?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Merge remote-tracking branch 'riku/linux-user-for-upstream' into staging
[qemu/wangdongxu.git] / qemu-char.c
blob09d2309eb6b2b29d683b7097a781ecf6f976ceca
1 /*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24 #include "qemu-common.h"
25 #include "net.h"
26 #include "monitor.h"
27 #include "console.h"
28 #include "sysemu.h"
29 #include "qemu-timer.h"
30 #include "qemu-char.h"
31 #include "hw/usb.h"
32 #include "hw/baum.h"
33 #include "hw/msmouse.h"
34 #include "qemu-objects.h"
35
36 #include <unistd.h>
37 #include <fcntl.h>
38 #include <time.h>
39 #include <errno.h>
40 #include <sys/time.h>
41 #include <zlib.h>
42
43 #ifndef _WIN32
44 #include <sys/times.h>
45 #include <sys/wait.h>
46 #include <termios.h>
47 #include <sys/mman.h>
48 #include <sys/ioctl.h>
49 #include <sys/resource.h>
50 #include <sys/socket.h>
51 #include <netinet/in.h>
52 #include <net/if.h>
53 #include <arpa/inet.h>
54 #include <dirent.h>
55 #include <netdb.h>
56 #include <sys/select.h>
57 #ifdef CONFIG_BSD
58 #include <sys/stat.h>
59 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
60 #include <libutil.h>
61 #include <dev/ppbus/ppi.h>
62 #include <dev/ppbus/ppbconf.h>
63 #if defined(__GLIBC__)
64 #include <pty.h>
65 #endif
66 #elif defined(__DragonFly__)
67 #include <libutil.h>
68 #include <dev/misc/ppi/ppi.h>
69 #include <bus/ppbus/ppbconf.h>
70 #else
71 #include <util.h>
72 #endif
73 #else
74 #ifdef __linux__
75 #include <pty.h>
76
77 #include <linux/ppdev.h>
78 #include <linux/parport.h>
79 #endif
80 #ifdef __sun__
81 #include <sys/stat.h>
82 #include <sys/ethernet.h>
83 #include <sys/sockio.h>
84 #include <netinet/arp.h>
85 #include <netinet/in.h>
86 #include <netinet/in_systm.h>
87 #include <netinet/ip.h>
88 #include <netinet/ip_icmp.h> // must come after ip.h
89 #include <netinet/udp.h>
90 #include <netinet/tcp.h>
91 #include <net/if.h>
92 #include <syslog.h>
93 #include <stropts.h>
94 #endif
95 #endif
96 #endif
97
98 #include "qemu_socket.h"
99 #include "ui/qemu-spice.h"
100
101 #define READ_BUF_LEN 4096
102
103 /***********************************************************/
104 /* character device */
105
106 static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
107 QTAILQ_HEAD_INITIALIZER(chardevs);
108
109 static void qemu_chr_event(CharDriverState *s, int event)
110 {
111 /* Keep track if the char device is open */
112 switch (event) {
113 case CHR_EVENT_OPENED:
114 s->opened = 1;
115 break;
116 case CHR_EVENT_CLOSED:
117 s->opened = 0;
118 break;
119 }
120
121 if (!s->chr_event)
122 return;
123 s->chr_event(s->handler_opaque, event);
124 }
125
126 static void qemu_chr_generic_open_bh(void *opaque)
127 {
128 CharDriverState *s = opaque;
129 qemu_chr_event(s, CHR_EVENT_OPENED);
130 qemu_bh_delete(s->bh);
131 s->bh = NULL;
132 }
133
134 void qemu_chr_generic_open(CharDriverState *s)
135 {
136 if (s->bh == NULL) {
137 s->bh = qemu_bh_new(qemu_chr_generic_open_bh, s);
138 qemu_bh_schedule(s->bh);
139 }
140 }
141
142 int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
143 {
144 return s->chr_write(s, buf, len);
145 }
146
147 int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
148 {
149 if (!s->chr_ioctl)
150 return -ENOTSUP;
151 return s->chr_ioctl(s, cmd, arg);
152 }
153
154 int qemu_chr_be_can_write(CharDriverState *s)
155 {
156 if (!s->chr_can_read)
157 return 0;
158 return s->chr_can_read(s->handler_opaque);
159 }
160
161 void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
162 {
163 s->chr_read(s->handler_opaque, buf, len);
164 }
165
166 int qemu_chr_fe_get_msgfd(CharDriverState *s)
167 {
168 return s->get_msgfd ? s->get_msgfd(s) : -1;
169 }
170
171 int qemu_chr_add_client(CharDriverState *s, int fd)
172 {
173 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
174 }
175
176 void qemu_chr_accept_input(CharDriverState *s)
177 {
178 if (s->chr_accept_input)
179 s->chr_accept_input(s);
180 }
181
182 void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
183 {
184 char buf[READ_BUF_LEN];
185 va_list ap;
186 va_start(ap, fmt);
187 vsnprintf(buf, sizeof(buf), fmt, ap);
188 qemu_chr_fe_write(s, (uint8_t *)buf, strlen(buf));
189 va_end(ap);
190 }
191
192 void qemu_chr_add_handlers(CharDriverState *s,
193 IOCanReadHandler *fd_can_read,
194 IOReadHandler *fd_read,
195 IOEventHandler *fd_event,
196 void *opaque)
197 {
198 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
199 /* chr driver being released. */
200 ++s->avail_connections;
201 }
202 s->chr_can_read = fd_can_read;
203 s->chr_read = fd_read;
204 s->chr_event = fd_event;
205 s->handler_opaque = opaque;
206 if (s->chr_update_read_handler)
207 s->chr_update_read_handler(s);
208
209 /* We're connecting to an already opened device, so let's make sure we
210 also get the open event */
211 if (s->opened) {
212 qemu_chr_generic_open(s);
213 }
214 }
215
216 static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
217 {
218 return len;
219 }
220
221 static int qemu_chr_open_null(QemuOpts *opts, CharDriverState **_chr)
222 {
223 CharDriverState *chr;
224
225 chr = g_malloc0(sizeof(CharDriverState));
226 chr->chr_write = null_chr_write;
227
228 *_chr= chr;
229 return 0;
230 }
231
232 /* MUX driver for serial I/O splitting */
233 #define MAX_MUX 4
234 #define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
235 #define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
236 typedef struct {
237 IOCanReadHandler *chr_can_read[MAX_MUX];
238 IOReadHandler *chr_read[MAX_MUX];
239 IOEventHandler *chr_event[MAX_MUX];
240 void *ext_opaque[MAX_MUX];
241 CharDriverState *drv;
242 int focus;
243 int mux_cnt;
244 int term_got_escape;
245 int max_size;
246 /* Intermediate input buffer allows to catch escape sequences even if the
247 currently active device is not accepting any input - but only until it
248 is full as well. */
249 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
250 int prod[MAX_MUX];
251 int cons[MAX_MUX];
252 int timestamps;
253 int linestart;
254 int64_t timestamps_start;
255 } MuxDriver;
256
257
258 static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
259 {
260 MuxDriver *d = chr->opaque;
261 int ret;
262 if (!d->timestamps) {
263 ret = d->drv->chr_write(d->drv, buf, len);
264 } else {
265 int i;
266
267 ret = 0;
268 for (i = 0; i < len; i++) {
269 if (d->linestart) {
270 char buf1[64];
271 int64_t ti;
272 int secs;
273
274 ti = qemu_get_clock_ms(rt_clock);
275 if (d->timestamps_start == -1)
276 d->timestamps_start = ti;
277 ti -= d->timestamps_start;
278 secs = ti / 1000;
279 snprintf(buf1, sizeof(buf1),
280 "[%02d:%02d:%02d.%03d] ",
281 secs / 3600,
282 (secs / 60) % 60,
283 secs % 60,
284 (int)(ti % 1000));
285 d->drv->chr_write(d->drv, (uint8_t *)buf1, strlen(buf1));
286 d->linestart = 0;
287 }
288 ret += d->drv->chr_write(d->drv, buf+i, 1);
289 if (buf[i] == '\n') {
290 d->linestart = 1;
291 }
292 }
293 }
294 return ret;
295 }
296
297 static const char * const mux_help[] = {
298 "% h print this help\n\r",
299 "% x exit emulator\n\r",
300 "% s save disk data back to file (if -snapshot)\n\r",
301 "% t toggle console timestamps\n\r"
302 "% b send break (magic sysrq)\n\r",
303 "% c switch between console and monitor\n\r",
304 "% % sends %\n\r",
305 NULL
306 };
307
308 int term_escape_char = 0x01; /* ctrl-a is used for escape */
309 static void mux_print_help(CharDriverState *chr)
310 {
311 int i, j;
312 char ebuf[15] = "Escape-Char";
313 char cbuf[50] = "\n\r";
314
315 if (term_escape_char > 0 && term_escape_char < 26) {
316 snprintf(cbuf, sizeof(cbuf), "\n\r");
317 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
318 } else {
319 snprintf(cbuf, sizeof(cbuf),
320 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
321 term_escape_char);
322 }
323 chr->chr_write(chr, (uint8_t *)cbuf, strlen(cbuf));
324 for (i = 0; mux_help[i] != NULL; i++) {
325 for (j=0; mux_help[i][j] != '\0'; j++) {
326 if (mux_help[i][j] == '%')
327 chr->chr_write(chr, (uint8_t *)ebuf, strlen(ebuf));
328 else
329 chr->chr_write(chr, (uint8_t *)&mux_help[i][j], 1);
330 }
331 }
332 }
333
334 static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
335 {
336 if (d->chr_event[mux_nr])
337 d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
338 }
339
340 static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
341 {
342 if (d->term_got_escape) {
343 d->term_got_escape = 0;
344 if (ch == term_escape_char)
345 goto send_char;
346 switch(ch) {
347 case '?':
348 case 'h':
349 mux_print_help(chr);
350 break;
351 case 'x':
352 {
353 const char *term = "QEMU: Terminated\n\r";
354 chr->chr_write(chr,(uint8_t *)term,strlen(term));
