]> git.proxmox.com Git - mirror_qemu.git/blame - qemu-char.c
ARM: ACPI: Add _E03 for Power Button
[mirror_qemu.git] / qemu-char.c
CommitLineData
6f97dba0
AL
1/*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24#include "qemu-common.h"
83c9089e 25#include "monitor/monitor.h"
9c17d615 26#include "sysemu/sysemu.h"
d49b6836 27#include "qemu/error-report.h"
1de7afc9 28#include "qemu/timer.h"
dccfcd0e 29#include "sysemu/char.h"
cf3ebac7 30#include "hw/usb.h"
c5a415a0 31#include "qmp-commands.h"
cfb429cb
CM
32#include "qapi/qmp-input-visitor.h"
33#include "qapi/qmp-output-visitor.h"
34#include "qapi-visit.h"
6f97dba0
AL
35
36#include <unistd.h>
37#include <fcntl.h>
6f97dba0
AL
38#include <time.h>
39#include <errno.h>
40#include <sys/time.h>
41#include <zlib.h>
42
43#ifndef _WIN32
44#include <sys/times.h>
45#include <sys/wait.h>
46#include <termios.h>
47#include <sys/mman.h>
48#include <sys/ioctl.h>
24646c7e 49#include <sys/resource.h>
6f97dba0
AL
50#include <sys/socket.h>
51#include <netinet/in.h>
24646c7e 52#include <net/if.h>
24646c7e 53#include <arpa/inet.h>
6f97dba0
AL
54#include <netdb.h>
55#include <sys/select.h>
71e72a19 56#ifdef CONFIG_BSD
6f97dba0 57#include <sys/stat.h>
3294ce18
MT
58#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
59#include <dev/ppbus/ppi.h>
60#include <dev/ppbus/ppbconf.h>
c5e97233 61#elif defined(__DragonFly__)
c5e97233
BS
62#include <dev/misc/ppi/ppi.h>
63#include <bus/ppbus/ppbconf.h>
6f97dba0 64#endif
bbe813a2 65#else
6f97dba0 66#ifdef __linux__
6f97dba0
AL
67#include <linux/ppdev.h>
68#include <linux/parport.h>
69#endif
70#ifdef __sun__
71#include <sys/stat.h>
72#include <sys/ethernet.h>
73#include <sys/sockio.h>
74#include <netinet/arp.h>
75#include <netinet/in.h>
76#include <netinet/in_systm.h>
77#include <netinet/ip.h>
78#include <netinet/ip_icmp.h> // must come after ip.h
79#include <netinet/udp.h>
80#include <netinet/tcp.h>
6f97dba0
AL
81#endif
82#endif
83#endif
84
1de7afc9 85#include "qemu/sockets.h"
cbcc6336 86#include "ui/qemu-spice.h"
6f97dba0 87
9bd7854e 88#define READ_BUF_LEN 4096
7b0bfdf5 89#define READ_RETRIES 10
9f781168 90#define CHR_MAX_FILENAME_SIZE 256
c4095726 91#define TCP_MAX_FDS 16
9bd7854e 92
cfb429cb
CM
93/***********************************************************/
94/* Socket address helpers */
cfb429cb 95
16cc4ffe
CM
96static int SocketAddress_to_str(char *dest, int max_len,
97 const char *prefix, SocketAddress *addr,
98 bool is_listen, bool is_telnet)
99{
130257dc 100 switch (addr->type) {
16cc4ffe
CM
101 case SOCKET_ADDRESS_KIND_INET:
102 return snprintf(dest, max_len, "%s%s:%s:%s%s", prefix,
130257dc
EB
103 is_telnet ? "telnet" : "tcp", addr->u.inet->host,
104 addr->u.inet->port, is_listen ? ",server" : "");
16cc4ffe
CM
105 break;
106 case SOCKET_ADDRESS_KIND_UNIX:
107 return snprintf(dest, max_len, "%sunix:%s%s", prefix,
130257dc 108 addr->u.q_unix->path, is_listen ? ",server" : "");
16cc4ffe
CM
109 break;
110 case SOCKET_ADDRESS_KIND_FD:
130257dc 111 return snprintf(dest, max_len, "%sfd:%s%s", prefix, addr->u.fd->str,
16cc4ffe
CM
112 is_listen ? ",server" : "");
113 break;
114 default:
115 abort();
116 }
117}
118
119static int sockaddr_to_str(char *dest, int max_len,
120 struct sockaddr_storage *ss, socklen_t ss_len,
01ca519f 121 struct sockaddr_storage *ps, socklen_t ps_len,
16cc4ffe
CM
122 bool is_listen, bool is_telnet)
123{
01ca519f
CM
124 char shost[NI_MAXHOST], sserv[NI_MAXSERV];
125 char phost[NI_MAXHOST], pserv[NI_MAXSERV];
16cc4ffe
CM
126 const char *left = "", *right = "";
127
128 switch (ss->ss_family) {
129#ifndef _WIN32
130 case AF_UNIX:
131 return snprintf(dest, max_len, "unix:%s%s",
132 ((struct sockaddr_un *)(ss))->sun_path,
133 is_listen ? ",server" : "");
134#endif
135 case AF_INET6:
136 left = "[";
137 right = "]";
138 /* fall through */
139 case AF_INET:
01ca519f
CM
140 getnameinfo((struct sockaddr *) ss, ss_len, shost, sizeof(shost),
141 sserv, sizeof(sserv), NI_NUMERICHOST | NI_NUMERICSERV);
142 getnameinfo((struct sockaddr *) ps, ps_len, phost, sizeof(phost),
143 pserv, sizeof(pserv), NI_NUMERICHOST | NI_NUMERICSERV);
144 return snprintf(dest, max_len, "%s:%s%s%s:%s%s <-> %s%s%s:%s",
16cc4ffe 145 is_telnet ? "telnet" : "tcp",
01ca519f
CM
146 left, shost, right, sserv,
147 is_listen ? ",server" : "",
148 left, phost, right, pserv);
16cc4ffe
CM
149
150 default:
151 return snprintf(dest, max_len, "unknown");
152 }
153}
154
6f97dba0
AL
155/***********************************************************/
156/* character device */
