hw/pci: fix crash on shpc error flow
[qemu/qmp-unstable.git] / qtest.c
blob2bca04ed4c30e12a1ee008046ddb947a3665aba8
1 /*
2 * Test Server
4 * Copyright IBM, Corp. 2011
6 * Authors:
7 * Anthony Liguori <aliguori@us.ibm.com>
9 * This work is licensed under the terms of the GNU GPL, version 2 or later.
10 * See the COPYING file in the top-level directory.
14 #include "sysemu/qtest.h"
15 #include "hw/qdev.h"
16 #include "sysemu/char.h"
17 #include "exec/ioport.h"
18 #include "exec/memory.h"
19 #include "hw/irq.h"
20 #include "sysemu/accel.h"
21 #include "sysemu/sysemu.h"
22 #include "sysemu/cpus.h"
23 #include "qemu/config-file.h"
24 #include "qemu/option.h"
25 #include "qemu/error-report.h"
27 #define MAX_IRQ 256
29 bool qtest_allowed;
31 static DeviceState *irq_intercept_dev;
32 static FILE *qtest_log_fp;
33 static CharDriverState *qtest_chr;
34 static GString *inbuf;
35 static int irq_levels[MAX_IRQ];
36 static qemu_timeval start_time;
37 static bool qtest_opened;
39 #define FMT_timeval "%ld.%06ld"
41 /**
42 * QTest Protocol
44 * Line based protocol, request/response based. Server can send async messages
45 * so clients should always handle many async messages before the response
46 * comes in.
48 * Valid requests
50 * Clock management:
52 * The qtest client is completely in charge of the QEMU_CLOCK_VIRTUAL. qtest commands
53 * let you adjust the value of the clock (monotonically). All the commands
54 * return the current value of the clock in nanoseconds.
56 * > clock_step
57 * < OK VALUE
59 * Advance the clock to the next deadline. Useful when waiting for
60 * asynchronous events.
62 * > clock_step NS
63 * < OK VALUE
65 * Advance the clock by NS nanoseconds.
67 * > clock_set NS
68 * < OK VALUE
70 * Advance the clock to NS nanoseconds (do nothing if it's already past).
72 * PIO and memory access:
74 * > outb ADDR VALUE
75 * < OK
77 * > outw ADDR VALUE
78 * < OK
80 * > outl ADDR VALUE
81 * < OK
83 * > inb ADDR
84 * < OK VALUE
86 * > inw ADDR
87 * < OK VALUE
89 * > inl ADDR
90 * < OK VALUE
92 * > writeb ADDR VALUE
93 * < OK
95 * > writew ADDR VALUE
96 * < OK
98 * > writel ADDR VALUE
99 * < OK
101 * > writeq ADDR VALUE
102 * < OK
104 * > readb ADDR
105 * < OK VALUE
107 * > readw ADDR
108 * < OK VALUE
110 * > readl ADDR
111 * < OK VALUE
113 * > readq ADDR
114 * < OK VALUE
116 * > read ADDR SIZE
117 * < OK DATA
119 * > write ADDR SIZE DATA
120 * < OK
122 * ADDR, SIZE, VALUE are all integers parsed with strtoul() with a base of 0.
124 * DATA is an arbitrarily long hex number prefixed with '0x'. If it's smaller
125 * than the expected size, the value will be zero filled at the end of the data
126 * sequence.
128 * IRQ management:
130 * > irq_intercept_in QOM-PATH
131 * < OK
133 * > irq_intercept_out QOM-PATH
134 * < OK
136 * Attach to the gpio-in (resp. gpio-out) pins exported by the device at
137 * QOM-PATH. When the pin is triggered, one of the following async messages
138 * will be printed to the qtest stream:
140 * IRQ raise NUM
141 * IRQ lower NUM
143 * where NUM is an IRQ number. For the PC, interrupts can be intercepted
144 * simply with "irq_intercept_in ioapic" (note that IRQ0 comes out with
145 * NUM=0 even though it is remapped to GSI 2).
148 static int hex2nib(char ch)
150 if (ch >= '0' && ch <= '9') {
151 return ch - '0';
152 } else if (ch >= 'a' && ch <= 'f') {
153 return 10 + (ch - 'a');
154 } else if (ch >= 'A' && ch <= 'F') {
155 return 10 + (ch - 'A');
156 } else {
157 return -1;
161 static void qtest_get_time(qemu_timeval *tv)
163 qemu_gettimeofday(tv);
164 tv->tv_sec -= start_time.tv_sec;
165 tv->tv_usec -= start_time.tv_usec;
166 if (tv->tv_usec < 0) {
167 tv->tv_usec += 1000000;
168 tv->tv_sec -= 1;
172 static void qtest_send_prefix(CharDriverState *chr)
174 qemu_timeval tv;
176 if (!qtest_log_fp || !qtest_opened) {
177 return;
180 qtest_get_time(&tv);
181 fprintf(qtest_log_fp, "[S +" FMT_timeval "] ",
182 (long) tv.tv_sec, (long) tv.tv_usec);
185 static void GCC_FMT_ATTR(2, 3) qtest_send(CharDriverState *chr,
186 const char *fmt, ...)