355 exit(0);
356 break;
357 }
358 case 's':
359 bdrv_commit_all();
360 break;
361 case 'b':
362 qemu_chr_event(chr, CHR_EVENT_BREAK);
363 break;
364 case 'c':
365 /* Switch to the next registered device */
366 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
367 d->focus++;
368 if (d->focus >= d->mux_cnt)
369 d->focus = 0;
370 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
371 break;
372 case 't':
373 d->timestamps = !d->timestamps;
374 d->timestamps_start = -1;
375 d->linestart = 0;
376 break;
377 }
378 } else if (ch == term_escape_char) {
379 d->term_got_escape = 1;
380 } else {
381 send_char:
382 return 1;
383 }
384 return 0;
385 }
386
387 static void mux_chr_accept_input(CharDriverState *chr)
388 {
389 MuxDriver *d = chr->opaque;
390 int m = d->focus;
391
392 while (d->prod[m] != d->cons[m] &&
393 d->chr_can_read[m] &&
394 d->chr_can_read[m](d->ext_opaque[m])) {
395 d->chr_read[m](d->ext_opaque[m],
396 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
397 }
398 }
399
400 static int mux_chr_can_read(void *opaque)
401 {
402 CharDriverState *chr = opaque;
403 MuxDriver *d = chr->opaque;
404 int m = d->focus;
405
406 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
407 return 1;
408 if (d->chr_can_read[m])
409 return d->chr_can_read[m](d->ext_opaque[m]);
410 return 0;
411 }
412
413 static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
414 {
415 CharDriverState *chr = opaque;
416 MuxDriver *d = chr->opaque;
417 int m = d->focus;
418 int i;
419
420 mux_chr_accept_input (opaque);
421
422 for(i = 0; i < size; i++)
423 if (mux_proc_byte(chr, d, buf[i])) {
424 if (d->prod[m] == d->cons[m] &&
425 d->chr_can_read[m] &&
426 d->chr_can_read[m](d->ext_opaque[m]))
427 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
428 else
429 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
430 }
431 }
432
433 static void mux_chr_event(void *opaque, int event)
434 {
435 CharDriverState *chr = opaque;
436 MuxDriver *d = chr->opaque;
437 int i;
438
439 /* Send the event to all registered listeners */
440 for (i = 0; i < d->mux_cnt; i++)
441 mux_chr_send_event(d, i, event);
442 }
443
444 static void mux_chr_update_read_handler(CharDriverState *chr)
445 {
446 MuxDriver *d = chr->opaque;
447
448 if (d->mux_cnt >= MAX_MUX) {
449 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
450 return;
451 }
452 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
453 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
454 d->chr_read[d->mux_cnt] = chr->chr_read;
455 d->chr_event[d->mux_cnt] = chr->chr_event;
456 /* Fix up the real driver with mux routines */
457 if (d->mux_cnt == 0) {
458 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
459 mux_chr_event, chr);
460 }
461 if (d->focus != -1) {
462 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
463 }
464 d->focus = d->mux_cnt;
465 d->mux_cnt++;
466 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
467 }
468
469 static CharDriverState *qemu_chr_open_mux(CharDriverState *drv)
470 {
471 CharDriverState *chr;
472 MuxDriver *d;
473
474 chr = g_malloc0(sizeof(CharDriverState));
475 d = g_malloc0(sizeof(MuxDriver));
476
477 chr->opaque = d;
478 d->drv = drv;
479 d->focus = -1;
480 chr->chr_write = mux_chr_write;
481 chr->chr_update_read_handler = mux_chr_update_read_handler;
482 chr->chr_accept_input = mux_chr_accept_input;
483 /* Frontend guest-open / -close notification is not support with muxes */
484 chr->chr_guest_open = NULL;
485 chr->chr_guest_close = NULL;
486
487 /* Muxes are always open on creation */
488 qemu_chr_generic_open(chr);
489
490 return chr;
491 }
492
493
494 #ifdef _WIN32
495 int send_all(int fd, const void *buf, int len1)
496 {
497 int ret, len;
498
499 len = len1;
500 while (len > 0) {
501 ret = send(fd, buf, len, 0);
502 if (ret < 0) {
503 errno = WSAGetLastError();
504 if (errno != WSAEWOULDBLOCK) {
505 return -1;
506 }
507 } else if (ret == 0) {
508 break;
509 } else {
510 buf += ret;
511 len -= ret;
512 }
513 }
514 return len1 - len;
515 }
516
517 #else
518
519 int send_all(int fd, const void *_buf, int len1)
520 {
521 int ret, len;
522 const uint8_t *buf = _buf;
523
524 len = len1;
525 while (len > 0) {
526 ret = write(fd, buf, len);
527 if (ret < 0) {
528 if (errno != EINTR && errno != EAGAIN)
529 return -1;
530 } else if (ret == 0) {
531 break;
532 } else {
533 buf += ret;
534 len -= ret;
535 }
536 }
537 return len1 - len;
538 }
539 #endif /* !_WIN32 */
540
541 #ifndef _WIN32
542
543 typedef struct {
544 int fd_in, fd_out;
545 int max_size;
546 } FDCharDriver;
547
548 #define STDIO_MAX_CLIENTS 1
549 static int stdio_nb_clients = 0;
550
551 static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
552 {
553 FDCharDriver *s = chr->opaque;
554 return send_all(s->fd_out, buf, len);
555 }
556
557 static int fd_chr_read_poll(void *opaque)
558 {
559 CharDriverState *chr = opaque;
560 FDCharDriver *s = chr->opaque;
561
562 s->max_size = qemu_chr_be_can_write(chr);
563 return s->max_size;
564 }
565
566 static void fd_chr_read(void *opaque)
567 {
568 CharDriverState *chr = opaque;
569 FDCharDriver *s = chr->opaque;
570 int size, len;
571 uint8_t buf[READ_BUF_LEN];
572
573 len = sizeof(buf);
574 if (len > s->max_size)
575 len = s->max_size;
576 if (len == 0)
577 return;
578 size = read(s->fd_in, buf, len);
579 if (size == 0) {
580 /* FD has been closed. Remove it from the active list. */
581 qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
582 qemu_chr_event(chr, CHR_EVENT_CLOSED);
583 return;
584 }
585 if (size > 0) {
586 qemu_chr_be_write(chr, buf, size);
587 }
588 }
589
590 static void fd_chr_update_read_handler(CharDriverState *chr)
591 {
592 FDCharDriver *s = chr->opaque;
593
594 if (s->fd_in >= 0) {
595 if (display_type == DT_NOGRAPHIC && s->fd_in == 0) {
596 } else {
597 qemu_set_fd_handler2(s->fd_in, fd_chr_read_poll,
598 fd_chr_read, NULL, chr);
599 }
600 }
601 }
602
603 static void fd_chr_close(struct CharDriverState *chr)
604 {
605 FDCharDriver *s = chr->opaque;
606
607 if (s->fd_in >= 0) {
608 if (display_type == DT_NOGRAPHIC && s->fd_in == 0) {
609 } else {
610 qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
611 }
612 }
613
614 g_free(s);
615 qemu_chr_event(chr, CHR_EVENT_CLOSED);
616 }
617
618 /* open a character device to a unix fd */
619 static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
620 {
621 CharDriverState *chr;
622 FDCharDriver *s;
623
624 chr = g_malloc0(sizeof(CharDriverState));
625 s = g_malloc0(sizeof(FDCharDriver));
626 s->fd_in = fd_in;
627 s->fd_out = fd_out;
628 chr->opaque = s;
629 chr->chr_write = fd_chr_write;
630 chr->chr_update_read_handler = fd_chr_update_read_handler;
631 chr->chr_close = fd_chr_close;
632
633 qemu_chr_generic_open(chr);
634
635 return chr;
636 }
637
638 static int qemu_chr_open_file_out(QemuOpts *opts, CharDriverState **_chr)
639 {
640 int fd_out;
641
642 TFR(fd_out = qemu_open(qemu_opt_get(opts, "path"),
643 O_WRONLY | O_TRUNC | O_CREAT | O_BINARY, 0666));
644 if (fd_out < 0) {
645 return -errno;
646 }
647
648 *_chr = qemu_chr_open_fd(-1, fd_out);
649 return 0;
650 }
651
652 static int qemu_chr_open_pipe(QemuOpts *opts, CharDriverState **_chr)
653 {
654 int fd_in, fd_out;
655 char filename_in[256], filename_out[256];
656 const char *filename = qemu_opt_get(opts, "path");
657
658 if (filename == NULL) {
659 fprintf(stderr, "chardev: pipe: no filename given\n");
660 return -EINVAL;
661 }
662
663 snprintf(filename_in, 256, "%s.in", filename);
664 snprintf(filename_out, 256, "%s.out", filename);
665 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
666 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
667 if (fd_in < 0 || fd_out < 0) {
668 if (fd_in >= 0)
669 close(fd_in);
670 if (fd_out >= 0)
671 close(fd_out);
672 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
673 if (fd_in < 0) {
674 return -errno;
675 }
676 }
677
678 *_chr = qemu_chr_open_fd(fd_in, fd_out);
679 return 0;
680 }
681
682
683 /* for STDIO, we handle the case where several clients use it
684 (nographic mode) */
685
686 #define TERM_FIFO_MAX_SIZE 1
687
688 static uint8_t term_fifo[TERM_FIFO_MAX_SIZE];
689 static int term_fifo_size;
690
691 static int stdio_read_poll(void *opaque)
692 {
693 CharDriverState *chr = opaque;
694
695 /* try to flush the queue if needed */
696 if (term_fifo_size != 0 && qemu_chr_be_can_write(chr) > 0) {
697 qemu_chr_be_write(chr, term_fifo, 1);
698 term_fifo_size = 0;
699 }
700 /* see if we can absorb more chars */
701 if (term_fifo_size == 0)
702 return 1;
703 else
704 return 0;
705 }
706
707 static void stdio_read(void *opaque)
708 {
709 int size;
710 uint8_t buf[1];
