4 * Copyright (c) 2003-2005 Fabrice Bellard
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
34 #include <sys/times.h>
39 #include <sys/ioctl.h>
40 #include <sys/socket.h>
41 #include <netinet/in.h>
51 #include <linux/if_tun.h>
54 #include <linux/rtc.h>
55 #include <linux/ppdev.h>
59 #if defined(CONFIG_SLIRP)
65 #include <sys/timeb.h>
69 #define getopt_long_only getopt_long
70 #define memalign(align, size) malloc(size)
77 #endif /* CONFIG_SDL */
81 #define main qemu_main
82 #endif /* CONFIG_COCOA */
88 #define DEFAULT_NETWORK_SCRIPT "/etc/qemu-ifup"
90 //#define DEBUG_UNUSED_IOPORT
91 //#define DEBUG_IOPORT
93 #if !defined(CONFIG_SOFTMMU)
94 #define PHYS_RAM_MAX_SIZE (256 * 1024 * 1024)
96 #define PHYS_RAM_MAX_SIZE (2047 * 1024 * 1024)
100 #define DEFAULT_RAM_SIZE 144
102 #define DEFAULT_RAM_SIZE 128
105 #define GUI_REFRESH_INTERVAL 30
107 /* XXX: use a two level table to limit memory usage */
108 #define MAX_IOPORTS 65536
110 const char *bios_dir = CONFIG_QEMU_SHAREDIR;
111 char phys_ram_file[1024];
112 void *ioport_opaque[MAX_IOPORTS];
113 IOPortReadFunc *ioport_read_table[3][MAX_IOPORTS];
114 IOPortWriteFunc *ioport_write_table[3][MAX_IOPORTS];
115 BlockDriverState *bs_table[MAX_DISKS], *fd_table[MAX_FD];
118 static DisplayState display_state;
120 const char* keyboard_layout = NULL;
121 int64_t ticks_per_sec;
122 int boot_device = 'c';
124 int pit_min_timer_count = 0;
126 NICInfo nd_table[MAX_NICS];
127 QEMUTimer *gui_timer;
130 int cirrus_vga_enabled = 1;
132 int graphic_width = 1024;
133 int graphic_height = 768;
135 int graphic_width = 800;
136 int graphic_height = 600;
138 int graphic_depth = 15;
140 CharDriverState *serial_hds[MAX_SERIAL_PORTS];
141 CharDriverState *parallel_hds[MAX_PARALLEL_PORTS];
143 int win2k_install_hack = 0;
146 USBPort *vm_usb_ports[MAX_VM_USB_PORTS];
147 USBDevice *vm_usb_hub;
148 static VLANState *first_vlan;
150 #if defined(TARGET_SPARC)
152 #elif defined(TARGET_I386)
158 /***********************************************************/
159 /* x86 ISA bus support */
161 target_phys_addr_t isa_mem_base = 0;
164 uint32_t default_ioport_readb(void *opaque, uint32_t address)
166 #ifdef DEBUG_UNUSED_IOPORT
167 fprintf(stderr, "inb: port=0x%04x\n", address);
172 void default_ioport_writeb(void *opaque, uint32_t address, uint32_t data)
174 #ifdef DEBUG_UNUSED_IOPORT
175 fprintf(stderr, "outb: port=0x%04x data=0x%02x\n", address, data);
179 /* default is to make two byte accesses */
180 uint32_t default_ioport_readw(void *opaque, uint32_t address)
183 data = ioport_read_table[0][address](ioport_opaque[address], address);
184 address = (address + 1) & (MAX_IOPORTS - 1);
185 data |= ioport_read_table[0][address](ioport_opaque[address], address) << 8;
189 void default_ioport_writew(void *opaque, uint32_t address, uint32_t data)
191 ioport_write_table[0][address](ioport_opaque[address], address, data & 0xff);
192 address = (address + 1) & (MAX_IOPORTS - 1);
193 ioport_write_table[0][address](ioport_opaque[address], address, (data >> 8) & 0xff);
196 uint32_t default_ioport_readl(void *opaque, uint32_t address)
198 #ifdef DEBUG_UNUSED_IOPORT
199 fprintf(stderr, "inl: port=0x%04x\n", address);
204 void default_ioport_writel(void *opaque, uint32_t address, uint32_t data)
206 #ifdef DEBUG_UNUSED_IOPORT
207 fprintf(stderr, "outl: port=0x%04x data=0x%02x\n", address, data);
211 void init_ioports(void)
215 for(i = 0; i < MAX_IOPORTS; i++) {
216 ioport_read_table[0][i] = default_ioport_readb;
217 ioport_write_table[0][i] = default_ioport_writeb;
218 ioport_read_table[1][i] = default_ioport_readw;
219 ioport_write_table[1][i] = default_ioport_writew;
220 ioport_read_table[2][i] = default_ioport_readl;
221 ioport_write_table[2][i] = default_ioport_writel;
225 /* size is the word size in byte */
226 int register_ioport_read(int start, int length, int size,
227 IOPortReadFunc *func, void *opaque)
233 } else if (size == 2) {
235 } else if (size == 4) {
238 hw_error("register_ioport_read: invalid size");
241 for(i = start; i < start + length; i += size) {
242 ioport_read_table[bsize][i] = func;
243 if (ioport_opaque[i] != NULL && ioport_opaque[i] != opaque)
244 hw_error("register_ioport_read: invalid opaque");
245 ioport_opaque[i] = opaque;
250 /* size is the word size in byte */
251 int register_ioport_write(int start, int length, int size,
252 IOPortWriteFunc *func, void *opaque)
258 } else if (size == 2) {
260 } else if (size == 4) {
263 hw_error("register_ioport_write: invalid size");
266 for(i = start; i < start + length; i += size) {
267 ioport_write_table[bsize][i] = func;
268 if (ioport_opaque[i] != NULL && ioport_opaque[i] != opaque)
269 hw_error("register_ioport_read: invalid opaque");
270 ioport_opaque[i] = opaque;
275 void isa_unassign_ioport(int start, int length)
279 for(i = start; i < start + length; i++) {
280 ioport_read_table[0][i] = default_ioport_readb;
281 ioport_read_table[1][i] = default_ioport_readw;
282 ioport_read_table[2][i] = default_ioport_readl;
284 ioport_write_table[0][i] = default_ioport_writeb;
285 ioport_write_table[1][i] = default_ioport_writew;
286 ioport_write_table[2][i] = default_ioport_writel;
290 /***********************************************************/
292 void pstrcpy(char *buf, int buf_size, const char *str)
302 if (c == 0 || q >= buf + buf_size - 1)
309 /* strcat and truncate. */
310 char *pstrcat(char *buf, int buf_size, const char *s)
315 pstrcpy(buf + len, buf_size - len, s);
319 int strstart(const char *str, const char *val, const char **ptr)
335 /* return the size or -1 if error */
336 int get_image_size(const char *filename)
339 fd = open(filename, O_RDONLY | O_BINARY);
342 size = lseek(fd, 0, SEEK_END);
347 /* return the size or -1 if error */
348 int load_image(const char *filename, uint8_t *addr)
351 fd = open(filename, O_RDONLY | O_BINARY);
354 size = lseek(fd, 0, SEEK_END);
355 lseek(fd, 0, SEEK_SET);
356 if (read(fd, addr, size) != size) {
364 void cpu_outb(CPUState *env, int addr, int val)
367 if (loglevel & CPU_LOG_IOPORT)
368 fprintf(logfile, "outb: %04x %02x\n", addr, val);
370 ioport_write_table[0][addr](ioport_opaque[addr], addr, val);
373 env->last_io_time = cpu_get_time_fast();
377 void cpu_outw(CPUState *env, int addr, int val)
380 if (loglevel & CPU_LOG_IOPORT)
381 fprintf(logfile, "outw: %04x %04x\n", addr, val);
383 ioport_write_table[1][addr](ioport_opaque[addr], addr, val);
386 env->last_io_time = cpu_get_time_fast();
390 void cpu_outl(CPUState *env, int addr, int val)
393 if (loglevel & CPU_LOG_IOPORT)
394 fprintf(logfile, "outl: %04x %08x\n", addr, val);
396 ioport_write_table[2][addr](ioport_opaque[addr], addr, val);
399 env->last_io_time = cpu_get_time_fast();
403 int cpu_inb(CPUState *env, int addr)
406 val = ioport_read_table[0][addr](ioport_opaque[addr], addr);
408 if (loglevel & CPU_LOG_IOPORT)
409 fprintf(logfile, "inb : %04x %02x\n", addr, val);
413 env->last_io_time = cpu_get_time_fast();
418 int cpu_inw(CPUState *env, int addr)
421 val = ioport_read_table[1][addr](ioport_opaque[addr], addr);
423 if (loglevel & CPU_LOG_IOPORT)
424 fprintf(logfile, "inw : %04x %04x\n", addr, val);
428 env->last_io_time = cpu_get_time_fast();
433 int cpu_inl(CPUState *env, int addr)
436 val = ioport_read_table[2][addr](ioport_opaque[addr], addr);
438 if (loglevel & CPU_LOG_IOPORT)
439 fprintf(logfile, "inl : %04x %08x\n", addr, val);
443 env->last_io_time = cpu_get_time_fast();
448 /***********************************************************/
449 void hw_error(const char *fmt, ...)
455 fprintf(stderr, "qemu: hardware error: ");
456 vfprintf(stderr, fmt, ap);
457 fprintf(stderr, "\n");
458 for(env = first_cpu; env != NULL; env = env->next_cpu) {
459 fprintf(stderr, "CPU #%d:\n", env->cpu_index);
461 cpu_dump_state(env, stderr, fprintf, X86_DUMP_FPU);
463 cpu_dump_state(env, stderr, fprintf, 0);
470 /***********************************************************/
473 static QEMUPutKBDEvent *qemu_put_kbd_event;
474 static void *qemu_put_kbd_event_opaque;
475 static QEMUPutMouseEvent *qemu_put_mouse_event;
476 static void *qemu_put_mouse_event_opaque;
478 void qemu_add_kbd_event_handler(QEMUPutKBDEvent *func, void *opaque)
480 qemu_put_kbd_event_opaque = opaque;
481 qemu_put_kbd_event = func;
484 void qemu_add_mouse_event_handler(QEMUPutMouseEvent *func, void *opaque)
486 qemu_put_mouse_event_opaque = opaque;
487 qemu_put_mouse_event = func;
490 void kbd_put_keycode(int keycode)
492 if (qemu_put_kbd_event) {
493 qemu_put_kbd_event(qemu_put_kbd_event_opaque, keycode);
497 void kbd_mouse_event(int dx, int dy, int dz, int buttons_state)
499 if (qemu_put_mouse_event) {
500 qemu_put_mouse_event(qemu_put_mouse_event_opaque,
501 dx, dy, dz, buttons_state);
505 /***********************************************************/
508 #if defined(__powerpc__)
510 static inline uint32_t get_tbl(void)
513 asm volatile("mftb %0" : "=r" (tbl));
517 static inline uint32_t get_tbu(void)
520 asm volatile("mftbu %0" : "=r" (tbl));
524 int64_t cpu_get_real_ticks(void)
527 /* NOTE: we test if wrapping has occurred */
533 return ((int64_t)h << 32) | l;
536 #elif defined(__i386__)
538 int64_t cpu_get_real_ticks(void)
541 asm volatile ("rdtsc" : "=A" (val));
545 #elif defined(__x86_64__)
547 int64_t cpu_get_real_ticks(void)
551 asm volatile("rdtsc" : "=a" (low), "=d" (high));
558 #elif defined(__ia64)
560 int64_t cpu_get_real_ticks(void)
563 asm volatile ("mov %0 = ar.itc" : "=r"(val) :: "memory");
567 #elif defined(__s390__)
569 int64_t cpu_get_real_ticks(void)
572 asm volatile("stck 0(%1)" : "=m" (val) : "a" (&val) : "cc");
577 #error unsupported CPU
580 static int64_t cpu_ticks_offset;
581 static int cpu_ticks_enabled;
583 static inline int64_t cpu_get_ticks(void)
585 if (!cpu_ticks_enabled) {
586 return cpu_ticks_offset;
588 return cpu_get_real_ticks() + cpu_ticks_offset;
592 /* enable cpu_get_ticks() */
593 void cpu_enable_ticks(void)
595 if (!cpu_ticks_enabled) {
596 cpu_ticks_offset -= cpu_get_real_ticks();
597 cpu_ticks_enabled = 1;
601 /* disable cpu_get_ticks() : the clock is stopped. You must not call
602 cpu_get_ticks() after that. */
603 void cpu_disable_ticks(void)
605 if (cpu_ticks_enabled) {
606 cpu_ticks_offset = cpu_get_ticks();
607 cpu_ticks_enabled = 0;
611 static int64_t get_clock(void)
616 return ((int64_t)tb.time * 1000 + (int64_t)tb.millitm) * 1000;
619 gettimeofday(&tv, NULL);
620 return tv.tv_sec * 1000000LL + tv.tv_usec;
624 void cpu_calibrate_ticks(void)
629 ticks = cpu_get_real_ticks();
635 usec = get_clock() - usec;
636 ticks = cpu_get_real_ticks() - ticks;
637 ticks_per_sec = (ticks * 1000000LL + (usec >> 1)) / usec;
640 /* compute with 96 bit intermediate result: (a*b)/c */
641 uint64_t muldiv64(uint64_t a, uint32_t b, uint32_t c)
646 #ifdef WORDS_BIGENDIAN
656 rl = (uint64_t)u.l.low * (uint64_t)b;
657 rh = (uint64_t)u.l.high * (uint64_t)b;
660 res.l.low = (((rh % c) << 32) + (rl & 0xffffffff)) / c;
664 #define QEMU_TIMER_REALTIME 0
665 #define QEMU_TIMER_VIRTUAL 1
669 /* XXX: add frequency */
677 struct QEMUTimer *next;
683 static QEMUTimer *active_timers[2];
685 static MMRESULT timerID;
687 /* frequency of the times() clock tick */
688 static int timer_freq;
691 QEMUClock *qemu_new_clock(int type)
694 clock = qemu_mallocz(sizeof(QEMUClock));
701 QEMUTimer *qemu_new_timer(QEMUClock *clock, QEMUTimerCB *cb, void *opaque)
705 ts = qemu_mallocz(sizeof(QEMUTimer));
712 void qemu_free_timer(QEMUTimer *ts)
717 /* stop a timer, but do not dealloc it */