157
72cf2d4f
BS
158static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
159 QTAILQ_HEAD_INITIALIZER(chardevs);
2970a6c9 160
db39fcf1
PB
161CharDriverState *qemu_chr_alloc(void)
162{
163 CharDriverState *chr = g_malloc0(sizeof(CharDriverState));
f3db17b9 164 qemu_mutex_init(&chr->chr_write_lock);
db39fcf1
PB
165 return chr;
166}
167
a425d23f 168void qemu_chr_be_event(CharDriverState *s, int event)
6f97dba0 169{
73cdf3f2
AG
170 /* Keep track if the char device is open */
171 switch (event) {
172 case CHR_EVENT_OPENED:
16665b94 173 s->be_open = 1;
73cdf3f2
AG
174 break;
175 case CHR_EVENT_CLOSED:
16665b94 176 s->be_open = 0;
73cdf3f2
AG
177 break;
178 }
179
6f97dba0
AL
180 if (!s->chr_event)
181 return;
182 s->chr_event(s->handler_opaque, event);
183}
184
fee204fd 185void qemu_chr_be_generic_open(CharDriverState *s)
6f97dba0 186{
bd5c51ee 187 qemu_chr_be_event(s, CHR_EVENT_OPENED);
6f97dba0
AL
188}
189
2cc6e0a1 190int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
6f97dba0 191{
9005b2a7
PB
192 int ret;
193
194 qemu_mutex_lock(&s->chr_write_lock);
195 ret = s->chr_write(s, buf, len);
196 qemu_mutex_unlock(&s->chr_write_lock);
197 return ret;
6f97dba0
AL
198}
199
cd18720a
AL
200int qemu_chr_fe_write_all(CharDriverState *s, const uint8_t *buf, int len)
201{
202 int offset = 0;
09313047 203 int res = 0;
cd18720a 204
9005b2a7 205 qemu_mutex_lock(&s->chr_write_lock);
cd18720a
AL
206 while (offset < len) {
207 do {
208 res = s->chr_write(s, buf + offset, len - offset);
209 if (res == -1 && errno == EAGAIN) {
210 g_usleep(100);
211 }
212 } while (res == -1 && errno == EAGAIN);
213
9005b2a7 214 if (res <= 0) {
cd18720a
AL
215 break;
216 }
217
cd18720a
AL
218 offset += res;
219 }
9005b2a7 220 qemu_mutex_unlock(&s->chr_write_lock);
cd18720a 221
9005b2a7
PB
222 if (res < 0) {
223 return res;
224 }
cd18720a
AL
225 return offset;
226}
227
7b0bfdf5
NN
228int qemu_chr_fe_read_all(CharDriverState *s, uint8_t *buf, int len)
229{
230 int offset = 0, counter = 10;
231 int res;
232
233 if (!s->chr_sync_read) {
234 return 0;
235 }
236
237 while (offset < len) {
238 do {
239 res = s->chr_sync_read(s, buf + offset, len - offset);
240 if (res == -1 && errno == EAGAIN) {
241 g_usleep(100);
242 }
243 } while (res == -1 && errno == EAGAIN);
244
245 if (res == 0) {
246 break;
247 }
248
249 if (res < 0) {
250 return res;
251 }
252
253 offset += res;
254
255 if (!counter--) {
256 break;
257 }
258 }
259
260 return offset;
261}
262
41084f1b 263int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
6f97dba0
AL
264{
265 if (!s->chr_ioctl)
266 return -ENOTSUP;
267 return s->chr_ioctl(s, cmd, arg);
268}
269
909cda12 270int qemu_chr_be_can_write(CharDriverState *s)
6f97dba0
AL
271{
272 if (!s->chr_can_read)
273 return 0;
274 return s->chr_can_read(s->handler_opaque);
275}
276
fa5efccb 277void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
6f97dba0 278{
ac310734
SW
279 if (s->chr_read) {
280 s->chr_read(s->handler_opaque, buf, len);
281 }
6f97dba0
AL
282}
283
74c0d6f0 284int qemu_chr_fe_get_msgfd(CharDriverState *s)
7d174059 285{
c76bf6bb 286 int fd;
4f858614 287 return (qemu_chr_fe_get_msgfds(s, &fd, 1) == 1) ? fd : -1;
c76bf6bb
NN
288}
289
290int qemu_chr_fe_get_msgfds(CharDriverState *s, int *fds, int len)
291{
292 return s->get_msgfds ? s->get_msgfds(s, fds, len) : -1;
7d174059
MM
293}
294
d39aac7a
NN
295int qemu_chr_fe_set_msgfds(CharDriverState *s, int *fds, int num)
296{
297 return s->set_msgfds ? s->set_msgfds(s, fds, num) : -1;
298}
299
13661089
DB
300int qemu_chr_add_client(CharDriverState *s, int fd)
301{
302 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
303}
304
6f97dba0
AL
305void qemu_chr_accept_input(CharDriverState *s)
306{
307 if (s->chr_accept_input)
308 s->chr_accept_input(s);
98c8ee1d 309 qemu_notify_event();
6f97dba0
AL
310}
311
e7e71b0e 312void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
6f97dba0 313{
9bd7854e 314 char buf[READ_BUF_LEN];
6f97dba0
AL
315 va_list ap;
316 va_start(ap, fmt);
317 vsnprintf(buf, sizeof(buf), fmt, ap);
2cc6e0a1 318 qemu_chr_fe_write(s, (uint8_t *)buf, strlen(buf));
6f97dba0
AL
319 va_end(ap);
320}
321
386a5a1e
AS
322static void remove_fd_in_watch(CharDriverState *chr);
323
6f97dba0 324void qemu_chr_add_handlers(CharDriverState *s,
7b27a769 325 IOCanReadHandler *fd_can_read,
6f97dba0
AL
326 IOReadHandler *fd_read,
327 IOEventHandler *fd_event,
328 void *opaque)
329{
19083228
HG
330 int fe_open;
331
da7d998b 332 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