711 CharDriverState *chr = opaque;
712
713 size = read(0, buf, 1);
714 if (size == 0) {
715 /* stdin has been closed. Remove it from the active list. */
716 qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
717 qemu_chr_event(chr, CHR_EVENT_CLOSED);
718 return;
719 }
720 if (size > 0) {
721 if (qemu_chr_be_can_write(chr) > 0) {
722 qemu_chr_be_write(chr, buf, 1);
723 } else if (term_fifo_size == 0) {
724 term_fifo[term_fifo_size++] = buf[0];
725 }
726 }
727 }
728
729 /* init terminal so that we can grab keys */
730 static struct termios oldtty;
731 static int old_fd0_flags;
732 static bool stdio_allow_signal;
733
734 static void term_exit(void)
735 {
736 tcsetattr (0, TCSANOW, &oldtty);
737 fcntl(0, F_SETFL, old_fd0_flags);
738 }
739
740 static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
741 {
742 struct termios tty;
743
744 tty = oldtty;
745 if (!echo) {
746 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
747 |INLCR|IGNCR|ICRNL|IXON);
748 tty.c_oflag |= OPOST;
749 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
750 tty.c_cflag &= ~(CSIZE|PARENB);
751 tty.c_cflag |= CS8;
752 tty.c_cc[VMIN] = 1;
753 tty.c_cc[VTIME] = 0;
754 }
755 /* if graphical mode, we allow Ctrl-C handling */
756 if (!stdio_allow_signal)
757 tty.c_lflag &= ~ISIG;
758
759 tcsetattr (0, TCSANOW, &tty);
760 }
761
762 static void qemu_chr_close_stdio(struct CharDriverState *chr)
763 {
764 term_exit();
765 stdio_nb_clients--;
766 qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
767 fd_chr_close(chr);
768 }
769
770 static int qemu_chr_open_stdio(QemuOpts *opts, CharDriverState **_chr)
771 {
772 CharDriverState *chr;
773
774 if (stdio_nb_clients >= STDIO_MAX_CLIENTS) {
775 return -EBUSY;
776 }
777
778 if (stdio_nb_clients == 0) {
779 old_fd0_flags = fcntl(0, F_GETFL);
780 tcgetattr (0, &oldtty);
781 fcntl(0, F_SETFL, O_NONBLOCK);
782 atexit(term_exit);
783 }
784
785 chr = qemu_chr_open_fd(0, 1);
786 chr->chr_close = qemu_chr_close_stdio;
787 chr->chr_set_echo = qemu_chr_set_echo_stdio;
788 qemu_set_fd_handler2(0, stdio_read_poll, stdio_read, NULL, chr);
789 stdio_nb_clients++;
790 stdio_allow_signal = qemu_opt_get_bool(opts, "signal",
791 display_type != DT_NOGRAPHIC);
792 qemu_chr_fe_set_echo(chr, false);
793
794 *_chr = chr;
795 return 0;
796 }
797
798 #ifdef __sun__
799 /* Once Solaris has openpty(), this is going to be removed. */
800 static int openpty(int *amaster, int *aslave, char *name,
801 struct termios *termp, struct winsize *winp)
802 {
803 const char *slave;
804 int mfd = -1, sfd = -1;
805
806 *amaster = *aslave = -1;
807
808 mfd = open("/dev/ptmx", O_RDWR | O_NOCTTY);
809 if (mfd < 0)
810 goto err;
811
812 if (grantpt(mfd) == -1 || unlockpt(mfd) == -1)
813 goto err;
814
815 if ((slave = ptsname(mfd)) == NULL)
816 goto err;
817
818 if ((sfd = open(slave, O_RDONLY | O_NOCTTY)) == -1)
819 goto err;
820
821 if (ioctl(sfd, I_PUSH, "ptem") == -1 ||
822 (termp != NULL && tcgetattr(sfd, termp) < 0))
823 goto err;
824
825 if (amaster)
826 *amaster = mfd;
827 if (aslave)
828 *aslave = sfd;
829 if (winp)
830 ioctl(sfd, TIOCSWINSZ, winp);
831
832 return 0;
833
834 err:
835 if (sfd != -1)
836 close(sfd);
837 close(mfd);
838 return -1;
839 }
840
841 static void cfmakeraw (struct termios *termios_p)
842 {
843 termios_p->c_iflag &=
844 ~(IGNBRK|BRKINT|PARMRK|ISTRIP|INLCR|IGNCR|ICRNL|IXON);
845 termios_p->c_oflag &= ~OPOST;
846 termios_p->c_lflag &= ~(ECHO|ECHONL|ICANON|ISIG|IEXTEN);
847 termios_p->c_cflag &= ~(CSIZE|PARENB);
848 termios_p->c_cflag |= CS8;
849
850 termios_p->c_cc[VMIN] = 0;
851 termios_p->c_cc[VTIME] = 0;
852 }
853 #endif
854
855 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
856 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
857 || defined(__GLIBC__)
858
859 typedef struct {
860 int fd;
861 int connected;
862 int polling;
863 int read_bytes;
864 QEMUTimer *timer;
865 } PtyCharDriver;
866
867 static void pty_chr_update_read_handler(CharDriverState *chr);
868 static void pty_chr_state(CharDriverState *chr, int connected);
869
870 static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
871 {
872 PtyCharDriver *s = chr->opaque;
873
874 if (!s->connected) {
875 /* guest sends data, check for (re-)connect */
876 pty_chr_update_read_handler(chr);
877 return 0;
878 }
879 return send_all(s->fd, buf, len);
880 }
881
882 static int pty_chr_read_poll(void *opaque)
883 {
884 CharDriverState *chr = opaque;
885 PtyCharDriver *s = chr->opaque;
886
887 s->read_bytes = qemu_chr_be_can_write(chr);
888 return s->read_bytes;
889 }
890
891 static void pty_chr_read(void *opaque)
892 {
893 CharDriverState *chr = opaque;
894 PtyCharDriver *s = chr->opaque;
895 int size, len;
896 uint8_t buf[READ_BUF_LEN];
897
898 len = sizeof(buf);
899 if (len > s->read_bytes)
900 len = s->read_bytes;
901 if (len == 0)
902 return;
903 size = read(s->fd, buf, len);
904 if ((size == -1 && errno == EIO) ||
905 (size == 0)) {
906 pty_chr_state(chr, 0);
907 return;
908 }
909 if (size > 0) {
910 pty_chr_state(chr, 1);
911 qemu_chr_be_write(chr, buf, size);
912 }
913 }
914
915 static void pty_chr_update_read_handler(CharDriverState *chr)
916 {
917 PtyCharDriver *s = chr->opaque;
918
919 qemu_set_fd_handler2(s->fd, pty_chr_read_poll,
920 pty_chr_read, NULL, chr);
921 s->polling = 1;
922 /*
923 * Short timeout here: just need wait long enougth that qemu makes
924 * it through the poll loop once. When reconnected we want a
925 * short timeout so we notice it almost instantly. Otherwise
926 * read() gives us -EIO instantly, making pty_chr_state() reset the
927 * timeout to the normal (much longer) poll interval before the
928 * timer triggers.
929 */
930 qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 10);
931 }
932
933 static void pty_chr_state(CharDriverState *chr, int connected)
934 {
935 PtyCharDriver *s = chr->opaque;
936
937 if (!connected) {
938 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
939 s->connected = 0;
940 s->polling = 0;
941 /* (re-)connect poll interval for idle guests: once per second.
942 * We check more frequently in case the guests sends data to
943 * the virtual device linked to our pty. */
944 qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 1000);
945 } else {
946 if (!s->connected)
947 qemu_chr_generic_open(chr);
948 s->connected = 1;
949 }
950 }
951
952 static void pty_chr_timer(void *opaque)
953 {
954 struct CharDriverState *chr = opaque;
955 PtyCharDriver *s = chr->opaque;
956
957 if (s->connected)
958 return;
959 if (s->polling) {
960 /* If we arrive here without polling being cleared due
961 * read returning -EIO, then we are (re-)connected */
962 pty_chr_state(chr, 1);
963 return;
964 }
965
966 /* Next poll ... */
967 pty_chr_update_read_handler(chr);
968 }
969
970 static void pty_chr_close(struct CharDriverState *chr)
971 {
972 PtyCharDriver *s = chr->opaque;
973
974 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
975 close(s->fd);
976 qemu_del_timer(s->timer);
977 qemu_free_timer(s->timer);
978 g_free(s);
979 qemu_chr_event(chr, CHR_EVENT_CLOSED);
980 }
981
982 static int qemu_chr_open_pty(QemuOpts *opts, CharDriverState **_chr)
983 {
984 CharDriverState *chr;
985 PtyCharDriver *s;
986 struct termios tty;
987 int slave_fd, len;
988 #if defined(__OpenBSD__) || defined(__DragonFly__)
989 char pty_name[PATH_MAX];
990 #define q_ptsname(x) pty_name
991 #else
992 char *pty_name = NULL;
993 #define q_ptsname(x) ptsname(x)
994 #endif
995
996 chr = g_malloc0(sizeof(CharDriverState));
997 s = g_malloc0(sizeof(PtyCharDriver));
998
999 if (openpty(&s->fd, &slave_fd, pty_name, NULL, NULL) < 0) {
1000 return -errno;
1001 }
1002
1003 /* Set raw attributes on the pty. */
1004 tcgetattr(slave_fd, &tty);
1005 cfmakeraw(&tty);
1006 tcsetattr(slave_fd, TCSAFLUSH, &tty);
1007 close(slave_fd);
1008
1009 len = strlen(q_ptsname(s->fd)) + 5;
1010 chr->filename = g_malloc(len);
1011 snprintf(chr->filename, len, "pty:%s", q_ptsname(s->fd));
1012 qemu_opt_set(opts, "path", q_ptsname(s->fd));
1013 fprintf(stderr, "char device redirected to %s\n", q_ptsname(s->fd));
1014
1015 chr->opaque = s;
1016 chr->chr_write = pty_chr_write;
1017 chr->chr_update_read_handler = pty_chr_update_read_handler;
1018 chr->chr_close = pty_chr_close;
1019
1020 s->timer = qemu_new_timer_ms(rt_clock, pty_chr_timer, chr);
1021
1022 *_chr = chr;
1023 return 0;
1024 }
1025
1026 static void tty_serial_init(int fd, int speed,
1027 int parity, int data_bits, int stop_bits)
1028 {
1029 struct termios tty;
1030 speed_t spd;
1031
1032 #if 0
1033 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1034 speed, parity, data_bits, stop_bits);
1035 #endif