718 void qemu_del_timer(QEMUTimer *ts)
722 /* NOTE: this code must be signal safe because
723 qemu_timer_expired() can be called from a signal. */
724 pt = &active_timers[ts->clock->type];
737 /* modify the current timer so that it will be fired when current_time
738 >= expire_time. The corresponding callback will be called. */
739 void qemu_mod_timer(QEMUTimer *ts, int64_t expire_time)
745 /* add the timer in the sorted list */
746 /* NOTE: this code must be signal safe because
747 qemu_timer_expired() can be called from a signal. */
748 pt = &active_timers[ts->clock->type];
753 if (t->expire_time > expire_time)
757 ts->expire_time = expire_time;
762 int qemu_timer_pending(QEMUTimer *ts)
765 for(t = active_timers[ts->clock->type]; t != NULL; t = t->next) {
772 static inline int qemu_timer_expired(QEMUTimer *timer_head, int64_t current_time)
776 return (timer_head->expire_time <= current_time);
779 static void qemu_run_timers(QEMUTimer **ptimer_head, int64_t current_time)
785 if (!ts || ts->expire_time > current_time)
787 /* remove timer from the list before calling the callback */
788 *ptimer_head = ts->next;
791 /* run the callback (the timer list can be modified) */
796 int64_t qemu_get_clock(QEMUClock *clock)
798 switch(clock->type) {
799 case QEMU_TIMER_REALTIME:
801 return GetTickCount();
806 /* Note that using gettimeofday() is not a good solution
807 for timers because its value change when the date is
809 if (timer_freq == 100) {
810 return times(&tp) * 10;
812 return ((int64_t)times(&tp) * 1000) / timer_freq;
817 case QEMU_TIMER_VIRTUAL:
818 return cpu_get_ticks();
823 void qemu_put_timer(QEMUFile *f, QEMUTimer *ts)
825 uint64_t expire_time;
827 if (qemu_timer_pending(ts)) {
828 expire_time = ts->expire_time;
832 qemu_put_be64(f, expire_time);
835 void qemu_get_timer(QEMUFile *f, QEMUTimer *ts)
837 uint64_t expire_time;
839 expire_time = qemu_get_be64(f);
840 if (expire_time != -1) {
841 qemu_mod_timer(ts, expire_time);
847 static void timer_save(QEMUFile *f, void *opaque)
849 if (cpu_ticks_enabled) {
850 hw_error("cannot save state if virtual timers are running");
852 qemu_put_be64s(f, &cpu_ticks_offset);
853 qemu_put_be64s(f, &ticks_per_sec);
856 static int timer_load(QEMUFile *f, void *opaque, int version_id)
860 if (cpu_ticks_enabled) {
863 qemu_get_be64s(f, &cpu_ticks_offset);
864 qemu_get_be64s(f, &ticks_per_sec);
869 void CALLBACK host_alarm_handler(UINT uTimerID, UINT uMsg,
870 DWORD_PTR dwUser, DWORD_PTR dw1, DWORD_PTR dw2)
872 static void host_alarm_handler(int host_signum)
876 #define DISP_FREQ 1000
878 static int64_t delta_min = INT64_MAX;
879 static int64_t delta_max, delta_cum, last_clock, delta, ti;
881 ti = qemu_get_clock(vm_clock);
882 if (last_clock != 0) {
883 delta = ti - last_clock;
884 if (delta < delta_min)
886 if (delta > delta_max)
889 if (++count == DISP_FREQ) {
890 printf("timer: min=%lld us max=%lld us avg=%lld us avg_freq=%0.3f Hz\n",
891 muldiv64(delta_min, 1000000, ticks_per_sec),
892 muldiv64(delta_max, 1000000, ticks_per_sec),
893 muldiv64(delta_cum, 1000000 / DISP_FREQ, ticks_per_sec),
894 (double)ticks_per_sec / ((double)delta_cum / DISP_FREQ));
896 delta_min = INT64_MAX;
904 if (qemu_timer_expired(active_timers[QEMU_TIMER_VIRTUAL],
905 qemu_get_clock(vm_clock)) ||
906 qemu_timer_expired(active_timers[QEMU_TIMER_REALTIME],
907 qemu_get_clock(rt_clock))) {
908 CPUState *env = cpu_single_env;
910 /* stop the currently executing cpu because a timer occured */
911 cpu_interrupt(env, CPU_INTERRUPT_EXIT);
913 if (env->kqemu_enabled) {
914 kqemu_cpu_interrupt(env);
923 #if defined(__linux__)
925 #define RTC_FREQ 1024
929 static int start_rtc_timer(void)
931 rtc_fd = open("/dev/rtc", O_RDONLY);
934 if (ioctl(rtc_fd, RTC_IRQP_SET, RTC_FREQ) < 0) {
935 fprintf(stderr, "Could not configure '/dev/rtc' to have a 1024 Hz timer. This is not a fatal\n"
936 "error, but for better emulation accuracy either use a 2.6 host Linux kernel or\n"
937 "type 'echo 1024 > /proc/sys/dev/rtc/max-user-freq' as root.\n");
940 if (ioctl(rtc_fd, RTC_PIE_ON, 0) < 0) {
945 pit_min_timer_count = PIT_FREQ / RTC_FREQ;
951 static int start_rtc_timer(void)
956 #endif /* !defined(__linux__) */
958 #endif /* !defined(_WIN32) */
960 static void init_timers(void)
962 rt_clock = qemu_new_clock(QEMU_TIMER_REALTIME);
963 vm_clock = qemu_new_clock(QEMU_TIMER_VIRTUAL);
968 timerID = timeSetEvent(1, // interval (ms)
970 host_alarm_handler, // function
971 (DWORD)&count, // user parameter
972 TIME_PERIODIC | TIME_CALLBACK_FUNCTION);
974 perror("failed timer alarm");
978 pit_min_timer_count = ((uint64_t)10000 * PIT_FREQ) / 1000000;
981 struct sigaction act;
982 struct itimerval itv;
984 /* get times() syscall frequency */
985 timer_freq = sysconf(_SC_CLK_TCK);
988 sigfillset(&act.sa_mask);
990 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
991 act.sa_flags |= SA_ONSTACK;
993 act.sa_handler = host_alarm_handler;
994 sigaction(SIGALRM, &act, NULL);
996 itv.it_interval.tv_sec = 0;
997 itv.it_interval.tv_usec = 999; /* for i386 kernel 2.6 to get 1 ms */
998 itv.it_value.tv_sec = 0;
999 itv.it_value.tv_usec = 10 * 1000;
1000 setitimer(ITIMER_REAL, &itv, NULL);
1001 /* we probe the tick duration of the kernel to inform the user if
1002 the emulated kernel requested a too high timer frequency */
1003 getitimer(ITIMER_REAL, &itv);
1005 #if defined(__linux__)
1006 if (itv.it_interval.tv_usec > 1000) {
1007 /* try to use /dev/rtc to have a faster timer */
1008 if (start_rtc_timer() < 0)
1010 /* disable itimer */
1011 itv.it_interval.tv_sec = 0;
1012 itv.it_interval.tv_usec = 0;
1013 itv.it_value.tv_sec = 0;
1014 itv.it_value.tv_usec = 0;
1015 setitimer(ITIMER_REAL, &itv, NULL);
1018 sigaction(SIGIO, &act, NULL);
1019 fcntl(rtc_fd, F_SETFL, O_ASYNC);
1020 fcntl(rtc_fd, F_SETOWN, getpid());
1022 #endif /* defined(__linux__) */
1025 pit_min_timer_count = ((uint64_t)itv.it_interval.tv_usec *
1026 PIT_FREQ) / 1000000;
1032 void quit_timers(void)
1035 timeKillEvent(timerID);
1039 /***********************************************************/
1040 /* character device */
1042 int qemu_chr_write(CharDriverState *s, const uint8_t *buf, int len)
1044 return s->chr_write(s, buf, len);
1047 int qemu_chr_ioctl(CharDriverState *s, int cmd, void *arg)
1051 return s->chr_ioctl(s, cmd, arg);
1054 void qemu_chr_printf(CharDriverState *s, const char *fmt, ...)
1059 vsnprintf(buf, sizeof(buf), fmt, ap);
1060 qemu_chr_write(s, buf, strlen(buf));
1064 void qemu_chr_send_event(CharDriverState *s, int event)
1066 if (s->chr_send_event)
1067 s->chr_send_event(s, event);
1070 void qemu_chr_add_read_handler(CharDriverState *s,
1071 IOCanRWHandler *fd_can_read,
1072 IOReadHandler *fd_read, void *opaque)
1074 s->chr_add_read_handler(s, fd_can_read, fd_read, opaque);
1077 void qemu_chr_add_event_handler(CharDriverState *s, IOEventHandler *chr_event)
1079 s->chr_event = chr_event;
1082 static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1087 static void null_chr_add_read_handler(CharDriverState *chr,
1088 IOCanRWHandler *fd_can_read,
1089 IOReadHandler *fd_read, void *opaque)
1093 CharDriverState *qemu_chr_open_null(void)
1095 CharDriverState *chr;
1097 chr = qemu_mallocz(sizeof(CharDriverState));
1100 chr->chr_write = null_chr_write;
1101 chr->chr_add_read_handler = null_chr_add_read_handler;
1107 #define socket_error() WSAGetLastError()
1109 #define EWOULDBLOCK WSAEWOULDBLOCK
1110 #define EINTR WSAEINTR
1111 #define EINPROGRESS WSAEINPROGRESS
1113 static void socket_cleanup(void)
1118 static int socket_init(void)
1123 ret = WSAStartup(MAKEWORD(2,2), &Data);
1125 err = WSAGetLastError();
1126 fprintf(stderr, "WSAStartup: %d\n", err);
1129 atexit(socket_cleanup);
1133 static int send_all(int fd, const uint8_t *buf, int len1)
1139 ret = send(fd, buf, len, 0);
1142 errno = WSAGetLastError();
1143 if (errno != WSAEWOULDBLOCK) {
1146 } else if (ret == 0) {
1156 void socket_set_nonblock(int fd)
1158 unsigned long opt = 1;
1159 ioctlsocket(fd, FIONBIO, &opt);
1164 #define socket_error() errno
1165 #define closesocket(s) close(s)
1167 static int unix_write(int fd, const uint8_t *buf, int len1)
1173 ret = write(fd, buf, len);
1175 if (errno != EINTR && errno != EAGAIN)
1177 } else if (ret == 0) {
1187 static inline int send_all(int fd, const uint8_t *buf, int len1)
1189 return unix_write(fd, buf, len1);
1192 void socket_set_nonblock(int fd)
1194 fcntl(fd, F_SETFL, O_NONBLOCK);
1196 #endif /* !_WIN32 */
1202 IOCanRWHandler *fd_can_read;
1203 IOReadHandler *fd_read;
1208 #define STDIO_MAX_CLIENTS 2
1210 static int stdio_nb_clients;
1211 static CharDriverState *stdio_clients[STDIO_MAX_CLIENTS];
1213 static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1215 FDCharDriver *s = chr->opaque;
1216 return unix_write(s->fd_out, buf, len);
1219 static int fd_chr_read_poll(void *opaque)
1221 CharDriverState *chr = opaque;
1222 FDCharDriver *s = chr->opaque;
1224 s->max_size = s->fd_can_read(s->fd_opaque);
1228 static void fd_chr_read(void *opaque)
1230 CharDriverState *chr = opaque;
1231 FDCharDriver *s = chr->opaque;
1236 if (len > s->max_size)
1240 size = read(s->fd_in, buf, len);
1242 s->fd_read(s->fd_opaque, buf, size);
1246 static void fd_chr_add_read_handler(CharDriverState *chr,
1247 IOCanRWHandler *fd_can_read,
1248 IOReadHandler *fd_read, void *opaque)
1250 FDCharDriver *s = chr->opaque;
1252 if (s->fd_in >= 0) {
1253 s->fd_can_read = fd_can_read;
1254 s->fd_read = fd_read;
1255 s->fd_opaque = opaque;
1256 if (nographic && s->fd_in == 0) {
1258 qemu_set_fd_handler2(s->fd_in, fd_chr_read_poll,
1259 fd_chr_read, NULL, chr);
1264 /* open a character device to a unix fd */
1265 CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
1267 CharDriverState *chr;
1270 chr = qemu_mallocz(sizeof(CharDriverState));
1273 s = qemu_mallocz(sizeof(FDCharDriver));
1281 chr->chr_write = fd_chr_write;
1282 chr->chr_add_read_handler = fd_chr_add_read_handler;
1286 CharDriverState *qemu_chr_open_file_out(const char *file_out)
1290 fd_out = open(file_out, O_WRONLY | O_TRUNC | O_CREAT | O_BINARY, 0666);
1293 return qemu_chr_open_fd(-1, fd_out);
1296 CharDriverState *qemu_chr_open_pipe(const char *filename)
1300 fd = open(filename, O_RDWR | O_BINARY);
1303 return qemu_chr_open_fd(fd, fd);
1307 /* for STDIO, we handle the case where several clients use it
1310 #define TERM_ESCAPE 0x01 /* ctrl-a is used for escape */
1312 #define TERM_FIFO_MAX_SIZE 1
1314 static int term_got_escape, client_index;
1315 static uint8_t term_fifo[TERM_FIFO_MAX_SIZE];
1318 void term_print_help(void)
1321 "C-a h print this help\n"
1322 "C-a x exit emulator\n"
1323 "C-a s save disk data back to file (if -snapshot)\n"
1324 "C-a b send break (magic sysrq)\n"
1325 "C-a c switch between console and monitor\n"
1326 "C-a C-a send C-a\n"
1330 /* called when a char is received */
1331 static void stdio_received_byte(int ch)
1333 if (term_got_escape) {
1334 term_got_escape = 0;
1345 for (i = 0; i < MAX_DISKS; i++) {
1347 bdrv_commit(bs_table[i]);
1352 if (client_index < stdio_nb_clients) {
1353 CharDriverState *chr;
1356 chr = stdio_clients[client_index];
1358 chr->chr_event(s->fd_opaque, CHR_EVENT_BREAK);
1363 if (client_index >= stdio_nb_clients)
1365 if (client_index == 0) {
1366 /* send a new line in the monitor to get the prompt */
1374 } else if (ch == TERM_ESCAPE) {
1375 term_got_escape = 1;
1378 if (client_index < stdio_nb_clients) {
1380 CharDriverState *chr;
1383 chr = stdio_clients[client_index];
