Fix most warnings that would be caused by gcc flag -Wundef
[qemu/mini2440.git] / vl.c
blob0a457a9b89574de9e73f9f2c2d7433df8b4e99ba
1 /*
2 * QEMU System Emulator
4 * Copyright (c) 2003-2008 Fabrice Bellard
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
24 #include "hw/hw.h"
25 #include "hw/boards.h"
26 #include "hw/usb.h"
27 #include "hw/pcmcia.h"
28 #include "hw/pc.h"
29 #include "hw/audiodev.h"
30 #include "hw/isa.h"
31 #include "hw/baum.h"
32 #include "net.h"
33 #include "console.h"
34 #include "sysemu.h"
35 #include "gdbstub.h"
36 #include "qemu-timer.h"
37 #include "qemu-char.h"
38 #include "block.h"
39 #include "audio/audio.h"
41 #include <unistd.h>
42 #include <fcntl.h>
43 #include <signal.h>
44 #include <time.h>
45 #include <errno.h>
46 #include <sys/time.h>
47 #include <zlib.h>
49 #ifndef _WIN32
50 #include <sys/times.h>
51 #include <sys/wait.h>
52 #include <termios.h>
53 #include <sys/poll.h>
54 #include <sys/mman.h>
55 #include <sys/ioctl.h>
56 #include <sys/socket.h>
57 #include <netinet/in.h>
58 #include <dirent.h>
59 #include <netdb.h>
60 #include <sys/select.h>
61 #include <arpa/inet.h>
62 #ifdef _BSD
63 #include <sys/stat.h>
64 #if !defined(__APPLE__) && !defined(__OpenBSD__)
65 #include <libutil.h>
66 #endif
67 #ifdef __OpenBSD__
68 #include <net/if.h>
69 #endif
70 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
71 #include <freebsd/stdlib.h>
72 #else
73 #ifndef __sun__
74 #include <linux/if.h>
75 #include <linux/if_tun.h>
76 #include <pty.h>
77 #include <malloc.h>
78 #include <linux/rtc.h>
80 /* For the benefit of older linux systems which don't supply it,
81 we use a local copy of hpet.h. */
82 /* #include <linux/hpet.h> */
83 #include "hpet.h"
85 #include <linux/ppdev.h>
86 #include <linux/parport.h>
87 #else
88 #include <sys/stat.h>
89 #include <sys/ethernet.h>
90 #include <sys/sockio.h>
91 #include <netinet/arp.h>
92 #include <netinet/in.h>
93 #include <netinet/in_systm.h>
94 #include <netinet/ip.h>
95 #include <netinet/ip_icmp.h> // must come after ip.h
96 #include <netinet/udp.h>
97 #include <netinet/tcp.h>
98 #include <net/if.h>
99 #include <syslog.h>
100 #include <stropts.h>
101 #endif
102 #endif
103 #else
104 #include <winsock2.h>
105 int inet_aton(const char *cp, struct in_addr *ia);
106 #endif
108 #if defined(CONFIG_SLIRP)
109 #include "libslirp.h"
110 #endif
112 #if defined(__OpenBSD__)
113 #include <util.h>
114 #endif
116 #if defined(CONFIG_VDE)
117 #include <libvdeplug.h>
118 #endif
120 #ifdef _WIN32
121 #include <malloc.h>
122 #include <sys/timeb.h>
123 #include <mmsystem.h>
124 #define getopt_long_only getopt_long
125 #define memalign(align, size) malloc(size)
126 #endif
128 #include "qemu_socket.h"
130 #ifdef CONFIG_SDL
131 #ifdef __APPLE__
132 #include <SDL/SDL.h>
133 #endif
134 #endif /* CONFIG_SDL */
136 #ifdef CONFIG_COCOA
137 #undef main
138 #define main qemu_main
139 #endif /* CONFIG_COCOA */
141 #include "disas.h"
143 #include "exec-all.h"
145 #define DEFAULT_NETWORK_SCRIPT "/etc/qemu-ifup"
146 #define DEFAULT_NETWORK_DOWN_SCRIPT "/etc/qemu-ifdown"
147 #ifdef __sun__
148 #define SMBD_COMMAND "/usr/sfw/sbin/smbd"
149 #else
150 #define SMBD_COMMAND "/usr/sbin/smbd"
151 #endif
153 //#define DEBUG_UNUSED_IOPORT
154 //#define DEBUG_IOPORT
156 #ifdef TARGET_PPC
157 #define DEFAULT_RAM_SIZE 144
158 #else
159 #define DEFAULT_RAM_SIZE 128
160 #endif
162 /* Max number of USB devices that can be specified on the commandline. */
163 #define MAX_USB_CMDLINE 8
165 /* XXX: use a two level table to limit memory usage */
166 #define MAX_IOPORTS 65536
168 const char *bios_dir = CONFIG_QEMU_SHAREDIR;
169 const char *bios_name = NULL;
170 void *ioport_opaque[MAX_IOPORTS];
171 IOPortReadFunc *ioport_read_table[3][MAX_IOPORTS];
172 IOPortWriteFunc *ioport_write_table[3][MAX_IOPORTS];
173 /* Note: drives_table[MAX_DRIVES] is a dummy block driver if none available
174 to store the VM snapshots */
175 DriveInfo drives_table[MAX_DRIVES+1];
176 int nb_drives;
177 /* point to the block driver where the snapshots are managed */
178 BlockDriverState *bs_snapshots;
179 int vga_ram_size;
180 static DisplayState display_state;
181 int nographic;
182 int curses;
183 const char* keyboard_layout = NULL;
184 int64_t ticks_per_sec;
185 ram_addr_t ram_size;
186 int pit_min_timer_count = 0;
187 int nb_nics;
188 NICInfo nd_table[MAX_NICS];
189 int vm_running;
190 static int rtc_utc = 1;
191 static int rtc_date_offset = -1; /* -1 means no change */
192 int cirrus_vga_enabled = 1;
193 int vmsvga_enabled = 0;
194 #ifdef TARGET_SPARC
195 int graphic_width = 1024;
196 int graphic_height = 768;
197 int graphic_depth = 8;
198 #else
199 int graphic_width = 800;
200 int graphic_height = 600;
201 int graphic_depth = 15;
202 #endif
203 int full_screen = 0;
204 int no_frame = 0;
205 int no_quit = 0;
206 CharDriverState *serial_hds[MAX_SERIAL_PORTS];
207 CharDriverState *parallel_hds[MAX_PARALLEL_PORTS];
208 #ifdef TARGET_I386
209 int win2k_install_hack = 0;
210 #endif
211 int usb_enabled = 0;
212 static VLANState *first_vlan;
213 int smp_cpus = 1;
214 const char *vnc_display;
215 #if defined(TARGET_SPARC)
216 #define MAX_CPUS 16
217 #elif defined(TARGET_I386)
218 #define MAX_CPUS 255
219 #else
220 #define MAX_CPUS 1
221 #endif
222 int acpi_enabled = 1;
223 int fd_bootchk = 1;
224 int no_reboot = 0;
225 int no_shutdown = 0;
226 int cursor_hide = 1;
227 int graphic_rotate = 0;
228 int daemonize = 0;
229 const char *option_rom[MAX_OPTION_ROMS];
230 int nb_option_roms;
231 int semihosting_enabled = 0;
232 int autostart = 1;
233 #ifdef TARGET_ARM
234 int old_param = 0;
235 #endif
236 const char *qemu_name;
237 int alt_grab = 0;
238 #ifdef TARGET_SPARC
239 unsigned int nb_prom_envs = 0;
240 const char *prom_envs[MAX_PROM_ENVS];
241 #endif
242 int nb_drives_opt;
243 struct drive_opt {
244 const char *file;
245 char opt[1024];
246 } drives_opt[MAX_DRIVES];
248 static CPUState *cur_cpu;
249 static CPUState *next_cpu;
250 static int event_pending = 1;
251 /* Conversion factor from emulated instructions to virtual clock ticks. */
252 static int icount_time_shift;
253 /* Arbitrarily pick 1MIPS as the minimum allowable speed. */
254 #define MAX_ICOUNT_SHIFT 10
255 /* Compensate for varying guest execution speed. */
256 static int64_t qemu_icount_bias;
257 QEMUTimer *icount_rt_timer;
258 QEMUTimer *icount_vm_timer;
260 #define TFR(expr) do { if ((expr) != -1) break; } while (errno == EINTR)
262 /***********************************************************/
263 /* x86 ISA bus support */
265 target_phys_addr_t isa_mem_base = 0;
266 PicState2 *isa_pic;
268 static IOPortReadFunc default_ioport_readb, default_ioport_readw, default_ioport_readl;
269 static IOPortWriteFunc default_ioport_writeb, default_ioport_writew, default_ioport_writel;
271 static uint32_t ioport_read(int index, uint32_t address)
273 static IOPortReadFunc *default_func[3] = {
274 default_ioport_readb,
275 default_ioport_readw,
276 default_ioport_readl
278 IOPortReadFunc *func = ioport_read_table[index][address];
279 if (!func)
280 func = default_func[index];
281 return func(ioport_opaque[address], address);
284 static void ioport_write(int index, uint32_t address, uint32_t data)
286 static IOPortWriteFunc *default_func[3] = {
287 default_ioport_writeb,
288 default_ioport_writew,
289 default_ioport_writel
291 IOPortWriteFunc *func = ioport_write_table[index][address];
292 if (!func)
293 func = default_func[index];
294 func(ioport_opaque[address], address, data);
297 static uint32_t default_ioport_readb(void *opaque, uint32_t address)
299 #ifdef DEBUG_UNUSED_IOPORT
300 fprintf(stderr, "unused inb: port=0x%04x\n", address);
301 #endif
302 return 0xff;
305 static void default_ioport_writeb(void *opaque, uint32_t address, uint32_t data)
307 #ifdef DEBUG_UNUSED_IOPORT
308 fprintf(stderr, "unused outb: port=0x%04x data=0x%02x\n", address, data);
309 #endif
312 /* default is to make two byte accesses */
313 static uint32_t default_ioport_readw(void *opaque, uint32_t address)
315 uint32_t data;
316 data = ioport_read(0, address);
317 address = (address + 1) & (MAX_IOPORTS - 1);
318 data |= ioport_read(0, address) << 8;
319 return data;
322 static void default_ioport_writew(void *opaque, uint32_t address, uint32_t data)
324 ioport_write(0, address, data & 0xff);
325 address = (address + 1) & (MAX_IOPORTS - 1);
326 ioport_write(0, address, (data >> 8) & 0xff);
329 static uint32_t default_ioport_readl(void *opaque, uint32_t address)
331 #ifdef DEBUG_UNUSED_IOPORT
332 fprintf(stderr, "unused inl: port=0x%04x\n", address);
333 #endif
334 return 0xffffffff;
337 static void default_ioport_writel(void *opaque, uint32_t address, uint32_t data)
339 #ifdef DEBUG_UNUSED_IOPORT
340 fprintf(stderr, "unused outl: port=0x%04x data=0x%02x\n", address, data);
341 #endif
344 /* size is the word size in byte */
345 int register_ioport_read(int start, int length, int size,
346 IOPortReadFunc *func, void *opaque)
348 int i, bsize;
350 if (size == 1) {
351 bsize = 0;
352 } else if (size == 2) {
353 bsize = 1;
354 } else if (size == 4) {
355 bsize = 2;
356 } else {
357 hw_error("register_ioport_read: invalid size");
358 return -1;
360 for(i = start; i < start + length; i += size) {
361 ioport_read_table[bsize][i] = func;
362 if (ioport_opaque[i] != NULL && ioport_opaque[i] != opaque)
363 hw_error("register_ioport_read: invalid opaque");
364 ioport_opaque[i] = opaque;
366 return 0;
369 /* size is the word size in byte */
370 int register_ioport_write(int start, int length, int size,
371 IOPortWriteFunc *func, void *opaque)
373 int i, bsize;
375 if (size == 1) {
376 bsize = 0;
377 } else if (size == 2) {
378 bsize = 1;
379 } else if (size == 4) {
380 bsize = 2;
381 } else {
382 hw_error("register_ioport_write: invalid size");
383 return -1;
385 for(i = start; i < start + length; i += size) {
386 ioport_write_table[bsize][i] = func;
387 if (ioport_opaque[i] != NULL && ioport_opaque[i] != opaque)
388 hw_error("register_ioport_write: invalid opaque");
389 ioport_opaque[i] = opaque;
391 return 0;
394 void isa_unassign_ioport(int start, int length)
396 int i;
398 for(i = start; i < start + length; i++) {
399 ioport_read_table[0][i] = default_ioport_readb;
400 ioport_read_table[1][i] = default_ioport_readw;
401 ioport_read_table[2][i] = default_ioport_readl;
403 ioport_write_table[0][i] = default_ioport_writeb;
404 ioport_write_table[1][i] = default_ioport_writew;
405 ioport_write_table[2][i] = default_ioport_writel;
409 /***********************************************************/
411 void cpu_outb(CPUState *env, int addr, int val)
413 #ifdef DEBUG_IOPORT
414 if (loglevel & CPU_LOG_IOPORT)
415 fprintf(logfile, "outb: %04x %02x\n", addr, val);
416 #endif
417 ioport_write(0, addr, val);
418 #ifdef USE_KQEMU
419 if (env)
420 env->last_io_time = cpu_get_time_fast();
421 #endif
424 void cpu_outw(CPUState *env, int addr, int val)
426 #ifdef DEBUG_IOPORT
427 if (loglevel & CPU_LOG_IOPORT)
428 fprintf(logfile, "outw: %04x %04x\n", addr, val);
429 #endif
430 ioport_write(1, addr, val);
431 #ifdef USE_KQEMU
432 if (env)
433 env->last_io_time = cpu_get_time_fast();
434 #endif
437 void cpu_outl(CPUState *env, int addr, int val)
439 #ifdef DEBUG_IOPORT
440 if (loglevel & CPU_LOG_IOPORT)
441 fprintf(logfile, "outl: %04x %08x\n", addr, val);
442 #endif
443 ioport_write(2, addr, val);
444 #ifdef USE_KQEMU
445 if (env)
446 env->last_io_time = cpu_get_time_fast();
447 #endif
450 int cpu_inb(CPUState *env, int addr)
452 int val;
453 val = ioport_read(0, addr);
454 #ifdef DEBUG_IOPORT
455 if (loglevel & CPU_LOG_IOPORT)
456 fprintf(logfile, "inb : %04x %02x\n", addr, val);
457 #endif
458 #ifdef USE_KQEMU
459 if (env)
460 env->last_io_time = cpu_get_time_fast();
461 #endif
462 return val;
465 int cpu_inw(CPUState *env, int addr)
467 int val;
468 val = ioport_read(1, addr);
469 #ifdef DEBUG_IOPORT
470 if (loglevel & CPU_LOG_IOPORT)
471 fprintf(logfile, "inw : %04x %04x\n", addr, val);
472 #endif
473 #ifdef USE_KQEMU
474 if (env)
475 env->last_io_time = cpu_get_time_fast();
476 #endif
477 return val;
480 int cpu_inl(CPUState *env, int addr)
482 int val;
483 val = ioport_read(2, addr);
484 #ifdef DEBUG_IOPORT
485 if (loglevel & CPU_LOG_IOPORT)
486 fprintf(logfile, "inl : %04x %08x\n", addr, val);
487 #endif
488 #ifdef USE_KQEMU
489 if (env)
490 env->last_io_time = cpu_get_time_fast();
491 #endif
492 return val;
495 /***********************************************************/
496 void hw_error(const char *fmt, ...)
498 va_list ap;
499 CPUState *env;
501 va_start(ap, fmt);
502 fprintf(stderr, "qemu: hardware error: ");
503 vfprintf(stderr, fmt, ap);
504 fprintf(stderr, "\n");
505 for(env = first_cpu; env != NULL; env = env->next_cpu) {
506 fprintf(stderr, "CPU #%d:\n", env->cpu_index);
507 #ifdef TARGET_I386
508 cpu_dump_state(env, stderr, fprintf, X86_DUMP_FPU);
509 #else
510 cpu_dump_state(env, stderr, fprintf, 0);
511 #endif
513 va_end(ap);
514 abort();
517 /***********************************************************/
518 /* keyboard/mouse */
520 static QEMUPutKBDEvent *qemu_put_kbd_event;
521 static void *qemu_put_kbd_event_opaque;
522 static QEMUPutMouseEntry *qemu_put_mouse_event_head;
523 static QEMUPutMouseEntry *qemu_put_mouse_event_current;
525 void qemu_add_kbd_event_handler(QEMUPutKBDEvent *func, void *opaque)
527 qemu_put_kbd_event_opaque = opaque;
528 qemu_put_kbd_event = func;
531 QEMUPutMouseEntry *qemu_add_mouse_event_handler(QEMUPutMouseEvent *func,
532 void *opaque, int absolute,
533 const char *name)
535 QEMUPutMouseEntry *s, *cursor;
537 s = qemu_mallocz(sizeof(QEMUPutMouseEntry));
538 if (!s)
539 return NULL;
541 s->qemu_put_mouse_event = func;
542 s->qemu_put_mouse_event_opaque = opaque;
543 s->qemu_put_mouse_event_absolute = absolute;
544 s->qemu_put_mouse_event_name = qemu_strdup(name);
545 s->next = NULL;
547 if (!qemu_put_mouse_event_head) {
548 qemu_put_mouse_event_head = qemu_put_mouse_event_current = s;
549 return s;
552 cursor = qemu_put_mouse_event_head;
553 while (cursor->next != NULL)
554 cursor = cursor->next;
556 cursor->next = s;
557 qemu_put_mouse_event_current = s;
559 return s;
562 void qemu_remove_mouse_event_handler(QEMUPutMouseEntry *entry)
564 QEMUPutMouseEntry *prev = NULL, *cursor;
566 if (!qemu_put_mouse_event_head || entry == NULL)
567 return;
569 cursor = qemu_put_mouse_event_head;
570 while (cursor != NULL && cursor != entry) {
571 prev = cursor;
572 cursor = cursor->next;
575 if (cursor == NULL) // does not exist or list empty
576 return;
577 else if (prev == NULL) { // entry is head
578 qemu_put_mouse_event_head = cursor->next;
579 if (qemu_put_mouse_event_current == entry)
580 qemu_put_mouse_event_current = cursor->next;
581 qemu_free(entry->qemu_put_mouse_event_name);
582 qemu_free(entry);
583 return;
586 prev->next = entry->next;
588 if (qemu_put_mouse_event_current == entry)
589 qemu_put_mouse_event_current = prev;
591 qemu_free(entry->qemu_put_mouse_event_name);
592 qemu_free(entry);
595 void kbd_put_keycode(int keycode)
597 if (qemu_put_kbd_event) {
598 qemu_put_kbd_event(qemu_put_kbd_event_opaque, keycode);
602 void kbd_mouse_event(int dx, int dy, int dz, int buttons_state)
604 QEMUPutMouseEvent *mouse_event;
605 void *mouse_event_opaque;
606 int width;
608 if (!qemu_put_mouse_event_current) {
609 return;
612 mouse_event =
613 qemu_put_mouse_event_current->qemu_put_mouse_event;
614 mouse_event_opaque =
615 qemu_put_mouse_event_current->qemu_put_mouse_event_opaque;
617 if (mouse_event) {
618 if (graphic_rotate) {
619 if (qemu_put_mouse_event_current->qemu_put_mouse_event_absolute)
620 width = 0x7fff;
621 else
622 width = graphic_width - 1;
623 mouse_event(mouse_event_opaque,
624 width - dy, dx, dz, buttons_state);
625 } else
626 mouse_event(mouse_event_opaque,
627 dx, dy, dz, buttons_state);
631 int kbd_mouse_is_absolute(void)
633 if (!qemu_put_mouse_event_current)
634 return 0;
636 return qemu_put_mouse_event_current->qemu_put_mouse_event_absolute;
639 void do_info_mice(void)
641 QEMUPutMouseEntry *cursor;
642 int index = 0;
644 if (!qemu_put_mouse_event_head) {
645 term_printf("No mouse devices connected\n");
646 return;
649 term_printf("Mouse devices available:\n");
650 cursor = qemu_put_mouse_event_head;
651 while (cursor != NULL) {
652 term_printf("%c Mouse #%d: %s\n",
653 (cursor == qemu_put_mouse_event_current ? '*' : ' '),
654 index, cursor->qemu_put_mouse_event_name);
655 index++;
656 cursor = cursor->next;
660 void do_mouse_set(int index)
662 QEMUPutMouseEntry *cursor;
663 int i = 0;
665 if (!qemu_put_mouse_event_head) {
666 term_printf("No mouse devices connected\n");
667 return;
670 cursor = qemu_put_mouse_event_head;
671 while (cursor != NULL && index != i) {
672 i++;
673 cursor = cursor->next;
676 if (cursor != NULL)
677 qemu_put_mouse_event_current = cursor;
678 else
679 term_printf("Mouse at given index not found\n");
682 /* compute with 96 bit intermediate result: (a*b)/c */
683 uint64_t muldiv64(uint64_t a, uint32_t b, uint32_t c)
685 union {
686 uint64_t ll;
687 struct {
688 #ifdef WORDS_BIGENDIAN
689 uint32_t high, low;
690 #else
691 uint32_t low, high;
692 #endif
693 } l;
694 } u, res;
695 uint64_t rl, rh;
697 u.ll = a;
698 rl = (uint64_t)u.l.low * (uint64_t)b;
699 rh = (uint64_t)u.l.high * (uint64_t)b;
700 rh += (rl >> 32);
701 res.l.high = rh / c;
702 res.l.low = (((rh % c) << 32) + (rl & 0xffffffff)) / c;
703 return res.ll;
706 /***********************************************************/
707 /* real time host monotonic timer */
709 #define QEMU_TIMER_BASE 1000000000LL
711 #ifdef WIN32
713 static int64_t clock_freq;
715 static void init_get_clock(void)
717 LARGE_INTEGER freq;
718 int ret;
719 ret = QueryPerformanceFrequency(&freq);
720 if (ret == 0) {
721 fprintf(stderr, "Could not calibrate ticks\n");
722 exit(1);
724 clock_freq = freq.QuadPart;
727 static int64_t get_clock(void)
729 LARGE_INTEGER ti;
730 QueryPerformanceCounter(&ti);
731 return muldiv64(ti.QuadPart, QEMU_TIMER_BASE, clock_freq);
734 #else
736 static int use_rt_clock;
738 static void init_get_clock(void)
740 use_rt_clock = 0;
741 #if defined(__linux__)
743 struct timespec ts;
744 if (clock_gettime(CLOCK_MONOTONIC, &ts) == 0) {
745 use_rt_clock = 1;
748 #endif
751 static int64_t get_clock(void)
753 #if defined(__linux__)
754 if (use_rt_clock) {
755 struct timespec ts;
756 clock_gettime(CLOCK_MONOTONIC, &ts);
757 return ts.tv_sec * 1000000000LL + ts.tv_nsec;
758 } else
759 #endif
761 /* XXX: using gettimeofday leads to problems if the date
762 changes, so it should be avoided. */
763 struct timeval tv;
764 gettimeofday(&tv, NULL);
765 return tv.tv_sec * 1000000000LL + (tv.tv_usec * 1000);
768 #endif
770 /* Return the virtual CPU time, based on the instruction counter. */
771 static int64_t cpu_get_icount(void)
773 int64_t icount;
774 CPUState *env = cpu_single_env;;
775 icount = qemu_icount;
776 if (env) {
777 if (!can_do_io(env))
778 fprintf(stderr, "Bad clock read\n");
779 icount -= (env->icount_decr.u16.low + env->icount_extra);
781 return qemu_icount_bias + (icount << icount_time_shift);
784 /***********************************************************/
785 /* guest cycle counter */
787 static int64_t cpu_ticks_prev;
788 static int64_t cpu_ticks_offset;
789 static int64_t cpu_clock_offset;
790 static int cpu_ticks_enabled;
792 /* return the host CPU cycle counter and handle stop/restart */
793 int64_t cpu_get_ticks(void)
795 if (use_icount) {
796 return cpu_get_icount();
798 if (!cpu_ticks_enabled) {
799 return cpu_ticks_offset;
800 } else {
801 int64_t ticks;
802 ticks = cpu_get_real_ticks();
803 if (cpu_ticks_prev > ticks) {
804 /* Note: non increasing ticks may happen if the host uses
805 software suspend */
806 cpu_ticks_offset += cpu_ticks_prev - ticks;
808 cpu_ticks_prev = ticks;
809 return ticks + cpu_ticks_offset;
813 /* return the host CPU monotonic timer and handle stop/restart */
814 static int64_t cpu_get_clock(void)
816 int64_t ti;
817 if (!cpu_ticks_enabled) {
818 return cpu_clock_offset;
819 } else {
820 ti = get_clock();
821 return ti + cpu_clock_offset;
825 /* enable cpu_get_ticks() */
826 void cpu_enable_ticks(void)
828 if (!cpu_ticks_enabled) {
829 cpu_ticks_offset -= cpu_get_real_ticks();
830 cpu_clock_offset -= get_clock();
831 cpu_ticks_enabled = 1;
835 /* disable cpu_get_ticks() : the clock is stopped. You must not call
836 cpu_get_ticks() after that. */
837 void cpu_disable_ticks(void)
839 if (cpu_ticks_enabled) {
840 cpu_ticks_offset = cpu_get_ticks();
841 cpu_clock_offset = cpu_get_clock();
842 cpu_ticks_enabled = 0;
846 /***********************************************************/
847 /* timers */
849 #define QEMU_TIMER_REALTIME 0
850 #define QEMU_TIMER_VIRTUAL 1
852 struct QEMUClock {
853 int type;
854 /* XXX: add frequency */
857 struct QEMUTimer {
858 QEMUClock *clock;
859 int64_t expire_time;
860 QEMUTimerCB *cb;
861 void *opaque;
862 struct QEMUTimer *next;
865 struct qemu_alarm_timer {
866 char const *name;
867 unsigned int flags;
869 int (*start)(struct qemu_alarm_timer *t);
870 void (*stop)(struct qemu_alarm_timer *t);
871 void (*rearm)(struct qemu_alarm_timer *t);
872 void *priv;
875 #define ALARM_FLAG_DYNTICKS 0x1
876 #define ALARM_FLAG_EXPIRED 0x2
878 static inline int alarm_has_dynticks(struct qemu_alarm_timer *t)
880 return t->flags & ALARM_FLAG_DYNTICKS;
883 static void qemu_rearm_alarm_timer(struct qemu_alarm_timer *t)
885 if (!alarm_has_dynticks(t))
886 return;
888 t->rearm(t);
891 /* TODO: MIN_TIMER_REARM_US should be optimized */
892 #define MIN_TIMER_REARM_US 250
894 static struct qemu_alarm_timer *alarm_timer;
896 #ifdef _WIN32
898 struct qemu_alarm_win32 {
899 MMRESULT timerId;
900 HANDLE host_alarm;
901 unsigned int period;
902 } alarm_win32_data = {0, NULL, -1};
904 static int win32_start_timer(struct qemu_alarm_timer *t);
905 static void win32_stop_timer(struct qemu_alarm_timer *t);
906 static void win32_rearm_timer(struct qemu_alarm_timer *t);
908 #else
910 static int unix_start_timer(struct qemu_alarm_timer *t);
911 static void unix_stop_timer(struct qemu_alarm_timer *t);
913 #ifdef __linux__
915 static int dynticks_start_timer(struct qemu_alarm_timer *t);
916 static void dynticks_stop_timer(struct qemu_alarm_timer *t);
917 static void dynticks_rearm_timer(struct qemu_alarm_timer *t);
919 static int hpet_start_timer(struct qemu_alarm_timer *t);
920 static void hpet_stop_timer(struct qemu_alarm_timer *t);
922 static int rtc_start_timer(struct qemu_alarm_timer *t);
923 static void rtc_stop_timer(struct qemu_alarm_timer *t);
925 #endif /* __linux__ */
927 #endif /* _WIN32 */
929 /* Correlation between real and virtual time is always going to be
930 fairly approximate, so ignore small variation.
931 When the guest is idle real and virtual time will be aligned in
932 the IO wait loop. */
933 #define ICOUNT_WOBBLE (QEMU_TIMER_BASE / 10)
935 static void icount_adjust(void)
937 int64_t cur_time;
938 int64_t cur_icount;
939 int64_t delta;
940 static int64_t last_delta;
941 /* If the VM is not running, then do nothing. */
942 if (!vm_running)
943 return;
945 cur_time = cpu_get_clock();
946 cur_icount = qemu_get_clock(vm_clock);
947 delta = cur_icount - cur_time;
948 /* FIXME: This is a very crude algorithm, somewhat prone to oscillation. */
949 if (delta > 0
950 && last_delta + ICOUNT_WOBBLE < delta * 2
951 && icount_time_shift > 0) {
952 /* The guest is getting too far ahead. Slow time down. */
953 icount_time_shift--;
955 if (delta < 0
956 && last_delta - ICOUNT_WOBBLE > delta * 2
957 && icount_time_shift < MAX_ICOUNT_SHIFT) {
958 /* The guest is getting too far behind. Speed time up. */
959 icount_time_shift++;
961 last_delta = delta;
962 qemu_icount_bias = cur_icount - (qemu_icount << icount_time_shift);
965 static void icount_adjust_rt(void * opaque)
967 qemu_mod_timer(icount_rt_timer,
968 qemu_get_clock(rt_clock) + 1000);
969 icount_adjust();
972 static void icount_adjust_vm(void * opaque)
974 qemu_mod_timer(icount_vm_timer,
975 qemu_get_clock(vm_clock) + QEMU_TIMER_BASE / 10);
976 icount_adjust();
979 static void init_icount_adjust(void)
981 /* Have both realtime and virtual time triggers for speed adjustment.
982 The realtime trigger catches emulated time passing too slowly,
983 the virtual time trigger catches emulated time passing too fast.