19083228 333 fe_open = 0;
386a5a1e 334 remove_fd_in_watch(s);
19083228
HG
335 } else {
336 fe_open = 1;
2d6c1ef4 337 }
6f97dba0
AL
338 s->chr_can_read = fd_can_read;
339 s->chr_read = fd_read;
340 s->chr_event = fd_event;
341 s->handler_opaque = opaque;
ac1b84dd 342 if (fe_open && s->chr_update_read_handler)
6f97dba0 343 s->chr_update_read_handler(s);
73cdf3f2 344
19083228 345 if (!s->explicit_fe_open) {
8e25daa8 346 qemu_chr_fe_set_open(s, fe_open);
19083228
HG
347 }
348
73cdf3f2
AG
349 /* We're connecting to an already opened device, so let's make sure we
350 also get the open event */
a59bcd31 351 if (fe_open && s->be_open) {
fee204fd 352 qemu_chr_be_generic_open(s);
73cdf3f2 353 }
6f97dba0
AL
354}
355
356static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
357{
358 return len;
359}
360
0d64992b
PB
361static CharDriverState *qemu_chr_open_null(const char *id,
362 ChardevBackend *backend,
363 ChardevReturn *ret,
364 Error **errp)
6f97dba0
AL
365{
366 CharDriverState *chr;
367
db39fcf1 368 chr = qemu_chr_alloc();
6f97dba0 369 chr->chr_write = null_chr_write;
bd5c51ee 370 chr->explicit_be_open = true;
1f51470d 371 return chr;
6f97dba0
AL
372}
373
374/* MUX driver for serial I/O splitting */
6f97dba0
AL
375#define MAX_MUX 4
376#define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
377#define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
378typedef struct {
7b27a769 379 IOCanReadHandler *chr_can_read[MAX_MUX];
6f97dba0
AL
380 IOReadHandler *chr_read[MAX_MUX];
381 IOEventHandler *chr_event[MAX_MUX];
382 void *ext_opaque[MAX_MUX];
383 CharDriverState *drv;
799f1f23 384 int focus;
6f97dba0
AL
385 int mux_cnt;
386 int term_got_escape;
387 int max_size;
a80bf99f
AL
388 /* Intermediate input buffer allows to catch escape sequences even if the
389 currently active device is not accepting any input - but only until it
390 is full as well. */
391 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
392 int prod[MAX_MUX];
393 int cons[MAX_MUX];
2d22959d 394 int timestamps;
9005b2a7
PB
395
396 /* Protected by the CharDriverState chr_write_lock. */
4ab312f7 397 int linestart;
2d22959d 398 int64_t timestamps_start;
6f97dba0
AL
399} MuxDriver;
400
401
9005b2a7 402/* Called with chr_write_lock held. */
6f97dba0
AL
403static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
404{
405 MuxDriver *d = chr->opaque;
406 int ret;
2d22959d 407 if (!d->timestamps) {
6975b713 408 ret = qemu_chr_fe_write(d->drv, buf, len);
6f97dba0
AL
409 } else {
410 int i;
411
412 ret = 0;
4ab312f7
JK
413 for (i = 0; i < len; i++) {
414 if (d->linestart) {
6f97dba0
AL
415 char buf1[64];
416 int64_t ti;
417 int secs;
418
bc72ad67 419 ti = qemu_clock_get_ms(QEMU_CLOCK_REALTIME);
2d22959d
JK
420 if (d->timestamps_start == -1)
421 d->timestamps_start = ti;
422 ti -= d->timestamps_start;
a4bb1db8 423 secs = ti / 1000;
6f97dba0
AL
424 snprintf(buf1, sizeof(buf1),
425 "[%02d:%02d:%02d.%03d] ",
426 secs / 3600,
427 (secs / 60) % 60,
428 secs % 60,
a4bb1db8 429 (int)(ti % 1000));
6975b713 430 qemu_chr_fe_write(d->drv, (uint8_t *)buf1, strlen(buf1));
4ab312f7
JK
431 d->linestart = 0;
432 }
6975b713 433 ret += qemu_chr_fe_write(d->drv, buf+i, 1);
4ab312f7
JK
434 if (buf[i] == '\n') {
435 d->linestart = 1;
6f97dba0
AL
436 }
437 }
438 }
439 return ret;
440}
441
442static const char * const mux_help[] = {
443 "% h print this help\n\r",
444 "% x exit emulator\n\r",
445 "% s save disk data back to file (if -snapshot)\n\r",
86d10328 446 "% t toggle console timestamps\n\r",
6f97dba0
AL
447 "% b send break (magic sysrq)\n\r",
448 "% c switch between console and monitor\n\r",
449 "% % sends %\n\r",
450 NULL
451};
452
453int term_escape_char = 0x01; /* ctrl-a is used for escape */
454static void mux_print_help(CharDriverState *chr)
455{
456 int i, j;
457 char ebuf[15] = "Escape-Char";
458 char cbuf[50] = "\n\r";
459
460 if (term_escape_char > 0 && term_escape_char < 26) {
461 snprintf(cbuf, sizeof(cbuf), "\n\r");
462 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
463 } else {
464 snprintf(cbuf, sizeof(cbuf),
465 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
466 term_escape_char);
467 }
6975b713 468 qemu_chr_fe_write(chr, (uint8_t *)cbuf, strlen(cbuf));
6f97dba0
AL
469 for (i = 0; mux_help[i] != NULL; i++) {
470 for (j=0; mux_help[i][j] != '\0'; j++) {
471 if (mux_help[i][j] == '%')
6975b713 472 qemu_chr_fe_write(chr, (uint8_t *)ebuf, strlen(ebuf));
6f97dba0 473 else
6975b713 474 qemu_chr_fe_write(chr, (uint8_t *)&mux_help[i][j], 1);