1036 tcgetattr (fd, &tty);
1037
1038 #define check_speed(val) if (speed <= val) { spd = B##val; break; }
1039 speed = speed * 10 / 11;
1040 do {
1041 check_speed(50);
1042 check_speed(75);
1043 check_speed(110);
1044 check_speed(134);
1045 check_speed(150);
1046 check_speed(200);
1047 check_speed(300);
1048 check_speed(600);
1049 check_speed(1200);
1050 check_speed(1800);
1051 check_speed(2400);
1052 check_speed(4800);
1053 check_speed(9600);
1054 check_speed(19200);
1055 check_speed(38400);
1056 /* Non-Posix values follow. They may be unsupported on some systems. */
1057 check_speed(57600);
1058 check_speed(115200);
1059 #ifdef B230400
1060 check_speed(230400);
1061 #endif
1062 #ifdef B460800
1063 check_speed(460800);
1064 #endif
1065 #ifdef B500000
1066 check_speed(500000);
1067 #endif
1068 #ifdef B576000
1069 check_speed(576000);
1070 #endif
1071 #ifdef B921600
1072 check_speed(921600);
1073 #endif
1074 #ifdef B1000000
1075 check_speed(1000000);
1076 #endif
1077 #ifdef B1152000
1078 check_speed(1152000);
1079 #endif
1080 #ifdef B1500000
1081 check_speed(1500000);
1082 #endif
1083 #ifdef B2000000
1084 check_speed(2000000);
1085 #endif
1086 #ifdef B2500000
1087 check_speed(2500000);
1088 #endif
1089 #ifdef B3000000
1090 check_speed(3000000);
1091 #endif
1092 #ifdef B3500000
1093 check_speed(3500000);
1094 #endif
1095 #ifdef B4000000
1096 check_speed(4000000);
1097 #endif
1098 spd = B115200;
1099 } while (0);
1100
1101 cfsetispeed(&tty, spd);
1102 cfsetospeed(&tty, spd);
1103
1104 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1105 |INLCR|IGNCR|ICRNL|IXON);
1106 tty.c_oflag |= OPOST;
1107 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1108 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1109 switch(data_bits) {
1110 default:
1111 case 8:
1112 tty.c_cflag |= CS8;
1113 break;
1114 case 7:
1115 tty.c_cflag |= CS7;
1116 break;
1117 case 6:
1118 tty.c_cflag |= CS6;
1119 break;
1120 case 5:
1121 tty.c_cflag |= CS5;
1122 break;
1123 }
1124 switch(parity) {
1125 default:
1126 case 'N':
1127 break;
1128 case 'E':
1129 tty.c_cflag |= PARENB;
1130 break;
1131 case 'O':
1132 tty.c_cflag |= PARENB | PARODD;
1133 break;
1134 }
1135 if (stop_bits == 2)
1136 tty.c_cflag |= CSTOPB;
1137
1138 tcsetattr (fd, TCSANOW, &tty);
1139 }
1140
1141 static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1142 {
1143 FDCharDriver *s = chr->opaque;
1144
1145 switch(cmd) {
1146 case CHR_IOCTL_SERIAL_SET_PARAMS:
1147 {
1148 QEMUSerialSetParams *ssp = arg;
1149 tty_serial_init(s->fd_in, ssp->speed, ssp->parity,
1150 ssp->data_bits, ssp->stop_bits);
1151 }
1152 break;
1153 case CHR_IOCTL_SERIAL_SET_BREAK:
1154 {
1155 int enable = *(int *)arg;
1156 if (enable)
1157 tcsendbreak(s->fd_in, 1);
1158 }
1159 break;
1160 case CHR_IOCTL_SERIAL_GET_TIOCM:
1161 {
1162 int sarg = 0;
1163 int *targ = (int *)arg;
1164 ioctl(s->fd_in, TIOCMGET, &sarg);
1165 *targ = 0;
1166 if (sarg & TIOCM_CTS)
1167 *targ |= CHR_TIOCM_CTS;
1168 if (sarg & TIOCM_CAR)
1169 *targ |= CHR_TIOCM_CAR;
1170 if (sarg & TIOCM_DSR)
1171 *targ |= CHR_TIOCM_DSR;
1172 if (sarg & TIOCM_RI)
1173 *targ |= CHR_TIOCM_RI;
1174 if (sarg & TIOCM_DTR)
1175 *targ |= CHR_TIOCM_DTR;
1176 if (sarg & TIOCM_RTS)
1177 *targ |= CHR_TIOCM_RTS;
1178 }
1179 break;
1180 case CHR_IOCTL_SERIAL_SET_TIOCM:
1181 {
1182 int sarg = *(int *)arg;
1183 int targ = 0;
1184 ioctl(s->fd_in, TIOCMGET, &targ);
1185 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1186 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1187 if (sarg & CHR_TIOCM_CTS)
1188 targ |= TIOCM_CTS;
1189 if (sarg & CHR_TIOCM_CAR)
1190 targ |= TIOCM_CAR;
1191 if (sarg & CHR_TIOCM_DSR)
1192 targ |= TIOCM_DSR;
1193 if (sarg & CHR_TIOCM_RI)
1194 targ |= TIOCM_RI;
1195 if (sarg & CHR_TIOCM_DTR)
1196 targ |= TIOCM_DTR;
1197 if (sarg & CHR_TIOCM_RTS)
1198 targ |= TIOCM_RTS;
1199 ioctl(s->fd_in, TIOCMSET, &targ);
1200 }
1201 break;
1202 default:
1203 return -ENOTSUP;
1204 }
1205 return 0;
1206 }
1207
1208 static void qemu_chr_close_tty(CharDriverState *chr)
1209 {
1210 FDCharDriver *s = chr->opaque;
1211 int fd = -1;
1212
1213 if (s) {
1214 fd = s->fd_in;
1215 }
1216
1217 fd_chr_close(chr);
1218
1219 if (fd >= 0) {
1220 close(fd);
1221 }
1222 }
1223
1224 static int qemu_chr_open_tty(QemuOpts *opts, CharDriverState **_chr)
1225 {
1226 const char *filename = qemu_opt_get(opts, "path");
1227 CharDriverState *chr;
1228 int fd;
1229
1230 TFR(fd = qemu_open(filename, O_RDWR | O_NONBLOCK));
1231 if (fd < 0) {
1232 return -errno;
1233 }
1234 tty_serial_init(fd, 115200, 'N', 8, 1);
1235 chr = qemu_chr_open_fd(fd, fd);
1236 chr->chr_ioctl = tty_serial_ioctl;
1237 chr->chr_close = qemu_chr_close_tty;
1238
1239 *_chr = chr;
1240 return 0;
1241 }
1242 #else /* ! __linux__ && ! __sun__ */
1243 static int qemu_chr_open_pty(QemuOpts *opts, CharDriverState **_chr)
1244 {
1245 return -ENOTSUP;
1246 }
1247 #endif /* __linux__ || __sun__ */
1248
1249 #if defined(__linux__)
1250 typedef struct {
1251 int fd;
1252 int mode;
1253 } ParallelCharDriver;
1254
1255 static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1256 {
1257 if (s->mode != mode) {
1258 int m = mode;
1259 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1260 return 0;
1261 s->mode = mode;
1262 }
1263 return 1;
1264 }
1265
1266 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1267 {
1268 ParallelCharDriver *drv = chr->opaque;
1269 int fd = drv->fd;
1270 uint8_t b;
1271
1272 switch(cmd) {
1273 case CHR_IOCTL_PP_READ_DATA:
1274 if (ioctl(fd, PPRDATA, &b) < 0)
1275 return -ENOTSUP;
1276 *(uint8_t *)arg = b;
1277 break;
1278 case CHR_IOCTL_PP_WRITE_DATA:
1279 b = *(uint8_t *)arg;
1280 if (ioctl(fd, PPWDATA, &b) < 0)
1281 return -ENOTSUP;
1282 break;
1283 case CHR_IOCTL_PP_READ_CONTROL:
1284 if (ioctl(fd, PPRCONTROL, &b) < 0)
1285 return -ENOTSUP;
1286 /* Linux gives only the lowest bits, and no way to know data
1287 direction! For better compatibility set the fixed upper
1288 bits. */
1289 *(uint8_t *)arg = b | 0xc0;
1290 break;
1291 case CHR_IOCTL_PP_WRITE_CONTROL:
1292 b = *(uint8_t *)arg;
1293 if (ioctl(fd, PPWCONTROL, &b) < 0)
1294 return -ENOTSUP;
1295 break;
1296 case CHR_IOCTL_PP_READ_STATUS:
1297 if (ioctl(fd, PPRSTATUS, &b) < 0)
1298 return -ENOTSUP;
1299 *(uint8_t *)arg = b;
1300 break;
1301 case CHR_IOCTL_PP_DATA_DIR:
1302 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1303 return -ENOTSUP;
1304 break;
1305 case CHR_IOCTL_PP_EPP_READ_ADDR:
1306 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1307 struct ParallelIOArg *parg = arg;
1308 int n = read(fd, parg->buffer, parg->count);
1309 if (n != parg->count) {
1310 return -EIO;
1311 }
1312 }
1313 break;
1314 case CHR_IOCTL_PP_EPP_READ:
1315 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1316 struct ParallelIOArg *parg = arg;
1317 int n = read(fd, parg->buffer, parg->count);
1318 if (n != parg->count) {
1319 return -EIO;
1320 }
1321 }
1322 break;
1323 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1324 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1325 struct ParallelIOArg *parg = arg;
1326 int n = write(fd, parg->buffer, parg->count);
1327 if (n != parg->count) {
1328 return -EIO;
1329 }
1330 }
1331 break;
1332 case CHR_IOCTL_PP_EPP_WRITE:
1333 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1334 struct ParallelIOArg *parg = arg;
1335 int n = write(fd, parg->buffer, parg->count);
1336 if (n != parg->count) {
1337 return -EIO;
1338 }
1339 }
1340 break;
1341 default:
1342 return -ENOTSUP;
1343 }
1344 return 0;
1345 }
1346
1347 static void pp_close(CharDriverState *chr)
1348 {
1349 ParallelCharDriver *drv = chr->opaque;
1350 int fd = drv->fd;
1351
1352 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1353 ioctl(fd, PPRELEASE);
1354 close(fd);
1355 g_free(drv);
1356 qemu_chr_event(chr, CHR_EVENT_CLOSED);
1357 }
1358
1359 static int qemu_chr_open_pp(QemuOpts *opts, CharDriverState **_chr)
1360 {
1361 const char *filename = qemu_opt_get(opts, "path");
1362 CharDriverState *chr;
1363 ParallelCharDriver *drv;
1364 int fd;
1365
1366 TFR(fd = open(filename, O_RDWR));
1367 if (fd < 0) {
1368 return -errno;
1369 }
1370
1371 if (ioctl(fd, PPCLAIM) < 0) {
1372 close(fd);
1373 return -errno;
1374 }
1375
1376 drv = g_malloc0(sizeof(ParallelCharDriver));
1377 drv->fd = fd;
1378 drv->mode = IEEE1284_MODE_COMPAT;
1379
1380 chr = g_malloc0(sizeof(CharDriverState));
1381 chr->chr_write = null_chr_write;
1382 chr->chr_ioctl = pp_ioctl;
1383 chr->chr_close = pp_close;
1384 chr->opaque = drv;
1385
1386 qemu_chr_generic_open(chr);
1387
1388 *_chr = chr;
1389 return 0;
1390 }
1391 #endif /* __linux__ */
1392
