "-usb enable the USB driver (will be the default soon)\n"
7706 "-usbdevice name add the host or guest USB device 'name'\n"
7707 #if defined(TARGET_PPC) || defined(TARGET_SPARC)
7708 "-g WxH[xDEPTH] Set the initial graphical resolution and depth\n"
7709 #endif
7710 "-name string set the name of the guest\n"
7711 "\n"
7712 "Network options:\n"
7713 "-net nic[,vlan=n][,macaddr=addr][,model=type]\n"
7714 " create a new Network Interface Card and connect it to VLAN 'n'\n"
7715 #ifdef CONFIG_SLIRP
7716 "-net user[,vlan=n][,hostname=host]\n"
7717 " connect the user mode network stack to VLAN 'n' and send\n"
7718 " hostname 'host' to DHCP clients\n"
7719 #endif
7720 #ifdef _WIN32
7721 "-net tap[,vlan=n],ifname=name\n"
7722 " connect the host TAP network interface to VLAN 'n'\n"
7723 #else
7724 "-net tap[,vlan=n][,fd=h][,ifname=name][,script=file][,downscript=dfile]\n"
7725 " connect the host TAP network interface to VLAN 'n' and use the\n"
7726 " network scripts 'file' (default=%s)\n"
7727 " and 'dfile' (default=%s);\n"
7728 " use '[down]script=no' to disable script execution;\n"
7729 " use 'fd=h' to connect to an already opened TAP interface\n"
7730 #endif
7731 "-net socket[,vlan=n][,fd=h][,listen=[host]:port][,connect=host:port]\n"
7732 " connect the vlan 'n' to another VLAN using a socket connection\n"
7733 "-net socket[,vlan=n][,fd=h][,mcast=maddr:port]\n"
7734 " connect the vlan 'n' to multicast maddr and port\n"
7735 #ifdef CONFIG_VDE
7736 "-net vde[,vlan=n][,sock=socketpath][,port=n][,group=groupname][,mode=octalmode]\n"
7737 " connect the vlan 'n' to port 'n' of a vde switch running\n"
7738 " on host and listening for incoming connections on 'socketpath'.\n"
7739 " Use group 'groupname' and mode 'octalmode' to change default\n"
7740 " ownership and permissions for communication port.\n"
7741 #endif
7742 "-net none use it alone to have zero network devices; if no -net option\n"
7743 " is provided, the default is '-net nic -net user'\n"
7744 "\n"
7745 #ifdef CONFIG_SLIRP
7746 "-tftp dir allow tftp access to files in dir [-net user]\n"
7747 "-bootp file advertise file in BOOTP replies\n"
7748 #ifndef _WIN32
7749 "-smb dir allow SMB access to files in 'dir' [-net user]\n"
7750 #endif
7751 "-redir [tcp|udp]:host-port:[guest-host]:guest-port\n"
7752 " redirect TCP or UDP connections from host to guest [-net user]\n"
7753 #endif
7754 "\n"
7755 "Linux boot specific:\n"
7756 "-kernel bzImage use 'bzImage' as kernel image\n"
7757 "-append cmdline use 'cmdline' as kernel command line\n"
7758 "-initrd file use 'file' as initial ram disk\n"
7759 "\n"
7760 "Debug/Expert options:\n"
7761 "-monitor dev redirect the monitor to char device 'dev'\n"
7762 "-serial dev redirect the serial port to char device 'dev'\n"
7763 "-parallel dev redirect the parallel port to char device 'dev'\n"
7764 "-pidfile file Write PID to 'file'\n"
7765 "-S freeze CPU at startup (use 'c' to start execution)\n"
7766 "-s wait gdb connection to port\n"
7767 "-p port set gdb connection port [default=%s]\n"
7768 "-d item1,... output log to %s (use -d ? for a list of log items)\n"
7769 "-hdachs c,h,s[,t] force hard disk 0 physical geometry and the optional BIOS\n"
7770 " translation (t=none or lba) (usually qemu can guess them)\n"
7771 "-L path set the directory for the BIOS, VGA BIOS and keymaps\n"
7772 #ifdef USE_KQEMU
7773 "-kernel-kqemu enable KQEMU full virtualization (default is user mode only)\n"
7774 "-no-kqemu disable KQEMU kernel module usage\n"
7775 #endif
7776 #ifdef TARGET_I386
7777 "-std-vga simulate a standard VGA card with VESA Bochs Extensions\n"
7778 " (default is CL-GD5446 PCI VGA)\n"
7779 "-no-acpi disable ACPI\n"
7780 #endif
7781 #ifdef CONFIG_CURSES
7782 "-curses use a curses/ncurses interface instead of SDL\n"
7783 #endif
7784 "-no-reboot exit instead of rebooting\n"
7785 "-no-shutdown stop before shutdown\n"
7786 "-loadvm [tag|id] start right away with a saved state (loadvm in monitor)\n"
7787 "-vnc display start a VNC server on display\n"
7788 #ifndef _WIN32
7789 "-daemonize daemonize QEMU after initializing\n"
7790 #endif
7791 "-option-rom rom load a file, rom, into the option ROM space\n"
7792 #ifdef TARGET_SPARC
7793 "-prom-env variable=value set OpenBIOS nvram variables\n"
7794 #endif
7795 "-clock force the use of the given methods for timer alarm.\n"
7796 " To see what timers are available use -clock ?\n"
7797 "-startdate select initial date of the clock\n"
7798 "-icount [N|auto]\n"
7799 " Enable virtual instruction counter with 2^N clock ticks per instruction\n"
7800 "\n"
7801 "During emulation, the following keys are useful:\n"
7802 "ctrl-alt-f toggle full screen\n"
7803 "ctrl-alt-n switch to virtual console 'n'\n"