188 va_list ap;
189 char buffer[1024];
190 size_t len;
192 va_start(ap, fmt);
193 len = vsnprintf(buffer, sizeof(buffer), fmt, ap);
194 va_end(ap);
196 qemu_chr_fe_write_all(chr, (uint8_t *)buffer, len);
197 if (qtest_log_fp && qtest_opened) {
198 fprintf(qtest_log_fp, "%s", buffer);
202 static void qtest_irq_handler(void *opaque, int n, int level)
204 qemu_irq old_irq = *(qemu_irq *)opaque;
205 qemu_set_irq(old_irq, level);
207 if (irq_levels[n] != level) {
208 CharDriverState *chr = qtest_chr;
209 irq_levels[n] = level;
210 qtest_send_prefix(chr);
211 qtest_send(chr, "IRQ %s %d\n",
212 level ? "raise" : "lower", n);
216 static void qtest_process_command(CharDriverState *chr, gchar **words)
218 const gchar *command;
220 g_assert(words);
222 command = words[0];
224 if (qtest_log_fp) {
225 qemu_timeval tv;
226 int i;
228 qtest_get_time(&tv);
229 fprintf(qtest_log_fp, "[R +" FMT_timeval "]",
230 (long) tv.tv_sec, (long) tv.tv_usec);
231 for (i = 0; words[i]; i++) {
232 fprintf(qtest_log_fp, " %s", words[i]);
234 fprintf(qtest_log_fp, "\n");
237 g_assert(command);
238 if (strcmp(words[0], "irq_intercept_out") == 0
239 || strcmp(words[0], "irq_intercept_in") == 0) {
240 DeviceState *dev;
241 NamedGPIOList *ngl;
243 g_assert(words[1]);
244 dev = DEVICE(object_resolve_path(words[1], NULL));
245 if (!dev) {
246 qtest_send_prefix(chr);
247 qtest_send(chr, "FAIL Unknown device\n");
248 return;
251 if (irq_intercept_dev) {
252 qtest_send_prefix(chr);
253 if (irq_intercept_dev != dev) {
254 qtest_send(chr, "FAIL IRQ intercept already enabled\n");
255 } else {
256 qtest_send(chr, "OK\n");
258 return;
261 QLIST_FOREACH(ngl, &dev->gpios, node) {
262 /* We don't support intercept of named GPIOs yet */
263 if (ngl->name) {
264 continue;
266 if (words[0][14] == 'o') {
267 int i;
268 for (i = 0; i < ngl->num_out; ++i) {
269 qemu_irq *disconnected = g_new0(qemu_irq, 1);
270 qemu_irq icpt = qemu_allocate_irq(qtest_irq_handler,
271 disconnected, i);
273 *disconnected = qdev_intercept_gpio_out(dev, icpt,
274 ngl->name, i);
276 } else {
277 qemu_irq_intercept_in(ngl->in, qtest_irq_handler,
278 ngl->num_in);
281 irq_intercept_dev = dev;
282 qtest_send_prefix(chr);
283 qtest_send(chr, "OK\n");
285 } else if (strcmp(words[0], "outb") == 0 ||
286 strcmp(words[0], "outw") == 0 ||
287 strcmp(words[0], "outl") == 0) {
288 uint16_t addr;
289 uint32_t value;
291 g_assert(words[1] && words[2]);
292 addr = strtoul(words[1], NULL, 0);
293 value = strtoul(words[2], NULL, 0);
295 if (words[0][3] == 'b') {
296 cpu_outb(addr, value);
297 } else if (words[0][3] == 'w') {
298 cpu_outw(addr, value);
299 } else if (words[0][3] == 'l') {
300 cpu_outl(addr, value);
302 qtest_send_prefix(chr);
303 qtest_send(chr, "OK\n");
304 } else if (strcmp(words[0], "inb") == 0 ||
305 strcmp(words[0], "inw") == 0 ||
306 strcmp(words[0], "inl") == 0) {
307 uint16_t addr;
308 uint32_t value = -1U;
310 g_assert(words[1]);
311 addr = strtoul(words[1], NULL, 0);
313 if (words[0][2] == 'b') {
314 value = cpu_inb(addr);
315 } else if (words[0][2] == 'w') {
316 value = cpu_inw(addr);
317 } else if (words[0][2] == 'l') {
318 value = cpu_inl(addr);
320 qtest_send_prefix(chr);
321 qtest_send(chr, "OK 0x%04x\n", value);
322 } else if (strcmp(words[0], "writeb") == 0 ||
323 strcmp(words[0], "writew") == 0 ||
324 strcmp(words[0], "writel") == 0 ||