1393 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
1394 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1395 {
1396 int fd = (int)(intptr_t)chr->opaque;
1397 uint8_t b;
1398
1399 switch(cmd) {
1400 case CHR_IOCTL_PP_READ_DATA:
1401 if (ioctl(fd, PPIGDATA, &b) < 0)
1402 return -ENOTSUP;
1403 *(uint8_t *)arg = b;
1404 break;
1405 case CHR_IOCTL_PP_WRITE_DATA:
1406 b = *(uint8_t *)arg;
1407 if (ioctl(fd, PPISDATA, &b) < 0)
1408 return -ENOTSUP;
1409 break;
1410 case CHR_IOCTL_PP_READ_CONTROL:
1411 if (ioctl(fd, PPIGCTRL, &b) < 0)
1412 return -ENOTSUP;
1413 *(uint8_t *)arg = b;
1414 break;
1415 case CHR_IOCTL_PP_WRITE_CONTROL:
1416 b = *(uint8_t *)arg;
1417 if (ioctl(fd, PPISCTRL, &b) < 0)
1418 return -ENOTSUP;
1419 break;
1420 case CHR_IOCTL_PP_READ_STATUS:
1421 if (ioctl(fd, PPIGSTATUS, &b) < 0)
1422 return -ENOTSUP;
1423 *(uint8_t *)arg = b;
1424 break;
1425 default:
1426 return -ENOTSUP;
1427 }
1428 return 0;
1429 }
1430
1431 static int qemu_chr_open_pp(QemuOpts *opts, CharDriverState **_chr)
1432 {
1433 const char *filename = qemu_opt_get(opts, "path");
1434 CharDriverState *chr;
1435 int fd;
1436
1437 fd = qemu_open(filename, O_RDWR);
1438 if (fd < 0) {
1439 return -errno;
1440 }
1441
1442 chr = g_malloc0(sizeof(CharDriverState));
1443 chr->opaque = (void *)(intptr_t)fd;
1444 chr->chr_write = null_chr_write;
1445 chr->chr_ioctl = pp_ioctl;
1446
1447 *_chr = chr;
1448 return 0;
1449 }
1450 #endif
1451
1452 #else /* _WIN32 */
1453
1454 typedef struct {
1455 int max_size;
1456 HANDLE hcom, hrecv, hsend;
1457 OVERLAPPED orecv, osend;
1458 BOOL fpipe;
1459 DWORD len;
1460 } WinCharState;
1461
1462 #define NSENDBUF 2048
1463 #define NRECVBUF 2048
1464 #define MAXCONNECT 1
1465 #define NTIMEOUT 5000
1466
1467 static int win_chr_poll(void *opaque);
1468 static int win_chr_pipe_poll(void *opaque);
1469
1470 static void win_chr_close(CharDriverState *chr)
1471 {
1472 WinCharState *s = chr->opaque;
1473
1474 if (s->hsend) {
1475 CloseHandle(s->hsend);
1476 s->hsend = NULL;
1477 }
1478 if (s->hrecv) {
1479 CloseHandle(s->hrecv);
1480 s->hrecv = NULL;
1481 }
1482 if (s->hcom) {
1483 CloseHandle(s->hcom);
1484 s->hcom = NULL;
1485 }
1486 if (s->fpipe)
1487 qemu_del_polling_cb(win_chr_pipe_poll, chr);
1488 else
1489 qemu_del_polling_cb(win_chr_poll, chr);
1490
1491 qemu_chr_event(chr, CHR_EVENT_CLOSED);
1492 }
1493
1494 static int win_chr_init(CharDriverState *chr, const char *filename)
1495 {
1496 WinCharState *s = chr->opaque;
1497 COMMCONFIG comcfg;
1498 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
1499 COMSTAT comstat;
1500 DWORD size;
1501 DWORD err;
1502
1503 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1504 if (!s->hsend) {
1505 fprintf(stderr, "Failed CreateEvent\n");
1506 goto fail;
1507 }
1508 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1509 if (!s->hrecv) {
1510 fprintf(stderr, "Failed CreateEvent\n");
1511 goto fail;
1512 }
1513
1514 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
1515 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
1516 if (s->hcom == INVALID_HANDLE_VALUE) {
1517 fprintf(stderr, "Failed CreateFile (%lu)\n", GetLastError());
1518 s->hcom = NULL;
1519 goto fail;
1520 }
1521
1522 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
1523 fprintf(stderr, "Failed SetupComm\n");
1524 goto fail;
1525 }
1526
1527 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
1528 size = sizeof(COMMCONFIG);
1529 GetDefaultCommConfig(filename, &comcfg, &size);
1530 comcfg.dcb.DCBlength = sizeof(DCB);
1531 CommConfigDialog(filename, NULL, &comcfg);
1532
1533 if (!SetCommState(s->hcom, &comcfg.dcb)) {
1534 fprintf(stderr, "Failed SetCommState\n");
1535 goto fail;
1536 }
1537
1538 if (!SetCommMask(s->hcom, EV_ERR)) {
1539 fprintf(stderr, "Failed SetCommMask\n");
1540 goto fail;
1541 }
1542
1543 cto.ReadIntervalTimeout = MAXDWORD;
1544 if (!SetCommTimeouts(s->hcom, &cto)) {
1545 fprintf(stderr, "Failed SetCommTimeouts\n");
1546 goto fail;
1547 }
1548
1549 if (!ClearCommError(s->hcom, &err, &comstat)) {
1550 fprintf(stderr, "Failed ClearCommError\n");
1551 goto fail;
1552 }
1553 qemu_add_polling_cb(win_chr_poll, chr);
1554 return 0;
1555
1556 fail:
1557 win_chr_close(chr);
1558 return -1;
1559 }
1560
1561 static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
1562 {
1563 WinCharState *s = chr->opaque;
1564 DWORD len, ret, size, err;
1565
1566 len = len1;
1567 ZeroMemory(&s->osend, sizeof(s->osend));
1568 s->osend.hEvent = s->hsend;
1569 while (len > 0) {
1570 if (s->hsend)
1571 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
1572 else
1573 ret = WriteFile(s->hcom, buf, len, &size, NULL);
1574 if (!ret) {
1575 err = GetLastError();
1576 if (err == ERROR_IO_PENDING) {
1577 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
1578 if (ret) {
1579 buf += size;
1580 len -= size;
1581 } else {
1582 break;
1583 }
1584 } else {
1585 break;
1586 }
1587 } else {
1588 buf += size;
1589 len -= size;
1590 }
1591 }
1592 return len1 - len;
1593 }
1594
1595 static int win_chr_read_poll(CharDriverState *chr)
1596 {
1597 WinCharState *s = chr->opaque;
1598
1599 s->max_size = qemu_chr_be_can_write(chr);
1600 return s->max_size;
1601 }
1602
1603 static void win_chr_readfile(CharDriverState *chr)
1604 {
1605 WinCharState *s = chr->opaque;
1606 int ret, err;
1607 uint8_t buf[READ_BUF_LEN];
1608 DWORD size;
1609
1610 ZeroMemory(&s->orecv, sizeof(s->orecv));
1611 s->orecv.hEvent = s->hrecv;
1612 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
1613 if (!ret) {
1614 err = GetLastError();
1615 if (err == ERROR_IO_PENDING) {
1616 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
1617 }
1618 }
1619
1620 if (size > 0) {
1621 qemu_chr_be_write(chr, buf, size);
1622 }
1623 }
1624
1625 static void win_chr_read(CharDriverState *chr)
1626 {
1627 WinCharState *s = chr->opaque;
1628
1629 if (s->len > s->max_size)
1630 s->len = s->max_size;
1631 if (s->len == 0)
1632 return;
1633
1634 win_chr_readfile(chr);
1635 }
1636
1637 static int win_chr_poll(void *opaque)
1638 {
1639 CharDriverState *chr = opaque;
1640 WinCharState *s = chr->opaque;
1641 COMSTAT status;
1642 DWORD comerr;
1643
1644 ClearCommError(s->hcom, &comerr, &status);
1645 if (status.cbInQue > 0) {
1646 s->len = status.cbInQue;
1647 win_chr_read_poll(chr);
1648 win_chr_read(chr);
1649 return 1;
1650 }
1651 return 0;
1652 }
1653
1654 static int qemu_chr_open_win(QemuOpts *opts, CharDriverState **_chr)
1655 {
1656 const char *filename = qemu_opt_get(opts, "path");
1657 CharDriverState *chr;
1658 WinCharState *s;
1659
1660 chr = g_malloc0(sizeof(CharDriverState));
1661 s = g_malloc0(sizeof(WinCharState));
1662 chr->opaque = s;
1663 chr->chr_write = win_chr_write;
1664 chr->chr_close = win_chr_close;
1665
1666 if (win_chr_init(chr, filename) < 0) {
1667 free(s);
1668 free(chr);
1669 return -EIO;
1670 }
1671 qemu_chr_generic_open(chr);
1672
1673 *_chr = chr;
1674 return 0;
1675 }
1676
1677 static int win_chr_pipe_poll(void *opaque)
1678 {
1679 CharDriverState *chr = opaque;
1680 WinCharState *s = chr->opaque;
1681 DWORD size;
1682
1683 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
1684 if (size > 0) {
1685 s->len = size;
1686 win_chr_read_poll(chr);
1687 win_chr_read(chr);
1688 return 1;
1689 }
1690 return 0;
1691 }
1692
1693 static int win_chr_pipe_init(CharDriverState *chr, const char *filename)
1694 {
1695 WinCharState *s = chr->opaque;
1696 OVERLAPPED ov;
1697 int ret;
1698 DWORD size;
1699 char openname[256];
1700
1701 s->fpipe = TRUE;
1702
1703 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1704 if (!s->hsend) {
1705 fprintf(stderr, "Failed CreateEvent\n");
1706 goto fail;
1707 }
1708 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1709 if (!s->hrecv) {
1710 fprintf(stderr, "Failed CreateEvent\n");
1711 goto fail;
1712 }
1713
1714 snprintf(openname, sizeof(openname), "\\\\.\\pipe\\%s", filename);
1715 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
1716 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
1717 PIPE_WAIT,
1718 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
1719 if (s->hcom == INVALID_HANDLE_VALUE) {
1720 fprintf(stderr, "Failed CreateNamedPipe (%lu)\n", GetLastError());
1721 s->hcom = NULL;
1722 goto fail;
1723 }
1724
1725 ZeroMemory(&ov, sizeof(ov));
1726 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
1727 ret = ConnectNamedPipe(s->hcom, &ov);
1728 if (ret) {
1729 fprintf(stderr, "Failed ConnectNamedPipe\n");
1730 goto fail;
1731 }
1732
1733 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
1734 if (!ret) {
1735 fprintf(stderr, "Failed GetOverlappedResult\n");
1736 if (ov.hEvent) {