6f97dba0
AL
475 }
476 }
477}
478
2724b180
AL
479static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
480{
481 if (d->chr_event[mux_nr])
482 d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
483}
484
6f97dba0
AL
485static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
486{
487 if (d->term_got_escape) {
488 d->term_got_escape = 0;
489 if (ch == term_escape_char)
490 goto send_char;
491 switch(ch) {
492 case '?':
493 case 'h':
494 mux_print_help(chr);
495 break;
496 case 'x':
497 {
498 const char *term = "QEMU: Terminated\n\r";
6975b713 499 qemu_chr_fe_write(chr, (uint8_t *)term, strlen(term));
6f97dba0
AL
500 exit(0);
501 break;
502 }
503 case 's':
6ab4b5ab 504 bdrv_commit_all();
6f97dba0
AL
505 break;
506 case 'b':
a425d23f 507 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
6f97dba0
AL
508 break;
509 case 'c':
510 /* Switch to the next registered device */
799f1f23
GH
511 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
512 d->focus++;
513 if (d->focus >= d->mux_cnt)
514 d->focus = 0;
515 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
6f97dba0 516 break;
2d22959d
JK
517 case 't':
518 d->timestamps = !d->timestamps;
519 d->timestamps_start = -1;
4ab312f7 520 d->linestart = 0;
2d22959d 521 break;
6f97dba0
AL
522 }
523 } else if (ch == term_escape_char) {
524 d->term_got_escape = 1;
525 } else {
526 send_char:
527 return 1;
528 }
529 return 0;
530}
531
532static void mux_chr_accept_input(CharDriverState *chr)
533{
6f97dba0 534 MuxDriver *d = chr->opaque;
799f1f23 535 int m = d->focus;
6f97dba0 536
a80bf99f 537 while (d->prod[m] != d->cons[m] &&
6f97dba0
AL
538 d->chr_can_read[m] &&
539 d->chr_can_read[m](d->ext_opaque[m])) {
540 d->chr_read[m](d->ext_opaque[m],
a80bf99f 541 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
6f97dba0
AL
542 }
543}
544
545static int mux_chr_can_read(void *opaque)
546{
547 CharDriverState *chr = opaque;
548 MuxDriver *d = chr->opaque;
799f1f23 549 int m = d->focus;
6f97dba0 550
a80bf99f 551 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
6f97dba0 552 return 1;
a80bf99f
AL
553 if (d->chr_can_read[m])
554 return d->chr_can_read[m](d->ext_opaque[m]);
6f97dba0
AL
555 return 0;
556}
557
558static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
559{
560 CharDriverState *chr = opaque;
561 MuxDriver *d = chr->opaque;
799f1f23 562 int m = d->focus;
6f97dba0
AL
563 int i;
564
565 mux_chr_accept_input (opaque);
566
567 for(i = 0; i < size; i++)
568 if (mux_proc_byte(chr, d, buf[i])) {
a80bf99f 569 if (d->prod[m] == d->cons[m] &&
6f97dba0
AL
570 d->chr_can_read[m] &&
571 d->chr_can_read[m](d->ext_opaque[m]))
572 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
573 else
a80bf99f 574 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
6f97dba0
AL
575 }
576}
577
578static void mux_chr_event(void *opaque, int event)
579{
580 CharDriverState *chr = opaque;
581 MuxDriver *d = chr->opaque;
582 int i;
583
584 /* Send the event to all registered listeners */
585 for (i = 0; i < d->mux_cnt; i++)
2724b180 586 mux_chr_send_event(d, i, event);
6f97dba0
AL
587}
588
589static void mux_chr_update_read_handler(CharDriverState *chr)
590{
591 MuxDriver *d = chr->opaque;
592
593 if (d->mux_cnt >= MAX_MUX) {
594 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
595 return;
596 }
597 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
598 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
599 d->chr_read[d->mux_cnt] = chr->chr_read;
600 d->chr_event[d->mux_cnt] = chr->chr_event;
601 /* Fix up the real driver with mux routines */
602 if (d->mux_cnt == 0) {
603 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
604 mux_chr_event, chr);
605 }
799f1f23
GH
606 if (d->focus != -1) {
607 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
a7aec5da 608 }
799f1f23 609 d->focus = d->mux_cnt;
6f97dba0 610 d->mux_cnt++;
799f1f23 611 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
6f97dba0
AL
612}
613
7b7ab18d
MR
614static bool muxes_realized;
615
616/**
617 * Called after processing of default and command-line-specified
618 * chardevs to deliver CHR_EVENT_OPENED events to any FEs attached
619 * to a mux chardev. This is done here to ensure that
620 * output/prompts/banners are only displayed for the FE that has
621 * focus when initial command-line processing/machine init is
622 * completed.
623 *
624 * After this point, any new FE attached to any new or existing
625 * mux will receive CHR_EVENT_OPENED notifications for the BE
626 * immediately.