1385 if (s->fd_can_read(s->fd_opaque) > 0) {
1387 s->fd_read(s->fd_opaque, buf, 1);
1388 } else if (term_fifo_size == 0) {
1389 term_fifo[term_fifo_size++] = ch;
1395 static int stdio_read_poll(void *opaque)
1397 CharDriverState *chr;
1400 if (client_index < stdio_nb_clients) {
1401 chr = stdio_clients[client_index];
1403 /* try to flush the queue if needed */
1404 if (term_fifo_size != 0 && s->fd_can_read(s->fd_opaque) > 0) {
1405 s->fd_read(s->fd_opaque, term_fifo, 1);
1408 /* see if we can absorb more chars */
1409 if (term_fifo_size == 0)
1418 static void stdio_read(void *opaque)
1423 size = read(0, buf, 1);
1425 stdio_received_byte(buf[0]);
1428 /* init terminal so that we can grab keys */
1429 static struct termios oldtty;
1430 static int old_fd0_flags;
1432 static void term_exit(void)
1434 tcsetattr (0, TCSANOW, &oldtty);
1435 fcntl(0, F_SETFL, old_fd0_flags);
1438 static void term_init(void)
1442 tcgetattr (0, &tty);
1444 old_fd0_flags = fcntl(0, F_GETFL);
1446 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1447 |INLCR|IGNCR|ICRNL|IXON);
1448 tty.c_oflag |= OPOST;
1449 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
1450 /* if graphical mode, we allow Ctrl-C handling */
1452 tty.c_lflag &= ~ISIG;
1453 tty.c_cflag &= ~(CSIZE|PARENB);
1456 tty.c_cc[VTIME] = 0;
1458 tcsetattr (0, TCSANOW, &tty);
1462 fcntl(0, F_SETFL, O_NONBLOCK);
1465 CharDriverState *qemu_chr_open_stdio(void)
1467 CharDriverState *chr;
1470 if (stdio_nb_clients >= STDIO_MAX_CLIENTS)
1472 chr = qemu_chr_open_fd(0, 1);
1473 if (stdio_nb_clients == 0)
1474 qemu_set_fd_handler2(0, stdio_read_poll, stdio_read, NULL, NULL);
1475 client_index = stdio_nb_clients;
1477 if (stdio_nb_clients != 0)
1479 chr = qemu_chr_open_fd(0, 1);
1481 stdio_clients[stdio_nb_clients++] = chr;
1482 if (stdio_nb_clients == 1) {
1483 /* set the terminal in raw mode */
1489 #if defined(__linux__)
1490 CharDriverState *qemu_chr_open_pty(void)
1493 char slave_name[1024];
1494 int master_fd, slave_fd;
1496 /* Not satisfying */
1497 if (openpty(&master_fd, &slave_fd, slave_name, NULL, NULL) < 0) {
1501 /* Disabling local echo and line-buffered output */
1502 tcgetattr (master_fd, &tty);
1503 tty.c_lflag &= ~(ECHO|ICANON|ISIG);
1505 tty.c_cc[VTIME] = 0;
1506 tcsetattr (master_fd, TCSAFLUSH, &tty);
1508 fprintf(stderr, "char device redirected to %s\n", slave_name);
1509 return qemu_chr_open_fd(master_fd, master_fd);
1512 static void tty_serial_init(int fd, int speed,
1513 int parity, int data_bits, int stop_bits)
1519 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1520 speed, parity, data_bits, stop_bits);
1522 tcgetattr (fd, &tty);
1564 cfsetispeed(&tty, spd);
1565 cfsetospeed(&tty, spd);
1567 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1568 |INLCR|IGNCR|ICRNL|IXON);
1569 tty.c_oflag |= OPOST;
1570 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1571 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS);
1592 tty.c_cflag |= PARENB;
1595 tty.c_cflag |= PARENB | PARODD;
1599 tcsetattr (fd, TCSANOW, &tty);
1602 static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1604 FDCharDriver *s = chr->opaque;
1607 case CHR_IOCTL_SERIAL_SET_PARAMS:
1609 QEMUSerialSetParams *ssp = arg;
1610 tty_serial_init(s->fd_in, ssp->speed, ssp->parity,
1611 ssp->data_bits, ssp->stop_bits);
1614 case CHR_IOCTL_SERIAL_SET_BREAK:
1616 int enable = *(int *)arg;
1618 tcsendbreak(s->fd_in, 1);
1627 CharDriverState *qemu_chr_open_tty(const char *filename)
1629 CharDriverState *chr;
1632 fd = open(filename, O_RDWR | O_NONBLOCK);
1635 fcntl(fd, F_SETFL, O_NONBLOCK);
1636 tty_serial_init(fd, 115200, 'N', 8, 1);
1637 chr = qemu_chr_open_fd(fd, fd);
1640 chr->chr_ioctl = tty_serial_ioctl;
1644 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1646 int fd = (int)chr->opaque;
1650 case CHR_IOCTL_PP_READ_DATA:
1651 if (ioctl(fd, PPRDATA, &b) < 0)
1653 *(uint8_t *)arg = b;
1655 case CHR_IOCTL_PP_WRITE_DATA:
1656 b = *(uint8_t *)arg;
1657 if (ioctl(fd, PPWDATA, &b) < 0)
1660 case CHR_IOCTL_PP_READ_CONTROL:
1661 if (ioctl(fd, PPRCONTROL, &b) < 0)
1663 *(uint8_t *)arg = b;
1665 case CHR_IOCTL_PP_WRITE_CONTROL:
1666 b = *(uint8_t *)arg;
1667 if (ioctl(fd, PPWCONTROL, &b) < 0)
1670 case CHR_IOCTL_PP_READ_STATUS:
1671 if (ioctl(fd, PPRSTATUS, &b) < 0)
1673 *(uint8_t *)arg = b;
1681 CharDriverState *qemu_chr_open_pp(const char *filename)
1683 CharDriverState *chr;
1686 fd = open(filename, O_RDWR);
1690 if (ioctl(fd, PPCLAIM) < 0) {
1695 chr = qemu_mallocz(sizeof(CharDriverState));
1700 chr->opaque = (void *)fd;
1701 chr->chr_write = null_chr_write;
1702 chr->chr_add_read_handler = null_chr_add_read_handler;
1703 chr->chr_ioctl = pp_ioctl;
1708 CharDriverState *qemu_chr_open_pty(void)
1714 #endif /* !defined(_WIN32) */
1716 CharDriverState *qemu_chr_open(const char *filename)
1722 if (!strcmp(filename, "vc")) {
1723 return text_console_init(&display_state);
1724 } else if (!strcmp(filename, "null")) {
1725 return qemu_chr_open_null();
1728 if (strstart(filename, "file:", &p)) {
1729 return qemu_chr_open_file_out(p);
1730 } else if (strstart(filename, "pipe:", &p)) {
1731 return qemu_chr_open_pipe(p);
1732 } else if (!strcmp(filename, "pty")) {
1733 return qemu_chr_open_pty();
1734 } else if (!strcmp(filename, "stdio")) {
1735 return qemu_chr_open_stdio();
1738 #if defined(__linux__)
1739 if (strstart(filename, "/dev/parport", NULL)) {
1740 return qemu_chr_open_pp(filename);
1742 if (strstart(filename, "/dev/", NULL)) {
1743 return qemu_chr_open_tty(filename);
1751 /***********************************************************/
1752 /* network device redirectors */
1754 void hex_dump(FILE *f, const uint8_t *buf, int size)
1758 for(i=0;i<size;i+=16) {
1762 fprintf(f, "%08x ", i);
1765 fprintf(f, " %02x", buf[i+j]);
1770 for(j=0;j<len;j++) {
1772 if (c < ' ' || c > '~')
1774 fprintf(f, "%c", c);
1780 static int parse_macaddr(uint8_t *macaddr, const char *p)
1783 for(i = 0; i < 6; i++) {
1784 macaddr[i] = strtol(p, (char **)&p, 16);
1797 static int get_str_sep(char *buf, int buf_size, const char **pp, int sep)
1802 p1 = strchr(p, sep);
1808 if (len > buf_size - 1)
1810 memcpy(buf, p, len);
1817 int parse_host_port(struct sockaddr_in *saddr, const char *str)
1825 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
1827 saddr->sin_family = AF_INET;
1828 if (buf[0] == '\0') {
1829 saddr->sin_addr.s_addr = 0;
1831 if (isdigit(buf[0])) {
1832 if (!inet_aton(buf, &saddr->sin_addr))
1835 if ((he = gethostbyname(buf)) == NULL)
1837 saddr->sin_addr = *(struct in_addr *)he->h_addr;
1840 port = strtol(p, (char **)&r, 0);
1843 saddr->sin_port = htons(port);
1847 /* find or alloc a new VLAN */
1848 VLANState *qemu_find_vlan(int id)
1850 VLANState **pvlan, *vlan;
1851 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
1855 vlan = qemu_mallocz(sizeof(VLANState));
1860 pvlan = &first_vlan;
1861 while (*pvlan != NULL)
1862 pvlan = &(*pvlan)->next;
1867 VLANClientState *qemu_new_vlan_client(VLANState *vlan,
1868 IOReadHandler *fd_read,
1869 IOCanRWHandler *fd_can_read,
1872 VLANClientState *vc, **pvc;
1873 vc = qemu_mallocz(sizeof(VLANClientState));
1876 vc->fd_read = fd_read;
1877 vc->fd_can_read = fd_can_read;
1878 vc->opaque = opaque;
1882 pvc = &vlan->first_client;
1883 while (*pvc != NULL)
1884 pvc = &(*pvc)->next;
1889 int qemu_can_send_packet(VLANClientState *vc1)
1891 VLANState *vlan = vc1->vlan;
1892 VLANClientState *vc;
1894 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
1896 if (vc->fd_can_read && !vc->fd_can_read(vc->opaque))
1903 void qemu_send_packet(VLANClientState *vc1, const uint8_t *buf, int size)
1905 VLANState *vlan = vc1->vlan;
1906 VLANClientState *vc;
1909 printf("vlan %d send:\n", vlan->id);
1910 hex_dump(stdout, buf, size);
1912 for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
1914 vc->fd_read(vc->opaque, buf, size);
1919 #if defined(CONFIG_SLIRP)
1921 /* slirp network adapter */
1923 static int slirp_inited;
1924 static VLANClientState *slirp_vc;
1926 int slirp_can_output(void)
1928 return !slirp_vc || qemu_can_send_packet(slirp_vc);
1931 void slirp_output(const uint8_t *pkt, int pkt_len)
1934 printf("slirp output:\n");
1935 hex_dump(stdout, pkt, pkt_len);
1939 qemu_send_packet(slirp_vc, pkt, pkt_len);
1942 static void slirp_receive(void *opaque, const uint8_t *buf, int size)
1945 printf("slirp input:\n");
1946 hex_dump(stdout, buf, size);
1948 slirp_input(buf, size);
1951 static int net_slirp_init(VLANState *vlan)
1953 if (!slirp_inited) {
1957 slirp_vc = qemu_new_vlan_client(vlan,
1958 slirp_receive, NULL, NULL);
1959 snprintf(slirp_vc->info_str, sizeof(slirp_vc->info_str), "user redirector");
1963 static void net_slirp_redir(const char *redir_str)
1968 struct in_addr guest_addr;
1969 int host_port, guest_port;
1971 if (!slirp_inited) {
1977 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
1979 if (!strcmp(buf, "tcp")) {
1981 } else if (!strcmp(buf, "udp")) {
1987 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
1989 host_port = strtol(buf, &r, 0);
1993 if (get_str_sep(buf, sizeof(buf), &p, ':') < 0)
1995 if (buf[0] == '\0') {
1996 pstrcpy(buf, sizeof(buf), "10.0.2.15");
1998 if (!inet_aton(buf, &guest_addr))
2001 guest_port = strtol(p, &r, 0);
2005 if (slirp_redir(is_udp, host_port, guest_addr, guest_port) < 0) {
2006 fprintf(stderr, "qemu: could not set up redirection\n");
2011 fprintf(stderr, "qemu: syntax: -redir [tcp|udp]:host-port:[guest-host]:guest-port\n");
2019 static void smb_exit(void)
2023 char filename[1024];
2025 /* erase all the files in the directory */
2026 d = opendir(smb_dir);
2031 if (strcmp(de->d_name, ".") != 0 &&
2032 strcmp(de->d_name, "..") != 0) {
2033 snprintf(filename, sizeof(filename), "%s/%s",
2034 smb_dir, de->d_name);
2042 /* automatic user mode samba server configuration */
2043 void net_slirp_smb(const char *exported_dir)
2045 char smb_conf[1024];
2046 char smb_cmdline[1024];
2049 if (!slirp_inited) {
2054 /* XXX: better tmp dir construction */
2055 snprintf(smb_dir, sizeof(smb_dir), "/tmp/qemu-smb.%d", getpid());
2056 if (mkdir(smb_dir, 0700) < 0) {
2057 fprintf(stderr, "qemu: could not create samba server dir '%s'\n", smb_dir);
2060 snprintf(smb_conf, sizeof(smb_conf), "%s/%s", smb_dir, "smb.conf");
2062 f = fopen(smb_conf, "w");
2064 fprintf(stderr, "qemu: could not create samba server configuration file '%s'\n", smb_conf);
2071 "socket address=127.0.0.1\n"
2072 "pid directory=%s\n"
2073 "lock directory=%s\n"
2074 "log file=%s/log.smbd\n"
2075 "smb passwd file=%s/smbpasswd\n"
2076 "security = share\n"
2091 snprintf(smb_cmdline, sizeof(smb_cmdline), "/usr/sbin/smbd -s %s",
2094 slirp_add_exec(0, smb_cmdline, 4, 139);
2097 #endif /* !defined(_WIN32) */
2099 #endif /* CONFIG_SLIRP */
2101 #if !defined(_WIN32)
2103 typedef struct TAPState {
2104 VLANClientState *vc;
2108 static void tap_receive(void *opaque, const uint8_t *buf, int size)
2110 TAPState *s = opaque;
2113 ret = write(s->fd, buf, size);
2114 if (ret < 0 && (errno == EINTR || errno == EAGAIN)) {
2121 static void tap_send(void *opaque)
2123 TAPState *s = opaque;
2127 size = read(s->fd, buf, sizeof(buf));
2129 qemu_send_packet(s->vc, buf, size);
2135 static TAPState *net_tap_fd_init(VLANState *vlan, int fd)
2139 s = qemu_mallocz(sizeof(TAPState));
2143 s->vc = qemu_new_vlan_client(vlan, tap_receive, NULL, s);
2144 qemu_set_fd_handler(s->fd, tap_send, NULL, s);
2145 snprintf(s->vc->info_str, sizeof(s->vc->info_str), "tap: fd=%d", fd);