1737 CloseHandle(ov.hEvent);
1738 ov.hEvent = NULL;
1739 }
1740 goto fail;
1741 }
1742
1743 if (ov.hEvent) {
1744 CloseHandle(ov.hEvent);
1745 ov.hEvent = NULL;
1746 }
1747 qemu_add_polling_cb(win_chr_pipe_poll, chr);
1748 return 0;
1749
1750 fail:
1751 win_chr_close(chr);
1752 return -1;
1753 }
1754
1755
1756 static int qemu_chr_open_win_pipe(QemuOpts *opts, CharDriverState **_chr)
1757 {
1758 const char *filename = qemu_opt_get(opts, "path");
1759 CharDriverState *chr;
1760 WinCharState *s;
1761
1762 chr = g_malloc0(sizeof(CharDriverState));
1763 s = g_malloc0(sizeof(WinCharState));
1764 chr->opaque = s;
1765 chr->chr_write = win_chr_write;
1766 chr->chr_close = win_chr_close;
1767
1768 if (win_chr_pipe_init(chr, filename) < 0) {
1769 free(s);
1770 free(chr);
1771 return -EIO;
1772 }
1773 qemu_chr_generic_open(chr);
1774
1775 *_chr = chr;
1776 return 0;
1777 }
1778
1779 static int qemu_chr_open_win_file(HANDLE fd_out, CharDriverState **pchr)
1780 {
1781 CharDriverState *chr;
1782 WinCharState *s;
1783
1784 chr = g_malloc0(sizeof(CharDriverState));
1785 s = g_malloc0(sizeof(WinCharState));
1786 s->hcom = fd_out;
1787 chr->opaque = s;
1788 chr->chr_write = win_chr_write;
1789 qemu_chr_generic_open(chr);
1790 *pchr = chr;
1791 return 0;
1792 }
1793
1794 static int qemu_chr_open_win_con(QemuOpts *opts, CharDriverState **chr)
1795 {
1796 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE), chr);
1797 }
1798
1799 static int qemu_chr_open_win_file_out(QemuOpts *opts, CharDriverState **_chr)
1800 {
1801 const char *file_out = qemu_opt_get(opts, "path");
1802 HANDLE fd_out;
1803
1804 fd_out = CreateFile(file_out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
1805 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
1806 if (fd_out == INVALID_HANDLE_VALUE) {
1807 return -EIO;
1808 }
1809
1810 return qemu_chr_open_win_file(fd_out, _chr);
1811 }
1812 #endif /* !_WIN32 */
1813
1814 /***********************************************************/
1815 /* UDP Net console */
1816
1817 typedef struct {
1818 int fd;
1819 uint8_t buf[READ_BUF_LEN];
1820 int bufcnt;
1821 int bufptr;
1822 int max_size;
1823 } NetCharDriver;
1824
1825 static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1826 {
1827 NetCharDriver *s = chr->opaque;
1828
1829 return send(s->fd, (const void *)buf, len, 0);
1830 }
1831
1832 static int udp_chr_read_poll(void *opaque)
1833 {
1834 CharDriverState *chr = opaque;
1835 NetCharDriver *s = chr->opaque;
1836
1837 s->max_size = qemu_chr_be_can_write(chr);
1838
1839 /* If there were any stray characters in the queue process them
1840 * first
1841 */
1842 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
1843 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
1844 s->bufptr++;
1845 s->max_size = qemu_chr_be_can_write(chr);
1846 }
1847 return s->max_size;
1848 }
1849
1850 static void udp_chr_read(void *opaque)
1851 {
1852 CharDriverState *chr = opaque;
1853 NetCharDriver *s = chr->opaque;
1854
1855 if (s->max_size == 0)
1856 return;
1857 s->bufcnt = qemu_recv(s->fd, s->buf, sizeof(s->buf), 0);
1858 s->bufptr = s->bufcnt;
1859 if (s->bufcnt <= 0)
1860 return;
1861
1862 s->bufptr = 0;
1863 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
1864 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
1865 s->bufptr++;
1866 s->max_size = qemu_chr_be_can_write(chr);
1867 }
1868 }
1869
1870 static void udp_chr_update_read_handler(CharDriverState *chr)
1871 {
1872 NetCharDriver *s = chr->opaque;
1873
1874 if (s->fd >= 0) {
1875 qemu_set_fd_handler2(s->fd, udp_chr_read_poll,
1876 udp_chr_read, NULL, chr);
1877 }
1878 }
1879
1880 static void udp_chr_close(CharDriverState *chr)
1881 {
1882 NetCharDriver *s = chr->opaque;
1883 if (s->fd >= 0) {
1884 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
1885 closesocket(s->fd);
1886 }
1887 g_free(s);
1888 qemu_chr_event(chr, CHR_EVENT_CLOSED);
1889 }
1890
1891 static int qemu_chr_open_udp(QemuOpts *opts, CharDriverState **_chr)
1892 {
1893 CharDriverState *chr = NULL;
1894 NetCharDriver *s = NULL;
1895 int fd = -1;
1896 int ret;
1897
1898 chr = g_malloc0(sizeof(CharDriverState));
1899 s = g_malloc0(sizeof(NetCharDriver));
1900
1901 fd = inet_dgram_opts(opts);
1902 if (fd < 0) {
1903 fprintf(stderr, "inet_dgram_opts failed\n");
1904 ret = -errno;
1905 goto return_err;
1906 }
1907
1908 s->fd = fd;
1909 s->bufcnt = 0;
1910 s->bufptr = 0;
1911 chr->opaque = s;
1912 chr->chr_write = udp_chr_write;
1913 chr->chr_update_read_handler = udp_chr_update_read_handler;
1914 chr->chr_close = udp_chr_close;
1915
1916 *_chr = chr;
1917 return 0;
1918
1919 return_err:
1920 g_free(chr);
1921 g_free(s);
1922 if (fd >= 0) {
1923 closesocket(fd);
1924 }
1925 return ret;
1926 }
1927
1928 /***********************************************************/
1929 /* TCP Net console */
1930
1931 typedef struct {
1932 int fd, listen_fd;
1933 int connected;
1934 int max_size;
1935 int do_telnetopt;
1936 int do_nodelay;
1937 int is_unix;
1938 int msgfd;
1939 } TCPCharDriver;
1940
1941 static void tcp_chr_accept(void *opaque);
1942
1943 static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1944 {
1945 TCPCharDriver *s = chr->opaque;
1946 if (s->connected) {
1947 return send_all(s->fd, buf, len);
1948 } else {
1949 /* XXX: indicate an error ? */
1950 return len;
1951 }
1952 }
1953
1954 static int tcp_chr_read_poll(void *opaque)
1955 {
1956 CharDriverState *chr = opaque;
1957 TCPCharDriver *s = chr->opaque;
1958 if (!s->connected)
1959 return 0;
1960 s->max_size = qemu_chr_be_can_write(chr);
1961 return s->max_size;
1962 }
1963
1964 #define IAC 255
1965 #define IAC_BREAK 243
1966 static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
1967 TCPCharDriver *s,
1968 uint8_t *buf, int *size)
1969 {
1970 /* Handle any telnet client's basic IAC options to satisfy char by
1971 * char mode with no echo. All IAC options will be removed from
1972 * the buf and the do_telnetopt variable will be used to track the
1973 * state of the width of the IAC information.
1974 *
1975 * IAC commands come in sets of 3 bytes with the exception of the
1976 * "IAC BREAK" command and the double IAC.
1977 */
1978
1979 int i;
1980 int j = 0;
1981
1982 for (i = 0; i < *size; i++) {
1983 if (s->do_telnetopt > 1) {
1984 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
1985 /* Double IAC means send an IAC */
1986 if (j != i)
1987 buf[j] = buf[i];
1988 j++;
1989 s->do_telnetopt = 1;
1990 } else {
1991 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
1992 /* Handle IAC break commands by sending a serial break */
1993 qemu_chr_event(chr, CHR_EVENT_BREAK);
1994 s->do_telnetopt++;
1995 }
1996 s->do_telnetopt++;
1997 }
1998 if (s->do_telnetopt >= 4) {
1999 s->do_telnetopt = 1;
2000 }
2001 } else {
2002 if ((unsigned char)buf[i] == IAC) {
2003 s->do_telnetopt = 2;
2004 } else {
2005 if (j != i)
2006 buf[j] = buf[i];
2007 j++;
2008 }
2009 }
2010 }
2011 *size = j;
2012 }
2013
2014 static int tcp_get_msgfd(CharDriverState *chr)
2015 {
2016 TCPCharDriver *s = chr->opaque;
2017 int fd = s->msgfd;
2018 s->msgfd = -1;
2019 return fd;
2020 }
2021
2022 #ifndef _WIN32
2023 static void unix_process_msgfd(CharDriverState *chr, struct msghdr *msg)
2024 {
2025 TCPCharDriver *s = chr->opaque;
2026 struct cmsghdr *cmsg;
2027
2028 for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) {
2029 int fd;
2030
2031 if (cmsg->cmsg_len != CMSG_LEN(sizeof(int)) ||
2032 cmsg->cmsg_level != SOL_SOCKET ||
2033 cmsg->cmsg_type != SCM_RIGHTS)
2034 continue;
2035
2036 fd = *((int *)CMSG_DATA(cmsg));
2037 if (fd < 0)
2038 continue;
2039
2040 if (s->msgfd != -1)
2041 close(s->msgfd);
2042 s->msgfd = fd;
2043 }
2044 }
2045
2046 static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2047 {
2048 TCPCharDriver *s = chr->opaque;
2049 struct msghdr msg = { NULL, };
2050 struct iovec iov[1];
2051 union {
2052 struct cmsghdr cmsg;
2053 char control[CMSG_SPACE(sizeof(int))];
2054 } msg_control;
2055 ssize_t ret;
2056
2057 iov[0].iov_base = buf;
2058 iov[0].iov_len = len;
2059
2060 msg.msg_iov = iov;
2061 msg.msg_iovlen = 1;
2062 msg.msg_control = &msg_control;
2063 msg.msg_controllen = sizeof(msg_control);
2064
2065 ret = recvmsg(s->fd, &msg, 0);
2066 if (ret > 0 && s->is_unix)
2067 unix_process_msgfd(chr, &msg);
2068
2069 return ret;
2070 }
2071 #else
2072 static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2073 {
2074 TCPCharDriver *s = chr->opaque;
2075 return qemu_recv(s->fd, buf, len, 0);
2076 }
2077 #endif
2078
2079 static void tcp_chr_read(void *opaque)
2080 {
2081 CharDriverState *chr = opaque;
2082 TCPCharDriver *s = chr->opaque;
2083 uint8_t buf[READ_BUF_LEN];