984 Realtime triggers occur even when idle, so use them less frequently
985 than VM triggers. */
986 icount_rt_timer = qemu_new_timer(rt_clock, icount_adjust_rt, NULL);
987 qemu_mod_timer(icount_rt_timer,
988 qemu_get_clock(rt_clock) + 1000);
989 icount_vm_timer = qemu_new_timer(vm_clock, icount_adjust_vm, NULL);
990 qemu_mod_timer(icount_vm_timer,
991 qemu_get_clock(vm_clock) + QEMU_TIMER_BASE / 10);
994 static struct qemu_alarm_timer alarm_timers[] = {
995 #ifndef _WIN32
996 #ifdef __linux__
997 {"dynticks", ALARM_FLAG_DYNTICKS, dynticks_start_timer,
998 dynticks_stop_timer, dynticks_rearm_timer, NULL},
999 /* HPET - if available - is preferred */
1000 {"hpet", 0, hpet_start_timer, hpet_stop_timer, NULL, NULL},
1001 /* ...otherwise try RTC */
1002 {"rtc", 0, rtc_start_timer, rtc_stop_timer, NULL, NULL},
1003 #endif
1004 {"unix", 0, unix_start_timer, unix_stop_timer, NULL, NULL},
1005 #else
1006 {"dynticks", ALARM_FLAG_DYNTICKS, win32_start_timer,
1007 win32_stop_timer, win32_rearm_timer, &alarm_win32_data},
1008 {"win32", 0, win32_start_timer,
1009 win32_stop_timer, NULL, &alarm_win32_data},
1010 #endif
1011 {NULL, }
1014 static void show_available_alarms(void)
1016 int i;
1018 printf("Available alarm timers, in order of precedence:\n");
1019 for (i = 0; alarm_timers[i].name; i++)
1020 printf("%s\n", alarm_timers[i].name);
1023 static void configure_alarms(char const *opt)
1025 int i;
1026 int cur = 0;
1027 int count = (sizeof(alarm_timers) / sizeof(*alarm_timers)) - 1;
1028 char *arg;
1029 char *name;
1030 struct qemu_alarm_timer tmp;
1032 if (!strcmp(opt, "?")) {
1033 show_available_alarms();
1034 exit(0);
1037 arg = strdup(opt);
1039 /* Reorder the array */
1040 name = strtok(arg, ",");
1041 while (name) {
1042 for (i = 0; i < count && alarm_timers[i].name; i++) {
1043 if (!strcmp(alarm_timers[i].name, name))
1044 break;
1047 if (i == count) {
1048 fprintf(stderr, "Unknown clock %s\n", name);
1049 goto next;
1052 if (i < cur)
1053 /* Ignore */
1054 goto next;
1056 /* Swap */
1057 tmp = alarm_timers[i];
1058 alarm_timers[i] = alarm_timers[cur];
1059 alarm_timers[cur] = tmp;
1061 cur++;
1062 next:
1063 name = strtok(NULL, ",");
1066 free(arg);
1068 if (cur) {
1069 /* Disable remaining timers */
1070 for (i = cur; i < count; i++)
1071 alarm_timers[i].name = NULL;
1072 } else {
1073 show_available_alarms();
1074 exit(1);
1078 QEMUClock *rt_clock;
1079 QEMUClock *vm_clock;
1081 static QEMUTimer *active_timers[2];
1083 static QEMUClock *qemu_new_clock(int type)
1085 QEMUClock *clock;
1086 clock = qemu_mallocz(sizeof(QEMUClock));
1087 if (!clock)
1088 return NULL;
1089 clock->type = type;
1090 return clock;
1093 QEMUTimer *qemu_new_timer(QEMUClock *clock, QEMUTimerCB *cb, void *opaque)
1095 QEMUTimer *ts;
1097 ts = qemu_mallocz(sizeof(QEMUTimer));
1098 ts->clock = clock;
1099 ts->cb = cb;
1100 ts->opaque = opaque;
1101 return ts;
1104 void qemu_free_timer(QEMUTimer *ts)
1106 qemu_free(ts);
1109 /* stop a timer, but do not dealloc it */
1110 void qemu_del_timer(QEMUTimer *ts)
1112 QEMUTimer **pt, *t;
1114 /* NOTE: this code must be signal safe because
1115 qemu_timer_expired() can be called from a signal. */
1116 pt = &active_timers[ts->clock->type];
1117 for(;;) {
1118 t = *pt;
1119 if (!t)
1120 break;
1121 if (t == ts) {
1122 *pt = t->next;
1123 break;
1125 pt = &t->next;
1129 /* modify the current timer so that it will be fired when current_time
1130 >= expire_time. The corresponding callback will be called. */
1131 void qemu_mod_timer(QEMUTimer *ts, int64_t expire_time)
1133 QEMUTimer **pt, *t;
1135 qemu_del_timer(ts);
1137 /* add the timer in the sorted list */
1138 /* NOTE: this code must be signal safe because
1139 qemu_timer_expired() can be called from a signal. */
1140 pt = &active_timers[ts->clock->type];
1141 for(;;) {
1142 t = *pt;
1143 if (!t)
1144 break;
1145 if (t->expire_time > expire_time)
1146 break;
1147 pt = &t->next;
1149 ts->expire_time = expire_time;
1150 ts->next = *pt;
1151 *pt = ts;
1153 /* Rearm if necessary */
1154 if (pt == &active_timers[ts->clock->type]) {
1155 if ((alarm_timer->flags & ALARM_FLAG_EXPIRED) == 0) {
1156 qemu_rearm_alarm_timer(alarm_timer);
1158 /* Interrupt execution to force deadline recalculation. */
1159 if (use_icount && cpu_single_env) {
1160 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
1165 int qemu_timer_pending(QEMUTimer *ts)
1167 QEMUTimer *t;
1168 for(t = active_timers[ts->clock->type]; t != NULL; t = t->next) {
1169 if (t == ts)
1170 return 1;
1172 return 0;
1175 static inline int qemu_timer_expired(QEMUTimer *timer_head, int64_t current_time)
1177 if (!timer_head)
1178 return 0;
1179 return (timer_head->expire_time <= current_time);
1182 static void qemu_run_timers(QEMUTimer **ptimer_head, int64_t current_time)
1184 QEMUTimer *ts;
1186 for(;;) {
1187 ts = *ptimer_head;
1188 if (!ts || ts->expire_time > current_time)
1189 break;
1190 /* remove timer from the list before calling the callback */
1191 *ptimer_head = ts->next;
1192 ts->next = NULL;
1194 /* run the callback (the timer list can be modified) */
1195 ts->cb(ts->opaque);
1199 int64_t qemu_get_clock(QEMUClock *clock)
1201 switch(clock->type) {
1202 case QEMU_TIMER_REALTIME:
1203 return get_clock() / 1000000;
1204 default:
1205 case QEMU_TIMER_VIRTUAL:
1206 if (use_icount) {
1207 return cpu_get_icount();
1208 } else {
1209 return cpu_get_clock();
1214 static void init_timers(void)
1216 init_get_clock();
1217 ticks_per_sec = QEMU_TIMER_BASE;
1218 rt_clock = qemu_new_clock(QEMU_TIMER_REALTIME);
1219 vm_clock = qemu_new_clock(QEMU_TIMER_VIRTUAL);
1222 /* save a timer */
1223 void qemu_put_timer(QEMUFile *f, QEMUTimer *ts)
1225 uint64_t expire_time;
1227 if (qemu_timer_pending(ts)) {
1228 expire_time = ts->expire_time;
1229 } else {
1230 expire_time = -1;
1232 qemu_put_be64(f, expire_time);
1235 void qemu_get_timer(QEMUFile *f, QEMUTimer *ts)
1237 uint64_t expire_time;
1239 expire_time = qemu_get_be64(f);
1240 if (expire_time != -1) {
1241 qemu_mod_timer(ts, expire_time);
1242 } else {
1243 qemu_del_timer(ts);
1247 static void timer_save(QEMUFile *f, void *opaque)
1249 if (cpu_ticks_enabled) {
1250 hw_error("cannot save state if virtual timers are running");
1252 qemu_put_be64(f, cpu_ticks_offset);
1253 qemu_put_be64(f, ticks_per_sec);
1254 qemu_put_be64(f, cpu_clock_offset);
1257 static int timer_load(QEMUFile *f, void *opaque, int version_id)
1259 if (version_id != 1 && version_id != 2)
1260 return -EINVAL;
1261 if (cpu_ticks_enabled) {
1262 return -EINVAL;
1264 cpu_ticks_offset=qemu_get_be64(f);
1265 ticks_per_sec=qemu_get_be64(f);
1266 if (version_id == 2) {
1267 cpu_clock_offset=qemu_get_be64(f);
1269 return 0;
1272 #ifdef _WIN32
1273 void CALLBACK host_alarm_handler(UINT uTimerID, UINT uMsg,
1274 DWORD_PTR dwUser, DWORD_PTR dw1, DWORD_PTR dw2)
1275 #else
1276 static void host_alarm_handler(int host_signum)
1277 #endif
1279 #if 0
1280 #define DISP_FREQ 1000
1282 static int64_t delta_min = INT64_MAX;
1283 static int64_t delta_max, delta_cum, last_clock, delta, ti;
1284 static int count;
1285 ti = qemu_get_clock(vm_clock);
1286 if (last_clock != 0) {
1287 delta = ti - last_clock;
1288 if (delta < delta_min)
1289 delta_min = delta;
1290 if (delta > delta_max)
1291 delta_max = delta;
1292 delta_cum += delta;
1293 if (++count == DISP_FREQ) {
1294 printf("timer: min=%" PRId64 " us max=%" PRId64 " us avg=%" PRId64 " us avg_freq=%0.3f Hz\n",
1295 muldiv64(delta_min, 1000000, ticks_per_sec),
1296 muldiv64(delta_max, 1000000, ticks_per_sec),
1297 muldiv64(delta_cum, 1000000 / DISP_FREQ, ticks_per_sec),
1298 (double)ticks_per_sec / ((double)delta_cum / DISP_FREQ));
1299 count = 0;
1300 delta_min = INT64_MAX;
1301 delta_max = 0;
1302 delta_cum = 0;
1305 last_clock = ti;
1307 #endif
1308 if (alarm_has_dynticks(alarm_timer) ||
1309 (!use_icount &&
1310 qemu_timer_expired(active_timers[QEMU_TIMER_VIRTUAL],
1311 qemu_get_clock(vm_clock))) ||
1312 qemu_timer_expired(active_timers[QEMU_TIMER_REALTIME],
1313 qemu_get_clock(rt_clock))) {
1314 #ifdef _WIN32
1315 struct qemu_alarm_win32 *data = ((struct qemu_alarm_timer*)dwUser)->priv;
1316 SetEvent(data->host_alarm);
1317 #endif
1318 CPUState *env = next_cpu;
1320 alarm_timer->flags |= ALARM_FLAG_EXPIRED;
1322 if (env) {
1323 /* stop the currently executing cpu because a timer occured */
1324 cpu_interrupt(env, CPU_INTERRUPT_EXIT);
1325 #ifdef USE_KQEMU
1326 if (env->kqemu_enabled) {
1327 kqemu_cpu_interrupt(env);
1329 #endif
1331 event_pending = 1;
1335 static int64_t qemu_next_deadline(void)
1337 int64_t delta;
1339 if (active_timers[QEMU_TIMER_VIRTUAL]) {
1340 delta = active_timers[QEMU_TIMER_VIRTUAL]->expire_time -
1341 qemu_get_clock(vm_clock);
1342 } else {
1343 /* To avoid problems with overflow limit this to 2^32. */
1344 delta = INT32_MAX;
1347 if (delta < 0)
1348 delta = 0;
1350 return delta;
1353 static uint64_t qemu_next_deadline_dyntick(void)
1355 int64_t delta;
1356 int64_t rtdelta;
1358 if (use_icount)
1359 delta = INT32_MAX;
1360 else
1361 delta = (qemu_next_deadline() + 999) / 1000;
1363 if (active_timers[QEMU_TIMER_REALTIME]) {
1364 rtdelta = (active_timers[QEMU_TIMER_REALTIME]->expire_time -
1365 qemu_get_clock(rt_clock))*1000;
1366 if (rtdelta < delta)
1367 delta = rtdelta;
1370 if (delta < MIN_TIMER_REARM_US)
1371 delta = MIN_TIMER_REARM_US;
1373 return delta;
1376 #ifndef _WIN32
1378 #if defined(__linux__)
1380 #define RTC_FREQ 1024
1382 static void enable_sigio_timer(int fd)
1384 struct sigaction act;
1386 /* timer signal */
1387 sigfillset(&act.sa_mask);
1388 act.sa_flags = 0;
1389 act.sa_handler = host_alarm_handler;
1391 sigaction(SIGIO, &act, NULL);
1392 fcntl(fd, F_SETFL, O_ASYNC);
1393 fcntl(fd, F_SETOWN, getpid());
1396 static int hpet_start_timer(struct qemu_alarm_timer *t)
1398 struct hpet_info info;
1399 int r, fd;
1401 fd = open("/dev/hpet", O_RDONLY);
1402 if (fd < 0)
1403 return -1;
1405 /* Set frequency */
1406 r = ioctl(fd, HPET_IRQFREQ, RTC_FREQ);
1407 if (r < 0) {
1408 fprintf(stderr, "Could not configure '/dev/hpet' to have a 1024Hz timer. This is not a fatal\n"
1409 "error, but for better emulation accuracy type:\n"
1410 "'echo 1024 > /proc/sys/dev/hpet/max-user-freq' as root.\n");
1411 goto fail;
1414 /* Check capabilities */
1415 r = ioctl(fd, HPET_INFO, &info);
1416 if (r < 0)
1417 goto fail;
1419 /* Enable periodic mode */
1420 r = ioctl(fd, HPET_EPI, 0);
1421 if (info.hi_flags && (r < 0))
1422 goto fail;
1424 /* Enable interrupt */
1425 r = ioctl(fd, HPET_IE_ON, 0);
1426 if (r < 0)
1427 goto fail;
1429 enable_sigio_timer(fd);
1430 t->priv = (void *)(long)fd;
1432 return 0;
1433 fail:
1434 close(fd);
1435 return -1;
1438 static void hpet_stop_timer(struct qemu_alarm_timer *t)
1440 int fd = (long)t->priv;
1442 close(fd);
1445 static int rtc_start_timer(struct qemu_alarm_timer *t)
1447 int rtc_fd;
1448 unsigned long current_rtc_freq = 0;
1450 TFR(rtc_fd = open("/dev/rtc", O_RDONLY));
1451 if (rtc_fd < 0)
1452 return -1;
1453 ioctl(rtc_fd, RTC_IRQP_READ, &current_rtc_freq);
1454 if (current_rtc_freq != RTC_FREQ &&
1455 ioctl(rtc_fd, RTC_IRQP_SET, RTC_FREQ) < 0) {
1456 fprintf(stderr, "Could not configure '/dev/rtc' to have a 1024 Hz timer. This is not a fatal\n"
1457 "error, but for better emulation accuracy either use a 2.6 host Linux kernel or\n"
1458 "type 'echo 1024 > /proc/sys/dev/rtc/max-user-freq' as root.\n");
1459 goto fail;
1461 if (ioctl(rtc_fd, RTC_PIE_ON, 0) < 0) {
1462 fail:
1463 close(rtc_fd);
1464 return -1;
1467 enable_sigio_timer(rtc_fd);
1469 t->priv = (void *)(long)rtc_fd;
1471 return 0;
1474 static void rtc_stop_timer(struct qemu_alarm_timer *t)
1476 int rtc_fd = (long)t->priv;
1478 close(rtc_fd);
1481 static int dynticks_start_timer(struct qemu_alarm_timer *t)
1483 struct sigevent ev;
1484 timer_t host_timer;
1485 struct sigaction act;
1487 sigfillset(&act.sa_mask);
1488 act.sa_flags = 0;
1489 act.sa_handler = host_alarm_handler;
1491 sigaction(SIGALRM, &act, NULL);
1493 ev.sigev_value.sival_int = 0;
1494 ev.sigev_notify = SIGEV_SIGNAL;
1495 ev.sigev_signo = SIGALRM;
1497 if (timer_create(CLOCK_REALTIME, &ev, &host_timer)) {
1498 perror("timer_create");
1500 /* disable dynticks */
1501 fprintf(stderr, "Dynamic Ticks disabled\n");
1503 return -1;
1506 t->priv = (void *)host_timer;
1508 return 0;
1511 static void dynticks_stop_timer(struct qemu_alarm_timer *t)
1513 timer_t host_timer = (timer_t)t->priv;
1515 timer_delete(host_timer);
1518 static void dynticks_rearm_timer(struct qemu_alarm_timer *t)
1520 timer_t host_timer = (timer_t)t->priv;
1521 struct itimerspec timeout;
1522 int64_t nearest_delta_us = INT64_MAX;
1523 int64_t current_us;
1525 if (!active_timers[QEMU_TIMER_REALTIME] &&
1526 !active_timers[QEMU_TIMER_VIRTUAL])
1527 return;
1529 nearest_delta_us = qemu_next_deadline_dyntick();
1531 /* check whether a timer is already running */
1532 if (timer_gettime(host_timer, &timeout)) {
1533 perror("gettime");
1534 fprintf(stderr, "Internal timer error: aborting\n");
1535 exit(1);
1537 current_us = timeout.it_value.tv_sec * 1000000 + timeout.it_value.tv_nsec/1000;
1538 if (current_us && current_us <= nearest_delta_us)
1539 return;
1541 timeout.it_interval.tv_sec = 0;
1542 timeout.it_interval.tv_nsec = 0; /* 0 for one-shot timer */
1543 timeout.it_value.tv_sec = nearest_delta_us / 1000000;
1544 timeout.it_value.tv_nsec = (nearest_delta_us % 1000000) * 1000;
1545 if (timer_settime(host_timer, 0 /* RELATIVE */, &timeout, NULL)) {
1546 perror("settime");
1547 fprintf(stderr, "Internal timer error: aborting\n");
1548 exit(1);
1552 #endif /* defined(__linux__) */
1554 static int unix_start_timer(struct qemu_alarm_timer *t)
1556 struct sigaction act;
1557 struct itimerval itv;
1558 int err;
1560 /* timer signal */
1561 sigfillset(&act.sa_mask);
1562 act.sa_flags = 0;
1563 act.sa_handler = host_alarm_handler;
1565 sigaction(SIGALRM, &act, NULL);
1567 itv.it_interval.tv_sec = 0;
1568 /* for i386 kernel 2.6 to get 1 ms */
1569 itv.it_interval.tv_usec = 999;
1570 itv.it_value.tv_sec = 0;
1571 itv.it_value.tv_usec = 10 * 1000;
1573 err = setitimer(ITIMER_REAL, &itv, NULL);
1574 if (err)
1575 return -1;
1577 return 0;
1580 static void unix_stop_timer(struct qemu_alarm_timer *t)
1582 struct itimerval itv;
1584 memset(&itv, 0, sizeof(itv));
1585 setitimer(ITIMER_REAL, &itv, NULL);
1588 #endif /* !defined(_WIN32) */
1590 #ifdef _WIN32
1592 static int win32_start_timer(struct qemu_alarm_timer *t)
1594 TIMECAPS tc;
1595 struct qemu_alarm_win32 *data = t->priv;
1596 UINT flags;
1598 data->host_alarm = CreateEvent(NULL, FALSE, FALSE, NULL);
1599 if (!data->host_alarm) {
1600 perror("Failed CreateEvent");
1601 return -1;
1604 memset(&tc, 0, sizeof(tc));
1605 timeGetDevCaps(&tc, sizeof(tc));
1607 if (data->period < tc.wPeriodMin)
1608 data->period = tc.wPeriodMin;
1610 timeBeginPeriod(data->period);
1612 flags = TIME_CALLBACK_FUNCTION;
1613 if (alarm_has_dynticks(t))
1614 flags |= TIME_ONESHOT;
1615 else
1616 flags |= TIME_PERIODIC;
1618 data->timerId = timeSetEvent(1, // interval (ms)
1619 data->period, // resolution
1620 host_alarm_handler, // function
1621 (DWORD)t, // parameter
1622 flags);
1624 if (!data->timerId) {
1625 perror("Failed to initialize win32 alarm timer");
1627 timeEndPeriod(data->period);
1628 CloseHandle(data->host_alarm);
1629 return -1;
1632 qemu_add_wait_object(data->host_alarm, NULL, NULL);
1634 return 0;
1637 static void win32_stop_timer(struct qemu_alarm_timer *t)
1639 struct qemu_alarm_win32 *data = t->priv;
1641 timeKillEvent(data->timerId);
1642 timeEndPeriod(data->period);
1644 CloseHandle(data->host_alarm);
1647 static void win32_rearm_timer(struct qemu_alarm_timer *t)
1649 struct qemu_alarm_win32 *data = t->priv;
1650 uint64_t nearest_delta_us;
1652 if (!active_timers[QEMU_TIMER_REALTIME] &&
1653 !active_timers[QEMU_TIMER_VIRTUAL])
1654 return;
1656 nearest_delta_us = qemu_next_deadline_dyntick();
1657 nearest_delta_us /= 1000;
1659 timeKillEvent(data->timerId);
1661 data->timerId = timeSetEvent(1,
1662 data->period,
1663 host_alarm_handler,
1664 (DWORD)t,
1665 TIME_ONESHOT | TIME_PERIODIC);
1667 if (!data->timerId) {
1668 perror("Failed to re-arm win32 alarm timer");
1670 timeEndPeriod(data->period);
1671 CloseHandle(data->host_alarm);
1672 exit(1);
1676 #endif /* _WIN32 */
1678 static void init_timer_alarm(void)
1680 struct qemu_alarm_timer *t;
1681 int i, err = -1;
1683 for (i = 0; alarm_timers[i].name; i++) {
1684 t = &alarm_timers[i];
1686 err = t->start(t);
1687 if (!err)
1688 break;
1691 if (err) {
1692 fprintf(stderr, "Unable to find any suitable alarm timer.\n");
1693 fprintf(stderr, "Terminating\n");
1694 exit(1);
1697 alarm_timer = t;
1700 static void quit_timers(void)
1702 alarm_timer->stop(alarm_timer);
1703 alarm_timer = NULL;
1706 /***********************************************************/
1707 /* host time/date access */
1708 void qemu_get_timedate(struct tm *tm, int offset)
1710 time_t ti;
1711 struct tm *ret;
1713 time(&ti);
1714 ti += offset;
1715 if (rtc_date_offset == -1) {
1716 if (rtc_utc)
1717 ret = gmtime(&ti);
1718 else
1719 ret = localtime(&ti);
1720 } else {
1721 ti -= rtc_date_offset;
1722 ret = gmtime(&ti);
1725 memcpy(tm, ret, sizeof(struct tm));
1728 int qemu_timedate_diff(struct tm *tm)
1730 time_t seconds;
1732 if (rtc_date_offset == -1)
1733 if (rtc_utc)
1734 seconds = mktimegm(tm);
1735 else
1736 seconds = mktime(tm);
1737 else
1738 seconds = mktimegm(tm) + rtc_date_offset;
1740 return seconds - time(NULL);
1743 /***********************************************************/
1744 /* character device */
1746 static void qemu_chr_event(CharDriverState *s, int event)
1748 if (!s->chr_event)
1749 return;
1750 s->chr_event(s->handler_opaque, event);
1753 static void qemu_chr_reset_bh(void *opaque)
1755 CharDriverState *s = opaque;
1756 qemu_chr_event(s, CHR_EVENT_RESET);
1757 qemu_bh_delete(s->bh);
1758 s->bh = NULL;
1761 void qemu_chr_reset(CharDriverState *s)
1763 if (s->bh == NULL) {
1764 s->bh = qemu_bh_new(qemu_chr_reset_bh, s);
1765 qemu_bh_schedule(s->bh);
1769 int qemu_chr_write(CharDriverState *s, const uint8_t *buf, int len)
1771 return s->chr_write(s, buf, len);
1774 int qemu_chr_ioctl(CharDriverState *s, int cmd, void *arg)
1776 if (!s->chr_ioctl)
1777 return -ENOTSUP;
1778 return s->chr_ioctl(s, cmd, arg);
1781 int qemu_chr_can_read(CharDriverState *s)
1783 if (!s->chr_can_read)
1784 return 0;
1785 return s->chr_can_read(s->handler_opaque);
1788 void qemu_chr_read(CharDriverState *s, uint8_t *buf, int len)
1790 s->chr_read(s->handler_opaque, buf, len);
1793 void qemu_chr_accept_input(CharDriverState *s)
1795 if (s->chr_accept_input)
1796 s->chr_accept_input(s);
1799 void qemu_chr_printf(CharDriverState *s, const char *fmt, ...)
1801 char buf[4096];
1802 va_list ap;
1803 va_start(ap, fmt);
1804 vsnprintf(buf, sizeof(buf), fmt, ap);
1805 qemu_chr_write(s, (uint8_t *)buf, strlen(buf));
1806 va_end(ap);
1809 void qemu_chr_send_event(CharDriverState *s, int event)
1811 if (s->chr_send_event)
1812 s->chr_send_event(s, event);
1815 void qemu_chr_add_handlers(CharDriverState *s,
1816 IOCanRWHandler *fd_can_read,
1817 IOReadHandler *fd_read,
1818 IOEventHandler *fd_event,
1819 void *opaque)
1821 s->chr_can_read = fd_can_read;
1822 s->chr_read = fd_read;
1823 s->chr_event = fd_event;
1824 s->handler_opaque = opaque;
1825 if (s->chr_update_read_handler)
1826 s->chr_update_read_handler(s);
1829 static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1831 return len;
1834 static CharDriverState *qemu_chr_open_null(void)
1836 CharDriverState *chr;
1838 chr = qemu_mallocz(sizeof(CharDriverState));
1839 if (!chr)
1840 return NULL;
1841 chr->chr_write = null_chr_write;
1842 return chr;
1845 /* MUX driver for serial I/O splitting */
1846 static int term_timestamps;
1847 static int64_t term_timestamps_start;
1848 #define MAX_MUX 4
1849 #define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
1850 #define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
1851 typedef struct {
1852 IOCanRWHandler *chr_can_read[MAX_MUX];
1853 IOReadHandler *chr_read[MAX_MUX];
1854 IOEventHandler *chr_event[MAX_MUX];
1855 void *ext_opaque[MAX_MUX];
1856 CharDriverState *drv;
1857 unsigned char buffer[MUX_BUFFER_SIZE];
1858 int prod;
1859 int cons;
1860 int mux_cnt;
1861 int term_got_escape;
1862 int max_size;
1863 } MuxDriver;
1866 static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1868 MuxDriver *d = chr->opaque;
1869 int ret;
1870 if (!term_timestamps) {
1871 ret = d->drv->chr_write(d->drv, buf, len);
1872 } else {
1873 int i;
1875 ret = 0;
1876 for(i = 0; i < len; i++) {
1877 ret += d->drv->chr_write(d->drv, buf+i, 1);
1878 if (buf[i] == '\n') {
1879 char buf1[64];
1880 int64_t ti;
1881 int secs;
1883 ti = get_clock();
1884 if (term_timestamps_start == -1)
1885 term_timestamps_start = ti;
1886 ti -= term_timestamps_start;
1887 secs = ti / 1000000000;
1888 snprintf(buf1, sizeof(buf1),
1889 "[%02d:%02d:%02d.%03d] ",
1890 secs / 3600,
1891 (secs / 60) % 60,
1892 secs % 60,
1893 (int)((ti / 1000000) % 1000));
1894 d->drv->chr_write(d->drv, (uint8_t *)buf1, strlen(buf1));
1898 return ret;
1901 static char *mux_help[] = {
1902 "% h print this help\n\r",
1903 "% x exit emulator\n\r",
1904 "% s save disk data back to file (if -snapshot)\n\r",
1905 "% t toggle console timestamps\n\r"
1906 "% b send break (magic sysrq)\n\r",
1907 "% c switch between console and monitor\n\r",
1908 "% % sends %\n\r",
1909 NULL
1912 static int term_escape_char = 0x01; /* ctrl-a is used for escape */
1913 static void mux_print_help(CharDriverState *chr)
1915 int i, j;
1916 char ebuf[15] = "Escape-Char";
1917 char cbuf[50] = "\n\r";
1919 if (term_escape_char > 0 && term_escape_char < 26) {
1920 snprintf(cbuf, sizeof(cbuf), "\n\r");
1921 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
1922 } else {
1923 snprintf(cbuf, sizeof(cbuf),
1924 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
1925 term_escape_char);
1927 chr->chr_write(chr, (uint8_t *)cbuf, strlen(cbuf));
1928 for (i = 0; mux_help[i] != NULL; i++) {
1929 for (j=0; mux_help[i][j] != '\0'; j++) {
1930 if (mux_help[i][j] == '%')
1931 chr->chr_write(chr, (uint8_t *)ebuf, strlen(ebuf));
1932 else
1933 chr->chr_write(chr, (uint8_t *)&mux_help[i][j], 1);
1938 static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
1940 if (d->term_got_escape) {
1941 d->term_got_escape = 0;
1942 if (ch == term_escape_char)
1943 goto send_char;
1944 switch(ch) {
1945 case '?':
1946 case 'h':
1947 mux_print_help(chr);
1948 break;
1949 case 'x':
1951 char *term = "QEMU: Terminated\n\r";
1952 chr->chr_write(chr,(uint8_t *)term,strlen(term));
1953 exit(0);
1954 break;
1956 case 's':
1958 int i;
1959 for (i = 0; i < nb_drives; i++) {
1960 bdrv_commit(drives_table[i].bdrv);
1963 break;
1964 case 'b':
1965 qemu_chr_event(chr, CHR_EVENT_BREAK);
1966 break;
1967 case 'c':
1968 /* Switch to the next registered device */
1969 chr->focus++;
1970 if (chr->focus >= d->mux_cnt)
1971 chr->focus = 0;
1972 break;
1973 case 't':
1974 term_timestamps = !term_timestamps;
1975 term_timestamps_start = -1;
1976 break;
1978 } else if (ch == term_escape_char) {
1979 d->term_got_escape = 1;
1980 } else {
1981 send_char:
1982 return 1;
1984 return 0;
1987 static void mux_chr_accept_input(CharDriverState *chr)
1989 int m = chr->focus;
1990 MuxDriver *d = chr->opaque;
1992 while (d->prod != d->cons &&
1993 d->chr_can_read[m] &&
1994 d->chr_can_read[m](d->ext_opaque[m])) {
1995 d->chr_read[m](d->ext_opaque[m],
1996 &d->buffer[d->cons++ & MUX_BUFFER_MASK], 1);
2000 static int mux_chr_can_read(void *opaque)
2002 CharDriverState *chr = opaque;
2003 MuxDriver *d = chr->opaque;
2005 if ((d->prod - d->cons) < MUX_BUFFER_SIZE)
2006 return 1;
2007 if (d->chr_can_read[chr->focus])
2008 return d->chr_can_read[chr->focus](d->ext_opaque[chr->focus]);
2009 return 0;
2012 static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
2014 CharDriverState *chr = opaque;
2015 MuxDriver *d = chr->opaque;
2016 int m = chr->focus;
2017 int i;
2019 mux_chr_accept_input (opaque);
2021 for(i = 0; i < size; i++)
2022 if (mux_proc_byte(chr, d, buf[i])) {
2023 if (d->prod == d->cons &&
2024 d->chr_can_read[m] &&
2025 d->chr_can_read[m](d->ext_opaque[m]))
2026 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
2027 else
2028 d->buffer[d->prod++ & MUX_BUFFER_MASK] = buf[i];
2032 static void mux_chr_event(void *opaque, int event)
2034 CharDriverState *chr = opaque;
2035 MuxDriver *d = chr->opaque;
2036 int i;
2038 /* Send the event to all registered listeners */
2039 for (i = 0; i < d->mux_cnt; i++)
2040 if (d->chr_event[i])
2041 d->chr_event[i](d->ext_opaque[i], event);
2044 static void mux_chr_update_read_handler(CharDriverState *chr)
2046 MuxDriver *d = chr->opaque;
2048 if (d->mux_cnt >= MAX_MUX) {
2049 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
2050 return;
2052 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
2053 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
2054 d->chr_read[d->mux_cnt] = chr->chr_read;
2055 d->chr_event[d->mux_cnt] = chr->chr_event;
2056 /* Fix up the real driver with mux routines */
2057 if (d->mux_cnt == 0) {
2058 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
2059 mux_chr_event, chr);
2061 chr->focus = d->mux_cnt;
2062 d->mux_cnt++;
2065 static CharDriverState *qemu_chr_open_mux(CharDriverState *drv)
2067 CharDriverState *chr;
2068 MuxDriver *d;
2070 chr = qemu_mallocz(sizeof(CharDriverState));
2071 if (!chr)
2072 return NULL;
2073 d = qemu_mallocz(sizeof(MuxDriver));
2074 if (!d) {
2075 free(chr);
2076 return NULL;
2079 chr->opaque = d;
2080 d->drv = drv;
2081 chr->focus = -1;
2082 chr->chr_write = mux_chr_write;
2083 chr->chr_update_read_handler = mux_chr_update_read_handler;
2084 chr->chr_accept_input = mux_chr_accept_input;
2085 return chr;
2089 #ifdef _WIN32
2091 static void socket_cleanup(void)
2093 WSACleanup();
2096 static int socket_init(void)
2098 WSADATA Data;
2099 int ret, err;
2101 ret = WSAStartup(MAKEWORD(2,2), &Data);
2102 if (ret != 0) {
2103 err = WSAGetLastError();
2104 fprintf(stderr, "WSAStartup: %d\n", err);
2105 return -1;
2107 atexit(socket_cleanup);
2108 return 0;
2111 static int send_all(int fd, const uint8_t *buf, int len1)
2113 int ret, len;
2115 len = len1;
2116 while (len > 0) {
2117 ret = send(fd, buf, len, 0);
2118 if (ret < 0) {
2119 int errno;
2120 errno = WSAGetLastError();
2121 if (errno != WSAEWOULDBLOCK) {
2122 return -1;
2124 } else if (ret == 0) {
2125 break;
2126 } else {
2127 buf += ret;
2128 len -= ret;
2131 return len1 - len;
2134 void socket_set_nonblock(int fd)
2136 unsigned long opt = 1;
2137 ioctlsocket(fd, FIONBIO, &opt);
2140 #else
2142 static int unix_write(int fd, const uint8_t *buf, int len1)
2144 int ret, len;
2146 len = len1;
2147 while (len > 0) {
2148 ret = write(fd, buf, len);
2149 if (ret < 0) {
2150 if (errno != EINTR && errno != EAGAIN)
2151 return -1;
2152 } else if (ret == 0) {
2153 break;
2154 } else {
2155 buf += ret;
2156 len -= ret;
2159 return len1 - len;
2162 static inline int send_all(int fd, const uint8_t *buf, int len1)
2164 return unix_write(fd, buf, len1);
2167 void socket_set_nonblock(int fd)
2169 int f;
2170 f = fcntl(fd, F_GETFL);
2171 fcntl(fd, F_SETFL, f | O_NONBLOCK);
2173 #endif /* !_WIN32 */
2175 #ifndef _WIN32
2177 typedef struct {
2178 int fd_in, fd_out;
2179 int max_size;
2180 } FDCharDriver;
2182 #define STDIO_MAX_CLIENTS 1
2183 static int stdio_nb_clients = 0;
2185 static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2187 FDCharDriver *s = chr->opaque;
2188 return unix_write(s->fd_out, buf, len);
2191 static int fd_chr_read_poll(void *opaque)
2193 CharDriverState *chr = opaque;
2194 FDCharDriver *s = chr->opaque;
2196 s->max_size = qemu_chr_can_read(chr);
2197 return s->max_size;
2200 static void fd_chr_read(void *opaque)
2202 CharDriverState *chr = opaque;
2203 FDCharDriver *s = chr->opaque;
2204 int size, len;
2205 uint8_t buf[1024];
2207 len = sizeof(buf);
2208 if (len > s->max_size)
2209 len = s->max_size;
2210 if (len == 0)
2211 return;
2212 size = read(s->fd_in, buf, len);
2213 if (size == 0) {
2214 /* FD has been closed. Remove it from the active list. */
2215 qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
2216 return;
2218 if (size > 0) {
2219 qemu_chr_read(chr, buf, size);
2223 static void fd_chr_update_read_handler(CharDriverState *chr)
2225 FDCharDriver *s = chr->opaque;
2227 if (s->fd_in >= 0) {
2228 if (nographic && s->fd_in == 0) {
2229 } else {
2230 qemu_set_fd_handler2(s->fd_in, fd_chr_read_poll,
2231 fd_chr_read, NULL, chr);
2236 static void fd_chr_close(struct CharDriverState *chr)
2238 FDCharDriver *s = chr->opaque;
2240 if (s->fd_in >= 0) {
2241 if (nographic && s->fd_in == 0) {
2242 } else {
2243 qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
2247 qemu_free(s);
2250 /* open a character device to a unix fd */
2251 static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
2253 CharDriverState *chr;
2254 FDCharDriver *s;
2256 chr = qemu_mallocz(sizeof(CharDriverState));
2257 if (!chr)
2258 return NULL;
2259 s = qemu_mallocz(sizeof(FDCharDriver));
2260 if (!s) {
2261 free(chr);
2262 return NULL;
2264 s->fd_in = fd_in;
2265 s->fd_out = fd_out;
2266 chr->opaque = s;
2267 chr->chr_write = fd_chr_write;
2268 chr->chr_update_read_handler = fd_chr_update_read_handler;
2269 chr->chr_close = fd_chr_close;
2271 qemu_chr_reset(chr);
2273 return chr;
2276 static CharDriverState *qemu_chr_open_file_out(const char *file_out)
2278 int fd_out;
2280 TFR(fd_out = open(file_out, O_WRONLY | O_TRUNC | O_CREAT | O_BINARY, 0666));
2281 if (fd_out < 0)
2282 return NULL;
2283 return qemu_chr_open_fd(-1, fd_out);
2286 static CharDriverState *qemu_chr_open_pipe(const char *filename)
2288 int fd_in, fd_out;
2289 char filename_in[256], filename_out[256];
2291 snprintf(filename_in, 256, "%s.in", filename);
2292 snprintf(filename_out, 256, "%s.out", filename);
2293 TFR(fd_in = open(filename_in, O_RDWR | O_BINARY));
2294 TFR(fd_out = open(filename_out, O_RDWR | O_BINARY));
2295 if (fd_in < 0 || fd_out < 0) {
2296 if (fd_in >= 0)
2297 close(fd_in);
2298 if (fd_out >= 0)
2299 close(fd_out);
2300 TFR(fd_in = fd_out = open(filename, O_RDWR | O_BINARY));
2301 if (fd_in < 0)
2302 return NULL;
2304 return qemu_chr_open_fd(fd_in, fd_out);
2308 /* for STDIO, we handle the case where several clients use it
2309 (nographic mode) */
2311 #define TERM_FIFO_MAX_SIZE 1
2313 static uint8_t term_fifo[TERM_FIFO_MAX_SIZE];
2314 static int term_fifo_size;
2316 static int stdio_read_poll(void *opaque)
2318 CharDriverState *chr = opaque;
2320 /* try to flush the queue if needed */
2321 if (term_fifo_size != 0 && qemu_chr_can_read(chr) > 0) {
2322 qemu_chr_read(chr, term_fifo, 1);
2323 term_fifo_size = 0;
2325 /* see if we can absorb more chars */
2326 if (term_fifo_size == 0)
2327 return 1;
2328 else
2329 return 0;
2332 static void stdio_read(void *opaque)
2334 int size;
2335 uint8_t buf[1];
2336 CharDriverState *chr = opaque;
2338 size = read(0, buf, 1);
2339 if (size == 0) {
2340 /* stdin has been closed. Remove it from the active list. */
2341 qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
2342 return;
2344 if (size > 0) {
2345 if (qemu_chr_can_read(chr) > 0) {
2346 qemu_chr_read(chr, buf, 1);
2347 } else if (term_fifo_size == 0) {
2348 term_fifo[term_fifo_size++] = buf[0];
2353 /* init terminal so that we can grab keys */
2354 static struct termios oldtty;
2355 static int old_fd0_flags;
2356 static int term_atexit_done;
2358 static void term_exit(void)
2360 tcsetattr (0, TCSANOW, &oldtty);
2361 fcntl(0, F_SETFL, old_fd0_flags);
2364 static void term_init(void)
2366 struct termios tty;
2368 tcgetattr (0, &tty);
2369 oldtty = tty;
2370 old_fd0_flags = fcntl(0, F_GETFL);
2372 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
2373 |INLCR|IGNCR|ICRNL|IXON);
2374 tty.c_oflag |= OPOST;
2375 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
2376 /* if graphical mode, we allow Ctrl-C handling */
2377 if (nographic)
2378 tty.c_lflag &= ~ISIG;
2379 tty.c_cflag &= ~(CSIZE|PARENB);
2380 tty.c_cflag |= CS8;
2381 tty.c_cc[VMIN] = 1;
2382 tty.c_cc[VTIME] = 0;
2384 tcsetattr (0, TCSANOW, &tty);
2386 if (!term_atexit_done++)
2387 atexit(term_exit);
2389 fcntl(0, F_SETFL, O_NONBLOCK);
2392 static void qemu_chr_close_stdio(struct CharDriverState *chr)
2394 term_exit();
2395 stdio_nb_clients--;
2396 qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
2397 fd_chr_close(chr);
2400 static CharDriverState *qemu_chr_open_stdio(void)
2402 CharDriverState *chr;
2404 if (stdio_nb_clients >= STDIO_MAX_CLIENTS)
2405 return NULL;
2406 chr = qemu_chr_open_fd(0, 1);
2407 chr->chr_close = qemu_chr_close_stdio;
2408 qemu_set_fd_handler2(0, stdio_read_poll, stdio_read, NULL, chr);
2409 stdio_nb_clients++;
2410 term_init();
2412 return chr;
2415 #ifdef __sun__
2416 /* Once Solaris has openpty(), this is going to be removed. */
2417 int openpty(int *amaster, int *aslave, char *name,
2418 struct termios *termp, struct winsize *winp)
2420 const char *slave;
2421 int mfd = -1, sfd = -1;
2423 *amaster = *aslave = -1;
2425 mfd = open("/dev/ptmx", O_RDWR | O_NOCTTY);
2426 if (mfd < 0)
2427 goto err;
2429 if (grantpt(mfd) == -1 || unlockpt(mfd) == -1)
2430 goto err;
2432 if ((slave = ptsname(mfd)) == NULL)
2433 goto err;
2435 if ((sfd = open(slave, O_RDONLY | O_NOCTTY)) == -1)
2436 goto err;
2438 if (ioctl(sfd, I_PUSH, "ptem") == -1 ||
2439 (termp != NULL && tcgetattr(sfd, termp) < 0))
2440 goto err;
2442 if (amaster)
2443 *amaster = mfd;
2444 if (aslave)
2445 *aslave = sfd;
2446 if (winp)
2447 ioctl(sfd, TIOCSWINSZ, winp);
2449 return 0;
2451 err:
2452 if (sfd != -1)
2453 close(sfd);
2454 close(mfd);
2455 return -1;
2458 void cfmakeraw (struct termios *termios_p)
2460 termios_p->c_iflag &=
2461 ~(IGNBRK|BRKINT|PARMRK|ISTRIP|INLCR|IGNCR|ICRNL|IXON);
2462 termios_p->c_oflag &= ~OPOST;
2463 termios_p->c_lflag &= ~(ECHO|ECHONL|ICANON|ISIG|IEXTEN);
2464 termios_p->c_cflag &= ~(CSIZE|PARENB);
2465 termios_p->c_cflag |= CS8;
2467 termios_p->c_cc[VMIN] = 0;
2468 termios_p->c_cc[VTIME] = 0;
2470 #endif
2472 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
2473 || defined(__NetBSD__) || defined(__OpenBSD__)
2475 typedef struct {
2476 int fd;
2477 int connected;
2478 int polling;
2479 int read_bytes;
2480 QEMUTimer *timer;
2481 } PtyCharDriver;
2483 static void pty_chr_update_read_handler(CharDriverState *chr);
2484 static void pty_chr_state(CharDriverState *chr, int connected);
2486 static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2488 PtyCharDriver *s = chr->opaque;
2490 if (!s->connected) {
2491 /* guest sends data, check for (re-)connect */
2492 pty_chr_update_read_handler(chr);
2493 return 0;
2495 return unix_write(s->fd, buf, len);
2498 static int pty_chr_read_poll(void *opaque)
2500 CharDriverState *chr = opaque;
2501 PtyCharDriver *s = chr->opaque;
2503 s->read_bytes = qemu_chr_can_read(chr);
2504 return s->read_bytes;
2507 static void pty_chr_read(void *opaque)
2509 CharDriverState *chr = opaque;
2510 PtyCharDriver *s = chr->opaque;
2511 int size, len;
2512 uint8_t buf[1024];
2514 len = sizeof(buf);
2515 if (len > s->read_bytes)
2516 len = s->read_bytes;
2517 if (len == 0)
2518 return;
2519 size = read(s->fd, buf, len);
2520 if ((size == -1 && errno == EIO) ||
2521 (size == 0)) {
2522 pty_chr_state(chr, 0);
2523 return;
2525 if (size > 0) {
2526 pty_chr_state(chr, 1);
2527 qemu_chr_read(chr, buf, size);
2531 static void pty_chr_update_read_handler(CharDriverState *chr)
2533 PtyCharDriver *s = chr->opaque;
2535 qemu_set_fd_handler2(s->fd, pty_chr_read_poll,
2536 pty_chr_read, NULL, chr);
2537 s->polling = 1;
2539 * Short timeout here: just need wait long enougth that qemu makes
2540 * it through the poll loop once. When reconnected we want a
2541 * short timeout so we notice it almost instantly. Otherwise
2542 * read() gives us -EIO instantly, making pty_chr_state() reset the
2543 * timeout to the normal (much longer) poll interval before the
2544 * timer triggers.