627 */
628static void muxes_realize_done(Notifier *notifier, void *unused)
629{
630 CharDriverState *chr;
631
632 QTAILQ_FOREACH(chr, &chardevs, next) {
633 if (chr->is_mux) {
634 MuxDriver *d = chr->opaque;
635 int i;
636
637 /* send OPENED to all already-attached FEs */
638 for (i = 0; i < d->mux_cnt; i++) {
639 mux_chr_send_event(d, i, CHR_EVENT_OPENED);
640 }
641 /* mark mux as OPENED so any new FEs will immediately receive
642 * OPENED event
643 */
644 qemu_chr_be_generic_open(chr);
645 }
646 }
647 muxes_realized = true;
648}
649
650static Notifier muxes_realize_notify = {
651 .notify = muxes_realize_done,
652};
653
3f0838ab
KB
654static GSource *mux_chr_add_watch(CharDriverState *s, GIOCondition cond)
655{
656 MuxDriver *d = s->opaque;
657 return d->drv->chr_add_watch(d->drv, cond);
658}
659
3c0e5a4a
PB
660static CharDriverState *qemu_chr_open_mux(const char *id,
661 ChardevBackend *backend,
662 ChardevReturn *ret, Error **errp)
6f97dba0 663{
130257dc 664 ChardevMux *mux = backend->u.mux;
3c0e5a4a 665 CharDriverState *chr, *drv;
6f97dba0
AL
666 MuxDriver *d;
667
3c0e5a4a
PB
668 drv = qemu_chr_find(mux->chardev);
669 if (drv == NULL) {
670 error_setg(errp, "mux: base chardev %s not found", mux->chardev);
671 return NULL;
672 }
673
db39fcf1 674 chr = qemu_chr_alloc();
2d528d45 675 d = g_new0(MuxDriver, 1);
6f97dba0
AL
676
677 chr->opaque = d;
678 d->drv = drv;
799f1f23 679 d->focus = -1;
6f97dba0
AL
680 chr->chr_write = mux_chr_write;
681 chr->chr_update_read_handler = mux_chr_update_read_handler;
682 chr->chr_accept_input = mux_chr_accept_input;
7c32c4fe 683 /* Frontend guest-open / -close notification is not support with muxes */
574b711a 684 chr->chr_set_fe_open = NULL;
3f0838ab
KB
685 if (drv->chr_add_watch) {
686 chr->chr_add_watch = mux_chr_add_watch;
687 }
7b7ab18d
MR
688 /* only default to opened state if we've realized the initial
689 * set of muxes
690 */
691 chr->explicit_be_open = muxes_realized ? 0 : 1;
692 chr->is_mux = 1;
73cdf3f2 693
6f97dba0
AL
694 return chr;
695}
696
697
698#ifdef _WIN32
d247d25f 699int send_all(int fd, const void *buf, int len1)
6f97dba0
AL
700{
701 int ret, len;
702
703 len = len1;
704 while (len > 0) {
705 ret = send(fd, buf, len, 0);
706 if (ret < 0) {
6f97dba0
AL
707 errno = WSAGetLastError();
708 if (errno != WSAEWOULDBLOCK) {
709 return -1;
710 }
711 } else if (ret == 0) {
712 break;
713 } else {
714 buf += ret;
715 len -= ret;
716 }
717 }
718 return len1 - len;
719}
720
721#else
722
5fc9cfed 723int send_all(int fd, const void *_buf, int len1)
6f97dba0
AL
724{
725 int ret, len;
5fc9cfed 726 const uint8_t *buf = _buf;
6f97dba0
AL
727
728 len = len1;
729 while (len > 0) {
730 ret = write(fd, buf, len);
731 if (ret < 0) {
732 if (errno != EINTR && errno != EAGAIN)
733 return -1;
734 } else if (ret == 0) {
735 break;
736 } else {
737 buf += ret;
738 len -= ret;
739 }
740 }
741 return len1 - len;
742}
4549a8b7
SB
743
744int recv_all(int fd, void *_buf, int len1, bool single_read)
745{
746 int ret, len;
747 uint8_t *buf = _buf;
748
749 len = len1;
750 while ((len > 0) && (ret = read(fd, buf, len)) != 0) {
751 if (ret < 0) {
752 if (errno != EINTR && errno != EAGAIN) {
753 return -1;
754 }
755 continue;
756 } else {
757 if (single_read) {
758 return ret;
759 }
760 buf += ret;
761 len -= ret;
762 }
763 }
764 return len1 - len;
765}
766
6f97dba0
AL
767#endif /* !_WIN32 */
768
96c63847
AL
769typedef struct IOWatchPoll
770{
d185c094
PB
771 GSource parent;
772
1e885b25 773 GIOChannel *channel;
96c63847 774 GSource *src;
96c63847
AL
775
776 IOCanReadHandler *fd_can_read;
1e885b25 777 GSourceFunc fd_read;
96c63847 778 void *opaque;
96c63847
AL
779} IOWatchPoll;
780
96c63847
AL
781static IOWatchPoll *io_watch_poll_from_source(GSource *source)
782{
d185c094 783 return container_of(source, IOWatchPoll, parent);
96c63847
AL
784}
785
786static gboolean io_watch_poll_prepare(GSource *source, gint *timeout_)
787{
788 IOWatchPoll *iwp = io_watch_poll_from_source(source);
d185c094 789 bool now_active = iwp->fd_can_read(iwp->opaque) > 0;
1e885b25 790 bool was_active = iwp->src != NULL;
d185c094 791 if (was_active == now_active) {
96c63847
AL
792 return FALSE;
793 }
794
d185c094 795 if (now_active) {
4bf1cb03
NC
796 iwp->src = g_io_create_watch(iwp->channel,
797 G_IO_IN | G_IO_ERR | G_IO_HUP | G_IO_NVAL);
1e885b25 798 g_source_set_callback(iwp->src, iwp->fd_read, iwp->opaque, NULL);
d185c094
PB
799 g_source_attach(iwp->src, NULL);
800 } else {
1e885b25
PB
801 g_source_destroy(iwp->src);
802 g_source_unref(iwp->src);
803 iwp->src = NULL;
d185c094
PB
804 }
805 return FALSE;
96c63847
AL
806}
807
808static gboolean io_watch_poll_check(GSource *source)
809{
d185c094 810 return FALSE;
96c63847
AL
811}
812
813static gboolean io_watch_poll_dispatch(GSource *source, GSourceFunc callback,
814 gpointer user_data)
815{
d185c094 816 abort();
96c63847
AL
817}
818
819static void io_watch_poll_finalize(GSource *source)
820{
2b316774
PB
821 /* Due to a glib bug, removing the last reference to a source
822 * inside a finalize callback causes recursive locking (and a
823 * deadlock). This is not a problem inside other callbacks,
824 * including dispatch callbacks, so we call io_remove_watch_poll
825 * to remove this source. At this point, iwp->src must
826 * be NULL, or we would leak it.
827 *
828 * This would be solved much more elegantly by child sources,
829 * but we support older glib versions that do not have them.