2084 int len, size;
2085
2086 if (!s->connected || s->max_size <= 0)
2087 return;
2088 len = sizeof(buf);
2089 if (len > s->max_size)
2090 len = s->max_size;
2091 size = tcp_chr_recv(chr, (void *)buf, len);
2092 if (size == 0) {
2093 /* connection closed */
2094 s->connected = 0;
2095 if (s->listen_fd >= 0) {
2096 qemu_set_fd_handler2(s->listen_fd, NULL, tcp_chr_accept, NULL, chr);
2097 }
2098 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2099 closesocket(s->fd);
2100 s->fd = -1;
2101 qemu_chr_event(chr, CHR_EVENT_CLOSED);
2102 } else if (size > 0) {
2103 if (s->do_telnetopt)
2104 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
2105 if (size > 0)
2106 qemu_chr_be_write(chr, buf, size);
2107 }
2108 }
2109
2110 #ifndef _WIN32
2111 CharDriverState *qemu_chr_open_eventfd(int eventfd)
2112 {
2113 return qemu_chr_open_fd(eventfd, eventfd);
2114 }
2115 #endif
2116
2117 static void tcp_chr_connect(void *opaque)
2118 {
2119 CharDriverState *chr = opaque;
2120 TCPCharDriver *s = chr->opaque;
2121
2122 s->connected = 1;
2123 qemu_set_fd_handler2(s->fd, tcp_chr_read_poll,
2124 tcp_chr_read, NULL, chr);
2125 qemu_chr_generic_open(chr);
2126 }
2127
2128 #define IACSET(x,a,b,c) x[0] = a; x[1] = b; x[2] = c;
2129 static void tcp_chr_telnet_init(int fd)
2130 {
2131 char buf[3];
2132 /* Send the telnet negotion to put telnet in binary, no echo, single char mode */
2133 IACSET(buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
2134 send(fd, (char *)buf, 3, 0);
2135 IACSET(buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
2136 send(fd, (char *)buf, 3, 0);
2137 IACSET(buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
2138 send(fd, (char *)buf, 3, 0);
2139 IACSET(buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
2140 send(fd, (char *)buf, 3, 0);
2141 }
2142
2143 static void socket_set_nodelay(int fd)
2144 {
2145 int val = 1;
2146 setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, (char *)&val, sizeof(val));
2147 }
2148
2149 static int tcp_chr_add_client(CharDriverState *chr, int fd)
2150 {
2151 TCPCharDriver *s = chr->opaque;
2152 if (s->fd != -1)
2153 return -1;
2154
2155 socket_set_nonblock(fd);
2156 if (s->do_nodelay)
2157 socket_set_nodelay(fd);
2158 s->fd = fd;
2159 qemu_set_fd_handler2(s->listen_fd, NULL, NULL, NULL, NULL);
2160 tcp_chr_connect(chr);
2161
2162 return 0;
2163 }
2164
2165 static void tcp_chr_accept(void *opaque)
2166 {
2167 CharDriverState *chr = opaque;
2168 TCPCharDriver *s = chr->opaque;
2169 struct sockaddr_in saddr;
2170 #ifndef _WIN32
2171 struct sockaddr_un uaddr;
2172 #endif
2173 struct sockaddr *addr;
2174 socklen_t len;
2175 int fd;
2176
2177 for(;;) {
2178 #ifndef _WIN32
2179 if (s->is_unix) {
2180 len = sizeof(uaddr);
2181 addr = (struct sockaddr *)&uaddr;
2182 } else
2183 #endif
2184 {
2185 len = sizeof(saddr);
2186 addr = (struct sockaddr *)&saddr;
2187 }
2188 fd = qemu_accept(s->listen_fd, addr, &len);
2189 if (fd < 0 && errno != EINTR) {
2190 return;
2191 } else if (fd >= 0) {
2192 if (s->do_telnetopt)
2193 tcp_chr_telnet_init(fd);
2194 break;
2195 }
2196 }
2197 if (tcp_chr_add_client(chr, fd) < 0)
2198 close(fd);
2199 }
2200
2201 static void tcp_chr_close(CharDriverState *chr)
2202 {
2203 TCPCharDriver *s = chr->opaque;
2204 if (s->fd >= 0) {
2205 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2206 closesocket(s->fd);
2207 }
2208 if (s->listen_fd >= 0) {
2209 qemu_set_fd_handler2(s->listen_fd, NULL, NULL, NULL, NULL);
2210 closesocket(s->listen_fd);
2211 }
2212 g_free(s);
2213 qemu_chr_event(chr, CHR_EVENT_CLOSED);
2214 }
2215
2216 static int qemu_chr_open_socket(QemuOpts *opts, CharDriverState **_chr)
2217 {
2218 CharDriverState *chr = NULL;
2219 TCPCharDriver *s = NULL;
2220 int fd = -1;
2221 int is_listen;
2222 int is_waitconnect;
2223 int do_nodelay;
2224 int is_unix;
2225 int is_telnet;
2226 int ret;
2227
2228 is_listen = qemu_opt_get_bool(opts, "server", 0);
2229 is_waitconnect = qemu_opt_get_bool(opts, "wait", 1);
2230 is_telnet = qemu_opt_get_bool(opts, "telnet", 0);
2231 do_nodelay = !qemu_opt_get_bool(opts, "delay", 1);
2232 is_unix = qemu_opt_get(opts, "path") != NULL;
2233 if (!is_listen)
2234 is_waitconnect = 0;
2235
2236 chr = g_malloc0(sizeof(CharDriverState));
2237 s = g_malloc0(sizeof(TCPCharDriver));
2238
2239 if (is_unix) {
2240 if (is_listen) {
2241 fd = unix_listen_opts(opts);
2242 } else {
2243 fd = unix_connect_opts(opts);
2244 }
2245 } else {
2246 if (is_listen) {
2247 fd = inet_listen_opts(opts, 0);
2248 } else {
2249 fd = inet_connect_opts(opts);
2250 }
2251 }
2252 if (fd < 0) {
2253 ret = -errno;
2254 goto fail;
2255 }
2256
2257 if (!is_waitconnect)
2258 socket_set_nonblock(fd);
2259
2260 s->connected = 0;
2261 s->fd = -1;
2262 s->listen_fd = -1;
2263 s->msgfd = -1;
2264 s->is_unix = is_unix;
2265 s->do_nodelay = do_nodelay && !is_unix;
2266
2267 chr->opaque = s;
2268 chr->chr_write = tcp_chr_write;
2269 chr->chr_close = tcp_chr_close;
2270 chr->get_msgfd = tcp_get_msgfd;
2271 chr->chr_add_client = tcp_chr_add_client;
2272
2273 if (is_listen) {
2274 s->listen_fd = fd;
2275 qemu_set_fd_handler2(s->listen_fd, NULL, tcp_chr_accept, NULL, chr);
2276 if (is_telnet)
2277 s->do_telnetopt = 1;
2278
2279 } else {
2280 s->connected = 1;
2281 s->fd = fd;
2282 socket_set_nodelay(fd);
2283 tcp_chr_connect(chr);
2284 }
2285
2286 /* for "info chardev" monitor command */
2287 chr->filename = g_malloc(256);
2288 if (is_unix) {
2289 snprintf(chr->filename, 256, "unix:%s%s",
2290 qemu_opt_get(opts, "path"),
2291 qemu_opt_get_bool(opts, "server", 0) ? ",server" : "");
2292 } else if (is_telnet) {
2293 snprintf(chr->filename, 256, "telnet:%s:%s%s",
2294 qemu_opt_get(opts, "host"), qemu_opt_get(opts, "port"),
2295 qemu_opt_get_bool(opts, "server", 0) ? ",server" : "");
2296 } else {
2297 snprintf(chr->filename, 256, "tcp:%s:%s%s",
2298 qemu_opt_get(opts, "host"), qemu_opt_get(opts, "port"),
2299 qemu_opt_get_bool(opts, "server", 0) ? ",server" : "");
2300 }
2301
2302 if (is_listen && is_waitconnect) {
2303 printf("QEMU waiting for connection on: %s\n",
2304 chr->filename);
2305 tcp_chr_accept(chr);
2306 socket_set_nonblock(s->listen_fd);
2307 }
2308
2309 *_chr = chr;
2310 return 0;
2311
2312 fail:
2313 if (fd >= 0)
2314 closesocket(fd);
2315 g_free(s);
2316 g_free(chr);
2317 return ret;
2318 }
2319
2320 /***********************************************************/
2321 /* Memory chardev */
2322 typedef struct {
2323 size_t outbuf_size;
2324 size_t outbuf_capacity;
2325 uint8_t *outbuf;
2326 } MemoryDriver;
2327
2328 static int mem_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2329 {
2330 MemoryDriver *d = chr->opaque;
2331
2332 /* TODO: the QString implementation has the same code, we should
2333 * introduce a generic way to do this in cutils.c */
2334 if (d->outbuf_capacity < d->outbuf_size + len) {
2335 /* grow outbuf */
2336 d->outbuf_capacity += len;
2337 d->outbuf_capacity *= 2;
2338 d->outbuf = g_realloc(d->outbuf, d->outbuf_capacity);
2339 }
2340
2341 memcpy(d->outbuf + d->outbuf_size, buf, len);
2342 d->outbuf_size += len;
2343
2344 return len;
2345 }
2346
2347 void qemu_chr_init_mem(CharDriverState *chr)
2348 {
2349 MemoryDriver *d;
2350
2351 d = g_malloc(sizeof(*d));
2352 d->outbuf_size = 0;
2353 d->outbuf_capacity = 4096;
2354 d->outbuf = g_malloc0(d->outbuf_capacity);
2355
2356 memset(chr, 0, sizeof(*chr));
2357 chr->opaque = d;
2358 chr->chr_write = mem_chr_write;
2359 }
2360
2361 QString *qemu_chr_mem_to_qs(CharDriverState *chr)
2362 {
2363 MemoryDriver *d = chr->opaque;
2364 return qstring_from_substr((char *) d->outbuf, 0, d->outbuf_size - 1);
2365 }
2366
2367 /* NOTE: this driver can not be closed with qemu_chr_delete()! */
2368 void qemu_chr_close_mem(CharDriverState *chr)
2369 {
2370 MemoryDriver *d = chr->opaque;
2371
2372 g_free(d->outbuf);
2373 g_free(chr->opaque);
2374 chr->opaque = NULL;
2375 chr->chr_write = NULL;
2376 }
2377
2378 size_t qemu_chr_mem_osize(const CharDriverState *chr)
2379 {
2380 const MemoryDriver *d = chr->opaque;
2381 return d->outbuf_size;
2382 }
2383
2384 QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
2385 {
2386 char host[65], port[33], width[8], height[8];
2387 int pos;
2388 const char *p;
2389 QemuOpts *opts;
2390
2391 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1);
2392 if (NULL == opts)
2393 return NULL;
2394
2395 if (strstart(filename, "mon:", &p)) {
2396 filename = p;
2397 qemu_opt_set(opts, "mux", "on");
2398 }
2399
2400 if (strcmp(filename, "null") == 0 ||
2401 strcmp(filename, "pty") == 0 ||
2402 strcmp(filename, "msmouse") == 0 ||
2403 strcmp(filename, "braille") == 0 ||