2546 qemu_mod_timer(s->timer, qemu_get_clock(rt_clock) + 10);
2549 static void pty_chr_state(CharDriverState *chr, int connected)
2551 PtyCharDriver *s = chr->opaque;
2553 if (!connected) {
2554 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2555 s->connected = 0;
2556 s->polling = 0;
2557 /* (re-)connect poll interval for idle guests: once per second.
2558 * We check more frequently in case the guests sends data to
2559 * the virtual device linked to our pty. */
2560 qemu_mod_timer(s->timer, qemu_get_clock(rt_clock) + 1000);
2561 } else {
2562 if (!s->connected)
2563 qemu_chr_reset(chr);
2564 s->connected = 1;
2568 static void pty_chr_timer(void *opaque)
2570 struct CharDriverState *chr = opaque;
2571 PtyCharDriver *s = chr->opaque;
2573 if (s->connected)
2574 return;
2575 if (s->polling) {
2576 /* If we arrive here without polling being cleared due
2577 * read returning -EIO, then we are (re-)connected */
2578 pty_chr_state(chr, 1);
2579 return;
2582 /* Next poll ... */
2583 pty_chr_update_read_handler(chr);
2586 static void pty_chr_close(struct CharDriverState *chr)
2588 PtyCharDriver *s = chr->opaque;
2590 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2591 close(s->fd);
2592 qemu_free(s);
2595 static CharDriverState *qemu_chr_open_pty(void)
2597 CharDriverState *chr;
2598 PtyCharDriver *s;
2599 struct termios tty;
2600 int slave_fd;
2601 #if defined(__OpenBSD__)
2602 char pty_name[PATH_MAX];
2603 #define q_ptsname(x) pty_name
2604 #else
2605 char *pty_name = NULL;
2606 #define q_ptsname(x) ptsname(x)
2607 #endif
2609 chr = qemu_mallocz(sizeof(CharDriverState));
2610 if (!chr)
2611 return NULL;
2612 s = qemu_mallocz(sizeof(PtyCharDriver));
2613 if (!s) {
2614 qemu_free(chr);
2615 return NULL;
2618 if (openpty(&s->fd, &slave_fd, pty_name, NULL, NULL) < 0) {
2619 return NULL;
2622 /* Set raw attributes on the pty. */
2623 cfmakeraw(&tty);
2624 tcsetattr(slave_fd, TCSAFLUSH, &tty);
2625 close(slave_fd);
2627 fprintf(stderr, "char device redirected to %s\n", q_ptsname(s->fd));
2629 chr->opaque = s;
2630 chr->chr_write = pty_chr_write;
2631 chr->chr_update_read_handler = pty_chr_update_read_handler;
2632 chr->chr_close = pty_chr_close;
2634 s->timer = qemu_new_timer(rt_clock, pty_chr_timer, chr);
2636 return chr;
2639 static void tty_serial_init(int fd, int speed,
2640 int parity, int data_bits, int stop_bits)
2642 struct termios tty;
2643 speed_t spd;
2645 #if 0
2646 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
2647 speed, parity, data_bits, stop_bits);
2648 #endif
2649 tcgetattr (fd, &tty);
2651 #define MARGIN 1.1
2652 if (speed <= 50 * MARGIN)
2653 spd = B50;
2654 else if (speed <= 75 * MARGIN)
2655 spd = B75;
2656 else if (speed <= 300 * MARGIN)
2657 spd = B300;
2658 else if (speed <= 600 * MARGIN)
2659 spd = B600;
2660 else if (speed <= 1200 * MARGIN)
2661 spd = B1200;
2662 else if (speed <= 2400 * MARGIN)
2663 spd = B2400;
2664 else if (speed <= 4800 * MARGIN)
2665 spd = B4800;
2666 else if (speed <= 9600 * MARGIN)
2667 spd = B9600;
2668 else if (speed <= 19200 * MARGIN)
2669 spd = B19200;
2670 else if (speed <= 38400 * MARGIN)
2671 spd = B38400;
2672 else if (speed <= 57600 * MARGIN)
2673 spd = B57600;
2674 else if (speed <= 115200 * MARGIN)
2675 spd = B115200;
2676 else
2677 spd = B115200;
2679 cfsetispeed(&tty, spd);
2680 cfsetospeed(&tty, spd);
2682 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
2683 |INLCR|IGNCR|ICRNL|IXON);
2684 tty.c_oflag |= OPOST;
2685 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
2686 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
2687 switch(data_bits) {
2688 default:
2689 case 8:
2690 tty.c_cflag |= CS8;
2691 break;
2692 case 7:
2693 tty.c_cflag |= CS7;
2694 break;
2695 case 6:
2696 tty.c_cflag |= CS6;
2697 break;
2698 case 5:
2699 tty.c_cflag |= CS5;
2700 break;
2702 switch(parity) {
2703 default:
2704 case 'N':
2705 break;
2706 case 'E':
2707 tty.c_cflag |= PARENB;
2708 break;
2709 case 'O':
2710 tty.c_cflag |= PARENB | PARODD;
2711 break;
2713 if (stop_bits == 2)
2714 tty.c_cflag |= CSTOPB;
2716 tcsetattr (fd, TCSANOW, &tty);
2719 static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
2721 FDCharDriver *s = chr->opaque;
2723 switch(cmd) {
2724 case CHR_IOCTL_SERIAL_SET_PARAMS:
2726 QEMUSerialSetParams *ssp = arg;
2727 tty_serial_init(s->fd_in, ssp->speed, ssp->parity,
2728 ssp->data_bits, ssp->stop_bits);
2730 break;
2731 case CHR_IOCTL_SERIAL_SET_BREAK:
2733 int enable = *(int *)arg;
2734 if (enable)
2735 tcsendbreak(s->fd_in, 1);
2737 break;
2738 case CHR_IOCTL_SERIAL_GET_TIOCM:
2740 int sarg = 0;
2741 int *targ = (int *)arg;
2742 ioctl(s->fd_in, TIOCMGET, &sarg);
2743 *targ = 0;
2744 if (sarg | TIOCM_CTS)
2745 *targ |= CHR_TIOCM_CTS;
2746 if (sarg | TIOCM_CAR)
2747 *targ |= CHR_TIOCM_CAR;
2748 if (sarg | TIOCM_DSR)
2749 *targ |= CHR_TIOCM_DSR;
2750 if (sarg | TIOCM_RI)
2751 *targ |= CHR_TIOCM_RI;
2752 if (sarg | TIOCM_DTR)
2753 *targ |= CHR_TIOCM_DTR;
2754 if (sarg | TIOCM_RTS)
2755 *targ |= CHR_TIOCM_RTS;
2757 break;
2758 case CHR_IOCTL_SERIAL_SET_TIOCM:
2760 int sarg = *(int *)arg;
2761 int targ = 0;
2762 if (sarg | CHR_TIOCM_DTR)
2763 targ |= TIOCM_DTR;
2764 if (sarg | CHR_TIOCM_RTS)
2765 targ |= TIOCM_RTS;
2766 ioctl(s->fd_in, TIOCMSET, &targ);
2768 break;
2769 default:
2770 return -ENOTSUP;
2772 return 0;
2775 static CharDriverState *qemu_chr_open_tty(const char *filename)
2777 CharDriverState *chr;
2778 int fd;
2780 TFR(fd = open(filename, O_RDWR | O_NONBLOCK));
2781 tty_serial_init(fd, 115200, 'N', 8, 1);
2782 chr = qemu_chr_open_fd(fd, fd);
2783 if (!chr) {
2784 close(fd);
2785 return NULL;
2787 chr->chr_ioctl = tty_serial_ioctl;
2788 qemu_chr_reset(chr);
2789 return chr;
2791 #else /* ! __linux__ && ! __sun__ */
2792 static CharDriverState *qemu_chr_open_pty(void)
2794 return NULL;
2796 #endif /* __linux__ || __sun__ */
2798 #if defined(__linux__)
2799 typedef struct {
2800 int fd;
2801 int mode;
2802 } ParallelCharDriver;
2804 static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
2806 if (s->mode != mode) {
2807 int m = mode;
2808 if (ioctl(s->fd, PPSETMODE, &m) < 0)
2809 return 0;
2810 s->mode = mode;
2812 return 1;
2815 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
2817 ParallelCharDriver *drv = chr->opaque;
2818 int fd = drv->fd;
2819 uint8_t b;
2821 switch(cmd) {
2822 case CHR_IOCTL_PP_READ_DATA:
2823 if (ioctl(fd, PPRDATA, &b) < 0)
2824 return -ENOTSUP;
2825 *(uint8_t *)arg = b;
2826 break;
2827 case CHR_IOCTL_PP_WRITE_DATA:
2828 b = *(uint8_t *)arg;
2829 if (ioctl(fd, PPWDATA, &b) < 0)
2830 return -ENOTSUP;
2831 break;
2832 case CHR_IOCTL_PP_READ_CONTROL:
2833 if (ioctl(fd, PPRCONTROL, &b) < 0)
2834 return -ENOTSUP;
2835 /* Linux gives only the lowest bits, and no way to know data
2836 direction! For better compatibility set the fixed upper
2837 bits. */
2838 *(uint8_t *)arg = b | 0xc0;
2839 break;
2840 case CHR_IOCTL_PP_WRITE_CONTROL:
2841 b = *(uint8_t *)arg;
2842 if (ioctl(fd, PPWCONTROL, &b) < 0)
2843 return -ENOTSUP;
2844 break;
2845 case CHR_IOCTL_PP_READ_STATUS:
2846 if (ioctl(fd, PPRSTATUS, &b) < 0)
2847 return -ENOTSUP;
2848 *(uint8_t *)arg = b;
2849 break;
2850 case CHR_IOCTL_PP_DATA_DIR:
2851 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
2852 return -ENOTSUP;
2853 break;
2854 case CHR_IOCTL_PP_EPP_READ_ADDR:
2855 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
2856 struct ParallelIOArg *parg = arg;
2857 int n = read(fd, parg->buffer, parg->count);
2858 if (n != parg->count) {
2859 return -EIO;
2862 break;
2863 case CHR_IOCTL_PP_EPP_READ:
2864 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
2865 struct ParallelIOArg *parg = arg;
2866 int n = read(fd, parg->buffer, parg->count);
2867 if (n != parg->count) {
2868 return -EIO;
2871 break;
2872 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
2873 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
2874 struct ParallelIOArg *parg = arg;
2875 int n = write(fd, parg->buffer, parg->count);
2876 if (n != parg->count) {
2877 return -EIO;
2880 break;
2881 case CHR_IOCTL_PP_EPP_WRITE:
2882 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
2883 struct ParallelIOArg *parg = arg;
2884 int n = write(fd, parg->buffer, parg->count);
2885 if (n != parg->count) {
2886 return -EIO;
2889 break;
2890 default:
2891 return -ENOTSUP;
2893 return 0;
2896 static void pp_close(CharDriverState *chr)
2898 ParallelCharDriver *drv = chr->opaque;
2899 int fd = drv->fd;
2901 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
2902 ioctl(fd, PPRELEASE);
2903 close(fd);
2904 qemu_free(drv);
2907 static CharDriverState *qemu_chr_open_pp(const char *filename)
2909 CharDriverState *chr;
2910 ParallelCharDriver *drv;
2911 int fd;
2913 TFR(fd = open(filename, O_RDWR));
2914 if (fd < 0)
2915 return NULL;
2917 if (ioctl(fd, PPCLAIM) < 0) {
2918 close(fd);
2919 return NULL;
2922 drv = qemu_mallocz(sizeof(ParallelCharDriver));
2923 if (!drv) {
2924 close(fd);
2925 return NULL;
2927 drv->fd = fd;
2928 drv->mode = IEEE1284_MODE_COMPAT;
2930 chr = qemu_mallocz(sizeof(CharDriverState));
2931 if (!chr) {
2932 qemu_free(drv);
2933 close(fd);
2934 return NULL;
2936 chr->chr_write = null_chr_write;
2937 chr->chr_ioctl = pp_ioctl;
2938 chr->chr_close = pp_close;
2939 chr->opaque = drv;
2941 qemu_chr_reset(chr);
2943 return chr;
2945 #endif /* __linux__ */
2947 #else /* _WIN32 */
2949 typedef struct {
2950 int max_size;
2951 HANDLE hcom, hrecv, hsend;
2952 OVERLAPPED orecv, osend;
2953 BOOL fpipe;
2954 DWORD len;
2955 } WinCharState;
2957 #define NSENDBUF 2048
2958 #define NRECVBUF 2048
2959 #define MAXCONNECT 1
2960 #define NTIMEOUT 5000
2962 static int win_chr_poll(void *opaque);
2963 static int win_chr_pipe_poll(void *opaque);
2965 static void win_chr_close(CharDriverState *chr)
2967 WinCharState *s = chr->opaque;
2969 if (s->hsend) {
2970 CloseHandle(s->hsend);
2971 s->hsend = NULL;
2973 if (s->hrecv) {
2974 CloseHandle(s->hrecv);
2975 s->hrecv = NULL;
2977 if (s->hcom) {
2978 CloseHandle(s->hcom);
2979 s->hcom = NULL;
2981 if (s->fpipe)
2982 qemu_del_polling_cb(win_chr_pipe_poll, chr);
2983 else
2984 qemu_del_polling_cb(win_chr_poll, chr);
2987 static int win_chr_init(CharDriverState *chr, const char *filename)
2989 WinCharState *s = chr->opaque;
2990 COMMCONFIG comcfg;
2991 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
2992 COMSTAT comstat;
2993 DWORD size;
2994 DWORD err;
2996 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2997 if (!s->hsend) {
2998 fprintf(stderr, "Failed CreateEvent\n");
2999 goto fail;
3001 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
3002 if (!s->hrecv) {
3003 fprintf(stderr, "Failed CreateEvent\n");
3004 goto fail;
3007 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
3008 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
3009 if (s->hcom == INVALID_HANDLE_VALUE) {
3010 fprintf(stderr, "Failed CreateFile (%lu)\n", GetLastError());
3011 s->hcom = NULL;
3012 goto fail;
3015 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
3016 fprintf(stderr, "Failed SetupComm\n");
3017 goto fail;
3020 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
3021 size = sizeof(COMMCONFIG);
3022 GetDefaultCommConfig(filename, &comcfg, &size);
3023 comcfg.dcb.DCBlength = sizeof(DCB);
3024 CommConfigDialog(filename, NULL, &comcfg);
3026 if (!SetCommState(s->hcom, &comcfg.dcb)) {
3027 fprintf(stderr, "Failed SetCommState\n");
3028 goto fail;
3031 if (!SetCommMask(s->hcom, EV_ERR)) {
3032 fprintf(stderr, "Failed SetCommMask\n");
3033 goto fail;
3036 cto.ReadIntervalTimeout = MAXDWORD;
3037 if (!SetCommTimeouts(s->hcom, &cto)) {
3038 fprintf(stderr, "Failed SetCommTimeouts\n");
3039 goto fail;
3042 if (!ClearCommError(s->hcom, &err, &comstat)) {
3043 fprintf(stderr, "Failed ClearCommError\n");
3044 goto fail;
3046 qemu_add_polling_cb(win_chr_poll, chr);
3047 return 0;
3049 fail:
3050 win_chr_close(chr);
3051 return -1;
3054 static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
3056 WinCharState *s = chr->opaque;
3057 DWORD len, ret, size, err;
3059 len = len1;
3060 ZeroMemory(&s->osend, sizeof(s->osend));
3061 s->osend.hEvent = s->hsend;
3062 while (len > 0) {
3063 if (s->hsend)
3064 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
3065 else
3066 ret = WriteFile(s->hcom, buf, len, &size, NULL);
3067 if (!ret) {
3068 err = GetLastError();
3069 if (err == ERROR_IO_PENDING) {
3070 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
3071 if (ret) {
3072 buf += size;
3073 len -= size;
3074 } else {
3075 break;
3077 } else {
3078 break;
3080 } else {
3081 buf += size;
3082 len -= size;
3085 return len1 - len;
3088 static int win_chr_read_poll(CharDriverState *chr)
3090 WinCharState *s = chr->opaque;
3092 s->max_size = qemu_chr_can_read(chr);
3093 return s->max_size;
3096 static void win_chr_readfile(CharDriverState *chr)
3098 WinCharState *s = chr->opaque;
3099 int ret, err;
3100 uint8_t buf[1024];
3101 DWORD size;
3103 ZeroMemory(&s->orecv, sizeof(s->orecv));
3104 s->orecv.hEvent = s->hrecv;
3105 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
3106 if (!ret) {
3107 err = GetLastError();
3108 if (err == ERROR_IO_PENDING) {
3109 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
3113 if (size > 0) {
3114 qemu_chr_read(chr, buf, size);
3118 static void win_chr_read(CharDriverState *chr)
3120 WinCharState *s = chr->opaque;
3122 if (s->len > s->max_size)
3123 s->len = s->max_size;
3124 if (s->len == 0)
3125 return;
3127 win_chr_readfile(chr);
3130 static int win_chr_poll(void *opaque)
3132 CharDriverState *chr = opaque;
3133 WinCharState *s = chr->opaque;
3134 COMSTAT status;
3135 DWORD comerr;
3137 ClearCommError(s->hcom, &comerr, &status);
3138 if (status.cbInQue > 0) {
3139 s->len = status.cbInQue;
3140 win_chr_read_poll(chr);
3141 win_chr_read(chr);
3142 return 1;
3144 return 0;
3147 static CharDriverState *qemu_chr_open_win(const char *filename)
3149 CharDriverState *chr;
3150 WinCharState *s;
3152 chr = qemu_mallocz(sizeof(CharDriverState));
3153 if (!chr)
3154 return NULL;
3155 s = qemu_mallocz(sizeof(WinCharState));
3156 if (!s) {
3157 free(chr);
3158 return NULL;
3160 chr->opaque = s;
3161 chr->chr_write = win_chr_write;
3162 chr->chr_close = win_chr_close;
3164 if (win_chr_init(chr, filename) < 0) {
3165 free(s);
3166 free(chr);
3167 return NULL;
3169 qemu_chr_reset(chr);
3170 return chr;
3173 static int win_chr_pipe_poll(void *opaque)
3175 CharDriverState *chr = opaque;
3176 WinCharState *s = chr->opaque;
3177 DWORD size;
3179 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
3180 if (size > 0) {
3181 s->len = size;
3182 win_chr_read_poll(chr);
3183 win_chr_read(chr);
3184 return 1;
3186 return 0;
3189 static int win_chr_pipe_init(CharDriverState *chr, const char *filename)
3191 WinCharState *s = chr->opaque;
3192 OVERLAPPED ov;
3193 int ret;
3194 DWORD size;
3195 char openname[256];
3197 s->fpipe = TRUE;
3199 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
3200 if (!s->hsend) {
3201 fprintf(stderr, "Failed CreateEvent\n");
3202 goto fail;
3204 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
3205 if (!s->hrecv) {
3206 fprintf(stderr, "Failed CreateEvent\n");
3207 goto fail;
3210 snprintf(openname, sizeof(openname), "\\\\.\\pipe\\%s", filename);
3211 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
3212 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
3213 PIPE_WAIT,
3214 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
3215 if (s->hcom == INVALID_HANDLE_VALUE) {
3216 fprintf(stderr, "Failed CreateNamedPipe (%lu)\n", GetLastError());
3217 s->hcom = NULL;
3218 goto fail;
3221 ZeroMemory(&ov, sizeof(ov));
3222 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
3223 ret = ConnectNamedPipe(s->hcom, &ov);
3224 if (ret) {
3225 fprintf(stderr, "Failed ConnectNamedPipe\n");
3226 goto fail;
3229 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
3230 if (!ret) {
3231 fprintf(stderr, "Failed GetOverlappedResult\n");
3232 if (ov.hEvent) {
3233 CloseHandle(ov.hEvent);
3234 ov.hEvent = NULL;
3236 goto fail;
3239 if (ov.hEvent) {
3240 CloseHandle(ov.hEvent);
3241 ov.hEvent = NULL;
3243 qemu_add_polling_cb(win_chr_pipe_poll, chr);
3244 return 0;
3246 fail:
3247 win_chr_close(chr);
3248 return -1;
3252 static CharDriverState *qemu_chr_open_win_pipe(const char *filename)
3254 CharDriverState *chr;
3255 WinCharState *s;
3257 chr = qemu_mallocz(sizeof(CharDriverState));
3258 if (!chr)
3259 return NULL;
3260 s = qemu_mallocz(sizeof(WinCharState));
3261 if (!s) {
3262 free(chr);
3263 return NULL;
3265 chr->opaque = s;
3266 chr->chr_write = win_chr_write;
3267 chr->chr_close = win_chr_close;
3269 if (win_chr_pipe_init(chr, filename) < 0) {
3270 free(s);
3271 free(chr);
3272 return NULL;
3274 qemu_chr_reset(chr);
3275 return chr;
3278 static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out)
3280 CharDriverState *chr;
3281 WinCharState *s;
3283 chr = qemu_mallocz(sizeof(CharDriverState));
3284 if (!chr)
3285 return NULL;
3286 s = qemu_mallocz(sizeof(WinCharState));
3287 if (!s) {
3288 free(chr);
3289 return NULL;
3291 s->hcom = fd_out;
3292 chr->opaque = s;
3293 chr->chr_write = win_chr_write;
3294 qemu_chr_reset(chr);
3295 return chr;
3298 static CharDriverState *qemu_chr_open_win_con(const char *filename)
3300 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE));
3303 static CharDriverState *qemu_chr_open_win_file_out(const char *file_out)
3305 HANDLE fd_out;
3307 fd_out = CreateFile(file_out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
3308 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
3309 if (fd_out == INVALID_HANDLE_VALUE)
3310 return NULL;
3312 return qemu_chr_open_win_file(fd_out);
3314 #endif /* !_WIN32 */
3316 /***********************************************************/
3317 /* UDP Net console */
3319 typedef struct {
3320 int fd;
3321 struct sockaddr_in daddr;
3322 uint8_t buf[1024];
3323 int bufcnt;
3324 int bufptr;
3325 int max_size;
3326 } NetCharDriver;
3328 static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
3330 NetCharDriver *s = chr->opaque;
3332 return sendto(s->fd, buf, len, 0,
3333 (struct sockaddr *)&s->daddr, sizeof(struct sockaddr_in));
3336 static int udp_chr_read_poll(void *opaque)
3338 CharDriverState *chr = opaque;
3339 NetCharDriver *s = chr->opaque;
3341 s->max_size = qemu_chr_can_read(chr);
3343 /* If there were any stray characters in the queue process them
3344 * first
3346 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
3347 qemu_chr_read(chr, &s->buf[s->bufptr], 1);
3348 s->bufptr++;
3349 s->max_size = qemu_chr_can_read(chr);
3351 return s->max_size;
3354 static void udp_chr_read(void *opaque)
3356 CharDriverState *chr = opaque;
3357 NetCharDriver *s = chr->opaque;
3359 if (s->max_size == 0)
3360 return;
3361 s->bufcnt = recv(s->fd, s->buf, sizeof(s->buf), 0);
3362 s->bufptr = s->bufcnt;
3363 if (s->bufcnt <= 0)
3364 return;
3366 s->bufptr = 0;
3367 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
3368 qemu_chr_read(chr, &s->buf[s->bufptr], 1);
3369 s->bufptr++;
3370 s->max_size = qemu_chr_can_read(chr);
3374 static void udp_chr_update_read_handler(CharDriverState *chr)
3376 NetCharDriver *s = chr->opaque;
3378 if (s->fd >= 0) {
3379 qemu_set_fd_handler2(s->fd, udp_chr_read_poll,
3380 udp_chr_read, NULL, chr);
3384 int parse_host_port(struct sockaddr_in *saddr, const char *str);
3385 #ifndef _WIN32
3386 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str);
3387 #endif
3388 int parse_host_src_port(struct sockaddr_in *haddr,
3389 struct sockaddr_in *saddr,
3390 const char *str);
3392 static CharDriverState *qemu_chr_open_udp(const char *def)
3394 CharDriverState *chr = NULL;
3395 NetCharDriver *s = NULL;
3396 int fd = -1;
3397 struct sockaddr_in saddr;
3399 chr = qemu_mallocz(sizeof(CharDriverState));
3400 if (!chr)
3401 goto return_err;
3402 s = qemu_mallocz(sizeof(NetCharDriver));
3403 if (!s)
3404 goto return_err;
3406 fd = socket(PF_INET, SOCK_DGRAM, 0);
3407 if (fd < 0) {
3408 perror("socket(PF_INET, SOCK_DGRAM)");
3409 goto return_err;
3412 if (parse_host_src_port(&s->daddr, &saddr, def) < 0) {
3413 printf("Could not parse: %s\n", def);
3414 goto return_err;
3417 if (bind(fd, (struct sockaddr *)&saddr, sizeof(saddr)) < 0)
3419 perror("bind");
3420 goto return_err;
3423 s->fd = fd;
3424 s->bufcnt = 0;
3425 s->bufptr = 0;
3426 chr->opaque = s;
3427 chr->chr_write = udp_chr_write;
3428 chr->chr_update_read_handler = udp_chr_update_read_handler;
3429 return chr;
3431 return_err:
3432 if (chr)
3433 free(chr);
3434 if (s)
3435 free(s);
3436 if (fd >= 0)
3437 closesocket(fd);
3438 return NULL;
3441 /***********************************************************/
3442 /* TCP Net console */
3444 typedef struct {
3445 int fd, listen_fd;
3446 int connected;
3447 int max_size;
3448 int do_telnetopt;
3449 int do_nodelay;
3450 int is_unix;
3451 } TCPCharDriver;
3453 static void tcp_chr_accept(void *opaque);
3455 static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
3457 TCPCharDriver *s = chr->opaque;
3458 if (s->connected) {
3459 return send_all(s->fd, buf, len);
3460 } else {
3461 /* XXX: indicate an error ? */
3462 return len;
3466 static int tcp_chr_read_poll(void *opaque)
3468 CharDriverState *chr = opaque;
3469 TCPCharDriver *s = chr->opaque;
3470 if (!s->connected)
3471 return 0;
3472 s->max_size = qemu_chr_can_read(chr);
3473 return s->max_size;
3476 #define IAC 255
3477 #define IAC_BREAK 243
3478 static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
3479 TCPCharDriver *s,
3480 uint8_t *buf, int *size)
3482 /* Handle any telnet client's basic IAC options to satisfy char by
3483 * char mode with no echo. All IAC options will be removed from
3484 * the buf and the do_telnetopt variable will be used to track the
3485 * state of the width of the IAC information.
3487 * IAC commands come in sets of 3 bytes with the exception of the
3488 * "IAC BREAK" command and the double IAC.