7804 "ctrl-alt toggle mouse and keyboard grab\n"
7805 "\n"
7806 "When using -nographic, press 'ctrl-a h' to get some help.\n"
7808 "qemu",
7809 DEFAULT_RAM_SIZE,
7810 #ifndef _WIN32
7811 DEFAULT_NETWORK_SCRIPT,
7812 DEFAULT_NETWORK_DOWN_SCRIPT,
7813 #endif
7814 DEFAULT_GDBSTUB_PORT,
7815 "/tmp/qemu.log");
7816 exit(exitcode);
7819 #define HAS_ARG 0x0001
7821 enum {
7822 QEMU_OPTION_h,
7824 QEMU_OPTION_M,
7825 QEMU_OPTION_cpu,
7826 QEMU_OPTION_fda,
7827 QEMU_OPTION_fdb,
7828 QEMU_OPTION_hda,
7829 QEMU_OPTION_hdb,
7830 QEMU_OPTION_hdc,
7831 QEMU_OPTION_hdd,
7832 QEMU_OPTION_drive,
7833 QEMU_OPTION_cdrom,
7834 QEMU_OPTION_mtdblock,
7835 QEMU_OPTION_sd,
7836 QEMU_OPTION_pflash,
7837 QEMU_OPTION_boot,
7838 QEMU_OPTION_snapshot,
7839 #ifdef TARGET_I386
7840 QEMU_OPTION_no_fd_bootchk,
7841 #endif
7842 QEMU_OPTION_m,
7843 QEMU_OPTION_nographic,
7844 QEMU_OPTION_portrait,
7845 #ifdef HAS_AUDIO
7846 QEMU_OPTION_audio_help,
7847 QEMU_OPTION_soundhw,
7848 #endif
7850 QEMU_OPTION_net,
7851 QEMU_OPTION_tftp,
7852 QEMU_OPTION_bootp,
7853 QEMU_OPTION_smb,
7854 QEMU_OPTION_redir,
7856 QEMU_OPTION_kernel,
7857 QEMU_OPTION_append,
7858 QEMU_OPTION_initrd,
7860 QEMU_OPTION_S,
7861 QEMU_OPTION_s,
7862 QEMU_OPTION_p,
7863 QEMU_OPTION_d,
7864 QEMU_OPTION_hdachs,
7865 QEMU_OPTION_L,
7866 QEMU_OPTION_bios,
7867 QEMU_OPTION_k,
7868 QEMU_OPTION_localtime,
7869 QEMU_OPTION_cirrusvga,
7870 QEMU_OPTION_vmsvga,
7871 QEMU_OPTION_g,
7872 QEMU_OPTION_std_vga,
7873 QEMU_OPTION_echr,
7874 QEMU_OPTION_monitor,
7875 QEMU_OPTION_serial,
7876 QEMU_OPTION_parallel,
7877 QEMU_OPTION_loadvm,
7878 QEMU_OPTION_full_screen,
7879 QEMU_OPTION_no_frame,
7880 QEMU_OPTION_alt_grab,
7881 QEMU_OPTION_no_quit,
7882 QEMU_OPTION_pidfile,
7883 QEMU_OPTION_no_kqemu,
7884 QEMU_OPTION_kernel_kqemu,
7885 QEMU_OPTION_win2k_hack,
7886 QEMU_OPTION_usb,
7887 QEMU_OPTION_usbdevice,
7888 QEMU_OPTION_smp,
7889 QEMU_OPTION_vnc,
7890 QEMU_OPTION_no_acpi,
7891 QEMU_OPTION_curses,
7892 QEMU_OPTION_no_reboot,
7893 QEMU_OPTION_no_shutdown,
7894 QEMU_OPTION_show_cursor,
7895 QEMU_OPTION_daemonize,
7896 QEMU_OPTION_option_rom,
7897 QEMU_OPTION_semihosting,
7898 QEMU_OPTION_name,
7899 QEMU_OPTION_prom_env,
7900 QEMU_OPTION_old_param,
7901 QEMU_OPTION_clock,
7902 QEMU_OPTION_startdate,
7903 QEMU_OPTION_tb_size,
7904 QEMU_OPTION_icount,
7907 typedef struct QEMUOption {
7908 const char *name;
7909 int flags;
7910 int index;
7911 } QEMUOption;
7913 const QEMUOption qemu_options[] = {
7914 { "h", 0, QEMU_OPTION_h },
7915 { "help", 0, QEMU_OPTION_h },
7917 { "M", HAS_ARG, QEMU_OPTION_M },
7918 { "cpu", HAS_ARG, QEMU_OPTION_cpu },
7919 { "fda", HAS_ARG, QEMU_OPTION_fda },
7920 { "fdb", HAS_ARG, QEMU_OPTION_fdb },
7921 { "hda", HAS_ARG, QEMU_OPTION_hda },
7922 { "hdb", HAS_ARG, QEMU_OPTION_hdb },
7923 { "hdc", HAS_ARG, QEMU_OPTION_hdc },
7924 { "hdd", HAS_ARG, QEMU_OPTION_hdd },
7925 { "drive", HAS_ARG, QEMU_OPTION_drive },
7926 { "cdrom", HAS_ARG, QEMU_OPTION_cdrom },
7927 { "mtdblock", HAS_ARG, QEMU_OPTION_mtdblock },
7928 { "sd", HAS_ARG, QEMU_OPTION_sd },
7929 { "pflash", HAS_ARG, QEMU_OPTION_pflash },
7930 { "boot", HAS_ARG, QEMU_OPTION_boot },
7931 { "snapshot", 0, QEMU_OPTION_snapshot },
7932 #ifdef TARGET_I386
7933 { "no-fd-bootchk", 0, QEMU_OPTION_no_fd_bootchk },
7934 #endif
7935 { "m", HAS_ARG, QEMU_OPTION_m },
7936 { "nographic", 0, QEMU_OPTION_nographic },
7937 { "portrait", 0, QEMU_OPTION_portrait },
7938 { "k", HAS_ARG, QEMU_OPTION_k },
7939 #ifdef HAS_AUDIO
7940 { "audio-help", 0, QEMU_OPTION_audio_help },
7941 { "soundhw", HAS_ARG, QEMU_OPTION_soundhw },
7942 #endif
7944 { "net", HAS_ARG, QEMU_OPTION_net},
7945 #ifdef CONFIG_SLIRP
7946 { "tftp", HAS_ARG, QEMU_OPTION_tftp },
7947 { "bootp", HAS_ARG, QEMU_OPTION_bootp },
7948 #ifndef _WIN32
7949 { "smb", HAS_ARG, QEMU_OPTION_smb },
7950 #endif
7951 { "redir", HAS_ARG, QEMU_OPTION_redir },
7952 #endif
7954 { "kernel", HAS_ARG, QEMU_OPTION_kernel },
7955 { "append", HAS_ARG, QEMU_OPTION_append },
7956 { "initrd", HAS_ARG, QEMU_OPTION_initrd },
7958 { "S", 0, QEMU_OPTION_S },
7959 { "s", 0, QEMU_OPTION_s },
7960 { "p", HAS_ARG, QEMU_OPTION_p },
7961 { "d", HAS_ARG, QEMU_OPTION_d },
7962 { "hdachs", HAS_ARG, QEMU_OPTION_hdachs },
7963 { "L", HAS_ARG, QEMU_OPTION_L },
7964 { "bios", HAS_ARG, QEMU_OPTION_bios },
7965 #ifdef USE_KQEMU
7966 { "no-kqemu", 0, QEMU_OPTION_no_kqemu },
7967 { "kernel-kqemu", 0, QEMU_OPTION_kernel_kqemu },
7968 #endif
7969 #if defined(TARGET_PPC) || defined(TARGET_SPARC)
7970 { "g", 1, QEMU_OPTION_g },
7971 #endif
7972 { "localtime", 0, QEMU_OPTION_localtime },
7973 { "std-vga", 0, QEMU_OPTION_std_vga },
7974 { "echr", HAS_ARG, QEMU_OPTION_echr },
7975 { "monitor", HAS_ARG, QEMU_OPTION_monitor },
7976 { "serial", HAS_ARG, QEMU_OPTION_serial },