2150 static int tap_open(char *ifname, int ifname_size)
2156 fd = open("/dev/tap", O_RDWR);
2158 fprintf(stderr, "warning: could not open /dev/tap: no virtual network emulation\n");
2163 dev = devname(s.st_rdev, S_IFCHR);
2164 pstrcpy(ifname, ifname_size, dev);
2166 fcntl(fd, F_SETFL, O_NONBLOCK);
2170 static int tap_open(char *ifname, int ifname_size)
2175 fd = open("/dev/net/tun", O_RDWR);
2177 fprintf(stderr, "warning: could not open /dev/net/tun: no virtual network emulation\n");
2180 memset(&ifr, 0, sizeof(ifr));
2181 ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
2182 if (ifname[0] != '\0')
2183 pstrcpy(ifr.ifr_name, IFNAMSIZ, ifname);
2185 pstrcpy(ifr.ifr_name, IFNAMSIZ, "tap%d");
2186 ret = ioctl(fd, TUNSETIFF, (void *) &ifr);
2188 fprintf(stderr, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
2192 pstrcpy(ifname, ifname_size, ifr.ifr_name);
2193 fcntl(fd, F_SETFL, O_NONBLOCK);
2198 static int net_tap_init(VLANState *vlan, const char *ifname1,
2199 const char *setup_script)
2202 int pid, status, fd;
2207 if (ifname1 != NULL)
2208 pstrcpy(ifname, sizeof(ifname), ifname1);
2211 fd = tap_open(ifname, sizeof(ifname));
2217 if (setup_script[0] != '\0') {
2218 /* try to launch network init script */
2223 *parg++ = (char *)setup_script;
2226 execv(setup_script, args);
2229 while (waitpid(pid, &status, 0) != pid);
2230 if (!WIFEXITED(status) ||
2231 WEXITSTATUS(status) != 0) {
2232 fprintf(stderr, "%s: could not launch network script\n",
2238 s = net_tap_fd_init(vlan, fd);
2241 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2242 "tap: ifname=%s setup_script=%s", ifname, setup_script);
2246 #endif /* !_WIN32 */
2248 /* network connection */
2249 typedef struct NetSocketState {
2250 VLANClientState *vc;
2252 int state; /* 0 = getting length, 1 = getting data */
2256 struct sockaddr_in dgram_dst; /* contains inet host and port destination iff connectionless (SOCK_DGRAM) */
2259 typedef struct NetSocketListenState {
2262 } NetSocketListenState;
2264 /* XXX: we consider we can send the whole packet without blocking */
2265 static void net_socket_receive(void *opaque, const uint8_t *buf, int size)
2267 NetSocketState *s = opaque;
2271 send_all(s->fd, (const uint8_t *)&len, sizeof(len));
2272 send_all(s->fd, buf, size);
2275 static void net_socket_receive_dgram(void *opaque, const uint8_t *buf, int size)
2277 NetSocketState *s = opaque;
2278 sendto(s->fd, buf, size, 0,
2279 (struct sockaddr *)&s->dgram_dst, sizeof(s->dgram_dst));
2282 static void net_socket_send(void *opaque)
2284 NetSocketState *s = opaque;
2289 size = recv(s->fd, buf1, sizeof(buf1), 0);
2291 err = socket_error();
2292 if (err != EWOULDBLOCK)
2294 } else if (size == 0) {
2295 /* end of connection */
2297 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
2303 /* reassemble a packet from the network */
2309 memcpy(s->buf + s->index, buf, l);
2313 if (s->index == 4) {
2315 s->packet_len = ntohl(*(uint32_t *)s->buf);
2321 l = s->packet_len - s->index;
2324 memcpy(s->buf + s->index, buf, l);
2328 if (s->index >= s->packet_len) {
2329 qemu_send_packet(s->vc, s->buf, s->packet_len);
2338 static void net_socket_send_dgram(void *opaque)
2340 NetSocketState *s = opaque;
2343 size = recv(s->fd, s->buf, sizeof(s->buf), 0);
2347 /* end of connection */
2348 qemu_set_fd_handler(s->fd, NULL, NULL, NULL);
2351 qemu_send_packet(s->vc, s->buf, size);
2354 static int net_socket_mcast_create(struct sockaddr_in *mcastaddr)
2359 if (!IN_MULTICAST(ntohl(mcastaddr->sin_addr.s_addr))) {
2360 fprintf(stderr, "qemu: error: specified mcastaddr \"%s\" (0x%08x) does not contain a multicast address\n",
2361 inet_ntoa(mcastaddr->sin_addr),
2362 (int)ntohl(mcastaddr->sin_addr.s_addr));
2366 fd = socket(PF_INET, SOCK_DGRAM, 0);
2368 perror("socket(PF_INET, SOCK_DGRAM)");
2373 ret=setsockopt(fd, SOL_SOCKET, SO_REUSEADDR,
2374 (const char *)&val, sizeof(val));
2376 perror("setsockopt(SOL_SOCKET, SO_REUSEADDR)");
2380 ret = bind(fd, (struct sockaddr *)mcastaddr, sizeof(*mcastaddr));
2386 /* Add host to multicast group */
2387 imr.imr_multiaddr = mcastaddr->sin_addr;
2388 imr.imr_interface.s_addr = htonl(INADDR_ANY);
2390 ret = setsockopt(fd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
2391 (const char *)&imr, sizeof(struct ip_mreq));
2393 perror("setsockopt(IP_ADD_MEMBERSHIP)");
2397 /* Force mcast msgs to loopback (eg. several QEMUs in same host */
2399 ret=setsockopt(fd, IPPROTO_IP, IP_MULTICAST_LOOP,
2400 (const char *)&val, sizeof(val));
2402 perror("setsockopt(SOL_IP, IP_MULTICAST_LOOP)");
2406 socket_set_nonblock(fd);
2409 if (fd>=0) close(fd);
2413 static NetSocketState *net_socket_fd_init_dgram(VLANState *vlan, int fd,
2416 struct sockaddr_in saddr;
2418 socklen_t saddr_len;
2421 /* fd passed: multicast: "learn" dgram_dst address from bound address and save it
2422 * Because this may be "shared" socket from a "master" process, datagrams would be recv()
2423 * by ONLY ONE process: we must "clone" this dgram socket --jjo
2427 if (getsockname(fd, (struct sockaddr *) &saddr, &saddr_len) == 0) {
2429 if (saddr.sin_addr.s_addr==0) {
2430 fprintf(stderr, "qemu: error: init_dgram: fd=%d unbound, cannot setup multicast dst addr\n",
2434 /* clone dgram socket */
2435 newfd = net_socket_mcast_create(&saddr);
2437 /* error already reported by net_socket_mcast_create() */
2441 /* clone newfd to fd, close newfd */
2446 fprintf(stderr, "qemu: error: init_dgram: fd=%d failed getsockname(): %s\n",
2447 fd, strerror(errno));
2452 s = qemu_mallocz(sizeof(NetSocketState));
2457 s->vc = qemu_new_vlan_client(vlan, net_socket_receive_dgram, NULL, s);
2458 qemu_set_fd_handler(s->fd, net_socket_send_dgram, NULL, s);
2460 /* mcast: save bound address as dst */
2461 if (is_connected) s->dgram_dst=saddr;
2463 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2464 "socket: fd=%d (%s mcast=%s:%d)",
2465 fd, is_connected? "cloned" : "",
2466 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2470 static void net_socket_connect(void *opaque)
2472 NetSocketState *s = opaque;
2473 qemu_set_fd_handler(s->fd, net_socket_send, NULL, s);
2476 static NetSocketState *net_socket_fd_init_stream(VLANState *vlan, int fd,
2480 s = qemu_mallocz(sizeof(NetSocketState));
2484 s->vc = qemu_new_vlan_client(vlan,
2485 net_socket_receive, NULL, s);
2486 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2487 "socket: fd=%d", fd);
2489 net_socket_connect(s);
2491 qemu_set_fd_handler(s->fd, NULL, net_socket_connect, s);
2496 static NetSocketState *net_socket_fd_init(VLANState *vlan, int fd,
2499 int so_type=-1, optlen=sizeof(so_type);
2501 if(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&so_type, &optlen)< 0) {
2502 fprintf(stderr, "qemu: error: setsockopt(SO_TYPE) for fd=%d failed\n", fd);
2507 return net_socket_fd_init_dgram(vlan, fd, is_connected);
2509 return net_socket_fd_init_stream(vlan, fd, is_connected);
2511 /* who knows ... this could be a eg. a pty, do warn and continue as stream */
2512 fprintf(stderr, "qemu: warning: socket type=%d for fd=%d is not SOCK_DGRAM or SOCK_STREAM\n", so_type, fd);
2513 return net_socket_fd_init_stream(vlan, fd, is_connected);
2518 static void net_socket_accept(void *opaque)
2520 NetSocketListenState *s = opaque;
2522 struct sockaddr_in saddr;
2527 len = sizeof(saddr);
2528 fd = accept(s->fd, (struct sockaddr *)&saddr, &len);
2529 if (fd < 0 && errno != EINTR) {
2531 } else if (fd >= 0) {
2535 s1 = net_socket_fd_init(s->vlan, fd, 1);
2539 snprintf(s1->vc->info_str, sizeof(s1->vc->info_str),
2540 "socket: connection from %s:%d",
2541 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2545 static int net_socket_listen_init(VLANState *vlan, const char *host_str)
2547 NetSocketListenState *s;
2549 struct sockaddr_in saddr;
2551 if (parse_host_port(&saddr, host_str) < 0)
2554 s = qemu_mallocz(sizeof(NetSocketListenState));
2558 fd = socket(PF_INET, SOCK_STREAM, 0);
2563 socket_set_nonblock(fd);
2565 /* allow fast reuse */
2567 setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (const char *)&val, sizeof(val));
2569 ret = bind(fd, (struct sockaddr *)&saddr, sizeof(saddr));
2574 ret = listen(fd, 0);
2581 qemu_set_fd_handler(fd, net_socket_accept, NULL, s);
2585 static int net_socket_connect_init(VLANState *vlan, const char *host_str)
2588 int fd, connected, ret, err;
2589 struct sockaddr_in saddr;
2591 if (parse_host_port(&saddr, host_str) < 0)
2594 fd = socket(PF_INET, SOCK_STREAM, 0);
2599 socket_set_nonblock(fd);
2603 ret = connect(fd, (struct sockaddr *)&saddr, sizeof(saddr));
2605 err = socket_error();
2606 if (err == EINTR || err == EWOULDBLOCK) {
2607 } else if (err == EINPROGRESS) {
2619 s = net_socket_fd_init(vlan, fd, connected);
2622 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2623 "socket: connect to %s:%d",
2624 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2628 static int net_socket_mcast_init(VLANState *vlan, const char *host_str)
2632 struct sockaddr_in saddr;
2634 if (parse_host_port(&saddr, host_str) < 0)
2638 fd = net_socket_mcast_create(&saddr);
2642 s = net_socket_fd_init(vlan, fd, 0);
2646 s->dgram_dst = saddr;
2648 snprintf(s->vc->info_str, sizeof(s->vc->info_str),
2649 "socket: mcast=%s:%d",
2650 inet_ntoa(saddr.sin_addr), ntohs(saddr.sin_port));
2655 static int get_param_value(char *buf, int buf_size,
2656 const char *tag, const char *str)
2665 while (*p != '\0' && *p != '=') {
2666 if ((q - option) < sizeof(option) - 1)
2674 if (!strcmp(tag, option)) {
2676 while (*p != '\0' && *p != ',') {
2677 if ((q - buf) < buf_size - 1)
2684 while (*p != '\0' && *p != ',') {
2695 int net_client_init(const char *str)
2706 while (*p != '\0' && *p != ',') {
2707 if ((q - device) < sizeof(device) - 1)
2715 if (get_param_value(buf, sizeof(buf), "vlan", p)) {
2716 vlan_id = strtol(buf, NULL, 0);
2718 vlan = qemu_find_vlan(vlan_id);
2720 fprintf(stderr, "Could not create vlan %d\n", vlan_id);
2723 if (!strcmp(device, "nic")) {
2727 if (nb_nics >= MAX_NICS) {
2728 fprintf(stderr, "Too Many NICs\n");
2731 nd = &nd_table[nb_nics];
2732 macaddr = nd->macaddr;
2738 macaddr[5] = 0x56 + nb_nics;
2740 if (get_param_value(buf, sizeof(buf), "macaddr", p)) {
2741 if (parse_macaddr(macaddr, buf) < 0) {
2742 fprintf(stderr, "invalid syntax for ethernet address\n");
2746 if (get_param_value(buf, sizeof(buf), "model", p)) {
2747 nd->model = strdup(buf);
2753 if (!strcmp(device, "none")) {
2754 /* does nothing. It is needed to signal that no network cards
2759 if (!strcmp(device, "user")) {
2760 ret = net_slirp_init(vlan);
2764 if (!strcmp(device, "tap")) {
2766 if (get_param_value(ifname, sizeof(ifname), "ifname", p) <= 0) {
2767 fprintf(stderr, "tap: no interface name\n");
2770 ret = tap_win32_init(vlan, ifname);
2773 if (!strcmp(device, "tap")) {
2775 char setup_script[1024];
2777 if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2778 fd = strtol(buf, NULL, 0);
2780 if (net_tap_fd_init(vlan, fd))
2783 get_param_value(ifname, sizeof(ifname), "ifname", p);
2784 if (get_param_value(setup_script, sizeof(setup_script), "script", p) == 0) {
2785 pstrcpy(setup_script, sizeof(setup_script), DEFAULT_NETWORK_SCRIPT);
2787 ret = net_tap_init(vlan, ifname, setup_script);
2791 if (!strcmp(device, "socket")) {
2792 if (get_param_value(buf, sizeof(buf), "fd", p) > 0) {
2794 fd = strtol(buf, NULL, 0);
2796 if (net_socket_fd_init(vlan, fd, 1))
2798 } else if (get_param_value(buf, sizeof(buf), "listen", p) > 0) {
2799 ret = net_socket_listen_init(vlan, buf);