3491 int i;
3492 int j = 0;
3494 for (i = 0; i < *size; i++) {
3495 if (s->do_telnetopt > 1) {
3496 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
3497 /* Double IAC means send an IAC */
3498 if (j != i)
3499 buf[j] = buf[i];
3500 j++;
3501 s->do_telnetopt = 1;
3502 } else {
3503 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
3504 /* Handle IAC break commands by sending a serial break */
3505 qemu_chr_event(chr, CHR_EVENT_BREAK);
3506 s->do_telnetopt++;
3508 s->do_telnetopt++;
3510 if (s->do_telnetopt >= 4) {
3511 s->do_telnetopt = 1;
3513 } else {
3514 if ((unsigned char)buf[i] == IAC) {
3515 s->do_telnetopt = 2;
3516 } else {
3517 if (j != i)
3518 buf[j] = buf[i];
3519 j++;
3523 *size = j;
3526 static void tcp_chr_read(void *opaque)
3528 CharDriverState *chr = opaque;
3529 TCPCharDriver *s = chr->opaque;
3530 uint8_t buf[1024];
3531 int len, size;
3533 if (!s->connected || s->max_size <= 0)
3534 return;
3535 len = sizeof(buf);
3536 if (len > s->max_size)
3537 len = s->max_size;
3538 size = recv(s->fd, buf, len, 0);
3539 if (size == 0) {
3540 /* connection closed */
3541 s->connected = 0;
3542 if (s->listen_fd >= 0) {
3543 qemu_set_fd_handler(s->listen_fd, tcp_chr_accept, NULL, chr);
3545 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
3546 closesocket(s->fd);
3547 s->fd = -1;
3548 } else if (size > 0) {
3549 if (s->do_telnetopt)
3550 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
3551 if (size > 0)
3552 qemu_chr_read(chr, buf, size);
3556 static void tcp_chr_connect(void *opaque)
3558 CharDriverState *chr = opaque;
3559 TCPCharDriver *s = chr->opaque;
3561 s->connected = 1;
3562 qemu_set_fd_handler2(s->fd, tcp_chr_read_poll,
3563 tcp_chr_read, NULL, chr);
3564 qemu_chr_reset(chr);
3567 #define IACSET(x,a,b,c) x[0] = a; x[1] = b; x[2] = c;
3568 static void tcp_chr_telnet_init(int fd)
3570 char buf[3];
3571 /* Send the telnet negotion to put telnet in binary, no echo, single char mode */
3572 IACSET(buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
3573 send(fd, (char *)buf, 3, 0);
3574 IACSET(buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
3575 send(fd, (char *)buf, 3, 0);
3576 IACSET(buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
3577 send(fd, (char *)buf, 3, 0);
3578 IACSET(buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
3579 send(fd, (char *)buf, 3, 0);
3582 static void socket_set_nodelay(int fd)
3584 int val = 1;
3585 setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, (char *)&val, sizeof(val));
3588 static void tcp_chr_accept(void *opaque)
3590 CharDriverState *chr = opaque;
3591 TCPCharDriver *s = chr->opaque;
3592 struct sockaddr_in saddr;
3593 #ifndef _WIN32
3594 struct sockaddr_un uaddr;
3595 #endif
3596 struct sockaddr *addr;
3597 socklen_t len;
3598 int fd;
3600 for(;;) {
3601 #ifndef _WIN32
3602 if (s->is_unix) {
3603 len = sizeof(uaddr);
3604 addr = (struct sockaddr *)&uaddr;
3605 } else
3606 #endif
3608 len = sizeof(saddr);
3609 addr = (struct sockaddr *)&saddr;
3611 fd = accept(s->listen_fd, addr, &len);
3612 if (fd < 0 && errno != EINTR) {
3613 return;
3614 } else if (fd >= 0) {
3615 if (s->do_telnetopt)
3616 tcp_chr_telnet_init(fd);
3617 break;
3620 socket_set_nonblock(fd);
3621 if (s->do_nodelay)
3622 socket_set_nodelay(fd);
3623 s->fd = fd;
3624 qemu_set_fd_handler(s->listen_fd, NULL, NULL, NULL);
3625 tcp_chr_connect(chr);
3628 static void tcp_chr_close(CharDriverState *chr)
3630 TCPCharDriver *s = chr->opaque;
3631 if (s->fd >= 0)
3632 closesocket(s->fd);
3633 if (s->listen_fd >= 0)
3634 closesocket(s->listen_fd);
3635 qemu_free(s);
3638 static CharDriverState *qemu_chr_open_tcp(const char *host_str,
3639 int is_telnet,
3640 int is_unix)
3642 CharDriverState *chr = NULL;
3643 TCPCharDriver *s = NULL;
3644 int fd = -1, ret, err, val;
3645 int is_listen = 0;
3646 int is_waitconnect = 1;
3647 int do_nodelay = 0;
3648 const char *ptr;
3649 struct sockaddr_in saddr;
3650 #ifndef _WIN32
3651 struct sockaddr_un uaddr;
3652 #endif
3653 struct sockaddr *addr;
3654 socklen_t addrlen;
3656 #ifndef _WIN32
3657 if (is_unix) {
3658 addr = (struct sockaddr *)&uaddr;
3659 addrlen = sizeof(uaddr);
3660 if (parse_unix_path(&uaddr, host_str) < 0)
3661 goto fail;
3662 } else
3663 #endif
3665 addr = (struct sockaddr *)&saddr;
3666 addrlen = sizeof(saddr);
3667 if (parse_host_port(&saddr, host_str) < 0)
3668 goto fail;
3671 ptr = host_str;
3672 while((ptr = strchr(ptr,','))) {
3673 ptr++;
3674 if (!strncmp(ptr,"server",6)) {
3675 is_listen = 1;
3676 } else if (!strncmp(ptr,"nowait",6)) {
3677 is_waitconnect = 0;
3678 } else if (!strncmp(ptr,"nodelay",6)) {
3679 do_nodelay = 1;
3680 } else {
3681 printf("Unknown option: %s\n", ptr);
3682 goto fail;
3685 if (!is_listen)
3686 is_waitconnect = 0;
3688 chr = qemu_mallocz(sizeof(CharDriverState));
3689 if (!chr)
3690 goto fail;
3691 s = qemu_mallocz(sizeof(TCPCharDriver));
3692 if (!s)
3693 goto fail;
3695 #ifndef _WIN32
3696 if (is_unix)
3697 fd = socket(PF_UNIX, SOCK_STREAM, 0);
3698 else
3699 #endif
3700 fd = socket(PF_INET, SOCK_STREAM, 0);
3702 if (fd < 0)
3703 goto fail;
3705 if (!is_waitconnect)
3706 socket_set_nonblock(fd);
3708 s->connected = 0;
3709 s->fd = -1;
3710 s->listen_fd = -1;
3711 s->is_unix = is_unix;
3712 s->do_nodelay = do_nodelay && !is_unix;
3714 chr->opaque = s;
3715 chr->chr_write = tcp_chr_write;
3716 chr->chr_close = tcp_chr_close;
3718 if (is_listen) {
3719 /* allow fast reuse */
3720 #ifndef _WIN32
3721 if (is_unix) {
3722 char path[109];
3723 pstrcpy(path, sizeof(path), uaddr.sun_path);
3724 unlink(path);
3725 } else
3726 #endif
3728 val = 1;
3729 setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
3732 ret = bind(fd, addr, addrlen);
3733 if (ret < 0)
3734 goto fail;
3736 ret = listen(fd, 0);
3737 if (ret < 0)
3738 goto fail;
3740 s->listen_fd = fd;
3741 qemu_set_fd_handler(s->listen_fd, tcp_chr_accept, NULL, chr);
3742 if (is_telnet)
3743 s->do_telnetopt = 1;
3744 } else {
3745 for(;;) {
3746 ret = connect(fd, addr, addrlen);
3747 if (ret < 0) {
3748 err = socket_error();
3749 if (err == EINTR || err == EWOULDBLOCK) {
3750 } else if (err == EINPROGRESS) {
3751 break;
3752 #ifdef _WIN32
3753 } else if (err == WSAEALREADY) {
3754 break;
3755 #endif
3756 } else {
3757 goto fail;
3759 } else {
3760 s->connected = 1;
3761 break;
3764 s->fd = fd;
3765 socket_set_nodelay(fd);
3766 if (s->connected)
3767 tcp_chr_connect(chr);
3768 else
3769 qemu_set_fd_handler(s->fd, NULL, tcp_chr_connect, chr);
3772 if (is_listen && is_waitconnect) {
3773 printf("QEMU waiting for connection on: %s\n", host_str);
3774 tcp_chr_accept(chr);
3775 socket_set_nonblock(s->listen_fd);
3778 return chr;
3779 fail:
3780 if (fd >= 0)
3781 closesocket(fd);
3782 qemu_free(s);
3783 qemu_free(chr);
3784 return NULL;
3787 CharDriverState *qemu_chr_open(const char *filename)
3789 const char *p;
3791 if (!strcmp(filename, "vc")) {
3792 return text_console_init(&display_state, 0);
3793 } else if (strstart(filename, "vc:", &p)) {
3794 return text_console_init(&display_state, p);
3795 } else if (!strcmp(filename, "null")) {
3796 return qemu_chr_open_null();
3797 } else
3798 if (strstart(filename, "tcp:", &p)) {
3799 return qemu_chr_open_tcp(p, 0, 0);
3800 } else
3801 if (strstart(filename, "telnet:", &p)) {
3802 return qemu_chr_open_tcp(p, 1, 0);
3803 } else
3804 if (strstart(filename, "udp:", &p)) {
3805 return qemu_chr_open_udp(p);
3806 } else
3807 if (strstart(filename, "mon:", &p)) {
3808 CharDriverState *drv = qemu_chr_open(p);
3809 if (drv) {
3810 drv = qemu_chr_open_mux(drv);
3811 monitor_init(drv, !nographic);
3812 return drv;
3814 printf("Unable to open driver: %s\n", p);
3815 return 0;
3816 } else
3817 #ifndef _WIN32
3818 if (strstart(filename, "unix:", &p)) {
3819 return qemu_chr_open_tcp(p, 0, 1);
3820 } else if (strstart(filename, "file:", &p)) {
3821 return qemu_chr_open_file_out(p);
3822 } else if (strstart(filename, "pipe:", &p)) {
3823 return qemu_chr_open_pipe(p);
3824 } else if (!strcmp(filename, "pty")) {
3825 return qemu_chr_open_pty();
3826 } else if (!strcmp(filename, "stdio")) {
3827 return qemu_chr_open_stdio();
3828 } else
3829 #if defined(__linux__)
3830 if (strstart(filename, "/dev/parport", NULL)) {
3831 return qemu_chr_open_pp(filename);
3832 } else
3833 #endif
3834 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
3835 || defined(__NetBSD__) || defined(__OpenBSD__)
3836 if (strstart(filename, "/dev/", NULL)) {
3837 return qemu_chr_open_tty(filename);
3838 } else
3839 #endif
3840 #else /* !_WIN32 */
3841 if (strstart(filename, "COM", NULL)) {
3842 return qemu_chr_open_win(filename);
3843 } else
3844 if (strstart(filename, "pipe:", &p)) {
3845 return qemu_chr_open_win_pipe(p);
3846 } else
3847 if (strstart(filename, "con:", NULL)) {
3848 return qemu_chr_open_win_con(filename);
3849 } else
3850 if (strstart(filename, "file:", &p)) {
3851 return qemu_chr_open_win_file_out(p);
3852 } else
3853 #endif
3854 #ifdef CONFIG_BRLAPI
3855 if (!strcmp(filename, "braille")) {
3856 return chr_baum_init();
3857 } else
3858 #endif
3860 return NULL;
3864 void qemu_chr_close(CharDriverState *chr)
3866 if (chr->chr_close)
3867 chr->chr_close(chr);
3868 qemu_free(chr);
3871 /***********************************************************/
3872 /* network device redirectors */
3874 __attribute__ (( unused ))
3875 static void hex_dump(FILE *f, const uint8_t *buf, int size)
3877 int len, i, j, c;
3879 for(i=0;i<size;i+=16) {
3880 len = size - i;
3881 if (len > 16)
3882 len = 16;
3883 fprintf(f, "%08x ", i);
3884 for(j=0;j<16;j++) {
3885 if (j < len)
3886 fprintf(f, " %02x", buf[i+j]);
3887 else
3888 fprintf(f, " ");
3890 fprintf(f, " ");
3891 for(j=0;j<len;j++) {
3892 c = buf[i+j];
3893 if (c < ' ' || c > '~')
3894 c = '.';
3895 fprintf(f, "%c", c);
3897 fprintf(f, "\n");
3901 static int parse_macaddr(uint8_t *macaddr, const char *p)
3903 int i;
3904 char *last_char;
3905 long int offset;
3907 errno = 0;
3908 offset = strtol(p, &last_char, 0);
3909 if (0 == errno && '\0' == *last_char &&
3910 offset >= 0 && offset <= 0xFFFFFF) {
3911 macaddr[3] = (offset & 0xFF0000) >> 16;
3912 macaddr[4] = (offset & 0xFF00) >> 8;
3913 macaddr[5] = offset & 0xFF;
3914 return 0;
3915 } else {
3916 for(i = 0; i < 6; i++) {
3917 macaddr[i] = strtol(p, (char **)&p, 16);
3918 if (i == 5) {
3919 if (*p != '\0')
3920 return -1;
3921 } else {
3922 if (*p != ':' && *p != '-')
3923 return -1;
3924 p++;
3927 return 0;
3930 return -1;
3933 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
3935 const char *p, *p1;
3936 int len;
3937 p = *pp;
3938 p1 = strchr(p, sep);
3939 if (!p1)
3940 return -1;
3941 len = p1 - p;
3942 p1++;
3943 if (buf_size > 0) {
3944 if (len > buf_size - 1)
3945 len = buf_size - 1;
3946 memcpy(buf, p, len);
3947 buf[len] = '\0';
3949 *pp = p1;
3950 return 0;
3953 int parse_host_src_port(struct sockaddr_in *haddr,
3954 struct sockaddr_in *saddr,
3955 const char *input_str)
3957 char *str = strdup(input_str);
3958 char *host_str = str;
3959 char *src_str;
3960 char *ptr;
3963 * Chop off any extra arguments at the end of the string which
3964 * would start with a comma, then fill in the src port information
3965 * if it was provided else use the "any address" and "any port".
3967 if ((ptr = strchr(str,',')))
3968 *ptr = '\0';
3970 if ((src_str = strchr(input_str,'@'))) {
3971 *src_str = '\0';
3972 src_str++;
3975 if (parse_host_port(haddr, host_str) < 0)
3976 goto fail;
3978 if (!src_str || *src_str == '\0')
3979 src_str = ":0";
3981 if (parse_host_port(saddr, src_str) < 0)
3982 goto fail;
3984 free(str);
3985 return(0);
3987 fail:
3988 free(str);
3989 return -1;
3992 int parse_host_port(struct sockaddr_in *saddr, const char *str)
3994 char buf[512];
3995 struct hostent *he;
3996 const char *p, *r;
3997 int port;
3999 p = str;
4000 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4001 return -1;
4002 saddr->sin_family = AF_INET;
4003 if (buf[0] == '\0') {
4004 saddr->sin_addr.s_addr = 0;
4005 } else {
4006 if (isdigit(buf[0])) {
4007 if (!inet_aton(buf, &saddr->sin_addr))
4008 return -1;
4009 } else {
4010 if ((he = gethostbyname(buf)) == NULL)
4011 return - 1;
4012 saddr->sin_addr = *(struct in_addr *)he->h_addr;
4015 port = strtol(p, (char **)&r, 0);
4016 if (r == p)
4017 return -1;
4018 saddr->sin_port = htons(port);
4019 return 0;
4022 #ifndef _WIN32
4023 static int parse_unix_path(struct sockaddr_un *uaddr, const char *str)
4025 const char *p;
4026 int len;
4028 len = MIN(108, strlen(str));
4029 p = strchr(str, ',');
4030 if (p)
4031 len = MIN(len, p - str);
4033 memset(uaddr, 0, sizeof(*uaddr));
4035 uaddr->sun_family = AF_UNIX;
4036 memcpy(uaddr->sun_path, str, len);
4038 return 0;
4040 #endif
4042 /* find or alloc a new VLAN */
4043 VLANState *qemu_find_vlan(int id)
4045 VLANState **pvlan, *vlan;
4046 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
4047 if (vlan->id == id)
4048 return vlan;
4050 vlan = qemu_mallocz(sizeof(VLANState));
4051 if (!vlan)
4052 return NULL;
4053 vlan->id = id;
4054 vlan->next = NULL;
4055 pvlan = &first_vlan;
4056 while (*pvlan != NULL)
4057 pvlan = &(*pvlan)->next;
4058 *pvlan = vlan;
4059 return vlan;
4062 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
4063 IOReadHandler *fd_read,
4064 IOCanRWHandler *fd_can_read,
4065 void *opaque)
4067 VLANClientState *vc, **pvc;
4068 vc = qemu_mallocz(sizeof(VLANClientState));
4069 if (!vc)
4070 return NULL;
4071 vc->fd_read = fd_read;
4072 vc->fd_can_read = fd_can_read;
4073 vc->opaque = opaque;
4074 vc->vlan = vlan;
4076 vc->next = NULL;
4077 pvc = &vlan->first_client;
4078 while (*pvc != NULL)
4079 pvc = &(*pvc)->next;
4080 *pvc = vc;
4081 return vc;
4084 void qemu_del_vlan_client(VLANClientState *vc)
4086 VLANClientState **pvc = &vc->vlan->first_client;
4088 while (*pvc != NULL)
4089 if (*pvc == vc) {
4090 *pvc = vc->next;
4091 free(vc);
4092 break;
4093 } else
4094 pvc = &(*pvc)->next;
4097 int qemu_can_send_packet(VLANClientState *vc1)
4099 VLANState *vlan = vc1->vlan;
4100 VLANClientState *vc;
4102 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
4103 if (vc != vc1) {
4104 if (vc->fd_can_read && vc->fd_can_read(vc->opaque))
4105 return 1;
4108 return 0;
4111 void qemu_send_packet(VLANClientState *vc1, const uint8_t *buf, int size)
4113 VLANState *vlan = vc1->vlan;
4114 VLANClientState *vc;
4116 #if 0
4117 printf("vlan %d send:\n", vlan->id);
4118 hex_dump(stdout, buf, size);
4119 #endif
4120 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
4121 if (vc != vc1) {
4122 vc->fd_read(vc->opaque, buf, size);
4127 #if defined(CONFIG_SLIRP)
4129 /* slirp network adapter */
4131 static int slirp_inited;
4132 static VLANClientState *slirp_vc;
4134 int slirp_can_output(void)
4136 return !slirp_vc || qemu_can_send_packet(slirp_vc);
4139 void slirp_output(const uint8_t *pkt, int pkt_len)
4141 #if 0
4142 printf("slirp output:\n");
4143 hex_dump(stdout, pkt, pkt_len);
4144 #endif
4145 if (!slirp_vc)
4146 return;
4147 qemu_send_packet(slirp_vc, pkt, pkt_len);
4150 static void slirp_receive(void *opaque, const uint8_t *buf, int size)
4152 #if 0
4153 printf("slirp input:\n");
4154 hex_dump(stdout, buf, size);
4155 #endif
4156 slirp_input(buf, size);
4159 static int net_slirp_init(VLANState *vlan)
4161 if (!slirp_inited) {
4162 slirp_inited = 1;
4163 slirp_init();
4165 slirp_vc = qemu_new_vlan_client(vlan,
4166 slirp_receive, NULL, NULL);
4167 snprintf(slirp_vc->info_str, sizeof(slirp_vc->info_str), "user redirector");
4168 return 0;
4171 static void net_slirp_redir(const char *redir_str)
4173 int is_udp;
4174 char buf[256], *r;
4175 const char *p;
4176 struct in_addr guest_addr;
4177 int host_port, guest_port;
4179 if (!slirp_inited) {
4180 slirp_inited = 1;
4181 slirp_init();
4184 p = redir_str;
4185 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4186 goto fail;
4187 if (!strcmp(buf, "tcp")) {
4188 is_udp = 0;
4189 } else if (!strcmp(buf, "udp")) {
4190 is_udp = 1;
4191 } else {
4192 goto fail;
4195 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4196 goto fail;
4197 host_port = strtol(buf, &r, 0);
4198 if (r == buf)
4199 goto fail;
4201 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
4202 goto fail;
4203 if (buf[0] == '\0') {
4204 pstrcpy(buf, sizeof(buf), "10.0.2.15");
4206 if (!inet_aton(buf, &guest_addr))
4207 goto fail;
4209 guest_port = strtol(p, &r, 0);
4210 if (r == p)
4211 goto fail;
4213 if (slirp_redir(is_udp, host_port, guest_addr, guest_port) < 0) {
4214 fprintf(stderr, "qemu: could not set up redirection\n");
4215 exit(1);
4217 return;
4218 fail:
4219 fprintf(stderr, "qemu: syntax: -redir [tcp|udp]:host-port:[guest-host]:guest-port\n");
4220 exit(1);
4223 #ifndef _WIN32
4225 char smb_dir[1024];
4227 static void erase_dir(char *dir_name)
4229 DIR *d;
4230 struct dirent *de;
4231 char filename[1024];
4233 /* erase all the files in the directory */
4234 if ((d = opendir(dir_name)) != 0) {
4235 for(;;) {
4236 de = readdir(d);
4237 if (!de)
4238 break;
4239 if (strcmp(de->d_name, ".") != 0 &&
4240 strcmp(de->d_name, "..") != 0) {
4241 snprintf(filename, sizeof(filename), "%s/%s",
4242 smb_dir, de->d_name);
4243 if (unlink(filename) != 0) /* is it a directory? */
4244 erase_dir(filename);
4247 closedir(d);
4248 rmdir(dir_name);
4252 /* automatic user mode samba server configuration */
4253 static void smb_exit(void)
4255 erase_dir(smb_dir);
4258 /* automatic user mode samba server configuration */
4259 static void net_slirp_smb(const char *exported_dir)
4261 char smb_conf[1024];
4262 char smb_cmdline[1024];
4263 FILE *f;
4265 if (!slirp_inited) {
4266 slirp_inited = 1;
4267 slirp_init();
4270 /* XXX: better tmp dir construction */
4271 snprintf(smb_dir, sizeof(smb_dir), "/tmp/qemu-smb.%d", getpid());
4272 if (mkdir(smb_dir, 0700) < 0) {
4273 fprintf(stderr, "qemu: could not create samba server dir '%s'\n", smb_dir);
4274 exit(1);
4276 snprintf(smb_conf, sizeof(smb_conf), "%s/%s", smb_dir, "smb.conf");
4278 f = fopen(smb_conf, "w");
4279 if (!f) {
4280 fprintf(stderr, "qemu: could not create samba server configuration file '%s'\n", smb_conf);
4281 exit(1);
4283 fprintf(f,
4284 "[global]\n"
4285 "private dir=%s\n"
4286 "smb ports=0\n"
4287 "socket address=127.0.0.1\n"
4288 "pid directory=%s\n"
4289 "lock directory=%s\n"
4290 "log file=%s/log.smbd\n"
4291 "smb passwd file=%s/smbpasswd\n"
4292 "security = share\n"
4293 "[qemu]\n"
4294 "path=%s\n"
4295 "read only=no\n"
4296 "guest ok=yes\n",
4297 smb_dir,
4298 smb_dir,
4299 smb_dir,
4300 smb_dir,
4301 smb_dir,
4302 exported_dir
4304 fclose(f);
4305 atexit(smb_exit);
4307 snprintf(smb_cmdline, sizeof(smb_cmdline), "%s -s %s",
4308 SMBD_COMMAND, smb_conf);
4310 slirp_add_exec(0, smb_cmdline, 4, 139);
4313 #endif /* !defined(_WIN32) */
4314 void do_info_slirp(void)
4316 slirp_stats();
4319 #endif /* CONFIG_SLIRP */
4321 #if !defined(_WIN32)
4323 typedef struct TAPState {
4324 VLANClientState *vc;
4325 int fd;
4326 char down_script[1024];
4327 } TAPState;
4329 static void tap_receive(void *opaque, const uint8_t *buf, int size)
4331 TAPState *s = opaque;
4332 int ret;
4333 for(;;) {
4334 ret = write(s->fd, buf, size);
4335 if (ret < 0 && (errno == EINTR || errno == EAGAIN)) {
4336 } else {
4337 break;
4342 static void tap_send(void *opaque)
4344 TAPState *s = opaque;
4345 uint8_t buf[4096];
4346 int size;
4348 #ifdef __sun__
4349 struct strbuf sbuf;
4350 int f = 0;
4351 sbuf.maxlen = sizeof(buf);
4352 sbuf.buf = buf;
4353 size = getmsg(s->fd, NULL, &sbuf, &f) >=0 ? sbuf.len : -1;
4354 #else
4355 size = read(s->fd, buf, sizeof(buf));
4356 #endif
4357 if (size > 0) {
4358 qemu_send_packet(s->vc, buf, size);
4362 /* fd support */
4364 static TAPState *net_tap_fd_init(VLANState *vlan, int fd)
4366 TAPState *s;
4368 s = qemu_mallocz(sizeof(TAPState));
4369 if (!s)
4370 return NULL;
4371 s->fd = fd;
4372 s->vc = qemu_new_vlan_client(vlan, tap_receive, NULL, s);
4373 qemu_set_fd_handler(s->fd, tap_send, NULL, s);
4374 snprintf(s->vc->info_str, sizeof(s->vc->info_str), "tap: fd=%d", fd);
4375 return s;
4378 #if defined (_BSD) || defined (__FreeBSD_kernel__)
4379 static int tap_open(char *ifname, int ifname_size)
4381 int fd;
4382 char *dev;
4383 struct stat s;
4385 TFR(fd = open("/dev/tap", O_RDWR));
4386 if (fd < 0) {
4387 fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
4388 return -1;
4391 fstat(fd, &s);
4392 dev = devname(s.st_rdev, S_IFCHR);
4393 pstrcpy(ifname, ifname_size, dev);
4395 fcntl(fd, F_SETFL, O_NONBLOCK);
4396 return fd;
4398 #elif defined(__sun__)
4399 #define TUNNEWPPA (('T'<<16) | 0x0001)
4401 * Allocate TAP device, returns opened fd.
4402 * Stores dev name in the first arg(must be large enough).
4404 int tap_alloc(char *dev, size_t dev_size)
4406 int tap_fd, if_fd, ppa = -1;
4407 static int ip_fd = 0;
4408 char *ptr;
4410 static int arp_fd = 0;
4411 int ip_muxid, arp_muxid;
4412 struct strioctl strioc_if, strioc_ppa;
4413 int link_type = I_PLINK;;
4414 struct lifreq ifr;
4415 char actual_name[32] = "";
4417 memset(&ifr, 0x0, sizeof(ifr));
4419 if( *dev ){
4420 ptr = dev;
4421 while( *ptr && !isdigit((int)*ptr) ) ptr++;
4422 ppa = atoi(ptr);
4425 /* Check if IP device was opened */
4426 if( ip_fd )
4427 close(ip_fd);
4429 TFR(ip_fd = open("/dev/udp", O_RDWR, 0));
4430 if (ip_fd < 0) {
4431 syslog(LOG_ERR, "Can't open /dev/ip (actually /dev/udp)");
4432 return -1;
4435 TFR(tap_fd = open("/dev/tap", O_RDWR, 0));
4436 if (tap_fd < 0) {
4437 syslog(LOG_ERR, "Can't open /dev/tap");
4438 return -1;
4441 /* Assign a new PPA and get its unit number. */
4442 strioc_ppa.ic_cmd = TUNNEWPPA;
4443 strioc_ppa.ic_timout = 0;
4444 strioc_ppa.ic_len = sizeof(ppa);
4445 strioc_ppa.ic_dp = (char *)&ppa;
4446 if ((ppa = ioctl (tap_fd, I_STR, &strioc_ppa)) < 0)
4447 syslog (LOG_ERR, "Can't assign new interface");
4449 TFR(if_fd = open("/dev/tap", O_RDWR, 0));
4450 if (if_fd < 0) {
4451 syslog(LOG_ERR, "Can't open /dev/tap (2)");
4452 return -1;
4454 if(ioctl(if_fd, I_PUSH, "ip") < 0){
4455 syslog(LOG_ERR, "Can't push IP module");
4456 return -1;
4459 if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) < 0)
4460 syslog(LOG_ERR, "Can't get flags\n");
4462 snprintf (actual_name, 32, "tap%d", ppa);
4463 strncpy (ifr.lifr_name, actual_name, sizeof (ifr.lifr_name));
4465 ifr.lifr_ppa = ppa;
4466 /* Assign ppa according to the unit number returned by tun device */
4468 if (ioctl (if_fd, SIOCSLIFNAME, &ifr) < 0)
4469 syslog (LOG_ERR, "Can't set PPA %d", ppa);
4470 if (ioctl(if_fd, SIOCGLIFFLAGS, &ifr) <0)
4471 syslog (LOG_ERR, "Can't get flags\n");
4472 /* Push arp module to if_fd */
4473 if (ioctl (if_fd, I_PUSH, "arp") < 0)
4474 syslog (LOG_ERR, "Can't push ARP module (2)");
4476 /* Push arp module to ip_fd */
4477 if (ioctl (ip_fd, I_POP, NULL) < 0)
4478 syslog (LOG_ERR, "I_POP failed\n");
4479 if (ioctl (ip_fd, I_PUSH, "arp") < 0)
4480 syslog (LOG_ERR, "Can't push ARP module (3)\n");
4481 /* Open arp_fd */
4482 TFR(arp_fd = open ("/dev/tap", O_RDWR, 0));
4483 if (arp_fd < 0)
4484 syslog (LOG_ERR, "Can't open %s\n", "/dev/tap");
4486 /* Set ifname to arp */
4487 strioc_if.ic_cmd = SIOCSLIFNAME;
4488 strioc_if.ic_timout = 0;
4489 strioc_if.ic_len = sizeof(ifr);
4490 strioc_if.ic_dp = (char *)&ifr;
4491 if (ioctl(arp_fd, I_STR, &strioc_if) < 0){
4492 syslog (LOG_ERR, "Can't set ifname to arp\n");
4495 if((ip_muxid = ioctl(ip_fd, I_LINK, if_fd)) < 0){
4496 syslog(LOG_ERR, "Can't link TAP device to IP");
4497 return -1;
4500 if ((arp_muxid = ioctl (ip_fd, link_type, arp_fd)) < 0)
4501 syslog (LOG_ERR, "Can't link TAP device to ARP");
4503 close (if_fd);
4505 memset(&ifr, 0x0, sizeof(ifr));
4506 strncpy (ifr.lifr_name, actual_name, sizeof (ifr.lifr_name));
4507 ifr.lifr_ip_muxid = ip_muxid;
4508 ifr.lifr_arp_muxid = arp_muxid;
4510 if (ioctl (ip_fd, SIOCSLIFMUXID, &ifr) < 0)
4512 ioctl (ip_fd, I_PUNLINK , arp_muxid);
4513 ioctl (ip_fd, I_PUNLINK, ip_muxid);
4514 syslog (LOG_ERR, "Can't set multiplexor id");
4517 snprintf(dev, dev_size, "tap%d", ppa);
4518 return tap_fd;
4521 static int tap_open(char *ifname, int ifname_size)
4523 char dev[10]="";
4524 int fd;
4525 if( (fd = tap_alloc(dev, sizeof(dev))) < 0 ){
4526 fprintf(stderr, "Cannot allocate TAP device\n");
4527 return -1;
4529 pstrcpy(ifname, ifname_size, dev);
4530 fcntl(fd, F_SETFL, O_NONBLOCK);
4531 return fd;
4533 #else
4534 static int tap_open(char *ifname, int ifname_size)
4536 struct ifreq ifr;
4537 int fd, ret;
4539 TFR(fd = open("/dev/net/tun", O_RDWR));
4540 if (fd < 0) {
4541 fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
4542 return -1;
4544 memset(&ifr, 0, sizeof(ifr));
4545 ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
4546 if (ifname[0] != '\0')
4547 pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
4548 else
4549 pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
4550 ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
4551 if (ret != 0) {
4552 fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
4553 close(fd);
4554 return -1;
4556 pstrcpy(ifname, ifname_size, ifr.ifr_name);
4557 fcntl(fd, F_SETFL, O_NONBLOCK);
4558 return fd;
4560 #endif
4562 static int launch_script(const char *setup_script, const char *ifname, int fd)
4564 int pid, status;
4565 char *args[3];
4566 char **parg;
4568 /* try to launch network script */
4569 pid = fork();
4570 if (pid >= 0) {
4571 if (pid == 0) {
4572 int open_max = sysconf (_SC_OPEN_MAX), i;
4573 for (i = 0; i < open_max; i++)
4574 if (i != STDIN_FILENO &&
4575 i != STDOUT_FILENO &&
4576 i != STDERR_FILENO &&
4577 i != fd)
4578 close(i);
4580 parg = args;
4581 *parg++ = (char *)setup_script;
4582 *parg++ = (char *)ifname;
4583 *parg++ = NULL;
4584 execv(setup_script, args);
4585 _exit(1);
4587 while (waitpid(pid, &status, 0) != pid);
4588 if (!WIFEXITED(status) ||
4589 WEXITSTATUS(status) != 0) {
4590 fprintf(stderr, "%s: could not launch network script\n",
4591 setup_script);
4592 return -1;
4595 return 0;
4598 static int net_tap_init(VLANState *vlan, const char *ifname1,
4599 const char *setup_script, const char *down_script)
4601 TAPState *s;
4602 int fd;
4603 char ifname[128];
4605 if (ifname1 != NULL)
4606 pstrcpy(ifname, sizeof(ifname), ifname1);
4607 else
4608 ifname[0] = '\0';
4609 TFR(fd = tap_open(ifname, sizeof(ifname)));
4610 if (fd < 0)
4611 return -1;
4613 if (!setup_script || !strcmp(setup_script, "no"))
4614 setup_script = "";
4615 if (setup_script[0] != '\0') {
4616 if (launch_script(setup_script, ifname, fd))
4617 return -1;
4619 s = net_tap_fd_init(vlan, fd);
4620 if (!s)
4621 return -1;
4622 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
4623 "tap: ifname=%s setup_script=%s", ifname, setup_script);
4624 if (down_script && strcmp(down_script, "no"))
4625 snprintf(s->down_script, sizeof(s->down_script), "%s", down_script);
4626 return 0;
4629 #endif /* !_WIN32 */
4631 #if defined(CONFIG_VDE)
4632 typedef struct VDEState {
4633 VLANClientState *vc;
4634 VDECONN *vde;
4635 } VDEState;
4637 static void vde_to_qemu(void *opaque)
4639 VDEState *s = opaque;
4640 uint8_t buf[4096];
4641 int size;
4643 size = vde_recv(s->vde, buf, sizeof(buf), 0);
4644 if (size > 0) {
4645 qemu_send_packet(s->vc, buf, size);
4649 static void vde_from_qemu(void *opaque, const uint8_t *buf, int size)
4651 VDEState *s = opaque;
4652 int ret;
4653 for(;;) {
4654 ret = vde_send(s->vde, buf, size, 0);
4655 if (ret < 0 && errno == EINTR) {
4656 } else {
4657 break;
4662 static int net_vde_init(VLANState *vlan, const char *sock, int port,
4663 const char *group, int mode)
4665 VDEState *s;
4666 char *init_group = strlen(group) ? (char *)group : NULL;
4667 char *init_sock = strlen(sock) ? (char *)sock : NULL;
4669 struct vde_open_args args = {
4670 .port = port,
4671 .group = init_group,
4672 .mode = mode,
4675 s = qemu_mallocz(sizeof(VDEState));
4676 if (!s)
4677 return -1;
4678 s->vde = vde_open(init_sock, "QEMU", &args);
4679 if (!s->vde){
4680 free(s);
4681 return -1;
4683 s->vc = qemu_new_vlan_client(vlan, vde_from_qemu, NULL, s);
4684 qemu_set_fd_handler(vde_datafd(s->vde), vde_to_qemu, NULL, s);
4685 snprintf(s->vc->info_str, sizeof(s->vc->info_str), "vde: sock=%s fd=%d",
4686 sock, vde_datafd(s->vde));
4687 return 0;
4689 #endif
4691 /* network connection */
4692 typedef struct NetSocketState {
4693 VLANClientState *vc;
4694 int fd;
4695 int state; /* 0 = getting length, 1 = getting data */
4696 int index;
4697 int packet_len;
4698 uint8_t buf[4096];
4699 struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
4700 } NetSocketState;
4702 typedef struct NetSocketListenState {
4703 VLANState *vlan;
4704 int fd;
4705 } NetSocketListenState;
4707 /* XXX: we consider we can send the whole packet without blocking */
4708 static void net_socket_receive(void *opaque, const uint8_t *buf, int size)
4710 NetSocketState *s = opaque;
4711 uint32_t len;
4712 len = htonl(size);
4714 send_all(s->fd, (const uint8_t *)&len, sizeof(len));
4715 send_all(s->fd, buf, size);
4718 static void net_socket_receive_dgram(void *opaque, const uint8_t *buf, int size)
4720 NetSocketState *s = opaque;
4721 sendto(s->fd, buf, size, 0,
4722 (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
4725 static void net_socket_send(void *opaque)
4727 NetSocketState *s = opaque;
4728 int l, size, err;
4729 uint8_t buf1[4096];
4730 const uint8_t *buf;
4732 size = recv(s->fd, buf1, sizeof(buf1), 0);
4733 if (size < 0) {
4734 err = socket_error();
4735 if (err != EWOULDBLOCK)
4736 goto eoc;
4737 } else if (size == 0) {
4738 /* end of connection */
4739 eoc:
4740 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
4741 closesocket(s->fd);
4742 return;
4744 buf = buf1;
4745 while (size > 0) {
4746 /* reassemble a packet from the network */
4747 switch(s->state) {
4748 case 0:
4749 l = 4 - s->index;
4750 if (l > size)
4751 l = size;
4752 memcpy(s->buf + s->index, buf, l);
4753 buf += l;
4754 size -= l;
4755 s->index += l;
4756 if (s->index == 4) {
4757 /* got length */
4758 s->packet_len = ntohl(*(uint32_t *)s->buf);
4759 s->index = 0;
4760 s->state = 1;
4762 break;
4763 case 1:
4764 l = s->packet_len - s->index;
4765 if (l > size)
4766 l = size;
4767 memcpy(s->buf + s->index, buf, l);
4768 s->index += l;
4769 buf += l;
4770 size -= l;
4771 if (s->index >= s->packet_len) {
4772 qemu_send_packet(s->vc, s->buf, s->packet_len);
4773 s->index = 0;
4774 s->state = 0;
4776 break;
4781 static void net_socket_send_dgram(void *opaque)
4783 NetSocketState *s = opaque;
4784 int size;
4786 size = recv(s->fd, s->buf, sizeof(s->buf), 0);
4787 if (size < 0)
4788 return;
4789 if (size == 0) {
4790 /* end of connection */
4791 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
4792 return;
4794 qemu_send_packet(s->vc, s->buf, size);
4797 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
4799 struct ip_mreq imr;
4800 int fd;
4801 int val, ret;
4802 if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
4803 fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
4804 inet_ntoa(mcastaddr->sin_addr),
4805 (int)ntohl(mcastaddr->sin_addr.s_addr));
4806 return -1;
4809 fd = socket(PF_INET, SOCK_DGRAM, 0);
4810 if (fd < 0) {
4811 perror("socket(PF_INET, SOCK_DGRAM)");
4812 return -1;
4815 val = 1;
4816 ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
4817 (const char *)&val, sizeof(val));
4818 if (ret < 0) {
4819 perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
4820 goto fail;
4823 ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
4824 if (ret < 0) {
4825 perror("bind");
4826 goto fail;
4829 /* Add host to multicast group */
4830 imr.imr_multiaddr = mcastaddr->sin_addr;
4831 imr.imr_interface.s_addr = htonl(INADDR_ANY);
4833 ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
4834 (const char *)&imr, sizeof(struct ip_mreq));
4835 if (ret < 0) {
4836 perror("setsockopt(IP_ADD_MEMBERSHIP)");
4837 goto fail;
4840 /* Force mcast msgs to loopback (eg. several QEMUs in same host */
4841 val = 1;
4842 ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
4843 (const char *)&val, sizeof(val));
4844 if (ret < 0) {
4845 perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
4846 goto fail;
4849 socket_set_nonblock(fd);
4850 return fd;
4851 fail:
4852 if (fd >= 0)
4853 closesocket(fd);
4854 return -1;
4857 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan, int fd,
4858 int is_connected)
4860 struct sockaddr_in saddr;
4861 int newfd;
4862 socklen_t saddr_len;
4863 NetSocketState *s;
4865 /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
4866 * Because this may be "shared" socket from a "master" process, datagrams would be recv()
4867 * by ONLY ONE process: we must "clone" this dgram socket --jjo
4870 if (is_connected) {
4871 if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
4872 /* must be bound */
4873 if (saddr.sin_addr.s_addr==0) {
4874 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
4875 fd);
4876 return NULL;
4878 /* clone dgram socket */
4879 newfd = net_socket_mcast_create(&saddr);
4880 if (newfd < 0) {
4881 /* error already reported by net_socket_mcast_create() */
4882 close(fd);
4883 return NULL;
4885 /* clone newfd to fd, close newfd */
4886 dup2(newfd, fd);
4887 close(newfd);
4889 } else {
4890 fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
4891 fd, strerror(errno));
4892 return NULL;
4896 s = qemu_mallocz(sizeof(NetSocketState));
4897 if (!s)
4898 return NULL;
4899 s->fd = fd;
4901 s->vc = qemu_new_vlan_client(vlan, net_socket_receive_dgram, NULL, s);
4902 qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
4904 /* mcast: save bound address as dst */
4905 if (is_connected) s->dgram_dst=saddr;
4907 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
4908 "socket: fd=%d (%s mcast=%s:%d)",
4909 fd, is_connected? "cloned" : "",
4910 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
4911 return s;
4914 static void net_socket_connect(void *opaque)
4916 NetSocketState *s = opaque;
4917 qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
4920 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan, int fd,
4921 int is_connected)
4923 NetSocketState *s;
4924 s = qemu_mallocz(sizeof(NetSocketState));
4925 if (!s)
4926 return NULL;
4927 s->fd = fd;
4928 s->vc = qemu_new_vlan_client(vlan,