7977 { "parallel", HAS_ARG, QEMU_OPTION_parallel },
7978 { "loadvm", HAS_ARG, QEMU_OPTION_loadvm },
7979 { "full-screen", 0, QEMU_OPTION_full_screen },
7980 #ifdef CONFIG_SDL
7981 { "no-frame", 0, QEMU_OPTION_no_frame },
7982 { "alt-grab", 0, QEMU_OPTION_alt_grab },
7983 { "no-quit", 0, QEMU_OPTION_no_quit },
7984 #endif
7985 { "pidfile", HAS_ARG, QEMU_OPTION_pidfile },
7986 { "win2k-hack", 0, QEMU_OPTION_win2k_hack },
7987 { "usbdevice", HAS_ARG, QEMU_OPTION_usbdevice },
7988 { "smp", HAS_ARG, QEMU_OPTION_smp },
7989 { "vnc", HAS_ARG, QEMU_OPTION_vnc },
7990 #ifdef CONFIG_CURSES
7991 { "curses", 0, QEMU_OPTION_curses },
7992 #endif
7994 /* temporary options */
7995 { "usb", 0, QEMU_OPTION_usb },
7996 { "cirrusvga", 0, QEMU_OPTION_cirrusvga },
7997 { "vmwarevga", 0, QEMU_OPTION_vmsvga },
7998 { "no-acpi", 0, QEMU_OPTION_no_acpi },
7999 { "no-reboot", 0, QEMU_OPTION_no_reboot },
8000 { "no-shutdown", 0, QEMU_OPTION_no_shutdown },
8001 { "show-cursor", 0, QEMU_OPTION_show_cursor },
8002 { "daemonize", 0, QEMU_OPTION_daemonize },
8003 { "option-rom", HAS_ARG, QEMU_OPTION_option_rom },
8004 #if defined(TARGET_ARM) || defined(TARGET_M68K)
8005 { "semihosting", 0, QEMU_OPTION_semihosting },
8006 #endif
8007 { "name", HAS_ARG, QEMU_OPTION_name },
8008 #if defined(TARGET_SPARC)
8009 { "prom-env", HAS_ARG, QEMU_OPTION_prom_env },
8010 #endif
8011 #if defined(TARGET_ARM)
8012 { "old-param", 0, QEMU_OPTION_old_param },
8013 #endif
8014 { "clock", HAS_ARG, QEMU_OPTION_clock },
8015 { "startdate", HAS_ARG, QEMU_OPTION_startdate },
8016 { "tb-size", HAS_ARG, QEMU_OPTION_tb_size },
8017 { "icount", HAS_ARG, QEMU_OPTION_icount },
8018 { NULL },
8021 /* password input */
8023 int qemu_key_check(BlockDriverState *bs, const char *name)
8025 char password[256];
8026 int i;
8028 if (!bdrv_is_encrypted(bs))
8029 return 0;
8031 term_printf("%s is encrypted.\n", name);
8032 for(i = 0; i < 3; i++) {
8033 monitor_readline("Password: ", 1, password, sizeof(password));
8034 if (bdrv_set_key(bs, password) == 0)
8035 return 0;
8036 term_printf("invalid password\n");
8038 return -EPERM;
8041 static BlockDriverState *get_bdrv(int index)
8043 if (index > nb_drives)
8044 return NULL;
8045 return drives_table[index].bdrv;
8048 static void read_passwords(void)
8050 BlockDriverState *bs;
8051 int i;
8053 for(i = 0; i < 6; i++) {
8054 bs = get_bdrv(i);
8055 if (bs)
8056 qemu_key_check(bs, bdrv_get_device_name(bs));
8060 #ifdef HAS_AUDIO
8061 struct soundhw soundhw[] = {
8062 #ifdef HAS_AUDIO_CHOICE
8063 #if defined(TARGET_I386) || defined(TARGET_MIPS)
8065 "pcspk",
8066 "PC speaker",
8069 { .init_isa = pcspk_audio_init }
8071 #endif
8073 "sb16",
8074 "Creative Sound Blaster 16",
8077 { .init_isa = SB16_init }
8080 #ifdef CONFIG_CS4231A
8082 "cs4231a",
8083 "CS4231A",
8086 { .init_isa = cs4231a_init }
8088 #endif
8090 #ifdef CONFIG_ADLIB
8092 "adlib",
8093 #ifdef HAS_YMF262
8094 "Yamaha YMF262 (OPL3)",
8095 #else
8096 "Yamaha YM3812 (OPL2)",
8097 #endif
8100 { .init_isa = Adlib_init }
8102 #endif
8104 #ifdef CONFIG_GUS
8106 "gus",
8107 "Gravis Ultrasound GF1",
8110 { .init_isa = GUS_init }
8112 #endif
8114 #ifdef CONFIG_AC97
8116 "ac97",
8117 "Intel 82801AA AC97 Audio",
8120 { .init_pci = ac97_init }
8122 #endif
8125 "es1370",
8126 "ENSONIQ AudioPCI ES1370",
8129 { .init_pci = es1370_init }
8131 #endif
8133 { NULL, NULL, 0, 0, { NULL } }
8136 static void select_soundhw (const char *optarg)
8138 struct soundhw *c;
8140 if (*optarg == '?') {
8141 show_valid_cards:
8143 printf ("Valid sound card names (comma separated):\n");
8144 for (c = soundhw; c->name; ++c) {
8145 printf ("%-11s %s\n", c->name, c->descr);
8147 printf ("\n-soundhw all will enable all of the above\n");
8148 exit (*optarg != '?');
8150 else {
8151 size_t l;
8152 const char *p;
8153 char *e;
8154 int bad_card = 0;
8156 if (!strcmp (optarg, "all")) {
8157 for (c = soundhw; c->name; ++c) {
8158 c->enabled = 1;
8160 return;
8163 p = optarg;
8164 while (*p) {
8165 e = strchr (p, ',');
8166 l = !e ? strlen (p) : (size_t) (e - p);
8168 for (c = soundhw; c->name; ++c) {
8169 if (!strncmp (c->name, p, l)) {
8170 c->enabled = 1;
8171 break;
8175 if (!c->name) {
8176 if (l > 80) {
8177 fprintf (stderr,
8178 "Unknown sound card name (too big to show)\n");
8180 else {
8181 fprintf (stderr, "Unknown sound card name `%.*s'\n",
8182 (int) l, p);
8184 bad_card = 1;
8186 p += l + (e != NULL);
8189 if (bad_card)
8190 goto show_valid_cards;
8193 #endif
8195 #ifdef _WIN32
8196 static BOOL WINAPI qemu_ctrl_handler(DWORD type)
8198 exit(STATUS_CONTROL_C_EXIT);
8199 return TRUE;
8201 #endif
8203 #define MAX_NET_CLIENTS 32
8205 #ifndef _WIN32
8207 static void termsig_handler(int signal)
8209 qemu_system_shutdown_request();