325 strcmp(words[0], "writeq") == 0) {
326 uint64_t addr;
327 uint64_t value;
329 g_assert(words[1] && words[2]);
330 addr = strtoull(words[1], NULL, 0);
331 value = strtoull(words[2], NULL, 0);
333 if (words[0][5] == 'b') {
334 uint8_t data = value;
335 cpu_physical_memory_write(addr, &data, 1);
336 } else if (words[0][5] == 'w') {
337 uint16_t data = value;
338 tswap16s(&data);
339 cpu_physical_memory_write(addr, &data, 2);
340 } else if (words[0][5] == 'l') {
341 uint32_t data = value;
342 tswap32s(&data);
343 cpu_physical_memory_write(addr, &data, 4);
344 } else if (words[0][5] == 'q') {
345 uint64_t data = value;
346 tswap64s(&data);
347 cpu_physical_memory_write(addr, &data, 8);
349 qtest_send_prefix(chr);
350 qtest_send(chr, "OK\n");
351 } else if (strcmp(words[0], "readb") == 0 ||
352 strcmp(words[0], "readw") == 0 ||
353 strcmp(words[0], "readl") == 0 ||
354 strcmp(words[0], "readq") == 0) {
355 uint64_t addr;
356 uint64_t value = UINT64_C(-1);
358 g_assert(words[1]);
359 addr = strtoull(words[1], NULL, 0);
361 if (words[0][4] == 'b') {
362 uint8_t data;
363 cpu_physical_memory_read(addr, &data, 1);
364 value = data;
365 } else if (words[0][4] == 'w') {
366 uint16_t data;
367 cpu_physical_memory_read(addr, &data, 2);
368 value = tswap16(data);
369 } else if (words[0][4] == 'l') {
370 uint32_t data;
371 cpu_physical_memory_read(addr, &data, 4);
372 value = tswap32(data);
373 } else if (words[0][4] == 'q') {
374 cpu_physical_memory_read(addr, &value, 8);
375 tswap64s(&value);
377 qtest_send_prefix(chr);
378 qtest_send(chr, "OK 0x%016" PRIx64 "\n", value);
379 } else if (strcmp(words[0], "read") == 0) {
380 uint64_t addr, len, i;
381 uint8_t *data;
383 g_assert(words[1] && words[2]);
384 addr = strtoull(words[1], NULL, 0);
385 len = strtoull(words[2], NULL, 0);
387 data = g_malloc(len);
388 cpu_physical_memory_read(addr, data, len);
390 qtest_send_prefix(chr);
391 qtest_send(chr, "OK 0x");
392 for (i = 0; i < len; i++) {
393 qtest_send(chr, "%02x", data[i]);
395 qtest_send(chr, "\n");
397 g_free(data);
398 } else if (strcmp(words[0], "write") == 0) {
399 uint64_t addr, len, i;
400 uint8_t *data;
401 size_t data_len;
403 g_assert(words[1] && words[2] && words[3]);
404 addr = strtoull(words[1], NULL, 0);
405 len = strtoull(words[2], NULL, 0);
407 data_len = strlen(words[3]);
408 if (data_len < 3) {
409 qtest_send(chr, "ERR invalid argument size\n");
410 return;
413 data = g_malloc(len);
414 for (i = 0; i < len; i++) {
415 if ((i * 2 + 4) <= data_len) {
416 data[i] = hex2nib(words[3][i * 2 + 2]) << 4;
417 data[i] |= hex2nib(words[3][i * 2 + 3]);
418 } else {
419 data[i] = 0;
422 cpu_physical_memory_write(addr, data, len);
423 g_free(data);
425 qtest_send_prefix(chr);
426 qtest_send(chr, "OK\n");
427 } else if (qtest_enabled() && strcmp(words[0], "clock_step") == 0) {
428 int64_t ns;
430 if (words[1]) {
431 ns = strtoll(words[1], NULL, 0);
432 } else {
433 ns = qemu_clock_deadline_ns_all(QEMU_CLOCK_VIRTUAL);
435 qtest_clock_warp(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + ns);
436 qtest_send_prefix(chr);
437 qtest_send(chr, "OK %"PRIi64"\n", (int64_t)qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
438 } else if (qtest_enabled() && strcmp(words[0], "clock_set") == 0) {
439 int64_t ns;
441 g_assert(words[1]);
442 ns = strtoll(words[1], NULL, 0);
443 qtest_clock_warp(ns);