4929 net_socket_receive, NULL, s);
4930 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
4931 "socket: fd=%d", fd);
4932 if (is_connected) {
4933 net_socket_connect(s);
4934 } else {
4935 qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
4937 return s;
4940 static NetSocketState *net_socket_fd_init(VLANState *vlan, int fd,
4941 int is_connected)
4943 int so_type=-1, optlen=sizeof(so_type);
4945 if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type,
4946 (socklen_t *)&optlen)< 0) {
4947 fprintf(stderr, "qemu: error: getsockopt(SO_TYPE) for fd=%d failed\n", fd);
4948 return NULL;
4950 switch(so_type) {
4951 case SOCK_DGRAM:
4952 return net_socket_fd_init_dgram(vlan, fd, is_connected);
4953 case SOCK_STREAM:
4954 return net_socket_fd_init_stream(vlan, fd, is_connected);
4955 default:
4956 /* who knows ... this could be a eg. a pty, do warn and continue as stream */
4957 fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
4958 return net_socket_fd_init_stream(vlan, fd, is_connected);
4960 return NULL;
4963 static void net_socket_accept(void *opaque)
4965 NetSocketListenState *s = opaque;
4966 NetSocketState *s1;
4967 struct sockaddr_in saddr;
4968 socklen_t len;
4969 int fd;
4971 for(;;) {
4972 len = sizeof(saddr);
4973 fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
4974 if (fd < 0 && errno != EINTR) {
4975 return;
4976 } else if (fd >= 0) {
4977 break;
4980 s1 = net_socket_fd_init(s->vlan, fd, 1);
4981 if (!s1) {
4982 closesocket(fd);
4983 } else {
4984 snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
4985 "socket: connection from %s:%d",
4986 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
4990 static int net_socket_listen_init(VLANState *vlan, const char *host_str)
4992 NetSocketListenState *s;
4993 int fd, val, ret;
4994 struct sockaddr_in saddr;
4996 if (parse_host_port(&saddr, host_str) < 0)
4997 return -1;
4999 s = qemu_mallocz(sizeof(NetSocketListenState));
5000 if (!s)
5001 return -1;
5003 fd = socket(PF_INET, SOCK_STREAM, 0);
5004 if (fd < 0) {
5005 perror("socket");
5006 return -1;
5008 socket_set_nonblock(fd);
5010 /* allow fast reuse */
5011 val = 1;
5012 setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
5014 ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
5015 if (ret < 0) {
5016 perror("bind");
5017 return -1;
5019 ret = listen(fd, 0);
5020 if (ret < 0) {
5021 perror("listen");
5022 return -1;
5024 s->vlan = vlan;
5025 s->fd = fd;
5026 qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
5027 return 0;
5030 static int net_socket_connect_init(VLANState *vlan, const char *host_str)
5032 NetSocketState *s;
5033 int fd, connected, ret, err;
5034 struct sockaddr_in saddr;
5036 if (parse_host_port(&saddr, host_str) < 0)
5037 return -1;
5039 fd = socket(PF_INET, SOCK_STREAM, 0);
5040 if (fd < 0) {
5041 perror("socket");
5042 return -1;
5044 socket_set_nonblock(fd);
5046 connected = 0;
5047 for(;;) {
5048 ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
5049 if (ret < 0) {
5050 err = socket_error();
5051 if (err == EINTR || err == EWOULDBLOCK) {
5052 } else if (err == EINPROGRESS) {
5053 break;
5054 #ifdef _WIN32
5055 } else if (err == WSAEALREADY) {
5056 break;
5057 #endif
5058 } else {
5059 perror("connect");
5060 closesocket(fd);
5061 return -1;
5063 } else {
5064 connected = 1;
5065 break;
5068 s = net_socket_fd_init(vlan, fd, connected);
5069 if (!s)
5070 return -1;
5071 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
5072 "socket: connect to %s:%d",
5073 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
5074 return 0;
5077 static int net_socket_mcast_init(VLANState *vlan, const char *host_str)
5079 NetSocketState *s;
5080 int fd;
5081 struct sockaddr_in saddr;
5083 if (parse_host_port(&saddr, host_str) < 0)
5084 return -1;
5087 fd = net_socket_mcast_create(&saddr);
5088 if (fd < 0)
5089 return -1;
5091 s = net_socket_fd_init(vlan, fd, 0);
5092 if (!s)
5093 return -1;
5095 s->dgram_dst = saddr;
5097 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
5098 "socket: mcast=%s:%d",
5099 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
5100 return 0;
5104 static const char *get_opt_name(char *buf, int buf_size, const char *p)
5106 char *q;
5108 q = buf;
5109 while (*p != '\0' && *p != '=') {
5110 if (q && (q - buf) < buf_size - 1)
5111 *q++ = *p;
5112 p++;
5114 if (q)
5115 *q = '\0';
5117 return p;
5120 static const char *get_opt_value(char *buf, int buf_size, const char *p)
5122 char *q;
5124 q = buf;
5125 while (*p != '\0') {
5126 if (*p == ',') {
5127 if (*(p + 1) != ',')
5128 break;
5129 p++;
5131 if (q && (q - buf) < buf_size - 1)
5132 *q++ = *p;
5133 p++;
5135 if (q)
5136 *q = '\0';
5138 return p;
5141 static int get_param_value(char *buf, int buf_size,
5142 const char *tag, const char *str)
5144 const char *p;
5145 char option[128];
5147 p = str;
5148 for(;;) {
5149 p = get_opt_name(option, sizeof(option), p);
5150 if (*p != '=')
5151 break;
5152 p++;
5153 if (!strcmp(tag, option)) {
5154 (void)get_opt_value(buf, buf_size, p);
5155 return strlen(buf);
5156 } else {
5157 p = get_opt_value(NULL, 0, p);
5159 if (*p != ',')
5160 break;
5161 p++;
5163 return 0;
5166 static int check_params(char *buf, int buf_size,
5167 char **params, const char *str)
5169 const char *p;
5170 int i;
5172 p = str;
5173 for(;;) {
5174 p = get_opt_name(buf, buf_size, p);
5175 if (*p != '=')
5176 return -1;
5177 p++;
5178 for(i = 0; params[i] != NULL; i++)
5179 if (!strcmp(params[i], buf))
5180 break;
5181 if (params[i] == NULL)
5182 return -1;
5183 p = get_opt_value(NULL, 0, p);
5184 if (*p != ',')
5185 break;
5186 p++;
5188 return 0;
5191 static int net_client_init(const char *device, const char *p)
5193 char buf[1024];
5194 int vlan_id, ret;
5195 VLANState *vlan;
5197 vlan_id = 0;
5198 if (get_param_value(buf, sizeof(buf), "vlan", p)) {
5199 vlan_id = strtol(buf, NULL, 0);
5201 vlan = qemu_find_vlan(vlan_id);
5202 if (!vlan) {
5203 fprintf(stderr, "Could not create vlan %d\n", vlan_id);
5204 return -1;
5206 if (!strcmp(device, "nic")) {
5207 NICInfo *nd;
5208 uint8_t *macaddr;
5210 if (nb_nics >= MAX_NICS) {
5211 fprintf(stderr, "Too Many NICs\n");
5212 return -1;
5214 nd = &nd_table[nb_nics];
5215 macaddr = nd->macaddr;
5216 macaddr[0] = 0x52;
5217 macaddr[1] = 0x54;
5218 macaddr[2] = 0x00;
5219 macaddr[3] = 0x12;
5220 macaddr[4] = 0x34;
5221 macaddr[5] = 0x56 + nb_nics;
5223 if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
5224 if (parse_macaddr(macaddr, buf) < 0) {
5225 fprintf(stderr, "invalid syntax for ethernet address\n");
5226 return -1;
5229 if (get_param_value(buf, sizeof(buf), "model", p)) {
5230 nd->model = strdup(buf);
5232 nd->vlan = vlan;
5233 nb_nics++;
5234 vlan->nb_guest_devs++;
5235 ret = 0;
5236 } else
5237 if (!strcmp(device, "none")) {
5238 /* does nothing. It is needed to signal that no network cards
5239 are wanted */
5240 ret = 0;
5241 } else
5242 #ifdef CONFIG_SLIRP
5243 if (!strcmp(device, "user")) {
5244 if (get_param_value(buf, sizeof(buf), "hostname", p)) {
5245 pstrcpy(slirp_hostname, sizeof(slirp_hostname), buf);
5247 vlan->nb_host_devs++;
5248 ret = net_slirp_init(vlan);
5249 } else
5250 #endif
5251 #ifdef _WIN32
5252 if (!strcmp(device, "tap")) {
5253 char ifname[64];
5254 if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
5255 fprintf(stderr, "tap: no interface name\n");
5256 return -1;
5258 vlan->nb_host_devs++;
5259 ret = tap_win32_init(vlan, ifname);
5260 } else
5261 #else
5262 if (!strcmp(device, "tap")) {
5263 char ifname[64];
5264 char setup_script[1024], down_script[1024];
5265 int fd;
5266 vlan->nb_host_devs++;
5267 if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
5268 fd = strtol(buf, NULL, 0);
5269 fcntl(fd, F_SETFL, O_NONBLOCK);
5270 ret = -1;
5271 if (net_tap_fd_init(vlan, fd))
5272 ret = 0;
5273 } else {
5274 if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
5275 ifname[0] = '\0';
5277 if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
5278 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
5280 if (get_param_value(down_script, sizeof(down_script), "downscript", p) == 0) {
5281 pstrcpy(down_script, sizeof(down_script), DEFAULT_NETWORK_DOWN_SCRIPT);
5283 ret = net_tap_init(vlan, ifname, setup_script, down_script);
5285 } else
5286 #endif
5287 if (!strcmp(device, "socket")) {
5288 if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
5289 int fd;
5290 fd = strtol(buf, NULL, 0);
5291 ret = -1;
5292 if (net_socket_fd_init(vlan, fd, 1))
5293 ret = 0;
5294 } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
5295 ret = net_socket_listen_init(vlan, buf);
5296 } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
5297 ret = net_socket_connect_init(vlan, buf);
5298 } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
5299 ret = net_socket_mcast_init(vlan, buf);
5300 } else {
5301 fprintf(stderr, "Unknown socket options: %s\n", p);
5302 return -1;
5304 vlan->nb_host_devs++;
5305 } else
5306 #ifdef CONFIG_VDE
5307 if (!strcmp(device, "vde")) {
5308 char vde_sock[1024], vde_group[512];
5309 int vde_port, vde_mode;
5310 vlan->nb_host_devs++;
5311 if (get_param_value(vde_sock, sizeof(vde_sock), "sock", p) <= 0) {
5312 vde_sock[0] = '\0';
5314 if (get_param_value(buf, sizeof(buf), "port", p) > 0) {
5315 vde_port = strtol(buf, NULL, 10);
5316 } else {
5317 vde_port = 0;
5319 if (get_param_value(vde_group, sizeof(vde_group), "group", p) <= 0) {
5320 vde_group[0] = '\0';
5322 if (get_param_value(buf, sizeof(buf), "mode", p) > 0) {
5323 vde_mode = strtol(buf, NULL, 8);
5324 } else {
5325 vde_mode = 0700;
5327 ret = net_vde_init(vlan, vde_sock, vde_port, vde_group, vde_mode);
5328 } else
5329 #endif
5331 fprintf(stderr, "Unknown network device: %s\n", device);
5332 return -1;
5334 if (ret < 0) {
5335 fprintf(stderr, "Could not initialize device '%s'\n", device);
5338 return ret;
5341 static int net_client_parse(const char *str)
5343 const char *p;
5344 char *q;
5345 char device[64];
5347 p = str;
5348 q = device;
5349 while (*p != '\0' && *p != ',') {
5350 if ((q - device) < sizeof(device) - 1)
5351 *q++ = *p;
5352 p++;
5354 *q = '\0';
5355 if (*p == ',')
5356 p++;
5358 return net_client_init(device, p);
5361 void do_info_network(void)
5363 VLANState *vlan;
5364 VLANClientState *vc;
5366 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
5367 term_printf("VLAN %d devices:\n", vlan->id);
5368 for(vc = vlan->first_client; vc != NULL; vc = vc->next)
5369 term_printf(" %s\n", vc->info_str);
5373 #define HD_ALIAS "index=%d,media=disk"
5374 #ifdef TARGET_PPC
5375 #define CDROM_ALIAS "index=1,media=cdrom"
5376 #else
5377 #define CDROM_ALIAS "index=2,media=cdrom"
5378 #endif
5379 #define FD_ALIAS "index=%d,if=floppy"
5380 #define PFLASH_ALIAS "if=pflash"
5381 #define MTD_ALIAS "if=mtd"
5382 #define SD_ALIAS "index=0,if=sd"
5384 static int drive_add(const char *file, const char *fmt, ...)
5386 va_list ap;
5388 if (nb_drives_opt >= MAX_DRIVES) {
5389 fprintf(stderr, "qemu: too many drives\n");
5390 exit(1);
5393 drives_opt[nb_drives_opt].file = file;
5394 va_start(ap, fmt);
5395 vsnprintf(drives_opt[nb_drives_opt].opt,
5396 sizeof(drives_opt[0].opt), fmt, ap);
5397 va_end(ap);
5399 return nb_drives_opt++;
5402 int drive_get_index(BlockInterfaceType type, int bus, int unit)
5404 int index;
5406 /* seek interface, bus and unit */
5408 for (index = 0; index < nb_drives; index++)
5409 if (drives_table[index].type == type &&
5410 drives_table[index].bus == bus &&
5411 drives_table[index].unit == unit)
5412 return index;
5414 return -1;
5417 int drive_get_max_bus(BlockInterfaceType type)
5419 int max_bus;
5420 int index;
5422 max_bus = -1;
5423 for (index = 0; index < nb_drives; index++) {
5424 if(drives_table[index].type == type &&
5425 drives_table[index].bus > max_bus)
5426 max_bus = drives_table[index].bus;
5428 return max_bus;
5431 static void bdrv_format_print(void *opaque, const char *name)
5433 fprintf(stderr, " %s", name);
5436 static int drive_init(struct drive_opt *arg, int snapshot,
5437 QEMUMachine *machine)
5439 char buf[128];
5440 char file[1024];
5441 char devname[128];
5442 const char *mediastr = "";
5443 BlockInterfaceType type;
5444 enum { MEDIA_DISK, MEDIA_CDROM } media;
5445 int bus_id, unit_id;
5446 int cyls, heads, secs, translation;
5447 BlockDriverState *bdrv;
5448 BlockDriver *drv = NULL;
5449 int max_devs;
5450 int index;
5451 int cache;
5452 int bdrv_flags;
5453 char *str = arg->opt;
5454 char *params[] = { "bus", "unit", "if", "index", "cyls", "heads",
5455 "secs", "trans", "media", "snapshot", "file",
5456 "cache", "format", NULL };
5458 if (check_params(buf, sizeof(buf), params, str) < 0) {
5459 fprintf(stderr, "qemu: unknown parameter '%s' in '%s'\n",
5460 buf, str);
5461 return -1;
5464 file[0] = 0;
5465 cyls = heads = secs = 0;
5466 bus_id = 0;
5467 unit_id = -1;
5468 translation = BIOS_ATA_TRANSLATION_AUTO;
5469 index = -1;
5470 cache = 1;
5472 if (!strcmp(machine->name, "realview") ||
5473 !strcmp(machine->name, "SS-5") ||
5474 !strcmp(machine->name, "SS-10") ||
5475 !strcmp(machine->name, "SS-600MP") ||
5476 !strcmp(machine->name, "versatilepb") ||
5477 !strcmp(machine->name, "versatileab")) {
5478 type = IF_SCSI;
5479 max_devs = MAX_SCSI_DEVS;
5480 pstrcpy(devname, sizeof(devname), "scsi");
5481 } else {
5482 type = IF_IDE;
5483 max_devs = MAX_IDE_DEVS;
5484 pstrcpy(devname, sizeof(devname), "ide");
5486 media = MEDIA_DISK;
5488 /* extract parameters */
5490 if (get_param_value(buf, sizeof(buf), "bus", str)) {
5491 bus_id = strtol(buf, NULL, 0);
5492 if (bus_id < 0) {
5493 fprintf(stderr, "qemu: '%s' invalid bus id\n", str);
5494 return -1;
5498 if (get_param_value(buf, sizeof(buf), "unit", str)) {
5499 unit_id = strtol(buf, NULL, 0);
5500 if (unit_id < 0) {
5501 fprintf(stderr, "qemu: '%s' invalid unit id\n", str);
5502 return -1;
5506 if (get_param_value(buf, sizeof(buf), "if", str)) {
5507 pstrcpy(devname, sizeof(devname), buf);
5508 if (!strcmp(buf, "ide")) {
5509 type = IF_IDE;
5510 max_devs = MAX_IDE_DEVS;
5511 } else if (!strcmp(buf, "scsi")) {
5512 type = IF_SCSI;
5513 max_devs = MAX_SCSI_DEVS;
5514 } else if (!strcmp(buf, "floppy")) {
5515 type = IF_FLOPPY;
5516 max_devs = 0;
5517 } else if (!strcmp(buf, "pflash")) {
5518 type = IF_PFLASH;
5519 max_devs = 0;
5520 } else if (!strcmp(buf, "mtd")) {
5521 type = IF_MTD;
5522 max_devs = 0;
5523 } else if (!strcmp(buf, "sd")) {
5524 type = IF_SD;
5525 max_devs = 0;
5526 } else {
5527 fprintf(stderr, "qemu: '%s' unsupported bus type '%s'\n", str, buf);
5528 return -1;
5532 if (get_param_value(buf, sizeof(buf), "index", str)) {
5533 index = strtol(buf, NULL, 0);
5534 if (index < 0) {
5535 fprintf(stderr, "qemu: '%s' invalid index\n", str);
5536 return -1;
5540 if (get_param_value(buf, sizeof(buf), "cyls", str)) {
5541 cyls = strtol(buf, NULL, 0);
5544 if (get_param_value(buf, sizeof(buf), "heads", str)) {
5545 heads = strtol(buf, NULL, 0);
5548 if (get_param_value(buf, sizeof(buf), "secs", str)) {
5549 secs = strtol(buf, NULL, 0);
5552 if (cyls || heads || secs) {
5553 if (cyls < 1 || cyls > 16383) {
5554 fprintf(stderr, "qemu: '%s' invalid physical cyls number\n", str);
5555 return -1;
5557 if (heads < 1 || heads > 16) {
5558 fprintf(stderr, "qemu: '%s' invalid physical heads number\n", str);
5559 return -1;
5561 if (secs < 1 || secs > 63) {
5562 fprintf(stderr, "qemu: '%s' invalid physical secs number\n", str);
5563 return -1;
5567 if (get_param_value(buf, sizeof(buf), "trans", str)) {
5568 if (!cyls) {
5569 fprintf(stderr,
5570 "qemu: '%s' trans must be used with cyls,heads and secs\n",
5571 str);
5572 return -1;
5574 if (!strcmp(buf, "none"))
5575 translation = BIOS_ATA_TRANSLATION_NONE;
5576 else if (!strcmp(buf, "lba"))
5577 translation = BIOS_ATA_TRANSLATION_LBA;
5578 else if (!strcmp(buf, "auto"))
5579 translation = BIOS_ATA_TRANSLATION_AUTO;
5580 else {
5581 fprintf(stderr, "qemu: '%s' invalid translation type\n", str);
5582 return -1;
5586 if (get_param_value(buf, sizeof(buf), "media", str)) {
5587 if (!strcmp(buf, "disk")) {
5588 media = MEDIA_DISK;
5589 } else if (!strcmp(buf, "cdrom")) {
5590 if (cyls || secs || heads) {
5591 fprintf(stderr,
5592 "qemu: '%s' invalid physical CHS format\n", str);
5593 return -1;
5595 media = MEDIA_CDROM;
5596 } else {
5597 fprintf(stderr, "qemu: '%s' invalid media\n", str);
5598 return -1;
5602 if (get_param_value(buf, sizeof(buf), "snapshot", str)) {
5603 if (!strcmp(buf, "on"))
5604 snapshot = 1;
5605 else if (!strcmp(buf, "off"))
5606 snapshot = 0;
5607 else {
5608 fprintf(stderr, "qemu: '%s' invalid snapshot option\n", str);
5609 return -1;
5613 if (get_param_value(buf, sizeof(buf), "cache", str)) {
5614 if (!strcmp(buf, "off"))
5615 cache = 0;
5616 else if (!strcmp(buf, "on"))
5617 cache = 1;
5618 else {
5619 fprintf(stderr, "qemu: invalid cache option\n");
5620 return -1;
5624 if (get_param_value(buf, sizeof(buf), "format", str)) {
5625 if (strcmp(buf, "?") == 0) {
5626 fprintf(stderr, "qemu: Supported formats:");
5627 bdrv_iterate_format(bdrv_format_print, NULL);
5628 fprintf(stderr, "\n");
5629 return -1;
5631 drv = bdrv_find_format(buf);
5632 if (!drv) {
5633 fprintf(stderr, "qemu: '%s' invalid format\n", buf);
5634 return -1;
5638 if (arg->file == NULL)
5639 get_param_value(file, sizeof(file), "file", str);
5640 else
5641 pstrcpy(file, sizeof(file), arg->file);
5643 /* compute bus and unit according index */
5645 if (index != -1) {
5646 if (bus_id != 0 || unit_id != -1) {
5647 fprintf(stderr,
5648 "qemu: '%s' index cannot be used with bus and unit\n", str);
5649 return -1;
5651 if (max_devs == 0)
5653 unit_id = index;
5654 bus_id = 0;
5655 } else {
5656 unit_id = index % max_devs;
5657 bus_id = index / max_devs;
5661 /* if user doesn't specify a unit_id,
5662 * try to find the first free
5665 if (unit_id == -1) {
5666 unit_id = 0;
5667 while (drive_get_index(type, bus_id, unit_id) != -1) {
5668 unit_id++;
5669 if (max_devs && unit_id >= max_devs) {
5670 unit_id -= max_devs;
5671 bus_id++;
5676 /* check unit id */
5678 if (max_devs && unit_id >= max_devs) {
5679 fprintf(stderr, "qemu: '%s' unit %d too big (max is %d)\n",
5680 str, unit_id, max_devs - 1);
5681 return -1;
5685 * ignore multiple definitions
5688 if (drive_get_index(type, bus_id, unit_id) != -1)
5689 return 0;
5691 /* init */
5693 if (type == IF_IDE || type == IF_SCSI)
5694 mediastr = (media == MEDIA_CDROM) ? "-cd" : "-hd";
5695 if (max_devs)
5696 snprintf(buf, sizeof(buf), "%s%i%s%i",
5697 devname, bus_id, mediastr, unit_id);
5698 else
5699 snprintf(buf, sizeof(buf), "%s%s%i",
5700 devname, mediastr, unit_id);
5701 bdrv = bdrv_new(buf);
5702 drives_table[nb_drives].bdrv = bdrv;
5703 drives_table[nb_drives].type = type;
5704 drives_table[nb_drives].bus = bus_id;
5705 drives_table[nb_drives].unit = unit_id;
5706 nb_drives++;
5708 switch(type) {
5709 case IF_IDE:
5710 case IF_SCSI:
5711 switch(media) {
5712 case MEDIA_DISK:
5713 if (cyls != 0) {
5714 bdrv_set_geometry_hint(bdrv, cyls, heads, secs);
5715 bdrv_set_translation_hint(bdrv, translation);
5717 break;
5718 case MEDIA_CDROM:
5719 bdrv_set_type_hint(bdrv, BDRV_TYPE_CDROM);
5720 break;
5722 break;
5723 case IF_SD:
5724 /* FIXME: This isn't really a floppy, but it's a reasonable
5725 approximation. */
5726 case IF_FLOPPY:
5727 bdrv_set_type_hint(bdrv, BDRV_TYPE_FLOPPY);
5728 break;
5729 case IF_PFLASH:
5730 case IF_MTD:
5731 break;
5733 if (!file[0])
5734 return 0;
5735 bdrv_flags = 0;
5736 if (snapshot)
5737 bdrv_flags |= BDRV_O_SNAPSHOT;
5738 if (!cache)
5739 bdrv_flags |= BDRV_O_DIRECT;
5740 if (bdrv_open2(bdrv, file, bdrv_flags, drv) < 0 || qemu_key_check(bdrv, file)) {
5741 fprintf(stderr, "qemu: could not open disk image %s\n",
5742 file);
5743 return -1;
5745 return 0;
5748 /***********************************************************/
5749 /* USB devices */
5751 static USBPort *used_usb_ports;
5752 static USBPort *free_usb_ports;
5754 /* ??? Maybe change this to register a hub to keep track of the topology. */
5755 void qemu_register_usb_port(USBPort *port, void *opaque, int index,
5756 usb_attachfn attach)
5758 port->opaque = opaque;
5759 port->index = index;
5760 port->attach = attach;
5761 port->next = free_usb_ports;
5762 free_usb_ports = port;
5765 int usb_device_add_dev(USBDevice *dev)
5767 USBPort *port;
5769 /* Find a USB port to add the device to. */
5770 port = free_usb_ports;
5771 if (!port->next) {
5772 USBDevice *hub;
5774 /* Create a new hub and chain it on. */
5775 free_usb_ports = NULL;
5776 port->next = used_usb_ports;
5777 used_usb_ports = port;
5779 hub = usb_hub_init(VM_USB_HUB_SIZE);
5780 usb_attach(port, hub);
5781 port = free_usb_ports;
5784 free_usb_ports = port->next;
5785 port->next = used_usb_ports;
5786 used_usb_ports = port;
5787 usb_attach(port, dev);
5788 return 0;
5791 static int usb_device_add(const char *devname)
5793 const char *p;
5794 USBDevice *dev;
5796 if (!free_usb_ports)
5797 return -1;
5799 if (strstart(devname, "host:", &p)) {
5800 dev = usb_host_device_open(p);
5801 } else if (!strcmp(devname, "mouse")) {
5802 dev = usb_mouse_init();
5803 } else if (!strcmp(devname, "tablet")) {
5804 dev = usb_tablet_init();
5805 } else if (!strcmp(devname, "keyboard")) {
5806 dev = usb_keyboard_init();
5807 } else if (strstart(devname, "disk:", &p)) {
5808 dev = usb_msd_init(p);
5809 } else if (!strcmp(devname, "wacom-tablet")) {
5810 dev = usb_wacom_init();
5811 } else if (strstart(devname, "serial:", &p)) {
5812 dev = usb_serial_init(p);
5813 #ifdef CONFIG_BRLAPI
5814 } else if (!strcmp(devname, "braille")) {
5815 dev = usb_baum_init();
5816 #endif
5817 } else if (strstart(devname, "net:", &p)) {
5818 int nic = nb_nics;
5820 if (net_client_init("nic", p) < 0)
5821 return -1;
5822 nd_table[nic].model = "usb";
5823 dev = usb_net_init(&nd_table[nic]);
5824 } else {
5825 return -1;
5827 if (!dev)
5828 return -1;
5830 return usb_device_add_dev(dev);
5833 int usb_device_del_addr(int bus_num, int addr)
5835 USBPort *port;
5836 USBPort **lastp;
5837 USBDevice *dev;
5839 if (!used_usb_ports)
5840 return -1;
5842 if (bus_num != 0)
5843 return -1;
5845 lastp = &used_usb_ports;
5846 port = used_usb_ports;
5847 while (port && port->dev->addr != addr) {
5848 lastp = &port->next;
5849 port = port->next;
5852 if (!port)
5853 return -1;
5855 dev = port->dev;
5856 *lastp = port->next;
5857 usb_attach(port, NULL);
5858 dev->handle_destroy(dev);
5859 port->next = free_usb_ports;
5860 free_usb_ports = port;
5861 return 0;
5864 static int usb_device_del(const char *devname)
5866 int bus_num, addr;
5867 const char *p;
5869 if (!used_usb_ports)
5870 return -1;
5872 p = strchr(devname, '.');
5873 if (!p)
5874 return -1;
5875 bus_num = strtoul(devname, NULL, 0);
5876 addr = strtoul(p + 1, NULL, 0);
5878 return usb_device_del_addr(bus_num, addr);
5881 void do_usb_add(const char *devname)
5883 usb_device_add(devname);
5886 void do_usb_del(const char *devname)
5888 usb_device_del(devname);
5891 void usb_info(void)
5893 USBDevice *dev;
5894 USBPort *port;
5895 const char *speed_str;
5897 if (!usb_enabled) {
5898 term_printf("USB support not enabled\n");
5899 return;
5902 for (port = used_usb_ports; port; port = port->next) {
5903 dev = port->dev;
5904 if (!dev)
5905 continue;
5906 switch(dev->speed) {
5907 case USB_SPEED_LOW:
5908 speed_str = "1.5";
5909 break;
5910 case USB_SPEED_FULL:
5911 speed_str = "12";
5912 break;
5913 case USB_SPEED_HIGH:
5914 speed_str = "480";
5915 break;
5916 default:
5917 speed_str = "?";
5918 break;
5920 term_printf(" Device %d.%d, Speed %s Mb/s, Product %s\n",
5921 0, dev->addr, speed_str, dev->devname);
5925 /***********************************************************/
5926 /* PCMCIA/Cardbus */
5928 static struct pcmcia_socket_entry_s {
5929 struct pcmcia_socket_s *socket;
5930 struct pcmcia_socket_entry_s *next;
5931 } *pcmcia_sockets = 0;
5933 void pcmcia_socket_register(struct pcmcia_socket_s *socket)
5935 struct pcmcia_socket_entry_s *entry;
5937 entry = qemu_malloc(sizeof(struct pcmcia_socket_entry_s));
5938 entry->socket = socket;
5939 entry->next = pcmcia_sockets;
5940 pcmcia_sockets = entry;
5943 void pcmcia_socket_unregister(struct pcmcia_socket_s *socket)
5945 struct pcmcia_socket_entry_s *entry, **ptr;
5947 ptr = &pcmcia_sockets;
5948 for (entry = *ptr; entry; ptr = &entry->next, entry = *ptr)
5949 if (entry->socket == socket) {
5950 *ptr = entry->next;
5951 qemu_free(entry);
5955 void pcmcia_info(void)
5957 struct pcmcia_socket_entry_s *iter;
5958 if (!pcmcia_sockets)
5959 term_printf("No PCMCIA sockets\n");
5961 for (iter = pcmcia_sockets; iter; iter = iter->next)
5962 term_printf("%s: %s\n", iter->socket->slot_string,
5963 iter->socket->attached ? iter->socket->card_string :
5964 "Empty");
5967 /***********************************************************/
5968 /* dumb display */
5970 static void dumb_update(DisplayState *ds, int x, int y, int w, int h)
5974 static void dumb_resize(DisplayState *ds, int w, int h)
5978 static void dumb_refresh(DisplayState *ds)
5980 #if defined(CONFIG_SDL)
5981 vga_hw_update();
5982 #endif
5985 static void dumb_display_init(DisplayState *ds)
5987 ds->data = NULL;
5988 ds->linesize = 0;
5989 ds->depth = 0;
5990 ds->dpy_update = dumb_update;
5991 ds->dpy_resize = dumb_resize;
5992 ds->dpy_refresh = dumb_refresh;
5993 ds->gui_timer_interval = 500;
5994 ds->idle = 1;
5997 /***********************************************************/
5998 /* I/O handling */
6000 #define MAX_IO_HANDLERS 64
6002 typedef struct IOHandlerRecord {
6003 int fd;
6004 IOCanRWHandler *fd_read_poll;
6005 IOHandler *fd_read;
6006 IOHandler *fd_write;
6007 int deleted;
6008 void *opaque;
6009 /* temporary data */
6010 struct pollfd *ufd;
6011 struct IOHandlerRecord *next;
6012 } IOHandlerRecord;
6014 static IOHandlerRecord *first_io_handler;
6016 /* XXX: fd_read_poll should be suppressed, but an API change is
6017 necessary in the character devices to suppress fd_can_read(). */
6018 int qemu_set_fd_handler2(int fd,
6019 IOCanRWHandler *fd_read_poll,
6020 IOHandler *fd_read,
6021 IOHandler *fd_write,
6022 void *opaque)
6024 IOHandlerRecord **pioh, *ioh;
6026 if (!fd_read && !fd_write) {
6027 pioh = &first_io_handler;
6028 for(;;) {
6029 ioh = *pioh;
6030 if (ioh == NULL)
6031 break;
6032 if (ioh->fd == fd) {
6033 ioh->deleted = 1;
6034 break;
6036 pioh = &ioh->next;
6038 } else {
6039 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
6040 if (ioh->fd == fd)
6041 goto found;
6043 ioh = qemu_mallocz(sizeof(IOHandlerRecord));
6044 if (!ioh)
6045 return -1;
6046 ioh->next = first_io_handler;
6047 first_io_handler = ioh;
6048 found:
6049 ioh->fd = fd;
6050 ioh->fd_read_poll = fd_read_poll;
6051 ioh->fd_read = fd_read;
6052 ioh->fd_write = fd_write;
6053 ioh->opaque = opaque;
6054 ioh->deleted = 0;
6056 return 0;
6059 int qemu_set_fd_handler(int fd,
6060 IOHandler *fd_read,
6061 IOHandler *fd_write,
6062 void *opaque)
6064 return qemu_set_fd_handler2(fd, NULL, fd_read, fd_write, opaque);
6067 /***********************************************************/
6068 /* Polling handling */
6070 typedef struct PollingEntry {
6071 PollingFunc *func;
6072 void *opaque;
6073 struct PollingEntry *next;
6074 } PollingEntry;
6076 static PollingEntry *first_polling_entry;
6078 int qemu_add_polling_cb(PollingFunc *func, void *opaque)
6080 PollingEntry **ppe, *pe;
6081 pe = qemu_mallocz(sizeof(PollingEntry));
6082 if (!pe)
6083 return -1;
6084 pe->func = func;
6085 pe->opaque = opaque;
6086 for(ppe = &first_polling_entry; *ppe != NULL; ppe = &(*ppe)->next);
6087 *ppe = pe;
6088 return 0;
6091 void qemu_del_polling_cb(PollingFunc *func, void *opaque)
6093 PollingEntry **ppe, *pe;
6094 for(ppe = &first_polling_entry; *ppe != NULL; ppe = &(*ppe)->next) {
6095 pe = *ppe;
6096 if (pe->func == func && pe->opaque == opaque) {
6097 *ppe = pe->next;
6098 qemu_free(pe);
6099 break;
6104 #ifdef _WIN32
6105 /***********************************************************/
6106 /* Wait objects support */
6107 typedef struct WaitObjects {
6108 int num;
6109 HANDLE events[MAXIMUM_WAIT_OBJECTS + 1];
6110 WaitObjectFunc *func[MAXIMUM_WAIT_OBJECTS + 1];
6111 void *opaque[MAXIMUM_WAIT_OBJECTS + 1];
6112 } WaitObjects;
6114 static WaitObjects wait_objects = {0};
6116 int qemu_add_wait_object(HANDLE handle, WaitObjectFunc *func, void *opaque)
6118 WaitObjects *w = &wait_objects;
6120 if (w->num >= MAXIMUM_WAIT_OBJECTS)
6121 return -1;
6122 w->events[w->num] = handle;
6123 w->func[w->num] = func;
6124 w->opaque[w->num] = opaque;
6125 w->num++;
6126 return 0;
6129 void qemu_del_wait_object(HANDLE handle, WaitObjectFunc *func, void *opaque)
6131 int i, found;
6132 WaitObjects *w = &wait_objects;
6134 found = 0;
6135 for (i = 0; i < w->num; i++) {
6136 if (w->events[i] == handle)
6137 found = 1;
6138 if (found) {
6139 w->events[i] = w->events[i + 1];
6140 w->func[i] = w->func[i + 1];
6141 w->opaque[i] = w->opaque[i + 1];
6144 if (found)
6145 w->num--;
6147 #endif
6149 /***********************************************************/
6150 /* savevm/loadvm support */
6152 #define IO_BUF_SIZE 32768
6154 struct QEMUFile {
6155 FILE *outfile;
6156 BlockDriverState *bs;
6157 int is_file;
6158 int is_writable;
6159 int64_t base_offset;
6160 int64_t buf_offset; /* start of buffer when writing, end of buffer
6161 when reading */
6162 int buf_index;
6163 int buf_size; /* 0 when writing */
6164 uint8_t buf[IO_BUF_SIZE];
6167 QEMUFile *qemu_fopen(const char *filename, const char *mode)
6169 QEMUFile *f;
6171 f = qemu_mallocz(sizeof(QEMUFile));
6172 if (!f)
6173 return NULL;
6174 if (!strcmp(mode, "wb")) {
6175 f->is_writable = 1;
6176 } else if (!strcmp(mode, "rb")) {
6177 f->is_writable = 0;
6178 } else {
6179 goto fail;
6181 f->outfile = fopen(filename, mode);
6182 if (!f->outfile)
6183 goto fail;
6184 f->is_file = 1;
6185 return f;
6186 fail:
6187 if (f->outfile)
6188 fclose(f->outfile);
6189 qemu_free(f);
6190 return NULL;
6193 static QEMUFile *qemu_fopen_bdrv(BlockDriverState *bs, int64_t offset, int is_writable)
6195 QEMUFile *f;
6197 f = qemu_mallocz(sizeof(QEMUFile));
6198 if (!f)
6199 return NULL;
6200 f->is_file = 0;
6201 f->bs = bs;
6202 f->is_writable = is_writable;
6203 f->base_offset = offset;
6204 return f;
6207 void qemu_fflush(QEMUFile *f)
6209 if (!f->is_writable)
6210 return;
6211 if (f->buf_index > 0) {
6212 if (f->is_file) {
6213 fseek(f->outfile, f->buf_offset, SEEK_SET);
6214 fwrite(f->buf, 1, f->buf_index, f->outfile);
6215 } else {
6216 bdrv_pwrite(f->bs, f->base_offset + f->buf_offset,
6217 f->buf, f->buf_index);
6219 f->buf_offset += f->buf_index;
6220 f->buf_index = 0;
6224 static void qemu_fill_buffer(QEMUFile *f)
6226 int len;
6228 if (f->is_writable)
6229 return;
6230 if (f->is_file) {
6231 fseek(f->outfile, f->buf_offset, SEEK_SET);
6232 len = fread(f->buf, 1, IO_BUF_SIZE, f->outfile);
6233 if (len < 0)
6234 len = 0;
6235 } else {
6236 len = bdrv_pread(f->bs, f->base_offset + f->buf_offset,
6237 f->buf, IO_BUF_SIZE);
6238 if (len < 0)
6239 len = 0;
6241 f->buf_index = 0;
6242 f->buf_size = len;
6243 f->buf_offset += len;
6246 void qemu_fclose(QEMUFile *f)
6248 if (f->is_writable)
6249 qemu_fflush(f);
6250 if (f->is_file) {
6251 fclose(f->outfile);
6253 qemu_free(f);
6256 void qemu_put_buffer(QEMUFile *f, const uint8_t *buf, int size)
6258 int l;
6259 while (size > 0) {
6260 l = IO_BUF_SIZE - f->buf_index;
6261 if (l > size)
6262 l = size;
6263 memcpy(f->buf + f->buf_index, buf, l);
6264 f->buf_index += l;
6265 buf += l;
6266 size -= l;
6267 if (f->buf_index >= IO_BUF_SIZE)
6268 qemu_fflush(f);
6272 void qemu_put_byte(QEMUFile *f, int v)
6274 f->buf[f->buf_index++] = v;
6275 if (f->buf_index >= IO_BUF_SIZE)
6276 qemu_fflush(f);
6279 int qemu_get_buffer(QEMUFile *f, uint8_t *buf, int size1)
6281 int size, l;
6283 size = size1;
6284 while (size > 0) {
6285 l = f->buf_size - f->buf_index;
6286 if (l == 0) {
6287 qemu_fill_buffer(f);
6288 l = f->buf_size - f->buf_index;
6289 if (l == 0)
6290 break;
6292 if (l > size)
6293 l = size;
6294 memcpy(buf, f->buf + f->buf_index, l);
6295 f->buf_index += l;
6296 buf += l;
6297 size -= l;
6299 return size1 - size;
6302 int qemu_get_byte(QEMUFile *f)
6304 if (f->buf_index >= f->buf_size) {
6305 qemu_fill_buffer(f);
6306 if (f->buf_index >= f->buf_size)
6307 return 0;
6309 return f->buf[f->buf_index++];
6312 int64_t qemu_ftell(QEMUFile *f)
6314 return f->buf_offset - f->buf_size + f->buf_index;
6317 int64_t qemu_fseek(QEMUFile *f, int64_t pos, int whence)
6319 if (whence == SEEK_SET) {
6320 /* nothing to do */
6321 } else if (whence == SEEK_CUR) {
6322 pos += qemu_ftell(f);
6323 } else {
6324 /* SEEK_END not supported */
6325 return -1;
6327 if (f->is_writable) {
6328 qemu_fflush(f);
6329 f->buf_offset = pos;
6330 } else {
6331 f->buf_offset = pos;
6332 f->buf_index = 0;
6333 f->buf_size = 0;
6335 return pos;
6338 void qemu_put_be16(QEMUFile *f, unsigned int v)
6340 qemu_put_byte(f, v >> 8);
6341 qemu_put_byte(f, v);
6344 void qemu_put_be32(QEMUFile *f, unsigned int v)
6346 qemu_put_byte(f, v >> 24);
6347 qemu_put_byte(f, v >> 16);
6348 qemu_put_byte(f, v >> 8);
6349 qemu_put_byte(f, v);
6352 void qemu_put_be64(QEMUFile *f, uint64_t v)
6354 qemu_put_be32(f, v >> 32);
6355 qemu_put_be32(f, v);
6358 unsigned int qemu_get_be16(QEMUFile *f)
6360 unsigned int v;
6361 v = qemu_get_byte(f) << 8;
6362 v |= qemu_get_byte(f);
6363 return v;
6366 unsigned int qemu_get_be32(QEMUFile *f)
6368 unsigned int v;
6369 v = qemu_get_byte(f) << 24;
6370 v |= qemu_get_byte(f) << 16;
6371 v |= qemu_get_byte(f) << 8;
6372 v |= qemu_get_byte(f);
6373 return v;
6376 uint64_t qemu_get_be64(QEMUFile *f)
6378 uint64_t v;
6379 v = (uint64_t)qemu_get_be32(f) << 32;
6380 v |= qemu_get_be32(f);
6381 return v;
6384 typedef struct SaveStateEntry {
6385 char idstr[256];
6386 int instance_id;
6387 int version_id;
6388 SaveStateHandler *save_state;
6389 LoadStateHandler *load_state;
6390 void *opaque;
6391 struct SaveStateEntry *next;
6392 } SaveStateEntry;
6394 static SaveStateEntry *first_se;
6396 /* TODO: Individual devices generally have very little idea about the rest
6397 of the system, so instance_id should be removed/replaced.