8212 static void termsig_setup(void)
8214 struct sigaction act;
8216 memset(&act, 0, sizeof(act));
8217 act.sa_handler = termsig_handler;
8218 sigaction(SIGINT, &act, NULL);
8219 sigaction(SIGHUP, &act, NULL);
8220 sigaction(SIGTERM, &act, NULL);
8223 #endif
8225 int main(int argc, char **argv)
8227 #ifdef CONFIG_GDBSTUB
8228 int use_gdbstub;
8229 const char *gdbstub_port;
8230 #endif
8231 uint32_t boot_devices_bitmap = 0;
8232 int i;
8233 int snapshot, linux_boot, net_boot;
8234 const char *initrd_filename;
8235 const char *kernel_filename, *kernel_cmdline;
8236 const char *boot_devices = "";
8237 DisplayState *ds = &display_state;
8238 int cyls, heads, secs, translation;
8239 const char *net_clients[MAX_NET_CLIENTS];
8240 int nb_net_clients;
8241 int hda_index;
8242 int optind;
8243 const char *r, *optarg;
8244 CharDriverState *monitor_hd;
8245 const char *monitor_device;
8246 const char *serial_devices[MAX_SERIAL_PORTS];
8247 int serial_device_index;
8248 const char *parallel_devices[MAX_PARALLEL_PORTS];
8249 int parallel_device_index;
8250 const char *loadvm = NULL;
8251 QEMUMachine *machine;
8252 const char *cpu_model;
8253 const char *usb_devices[MAX_USB_CMDLINE];
8254 int usb_devices_index;
8255 int fds[2];
8256 int tb_size;
8257 const char *pid_file = NULL;
8258 VLANState *vlan;
8260 LIST_INIT (&vm_change_state_head);
8261 #ifndef _WIN32
8263 struct sigaction act;
8264 sigfillset(&act.sa_mask);
8265 act.sa_flags = 0;
8266 act.sa_handler = SIG_IGN;
8267 sigaction(SIGPIPE, &act, NULL);
8269 #else
8270 SetConsoleCtrlHandler(qemu_ctrl_handler, TRUE);
8271 /* Note: cpu_interrupt() is currently not SMP safe, so we force
8272 QEMU to run on a single CPU */
8274 HANDLE h;
8275 DWORD mask, smask;
8276 int i;
8277 h = GetCurrentProcess();
8278 if (GetProcessAffinityMask(h, &mask, &smask)) {
8279 for(i = 0; i < 32; i++) {
8280 if (mask & (1 << i))
8281 break;
8283 if (i != 32) {
8284 mask = 1 << i;
8285 SetProcessAffinityMask(h, mask);
8289 #endif
8291 register_machines();
8292 machine = first_machine;
8293 cpu_model = NULL;
8294 initrd_filename = NULL;
8295 ram_size = 0;
8296 vga_ram_size = VGA_RAM_SIZE;
8297 #ifdef CONFIG_GDBSTUB
8298 use_gdbstub = 0;
8299 gdbstub_port = DEFAULT_GDBSTUB_PORT;
8300 #endif
8301 snapshot = 0;
8302 nographic = 0;
8303 curses = 0;
8304 kernel_filename = NULL;
8305 kernel_cmdline = "";
8306 cyls = heads = secs = 0;
8307 translation = BIOS_ATA_TRANSLATION_AUTO;
8308 monitor_device = "vc";
8310 serial_devices[0] = "vc:80Cx24C";
8311 for(i = 1; i < MAX_SERIAL_PORTS; i++)
8312 serial_devices[i] = NULL;
8313 serial_device_index = 0;
8315 parallel_devices[0] = "vc:640x480";
8316 for(i = 1; i < MAX_PARALLEL_PORTS; i++)
8317 parallel_devices[i] = NULL;
8318 parallel_device_index = 0;
8320 usb_devices_index = 0;
8322 nb_net_clients = 0;
8323 nb_drives = 0;
8324 nb_drives_opt = 0;
8325 hda_index = -1;
8327 nb_nics = 0;
8329 tb_size = 0;
8331 optind = 1;
8332 for(;;) {
8333 if (optind >= argc)
8334 break;
8335 r = argv[optind];
8336 if (r[0] != '-') {
8337 hda_index = drive_add(argv[optind++], HD_ALIAS, 0);
8338 } else {
8339 const QEMUOption *popt;
8341 optind++;
8342 /* Treat --foo the same as -foo. */
8343 if (r[1] == '-')
8344 r++;
8345 popt = qemu_options;
8346 for(;;) {
8347 if (!popt->name) {
8348 fprintf(stderr, "%s: invalid option -- '%s'\n",
8349 argv[0], r);
8350 exit(1);
8352 if (!strcmp(popt->name, r + 1))
8353 break;
8354 popt++;
8356 if (popt->flags & HAS_ARG) {
8357 if (optind >= argc) {
8358 fprintf(stderr, "%s: option '%s' requires an argument\n",
8359 argv[0], r);
8360 exit(1);
8362 optarg = argv[optind++];
8363 } else {
8364 optarg = NULL;
8367 switch(popt->index) {
8368 case QEMU_OPTION_M:
8369 machine = find_machine(optarg);
8370 if (!machine) {
8371 QEMUMachine *m;
8372 printf("Supported machines are:\n");
8373 for(m = first_machine; m != NULL; m = m->next) {
8374 printf("%-10s %s%s\n",
8375 m->name, m->desc,
8376 m == first_machine ? " (default)" : "");
8378 exit(*optarg != '?');
8380 break;
8381 case QEMU_OPTION_cpu:
8382 /* hw initialization will check this */
8383 if (*optarg == '?') {
8384 /* XXX: implement xxx_cpu_list for targets that still miss it */
8385 #if defined(cpu_list)
8386 cpu_list(stdout, &fprintf);
8387 #endif
8388 exit(0);
8389 } else {
8390 cpu_model = optarg;
8392 break;
8393 case QEMU_OPTION_initrd:
8394 initrd_filename = optarg;
8395 break;
8396 case QEMU_OPTION_hda:
8397 if (cyls == 0)
8398 hda_index = drive_add(optarg, HD_ALIAS, 0);
8399 else
8400 hda_index = drive_add(optarg, HD_ALIAS
8401 ",cyls=%d,heads=%d,secs=%d%s",
8402 0, cyls, heads, secs,
8403 translation == BIOS_ATA_TRANSLATION_LBA ?
8404 ",trans=lba" :
8405 translation == BIOS_ATA_TRANSLATION_NONE ?