2800 } else if (get_param_value(buf, sizeof(buf), "connect", p) > 0) {
2801 ret = net_socket_connect_init(vlan, buf);
2802 } else if (get_param_value(buf, sizeof(buf), "mcast", p) > 0) {
2803 ret = net_socket_mcast_init(vlan, buf);
2805 fprintf(stderr, "Unknown socket options: %s\n", p);
2810 fprintf(stderr, "Unknown network device: %s\n", device);
2814 fprintf(stderr, "Could not initialize device '%s'\n", device);
2820 void do_info_network(void)
2823 VLANClientState *vc;
2825 for(vlan = first_vlan; vlan != NULL; vlan = vlan->next) {
2826 term_printf("VLAN %d devices:\n", vlan->id);
2827 for(vc = vlan->first_client; vc != NULL; vc = vc->next)
2828 term_printf(" %s\n", vc->info_str);
2832 /***********************************************************/
2835 static int usb_device_add(const char *devname)
2843 for(i = 0;i < MAX_VM_USB_PORTS; i++) {
2844 if (!vm_usb_ports[i]->dev)
2847 if (i == MAX_VM_USB_PORTS)
2850 if (strstart(devname, "host:", &p)) {
2851 dev = usb_host_device_open(p);
2854 } else if (!strcmp(devname, "mouse")) {
2855 dev = usb_mouse_init();
2861 usb_attach(vm_usb_ports[i], dev);
2865 static int usb_device_del(const char *devname)
2868 int bus_num, addr, i;
2874 p = strchr(devname, '.');
2877 bus_num = strtoul(devname, NULL, 0);
2878 addr = strtoul(p + 1, NULL, 0);
2881 for(i = 0;i < MAX_VM_USB_PORTS; i++) {
2882 dev = vm_usb_ports[i]->dev;
2883 if (dev && dev->addr == addr)
2886 if (i == MAX_VM_USB_PORTS)
2888 usb_attach(vm_usb_ports[i], NULL);
2892 void do_usb_add(const char *devname)
2895 ret = usb_device_add(devname);
2897 term_printf("Could not add USB device '%s'\n", devname);
2900 void do_usb_del(const char *devname)
2903 ret = usb_device_del(devname);
2905 term_printf("Could not remove USB device '%s'\n", devname);
2912 const char *speed_str;
2915 term_printf("USB support not enabled\n");
2919 for(i = 0; i < MAX_VM_USB_PORTS; i++) {
2920 dev = vm_usb_ports[i]->dev;
2922 term_printf("Hub port %d:\n", i);
2923 switch(dev->speed) {
2927 case USB_SPEED_FULL:
2930 case USB_SPEED_HIGH:
2937 term_printf(" Device %d.%d, speed %s Mb/s\n",
2938 0, dev->addr, speed_str);
2943 /***********************************************************/
2946 static char *pid_filename;
2948 /* Remove PID file. Called on normal exit */
2950 static void remove_pidfile(void)
2952 unlink (pid_filename);
2955 static void create_pidfile(const char *filename)
2957 struct stat pidstat;
2960 /* Try to write our PID to the named file */
2961 if (stat(filename, &pidstat) < 0) {
2962 if (errno == ENOENT) {
2963 if ((f = fopen (filename, "w")) == NULL) {
2964 perror("Opening pidfile");
2967 fprintf(f, "%d\n", getpid());
2969 pid_filename = qemu_strdup(filename);
2970 if (!pid_filename) {
2971 fprintf(stderr, "Could not save PID filename");
2974 atexit(remove_pidfile);
2977 fprintf(stderr, "%s already exists. Remove it and try again.\n",
2983 /***********************************************************/
2986 static void dumb_update(DisplayState *ds, int x, int y, int w, int h)
2990 static void dumb_resize(DisplayState *ds, int w, int h)
2994 static void dumb_refresh(DisplayState *ds)
2999 void dumb_display_init(DisplayState *ds)
3004 ds->dpy_update = dumb_update;
3005 ds->dpy_resize = dumb_resize;
3006 ds->dpy_refresh = dumb_refresh;
3009 #if !defined(CONFIG_SOFTMMU)
3010 /***********************************************************/
3011 /* cpu signal handler */
3012 static void host_segv_handler(int host_signum, siginfo_t *info,
3015 if (cpu_signal_handler(host_signum, info, puc))
3017 if (stdio_nb_clients > 0)
3023 /***********************************************************/
3026 #define MAX_IO_HANDLERS 64
3028 typedef struct IOHandlerRecord {
3030 IOCanRWHandler *fd_read_poll;
3032 IOHandler *fd_write;
3034 /* temporary data */
3036 struct IOHandlerRecord *next;
3039 static IOHandlerRecord *first_io_handler;
3041 /* XXX: fd_read_poll should be suppressed, but an API change is
3042 necessary in the character devices to suppress fd_can_read(). */
3043 int qemu_set_fd_handler2(int fd,
3044 IOCanRWHandler *fd_read_poll,
3046 IOHandler *fd_write,
3049 IOHandlerRecord **pioh, *ioh;
3051 if (!fd_read && !fd_write) {
3052 pioh = &first_io_handler;
3057 if (ioh->fd == fd) {
3065 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
3069 ioh = qemu_mallocz(sizeof(IOHandlerRecord));
3072 ioh->next = first_io_handler;
3073 first_io_handler = ioh;
3076 ioh->fd_read_poll = fd_read_poll;
3077 ioh->fd_read = fd_read;
3078 ioh->fd_write = fd_write;
3079 ioh->opaque = opaque;
3084 int qemu_set_fd_handler(int fd,
3086 IOHandler *fd_write,
3089 return qemu_set_fd_handler2(fd, NULL, fd_read, fd_write, opaque);
3092 /***********************************************************/
3093 /* savevm/loadvm support */
3095 void qemu_put_buffer(QEMUFile *f, const uint8_t *buf, int size)
3097 fwrite(buf, 1, size, f);
3100 void qemu_put_byte(QEMUFile *f, int v)
3105 void qemu_put_be16(QEMUFile *f, unsigned int v)
3107 qemu_put_byte(f, v >> 8);
3108 qemu_put_byte(f, v);
3111 void qemu_put_be32(QEMUFile *f, unsigned int v)
3113 qemu_put_byte(f, v >> 24);
3114 qemu_put_byte(f, v >> 16);
3115 qemu_put_byte(f, v >> 8);
3116 qemu_put_byte(f, v);
3119 void qemu_put_be64(QEMUFile *f, uint64_t v)
3121 qemu_put_be32(f, v >> 32);
3122 qemu_put_be32(f, v);
3125 int qemu_get_buffer(QEMUFile *f, uint8_t *buf, int size)
3127 return fread(buf, 1, size, f);
3130 int qemu_get_byte(QEMUFile *f)
3140 unsigned int qemu_get_be16(QEMUFile *f)
3143 v = qemu_get_byte(f) << 8;
3144 v |= qemu_get_byte(f);
3148 unsigned int qemu_get_be32(QEMUFile *f)
3151 v = qemu_get_byte(f) << 24;
3152 v |= qemu_get_byte(f) << 16;
3153 v |= qemu_get_byte(f) << 8;
3154 v |= qemu_get_byte(f);
3158 uint64_t qemu_get_be64(QEMUFile *f)
3161 v = (uint64_t)qemu_get_be32(f) << 32;
3162 v |= qemu_get_be32(f);
3166 int64_t qemu_ftell(QEMUFile *f)
3171 int64_t qemu_fseek(QEMUFile *f, int64_t pos, int whence)
3173 if (fseek(f, pos, whence) < 0)
3178 typedef struct SaveStateEntry {
3182 SaveStateHandler *save_state;
3183 LoadStateHandler *load_state;
3185 struct SaveStateEntry *next;
3188 static SaveStateEntry *first_se;
3190 int register_savevm(const char *idstr,
3193 SaveStateHandler *save_state,
3194 LoadStateHandler *load_state,
3197 SaveStateEntry *se, **pse;
3199 se = qemu_malloc(sizeof(SaveStateEntry));
3202 pstrcpy(se->idstr, sizeof(se->idstr), idstr);
3203 se->instance_id = instance_id;
3204 se->version_id = version_id;
3205 se->save_state = save_state;
3206 se->load_state = load_state;
3207 se->opaque = opaque;
3210 /* add at the end of list */
3212 while (*pse != NULL)
3213 pse = &(*pse)->next;
3218 #define QEMU_VM_FILE_MAGIC 0x5145564d
3219 #define QEMU_VM_FILE_VERSION 0x00000001
3221 int qemu_savevm(const char *filename)
3225 int len, len_pos, cur_pos, saved_vm_running, ret;
3227 saved_vm_running = vm_running;
3230 f = fopen(filename, "wb");
3236 qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
3237 qemu_put_be32(f, QEMU_VM_FILE_VERSION);
3239 for(se = first_se; se != NULL; se = se->next) {
3241 len = strlen(se->idstr);
3242 qemu_put_byte(f, len);
3243 qemu_put_buffer(f, se->idstr, len);
3245 qemu_put_be32(f, se->instance_id);
3246 qemu_put_be32(f, se->version_id);
3248 /* record size: filled later */
3250 qemu_put_be32(f, 0);
3252 se->save_state(f, se->opaque);
3254 /* fill record size */
3256 len = ftell(f) - len_pos - 4;
3257 fseek(f, len_pos, SEEK_SET);
3258 qemu_put_be32(f, len);
3259 fseek(f, cur_pos, SEEK_SET);
3265 if (saved_vm_running)
3270 static SaveStateEntry *find_se(const char *idstr, int instance_id)
3274 for(se = first_se; se != NULL; se = se->next) {
3275 if (!strcmp(se->idstr, idstr) &&
3276 instance_id == se->instance_id)
3282 int qemu_loadvm(const char *filename)
3286 int len, cur_pos, ret, instance_id, record_len, version_id;
3287 int saved_vm_running;
3291 saved_vm_running = vm_running;
3294 f = fopen(filename, "rb");
3300 v = qemu_get_be32(f);
3301 if (v != QEMU_VM_FILE_MAGIC)
3303 v = qemu_get_be32(f);
3304 if (v != QEMU_VM_FILE_VERSION) {
3311 len = qemu_get_byte(f);
3314 qemu_get_buffer(f, idstr, len);
3316 instance_id = qemu_get_be32(f);
3317 version_id = qemu_get_be32(f);
3318 record_len = qemu_get_be32(f);
3320 printf("idstr=%s instance=0x%x version=%d len=%d\n",
3321 idstr, instance_id, version_id, record_len);
3324 se = find_se(idstr, instance_id);
3326 fprintf(stderr, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
3327 instance_id, idstr);
3329 ret = se->load_state(f, se->opaque, version_id);
3331 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
3332 instance_id, idstr);
3335 /* always seek to exact end of record */
3336 qemu_fseek(f, cur_pos + record_len, SEEK_SET);
3341 if (saved_vm_running)
3346 /***********************************************************/
3347 /* cpu save/restore */
3349 #if defined(TARGET_I386)
3351 static void cpu_put_seg(QEMUFile *f, SegmentCache *dt)
3353 qemu_put_be32(f, dt->selector);
3354 qemu_put_betl(f, dt->base);
3355 qemu_put_be32(f, dt->limit);
3356 qemu_put_be32(f, dt->flags);
3359 static void cpu_get_seg(QEMUFile *f, SegmentCache *dt)
3361 dt->selector = qemu_get_be32(f);
3362 dt->base = qemu_get_betl(f);
3363 dt->limit = qemu_get_be32(f);
3364 dt->flags = qemu_get_be32(f);
3367 void cpu_save(QEMUFile *f, void *opaque)
3369 CPUState *env = opaque;
3370 uint16_t fptag, fpus, fpuc, fpregs_format;
3374 for(i = 0; i < CPU_NB_REGS; i++)
3375 qemu_put_betls(f, &env->regs[i]);
3376 qemu_put_betls(f, &env->eip);
3377 qemu_put_betls(f, &env->eflags);
3378 hflags = env->hflags; /* XXX: suppress most of the redundant hflags */
3379 qemu_put_be32s(f, &hflags);
3383 fpus = (env->fpus & ~0x3800) | (env->fpstt & 0x7) << 11;
3385 for(i = 0; i < 8; i++) {
3386 fptag |= ((!env->fptags[i]) << i);
3389 qemu_put_be16s(f, &fpuc);
3390 qemu_put_be16s(f, &fpus);
3391 qemu_put_be16s(f, &fptag);
3393 #ifdef USE_X86LDOUBLE
3398 qemu_put_be16s(f, &fpregs_format);
3400 for(i = 0; i < 8; i++) {
3401 #ifdef USE_X86LDOUBLE
3405 /* we save the real CPU data (in case of MMX usage only 'mant'
3406 contains the MMX register */
3407 cpu_get_fp80(&mant, &exp, env->fpregs[i].d);
3408 qemu_put_be64(f, mant);
3409 qemu_put_be16(f, exp);
3412 /* if we use doubles for float emulation, we save the doubles to
3413 avoid losing information in case of MMX usage. It can give
3414 problems if the image is restored on a CPU where long
3415 doubles are used instead. */
3416 qemu_put_be64(f, env->fpregs[i].mmx.MMX_Q(0));
3420 for(i = 0; i < 6; i++)
3421 cpu_put_seg(f, &env->segs[i]);
3422 cpu_put_seg(f, &env->ldt);
3423 cpu_put_seg(f, &env->tr);
3424 cpu_put_seg(f, &env->gdt);
3425 cpu_put_seg(f, &env->idt);
3427 qemu_put_be32s(f, &env->sysenter_cs);
3428 qemu_put_be32s(f, &env->sysenter_esp);
3429 qemu_put_be32s(f, &env->sysenter_eip);
3431 qemu_put_betls(f, &env->cr[0]);
3432 qemu_put_betls(f, &env->cr[2]);
3433 qemu_put_betls(f, &env->cr[3]);
3434 qemu_put_betls(f, &env->cr[4]);
3436 for(i = 0; i < 8; i++)
3437 qemu_put_betls(f, &env->dr[i]);
3440 qemu_put_be32s(f, &env->a20_mask);
3443 qemu_put_be32s(f, &env->mxcsr);
3444 for(i = 0; i < CPU_NB_REGS; i++) {
3445 qemu_put_be64s(f, &env->xmm_regs[i].XMM_Q(0));
3446 qemu_put_be64s(f, &env->xmm_regs[i].XMM_Q(1));
3449 #ifdef TARGET_X86_64
3450 qemu_put_be64s(f, &env->efer);
3451 qemu_put_be64s(f, &env->star);
3452 qemu_put_be64s(f, &env->lstar);
3453 qemu_put_be64s(f, &env->cstar);
3454 qemu_put_be64s(f, &env->fmask);