6398 Meanwhile pass -1 as instance_id if you do not already have a clearly
6399 distinguishing id for all instances of your device class. */
6400 int register_savevm(const char *idstr,
6401 int instance_id,
6402 int version_id,
6403 SaveStateHandler *save_state,
6404 LoadStateHandler *load_state,
6405 void *opaque)
6407 SaveStateEntry *se, **pse;
6409 se = qemu_malloc(sizeof(SaveStateEntry));
6410 if (!se)
6411 return -1;
6412 pstrcpy(se->idstr, sizeof(se->idstr), idstr);
6413 se->instance_id = (instance_id == -1) ? 0 : instance_id;
6414 se->version_id = version_id;
6415 se->save_state = save_state;
6416 se->load_state = load_state;
6417 se->opaque = opaque;
6418 se->next = NULL;
6420 /* add at the end of list */
6421 pse = &first_se;
6422 while (*pse != NULL) {
6423 if (instance_id == -1
6424 && strcmp(se->idstr, (*pse)->idstr) == 0
6425 && se->instance_id <= (*pse)->instance_id)
6426 se->instance_id = (*pse)->instance_id + 1;
6427 pse = &(*pse)->next;
6429 *pse = se;
6430 return 0;
6433 #define QEMU_VM_FILE_MAGIC 0x5145564d
6434 #define QEMU_VM_FILE_VERSION 0x00000002
6436 static int qemu_savevm_state(QEMUFile *f)
6438 SaveStateEntry *se;
6439 int len, ret;
6440 int64_t cur_pos, len_pos, total_len_pos;
6442 qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
6443 qemu_put_be32(f, QEMU_VM_FILE_VERSION);
6444 total_len_pos = qemu_ftell(f);
6445 qemu_put_be64(f, 0); /* total size */
6447 for(se = first_se; se != NULL; se = se->next) {
6448 if (se->save_state == NULL)
6449 /* this one has a loader only, for backwards compatibility */
6450 continue;
6452 /* ID string */
6453 len = strlen(se->idstr);
6454 qemu_put_byte(f, len);
6455 qemu_put_buffer(f, (uint8_t *)se->idstr, len);
6457 qemu_put_be32(f, se->instance_id);
6458 qemu_put_be32(f, se->version_id);
6460 /* record size: filled later */
6461 len_pos = qemu_ftell(f);
6462 qemu_put_be32(f, 0);
6463 se->save_state(f, se->opaque);
6465 /* fill record size */
6466 cur_pos = qemu_ftell(f);
6467 len = cur_pos - len_pos - 4;
6468 qemu_fseek(f, len_pos, SEEK_SET);
6469 qemu_put_be32(f, len);
6470 qemu_fseek(f, cur_pos, SEEK_SET);
6472 cur_pos = qemu_ftell(f);
6473 qemu_fseek(f, total_len_pos, SEEK_SET);
6474 qemu_put_be64(f, cur_pos - total_len_pos - 8);
6475 qemu_fseek(f, cur_pos, SEEK_SET);
6477 ret = 0;
6478 return ret;
6481 static SaveStateEntry *find_se(const char *idstr, int instance_id)
6483 SaveStateEntry *se;
6485 for(se = first_se; se != NULL; se = se->next) {
6486 if (!strcmp(se->idstr, idstr) &&
6487 instance_id == se->instance_id)
6488 return se;
6490 return NULL;
6493 static int qemu_loadvm_state(QEMUFile *f)
6495 SaveStateEntry *se;
6496 int len, ret, instance_id, record_len, version_id;
6497 int64_t total_len, end_pos, cur_pos;
6498 unsigned int v;
6499 char idstr[256];
6501 v = qemu_get_be32(f);
6502 if (v != QEMU_VM_FILE_MAGIC)
6503 goto fail;
6504 v = qemu_get_be32(f);
6505 if (v != QEMU_VM_FILE_VERSION) {
6506 fail:
6507 ret = -1;
6508 goto the_end;
6510 total_len = qemu_get_be64(f);
6511 end_pos = total_len + qemu_ftell(f);
6512 for(;;) {
6513 if (qemu_ftell(f) >= end_pos)
6514 break;
6515 len = qemu_get_byte(f);
6516 qemu_get_buffer(f, (uint8_t *)idstr, len);
6517 idstr[len] = '\0';
6518 instance_id = qemu_get_be32(f);
6519 version_id = qemu_get_be32(f);
6520 record_len = qemu_get_be32(f);
6521 #if 0
6522 printf("idstr=%s instance=0x%x version=%d len=%d\n",
6523 idstr, instance_id, version_id, record_len);
6524 #endif
6525 cur_pos = qemu_ftell(f);
6526 se = find_se(idstr, instance_id);
6527 if (!se) {
6528 fprintf(stderr, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
6529 instance_id, idstr);
6530 } else {
6531 ret = se->load_state(f, se->opaque, version_id);
6532 if (ret < 0) {
6533 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
6534 instance_id, idstr);
6537 /* always seek to exact end of record */
6538 qemu_fseek(f, cur_pos + record_len, SEEK_SET);
6540 ret = 0;
6541 the_end:
6542 return ret;
6545 /* device can contain snapshots */
6546 static int bdrv_can_snapshot(BlockDriverState *bs)
6548 return (bs &&
6549 !bdrv_is_removable(bs) &&
6550 !bdrv_is_read_only(bs));
6553 /* device must be snapshots in order to have a reliable snapshot */
6554 static int bdrv_has_snapshot(BlockDriverState *bs)
6556 return (bs &&
6557 !bdrv_is_removable(bs) &&
6558 !bdrv_is_read_only(bs));
6561 static BlockDriverState *get_bs_snapshots(void)
6563 BlockDriverState *bs;
6564 int i;
6566 if (bs_snapshots)
6567 return bs_snapshots;
6568 for(i = 0; i <= nb_drives; i++) {
6569 bs = drives_table[i].bdrv;
6570 if (bdrv_can_snapshot(bs))
6571 goto ok;
6573 return NULL;
6575 bs_snapshots = bs;
6576 return bs;
6579 static int bdrv_snapshot_find(BlockDriverState *bs, QEMUSnapshotInfo *sn_info,
6580 const char *name)
6582 QEMUSnapshotInfo *sn_tab, *sn;
6583 int nb_sns, i, ret;
6585 ret = -ENOENT;
6586 nb_sns = bdrv_snapshot_list(bs, &sn_tab);
6587 if (nb_sns < 0)
6588 return ret;
6589 for(i = 0; i < nb_sns; i++) {
6590 sn = &sn_tab[i];
6591 if (!strcmp(sn->id_str, name) || !strcmp(sn->name, name)) {
6592 *sn_info = *sn;
6593 ret = 0;
6594 break;
6597 qemu_free(sn_tab);
6598 return ret;
6601 void do_savevm(const char *name)
6603 BlockDriverState *bs, *bs1;
6604 QEMUSnapshotInfo sn1, *sn = &sn1, old_sn1, *old_sn = &old_sn1;
6605 int must_delete, ret, i;
6606 BlockDriverInfo bdi1, *bdi = &bdi1;
6607 QEMUFile *f;
6608 int saved_vm_running;
6609 #ifdef _WIN32
6610 struct _timeb tb;
6611 #else
6612 struct timeval tv;
6613 #endif
6615 bs = get_bs_snapshots();
6616 if (!bs) {
6617 term_printf("No block device can accept snapshots\n");
6618 return;
6621 /* ??? Should this occur after vm_stop? */
6622 qemu_aio_flush();
6624 saved_vm_running = vm_running;
6625 vm_stop(0);
6627 must_delete = 0;
6628 if (name) {
6629 ret = bdrv_snapshot_find(bs, old_sn, name);
6630 if (ret >= 0) {
6631 must_delete = 1;
6634 memset(sn, 0, sizeof(*sn));
6635 if (must_delete) {
6636 pstrcpy(sn->name, sizeof(sn->name), old_sn->name);
6637 pstrcpy(sn->id_str, sizeof(sn->id_str), old_sn->id_str);
6638 } else {
6639 if (name)
6640 pstrcpy(sn->name, sizeof(sn->name), name);
6643 /* fill auxiliary fields */
6644 #ifdef _WIN32
6645 _ftime(&tb);
6646 sn->date_sec = tb.time;
6647 sn->date_nsec = tb.millitm * 1000000;
6648 #else
6649 gettimeofday(&tv, NULL);
6650 sn->date_sec = tv.tv_sec;
6651 sn->date_nsec = tv.tv_usec * 1000;
6652 #endif
6653 sn->vm_clock_nsec = qemu_get_clock(vm_clock);
6655 if (bdrv_get_info(bs, bdi) < 0 || bdi->vm_state_offset <= 0) {
6656 term_printf("Device %s does not support VM state snapshots\n",
6657 bdrv_get_device_name(bs));
6658 goto the_end;
6661 /* save the VM state */
6662 f = qemu_fopen_bdrv(bs, bdi->vm_state_offset, 1);
6663 if (!f) {
6664 term_printf("Could not open VM state file\n");
6665 goto the_end;
6667 ret = qemu_savevm_state(f);
6668 sn->vm_state_size = qemu_ftell(f);
6669 qemu_fclose(f);
6670 if (ret < 0) {
6671 term_printf("Error %d while writing VM\n", ret);
6672 goto the_end;
6675 /* create the snapshots */
6677 for(i = 0; i < nb_drives; i++) {
6678 bs1 = drives_table[i].bdrv;
6679 if (bdrv_has_snapshot(bs1)) {
6680 if (must_delete) {
6681 ret = bdrv_snapshot_delete(bs1, old_sn->id_str);
6682 if (ret < 0) {
6683 term_printf("Error while deleting snapshot on '%s'\n",
6684 bdrv_get_device_name(bs1));
6687 ret = bdrv_snapshot_create(bs1, sn);
6688 if (ret < 0) {
6689 term_printf("Error while creating snapshot on '%s'\n",
6690 bdrv_get_device_name(bs1));
6695 the_end:
6696 if (saved_vm_running)
6697 vm_start();
6700 void do_loadvm(const char *name)
6702 BlockDriverState *bs, *bs1;
6703 BlockDriverInfo bdi1, *bdi = &bdi1;
6704 QEMUFile *f;
6705 int i, ret;
6706 int saved_vm_running;
6708 bs = get_bs_snapshots();
6709 if (!bs) {
6710 term_printf("No block device supports snapshots\n");
6711 return;
6714 /* Flush all IO requests so they don't interfere with the new state. */
6715 qemu_aio_flush();
6717 saved_vm_running = vm_running;
6718 vm_stop(0);
6720 for(i = 0; i <= nb_drives; i++) {
6721 bs1 = drives_table[i].bdrv;
6722 if (bdrv_has_snapshot(bs1)) {
6723 ret = bdrv_snapshot_goto(bs1, name);
6724 if (ret < 0) {
6725 if (bs != bs1)
6726 term_printf("Warning: ");
6727 switch(ret) {
6728 case -ENOTSUP:
6729 term_printf("Snapshots not supported on device '%s'\n",
6730 bdrv_get_device_name(bs1));
6731 break;
6732 case -ENOENT:
6733 term_printf("Could not find snapshot '%s' on device '%s'\n",
6734 name, bdrv_get_device_name(bs1));
6735 break;
6736 default:
6737 term_printf("Error %d while activating snapshot on '%s'\n",
6738 ret, bdrv_get_device_name(bs1));
6739 break;
6741 /* fatal on snapshot block device */
6742 if (bs == bs1)
6743 goto the_end;
6748 if (bdrv_get_info(bs, bdi) < 0 || bdi->vm_state_offset <= 0) {
6749 term_printf("Device %s does not support VM state snapshots\n",
6750 bdrv_get_device_name(bs));
6751 return;
6754 /* restore the VM state */
6755 f = qemu_fopen_bdrv(bs, bdi->vm_state_offset, 0);
6756 if (!f) {
6757 term_printf("Could not open VM state file\n");
6758 goto the_end;
6760 ret = qemu_loadvm_state(f);
6761 qemu_fclose(f);
6762 if (ret < 0) {
6763 term_printf("Error %d while loading VM state\n", ret);
6765 the_end:
6766 if (saved_vm_running)
6767 vm_start();
6770 void do_delvm(const char *name)
6772 BlockDriverState *bs, *bs1;
6773 int i, ret;
6775 bs = get_bs_snapshots();
6776 if (!bs) {
6777 term_printf("No block device supports snapshots\n");
6778 return;
6781 for(i = 0; i <= nb_drives; i++) {
6782 bs1 = drives_table[i].bdrv;
6783 if (bdrv_has_snapshot(bs1)) {
6784 ret = bdrv_snapshot_delete(bs1, name);
6785 if (ret < 0) {
6786 if (ret == -ENOTSUP)
6787 term_printf("Snapshots not supported on device '%s'\n",
6788 bdrv_get_device_name(bs1));
6789 else
6790 term_printf("Error %d while deleting snapshot on '%s'\n",
6791 ret, bdrv_get_device_name(bs1));
6797 void do_info_snapshots(void)
6799 BlockDriverState *bs, *bs1;
6800 QEMUSnapshotInfo *sn_tab, *sn;
6801 int nb_sns, i;
6802 char buf[256];
6804 bs = get_bs_snapshots();
6805 if (!bs) {
6806 term_printf("No available block device supports snapshots\n");
6807 return;
6809 term_printf("Snapshot devices:");
6810 for(i = 0; i <= nb_drives; i++) {
6811 bs1 = drives_table[i].bdrv;
6812 if (bdrv_has_snapshot(bs1)) {
6813 if (bs == bs1)
6814 term_printf(" %s", bdrv_get_device_name(bs1));
6817 term_printf("\n");
6819 nb_sns = bdrv_snapshot_list(bs, &sn_tab);
6820 if (nb_sns < 0) {
6821 term_printf("bdrv_snapshot_list: error %d\n", nb_sns);
6822 return;
6824 term_printf("Snapshot list (from %s):\n", bdrv_get_device_name(bs));
6825 term_printf("%s\n", bdrv_snapshot_dump(buf, sizeof(buf), NULL));
6826 for(i = 0; i < nb_sns; i++) {
6827 sn = &sn_tab[i];
6828 term_printf("%s\n", bdrv_snapshot_dump(buf, sizeof(buf), sn));
6830 qemu_free(sn_tab);
6833 /***********************************************************/
6834 /* ram save/restore */
6836 static int ram_get_page(QEMUFile *f, uint8_t *buf, int len)
6838 int v;
6840 v = qemu_get_byte(f);
6841 switch(v) {
6842 case 0:
6843 if (qemu_get_buffer(f, buf, len) != len)
6844 return -EIO;
6845 break;
6846 case 1:
6847 v = qemu_get_byte(f);
6848 memset(buf, v, len);
6849 break;
6850 default:
6851 return -EINVAL;
6853 return 0;
6856 static int ram_load_v1(QEMUFile *f, void *opaque)
6858 int ret;
6859 ram_addr_t i;
6861 if (qemu_get_be32(f) != phys_ram_size)
6862 return -EINVAL;
6863 for(i = 0; i < phys_ram_size; i+= TARGET_PAGE_SIZE) {
6864 ret = ram_get_page(f, phys_ram_base + i, TARGET_PAGE_SIZE);
6865 if (ret)
6866 return ret;
6868 return 0;
6871 #define BDRV_HASH_BLOCK_SIZE 1024
6872 #define IOBUF_SIZE 4096
6873 #define RAM_CBLOCK_MAGIC 0xfabe
6875 typedef struct RamCompressState {
6876 z_stream zstream;
6877 QEMUFile *f;
6878 uint8_t buf[IOBUF_SIZE];
6879 } RamCompressState;
6881 static int ram_compress_open(RamCompressState *s, QEMUFile *f)
6883 int ret;
6884 memset(s, 0, sizeof(*s));
6885 s->f = f;
6886 ret = deflateInit2(&s->zstream, 1,
6887 Z_DEFLATED, 15,
6888 9, Z_DEFAULT_STRATEGY);
6889 if (ret != Z_OK)
6890 return -1;
6891 s->zstream.avail_out = IOBUF_SIZE;
6892 s->zstream.next_out = s->buf;
6893 return 0;
6896 static void ram_put_cblock(RamCompressState *s, const uint8_t *buf, int len)
6898 qemu_put_be16(s->f, RAM_CBLOCK_MAGIC);
6899 qemu_put_be16(s->f, len);
6900 qemu_put_buffer(s->f, buf, len);
6903 static int ram_compress_buf(RamCompressState *s, const uint8_t *buf, int len)
6905 int ret;
6907 s->zstream.avail_in = len;
6908 s->zstream.next_in = (uint8_t *)buf;
6909 while (s->zstream.avail_in > 0) {
6910 ret = deflate(&s->zstream, Z_NO_FLUSH);
6911 if (ret != Z_OK)
6912 return -1;
6913 if (s->zstream.avail_out == 0) {
6914 ram_put_cblock(s, s->buf, IOBUF_SIZE);
6915 s->zstream.avail_out = IOBUF_SIZE;
6916 s->zstream.next_out = s->buf;
6919 return 0;
6922 static void ram_compress_close(RamCompressState *s)
6924 int len, ret;
6926 /* compress last bytes */
6927 for(;;) {
6928 ret = deflate(&s->zstream, Z_FINISH);
6929 if (ret == Z_OK || ret == Z_STREAM_END) {
6930 len = IOBUF_SIZE - s->zstream.avail_out;
6931 if (len > 0) {
6932 ram_put_cblock(s, s->buf, len);
6934 s->zstream.avail_out = IOBUF_SIZE;
6935 s->zstream.next_out = s->buf;
6936 if (ret == Z_STREAM_END)
6937 break;
6938 } else {
6939 goto fail;
6942 fail:
6943 deflateEnd(&s->zstream);
6946 typedef struct RamDecompressState {
6947 z_stream zstream;
6948 QEMUFile *f;
6949 uint8_t buf[IOBUF_SIZE];
6950 } RamDecompressState;
6952 static int ram_decompress_open(RamDecompressState *s, QEMUFile *f)
6954 int ret;
6955 memset(s, 0, sizeof(*s));
6956 s->f = f;
6957 ret = inflateInit(&s->zstream);
6958 if (ret != Z_OK)
6959 return -1;
6960 return 0;
6963 static int ram_decompress_buf(RamDecompressState *s, uint8_t *buf, int len)
6965 int ret, clen;
6967 s->zstream.avail_out = len;
6968 s->zstream.next_out = buf;
6969 while (s->zstream.avail_out > 0) {
6970 if (s->zstream.avail_in == 0) {
6971 if (qemu_get_be16(s->f) != RAM_CBLOCK_MAGIC)
6972 return -1;
6973 clen = qemu_get_be16(s->f);
6974 if (clen > IOBUF_SIZE)
6975 return -1;
6976 qemu_get_buffer(s->f, s->buf, clen);
6977 s->zstream.avail_in = clen;
6978 s->zstream.next_in = s->buf;
6980 ret = inflate(&s->zstream, Z_PARTIAL_FLUSH);
6981 if (ret != Z_OK && ret != Z_STREAM_END) {
6982 return -1;
6985 return 0;
6988 static void ram_decompress_close(RamDecompressState *s)
6990 inflateEnd(&s->zstream);
6993 static void ram_save(QEMUFile *f, void *opaque)
6995 ram_addr_t i;
6996 RamCompressState s1, *s = &s1;
6997 uint8_t buf[10];
6999 qemu_put_be32(f, phys_ram_size);
7000 if (ram_compress_open(s, f) < 0)
7001 return;
7002 for(i = 0; i < phys_ram_size; i+= BDRV_HASH_BLOCK_SIZE) {
7003 #if 0
7004 if (tight_savevm_enabled) {
7005 int64_t sector_num;
7006 int j;
7008 /* find if the memory block is available on a virtual
7009 block device */
7010 sector_num = -1;
7011 for(j = 0; j < nb_drives; j++) {
7012 sector_num = bdrv_hash_find(drives_table[j].bdrv,
7013 phys_ram_base + i,
7014 BDRV_HASH_BLOCK_SIZE);
7015 if (sector_num >= 0)
7016 break;
7018 if (j == nb_drives)
7019 goto normal_compress;
7020 buf[0] = 1;
7021 buf[1] = j;
7022 cpu_to_be64wu((uint64_t *)(buf + 2), sector_num);
7023 ram_compress_buf(s, buf, 10);
7024 } else
7025 #endif
7027 // normal_compress:
7028 buf[0] = 0;
7029 ram_compress_buf(s, buf, 1);
7030 ram_compress_buf(s, phys_ram_base + i, BDRV_HASH_BLOCK_SIZE);
7033 ram_compress_close(s);
7036 static int ram_load(QEMUFile *f, void *opaque, int version_id)
7038 RamDecompressState s1, *s = &s1;
7039 uint8_t buf[10];
7040 ram_addr_t i;
7042 if (version_id == 1)
7043 return ram_load_v1(f, opaque);
7044 if (version_id != 2)
7045 return -EINVAL;
7046 if (qemu_get_be32(f) != phys_ram_size)
7047 return -EINVAL;
7048 if (ram_decompress_open(s, f) < 0)
7049 return -EINVAL;
7050 for(i = 0; i < phys_ram_size; i+= BDRV_HASH_BLOCK_SIZE) {
7051 if (ram_decompress_buf(s, buf, 1) < 0) {
7052 fprintf(stderr, "Error while reading ram block header\n");
7053 goto error;
7055 if (buf[0] == 0) {
7056 if (ram_decompress_buf(s, phys_ram_base + i, BDRV_HASH_BLOCK_SIZE) < 0) {
7057 fprintf(stderr, "Error while reading ram block address=0x%08" PRIx64, (uint64_t)i);
7058 goto error;
7060 } else
7061 #if 0
7062 if (buf[0] == 1) {
7063 int bs_index;
7064 int64_t sector_num;
7066 ram_decompress_buf(s, buf + 1, 9);
7067 bs_index = buf[1];
7068 sector_num = be64_to_cpupu((const uint64_t *)(buf + 2));
7069 if (bs_index >= nb_drives) {
7070 fprintf(stderr, "Invalid block device index %d\n", bs_index);
7071 goto error;
7073 if (bdrv_read(drives_table[bs_index].bdrv, sector_num,
7074 phys_ram_base + i,
7075 BDRV_HASH_BLOCK_SIZE / 512) < 0) {
7076 fprintf(stderr, "Error while reading sector %d:%" PRId64 "\n",
7077 bs_index, sector_num);
7078 goto error;
7080 } else
7081 #endif
7083 error:
7084 printf("Error block header\n");
7085 return -EINVAL;
7088 ram_decompress_close(s);
7089 return 0;
7092 /***********************************************************/
7093 /* bottom halves (can be seen as timers which expire ASAP) */
7095 struct QEMUBH {
7096 QEMUBHFunc *cb;
7097 void *opaque;
7098 int scheduled;
7099 QEMUBH *next;
7102 static QEMUBH *first_bh = NULL;
7104 QEMUBH *qemu_bh_new(QEMUBHFunc *cb, void *opaque)
7106 QEMUBH *bh;
7107 bh = qemu_mallocz(sizeof(QEMUBH));
7108 if (!bh)
7109 return NULL;
7110 bh->cb = cb;
7111 bh->opaque = opaque;
7112 return bh;
7115 int qemu_bh_poll(void)
7117 QEMUBH *bh, **pbh;
7118 int ret;
7120 ret = 0;
7121 for(;;) {
7122 pbh = &first_bh;
7123 bh = *pbh;
7124 if (!bh)
7125 break;
7126 ret = 1;
7127 *pbh = bh->next;
7128 bh->scheduled = 0;
7129 bh->cb(bh->opaque);
7131 return ret;
7134 void qemu_bh_schedule(QEMUBH *bh)
7136 CPUState *env = cpu_single_env;
7137 if (bh->scheduled)
7138 return;
7139 bh->scheduled = 1;
7140 bh->next = first_bh;
7141 first_bh = bh;
7143 /* stop the currently executing CPU to execute the BH ASAP */
7144 if (env) {
7145 cpu_interrupt(env, CPU_INTERRUPT_EXIT);
7149 void qemu_bh_cancel(QEMUBH *bh)
7151 QEMUBH **pbh;
7152 if (bh->scheduled) {
7153 pbh = &first_bh;
7154 while (*pbh != bh)
7155 pbh = &(*pbh)->next;
7156 *pbh = bh->next;
7157 bh->scheduled = 0;
7161 void qemu_bh_delete(QEMUBH *bh)
7163 qemu_bh_cancel(bh);
7164 qemu_free(bh);
7167 /***********************************************************/
7168 /* machine registration */
7170 QEMUMachine *first_machine = NULL;
7172 int qemu_register_machine(QEMUMachine *m)
7174 QEMUMachine **pm;
7175 pm = &first_machine;
7176 while (*pm != NULL)
7177 pm = &(*pm)->next;
7178 m->next = NULL;
7179 *pm = m;
7180 return 0;
7183 static QEMUMachine *find_machine(const char *name)
7185 QEMUMachine *m;
7187 for(m = first_machine; m != NULL; m = m->next) {
7188 if (!strcmp(m->name, name))
7189 return m;
7191 return NULL;
7194 /***********************************************************/
7195 /* main execution loop */
7197 static void gui_update(void *opaque)
7199 DisplayState *ds = opaque;
7200 ds->dpy_refresh(ds);
7201 qemu_mod_timer(ds->gui_timer,
7202 (ds->gui_timer_interval ?