8406 ",trans=none" : "");
8407 break;
8408 case QEMU_OPTION_hdb:
8409 case QEMU_OPTION_hdc:
8410 case QEMU_OPTION_hdd:
8411 drive_add(optarg, HD_ALIAS, popt->index - QEMU_OPTION_hda);
8412 break;
8413 case QEMU_OPTION_drive:
8414 drive_add(NULL, "%s", optarg);
8415 break;
8416 case QEMU_OPTION_mtdblock:
8417 drive_add(optarg, MTD_ALIAS);
8418 break;
8419 case QEMU_OPTION_sd:
8420 drive_add(optarg, SD_ALIAS);
8421 break;
8422 case QEMU_OPTION_pflash:
8423 drive_add(optarg, PFLASH_ALIAS);
8424 break;
8425 case QEMU_OPTION_snapshot:
8426 snapshot = 1;
8427 break;
8428 case QEMU_OPTION_hdachs:
8430 const char *p;
8431 p = optarg;
8432 cyls = strtol(p, (char **)&p, 0);
8433 if (cyls < 1 || cyls > 16383)
8434 goto chs_fail;
8435 if (*p != ',')
8436 goto chs_fail;
8437 p++;
8438 heads = strtol(p, (char **)&p, 0);
8439 if (heads < 1 || heads > 16)
8440 goto chs_fail;
8441 if (*p != ',')
8442 goto chs_fail;
8443 p++;
8444 secs = strtol(p, (char **)&p, 0);
8445 if (secs < 1 || secs > 63)
8446 goto chs_fail;
8447 if (*p == ',') {
8448 p++;
8449 if (!strcmp(p, "none"))
8450 translation = BIOS_ATA_TRANSLATION_NONE;
8451 else if (!strcmp(p, "lba"))
8452 translation = BIOS_ATA_TRANSLATION_LBA;
8453 else if (!strcmp(p, "auto"))
8454 translation = BIOS_ATA_TRANSLATION_AUTO;
8455 else
8456 goto chs_fail;
8457 } else if (*p != '\0') {
8458 chs_fail:
8459 fprintf(stderr, "qemu: invalid physical CHS format\n");
8460 exit(1);
8462 if (hda_index != -1)
8463 snprintf(drives_opt[hda_index].opt,
8464 sizeof(drives_opt[hda_index].opt),
8465 HD_ALIAS ",cyls=%d,heads=%d,secs=%d%s",
8466 0, cyls, heads, secs,
8467 translation == BIOS_ATA_TRANSLATION_LBA ?
8468 ",trans=lba" :
8469 translation == BIOS_ATA_TRANSLATION_NONE ?
8470 ",trans=none" : "");
8472 break;
8473 case QEMU_OPTION_nographic:
8474 nographic = 1;
8475 break;
8476 #ifdef CONFIG_CURSES
8477 case QEMU_OPTION_curses:
8478 curses = 1;
8479 break;
8480 #endif
8481 case QEMU_OPTION_portrait:
8482 graphic_rotate = 1;
8483 break;
8484 case QEMU_OPTION_kernel:
8485 kernel_filename = optarg;
8486 break;
8487 case QEMU_OPTION_append:
8488 kernel_cmdline = optarg;
8489 break;
8490 case QEMU_OPTION_cdrom:
8491 drive_add(optarg, CDROM_ALIAS);
8492 break;
8493 case QEMU_OPTION_boot:
8494 boot_devices = optarg;
8495 /* We just do some generic consistency checks */
8497 /* Could easily be extended to 64 devices if needed */
8498 const char *p;
8500 boot_devices_bitmap = 0;
8501 for (p = boot_devices; *p != '\0'; p++) {
8502 /* Allowed boot devices are:
8503 * a b : floppy disk drives
8504 * c ... f : IDE disk drives
8505 * g ... m : machine implementation dependant drives
8506 * n ... p : network devices
8507 * It's up to each machine implementation to check
8508 * if the given boot devices match the actual hardware
8509 * implementation and firmware features.
8511 if (*p < 'a' || *p > 'q') {
8512 fprintf(stderr, "Invalid boot device '%c'\n", *p);
8513 exit(1);
8515 if (boot_devices_bitmap & (1 << (*p - 'a'))) {
8516 fprintf(stderr,
8517 "Boot device '%c' was given twice\n",*p);
8518 exit(1);
8520 boot_devices_bitmap |= 1 << (*p - 'a');
8523 break;
8524 case QEMU_OPTION_fda:
8525 case QEMU_OPTION_fdb:
8526 drive_add(optarg, FD_ALIAS, popt->index - QEMU_OPTION_fda);
8527 break;
8528 #ifdef TARGET_I386
8529 case QEMU_OPTION_no_fd_bootchk:
8530 fd_bootchk = 0;
8531 break;
8532 #endif
8533 case QEMU_OPTION_net:
8534 if (nb_net_clients >= MAX_NET_CLIENTS) {
8535 fprintf(stderr, "qemu: too many network clients\n");
8536 exit(1);
8538 net_clients[nb_net_clients] = optarg;
8539 nb_net_clients++;
8540 break;
8541 #ifdef CONFIG_SLIRP
8542 case QEMU_OPTION_tftp:
8543 tftp_prefix = optarg;
8544 break;
8545 case QEMU_OPTION_bootp:
8546 bootp_filename = optarg;
8547 break;
8548 #ifndef _WIN32
8549 case QEMU_OPTION_smb:
8550 net_slirp_smb(optarg);
8551 break;
8552 #endif
8553 case QEMU_OPTION_redir:
8554 net_slirp_redir(optarg);
8555 break;
8556 #endif
8557 #ifdef HAS_AUDIO
8558 case QEMU_OPTION_audio_help:
8559 AUD_help ();
8560 exit (0);
8561 break;
8562 case QEMU_OPTION_soundhw:
8563 select_soundhw (optarg);
8564 break;
8565 #endif
8566 case QEMU_OPTION_h:
8567 help(0);
8568 break;
8569 case QEMU_OPTION_m: {
8570 uint64_t value;
8571 char *ptr;
8573 value = strtoul(optarg, &ptr, 10);
8574 switch (*ptr) {
8575 case 0: case 'M': case 'm':
8576 value <<= 20;
8577 break;
8578 case 'G': case 'g':
8579 value <<= 30;
8580 break;
8581 default:
8582 fprintf(stderr, "qemu: invalid ram size: %s\n", optarg);
8583 exit(1);
8586 /* On 32-bit hosts, QEMU is limited by virtual address space */
8587 if (value > (2047 << 20)
8588 #ifndef USE_KQEMU
8589 && HOST_LONG_BITS == 32
8590 #endif
8592 fprintf(stderr, "qemu: at most 2047 MB RAM can be simulated\n");
8593 exit(1);
8595 if (value != (uint64_t)(ram_addr_t)value) {
8596 fprintf(stderr, "qemu: ram size too large\n");
8597 exit(1);
8599 ram_size = value;
8600 break;
8602 case QEMU_OPTION_d:
8604 int mask;
8605 CPULogItem *item;
8607 mask = cpu_str_to_log_mask(optarg);
8608 if (!mask) {
8609 printf("Log items (comma separated):\n");
8610 for(item = cpu_log_items; item->mask != 0; item++) {