2404 strcmp(filename, "stdio") == 0) {
2405 qemu_opt_set(opts, "backend", filename);
2406 return opts;
2407 }
2408 if (strstart(filename, "vc", &p)) {
2409 qemu_opt_set(opts, "backend", "vc");
2410 if (*p == ':') {
2411 if (sscanf(p+1, "%8[0-9]x%8[0-9]", width, height) == 2) {
2412 /* pixels */
2413 qemu_opt_set(opts, "width", width);
2414 qemu_opt_set(opts, "height", height);
2415 } else if (sscanf(p+1, "%8[0-9]Cx%8[0-9]C", width, height) == 2) {
2416 /* chars */
2417 qemu_opt_set(opts, "cols", width);
2418 qemu_opt_set(opts, "rows", height);
2419 } else {
2420 goto fail;
2421 }
2422 }
2423 return opts;
2424 }
2425 if (strcmp(filename, "con:") == 0) {
2426 qemu_opt_set(opts, "backend", "console");
2427 return opts;
2428 }
2429 if (strstart(filename, "COM", NULL)) {
2430 qemu_opt_set(opts, "backend", "serial");
2431 qemu_opt_set(opts, "path", filename);
2432 return opts;
2433 }
2434 if (strstart(filename, "file:", &p)) {
2435 qemu_opt_set(opts, "backend", "file");
2436 qemu_opt_set(opts, "path", p);
2437 return opts;
2438 }
2439 if (strstart(filename, "pipe:", &p)) {
2440 qemu_opt_set(opts, "backend", "pipe");
2441 qemu_opt_set(opts, "path", p);
2442 return opts;
2443 }
2444 if (strstart(filename, "tcp:", &p) ||
2445 strstart(filename, "telnet:", &p)) {
2446 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
2447 host[0] = 0;
2448 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
2449 goto fail;
2450 }
2451 qemu_opt_set(opts, "backend", "socket");
2452 qemu_opt_set(opts, "host", host);
2453 qemu_opt_set(opts, "port", port);
2454 if (p[pos] == ',') {
2455 if (qemu_opts_do_parse(opts, p+pos+1, NULL) != 0)
2456 goto fail;
2457 }
2458 if (strstart(filename, "telnet:", &p))
2459 qemu_opt_set(opts, "telnet", "on");
2460 return opts;
2461 }
2462 if (strstart(filename, "udp:", &p)) {
2463 qemu_opt_set(opts, "backend", "udp");
2464 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
2465 host[0] = 0;
2466 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
2467 goto fail;
2468 }
2469 }
2470 qemu_opt_set(opts, "host", host);
2471 qemu_opt_set(opts, "port", port);
2472 if (p[pos] == '@') {
2473 p += pos + 1;
2474 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
2475 host[0] = 0;
2476 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
2477 goto fail;
2478 }
2479 }
2480 qemu_opt_set(opts, "localaddr", host);
2481 qemu_opt_set(opts, "localport", port);
2482 }
2483 return opts;
2484 }
2485 if (strstart(filename, "unix:", &p)) {
2486 qemu_opt_set(opts, "backend", "socket");
2487 if (qemu_opts_do_parse(opts, p, "path") != 0)
2488 goto fail;
2489 return opts;
2490 }
2491 if (strstart(filename, "/dev/parport", NULL) ||
2492 strstart(filename, "/dev/ppi", NULL)) {
2493 qemu_opt_set(opts, "backend", "parport");
2494 qemu_opt_set(opts, "path", filename);
2495 return opts;
2496 }
2497 if (strstart(filename, "/dev/", NULL)) {
2498 qemu_opt_set(opts, "backend", "tty");
2499 qemu_opt_set(opts, "path", filename);
2500 return opts;
2501 }
2502
2503 fail:
2504 qemu_opts_del(opts);
2505 return NULL;
2506 }
2507
2508 static const struct {
2509 const char *name;
2510 int (*open)(QemuOpts *opts, CharDriverState **chr);
2511 } backend_table[] = {
2512 { .name = "null", .open = qemu_chr_open_null },
2513 { .name = "socket", .open = qemu_chr_open_socket },
2514 { .name = "udp", .open = qemu_chr_open_udp },
2515 { .name = "msmouse", .open = qemu_chr_open_msmouse },
2516 { .name = "vc", .open = text_console_init },
2517 #ifdef _WIN32
2518 { .name = "file", .open = qemu_chr_open_win_file_out },
2519 { .name = "pipe", .open = qemu_chr_open_win_pipe },
2520 { .name = "console", .open = qemu_chr_open_win_con },
2521 { .name = "serial", .open = qemu_chr_open_win },
2522 #else
2523 { .name = "file", .open = qemu_chr_open_file_out },
2524 { .name = "pipe", .open = qemu_chr_open_pipe },
2525 { .name = "pty", .open = qemu_chr_open_pty },
2526 { .name = "stdio", .open = qemu_chr_open_stdio },
2527 #endif
2528 #ifdef CONFIG_BRLAPI
2529 { .name = "braille", .open = chr_baum_init },
2530 #endif
2531 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
2532 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
2533 || defined(__FreeBSD_kernel__)
2534 { .name = "tty", .open = qemu_chr_open_tty },
2535 #endif
2536 #if defined(__linux__) || defined(__FreeBSD__) || defined(__DragonFly__) \
2537 || defined(__FreeBSD_kernel__)
2538 { .name = "parport", .open = qemu_chr_open_pp },
2539 #endif
2540 #ifdef CONFIG_SPICE
2541 { .name = "spicevmc", .open = qemu_chr_open_spice },
2542 #endif
2543 };
2544
2545 CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
2546 void (*init)(struct CharDriverState *s))
2547 {
2548 CharDriverState *chr;
2549 int i;
2550 int ret;
2551
2552 if (qemu_opts_id(opts) == NULL) {
2553 fprintf(stderr, "chardev: no id specified\n");
2554 return NULL;
2555 }
2556
2557 if (qemu_opt_get(opts, "backend") == NULL) {
2558 fprintf(stderr, "chardev: \"%s\" missing backend\n",
2559 qemu_opts_id(opts));
2560 return NULL;
2561 }
2562 for (i = 0; i < ARRAY_SIZE(backend_table); i++) {
2563 if (strcmp(backend_table[i].name, qemu_opt_get(opts, "backend")) == 0)
2564 break;
2565 }
2566 if (i == ARRAY_SIZE(backend_table)) {
2567 fprintf(stderr, "chardev: backend \"%s\" not found\n",
2568 qemu_opt_get(opts, "backend"));
2569 return NULL;
2570 }
2571
2572 ret = backend_table[i].open(opts, &chr);
2573 if (ret < 0) {
2574 fprintf(stderr, "chardev: opening backend \"%s\" failed: %s\n",
2575 qemu_opt_get(opts, "backend"), strerror(-ret));
2576 return NULL;
2577 }
2578
2579 if (!chr->filename)
2580 chr->filename = g_strdup(qemu_opt_get(opts, "backend"));
2581 chr->init = init;
2582 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
2583
2584 if (qemu_opt_get_bool(opts, "mux", 0)) {
2585 CharDriverState *base = chr;
2586 int len = strlen(qemu_opts_id(opts)) + 6;
2587 base->label = g_malloc(len);
2588 snprintf(base->label, len, "%s-base", qemu_opts_id(opts));
2589 chr = qemu_chr_open_mux(base);
2590 chr->filename = base->filename;
2591 chr->avail_connections = MAX_MUX;
2592 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
2593 } else {
2594 chr->avail_connections = 1;
2595 }
2596 chr->label = g_strdup(qemu_opts_id(opts));
2597 return chr;
2598 }
2599
2600 CharDriverState *qemu_chr_new(const char *label, const char *filename, void (*init)(struct CharDriverState *s))
2601 {
2602 const char *p;
2603 CharDriverState *chr;
2604 QemuOpts *opts;
2605
2606 if (strstart(filename, "chardev:", &p)) {
2607 return qemu_chr_find(p);
2608 }
2609
2610 opts = qemu_chr_parse_compat(label, filename);
2611 if (!opts)
2612 return NULL;
2613
2614 chr = qemu_chr_new_from_opts(opts, init);
2615 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
2616 monitor_init(chr, MONITOR_USE_READLINE);
2617 }
2618 qemu_opts_del(opts);
2619 return chr;
2620 }
2621
2622 void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
2623 {
2624 if (chr->chr_set_echo) {
2625 chr->chr_set_echo(chr, echo);
2626 }
2627 }
2628
2629 void qemu_chr_fe_open(struct CharDriverState *chr)
2630 {
2631 if (chr->chr_guest_open) {
2632 chr->chr_guest_open(chr);
2633 }
2634 }
2635
2636 void qemu_chr_fe_close(struct CharDriverState *chr)
2637 {
2638 if (chr->chr_guest_close) {
2639 chr->chr_guest_close(chr);
2640 }
2641 }
2642
2643 void qemu_chr_delete(CharDriverState *chr)
2644 {
2645 QTAILQ_REMOVE(&chardevs, chr, next);
2646 if (chr->chr_close)
2647 chr->chr_close(chr);
2648 g_free(chr->filename);
2649 g_free(chr->label);
2650 g_free(chr);
2651 }
2652
2653 static void qemu_chr_qlist_iter(QObject *obj, void *opaque)
2654 {
2655 QDict *chr_dict;
2656 Monitor *mon = opaque;
2657
2658 chr_dict = qobject_to_qdict(obj);
2659 monitor_printf(mon, "%s: filename=%s\n", qdict_get_str(chr_dict, "label"),
2660 qdict_get_str(chr_dict, "filename"));
2661 }
2662
2663 void qemu_chr_info_print(Monitor *mon, const QObject *ret_data)
2664 {
2665 qlist_iter(qobject_to_qlist(ret_data), qemu_chr_qlist_iter, mon);
2666 }
2667
2668 void qemu_chr_info(Monitor *mon, QObject **ret_data)
2669 {
2670 QList *chr_list;
2671 CharDriverState *chr;
2672
2673 chr_list = qlist_new();
2674
2675 QTAILQ_FOREACH(chr, &chardevs, next) {
2676 QObject *obj = qobject_from_jsonf("{ 'label': %s, 'filename': %s }",
2677 chr->label, chr->filename);
2678 qlist_append_obj(chr_list, obj);
2679 }
2680
2681 *ret_data = QOBJECT(chr_list);
2682 }
2683
2684 CharDriverState *qemu_chr_find(const char *name)
2685 {
2686 CharDriverState *chr;
2687
2688 QTAILQ_FOREACH(chr, &chardevs, next) {
2689 if (strcmp(chr->label, name) != 0)
2690 continue;
2691 return chr;
2692 }
2693 return NULL;
2694 }