7203 ds->gui_timer_interval :
7204 GUI_REFRESH_INTERVAL)
7205 + qemu_get_clock(rt_clock));
7208 struct vm_change_state_entry {
7209 VMChangeStateHandler *cb;
7210 void *opaque;
7211 LIST_ENTRY (vm_change_state_entry) entries;
7214 static LIST_HEAD(vm_change_state_head, vm_change_state_entry) vm_change_state_head;
7216 VMChangeStateEntry *qemu_add_vm_change_state_handler(VMChangeStateHandler *cb,
7217 void *opaque)
7219 VMChangeStateEntry *e;
7221 e = qemu_mallocz(sizeof (*e));
7222 if (!e)
7223 return NULL;
7225 e->cb = cb;
7226 e->opaque = opaque;
7227 LIST_INSERT_HEAD(&vm_change_state_head, e, entries);
7228 return e;
7231 void qemu_del_vm_change_state_handler(VMChangeStateEntry *e)
7233 LIST_REMOVE (e, entries);
7234 qemu_free (e);
7237 static void vm_state_notify(int running)
7239 VMChangeStateEntry *e;
7241 for (e = vm_change_state_head.lh_first; e; e = e->entries.le_next) {
7242 e->cb(e->opaque, running);
7246 /* XXX: support several handlers */
7247 static VMStopHandler *vm_stop_cb;
7248 static void *vm_stop_opaque;
7250 int qemu_add_vm_stop_handler(VMStopHandler *cb, void *opaque)
7252 vm_stop_cb = cb;
7253 vm_stop_opaque = opaque;
7254 return 0;
7257 void qemu_del_vm_stop_handler(VMStopHandler *cb, void *opaque)
7259 vm_stop_cb = NULL;
7262 void vm_start(void)
7264 if (!vm_running) {
7265 cpu_enable_ticks();
7266 vm_running = 1;
7267 vm_state_notify(1);
7268 qemu_rearm_alarm_timer(alarm_timer);
7272 void vm_stop(int reason)
7274 if (vm_running) {
7275 cpu_disable_ticks();
7276 vm_running = 0;
7277 if (reason != 0) {
7278 if (vm_stop_cb) {
7279 vm_stop_cb(vm_stop_opaque, reason);
7282 vm_state_notify(0);
7286 /* reset/shutdown handler */
7288 typedef struct QEMUResetEntry {
7289 QEMUResetHandler *func;
7290 void *opaque;
7291 struct QEMUResetEntry *next;
7292 } QEMUResetEntry;
7294 static QEMUResetEntry *first_reset_entry;
7295 static int reset_requested;
7296 static int shutdown_requested;
7297 static int powerdown_requested;
7299 int qemu_shutdown_requested(void)
7301 int r = shutdown_requested;
7302 shutdown_requested = 0;
7303 return r;
7306 int qemu_reset_requested(void)
7308 int r = reset_requested;
7309 reset_requested = 0;
7310 return r;
7313 int qemu_powerdown_requested(void)
7315 int r = powerdown_requested;
7316 powerdown_requested = 0;
7317 return r;
7320 void qemu_register_reset(QEMUResetHandler *func, void *opaque)
7322 QEMUResetEntry **pre, *re;
7324 pre = &first_reset_entry;
7325 while (*pre != NULL)
7326 pre = &(*pre)->next;
7327 re = qemu_mallocz(sizeof(QEMUResetEntry));
7328 re->func = func;
7329 re->opaque = opaque;
7330 re->next = NULL;
7331 *pre = re;
7334 void qemu_system_reset(void)
7336 QEMUResetEntry *re;
7338 /* reset all devices */
7339 for(re = first_reset_entry; re != NULL; re = re->next) {
7340 re->func(re->opaque);
7344 void qemu_system_reset_request(void)
7346 if (no_reboot) {
7347 shutdown_requested = 1;
7348 } else {
7349 reset_requested = 1;
7351 if (cpu_single_env)
7352 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
7355 void qemu_system_shutdown_request(void)
7357 shutdown_requested = 1;
7358 if (cpu_single_env)
7359 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
7362 void qemu_system_powerdown_request(void)
7364 powerdown_requested = 1;
7365 if (cpu_single_env)
7366 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
7369 void main_loop_wait(int timeout)
7371 IOHandlerRecord *ioh;
7372 fd_set rfds, wfds, xfds;
7373 int ret, nfds;
7374 #ifdef _WIN32
7375 int ret2, i;
7376 #endif
7377 struct timeval tv;
7378 PollingEntry *pe;
7381 /* XXX: need to suppress polling by better using win32 events */
7382 ret = 0;
7383 for(pe = first_polling_entry; pe != NULL; pe = pe->next) {
7384 ret |= pe->func(pe->opaque);
7386 #ifdef _WIN32
7387 if (ret == 0) {
7388 int err;
7389 WaitObjects *w = &wait_objects;
7391 ret = WaitForMultipleObjects(w->num, w->events, FALSE, timeout);
7392 if (WAIT_OBJECT_0 + 0 <= ret && ret <= WAIT_OBJECT_0 + w->num - 1) {
7393 if (w->func[ret - WAIT_OBJECT_0])
7394 w->func[ret - WAIT_OBJECT_0](w->opaque[ret - WAIT_OBJECT_0]);
7396 /* Check for additional signaled events */
7397 for(i = (ret - WAIT_OBJECT_0 + 1); i < w->num; i++) {
7399 /* Check if event is signaled */
7400 ret2 = WaitForSingleObject(w->events[i], 0);
7401 if(ret2 == WAIT_OBJECT_0) {
7402 if (w->func[i])
7403 w->func[i](w->opaque[i]);
7404 } else if (ret2 == WAIT_TIMEOUT) {
7405 } else {
7406 err = GetLastError();
7407 fprintf(stderr, "WaitForSingleObject error %d %d\n", i, err);
7410 } else if (ret == WAIT_TIMEOUT) {
7411 } else {
7412 err = GetLastError();
7413 fprintf(stderr, "WaitForMultipleObjects error %d %d\n", ret, err);
7416 #endif
7417 /* poll any events */
7418 /* XXX: separate device handlers from system ones */
7419 nfds = -1;
7420 FD_ZERO(&rfds);
7421 FD_ZERO(&wfds);
7422 FD_ZERO(&xfds);
7423 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
7424 if (ioh->deleted)
7425 continue;
7426 if (ioh->fd_read &&
7427 (!ioh->fd_read_poll ||
7428 ioh->fd_read_poll(ioh->opaque) != 0)) {
7429 FD_SET(ioh->fd, &rfds);
7430 if (ioh->fd > nfds)
7431 nfds = ioh->fd;
7433 if (ioh->fd_write) {
7434 FD_SET(ioh->fd, &wfds);
7435 if (ioh->fd > nfds)
7436 nfds = ioh->fd;
7440 tv.tv_sec = 0;
7441 #ifdef _WIN32
7442 tv.tv_usec = 0;
7443 #else
7444 tv.tv_usec = timeout * 1000;
7445 #endif
7446 #if defined(CONFIG_SLIRP)
7447 if (slirp_inited) {
7448 slirp_select_fill(&nfds, &rfds, &wfds, &xfds);
7450 #endif
7451 ret = select(nfds + 1, &rfds, &wfds, &xfds, &tv);
7452 if (ret > 0) {
7453 IOHandlerRecord **pioh;
7455 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
7456 if (!ioh->deleted && ioh->fd_read && FD_ISSET(ioh->fd, &rfds)) {
7457 ioh->fd_read(ioh->opaque);
7459 if (!ioh->deleted && ioh->fd_write && FD_ISSET(ioh->fd, &wfds)) {
7460 ioh->fd_write(ioh->opaque);
7464 /* remove deleted IO handlers */
7465 pioh = &first_io_handler;
7466 while (*pioh) {
7467 ioh = *pioh;
7468 if (ioh->deleted) {
7469 *pioh = ioh->next;
7470 qemu_free(ioh);
7471 } else
7472 pioh = &ioh->next;
7475 #if defined(CONFIG_SLIRP)
7476 if (slirp_inited) {
7477 if (ret < 0) {
7478 FD_ZERO(&rfds);
7479 FD_ZERO(&wfds);
7480 FD_ZERO(&xfds);
7482 slirp_select_poll(&rfds, &wfds, &xfds);
7484 #endif
7485 qemu_aio_poll();
7487 if (vm_running) {
7488 if (likely(!(cur_cpu->singlestep_enabled & SSTEP_NOTIMER)))
7489 qemu_run_timers(&active_timers[QEMU_TIMER_VIRTUAL],
7490 qemu_get_clock(vm_clock));
7491 /* run dma transfers, if any */
7492 DMA_run();
7495 /* real time timers */
7496 qemu_run_timers(&active_timers[QEMU_TIMER_REALTIME],
7497 qemu_get_clock(rt_clock));
7499 if (alarm_timer->flags & ALARM_FLAG_EXPIRED) {
7500 alarm_timer->flags &= ~(ALARM_FLAG_EXPIRED);
7501 qemu_rearm_alarm_timer(alarm_timer);
7504 /* Check bottom-halves last in case any of the earlier events triggered
7505 them. */
7506 qemu_bh_poll();
7510 static int main_loop(void)
7512 int ret, timeout;
7513 #ifdef CONFIG_PROFILER
7514 int64_t ti;
7515 #endif
7516 CPUState *env;
7518 cur_cpu = first_cpu;
7519 next_cpu = cur_cpu->next_cpu ?: first_cpu;
7520 for(;;) {
7521 if (vm_running) {
7523 for(;;) {
7524 /* get next cpu */
7525 env = next_cpu;
7526 #ifdef CONFIG_PROFILER
7527 ti = profile_getclock();
7528 #endif
7529 if (use_icount) {
7530 int64_t count;
7531 int decr;
7532 qemu_icount -= (env->icount_decr.u16.low + env->icount_extra);
7533 env->icount_decr.u16.low = 0;
7534 env->icount_extra = 0;
7535 count = qemu_next_deadline();
7536 count = (count + (1 << icount_time_shift) - 1)
7537 >> icount_time_shift;
7538 qemu_icount += count;
7539 decr = (count > 0xffff) ? 0xffff : count;
7540 count -= decr;
7541 env->icount_decr.u16.low = decr;
7542 env->icount_extra = count;
7544 ret = cpu_exec(env);
7545 #ifdef CONFIG_PROFILER
7546 qemu_time += profile_getclock() - ti;
7547 #endif
7548 if (use_icount) {
7549 /* Fold pending instructions back into the
7550 instruction counter, and clear the interrupt flag. */
7551 qemu_icount -= (env->icount_decr.u16.low
7552 + env->icount_extra);
7553 env->icount_decr.u32 = 0;
7554 env->icount_extra = 0;
7556 next_cpu = env->next_cpu ?: first_cpu;
7557 if (event_pending && likely(ret != EXCP_DEBUG)) {
7558 ret = EXCP_INTERRUPT;
7559 event_pending = 0;
7560 break;
7562 if (ret == EXCP_HLT) {
7563 /* Give the next CPU a chance to run. */
7564 cur_cpu = env;
7565 continue;
7567 if (ret != EXCP_HALTED)
7568 break;
7569 /* all CPUs are halted ? */
7570 if (env == cur_cpu)
7571 break;
7573 cur_cpu = env;
7575 if (shutdown_requested) {
7576 ret = EXCP_INTERRUPT;
7577 if (no_shutdown) {
7578 vm_stop(0);
7579 no_shutdown = 0;
7581 else
7582 break;
7584 if (reset_requested) {
7585 reset_requested = 0;
7586 qemu_system_reset();
7587 ret = EXCP_INTERRUPT;
7589 if (powerdown_requested) {
7590 powerdown_requested = 0;
7591 qemu_system_powerdown();
7592 ret = EXCP_INTERRUPT;
7594 if (unlikely(ret == EXCP_DEBUG)) {
7595 vm_stop(EXCP_DEBUG);
7597 /* If all cpus are halted then wait until the next IRQ */
7598 /* XXX: use timeout computed from timers */
7599 if (ret == EXCP_HALTED) {
7600 if (use_icount) {
7601 int64_t add;
7602 int64_t delta;
7603 /* Advance virtual time to the next event. */
7604 if (use_icount == 1) {
7605 /* When not using an adaptive execution frequency
7606 we tend to get badly out of sync with real time,
7607 so just delay for a reasonable amount of time. */
7608 delta = 0;
7609 } else {
7610 delta = cpu_get_icount() - cpu_get_clock();
7612 if (delta > 0) {
7613 /* If virtual time is ahead of real time then just
7614 wait for IO. */
7615 timeout = (delta / 1000000) + 1;
7616 } else {
7617 /* Wait for either IO to occur or the next
7618 timer event. */
7619 add = qemu_next_deadline();
7620 /* We advance the timer before checking for IO.
7621 Limit the amount we advance so that early IO
7622 activity won't get the guest too far ahead. */
7623 if (add > 10000000)
7624 add = 10000000;
7625 delta += add;
7626 add = (add + (1 << icount_time_shift) - 1)
7627 >> icount_time_shift;
7628 qemu_icount += add;
7629 timeout = delta / 1000000;
7630 if (timeout < 0)
7631 timeout = 0;
7633 } else {
7634 timeout = 10;
7636 } else {
7637 timeout = 0;
7639 } else {
7640 if (shutdown_requested)
7641 break;
7642 timeout = 10;
7644 #ifdef CONFIG_PROFILER
7645 ti = profile_getclock();
7646 #endif
7647 main_loop_wait(timeout);
7648 #ifdef CONFIG_PROFILER
7649 dev_time += profile_getclock() - ti;
7650 #endif
7652 cpu_disable_ticks();
7653 return ret;
7656 static void help(int exitcode)
7658 printf("QEMU PC emulator version " QEMU_VERSION ", Copyright (c) 2003-2008 Fabrice Bellard\n"
7659 "usage: %s [options] [disk_image]\n"
7660 "\n"
7661 "'disk_image' is a raw hard image image for IDE hard disk 0\n"
7662 "\n"
7663 "Standard options:\n"
7664 "-M machine select emulated machine (-M ? for list)\n"
7665 "-cpu cpu select CPU (-cpu ? for list)\n"
7666 "-fda/-fdb file use 'file' as floppy disk 0/1 image\n"
7667 "-hda/-hdb file use 'file' as IDE hard disk 0/1 image\n"
7668 "-hdc/-hdd file use 'file' as IDE hard disk 2/3 image\n"
7669 "-cdrom file use 'file' as IDE cdrom image (cdrom is ide1 master)\n"
7670 "-drive [file=file][,if=type][,bus=n][,unit=m][,media=d][,index=i]\n"
7671 " [,cyls=c,heads=h,secs=s[,trans=t]][,snapshot=on|off]\n"
7672 " [,cache=on|off][,format=f]\n"
7673 " use 'file' as a drive image\n"
7674 "-mtdblock file use 'file' as on-board Flash memory image\n"
7675 "-sd file use 'file' as SecureDigital card image\n"
7676 "-pflash file use 'file' as a parallel flash image\n"
7677 "-boot [a|c|d|n] boot on floppy (a), hard disk (c), CD-ROM (d), or network (n)\n"
7678 "-snapshot write to temporary files instead of disk image files\n"
7679 #ifdef CONFIG_SDL
7680 "-no-frame open SDL window without a frame and window decorations\n"
7681 "-alt-grab use Ctrl-Alt-Shift to grab mouse (instead of Ctrl-Alt)\n"
7682 "-no-quit disable SDL window close capability\n"
7683 #endif
7684 #ifdef TARGET_I386
7685 "-no-fd-bootchk disable boot signature checking for floppy disks\n"
7686 #endif
7687 "-m megs set virtual RAM size to megs MB [default=%d]\n"
7688 "-smp n set the number of CPUs to 'n' [default=1]\n"
7689 "-nographic disable graphical output and redirect serial I/Os to console\n"
7690 "-portrait rotate graphical output 90 deg left (only PXA LCD)\n"
7691 #ifndef _WIN32
7692 "-k language use keyboard layout (for example \"fr\" for French)\n"
7693 #endif
7694 #ifdef HAS_AUDIO
7695 "-audio-help print list of audio drivers and their options\n"
7696 "-soundhw c1,... enable audio support\n"
7697 " and only specified sound cards (comma separated list)\n"
7698 " use -soundhw ? to get the list of supported cards\n"
7699 " use -soundhw all to enable all of them\n"
7700 #endif
7701 "-localtime set the real time clock to local time [default=utc]\n"
7702 "-full-screen start in full screen\n"
7703 #ifdef TARGET_I386
7704 "-win2k-hack use it when installing Windows 2000 to avoid a disk full bug\n"
7705 #endif
7706 "-usb enable the USB driver (will be the default soon)\n"
7707 "-usbdevice name add the host or guest USB device 'name'\n"
7708 #if defined(TARGET_PPC) || defined(TARGET_SPARC)
7709 "-g WxH[xDEPTH] Set the initial graphical resolution and depth\n"
7710 #endif
7711 "-name string set the name of the guest\n"
7712 "\n"
7713 "Network options:\n"
7714 "-net nic[,vlan=n][,macaddr=addr][,model=type]\n"
7715 " create a new Network Interface Card and connect it to VLAN 'n'\n"
7716 #ifdef CONFIG_SLIRP
7717 "-net user[,vlan=n][,hostname=host]\n"
7718 " connect the user mode network stack to VLAN 'n' and send\n"
7719 " hostname 'host' to DHCP clients\n"
7720 #endif
7721 #ifdef _WIN32
7722 "-net tap[,vlan=n],ifname=name\n"
7723 " connect the host TAP network interface to VLAN 'n'\n"
7724 #else
7725 "-net tap[,vlan=n][,fd=h][,ifname=name][,script=file][,downscript=dfile]\n"
7726 " connect the host TAP network interface to VLAN 'n' and use the\n"
7727 " network scripts 'file' (default=%s)\n"
7728 " and 'dfile' (default=%s);\n"
7729 " use '[down]script=no' to disable script execution;\n"
7730 " use 'fd=h' to connect to an already opened TAP interface\n"
7731 #endif
7732 "-net socket[,vlan=n][,fd=h][,listen=[host]:port][,connect=host:port]\n"
7733 " connect the vlan 'n' to another VLAN using a socket connection\n"
7734 "-net socket[,vlan=n][,fd=h][,mcast=maddr:port]\n"
7735 " connect the vlan 'n' to multicast maddr and port\n"
7736 #ifdef CONFIG_VDE
7737 "-net vde[,vlan=n][,sock=socketpath][,port=n][,group=groupname][,mode=octalmode]\n"
7738 " connect the vlan 'n' to port 'n' of a vde switch running\n"
7739 " on host and listening for incoming connections on 'socketpath'.\n"
7740 " Use group 'groupname' and mode 'octalmode' to change default\n"
7741 " ownership and permissions for communication port.\n"
7742 #endif
7743 "-net none use it alone to have zero network devices; if no -net option\n"
7744 " is provided, the default is '-net nic -net user'\n"
7745 "\n"
7746 #ifdef CONFIG_SLIRP
7747 "-tftp dir allow tftp access to files in dir [-net user]\n"
7748 "-bootp file advertise file in BOOTP replies\n"
7749 #ifndef _WIN32
7750 "-smb dir allow SMB access to files in 'dir' [-net user]\n"
7751 #endif
7752 "-redir [tcp|udp]:host-port:[guest-host]:guest-port\n"
7753 " redirect TCP or UDP connections from host to guest [-net user]\n"
7754 #endif
7755 "\n"
7756 "Linux boot specific:\n"
7757 "-kernel bzImage use 'bzImage' as kernel image\n"
7758 "-append cmdline use 'cmdline' as kernel command line\n"
7759 "-initrd file use 'file' as initial ram disk\n"
7760 "\n"
7761 "Debug/Expert options:\n"
7762 "-monitor dev redirect the monitor to char device 'dev'\n"
7763 "-serial dev redirect the serial port to char device 'dev'\n"
7764 "-parallel dev redirect the parallel port to char device 'dev'\n"
7765 "-pidfile file Write PID to 'file'\n"
7766 "-S freeze CPU at startup (use 'c' to start execution)\n"
7767 "-s wait gdb connection to port\n"
7768 "-p port set gdb connection port [default=%s]\n"
7769 "-d item1,... output log to %s (use -d ? for a list of log items)\n"
7770 "-hdachs c,h,s[,t] force hard disk 0 physical geometry and the optional BIOS\n"
7771 " translation (t=none or lba) (usually qemu can guess them)\n"
7772 "-L path set the directory for the BIOS, VGA BIOS and keymaps\n"
7773 #ifdef USE_KQEMU
7774 "-kernel-kqemu enable KQEMU full virtualization (default is user mode only)\n"
7775 "-no-kqemu disable KQEMU kernel module usage\n"
7776 #endif
7777 #ifdef TARGET_I386
7778 "-std-vga simulate a standard VGA card with VESA Bochs Extensions\n"
7779 " (default is CL-GD5446 PCI VGA)\n"
7780 "-no-acpi disable ACPI\n"
7781 #endif
7782 #ifdef CONFIG_CURSES
7783 "-curses use a curses/ncurses interface instead of SDL\n"
7784 #endif
7785 "-no-reboot exit instead of rebooting\n"
7786 "-no-shutdown stop before shutdown\n"
7787 "-loadvm [tag|id] start right away with a saved state (loadvm in monitor)\n"
7788 "-vnc display start a VNC server on display\n"
7789 #ifndef _WIN32
7790 "-daemonize daemonize QEMU after initializing\n"
7791 #endif
7792 "-option-rom rom load a file, rom, into the option ROM space\n"
7793 #ifdef TARGET_SPARC
7794 "-prom-env variable=value set OpenBIOS nvram variables\n"
7795 #endif
7796 "-clock force the use of the given methods for timer alarm.\n"
7797 " To see what timers are available use -clock ?\n"
7798 "-startdate select initial date of the clock\n"
7799 "-icount [N|auto]\n"
7800 " Enable virtual instruction counter with 2^N clock ticks per instruction\n"
7801 "\n"
7802 "During emulation, the following keys are useful:\n"
7803 "ctrl-alt-f toggle full screen\n"
7804 "ctrl-alt-n switch to virtual console 'n'\n"
7805 "ctrl-alt toggle mouse and keyboard grab\n"
7806 "\n"
7807 "When using -nographic, press 'ctrl-a h' to get some help.\n"
7809 "qemu",
7810 DEFAULT_RAM_SIZE,
7811 #ifndef _WIN32
7812 DEFAULT_NETWORK_SCRIPT,
7813 DEFAULT_NETWORK_DOWN_SCRIPT,
7814 #endif
7815 DEFAULT_GDBSTUB_PORT,
7816 "/tmp/qemu.log");
7817 exit(exitcode);
7820 #define HAS_ARG 0x0001
7822 enum {
7823 QEMU_OPTION_h,
7825 QEMU_OPTION_M,
7826 QEMU_OPTION_cpu,
7827 QEMU_OPTION_fda,
7828 QEMU_OPTION_fdb,
7829 QEMU_OPTION_hda,
7830 QEMU_OPTION_hdb,
7831 QEMU_OPTION_hdc,
7832 QEMU_OPTION_hdd,
7833 QEMU_OPTION_drive,
7834 QEMU_OPTION_cdrom,
7835 QEMU_OPTION_mtdblock,
7836 QEMU_OPTION_sd,
7837 QEMU_OPTION_pflash,
7838 QEMU_OPTION_boot,
7839 QEMU_OPTION_snapshot,
7840 #ifdef TARGET_I386
7841 QEMU_OPTION_no_fd_bootchk,
7842 #endif
7843 QEMU_OPTION_m,
7844 QEMU_OPTION_nographic,
7845 QEMU_OPTION_portrait,
7846 #ifdef HAS_AUDIO
7847 QEMU_OPTION_audio_help,
7848 QEMU_OPTION_soundhw,
7849 #endif
7851 QEMU_OPTION_net,
7852 QEMU_OPTION_tftp,
7853 QEMU_OPTION_bootp,
7854 QEMU_OPTION_smb,
7855 QEMU_OPTION_redir,
7857 QEMU_OPTION_kernel,
7858 QEMU_OPTION_append,
7859 QEMU_OPTION_initrd,
7861 QEMU_OPTION_S,
7862 QEMU_OPTION_s,
7863 QEMU_OPTION_p,
7864 QEMU_OPTION_d,
7865 QEMU_OPTION_hdachs,
7866 QEMU_OPTION_L,
7867 QEMU_OPTION_bios,
7868 QEMU_OPTION_k,
7869 QEMU_OPTION_localtime,
7870 QEMU_OPTION_cirrusvga,
7871 QEMU_OPTION_vmsvga,
7872 QEMU_OPTION_g,
7873 QEMU_OPTION_std_vga,
7874 QEMU_OPTION_echr,
7875 QEMU_OPTION_monitor,
7876 QEMU_OPTION_serial,
7877 QEMU_OPTION_parallel,
7878 QEMU_OPTION_loadvm,
7879 QEMU_OPTION_full_screen,
7880 QEMU_OPTION_no_frame,
7881 QEMU_OPTION_alt_grab,
7882 QEMU_OPTION_no_quit,
7883 QEMU_OPTION_pidfile,
7884 QEMU_OPTION_no_kqemu,
7885 QEMU_OPTION_kernel_kqemu,
7886 QEMU_OPTION_win2k_hack,
7887 QEMU_OPTION_usb,
7888 QEMU_OPTION_usbdevice,
7889 QEMU_OPTION_smp,
7890 QEMU_OPTION_vnc,
7891 QEMU_OPTION_no_acpi,
7892 QEMU_OPTION_curses,
7893 QEMU_OPTION_no_reboot,
7894 QEMU_OPTION_no_shutdown,
7895 QEMU_OPTION_show_cursor,
7896 QEMU_OPTION_daemonize,
7897 QEMU_OPTION_option_rom,
7898 QEMU_OPTION_semihosting,
7899 QEMU_OPTION_name,
7900 QEMU_OPTION_prom_env,
7901 QEMU_OPTION_old_param,
7902 QEMU_OPTION_clock,
7903 QEMU_OPTION_startdate,
7904 QEMU_OPTION_tb_size,
7905 QEMU_OPTION_icount,
7908 typedef struct QEMUOption {
7909 const char *name;
7910 int flags;
7911 int index;
7912 } QEMUOption;
7914 const QEMUOption qemu_options[] = {
7915 { "h", 0, QEMU_OPTION_h },
7916 { "help", 0, QEMU_OPTION_h },
7918 { "M", HAS_ARG, QEMU_OPTION_M },
7919 { "cpu", HAS_ARG, QEMU_OPTION_cpu },
7920 { "fda", HAS_ARG, QEMU_OPTION_fda },
7921 { "fdb", HAS_ARG, QEMU_OPTION_fdb },
7922 { "hda", HAS_ARG, QEMU_OPTION_hda },
7923 { "hdb", HAS_ARG, QEMU_OPTION_hdb },
7924 { "hdc", HAS_ARG, QEMU_OPTION_hdc },
7925 { "hdd", HAS_ARG, QEMU_OPTION_hdd },
7926 { "drive", HAS_ARG, QEMU_OPTION_drive },
7927 { "cdrom", HAS_ARG, QEMU_OPTION_cdrom },
7928 { "mtdblock", HAS_ARG, QEMU_OPTION_mtdblock },
7929 { "sd", HAS_ARG, QEMU_OPTION_sd },
7930 { "pflash", HAS_ARG, QEMU_OPTION_pflash },
7931 { "boot", HAS_ARG, QEMU_OPTION_boot },
7932 { "snapshot", 0, QEMU_OPTION_snapshot },
7933 #ifdef TARGET_I386
7934 { "no-fd-bootchk", 0, QEMU_OPTION_no_fd_bootchk },
7935 #endif
7936 { "m", HAS_ARG, QEMU_OPTION_m },
7937 { "nographic", 0, QEMU_OPTION_nographic },
7938 { "portrait", 0, QEMU_OPTION_portrait },
7939 { "k", HAS_ARG, QEMU_OPTION_k },
7940 #ifdef HAS_AUDIO
7941 { "audio-help", 0, QEMU_OPTION_audio_help },
7942 { "soundhw", HAS_ARG, QEMU_OPTION_soundhw },
7943 #endif
7945 { "net", HAS_ARG, QEMU_OPTION_net},
7946 #ifdef CONFIG_SLIRP
7947 { "tftp", HAS_ARG, QEMU_OPTION_tftp },
7948 { "bootp", HAS_ARG, QEMU_OPTION_bootp },
7949 #ifndef _WIN32
7950 { "smb", HAS_ARG, QEMU_OPTION_smb },
7951 #endif
7952 { "redir", HAS_ARG, QEMU_OPTION_redir },
7953 #endif
7955 { "kernel", HAS_ARG, QEMU_OPTION_kernel },
7956 { "append", HAS_ARG, QEMU_OPTION_append },
7957 { "initrd", HAS_ARG, QEMU_OPTION_initrd },
7959 { "S", 0, QEMU_OPTION_S },
7960 { "s", 0, QEMU_OPTION_s },
7961 { "p", HAS_ARG, QEMU_OPTION_p },
7962 { "d", HAS_ARG, QEMU_OPTION_d },
7963 { "hdachs", HAS_ARG, QEMU_OPTION_hdachs },
7964 { "L", HAS_ARG, QEMU_OPTION_L },
7965 { "bios", HAS_ARG, QEMU_OPTION_bios },
7966 #ifdef USE_KQEMU
7967 { "no-kqemu", 0, QEMU_OPTION_no_kqemu },
7968 { "kernel-kqemu", 0, QEMU_OPTION_kernel_kqemu },
7969 #endif
7970 #if defined(TARGET_PPC) || defined(TARGET_SPARC)
7971 { "g", 1, QEMU_OPTION_g },
7972 #endif
7973 { "localtime", 0, QEMU_OPTION_localtime },
7974 { "std-vga", 0, QEMU_OPTION_std_vga },
7975 { "echr", HAS_ARG, QEMU_OPTION_echr },
7976 { "monitor", HAS_ARG, QEMU_OPTION_monitor },
7977 { "serial", HAS_ARG, QEMU_OPTION_serial },
7978 { "parallel", HAS_ARG, QEMU_OPTION_parallel },
7979 { "loadvm", HAS_ARG, QEMU_OPTION_loadvm },
7980 { "full-screen", 0, QEMU_OPTION_full_screen },
7981 #ifdef CONFIG_SDL
7982 { "no-frame", 0, QEMU_OPTION_no_frame },
7983 { "alt-grab", 0, QEMU_OPTION_alt_grab },
7984 { "no-quit", 0, QEMU_OPTION_no_quit },
7985 #endif
7986 { "pidfile", HAS_ARG, QEMU_OPTION_pidfile },
7987 { "win2k-hack", 0, QEMU_OPTION_win2k_hack },
7988 { "usbdevice", HAS_ARG, QEMU_OPTION_usbdevice },
7989 { "smp", HAS_ARG, QEMU_OPTION_smp },
7990 { "vnc", HAS_ARG, QEMU_OPTION_vnc },
7991 #ifdef CONFIG_CURSES
7992 { "curses", 0, QEMU_OPTION_curses },
7993 #endif
7995 /* temporary options */
7996 { "usb", 0, QEMU_OPTION_usb },
7997 { "cirrusvga", 0, QEMU_OPTION_cirrusvga },
7998 { "vmwarevga", 0, QEMU_OPTION_vmsvga },
7999 { "no-acpi", 0, QEMU_OPTION_no_acpi },
8000 { "no-reboot", 0, QEMU_OPTION_no_reboot },
8001 { "no-shutdown", 0, QEMU_OPTION_no_shutdown },
8002 { "show-cursor", 0, QEMU_OPTION_show_cursor },
8003 { "daemonize", 0, QEMU_OPTION_daemonize },
8004 { "option-rom", HAS_ARG, QEMU_OPTION_option_rom },
8005 #if defined(TARGET_ARM) || defined(TARGET_M68K)
8006 { "semihosting", 0, QEMU_OPTION_semihosting },
8007 #endif
8008 { "name", HAS_ARG, QEMU_OPTION_name },
8009 #if defined(TARGET_SPARC)
8010 { "prom-env", HAS_ARG, QEMU_OPTION_prom_env },
8011 #endif
8012 #if defined(TARGET_ARM)
8013 { "old-param", 0, QEMU_OPTION_old_param },
8014 #endif
8015 { "clock", HAS_ARG, QEMU_OPTION_clock },
8016 { "startdate", HAS_ARG, QEMU_OPTION_startdate },
8017 { "tb-size", HAS_ARG, QEMU_OPTION_tb_size },
8018 { "icount", HAS_ARG, QEMU_OPTION_icount },
8019 { NULL },
8022 /* password input */
8024 int qemu_key_check(BlockDriverState *bs, const char *name)
8026 char password[256];
8027 int i;
8029 if (!bdrv_is_encrypted(bs))
8030 return 0;
8032 term_printf("%s is encrypted.\n", name);
8033 for(i = 0; i < 3; i++) {
8034 monitor_readline("Password: ", 1, password, sizeof(password));
8035 if (bdrv_set_key(bs, password) == 0)
8036 return 0;
8037 term_printf("invalid password\n");
8039 return -EPERM;
8042 static BlockDriverState *get_bdrv(int index)
8044 if (index > nb_drives)
8045 return NULL;
8046 return drives_table[index].bdrv;
8049 static void read_passwords(void)
8051 BlockDriverState *bs;
8052 int i;
8054 for(i = 0; i < 6; i++) {
8055 bs = get_bdrv(i);
8056 if (bs)
8057 qemu_key_check(bs, bdrv_get_device_name(bs));
8061 #ifdef HAS_AUDIO
8062 struct soundhw soundhw[] = {
8063 #ifdef HAS_AUDIO_CHOICE
8064 #if defined(TARGET_I386) || defined(TARGET_MIPS)
8066 "pcspk",
8067 "PC speaker",
8070 { .init_isa = pcspk_audio_init }
8072 #endif
8074 "sb16",
8075 "Creative Sound Blaster 16",
8078 { .init_isa = SB16_init }
8081 #ifdef CONFIG_CS4231A
8083 "cs4231a",
8084 "CS4231A",
8087 { .init_isa = cs4231a_init }
8089 #endif
8091 #ifdef CONFIG_ADLIB
8093 "adlib",
8094 #ifdef HAS_YMF262
8095 "Yamaha YMF262 (OPL3)",
8096 #else
8097 "Yamaha YM3812 (OPL2)",
8098 #endif
8101 { .init_isa = Adlib_init }
8103 #endif
8105 #ifdef CONFIG_GUS
8107 "gus",
8108 "Gravis Ultrasound GF1",
8111 { .init_isa = GUS_init }
8113 #endif
8115 #ifdef CONFIG_AC97
8117 "ac97",
8118 "Intel 82801AA AC97 Audio",
8121 { .init_pci = ac97_init }
8123 #endif
8126 "es1370",
8127 "ENSONIQ AudioPCI ES1370",
8130 { .init_pci = es1370_init }
8132 #endif
8134 { NULL, NULL, 0, 0, { NULL } }
8137 static void select_soundhw (const char *optarg)
8139 struct soundhw *c;
8141 if (*optarg == '?') {
8142 show_valid_cards:
8144 printf ("Valid sound card names (comma separated):\n");
8145 for (c = soundhw; c->name; ++c) {
8146 printf ("%-11s %s\n", c->name, c->descr);
8148 printf ("\n-soundhw all will enable all of the above\n");
8149 exit (*optarg != '?');
8151 else {
8152 size_t l;
8153 const char *p;
8154 char *e;
8155 int bad_card = 0;
8157 if (!strcmp (optarg, "all")) {
8158 for (c = soundhw; c->name; ++c) {
8159 c->enabled = 1;
8161 return;
8164 p = optarg;
8165 while (*p) {
8166 e = strchr (p, ',');
8167 l = !e ? strlen (p) : (size_t) (e - p);
8169 for (c = soundhw; c->name; ++c) {
8170 if (!strncmp (c->name, p, l)) {
8171 c->enabled = 1;
8172 break;
8176 if (!c->name) {
8177 if (l > 80) {
8178 fprintf (stderr,
8179 "Unknown sound card name (too big to show)\n");
8181 else {
8182 fprintf (stderr, "Unknown sound card name `%.*s'\n",
8183 (int) l, p);
8185 bad_card = 1;
8187 p += l + (e != NULL);
8190 if (bad_card)
8191 goto show_valid_cards;
8194 #endif
8196 #ifdef _WIN32
8197 static BOOL WINAPI qemu_ctrl_handler(DWORD type)
8199 exit(STATUS_CONTROL_C_EXIT);
8200 return TRUE;
8202 #endif
8204 #define MAX_NET_CLIENTS 32
8206 #ifndef _WIN32
8208 static void termsig_handler(int signal)
8210 qemu_system_shutdown_request();
8213 void termsig_setup(void)
8215 struct sigaction act;
8217 memset(&act, 0, sizeof(act));
8218 act.sa_handler = termsig_handler;
8219 sigaction(SIGINT, &act, NULL);
8220 sigaction(SIGHUP, &act, NULL);
8221 sigaction(SIGTERM, &act, NULL);
8224 #endif
8226 int main(int argc, char **argv)
8228 #ifdef CONFIG_GDBSTUB
8229 int use_gdbstub;
8230 const char *gdbstub_port;
8231 #endif
8232 uint32_t boot_devices_bitmap = 0;
8233 int i;
8234 int snapshot, linux_boot, net_boot;
8235 const char *initrd_filename;
8236 const char *kernel_filename, *kernel_cmdline;
8237 const char *boot_devices = "";
8238 DisplayState *ds = &display_state;
8239 int cyls, heads, secs, translation;
8240 const char *net_clients[MAX_NET_CLIENTS];
8241 int nb_net_clients;
8242 int hda_index;
8243 int optind;
8244 const char *r, *optarg;
8245 CharDriverState *monitor_hd;
8246 const char *monitor_device;
8247 const char *serial_devices[MAX_SERIAL_PORTS];
8248 int serial_device_index;
8249 const char *parallel_devices[MAX_PARALLEL_PORTS];
8250 int parallel_device_index;
8251 const char *loadvm = NULL;
8252 QEMUMachine *machine;
8253 const char *cpu_model;
8254 const char *usb_devices[MAX_USB_CMDLINE];
8255 int usb_devices_index;
8256 int fds[2];
8257 int tb_size;
8258 const char *pid_file = NULL;
8259 VLANState *vlan;
8261 LIST_INIT (&vm_change_state_head);
8262 #ifndef _WIN32
8264 struct sigaction act;
8265 sigfillset(&act.sa_mask);
8266 act.sa_flags = 0;
8267 act.sa_handler = SIG_IGN;
8268 sigaction(SIGPIPE, &act, NULL);
8270 #else
8271 SetConsoleCtrlHandler(qemu_ctrl_handler, TRUE);
8272 /* Note: cpu_interrupt() is currently not SMP safe, so we force
8273 QEMU to run on a single CPU */
8275 HANDLE h;
8276 DWORD mask, smask;
8277 int i;
8278 h = GetCurrentProcess();
8279 if (GetProcessAffinityMask(h, &mask, &smask)) {
8280 for(i = 0; i < 32; i++) {
8281 if (mask & (1 << i))
8282 break;
8284 if (i != 32) {
8285 mask = 1 << i;
8286 SetProcessAffinityMask(h, mask);
8290 #endif
8292 register_machines();
8293 machine = first_machine;
8294 cpu_model = NULL;
8295 initrd_filename = NULL;
8296 ram_size = 0;
8297 vga_ram_size = VGA_RAM_SIZE;
8298 #ifdef CONFIG_GDBSTUB
8299 use_gdbstub = 0;
8300 gdbstub_port = DEFAULT_GDBSTUB_PORT;
8301 #endif
8302 snapshot = 0;
8303 nographic = 0;
8304 curses = 0;
8305 kernel_filename = NULL;
8306 kernel_cmdline = "";
8307 cyls = heads = secs = 0;
8308 translation = BIOS_ATA_TRANSLATION_AUTO;
8309 monitor_device = "vc";
8311 serial_devices[0] = "vc:80Cx24C";
8312 for(i = 1; i < MAX_SERIAL_PORTS; i++)
8313 serial_devices[i] = NULL;
8314 serial_device_index = 0;
8316 parallel_devices[0] = "vc:640x480";
8317 for(i = 1; i < MAX_PARALLEL_PORTS; i++)
8318 parallel_devices[i] = NULL;
8319 parallel_device_index = 0;
8321 usb_devices_index = 0;
8323 nb_net_clients = 0;
8324 nb_drives = 0;
8325 nb_drives_opt = 0;
8326 hda_index = -1;
8328 nb_nics = 0;
8330 tb_size = 0;
8332 optind = 1;
8333 for(;;) {
8334 if (optind >= argc)
8335 break;
8336 r = argv[optind];
8337 if (r[0] != '-') {
8338 hda_index = drive_add(argv[optind++], HD_ALIAS, 0);
8339 } else {
8340 const QEMUOption *popt;
8342 optind++;
8343 /* Treat --foo the same as -foo. */
8344 if (r[1] == '-')
8345 r++;
8346 popt = qemu_options;
8347 for(;;) {
8348 if (!popt->name) {
8349 fprintf(stderr, "%s: invalid option -- '%s'\n",
8350 argv[0], r);
8351 exit(1);
8353 if (!strcmp(popt->name, r + 1))
8354 break;
8355 popt++;
8357 if (popt->flags & HAS_ARG) {
8358 if (optind >= argc) {
8359 fprintf(stderr, "%s: option '%s' requires an argument\n",
8360 argv[0], r);
8361 exit(1);
8363 optarg = argv[optind++];
8364 } else {
8365 optarg = NULL;
8368 switch(popt->index) {
8369 case QEMU_OPTION_M:
8370 machine = find_machine(optarg);
8371 if (!machine) {
8372 QEMUMachine *m;
8373 printf("Supported machines are:\n");
8374 for(m = first_machine; m != NULL; m = m->next) {
8375 printf("%-10s %s%s\n",
8376 m->name, m->desc,
8377 m == first_machine ? " (default)" : "");
8379 exit(*optarg != '?');
8381 break;
8382 case QEMU_OPTION_cpu:
8383 /* hw initialization will check this */
8384 if (*optarg == '?') {
8385 /* XXX: implement xxx_cpu_list for targets that still miss it */
8386 #if defined(cpu_list)
8387 cpu_list(stdout, &fprintf);
8388 #endif
8389 exit(0);
8390 } else {
8391 cpu_model = optarg;
8393 break;
8394 case QEMU_OPTION_initrd:
8395 initrd_filename = optarg;
8396 break;
8397 case QEMU_OPTION_hda:
8398 if (cyls == 0)
8399 hda_index = drive_add(optarg, HD_ALIAS, 0);
8400 else
8401 hda_index = drive_add(optarg, HD_ALIAS
8402 ",cyls=%d,heads=%d,secs=%d%s",
8403 0, cyls, heads, secs,
8404 translation == BIOS_ATA_TRANSLATION_LBA ?