8611 printf("%-10s %s\n", item->name, item->help);
8613 exit(1);
8615 cpu_set_log(mask);
8617 break;
8618 #ifdef CONFIG_GDBSTUB
8619 case QEMU_OPTION_s:
8620 use_gdbstub = 1;
8621 break;
8622 case QEMU_OPTION_p:
8623 gdbstub_port = optarg;
8624 break;
8625 #endif
8626 case QEMU_OPTION_L:
8627 bios_dir = optarg;
8628 break;
8629 case QEMU_OPTION_bios:
8630 bios_name = optarg;
8631 break;
8632 case QEMU_OPTION_S:
8633 autostart = 0;
8634 break;
8635 case QEMU_OPTION_k:
8636 keyboard_layout = optarg;
8637 break;
8638 case QEMU_OPTION_localtime:
8639 rtc_utc = 0;
8640 break;
8641 case QEMU_OPTION_cirrusvga:
8642 cirrus_vga_enabled = 1;
8643 vmsvga_enabled = 0;
8644 break;
8645 case QEMU_OPTION_vmsvga:
8646 cirrus_vga_enabled = 0;
8647 vmsvga_enabled = 1;
8648 break;
8649 case QEMU_OPTION_std_vga:
8650 cirrus_vga_enabled = 0;
8651 vmsvga_enabled = 0;
8652 break;
8653 case QEMU_OPTION_g:
8655 const char *p;
8656 int w, h, depth;
8657 p = optarg;
8658 w = strtol(p, (char **)&p, 10);
8659 if (w <= 0) {
8660 graphic_error:
8661 fprintf(stderr, "qemu: invalid resolution or depth\n");
8662 exit(1);
8664 if (*p != 'x')
8665 goto graphic_error;
8666 p++;
8667 h = strtol(p, (char **)&p, 10);
8668 if (h <= 0)
8669 goto graphic_error;
8670 if (*p == 'x') {
8671 p++;
8672 depth = strtol(p, (char **)&p, 10);
8673 if (depth != 8 && depth != 15 && depth != 16 &&
8674 depth != 24 && depth != 32)
8675 goto graphic_error;
8676 } else if (*p == '\0') {
8677 depth = graphic_depth;
8678 } else {
8679 goto graphic_error;
8682 graphic_width = w;
8683 graphic_height = h;
8684 graphic_depth = depth;
8686 break;
8687 case QEMU_OPTION_echr:
8689 char *r;
8690 term_escape_char = strtol(optarg, &r, 0);
8691 if (r == optarg)
8692 printf("Bad argument to echr\n");
8693 break;
8695 case QEMU_OPTION_monitor:
8696 monitor_device = optarg;
8697 break;
8698 case QEMU_OPTION_serial:
8699 if (serial_device_index >= MAX_SERIAL_PORTS) {
8700 fprintf(stderr, "qemu: too many serial ports\n");
8701 exit(1);
8703 serial_devices[serial_device_index] = optarg;
8704 serial_device_index++;
8705 break;
8706 case QEMU_OPTION_parallel:
8707 if (parallel_device_index >= MAX_PARALLEL_PORTS) {
8708 fprintf(stderr, "qemu: too many parallel ports\n");
8709 exit(1);
8711 parallel_devices[parallel_device_index] = optarg;
8712 parallel_device_index++;
8713 break;
8714 case QEMU_OPTION_loadvm:
8715 loadvm = optarg;
8716 break;
8717 case QEMU_OPTION_full_screen:
8718 full_screen = 1;
8719 break;
8720 #ifdef CONFIG_SDL
8721 case QEMU_OPTION_no_frame:
8722 no_frame = 1;
8723 break;
8724 case QEMU_OPTION_alt_grab:
8725 alt_grab = 1;
8726 break;
8727 case QEMU_OPTION_no_quit:
8728 no_quit = 1;
8729 break;
8730 #endif
8731 case QEMU_OPTION_pidfile:
8732 pid_file = optarg;
8733 break;
8734 #ifdef TARGET_I386
8735 case QEMU_OPTION_win2k_hack:
8736 win2k_install_hack = 1;
8737 break;
8738 #endif
8739 #ifdef USE_KQEMU
8740 case QEMU_OPTION_no_kqemu:
8741 kqemu_allowed = 0;
8742 break;
8743 case QEMU_OPTION_kernel_kqemu:
8744 kqemu_allowed = 2;
8745 break;
8746 #endif
8747 case QEMU_OPTION_usb:
8748 usb_enabled = 1;
8749 break;
8750 case QEMU_OPTION_usbdevice:
8751 usb_enabled = 1;
8752 if (usb_devices_index >= MAX_USB_CMDLINE) {
8753 fprintf(stderr, "Too many USB devices\n");
8754 exit(1);
8756 usb_devices[usb_devices_index] = optarg;
8757 usb_devices_index++;
8758 break;
8759 case QEMU_OPTION_smp:
8760 smp_cpus = atoi(optarg);
8761 if (smp_cpus < 1 || smp_cpus > MAX_CPUS) {
8762 fprintf(stderr, "Invalid number of CPUs\n");
8763 exit(1);
8765 break;
8766 case QEMU_OPTION_vnc:
8767 vnc_display = optarg;
8768 break;
8769 case QEMU_OPTION_no_acpi:
8770 acpi_enabled = 0;
8771 break;
8772 case QEMU_OPTION_no_reboot:
8773 no_reboot = 1;
8774 break;
8775 case QEMU_OPTION_no_shutdown:
8776 no_shutdown = 1;
8777 break;
8778 case QEMU_OPTION_show_cursor:
8779 cursor_hide = 0;
8780 break;
8781 case QEMU_OPTION_daemonize:
8782 daemonize = 1;
8783 break;
8784 case QEMU_OPTION_option_rom:
8785 if (nb_option_roms >= MAX_OPTION_ROMS) {
8786 fprintf(stderr, "Too many option ROMs\n");
8787 exit(1);
8789 option_rom[nb_option_roms] = optarg;
8790 nb_option_roms++;
8791 break;
8792 case QEMU_OPTION_semihosting:
8793 semihosting_enabled = 1;
8794 break;
8795 case QEMU_OPTION_name:
8796 qemu_name = optarg;
8797 break;
8798 #ifdef TARGET_SPARC
8799 case QEMU_OPTION_prom_env:
8800 if (nb_prom_envs >= MAX_PROM_ENVS) {
8801 fprintf(stderr, "Too many prom variables\n");
8802 exit(1);
8804 prom_envs[nb_prom_envs] = optarg;
8805 nb_prom_envs++;
8806 break;
8807 #endif
8808 #ifdef TARGET_ARM
8809 case QEMU_OPTION_old_param:
8810 old_param = 1;
8811 break;
8812 #endif
8813 case QEMU_OPTION_clock:
8814 configure_alarms(optarg);
8815 break;
8816 case QEMU_OPTION_startdate:
8818 struct tm tm;
8819 time_t rtc_start_date;
8820 if (!strcmp(optarg, "now")) {
8821 rtc_date_offset = -1;
8822 } else {
8823 if (sscanf(optarg, "%d-%d-%dT%d:%d:%d",
8824 &tm.tm_year,
8825 &tm.tm_mon,
8826 &tm.tm_mday,
8827 &tm.tm_hour,
8828 &tm.tm_min,
8829 &tm.tm_sec) == 6) {
8830 /* OK */
8831 } else if (sscanf(optarg, "%d-%d-%d",
8832 &tm.tm_year,
8833 &tm.tm_mon,
8834 &tm.tm_mday) == 3) {
8835 tm.tm_hour = 0;