830 */
96c63847 831 IOWatchPoll *iwp = io_watch_poll_from_source(source);
2b316774 832 assert(iwp->src == NULL);
96c63847
AL
833}
834
835static GSourceFuncs io_watch_poll_funcs = {
836 .prepare = io_watch_poll_prepare,
837 .check = io_watch_poll_check,
838 .dispatch = io_watch_poll_dispatch,
839 .finalize = io_watch_poll_finalize,
840};
841
842/* Can only be used for read */
843static guint io_add_watch_poll(GIOChannel *channel,
844 IOCanReadHandler *fd_can_read,
845 GIOFunc fd_read,
846 gpointer user_data)
847{
848 IOWatchPoll *iwp;
0ca5aa4f 849 int tag;
96c63847 850
d185c094 851 iwp = (IOWatchPoll *) g_source_new(&io_watch_poll_funcs, sizeof(IOWatchPoll));
96c63847
AL
852 iwp->fd_can_read = fd_can_read;
853 iwp->opaque = user_data;
1e885b25
PB
854 iwp->channel = channel;
855 iwp->fd_read = (GSourceFunc) fd_read;
856 iwp->src = NULL;
96c63847 857
0ca5aa4f
PB
858 tag = g_source_attach(&iwp->parent, NULL);
859 g_source_unref(&iwp->parent);
860 return tag;
96c63847
AL
861}
862
2b316774
PB
863static void io_remove_watch_poll(guint tag)
864{
865 GSource *source;
866 IOWatchPoll *iwp;
867
868 g_return_if_fail (tag > 0);
869
870 source = g_main_context_find_source_by_id(NULL, tag);
871 g_return_if_fail (source != NULL);
872
873 iwp = io_watch_poll_from_source(source);
874 if (iwp->src) {
875 g_source_destroy(iwp->src);
876 g_source_unref(iwp->src);
877 iwp->src = NULL;
878 }
879 g_source_destroy(&iwp->parent);
880}
881
26da70c7
AS
882static void remove_fd_in_watch(CharDriverState *chr)
883{
884 if (chr->fd_in_tag) {
885 io_remove_watch_poll(chr->fd_in_tag);
886 chr->fd_in_tag = 0;
887 }
888}
889
44ab9ed4 890#ifndef _WIN32
96c63847
AL
891static GIOChannel *io_channel_from_fd(int fd)
892{
893 GIOChannel *chan;
894
895 if (fd == -1) {
896 return NULL;
897 }
898
899 chan = g_io_channel_unix_new(fd);
900
901 g_io_channel_set_encoding(chan, NULL, NULL);
902 g_io_channel_set_buffered(chan, FALSE);
903
904 return chan;
905}
44ab9ed4 906#endif
96c63847 907
76a9644b
AL
908static GIOChannel *io_channel_from_socket(int fd)
909{
910 GIOChannel *chan;
911
912 if (fd == -1) {
913 return NULL;
914 }
915
916#ifdef _WIN32
917 chan = g_io_channel_win32_new_socket(fd);
918#else
919 chan = g_io_channel_unix_new(fd);
920#endif
921
922 g_io_channel_set_encoding(chan, NULL, NULL);
923 g_io_channel_set_buffered(chan, FALSE);
924
925 return chan;
926}
927
684a096e 928static int io_channel_send(GIOChannel *fd, const void *buf, size_t len)
96c63847 929{
ac8c26f6
LE
930 size_t offset = 0;
931 GIOStatus status = G_IO_STATUS_NORMAL;
96c63847 932
ac8c26f6
LE
933 while (offset < len && status == G_IO_STATUS_NORMAL) {
934 gsize bytes_written = 0;
684a096e
AL
935
936 status = g_io_channel_write_chars(fd, buf + offset, len - offset,
96c63847 937 &bytes_written, NULL);
684a096e 938 offset += bytes_written;
96c63847 939 }
684a096e 940
ac8c26f6
LE
941 if (offset > 0) {
942 return offset;
943 }
944 switch (status) {
945 case G_IO_STATUS_NORMAL:
946 g_assert(len == 0);
947 return 0;
948 case G_IO_STATUS_AGAIN:
949 errno = EAGAIN;
950 return -1;
951 default:
952 break;
953 }
954 errno = EINVAL;
955 return -1;
96c63847 956}
96c63847 957
44ab9ed4
BS
958#ifndef _WIN32
959
a29753f8
AL
960typedef struct FDCharDriver {
961 CharDriverState *chr;
962 GIOChannel *fd_in, *fd_out;
6f97dba0
AL
963 int max_size;
964} FDCharDriver;
965
9005b2a7 966/* Called with chr_write_lock held. */
6f97dba0
AL
967static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
968{
969 FDCharDriver *s = chr->opaque;
a29753f8 970
684a096e 971 return io_channel_send(s->fd_out, buf, len);
6f97dba0
AL
972}
973
a29753f8 974static gboolean fd_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL
975{
976 CharDriverState *chr = opaque;
977 FDCharDriver *s = chr->opaque;
a29753f8 978 int len;
9bd7854e 979 uint8_t buf[READ_BUF_LEN];
a29753f8
AL
980 GIOStatus status;
981 gsize bytes_read;
6f97dba0
AL
982
983 len = sizeof(buf);
a29753f8 984 if (len > s->max_size) {
6f97dba0 985 len = s->max_size;
a29753f8
AL
986 }
987 if (len == 0) {
cdbf6e16 988 return TRUE;
a29753f8
AL
989 }
990
991 status = g_io_channel_read_chars(chan, (gchar *)buf,
992 len, &bytes_read, NULL);
993 if (status == G_IO_STATUS_EOF) {
26da70c7 994 remove_fd_in_watch(chr);
a425d23f 995 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
a29753f8 996 return FALSE;
6f97dba0 997 }
a29753f8
AL
998 if (status == G_IO_STATUS_NORMAL) {
999 qemu_chr_be_write(chr, buf, bytes_read);
6f97dba0 1000 }
a29753f8
AL
1001
1002 return TRUE;
1003}
1004
1005static int fd_chr_read_poll(void *opaque)
1006{
1007 CharDriverState *chr = opaque;
1008 FDCharDriver *s = chr->opaque;
1009
1010 s->max_size = qemu_chr_be_can_write(chr);
1011 return s->max_size;
6f97dba0
AL
1012}