3455 qemu_put_be64s(f, &env->kernelgsbase);
3459 #ifdef USE_X86LDOUBLE
3460 /* XXX: add that in a FPU generic layer */
3461 union x86_longdouble {
3466 #define MANTD1(fp) (fp & ((1LL << 52) - 1))
3467 #define EXPBIAS1 1023
3468 #define EXPD1(fp) ((fp >> 52) & 0x7FF)
3469 #define SIGND1(fp) ((fp >> 32) & 0x80000000)
3471 static void fp64_to_fp80(union x86_longdouble *p, uint64_t temp)
3475 p->mant = (MANTD1(temp) << 11) | (1LL << 63);
3476 /* exponent + sign */
3477 e = EXPD1(temp) - EXPBIAS1 + 16383;
3478 e |= SIGND1(temp) >> 16;
3483 int cpu_load(QEMUFile *f, void *opaque, int version_id)
3485 CPUState *env = opaque;
3488 uint16_t fpus, fpuc, fptag, fpregs_format;
3490 if (version_id != 3)
3492 for(i = 0; i < CPU_NB_REGS; i++)
3493 qemu_get_betls(f, &env->regs[i]);
3494 qemu_get_betls(f, &env->eip);
3495 qemu_get_betls(f, &env->eflags);
3496 qemu_get_be32s(f, &hflags);
3498 qemu_get_be16s(f, &fpuc);
3499 qemu_get_be16s(f, &fpus);
3500 qemu_get_be16s(f, &fptag);
3501 qemu_get_be16s(f, &fpregs_format);
3503 /* NOTE: we cannot always restore the FPU state if the image come
3504 from a host with a different 'USE_X86LDOUBLE' define. We guess
3505 if we are in an MMX state to restore correctly in that case. */
3506 guess_mmx = ((fptag == 0xff) && (fpus & 0x3800) == 0);
3507 for(i = 0; i < 8; i++) {
3511 switch(fpregs_format) {
3513 mant = qemu_get_be64(f);
3514 exp = qemu_get_be16(f);
3515 #ifdef USE_X86LDOUBLE
3516 env->fpregs[i].d = cpu_set_fp80(mant, exp);
3518 /* difficult case */
3520 env->fpregs[i].mmx.MMX_Q(0) = mant;
3522 env->fpregs[i].d = cpu_set_fp80(mant, exp);
3526 mant = qemu_get_be64(f);
3527 #ifdef USE_X86LDOUBLE
3529 union x86_longdouble *p;
3530 /* difficult case */
3531 p = (void *)&env->fpregs[i];
3536 fp64_to_fp80(p, mant);
3540 env->fpregs[i].mmx.MMX_Q(0) = mant;
3549 /* XXX: restore FPU round state */
3550 env->fpstt = (fpus >> 11) & 7;
3551 env->fpus = fpus & ~0x3800;
3553 for(i = 0; i < 8; i++) {
3554 env->fptags[i] = (fptag >> i) & 1;
3557 for(i = 0; i < 6; i++)
3558 cpu_get_seg(f, &env->segs[i]);
3559 cpu_get_seg(f, &env->ldt);
3560 cpu_get_seg(f, &env->tr);
3561 cpu_get_seg(f, &env->gdt);
3562 cpu_get_seg(f, &env->idt);
3564 qemu_get_be32s(f, &env->sysenter_cs);
3565 qemu_get_be32s(f, &env->sysenter_esp);
3566 qemu_get_be32s(f, &env->sysenter_eip);
3568 qemu_get_betls(f, &env->cr[0]);
3569 qemu_get_betls(f, &env->cr[2]);
3570 qemu_get_betls(f, &env->cr[3]);
3571 qemu_get_betls(f, &env->cr[4]);
3573 for(i = 0; i < 8; i++)
3574 qemu_get_betls(f, &env->dr[i]);
3577 qemu_get_be32s(f, &env->a20_mask);
3579 qemu_get_be32s(f, &env->mxcsr);
3580 for(i = 0; i < CPU_NB_REGS; i++) {
3581 qemu_get_be64s(f, &env->xmm_regs[i].XMM_Q(0));
3582 qemu_get_be64s(f, &env->xmm_regs[i].XMM_Q(1));
3585 #ifdef TARGET_X86_64
3586 qemu_get_be64s(f, &env->efer);
3587 qemu_get_be64s(f, &env->star);
3588 qemu_get_be64s(f, &env->lstar);
3589 qemu_get_be64s(f, &env->cstar);
3590 qemu_get_be64s(f, &env->fmask);
3591 qemu_get_be64s(f, &env->kernelgsbase);
3594 /* XXX: compute hflags from scratch, except for CPL and IIF */
3595 env->hflags = hflags;
3600 #elif defined(TARGET_PPC)
3601 void cpu_save(QEMUFile *f, void *opaque)
3605 int cpu_load(QEMUFile *f, void *opaque, int version_id)
3610 #elif defined(TARGET_MIPS)
3611 void cpu_save(QEMUFile *f, void *opaque)
3615 int cpu_load(QEMUFile *f, void *opaque, int version_id)
3620 #elif defined(TARGET_SPARC)
3621 void cpu_save(QEMUFile *f, void *opaque)
3623 CPUState *env = opaque;
3627 for(i = 0; i < 8; i++)
3628 qemu_put_betls(f, &env->gregs[i]);
3629 for(i = 0; i < NWINDOWS * 16; i++)
3630 qemu_put_betls(f, &env->regbase[i]);
3633 for(i = 0; i < TARGET_FPREGS; i++) {
3639 qemu_put_betl(f, u.i);
3642 qemu_put_betls(f, &env->pc);
3643 qemu_put_betls(f, &env->npc);
3644 qemu_put_betls(f, &env->y);
3646 qemu_put_be32(f, tmp);
3647 qemu_put_betls(f, &env->fsr);
3648 qemu_put_betls(f, &env->tbr);
3649 #ifndef TARGET_SPARC64
3650 qemu_put_be32s(f, &env->wim);
3652 for(i = 0; i < 16; i++)
3653 qemu_put_be32s(f, &env->mmuregs[i]);
3657 int cpu_load(QEMUFile *f, void *opaque, int version_id)
3659 CPUState *env = opaque;
3663 for(i = 0; i < 8; i++)
3664 qemu_get_betls(f, &env->gregs[i]);
3665 for(i = 0; i < NWINDOWS * 16; i++)
3666 qemu_get_betls(f, &env->regbase[i]);
3669 for(i = 0; i < TARGET_FPREGS; i++) {
3674 u.i = qemu_get_betl(f);
3678 qemu_get_betls(f, &env->pc);
3679 qemu_get_betls(f, &env->npc);
3680 qemu_get_betls(f, &env->y);
3681 tmp = qemu_get_be32(f);
3682 env->cwp = 0; /* needed to ensure that the wrapping registers are
3683 correctly updated */
3685 qemu_get_betls(f, &env->fsr);
3686 qemu_get_betls(f, &env->tbr);
3687 #ifndef TARGET_SPARC64
3688 qemu_get_be32s(f, &env->wim);
3690 for(i = 0; i < 16; i++)
3691 qemu_get_be32s(f, &env->mmuregs[i]);
3697 #elif defined(TARGET_ARM)
3699 /* ??? Need to implement these. */
3700 void cpu_save(QEMUFile *f, void *opaque)
3704 int cpu_load(QEMUFile *f, void *opaque, int version_id)
3711 #warning No CPU save/restore functions
3715 /***********************************************************/
3716 /* ram save/restore */
3718 /* we just avoid storing empty pages */
3719 static void ram_put_page(QEMUFile *f, const uint8_t *buf, int len)
3724 for(i = 1; i < len; i++) {
3728 qemu_put_byte(f, 1);
3729 qemu_put_byte(f, v);
3732 qemu_put_byte(f, 0);
3733 qemu_put_buffer(f, buf, len);
3736 static int ram_get_page(QEMUFile *f, uint8_t *buf, int len)
3740 v = qemu_get_byte(f);
3743 if (qemu_get_buffer(f, buf, len) != len)
3747 v = qemu_get_byte(f);
3748 memset(buf, v, len);
3756 static void ram_save(QEMUFile *f, void *opaque)
3759 qemu_put_be32(f, phys_ram_size);
3760 for(i = 0; i < phys_ram_size; i+= TARGET_PAGE_SIZE) {
3761 ram_put_page(f, phys_ram_base + i, TARGET_PAGE_SIZE);
3765 static int ram_load(QEMUFile *f, void *opaque, int version_id)
3769 if (version_id != 1)
3771 if (qemu_get_be32(f) != phys_ram_size)
3773 for(i = 0; i < phys_ram_size; i+= TARGET_PAGE_SIZE) {
3774 ret = ram_get_page(f, phys_ram_base + i, TARGET_PAGE_SIZE);
3781 /***********************************************************/
3782 /* machine registration */
3784 QEMUMachine *first_machine = NULL;
3786 int qemu_register_machine(QEMUMachine *m)
3789 pm = &first_machine;
3797 QEMUMachine *find_machine(const char *name)
3801 for(m = first_machine; m != NULL; m = m->next) {
3802 if (!strcmp(m->name, name))
3808 /***********************************************************/
3809 /* main execution loop */
3811 void gui_update(void *opaque)
3813 display_state.dpy_refresh(&display_state);
3814 qemu_mod_timer(gui_timer, GUI_REFRESH_INTERVAL + qemu_get_clock(rt_clock));
3817 struct vm_change_state_entry {
3818 VMChangeStateHandler *cb;
3820 LIST_ENTRY (vm_change_state_entry) entries;
3823 static LIST_HEAD(vm_change_state_head, vm_change_state_entry) vm_change_state_head;
3825 VMChangeStateEntry *qemu_add_vm_change_state_handler(VMChangeStateHandler *cb,
3828 VMChangeStateEntry *e;
3830 e = qemu_mallocz(sizeof (*e));
3836 LIST_INSERT_HEAD(&vm_change_state_head, e, entries);
3840 void qemu_del_vm_change_state_handler(VMChangeStateEntry *e)
3842 LIST_REMOVE (e, entries);
3846 static void vm_state_notify(int running)
3848 VMChangeStateEntry *e;
3850 for (e = vm_change_state_head.lh_first; e; e = e->entries.le_next) {
3851 e->cb(e->opaque, running);
3855 /* XXX: support several handlers */
3856 static VMStopHandler *vm_stop_cb;
3857 static void *vm_stop_opaque;
3859 int qemu_add_vm_stop_handler(VMStopHandler *cb, void *opaque)
3862 vm_stop_opaque = opaque;
3866 void qemu_del_vm_stop_handler(VMStopHandler *cb, void *opaque)
3880 void vm_stop(int reason)
3883 cpu_disable_ticks();
3887 vm_stop_cb(vm_stop_opaque, reason);
3894 /* reset/shutdown handler */
3896 typedef struct QEMUResetEntry {
3897 QEMUResetHandler *func;
3899 struct QEMUResetEntry *next;
3902 static QEMUResetEntry *first_reset_entry;
3903 static int reset_requested;
3904 static int shutdown_requested;
3905 static int powerdown_requested;
3907 void qemu_register_reset(QEMUResetHandler *func, void *opaque)
3909 QEMUResetEntry **pre, *re;
3911 pre = &first_reset_entry;
3912 while (*pre != NULL)
3913 pre = &(*pre)->next;
3914 re = qemu_mallocz(sizeof(QEMUResetEntry));
3916 re->opaque = opaque;
3921 void qemu_system_reset(void)
3925 /* reset all devices */
3926 for(re = first_reset_entry; re != NULL; re = re->next) {
3927 re->func(re->opaque);
3931 void qemu_system_reset_request(void)
3933 reset_requested = 1;
3935 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
3938 void qemu_system_shutdown_request(void)
3940 shutdown_requested = 1;
3942 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
3945 void qemu_system_powerdown_request(void)
3947 powerdown_requested = 1;
3949 cpu_interrupt(cpu_single_env, CPU_INTERRUPT_EXIT);
3952 void main_loop_wait(int timeout)
3954 IOHandlerRecord *ioh, *ioh_next;
3960 /* XXX: see how to merge it with the select. The constraint is
3961 that the select must be interrupted by the timer */
3965 /* poll any events */
3966 /* XXX: separate device handlers from system ones */
3970 for(ioh = first_io_handler; ioh != NULL; ioh = ioh->next) {
3972 (!ioh->fd_read_poll ||
3973 ioh->fd_read_poll(ioh->opaque) != 0)) {
3974 FD_SET(ioh->fd, &rfds);
3978 if (ioh->fd_write) {
3979 FD_SET(ioh->fd, &wfds);
3989 tv.tv_usec = timeout * 1000;
3991 ret = select(nfds + 1, &rfds, &wfds, NULL, &tv);
3993 /* XXX: better handling of removal */
3994 for(ioh = first_io_handler; ioh != NULL; ioh = ioh_next) {
3995 ioh_next = ioh->next;
3996 if (FD_ISSET(ioh->fd, &rfds)) {
3997 ioh->fd_read(ioh->opaque);
3999 if (FD_ISSET(ioh->fd, &wfds)) {
4000 ioh->fd_write(ioh->opaque);
4008 #if defined(CONFIG_SLIRP)
4009 /* XXX: merge with the previous select() */
4011 fd_set rfds, wfds, xfds;
4019 slirp_select_fill(&nfds, &rfds, &wfds, &xfds);
4022 ret = select(nfds + 1, &rfds, &wfds, &xfds, &tv);
4024 slirp_select_poll(&rfds, &wfds, &xfds);
4030 qemu_run_timers(&active_timers[QEMU_TIMER_VIRTUAL],
4031 qemu_get_clock(vm_clock));
4032 /* run dma transfers, if any */
4036 /* real time timers */
4037 qemu_run_timers(&active_timers[QEMU_TIMER_REALTIME],
4038 qemu_get_clock(rt_clock));
4041 static CPUState *cur_cpu;
4046 #ifdef CONFIG_PROFILER
4051 cur_cpu = first_cpu;
4058 env = env->next_cpu;
4061 #ifdef CONFIG_PROFILER
4062 ti = profile_getclock();
4064 ret = cpu_exec(env);
4065 #ifdef CONFIG_PROFILER
4066 qemu_time += profile_getclock() - ti;
4068 if (ret != EXCP_HALTED)
4070 /* all CPUs are halted ? */
4071 if (env == cur_cpu) {
4078 if (shutdown_requested) {
4079 ret = EXCP_INTERRUPT;
4082 if (reset_requested) {
4083 reset_requested = 0;
4084 qemu_system_reset();
4085 ret = EXCP_INTERRUPT;
4087 if (powerdown_requested) {
4088 powerdown_requested = 0;
4089 qemu_system_powerdown();
4090 ret = EXCP_INTERRUPT;
4092 if (ret == EXCP_DEBUG) {
4093 vm_stop(EXCP_DEBUG);
4095 /* if hlt instruction, we wait until the next IRQ */
4096 /* XXX: use timeout computed from timers */
4097 if (ret == EXCP_HLT)
4104 #ifdef CONFIG_PROFILER
4105 ti = profile_getclock();
4107 main_loop_wait(timeout);
4108 #ifdef CONFIG_PROFILER
4109 dev_time += profile_getclock() - ti;
4112 cpu_disable_ticks();
4118 printf("QEMU PC emulator version " QEMU_VERSION ", Copyright (c) 2003-2005 Fabrice Bellard\n"
4119 "usage: %s [options] [disk_image]\n"
4121 "'disk_image' is a raw hard image image for IDE hard disk 0\n"
4123 "Standard options:\n"