8836 tm.tm_min = 0;
8837 tm.tm_sec = 0;
8838 } else {
8839 goto date_fail;
8841 tm.tm_year -= 1900;
8842 tm.tm_mon--;
8843 rtc_start_date = mktimegm(&tm);
8844 if (rtc_start_date == -1) {
8845 date_fail:
8846 fprintf(stderr, "Invalid date format. Valid format are:\n"
8847 "'now' or '2006-06-17T16:01:21' or '2006-06-17'\n");
8848 exit(1);
8850 rtc_date_offset = time(NULL) - rtc_start_date;
8853 break;
8854 case QEMU_OPTION_tb_size:
8855 tb_size = strtol(optarg, NULL, 0);
8856 if (tb_size < 0)
8857 tb_size = 0;
8858 break;
8859 case QEMU_OPTION_icount:
8860 use_icount = 1;
8861 if (strcmp(optarg, "auto") == 0) {
8862 icount_time_shift = -1;
8863 } else {
8864 icount_time_shift = strtol(optarg, NULL, 0);
8866 break;
8871 if (nographic) {
8872 if (serial_device_index == 0)
8873 serial_devices[0] = "stdio";
8874 if (parallel_device_index == 0)
8875 parallel_devices[0] = "null";
8876 if (strncmp(monitor_device, "vc", 2) == 0)
8877 monitor_device = "stdio";
8880 #ifndef _WIN32
8881 if (daemonize) {
8882 pid_t pid;
8884 if (pipe(fds) == -1)
8885 exit(1);
8887 pid = fork();
8888 if (pid > 0) {
8889 uint8_t status;
8890 ssize_t len;
8892 close(fds[1]);
8894 again:
8895 len = read(fds[0], &status, 1);
8896 if (len == -1 && (errno == EINTR))
8897 goto again;
8899 if (len != 1)
8900 exit(1);
8901 else if (status == 1) {
8902 fprintf(stderr, "Could not acquire pidfile\n");
8903 exit(1);
8904 } else
8905 exit(0);
8906 } else if (pid < 0)
8907 exit(1);
8909 setsid();
8911 pid = fork();
8912 if (pid > 0)
8913 exit(0);
8914 else if (pid < 0)
8915 exit(1);
8917 umask(027);
8919 signal(SIGTSTP, SIG_IGN);
8920 signal(SIGTTOU, SIG_IGN);
8921 signal(SIGTTIN, SIG_IGN);
8923 #endif
8925 if (pid_file && qemu_create_pidfile(pid_file) != 0) {
8926 if (daemonize) {
8927 uint8_t status = 1;
8928 write(fds[1], &status, 1);
8929 } else
8930 fprintf(stderr, "Could not acquire pid file\n");
8931 exit(1);
8934 #ifdef USE_KQEMU
8935 if (smp_cpus > 1)
8936 kqemu_allowed = 0;
8937 #endif
8938 linux_boot = (kernel_filename != NULL);
8939 net_boot = (boot_devices_bitmap >> ('n' - 'a')) & 0xF;
8941 if (!linux_boot && net_boot == 0 &&
8942 !machine->nodisk_ok && nb_drives_opt == 0)
8943 help(1);
8945 if (!linux_boot && *kernel_cmdline != '\0') {
8946 fprintf(stderr, "-append only allowed with -kernel option\n");
8947 exit(1);
8950 if (!linux_boot && initrd_filename != NULL) {
8951 fprintf(stderr, "-initrd only allowed with -kernel option\n");
8952 exit(1);
8955 /* boot to floppy or the default cd if no hard disk defined yet */
8956 if (!boot_devices[0]) {
8957 boot_devices = "cad";
8959 setvbuf(stdout, NULL, _IOLBF, 0);
8961 init_timers();
8962 init_timer_alarm();
8963 qemu_aio_init();
8964 if (use_icount && icount_time_shift < 0) {
8965 use_icount = 2;
8966 /* 125MIPS seems a reasonable initial guess at the guest speed.
8967 It will be corrected fairly quickly anyway. */
8968 icount_time_shift = 3;
8969 init_icount_adjust();
8972 #ifdef _WIN32
8973 socket_init();
8974 #endif
8976 /* init network clients */
8977 if (nb_net_clients == 0) {
8978 /* if no clients, we use a default config */
8979 net_clients[nb_net_clients++] = "nic";
8980 #ifdef CONFIG_SLIRP
8981 net_clients[nb_net_clients++] = "user";
8982 #endif
8985 for(i = 0;i < nb_net_clients; i++) {
8986 if (net_client_parse(net_clients[i]) < 0)
8987 exit(1);
8989 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
8990 if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
8991 continue;
8992 if (vlan->nb_guest_devs == 0)
8993 fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
8994 if (vlan->nb_host_devs == 0)
8995 fprintf(stderr,
8996 "Warning: vlan %d is not connected to host network\n",
8997 vlan->id);
9000 #ifdef TARGET_I386
9001 /* XXX: this should be moved in the PC machine instantiation code */
9002 if (net_boot != 0) {
9003 int netroms = 0;
9004 for (i = 0; i < nb_nics && i < 4; i++) {
9005 const char *model = nd_table[i].model;
9006 char buf[1024];
9007 if (net_boot & (1 << i)) {
9008 if (model == NULL)
9009 model = "ne2k_pci";
9010 snprintf(buf, sizeof(buf), "%s/pxe-%s.bin", bios_dir, model);
9011 if (get_image_size(buf) > 0) {
9012 if (nb_option_roms >= MAX_OPTION_ROMS) {
9013 fprintf(stderr, "Too many option ROMs\n");
9014 exit(1);
9016 option_rom[nb_option_roms] = strdup(buf);
9017 nb_option_roms++;
9018 netroms++;
9022 if (netroms == 0) {
9023 fprintf(stderr, "No valid PXE rom found for network device\n");
9024 exit(1);
9027 #endif
9029 /* init the memory */
9030 phys_ram_size = machine->ram_require & ~RAMSIZE_FIXED;
9032 if (machine->ram_require & RAMSIZE_FIXED) {
9033 if (ram_size > 0) {
9034 if (ram_size < phys_ram_size) {
9035 fprintf(stderr, "Machine `%s' requires %llu bytes of memory\n",
9036 machine->name, (unsigned long long) phys_ram_size);
9037 exit(-1);
9040 phys_ram_size = ram_size;
9041 } else
9042 ram_size = phys_ram_size;
9043 } else {
9044 if (ram_size == 0)
9045 ram_size = DEFAULT_RAM_SIZE * 1024 * 1024;
9047 phys_ram_size += ram_size;
9050 phys_ram_base = qemu_vmalloc(phys_ram_size);
9051 if (!phys_ram_base) {
9052 fprintf(stderr, "Could not allocate physical memory\n");
9053 exit(1);