8405 ",trans=lba" :
8406 translation == BIOS_ATA_TRANSLATION_NONE ?
8407 ",trans=none" : "");
8408 break;
8409 case QEMU_OPTION_hdb:
8410 case QEMU_OPTION_hdc:
8411 case QEMU_OPTION_hdd:
8412 drive_add(optarg, HD_ALIAS, popt->index - QEMU_OPTION_hda);
8413 break;
8414 case QEMU_OPTION_drive:
8415 drive_add(NULL, "%s", optarg);
8416 break;
8417 case QEMU_OPTION_mtdblock:
8418 drive_add(optarg, MTD_ALIAS);
8419 break;
8420 case QEMU_OPTION_sd:
8421 drive_add(optarg, SD_ALIAS);
8422 break;
8423 case QEMU_OPTION_pflash:
8424 drive_add(optarg, PFLASH_ALIAS);
8425 break;
8426 case QEMU_OPTION_snapshot:
8427 snapshot = 1;
8428 break;
8429 case QEMU_OPTION_hdachs:
8431 const char *p;
8432 p = optarg;
8433 cyls = strtol(p, (char **)&p, 0);
8434 if (cyls < 1 || cyls > 16383)
8435 goto chs_fail;
8436 if (*p != ',')
8437 goto chs_fail;
8438 p++;
8439 heads = strtol(p, (char **)&p, 0);
8440 if (heads < 1 || heads > 16)
8441 goto chs_fail;
8442 if (*p != ',')
8443 goto chs_fail;
8444 p++;
8445 secs = strtol(p, (char **)&p, 0);
8446 if (secs < 1 || secs > 63)
8447 goto chs_fail;
8448 if (*p == ',') {
8449 p++;
8450 if (!strcmp(p, "none"))
8451 translation = BIOS_ATA_TRANSLATION_NONE;
8452 else if (!strcmp(p, "lba"))
8453 translation = BIOS_ATA_TRANSLATION_LBA;
8454 else if (!strcmp(p, "auto"))
8455 translation = BIOS_ATA_TRANSLATION_AUTO;
8456 else
8457 goto chs_fail;
8458 } else if (*p != '\0') {
8459 chs_fail:
8460 fprintf(stderr, "qemu: invalid physical CHS format\n");
8461 exit(1);
8463 if (hda_index != -1)
8464 snprintf(drives_opt[hda_index].opt,
8465 sizeof(drives_opt[hda_index].opt),
8466 HD_ALIAS ",cyls=%d,heads=%d,secs=%d%s",
8467 0, cyls, heads, secs,
8468 translation == BIOS_ATA_TRANSLATION_LBA ?
8469 ",trans=lba" :
8470 translation == BIOS_ATA_TRANSLATION_NONE ?
8471 ",trans=none" : "");
8473 break;
8474 case QEMU_OPTION_nographic:
8475 nographic = 1;
8476 break;
8477 #ifdef CONFIG_CURSES
8478 case QEMU_OPTION_curses:
8479 curses = 1;
8480 break;
8481 #endif
8482 case QEMU_OPTION_portrait:
8483 graphic_rotate = 1;
8484 break;
8485 case QEMU_OPTION_kernel:
8486 kernel_filename = optarg;
8487 break;
8488 case QEMU_OPTION_append:
8489 kernel_cmdline = optarg;
8490 break;
8491 case QEMU_OPTION_cdrom:
8492 drive_add(optarg, CDROM_ALIAS);
8493 break;
8494 case QEMU_OPTION_boot:
8495 boot_devices = optarg;
8496 /* We just do some generic consistency checks */
8498 /* Could easily be extended to 64 devices if needed */
8499 const char *p;
8501 boot_devices_bitmap = 0;
8502 for (p = boot_devices; *p != '\0'; p++) {
8503 /* Allowed boot devices are:
8504 * a b : floppy disk drives
8505 * c ... f : IDE disk drives
8506 * g ... m : machine implementation dependant drives
8507 * n ... p : network devices
8508 * It's up to each machine implementation to check
8509 * if the given boot devices match the actual hardware
8510 * implementation and firmware features.
8512 if (*p < 'a' || *p > 'q') {
8513 fprintf(stderr, "Invalid boot device '%c'\n", *p);
8514 exit(1);
8516 if (boot_devices_bitmap & (1 << (*p - 'a'))) {
8517 fprintf(stderr,
8518 "Boot device '%c' was given twice\n",*p);
8519 exit(1);
8521 boot_devices_bitmap |= 1 << (*p - 'a');
8524 break;
8525 case QEMU_OPTION_fda:
8526 case QEMU_OPTION_fdb:
8527 drive_add(optarg, FD_ALIAS, popt->index - QEMU_OPTION_fda);
8528 break;
8529 #ifdef TARGET_I386
8530 case QEMU_OPTION_no_fd_bootchk:
8531 fd_bootchk = 0;
8532 break;
8533 #endif
8534 case QEMU_OPTION_net:
8535 if (nb_net_clients >= MAX_NET_CLIENTS) {
8536 fprintf(stderr, "qemu: too many network clients\n");
8537 exit(1);
8539 net_clients[nb_net_clients] = optarg;
8540 nb_net_clients++;
8541 break;
8542 #ifdef CONFIG_SLIRP
8543 case QEMU_OPTION_tftp:
8544 tftp_prefix = optarg;
8545 break;
8546 case QEMU_OPTION_bootp:
8547 bootp_filename = optarg;
8548 break;
8549 #ifndef _WIN32
8550 case QEMU_OPTION_smb:
8551 net_slirp_smb(optarg);
8552 break;
8553 #endif
8554 case QEMU_OPTION_redir:
8555 net_slirp_redir(optarg);
8556 break;
8557 #endif
8558 #ifdef HAS_AUDIO
8559 case QEMU_OPTION_audio_help:
8560 AUD_help ();
8561 exit (0);
8562 break;
8563 case QEMU_OPTION_soundhw:
8564 select_soundhw (optarg);
8565 break;
8566 #endif
8567 case QEMU_OPTION_h:
8568 help(0);
8569 break;
8570 case QEMU_OPTION_m: {
8571 uint64_t value;
8572 char *ptr;
8574 value = strtoul(optarg, &ptr, 10);
8575 switch (*ptr) {
8576 case 0: case 'M': case 'm':
8577 value <<= 20;
8578 break;
8579 case 'G': case 'g':
8580 value <<= 30;
8581 break;
8582 default:
8583 fprintf(stderr, "qemu: invalid ram size: %s\n", optarg);
8584 exit(1);
8587 /* On 32-bit hosts, QEMU is limited by virtual address space */
8588 if (value > (2047 << 20)
8589 #ifndef USE_KQEMU
8590 && HOST_LONG_BITS == 32
8591 #endif
8593 fprintf(stderr, "qemu: at most 2047 MB RAM can be simulated\n");
8594 exit(1);
8596 if (value != (uint64_t)(ram_addr_t)value) {
8597 fprintf(stderr, "qemu: ram size too large\n");
8598 exit(1);
8600 ram_size = value;
8601 break;
8603 case QEMU_OPTION_d:
8605 int mask;
8606 CPULogItem *item;
8608 mask = cpu_str_to_log_mask(optarg);
8609 if (!mask) {
8610 printf("Log items (comma separated):\n");
8611 for(item = cpu_log_items; item->mask != 0; item++) {
8612 printf("%-10s %s\n", item->name, item->help);
8614 exit(1);
8616 cpu_set_log(mask);
8618 break;
8619 #ifdef CONFIG_GDBSTUB
8620 case QEMU_OPTION_s:
8621 use_gdbstub = 1;
8622 break;
8623 case QEMU_OPTION_p:
8624 gdbstub_port = optarg;
8625 break;
8626 #endif
8627 case QEMU_OPTION_L:
8628 bios_dir = optarg;
8629 break;
8630 case QEMU_OPTION_bios:
8631 bios_name = optarg;
8632 break;
8633 case QEMU_OPTION_S:
8634 autostart = 0;
8635 break;
8636 case QEMU_OPTION_k:
8637 keyboard_layout = optarg;
8638 break;
8639 case QEMU_OPTION_localtime:
8640 rtc_utc = 0;
8641 break;
8642 case QEMU_OPTION_cirrusvga:
8643 cirrus_vga_enabled = 1;
8644 vmsvga_enabled = 0;
8645 break;
8646 case QEMU_OPTION_vmsvga:
8647 cirrus_vga_enabled = 0;
8648 vmsvga_enabled = 1;
8649 break;
8650 case QEMU_OPTION_std_vga:
8651 cirrus_vga_enabled = 0;
8652 vmsvga_enabled = 0;
8653 break;
8654 case QEMU_OPTION_g:
8656 const char *p;
8657 int w, h, depth;
8658 p = optarg;
8659 w = strtol(p, (char **)&p, 10);
8660 if (w <= 0) {
8661 graphic_error:
8662 fprintf(stderr, "qemu: invalid resolution or depth\n");
8663 exit(1);
8665 if (*p != 'x')
8666 goto graphic_error;
8667 p++;
8668 h = strtol(p, (char **)&p, 10);
8669 if (h <= 0)
8670 goto graphic_error;
8671 if (*p == 'x') {
8672 p++;
8673 depth = strtol(p, (char **)&p, 10);
8674 if (depth != 8 && depth != 15 && depth != 16 &&
8675 depth != 24 && depth != 32)
8676 goto graphic_error;
8677 } else if (*p == '\0') {
8678 depth = graphic_depth;
8679 } else {
8680 goto graphic_error;
8683 graphic_width = w;
8684 graphic_height = h;
8685 graphic_depth = depth;
8687 break;
8688 case QEMU_OPTION_echr:
8690 char *r;
8691 term_escape_char = strtol(optarg, &r, 0);
8692 if (r == optarg)
8693 printf("Bad argument to echr\n");
8694 break;
8696 case QEMU_OPTION_monitor:
8697 monitor_device = optarg;
8698 break;
8699 case QEMU_OPTION_serial:
8700 if (serial_device_index >= MAX_SERIAL_PORTS) {
8701 fprintf(stderr, "qemu: too many serial ports\n");
8702 exit(1);
8704 serial_devices[serial_device_index] = optarg;
8705 serial_device_index++;
8706 break;
8707 case QEMU_OPTION_parallel:
8708 if (parallel_device_index >= MAX_PARALLEL_PORTS) {
8709 fprintf(stderr, "qemu: too many parallel ports\n");
8710 exit(1);
8712 parallel_devices[parallel_device_index] = optarg;
8713 parallel_device_index++;
8714 break;
8715 case QEMU_OPTION_loadvm:
8716 loadvm = optarg;
8717 break;
8718 case QEMU_OPTION_full_screen:
8719 full_screen = 1;
8720 break;
8721 #ifdef CONFIG_SDL
8722 case QEMU_OPTION_no_frame:
8723 no_frame = 1;
8724 break;
8725 case QEMU_OPTION_alt_grab:
8726 alt_grab = 1;
8727 break;
8728 case QEMU_OPTION_no_quit:
8729 no_quit = 1;
8730 break;
8731 #endif
8732 case QEMU_OPTION_pidfile:
8733 pid_file = optarg;
8734 break;
8735 #ifdef TARGET_I386
8736 case QEMU_OPTION_win2k_hack:
8737 win2k_install_hack = 1;
8738 break;
8739 #endif
8740 #ifdef USE_KQEMU
8741 case QEMU_OPTION_no_kqemu:
8742 kqemu_allowed = 0;
8743 break;
8744 case QEMU_OPTION_kernel_kqemu:
8745 kqemu_allowed = 2;
8746 break;
8747 #endif
8748 case QEMU_OPTION_usb:
8749 usb_enabled = 1;
8750 break;
8751 case QEMU_OPTION_usbdevice:
8752 usb_enabled = 1;
8753 if (usb_devices_index >= MAX_USB_CMDLINE) {
8754 fprintf(stderr, "Too many USB devices\n");
8755 exit(1);
8757 usb_devices[usb_devices_index] = optarg;
8758 usb_devices_index++;
8759 break;
8760 case QEMU_OPTION_smp:
8761 smp_cpus = atoi(optarg);
8762 if (smp_cpus < 1 || smp_cpus > MAX_CPUS) {
8763 fprintf(stderr, "Invalid number of CPUs\n");
8764 exit(1);
8766 break;
8767 case QEMU_OPTION_vnc:
8768 vnc_display = optarg;
8769 break;
8770 case QEMU_OPTION_no_acpi:
8771 acpi_enabled = 0;
8772 break;
8773 case QEMU_OPTION_no_reboot:
8774 no_reboot = 1;
8775 break;
8776 case QEMU_OPTION_no_shutdown:
8777 no_shutdown = 1;
8778 break;
8779 case QEMU_OPTION_show_cursor:
8780 cursor_hide = 0;
8781 break;
8782 case QEMU_OPTION_daemonize:
8783 daemonize = 1;
8784 break;
8785 case QEMU_OPTION_option_rom:
8786 if (nb_option_roms >= MAX_OPTION_ROMS) {
8787 fprintf(stderr, "Too many option ROMs\n");
8788 exit(1);
8790 option_rom[nb_option_roms] = optarg;
8791 nb_option_roms++;
8792 break;
8793 case QEMU_OPTION_semihosting:
8794 semihosting_enabled = 1;
8795 break;
8796 case QEMU_OPTION_name:
8797 qemu_name = optarg;
8798 break;
8799 #ifdef TARGET_SPARC
8800 case QEMU_OPTION_prom_env:
8801 if (nb_prom_envs >= MAX_PROM_ENVS) {
8802 fprintf(stderr, "Too many prom variables\n");
8803 exit(1);
8805 prom_envs[nb_prom_envs] = optarg;
8806 nb_prom_envs++;
8807 break;
8808 #endif
8809 #ifdef TARGET_ARM
8810 case QEMU_OPTION_old_param:
8811 old_param = 1;
8812 break;
8813 #endif
8814 case QEMU_OPTION_clock:
8815 configure_alarms(optarg);
8816 break;
8817 case QEMU_OPTION_startdate:
8819 struct tm tm;
8820 time_t rtc_start_date;
8821 if (!strcmp(optarg, "now")) {
8822 rtc_date_offset = -1;
8823 } else {
8824 if (sscanf(optarg, "%d-%d-%dT%d:%d:%d",
8825 &tm.tm_year,
8826 &tm.tm_mon,
8827 &tm.tm_mday,
8828 &tm.tm_hour,
8829 &tm.tm_min,
8830 &tm.tm_sec) == 6) {
8831 /* OK */
8832 } else if (sscanf(optarg, "%d-%d-%d",
8833 &tm.tm_year,
8834 &tm.tm_mon,
8835 &tm.tm_mday) == 3) {
8836 tm.tm_hour = 0;
8837 tm.tm_min = 0;
8838 tm.tm_sec = 0;
8839 } else {
8840 goto date_fail;
8842 tm.tm_year -= 1900;
8843 tm.tm_mon--;
8844 rtc_start_date = mktimegm(&tm);
8845 if (rtc_start_date == -1) {
8846 date_fail:
8847 fprintf(stderr, "Invalid date format. Valid format are:\n"
8848 "'now' or '2006-06-17T16:01:21' or '2006-06-17'\n");
8849 exit(1);
8851 rtc_date_offset = time(NULL) - rtc_start_date;
8854 break;
8855 case QEMU_OPTION_tb_size:
8856 tb_size = strtol(optarg, NULL, 0);
8857 if (tb_size < 0)
8858 tb_size = 0;
8859 break;
8860 case QEMU_OPTION_icount:
8861 use_icount = 1;
8862 if (strcmp(optarg, "auto") == 0) {
8863 icount_time_shift = -1;
8864 } else {
8865 icount_time_shift = strtol(optarg, NULL, 0);
8867 break;
8872 if (nographic) {
8873 if (serial_device_index == 0)
8874 serial_devices[0] = "stdio";
8875 if (parallel_device_index == 0)
8876 parallel_devices[0] = "null";
8877 if (strncmp(monitor_device, "vc", 2) == 0)
8878 monitor_device = "stdio";
8881 #ifndef _WIN32
8882 if (daemonize) {
8883 pid_t pid;
8885 if (pipe(fds) == -1)
8886 exit(1);
8888 pid = fork();
8889 if (pid > 0) {
8890 uint8_t status;
8891 ssize_t len;
8893 close(fds[1]);
8895 again:
8896 len = read(fds[0], &status, 1);
8897 if (len == -1 && (errno == EINTR))
8898 goto again;
8900 if (len != 1)
8901 exit(1);
8902 else if (status == 1) {
8903 fprintf(stderr, "Could not acquire pidfile\n");
8904 exit(1);
8905 } else
8906 exit(0);
8907 } else if (pid < 0)
8908 exit(1);
8910 setsid();
8912 pid = fork();
8913 if (pid > 0)
8914 exit(0);
8915 else if (pid < 0)
8916 exit(1);
8918 umask(027);
8920 signal(SIGTSTP, SIG_IGN);
8921 signal(SIGTTOU, SIG_IGN);
8922 signal(SIGTTIN, SIG_IGN);
8924 #endif
8926 if (pid_file && qemu_create_pidfile(pid_file) != 0) {
8927 if (daemonize) {
8928 uint8_t status = 1;
8929 write(fds[1], &status, 1);
8930 } else
8931 fprintf(stderr, "Could not acquire pid file\n");
8932 exit(1);
8935 #ifdef USE_KQEMU
8936 if (smp_cpus > 1)
8937 kqemu_allowed = 0;
8938 #endif
8939 linux_boot = (kernel_filename != NULL);
8940 net_boot = (boot_devices_bitmap >> ('n' - 'a')) & 0xF;
8942 if (!linux_boot && net_boot == 0 &&
8943 !machine->nodisk_ok && nb_drives_opt == 0)
8944 help(1);
8946 if (!linux_boot && *kernel_cmdline != '\0') {
8947 fprintf(stderr, "-append only allowed with -kernel option\n");
8948 exit(1);
8951 if (!linux_boot && initrd_filename != NULL) {
8952 fprintf(stderr, "-initrd only allowed with -kernel option\n");
8953 exit(1);
8956 /* boot to floppy or the default cd if no hard disk defined yet */
8957 if (!boot_devices[0]) {
8958 boot_devices = "cad";
8960 setvbuf(stdout, NULL, _IOLBF, 0);
8962 init_timers();
8963 init_timer_alarm();
8964 qemu_aio_init();
8965 if (use_icount && icount_time_shift < 0) {
8966 use_icount = 2;
8967 /* 125MIPS seems a reasonable initial guess at the guest speed.
8968 It will be corrected fairly quickly anyway. */
8969 icount_time_shift = 3;
8970 init_icount_adjust();
8973 #ifdef _WIN32
8974 socket_init();
8975 #endif
8977 /* init network clients */
8978 if (nb_net_clients == 0) {
8979 /* if no clients, we use a default config */
8980 net_clients[nb_net_clients++] = "nic";
8981 #ifdef CONFIG_SLIRP
8982 net_clients[nb_net_clients++] = "user";
8983 #endif
8986 for(i = 0;i < nb_net_clients; i++) {
8987 if (net_client_parse(net_clients[i]) < 0)
8988 exit(1);
8990 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
8991 if (vlan->nb_guest_devs == 0 && vlan->nb_host_devs == 0)
8992 continue;
8993 if (vlan->nb_guest_devs == 0)
8994 fprintf(stderr, "Warning: vlan %d with no nics\n", vlan->id);
8995 if (vlan->nb_host_devs == 0)
8996 fprintf(stderr,
8997 "Warning: vlan %d is not connected to host network\n",
8998 vlan->id);
9001 #ifdef TARGET_I386
9002 /* XXX: this should be moved in the PC machine instantiation code */
9003 if (net_boot != 0) {
9004 int netroms = 0;
9005 for (i = 0; i < nb_nics && i < 4; i++) {
9006 const char *model = nd_table[i].model;
9007 char buf[1024];
9008 if (net_boot & (1 << i)) {
9009 if (model == NULL)
9010 model = "ne2k_pci";
9011 snprintf(buf, sizeof(buf), "%s/pxe-%s.bin", bios_dir, model);
9012 if (get_image_size(buf) > 0) {
9013 if (nb_option_roms >= MAX_OPTION_ROMS) {
9014 fprintf(stderr, "Too many option ROMs\n");
9015 exit(1);
9017 option_rom[nb_option_roms] = strdup(buf);
9018 nb_option_roms++;
9019 netroms++;
9023 if (netroms == 0) {
9024 fprintf(stderr, "No valid PXE rom found for network device\n");
9025 exit(1);
9028 #endif
9030 /* init the memory */
9031 phys_ram_size = machine->ram_require & ~RAMSIZE_FIXED;
9033 if (machine->ram_require & RAMSIZE_FIXED) {
9034 if (ram_size > 0) {
9035 if (ram_size < phys_ram_size) {
9036 fprintf(stderr, "Machine `%s' requires %llu bytes of memory\n",
9037 machine->name, (unsigned long long) phys_ram_size);
9038 exit(-1);
9041 phys_ram_size = ram_size;
9042 } else
9043 ram_size = phys_ram_size;
9044 } else {
9045 if (ram_size == 0)
9046 ram_size = DEFAULT_RAM_SIZE * 1024 * 1024;
9048 phys_ram_size += ram_size;
9051 phys_ram_base = qemu_vmalloc(phys_ram_size);
9052 if (!phys_ram_base) {
9053 fprintf(stderr, "Could not allocate physical memory\n");
9054 exit(1);
9057 /* init the dynamic translator */
9058 cpu_exec_init_all(tb_size * 1024 * 1024);
9060 bdrv_init();
9062 /* we always create the cdrom drive, even if no disk is there */
9064 if (nb_drives_opt < MAX_DRIVES)
9065 drive_add(NULL, CDROM_ALIAS);
9067 /* we always create at least one floppy */
9069 if (nb_drives_opt < MAX_DRIVES)
9070 drive_add(NULL, FD_ALIAS, 0);
9072 /* we always create one sd slot, even if no card is in it */
9074 if (nb_drives_opt < MAX_DRIVES)
9075 drive_add(NULL, SD_ALIAS);
9077 /* open the virtual block devices */
9079 for(i = 0; i < nb_drives_opt; i++)
9080 if (drive_init(&drives_opt[i], snapshot, machine) == -1)
9081 exit(1);
9083 register_savevm("timer", 0, 2, timer_save, timer_load, NULL);
9084 register_savevm("ram", 0, 2, ram_save, ram_load, NULL);
9086 /* terminal init */
9087 memset(&display_state, 0, sizeof(display_state));
9088 if (nographic) {
9089 if (curses) {
9090 fprintf(stderr, "fatal: -nographic can't be used with -curses\n");
9091 exit(1);
9093 /* nearly nothing to do */
9094 dumb_display_init(ds);
9095 } else if (vnc_display != NULL) {
9096 vnc_display_init(ds);
9097 if (vnc_display_open(ds, vnc_display) < 0)
9098 exit(1);
9099 } else
9100 #if defined(CONFIG_CURSES)
9101 if (curses) {
9102 curses_display_init(ds, full_screen);
9103 } else
9104 #endif
9106 #if defined(CONFIG_SDL)
9107 sdl_display_init(ds, full_screen, no_frame);
9108 #elif defined(CONFIG_COCOA)
9109 cocoa_display_init(ds, full_screen);
9110 #else
9111 dumb_display_init(ds);
9112 #endif
9115 #ifndef _WIN32
9116 /* must be after terminal init, SDL library changes signal handlers */
9117 termsig_setup();
9118 #endif
9120 /* Maintain compatibility with multiple stdio monitors */
9121 if (!strcmp(monitor_device,"stdio")) {
9122 for (i = 0; i < MAX_SERIAL_PORTS; i++) {
9123 const char *devname = serial_devices[i];
9124 if (devname && !strcmp(devname,"mon:stdio")) {
9125 monitor_device = NULL;
9126 break;
9127 } else if (devname && !strcmp(devname,"stdio")) {
9128 monitor_device = NULL;
9129 serial_devices[i] = "mon:stdio";
9130 break;
9134 if (monitor_device) {
9135 monitor_hd = qemu_chr_open(monitor_device);
9136 if (!monitor_hd) {
9137 fprintf(stderr, "qemu: could not open monitor device '%s'\n", monitor_device);
9138 exit(1);
9140 monitor_init(monitor_hd, !nographic);
9143 for(i = 0; i < MAX_SERIAL_PORTS; i++) {
9144 const char *devname = serial_devices[i];
9145 if (devname && strcmp(devname, "none")) {
9146 serial_hds[i] = qemu_chr_open(devname);
9147 if (!serial_hds[i]) {
9148 fprintf(stderr, "qemu: could not open serial device '%s'\n",
9149 devname);
9150 exit(1);
9152 if (strstart(devname, "vc", 0))
9153 qemu_chr_printf(serial_hds[i], "serial%d console\r\n", i);
9157 for(i = 0; i < MAX_PARALLEL_PORTS; i++) {
9158 const char *devname = parallel_devices[i];
9159 if (devname && strcmp(devname, "none")) {
9160 parallel_hds[i] = qemu_chr_open(devname);
9161 if (!parallel_hds[i]) {
9162 fprintf(stderr, "qemu: could not open parallel device '%s'\n",
9163 devname);
9164 exit(1);
9166 if (strstart(devname, "vc", 0))
9167 qemu_chr_printf(parallel_hds[i], "parallel%d console\r\n", i);
9171 machine->init(ram_size, vga_ram_size, boot_devices, ds,
9172 kernel_filename, kernel_cmdline, initrd_filename, cpu_model);
9174 /* init USB devices */
9175 if (usb_enabled) {
9176 for(i = 0; i < usb_devices_index; i++) {
9177 if (usb_device_add(usb_devices[i]) < 0) {
9178 fprintf(stderr, "Warning: could not add USB device %s\n",
9179 usb_devices[i]);
9184 if (display_state.dpy_refresh) {
9185 display_state.gui_timer = qemu_new_timer(rt_clock, gui_update, &display_state);
9186 qemu_mod_timer(display_state.gui_timer, qemu_get_clock(rt_clock));
9189 #ifdef CONFIG_GDBSTUB
9190 if (use_gdbstub) {
9191 /* XXX: use standard host:port notation and modify options
9192 accordingly. */
9193 if (gdbserver_start(gdbstub_port) < 0) {
9194 fprintf(stderr, "qemu: could not open gdbstub device on port '%s'\n",
9195 gdbstub_port);
9196 exit(1);
9199 #endif
9201 if (loadvm)
9202 do_loadvm(loadvm);
9205 /* XXX: simplify init */
9206 read_passwords();
9207 if (autostart) {
9208 vm_start();
9212 if (daemonize) {
9213 uint8_t status = 0;
9214 ssize_t len;
9215 int fd;
9217 again1:
9218 len = write(fds[1], &status, 1);
9219 if (len == -1 && (errno == EINTR))
9220 goto again1;
9222 if (len != 1)
9223 exit(1);
9225 chdir("/");
9226 TFR(fd = open("/dev/null", O_RDWR));
9227 if (fd == -1)
9228 exit(1);
9230 dup2(fd, 0);
9231 dup2(fd, 1);
9232 dup2(fd, 2);
9234 close(fd);
9237 main_loop();
9238 quit_timers();
9240 #if !defined(_WIN32)
9241 /* close network clients */
9242 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
9243 VLANClientState *vc;
9245 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
9246 if (vc->fd_read == tap_receive) {
9247 char ifname[64];
9248 TAPState *s = vc->opaque;
9250 if (sscanf(vc->info_str, "tap: ifname=%63s ", ifname) == 1 &&
9251 s->down_script[0])
9252 launch_script(s->down_script, ifname, s->fd);
9254 #if defined(CONFIG_VDE)
9255 if (vc->fd_read == vde_from_qemu) {
9256 VDEState *s = vc->opaque;
9257 vde_close(s->vde);
9259 #endif
9262 #endif
9263 return 0;