444 qtest_send_prefix(chr);
445 qtest_send(chr, "OK %"PRIi64"\n", (int64_t)qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
446 } else {
447 qtest_send_prefix(chr);
448 qtest_send(chr, "FAIL Unknown command `%s'\n", words[0]);
452 static void qtest_process_inbuf(CharDriverState *chr, GString *inbuf)
454 char *end;
456 while ((end = strchr(inbuf->str, '\n')) != NULL) {
457 size_t offset;
458 GString *cmd;
459 gchar **words;
461 offset = end - inbuf->str;
463 cmd = g_string_new_len(inbuf->str, offset);
464 g_string_erase(inbuf, 0, offset + 1);
466 words = g_strsplit(cmd->str, " ", 0);
467 qtest_process_command(chr, words);
468 g_strfreev(words);
470 g_string_free(cmd, TRUE);
474 static void qtest_read(void *opaque, const uint8_t *buf, int size)
476 CharDriverState *chr = opaque;
478 g_string_append_len(inbuf, (const gchar *)buf, size);
479 qtest_process_inbuf(chr, inbuf);
482 static int qtest_can_read(void *opaque)
484 return 1024;
487 static void qtest_event(void *opaque, int event)
489 int i;
491 switch (event) {
492 case CHR_EVENT_OPENED:
494 * We used to call qemu_system_reset() here, hoping we could
495 * use the same process for multiple tests that way. Never
496 * used. Injects an extra reset even when it's not used, and
497 * that can mess up tests, e.g. -boot once.
499 for (i = 0; i < ARRAY_SIZE(irq_levels); i++) {
500 irq_levels[i] = 0;
502 qemu_gettimeofday(&start_time);
503 qtest_opened = true;
504 if (qtest_log_fp) {
505 fprintf(qtest_log_fp, "[I " FMT_timeval "] OPENED\n",
506 (long) start_time.tv_sec, (long) start_time.tv_usec);
508 break;
509 case CHR_EVENT_CLOSED:
510 qtest_opened = false;
511 if (qtest_log_fp) {
512 qemu_timeval tv;
513 qtest_get_time(&tv);
514 fprintf(qtest_log_fp, "[I +" FMT_timeval "] CLOSED\n",
515 (long) tv.tv_sec, (long) tv.tv_usec);
517 break;
518 default:
519 break;
523 static void configure_qtest_icount(const char *options)
525 QemuOpts *opts = qemu_opts_parse(qemu_find_opts("icount"), options, 1);
526 configure_icount(opts, &error_abort);
527 qemu_opts_del(opts);
530 static int qtest_init_accel(MachineState *ms)
532 configure_qtest_icount("0");
533 return 0;
536 void qtest_init(const char *qtest_chrdev, const char *qtest_log, Error **errp)
538 CharDriverState *chr;
540 chr = qemu_chr_new("qtest", qtest_chrdev, NULL);
542 if (chr == NULL) {
543 error_setg(errp, "Failed to initialize device for qtest: \"%s\"",
544 qtest_chrdev);
545 return;
548 if (qtest_log) {
549 if (strcmp(qtest_log, "none") != 0) {
550 qtest_log_fp = fopen(qtest_log, "w+");
552 } else {
553 qtest_log_fp = stderr;
556 qemu_chr_add_handlers(chr, qtest_can_read, qtest_read, qtest_event, chr);
557 qemu_chr_fe_set_echo(chr, true);
559 inbuf = g_string_new("");
560 qtest_chr = chr;
563 bool qtest_driver(void)
565 return qtest_chr;
568 static void qtest_accel_class_init(ObjectClass *oc, void *data)
570 AccelClass *ac = ACCEL_CLASS(oc);
571 ac->name = "QTest";
572 ac->available = qtest_available;
573 ac->init_machine = qtest_init_accel;
574 ac->allowed = &qtest_allowed;
577 #define TYPE_QTEST_ACCEL ACCEL_CLASS_NAME("qtest")
579 static const TypeInfo qtest_accel_type = {
580 .name = TYPE_QTEST_ACCEL,
581 .parent = TYPE_ACCEL,
582 .class_init = qtest_accel_class_init,
585 static void qtest_type_init(void)
587 type_register_static(&qtest_accel_type);
590 type_init(qtest_type_init);