9056 /* init the dynamic translator */
9057 cpu_exec_init_all(tb_size * 1024 * 1024);
9059 bdrv_init();
9061 /* we always create the cdrom drive, even if no disk is there */
9063 if (nb_drives_opt < MAX_DRIVES)
9064 drive_add(NULL, CDROM_ALIAS);
9066 /* we always create at least one floppy */
9068 if (nb_drives_opt < MAX_DRIVES)
9069 drive_add(NULL, FD_ALIAS, 0);
9071 /* we always create one sd slot, even if no card is in it */
9073 if (nb_drives_opt < MAX_DRIVES)
9074 drive_add(NULL, SD_ALIAS);
9076 /* open the virtual block devices */
9078 for(i = 0; i < nb_drives_opt; i++)
9079 if (drive_init(&drives_opt[i], snapshot, machine) == -1)
9080 exit(1);
9082 register_savevm("timer", 0, 2, timer_save, timer_load, NULL);
9083 register_savevm("ram", 0, 2, ram_save, ram_load, NULL);
9085 /* terminal init */
9086 memset(&display_state, 0, sizeof(display_state));
9087 if (nographic) {
9088 if (curses) {
9089 fprintf(stderr, "fatal: -nographic can't be used with -curses\n");
9090 exit(1);
9092 /* nearly nothing to do */
9093 dumb_display_init(ds);
9094 } else if (vnc_display != NULL) {
9095 vnc_display_init(ds);
9096 if (vnc_display_open(ds, vnc_display) < 0)
9097 exit(1);
9098 } else
9099 #if defined(CONFIG_CURSES)
9100 if (curses) {
9101 curses_display_init(ds, full_screen);
9102 } else
9103 #endif
9105 #if defined(CONFIG_SDL)
9106 sdl_display_init(ds, full_screen, no_frame);
9107 #elif defined(CONFIG_COCOA)
9108 cocoa_display_init(ds, full_screen);
9109 #else
9110 dumb_display_init(ds);
9111 #endif
9114 #ifndef _WIN32
9115 /* must be after terminal init, SDL library changes signal handlers */
9116 termsig_setup();
9117 #endif
9119 /* Maintain compatibility with multiple stdio monitors */
9120 if (!strcmp(monitor_device,"stdio")) {
9121 for (i = 0; i < MAX_SERIAL_PORTS; i++) {
9122 const char *devname = serial_devices[i];
9123 if (devname && !strcmp(devname,"mon:stdio")) {
9124 monitor_device = NULL;
9125 break;
9126 } else if (devname && !strcmp(devname,"stdio")) {
9127 monitor_device = NULL;
9128 serial_devices[i] = "mon:stdio";
9129 break;
9133 if (monitor_device) {
9134 monitor_hd = qemu_chr_open(monitor_device);
9135 if (!monitor_hd) {
9136 fprintf(stderr, "qemu: could not open monitor device '%s'\n", monitor_device);
9137 exit(1);
9139 monitor_init(monitor_hd, !nographic);
9142 for(i = 0; i < MAX_SERIAL_PORTS; i++) {
9143 const char *devname = serial_devices[i];
9144 if (devname && strcmp(devname, "none")) {
9145 serial_hds[i] = qemu_chr_open(devname);
9146 if (!serial_hds[i]) {
9147 fprintf(stderr, "qemu: could not open serial device '%s'\n",
9148 devname);
9149 exit(1);
9151 if (strstart(devname, "vc", 0))
9152 qemu_chr_printf(serial_hds[i], "serial%d console\r\n", i);
9156 for(i = 0; i < MAX_PARALLEL_PORTS; i++) {
9157 const char *devname = parallel_devices[i];
9158 if (devname && strcmp(devname, "none")) {
9159 parallel_hds[i] = qemu_chr_open(devname);
9160 if (!parallel_hds[i]) {
9161 fprintf(stderr, "qemu: could not open parallel device '%s'\n",
9162 devname);
9163 exit(1);
9165 if (strstart(devname, "vc", 0))
9166 qemu_chr_printf(parallel_hds[i], "parallel%d console\r\n", i);
9170 machine->init(ram_size, vga_ram_size, boot_devices, ds,
9171 kernel_filename, kernel_cmdline, initrd_filename, cpu_model);
9173 /* init USB devices */
9174 if (usb_enabled) {
9175 for(i = 0; i < usb_devices_index; i++) {
9176 if (usb_device_add(usb_devices[i]) < 0) {
9177 fprintf(stderr, "Warning: could not add USB device %s\n",
9178 usb_devices[i]);
9183 if (display_state.dpy_refresh) {
9184 display_state.gui_timer = qemu_new_timer(rt_clock, gui_update, &display_state);
9185 qemu_mod_timer(display_state.gui_timer, qemu_get_clock(rt_clock));
9188 #ifdef CONFIG_GDBSTUB
9189 if (use_gdbstub) {
9190 /* XXX: use standard host:port notation and modify options
9191 accordingly. */
9192 if (gdbserver_start(gdbstub_port) < 0) {
9193 fprintf(stderr, "qemu: could not open gdbstub device on port '%s'\n",
9194 gdbstub_port);
9195 exit(1);
9198 #endif
9200 if (loadvm)
9201 do_loadvm(loadvm);
9204 /* XXX: simplify init */
9205 read_passwords();
9206 if (autostart) {
9207 vm_start();
9211 if (daemonize) {
9212 uint8_t status = 0;
9213 ssize_t len;
9214 int fd;
9216 again1:
9217 len = write(fds[1], &status, 1);
9218 if (len == -1 && (errno == EINTR))
9219 goto again1;
9221 if (len != 1)
9222 exit(1);
9224 chdir("/");
9225 TFR(fd = open("/dev/null", O_RDWR));
9226 if (fd == -1)
9227 exit(1);
9229 dup2(fd, 0);
9230 dup2(fd, 1);
9231 dup2(fd, 2);
9233 close(fd);
9236 main_loop();
9237 quit_timers();
9239 #if !defined(_WIN32)
9240 /* close network clients */
9241 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
9242 VLANClientState *vc;
9244 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
9245 if (vc->fd_read == tap_receive) {
9246 char ifname[64];
9247 TAPState *s = vc->opaque;
9249 if (sscanf(vc->info_str, "tap: ifname=%63s ", ifname) == 1 &&
9250 s->down_script[0])
9251 launch_script(s->down_script, ifname, s->fd);
9253 #if defined(CONFIG_VDE)
9254 if (vc->fd_read == vde_from_qemu) {
9255 VDEState *s = vc->opaque;
9256 vde_close(s->vde);
9258 #endif
9261 #endif
9262 return 0;