1013
23673ca7
AL
1014static GSource *fd_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1015{
1016 FDCharDriver *s = chr->opaque;
1017 return g_io_create_watch(s->fd_out, cond);
1018}
1019
6f97dba0
AL
1020static void fd_chr_update_read_handler(CharDriverState *chr)
1021{
1022 FDCharDriver *s = chr->opaque;
1023
26da70c7 1024 remove_fd_in_watch(chr);
a29753f8 1025 if (s->fd_in) {
7ba9addc
AS
1026 chr->fd_in_tag = io_add_watch_poll(s->fd_in, fd_chr_read_poll,
1027 fd_chr_read, chr);
6f97dba0
AL
1028 }
1029}
1030
1031static void fd_chr_close(struct CharDriverState *chr)
1032{
1033 FDCharDriver *s = chr->opaque;
1034
26da70c7 1035 remove_fd_in_watch(chr);
a29753f8
AL
1036 if (s->fd_in) {
1037 g_io_channel_unref(s->fd_in);
1038 }
1039 if (s->fd_out) {
1040 g_io_channel_unref(s->fd_out);
6f97dba0
AL
1041 }
1042
7267c094 1043 g_free(s);
a425d23f 1044 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL
1045}
1046
1047/* open a character device to a unix fd */
1048static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
1049{
1050 CharDriverState *chr;
1051 FDCharDriver *s;
1052
db39fcf1 1053 chr = qemu_chr_alloc();
2d528d45 1054 s = g_new0(FDCharDriver, 1);
a29753f8
AL
1055 s->fd_in = io_channel_from_fd(fd_in);
1056 s->fd_out = io_channel_from_fd(fd_out);
4ff12bdb 1057 qemu_set_nonblock(fd_out);
a29753f8 1058 s->chr = chr;
6f97dba0 1059 chr->opaque = s;
23673ca7 1060 chr->chr_add_watch = fd_chr_add_watch;
6f97dba0
AL
1061 chr->chr_write = fd_chr_write;
1062 chr->chr_update_read_handler = fd_chr_update_read_handler;
1063 chr->chr_close = fd_chr_close;
1064
6f97dba0
AL
1065 return chr;
1066}
1067
20cbe7a2
PB
1068static CharDriverState *qemu_chr_open_pipe(const char *id,
1069 ChardevBackend *backend,
1070 ChardevReturn *ret,
1071 Error **errp)
6f97dba0 1072{
130257dc 1073 ChardevHostdev *opts = backend->u.pipe;
6f97dba0 1074 int fd_in, fd_out;
9f781168
CM
1075 char filename_in[CHR_MAX_FILENAME_SIZE];
1076 char filename_out[CHR_MAX_FILENAME_SIZE];
548cbb36 1077 const char *filename = opts->device;
7d31544f 1078
9f781168
CM
1079 snprintf(filename_in, CHR_MAX_FILENAME_SIZE, "%s.in", filename);
1080 snprintf(filename_out, CHR_MAX_FILENAME_SIZE, "%s.out", filename);
40ff6d7e
KW
1081 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
1082 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
6f97dba0
AL
1083 if (fd_in < 0 || fd_out < 0) {
1084 if (fd_in >= 0)
1085 close(fd_in);
1086 if (fd_out >= 0)
1087 close(fd_out);
b181e047 1088 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
a89dd6c3 1089 if (fd_in < 0) {
20cbe7a2 1090 error_setg_file_open(errp, errno, filename);
1f51470d 1091 return NULL;
a89dd6c3 1092 }
6f97dba0 1093 }
1f51470d 1094 return qemu_chr_open_fd(fd_in, fd_out);
6f97dba0
AL
1095}
1096
6f97dba0
AL
1097/* init terminal so that we can grab keys */
1098static struct termios oldtty;
1099static int old_fd0_flags;
c88930a6 1100static bool stdio_in_use;
bb002513 1101static bool stdio_allow_signal;
e76d4420
GH
1102static bool stdio_echo_state;
1103
1104static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo);
6f97dba0
AL
1105
1106static void term_exit(void)
1107{
1108 tcsetattr (0, TCSANOW, &oldtty);
1109 fcntl(0, F_SETFL, old_fd0_flags);
1110}
1111
e76d4420
GH
1112static void term_stdio_handler(int sig)
1113{
1114 /* restore echo after resume from suspend. */
1115 qemu_chr_set_echo_stdio(NULL, stdio_echo_state);
1116}
1117
bb002513 1118static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
6f97dba0
AL
1119{
1120 struct termios tty;
1121
e76d4420 1122 stdio_echo_state = echo;
0369364b 1123 tty = oldtty;
bb002513
PB
1124 if (!echo) {
1125 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
6f97dba0 1126 |INLCR|IGNCR|ICRNL|IXON);
bb002513
PB
1127 tty.c_oflag |= OPOST;
1128 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
1129 tty.c_cflag &= ~(CSIZE|PARENB);
1130 tty.c_cflag |= CS8;
1131 tty.c_cc[VMIN] = 1;
1132 tty.c_cc[VTIME] = 0;
1133 }
bb002513 1134 if (!stdio_allow_signal)
6f97dba0 1135 tty.c_lflag &= ~ISIG;
6f97dba0
AL
1136
1137 tcsetattr (0, TCSANOW, &tty);
6f97dba0
AL
1138}
1139
1140static void qemu_chr_close_stdio(struct CharDriverState *chr)
1141{
1142 term_exit();
6f97dba0
AL
1143 fd_chr_close(chr);
1144}
1145
8c84b25d
PB
1146static CharDriverState *qemu_chr_open_stdio(const char *id,
1147 ChardevBackend *backend,
1148 ChardevReturn *ret,
1149 Error **errp)
6f97dba0 1150{
130257dc 1151 ChardevStdio *opts = backend->u.stdio;
6f97dba0 1152 CharDriverState *chr;
e76d4420 1153 struct sigaction act;
6f97dba0 1154
ab51b1d5 1155 if (is_daemonized()) {
8c84b25d 1156 error_setg(errp, "cannot use stdio with -daemonize");
ab51b1d5
MT
1157 return NULL;
1158 }
c88930a6
LL
1159
1160 if (stdio_in_use) {