4124 "-M machine select emulated machine (-M ? for list)\n"
4125 "-fda/-fdb file use 'file' as floppy disk 0/1 image\n"
4126 "-hda/-hdb file use 'file' as IDE hard disk 0/1 image\n"
4127 "-hdc/-hdd file use 'file' as IDE hard disk 2/3 image\n"
4128 "-cdrom file use 'file' as IDE cdrom image (cdrom is ide1 master)\n"
4129 "-boot [a|c|d] boot on floppy (a), hard disk (c) or CD-ROM (d)\n"
4130 "-snapshot write to temporary files instead of disk image files\n"
4131 "-m megs set virtual RAM size to megs MB [default=%d]\n"
4132 "-smp n set the number of CPUs to 'n' [default=1]\n"
4133 "-nographic disable graphical output and redirect serial I/Os to console\n"
4135 "-k language use keyboard layout (for example \"fr\" for French)\n"
4138 "-audio-help print list of audio drivers and their options\n"
4139 "-soundhw c1,... enable audio support\n"
4140 " and only specified sound cards (comma separated list)\n"
4141 " use -soundhw ? to get the list of supported cards\n"
4142 " use -soundhw all to enable all of them\n"
4144 "-localtime set the real time clock to local time [default=utc]\n"
4145 "-full-screen start in full screen\n"
4147 "-win2k-hack use it when installing Windows 2000 to avoid a disk full bug\n"
4149 "-usb enable the USB driver (will be the default soon)\n"
4150 "-usbdevice name add the host or guest USB device 'name'\n"
4151 #if defined(TARGET_PPC) || defined(TARGET_SPARC)
4152 "-g WxH[xDEPTH] Set the initial graphical resolution and depth\n"
4155 "Network options:\n"
4156 "-net nic[,vlan=n][,macaddr=addr][,model=type]\n"
4157 " create a new Network Interface Card and connect it to VLAN 'n'\n"
4159 "-net user[,vlan=n]\n"
4160 " connect the user mode network stack to VLAN 'n'\n"
4163 "-net tap[,vlan=n],ifname=name\n"
4164 " connect the host TAP network interface to VLAN 'n'\n"
4166 "-net tap[,vlan=n][,fd=h][,ifname=name][,script=file]\n"
4167 " connect the host TAP network interface to VLAN 'n' and use\n"
4168 " the network script 'file' (default=%s);\n"
4169 " use 'fd=h' to connect to an already opened TAP interface\n"
4171 "-net socket[,vlan=n][,fd=h][,listen=[host]:port][,connect=host:port]\n"
4172 " connect the vlan 'n' to another VLAN using a socket connection\n"
4173 "-net socket[,vlan=n][,fd=h][,mcast=maddr:port]\n"
4174 " connect the vlan 'n' to multicast maddr and port\n"
4175 "-net none use it alone to have zero network devices; if no -net option\n"
4176 " is provided, the default is '-net nic -net user'\n"
4179 "-tftp prefix allow tftp access to files starting with prefix [-net user]\n"
4181 "-smb dir allow SMB access to files in 'dir' [-net user]\n"
4183 "-redir [tcp|udp]:host-port:[guest-host]:guest-port\n"
4184 " redirect TCP or UDP connections from host to guest [-net user]\n"
4187 "Linux boot specific:\n"
4188 "-kernel bzImage use 'bzImage' as kernel image\n"
4189 "-append cmdline use 'cmdline' as kernel command line\n"
4190 "-initrd file use 'file' as initial ram disk\n"
4192 "Debug/Expert options:\n"
4193 "-monitor dev redirect the monitor to char device 'dev'\n"
4194 "-serial dev redirect the serial port to char device 'dev'\n"
4195 "-parallel dev redirect the parallel port to char device 'dev'\n"
4196 "-pidfile file Write PID to 'file'\n"
4197 "-S freeze CPU at startup (use 'c' to start execution)\n"
4198 "-s wait gdb connection to port %d\n"
4199 "-p port change gdb connection port\n"
4200 "-d item1,... output log to %s (use -d ? for a list of log items)\n"
4201 "-hdachs c,h,s[,t] force hard disk 0 physical geometry and the optional BIOS\n"
4202 " translation (t=none or lba) (usually qemu can guess them)\n"
4203 "-L path set the directory for the BIOS and VGA BIOS\n"
4205 "-no-kqemu disable KQEMU kernel module usage\n"
4207 #ifdef USE_CODE_COPY
4208 "-no-code-copy disable code copy acceleration\n"
4211 "-std-vga simulate a standard VGA card with VESA Bochs Extensions\n"
4212 " (default is CL-GD5446 PCI VGA)\n"
4214 "-loadvm file start right away with a saved state (loadvm in monitor)\n"
4216 "During emulation, the following keys are useful:\n"
4217 "ctrl-alt-f toggle full screen\n"
4218 "ctrl-alt-n switch to virtual console 'n'\n"
4219 "ctrl-alt toggle mouse and keyboard grab\n"
4221 "When using -nographic, press 'ctrl-a h' to get some help.\n"
4223 #ifdef CONFIG_SOFTMMU
4230 DEFAULT_NETWORK_SCRIPT,
4232 DEFAULT_GDBSTUB_PORT,
4234 #ifndef CONFIG_SOFTMMU
4236 "NOTE: this version of QEMU is faster but it needs slightly patched OSes to\n"
4237 "work. Please use the 'qemu' executable to have a more accurate (but slower)\n"
4243 #define HAS_ARG 0x0001
4257 QEMU_OPTION_snapshot,
4259 QEMU_OPTION_nographic,
4261 QEMU_OPTION_audio_help,
4262 QEMU_OPTION_soundhw,
4280 QEMU_OPTION_no_code_copy,
4282 QEMU_OPTION_localtime,
4283 QEMU_OPTION_cirrusvga,
4285 QEMU_OPTION_std_vga,
4286 QEMU_OPTION_monitor,
4288 QEMU_OPTION_parallel,
4290 QEMU_OPTION_full_screen,
4291 QEMU_OPTION_pidfile,
4292 QEMU_OPTION_no_kqemu,
4293 QEMU_OPTION_kernel_kqemu,
4294 QEMU_OPTION_win2k_hack,
4296 QEMU_OPTION_usbdevice,
4300 typedef struct QEMUOption {
4306 const QEMUOption qemu_options[] = {
4307 { "h", 0, QEMU_OPTION_h },
4309 { "M", HAS_ARG, QEMU_OPTION_M },
4310 { "fda", HAS_ARG, QEMU_OPTION_fda },
4311 { "fdb", HAS_ARG, QEMU_OPTION_fdb },
4312 { "hda", HAS_ARG, QEMU_OPTION_hda },
4313 { "hdb", HAS_ARG, QEMU_OPTION_hdb },
4314 { "hdc", HAS_ARG, QEMU_OPTION_hdc },
4315 { "hdd", HAS_ARG, QEMU_OPTION_hdd },
4316 { "cdrom", HAS_ARG, QEMU_OPTION_cdrom },
4317 { "boot", HAS_ARG, QEMU_OPTION_boot },
4318 { "snapshot", 0, QEMU_OPTION_snapshot },
4319 { "m", HAS_ARG, QEMU_OPTION_m },
4320 { "nographic", 0, QEMU_OPTION_nographic },
4321 { "k", HAS_ARG, QEMU_OPTION_k },
4323 { "audio-help", 0, QEMU_OPTION_audio_help },
4324 { "soundhw", HAS_ARG, QEMU_OPTION_soundhw },
4327 { "net", HAS_ARG, QEMU_OPTION_net},
4329 { "tftp", HAS_ARG, QEMU_OPTION_tftp },
4331 { "smb", HAS_ARG, QEMU_OPTION_smb },
4333 { "redir", HAS_ARG, QEMU_OPTION_redir },
4336 { "kernel", HAS_ARG, QEMU_OPTION_kernel },
4337 { "append", HAS_ARG, QEMU_OPTION_append },
4338 { "initrd", HAS_ARG, QEMU_OPTION_initrd },
4340 { "S", 0, QEMU_OPTION_S },
4341 { "s", 0, QEMU_OPTION_s },
4342 { "p", HAS_ARG, QEMU_OPTION_p },
4343 { "d", HAS_ARG, QEMU_OPTION_d },
4344 { "hdachs", HAS_ARG, QEMU_OPTION_hdachs },
4345 { "L", HAS_ARG, QEMU_OPTION_L },
4346 { "no-code-copy", 0, QEMU_OPTION_no_code_copy },
4348 { "no-kqemu", 0, QEMU_OPTION_no_kqemu },
4349 { "kernel-kqemu", 0, QEMU_OPTION_kernel_kqemu },
4351 #if defined(TARGET_PPC) || defined(TARGET_SPARC)
4352 { "g", 1, QEMU_OPTION_g },
4354 { "localtime", 0, QEMU_OPTION_localtime },
4355 { "std-vga", 0, QEMU_OPTION_std_vga },
4356 { "monitor", 1, QEMU_OPTION_monitor },
4357 { "serial", 1, QEMU_OPTION_serial },
4358 { "parallel", 1, QEMU_OPTION_parallel },
4359 { "loadvm", HAS_ARG, QEMU_OPTION_loadvm },
4360 { "full-screen", 0, QEMU_OPTION_full_screen },
4361 { "pidfile", HAS_ARG, QEMU_OPTION_pidfile },
4362 { "win2k-hack", 0, QEMU_OPTION_win2k_hack },
4363 { "usbdevice", HAS_ARG, QEMU_OPTION_usbdevice },
4364 { "smp", HAS_ARG, QEMU_OPTION_smp },
4366 /* temporary options */
4367 { "usb", 0, QEMU_OPTION_usb },
4368 { "cirrusvga", 0, QEMU_OPTION_cirrusvga },
4372 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
4374 /* this stack is only used during signal handling */
4375 #define SIGNAL_STACK_SIZE 32768
4377 static uint8_t *signal_stack;
4381 /* password input */
4383 static BlockDriverState *get_bdrv(int index)
4385 BlockDriverState *bs;
4388 bs = bs_table[index];
4389 } else if (index < 6) {
4390 bs = fd_table[index - 4];
4397 static void read_passwords(void)
4399 BlockDriverState *bs;
4403 for(i = 0; i < 6; i++) {
4405 if (bs && bdrv_is_encrypted(bs)) {
4406 term_printf("%s is encrypted.\n", bdrv_get_device_name(bs));
4407 for(j = 0; j < 3; j++) {
4408 monitor_readline("Password: ",
4409 1, password, sizeof(password));
4410 if (bdrv_set_key(bs, password) == 0)
4412 term_printf("invalid password\n");
4418 /* XXX: currently we cannot use simultaneously different CPUs */
4419 void register_machines(void)
4421 #if defined(TARGET_I386)
4422 qemu_register_machine(&pc_machine);
4423 qemu_register_machine(&isapc_machine);
4424 #elif defined(TARGET_PPC)
4425 qemu_register_machine(&heathrow_machine);
4426 qemu_register_machine(&core99_machine);
4427 qemu_register_machine(&prep_machine);
4428 #elif defined(TARGET_MIPS)
4429 qemu_register_machine(&mips_machine);
4430 #elif defined(TARGET_SPARC)
4431 #ifdef TARGET_SPARC64
4432 qemu_register_machine(&sun4u_machine);
4434 qemu_register_machine(&sun4m_machine);
4436 #elif defined(TARGET_ARM)
4437 qemu_register_machine(&integratorcp926_machine);
4438 qemu_register_machine(&integratorcp1026_machine);
4440 #error unsupported CPU
4445 struct soundhw soundhw[] = {
4448 "Creative Sound Blaster 16",
4451 { .init_isa = SB16_init }
4458 "Yamaha YMF262 (OPL3)",
4460 "Yamaha YM3812 (OPL2)",
4464 { .init_isa = Adlib_init }
4471 "Gravis Ultrasound GF1",
4474 { .init_isa = GUS_init }
4480 "ENSONIQ AudioPCI ES1370",
4483 { .init_pci = es1370_init }
4486 { NULL, NULL, 0, 0, { NULL } }
4489 static void select_soundhw (const char *optarg)
4493 if (*optarg == '?') {
4496 printf ("Valid sound card names (comma separated):\n");
4497 for (c = soundhw; c->name; ++c) {
4498 printf ("%-11s %s\n", c->name, c->descr);
4500 printf ("\n-soundhw all will enable all of the above\n");
4501 exit (*optarg != '?');
4509 if (!strcmp (optarg, "all")) {
4510 for (c = soundhw; c->name; ++c) {
4518 e = strchr (p, ',');
4519 l = !e ? strlen (p) : (size_t) (e - p);
4521 for (c = soundhw; c->name; ++c) {
4522 if (!strncmp (c->name, p, l)) {
4531 "Unknown sound card name (too big to show)\n");
4534 fprintf (stderr, "Unknown sound card name `%.*s'\n",
4539 p += l + (e != NULL);
4543 goto show_valid_cards;
4548 #define MAX_NET_CLIENTS 32
4550 int main(int argc, char **argv)
4552 #ifdef CONFIG_GDBSTUB
4553 int use_gdbstub, gdbstub_port;
4556 int snapshot, linux_boot;
4557 const char *initrd_filename;
4558 const char *hd_filename[MAX_DISKS], *fd_filename[MAX_FD];
4559 const char *kernel_filename, *kernel_cmdline;
4560 DisplayState *ds = &display_state;
4561 int cyls, heads, secs, translation;
4562 int start_emulation = 1;
4563 char net_clients[MAX_NET_CLIENTS][256];
4566 const char *r, *optarg;
4567 CharDriverState *monitor_hd;
4568 char monitor_device[128];
4569 char serial_devices[MAX_SERIAL_PORTS][128];
4570 int serial_device_index;
4571 char parallel_devices[MAX_PARALLEL_PORTS][128];
4572 int parallel_device_index;
4573 const char *loadvm = NULL;
4574 QEMUMachine *machine;
4575 char usb_devices[MAX_VM_USB_PORTS][128];
4576 int usb_devices_index;
4578 LIST_INIT (&vm_change_state_head);
4579 #if !defined(CONFIG_SOFTMMU)
4580 /* we never want that malloc() uses mmap() */
4581 mallopt(M_MMAP_THRESHOLD, 4096 * 1024);
4583 register_machines();
4584 machine = first_machine;
4585 initrd_filename = NULL;
4586 for(i = 0; i < MAX_FD; i++)
4587 fd_filename[i] = NULL;
4588 for(i = 0; i < MAX_DISKS; i++)
4589 hd_filename[i] = NULL;
4590 ram_size = DEFAULT_RAM_SIZE * 1024 * 1024;
4591 vga_ram_size = VGA_RAM_SIZE;
4592 bios_size = BIOS_SIZE;
4593 #ifdef CONFIG_GDBSTUB
4595 gdbstub_port = DEFAULT_GDBSTUB_PORT;
4599 kernel_filename = NULL;
4600 kernel_cmdline = "";
4606 cyls = heads = secs = 0;
4607 translation = BIOS_ATA_TRANSLATION_AUTO;
4608 pstrcpy(monitor_device, sizeof(monitor_device), "vc");
4610 pstrcpy(serial_devices[0], sizeof(serial_devices[0]), "vc");
4611 for(i = 1; i < MAX_SERIAL_PORTS; i++)
4612 serial_devices[i][0] = '\0';
4613 serial_device_index = 0;
4615 pstrcpy(parallel_devices[0], sizeof(parallel_devices[0]), "vc");
4616 for(i = 1; i < MAX_PARALLEL_PORTS; i++)
4617 parallel_devices[i][0] = '\0';
4618 parallel_device_index = 0;
4620 usb_devices_index = 0;
4625 /* default mac address of the first network interface */
4633 hd_filename[0] = argv[optind++];
4635 const QEMUOption *popt;
4638 popt = qemu_options;
4641 fprintf(stderr, "%s: invalid option -- '%s'\n",
4645 if (!strcmp(popt->name, r + 1))
4649 if (popt->flags & HAS_ARG) {
4650 if (optind >= argc) {
4651 fprintf(stderr, "%s: option '%s' requires an argument\n",
4655 optarg = argv[optind++];
4660 switch(popt->index) {
4662 machine = find_machine(optarg);
4665 printf("Supported machines are:\n");
4666 for(m = first_machine; m != NULL; m = m->next) {
4667 printf("%-10s %s%s\n",
4669 m == first_machine ? " (default)" : "");
4674 case QEMU_OPTION_initrd:
4675 initrd_filename = optarg;
4677 case QEMU_OPTION_hda:
4678 case QEMU_OPTION_hdb:
4679 case QEMU_OPTION_hdc:
4680 case QEMU_OPTION_hdd:
4683 hd_index = popt->index - QEMU_OPTION_hda;
4684 hd_filename[hd_index] = optarg;
4685 if (hd_index == cdrom_index)
4689 case QEMU_OPTION_snapshot:
4692 case QEMU_OPTION_hdachs:
4696 cyls = strtol(p, (char **)&p, 0);
4697 if (cyls < 1 || cyls > 16383)
4702 heads = strtol(p, (char **)&p, 0);
4703 if (heads < 1 || heads > 16)
4708 secs = strtol(p, (char **)&p, 0);
4709 if (secs < 1 || secs > 63)
4713 if (!strcmp(p, "none"))
4714 translation = BIOS_ATA_TRANSLATION_NONE;
4715 else if (!strcmp(p, "lba"))
4716 translation = BIOS_ATA_TRANSLATION_LBA;
4717 else if (!strcmp(p, "auto"))
4718 translation = BIOS_ATA_TRANSLATION_AUTO;
4721 } else if (*p != '\0') {
4723 fprintf(stderr, "qemu: invalid physical CHS format\n");
4728 case QEMU_OPTION_nographic:
4729 pstrcpy(monitor_device, sizeof(monitor_device), "stdio");
4730 pstrcpy(serial_devices[0], sizeof(serial_devices[0]), "stdio");
4733 case QEMU_OPTION_kernel:
4734 kernel_filename = optarg;
4736 case QEMU_OPTION_append:
4737 kernel_cmdline = optarg;
4739 case QEMU_OPTION_cdrom:
4740 if (cdrom_index >= 0) {
4741 hd_filename[cdrom_index] = optarg;
4744 case QEMU_OPTION_boot:
4745 boot_device = optarg[0];
4746 if (boot_device != 'a' &&
4749 boot_device != 'n' &&
4751 boot_device != 'c' && boot_device != 'd') {
4752 fprintf(stderr, "qemu: invalid boot device '%c'\n", boot_device);
4756 case QEMU_OPTION_fda:
4757 fd_filename[0] = optarg;
4759 case QEMU_OPTION_fdb:
4760 fd_filename[1] = optarg;
4762 case QEMU_OPTION_no_code_copy:
4763 code_copy_enabled = 0;
4765 case QEMU_OPTION_net:
4766 if (nb_net_clients >= MAX_NET_CLIENTS) {
4767 fprintf(stderr, "qemu: too many network clients\n");
4770 pstrcpy(net_clients[nb_net_clients],
4771 sizeof(net_clients[0]),
4776 case QEMU_OPTION_tftp:
4777 tftp_prefix = optarg;
4780 case QEMU_OPTION_smb:
4781 net_slirp_smb(optarg);
4784 case QEMU_OPTION_redir:
4785 net_slirp_redir(optarg);
4789 case QEMU_OPTION_audio_help:
4793 case QEMU_OPTION_soundhw:
4794 select_soundhw (optarg);
4801 ram_size = atoi(optarg) * 1024 * 1024;
4804 if (ram_size > PHYS_RAM_MAX_SIZE) {
4805 fprintf(stderr, "qemu: at most %d MB RAM can be simulated\n",
4806 PHYS_RAM_MAX_SIZE / (1024 * 1024));
4815 mask = cpu_str_to_log_mask(optarg);
4817 printf("Log items (comma separated):\n");
4818 for(item = cpu_log_items; item->mask != 0; item++) {
4819 printf("%-10s %s\n", item->name, item->help);
4826 #ifdef CONFIG_GDBSTUB
4831 gdbstub_port = atoi(optarg);
4838 start_emulation = 0;
4841 keyboard_layout = optarg;
4843 case QEMU_OPTION_localtime:
4846 case QEMU_OPTION_cirrusvga:
4847 cirrus_vga_enabled = 1;
4849 case QEMU_OPTION_std_vga:
4850 cirrus_vga_enabled = 0;
4857 w = strtol(p, (char **)&p, 10);
4860 fprintf(stderr, "qemu: invalid resolution or depth\n");
4866 h = strtol(p, (char **)&p, 10);
4871 depth = strtol(p, (char **)&p, 10);
4872 if (depth != 8 && depth != 15 && depth != 16 &&
4873 depth != 24 && depth != 32)
4875 } else if (*p == '\0') {
4876 depth = graphic_depth;
4883 graphic_depth = depth;
4886 case QEMU_OPTION_monitor:
4887 pstrcpy(monitor_device, sizeof(monitor_device), optarg);
4889 case QEMU_OPTION_serial:
4890 if (serial_device_index >= MAX_SERIAL_PORTS) {
4891 fprintf(stderr, "qemu: too many serial ports\n");
4894 pstrcpy(serial_devices[serial_device_index],
4895 sizeof(serial_devices[0]), optarg);
4896 serial_device_index++;
4898 case QEMU_OPTION_parallel:
4899 if (parallel_device_index >= MAX_PARALLEL_PORTS) {
4900 fprintf(stderr, "qemu: too many parallel ports\n");
4903 pstrcpy(parallel_devices[parallel_device_index],
4904 sizeof(parallel_devices[0]), optarg);
4905 parallel_device_index++;
4907 case QEMU_OPTION_loadvm:
4910 case QEMU_OPTION_full_screen:
4913 case QEMU_OPTION_pidfile:
4914 create_pidfile(optarg);
4917 case QEMU_OPTION_win2k_hack:
4918 win2k_install_hack = 1;
4922 case QEMU_OPTION_no_kqemu:
4925 case QEMU_OPTION_kernel_kqemu:
4929 case QEMU_OPTION_usb:
4932 case QEMU_OPTION_usbdevice:
4934 if (usb_devices_index >= MAX_VM_USB_PORTS) {
4935 fprintf(stderr, "Too many USB devices\n");
4938 pstrcpy(usb_devices[usb_devices_index],
4939 sizeof(usb_devices[usb_devices_index]),
4941 usb_devices_index++;
4943 case QEMU_OPTION_smp:
4944 smp_cpus = atoi(optarg);
4945 if (smp_cpus < 1 || smp_cpus > MAX_CPUS) {
4946 fprintf(stderr, "Invalid number of CPUs\n");
4958 linux_boot = (kernel_filename != NULL);
4961 hd_filename[0] == '\0' &&
4962 (cdrom_index >= 0 && hd_filename[cdrom_index] == '\0') &&
4963 fd_filename[0] == '\0')
4966 /* boot to cd by default if no hard disk */
4967 if (hd_filename[0] == '\0' && boot_device == 'c') {
4968 if (fd_filename[0] != '\0')
4974 #if !defined(CONFIG_SOFTMMU)
4975 /* must avoid mmap() usage of glibc by setting a buffer "by hand" */
4977 static uint8_t stdout_buf[4096];
4978 setvbuf(stdout, stdout_buf, _IOLBF, sizeof(stdout_buf));
4981 setvbuf(stdout, NULL, _IOLBF, 0);
4988 /* init network clients */
4989 if (nb_net_clients == 0) {
4990 /* if no clients, we use a default config */
4991 pstrcpy(net_clients[0], sizeof(net_clients[0]),
4993 pstrcpy(net_clients[1], sizeof(net_clients[0]),
4998 for(i = 0;i < nb_net_clients; i++) {
4999 if (net_client_init(net_clients[i]) < 0)
5003 /* init the memory */
5004 phys_ram_size = ram_size + vga_ram_size + bios_size;
5006 #ifdef CONFIG_SOFTMMU
5007 phys_ram_base = qemu_vmalloc(phys_ram_size);
5008 if (!phys_ram_base) {
5009 fprintf(stderr, "Could not allocate physical memory\n");
5013 /* as we must map the same page at several addresses, we must use
5018 tmpdir = getenv("QEMU_TMPDIR");
5021 snprintf(phys_ram_file, sizeof(phys_ram_file), "%s/vlXXXXXX", tmpdir);
5022 if (mkstemp(phys_ram_file) < 0) {
5023 fprintf(stderr, "Could not create temporary memory file '%s'\n",
5027 phys_ram_fd = open(phys_ram_file, O_CREAT | O_TRUNC | O_RDWR, 0600);
5028 if (phys_ram_fd < 0) {
5029 fprintf(stderr, "Could not open temporary memory file '%s'\n",
5033 ftruncate(phys_ram_fd, phys_ram_size);
5034 unlink(phys_ram_file);
5035 phys_ram_base = mmap(get_mmap_addr(phys_ram_size),
5037 PROT_WRITE | PROT_READ, MAP_SHARED | MAP_FIXED,
5039 if (phys_ram_base == MAP_FAILED) {
5040 fprintf(stderr, "Could not map physical memory\n");
5046 /* we always create the cdrom drive, even if no disk is there */
5048 if (cdrom_index >= 0) {
5049 bs_table[cdrom_index] = bdrv_new("cdrom");
5050 bdrv_set_type_hint(bs_table[cdrom_index], BDRV_TYPE_CDROM);
5053 /* open the virtual block devices */
5054 for(i = 0; i < MAX_DISKS; i++) {
5055 if (hd_filename[i]) {
5058 snprintf(buf, sizeof(buf), "hd%c", i + 'a');
5059 bs_table[i] = bdrv_new(buf);
5061 if (bdrv_open(bs_table[i], hd_filename[i], snapshot) < 0) {
5062 fprintf(stderr, "qemu: could not open hard disk image '%s'\n",
5066 if (i == 0 && cyls != 0) {
5067 bdrv_set_geometry_hint(bs_table[i], cyls, heads, secs);
5068 bdrv_set_translation_hint(bs_table[i], translation);
5073 /* we always create at least one floppy disk */
5074 fd_table[0] = bdrv_new("fda");
5075 bdrv_set_type_hint(fd_table[0], BDRV_TYPE_FLOPPY);
5077 for(i = 0; i < MAX_FD; i++) {
5078 if (fd_filename[i]) {
5081 snprintf(buf, sizeof(buf), "fd%c", i + 'a');
5082 fd_table[i] = bdrv_new(buf);
5083 bdrv_set_type_hint(fd_table[i], BDRV_TYPE_FLOPPY);
5085 if (fd_filename[i] != '\0') {
5086 if (bdrv_open(fd_table[i], fd_filename[i], snapshot) < 0) {
5087 fprintf(stderr, "qemu: could not open floppy disk image '%s'\n",
5095 /* init USB devices */
5097 vm_usb_hub = usb_hub_init(vm_usb_ports, MAX_VM_USB_PORTS);
5098 for(i = 0; i < usb_devices_index; i++) {
5099 if (usb_device_add(usb_devices[i]) < 0) {
5100 fprintf(stderr, "Warning: could not add USB device %s\n",
5106 register_savevm("timer", 0, 1, timer_save, timer_load, NULL);
5107 register_savevm("ram", 0, 1, ram_save, ram_load, NULL);
5110 cpu_calibrate_ticks();
5114 dumb_display_init(ds);
5116 #if defined(CONFIG_SDL)
5117 sdl_display_init(ds, full_screen);
5118 #elif defined(CONFIG_COCOA)
5119 cocoa_display_init(ds, full_screen);
5121 dumb_display_init(ds);
5125 monitor_hd = qemu_chr_open(monitor_device);
5127 fprintf(stderr, "qemu: could not open monitor device '%s'\n", monitor_device);
5130 monitor_init(monitor_hd, !nographic);
5132 for(i = 0; i < MAX_SERIAL_PORTS; i++) {
5133 if (serial_devices[i][0] != '\0') {
5134 serial_hds[i] = qemu_chr_open(serial_devices[i]);
5135 if (!serial_hds[i]) {
5136 fprintf(stderr, "qemu: could not open serial device '%s'\n",
5140 if (!strcmp(serial_devices[i], "vc"))
5141 qemu_chr_printf(serial_hds[i], "serial%d console\n", i);
5145 for(i = 0; i < MAX_PARALLEL_PORTS; i++) {
5146 if (parallel_devices[i][0] != '\0') {
5147 parallel_hds[i] = qemu_chr_open(parallel_devices[i]);
5148 if (!parallel_hds[i]) {
5149 fprintf(stderr, "qemu: could not open parallel device '%s'\n",
5150 parallel_devices[i]);
5153 if (!strcmp(parallel_devices[i], "vc"))
5154 qemu_chr_printf(parallel_hds[i], "parallel%d console\n", i);
5158 /* setup cpu signal handlers for MMU / self modifying code handling */
5159 #if !defined(CONFIG_SOFTMMU)
5161 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
5164 signal_stack = memalign(16, SIGNAL_STACK_SIZE);
5165 stk.ss_sp = signal_stack;
5166 stk.ss_size = SIGNAL_STACK_SIZE;
5169 if (sigaltstack(&stk, NULL) < 0) {
5170 perror("sigaltstack");
5176 struct sigaction act;
5178 sigfillset(&act.sa_mask);
5179 act.sa_flags = SA_SIGINFO;
5180 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
5181 act.sa_flags |= SA_ONSTACK;
5183 act.sa_sigaction = host_segv_handler;
5184 sigaction(SIGSEGV, &act, NULL);
5185 sigaction(SIGBUS, &act, NULL);
5186 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
5187 sigaction(SIGFPE, &act, NULL);
5194 struct sigaction act;
5195 sigfillset(&act.sa_mask);
5197 act.sa_handler = SIG_IGN;
5198 sigaction(SIGPIPE, &act, NULL);
5203 machine->init(ram_size, vga_ram_size, boot_device,
5204 ds, fd_filename, snapshot,
5205 kernel_filename, kernel_cmdline, initrd_filename);
5207 gui_timer = qemu_new_timer(rt_clock, gui_update, NULL);
5208 qemu_mod_timer(gui_timer, qemu_get_clock(rt_clock));
5210 #ifdef CONFIG_GDBSTUB
5212 if (gdbserver_start(gdbstub_port) < 0) {
5213 fprintf(stderr, "Could not open gdbserver socket on port %d\n",
5217 printf("Waiting gdb connection on port %d\n", gdbstub_port);
5222 qemu_loadvm(loadvm);
5225 /* XXX: simplify init */
5227 if (start_emulation) {