8c84b25d
PB
1161 error_setg(errp, "cannot use stdio by multiple character devices");
1162 return NULL;
c88930a6
LL
1163 }
1164
1165 stdio_in_use = true;
ed7a1540 1166 old_fd0_flags = fcntl(0, F_GETFL);
c88930a6 1167 tcgetattr(0, &oldtty);
4ff12bdb 1168 qemu_set_nonblock(0);
ed7a1540 1169 atexit(term_exit);
0369364b 1170
e76d4420
GH
1171 memset(&act, 0, sizeof(act));
1172 act.sa_handler = term_stdio_handler;
1173 sigaction(SIGCONT, &act, NULL);
1174
6f97dba0
AL
1175 chr = qemu_chr_open_fd(0, 1);
1176 chr->chr_close = qemu_chr_close_stdio;
bb002513 1177 chr->chr_set_echo = qemu_chr_set_echo_stdio;
7c358031
GH
1178 if (opts->has_signal) {
1179 stdio_allow_signal = opts->signal;
1180 }
15f31519 1181 qemu_chr_fe_set_echo(chr, false);
6f97dba0 1182
1f51470d 1183 return chr;
6f97dba0
AL
1184}
1185
6f97dba0 1186#if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
a167ba50
AJ
1187 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
1188 || defined(__GLIBC__)
6f97dba0 1189
d809ab95
PB
1190#define HAVE_CHARDEV_SERIAL 1
1191#define HAVE_CHARDEV_PTY 1
e551498e 1192
6f97dba0 1193typedef struct {
093d3a20 1194 GIOChannel *fd;
6f97dba0 1195 int read_bytes;
9005b2a7
PB
1196
1197 /* Protected by the CharDriverState chr_write_lock. */
1198 int connected;
8aa33caf 1199 guint timer_tag;
7b3621f4 1200 guint open_tag;
6f97dba0
AL
1201} PtyCharDriver;
1202
9005b2a7 1203static void pty_chr_update_read_handler_locked(CharDriverState *chr);
6f97dba0
AL
1204static void pty_chr_state(CharDriverState *chr, int connected);
1205
8aa33caf
AL
1206static gboolean pty_chr_timer(gpointer opaque)
1207{
1208 struct CharDriverState *chr = opaque;
1209 PtyCharDriver *s = chr->opaque;
1210
9005b2a7 1211 qemu_mutex_lock(&chr->chr_write_lock);
79f20075 1212 s->timer_tag = 0;
7b3621f4 1213 s->open_tag = 0;
b0d768c3
GH
1214 if (!s->connected) {
1215 /* Next poll ... */
9005b2a7 1216 pty_chr_update_read_handler_locked(chr);
b0d768c3 1217 }
9005b2a7 1218 qemu_mutex_unlock(&chr->chr_write_lock);
8aa33caf
AL
1219 return FALSE;
1220}
1221
9005b2a7 1222/* Called with chr_write_lock held. */
8aa33caf
AL
1223static void pty_chr_rearm_timer(CharDriverState *chr, int ms)
1224{
1225 PtyCharDriver *s = chr->opaque;
1226
1227 if (s->timer_tag) {
1228 g_source_remove(s->timer_tag);
1229 s->timer_tag = 0;
1230 }
1231
1232 if (ms == 1000) {
1233 s->timer_tag = g_timeout_add_seconds(1, pty_chr_timer, chr);
1234 } else {
1235 s->timer_tag = g_timeout_add(ms, pty_chr_timer, chr);
1236 }
1237}
1238
9005b2a7
PB
1239/* Called with chr_write_lock held. */
1240static void pty_chr_update_read_handler_locked(CharDriverState *chr)
1bb7fe72
PB
1241{
1242 PtyCharDriver *s = chr->opaque;
1243 GPollFD pfd;
c1f24489 1244 int rc;
1bb7fe72
PB
1245
1246 pfd.fd = g_io_channel_unix_get_fd(s->fd);
1247 pfd.events = G_IO_OUT;
1248 pfd.revents = 0;
c1f24489
PB
1249 do {
1250 rc = g_poll(&pfd, 1, 0);
1251 } while (rc == -1 && errno == EINTR);
1252 assert(rc >= 0);
1253
1bb7fe72
PB
1254 if (pfd.revents & G_IO_HUP) {
1255 pty_chr_state(chr, 0);
1256 } else {
1257 pty_chr_state(chr, 1);
1258 }
1259}
1260
9005b2a7
PB
1261static void pty_chr_update_read_handler(CharDriverState *chr)
1262{
1263 qemu_mutex_lock(&chr->chr_write_lock);
1264 pty_chr_update_read_handler_locked(chr);
1265 qemu_mutex_unlock(&chr->chr_write_lock);
1266}
1267
1268/* Called with chr_write_lock held. */
6f97dba0
AL
1269static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1270{
1271 PtyCharDriver *s = chr->opaque;
1272
1273 if (!s->connected) {
1274 /* guest sends data, check for (re-)connect */
9005b2a7 1275 pty_chr_update_read_handler_locked(chr);
cf7330c7
ST
1276 if (!s->connected) {
1277 return 0;
1278 }
6f97dba0 1279 }
684a096e 1280 return io_channel_send(s->fd, buf, len);
6f97dba0
AL
1281}
1282
e6a87ed8
AL
1283static GSource *pty_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1284{
1285 PtyCharDriver *s = chr->opaque;
62c339c5
PB
1286 if (!s->connected) {
1287 return NULL;
1288 }
e6a87ed8
AL
1289 return g_io_create_watch(s->fd, cond);
1290}
1291
6f97dba0
AL
1292static int pty_chr_read_poll(void *opaque)
1293{
1294 CharDriverState *chr = opaque;
1295 PtyCharDriver *s = chr->opaque;
1296
909cda12 1297 s->read_bytes = qemu_chr_be_can_write(chr);
6f97dba0
AL
1298 return s->read_bytes;
1299}
1300
093d3a20 1301static gboolean pty_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL
1302{
1303 CharDriverState *chr = opaque;
1304 PtyCharDriver *s = chr->opaque;
093d3a20 1305 gsize size, len;
9bd7854e 1306 uint8_t buf[READ_BUF_LEN];
093d3a20 1307 GIOStatus status;
6f97dba0
AL
1308
1309 len = sizeof(buf);
1310 if (len > s->read_bytes)
1311 len = s->read_bytes;
cdbf6e16
PB
1312 if (len == 0) {
1313 return TRUE;
1314 }
093d3a20
AL
1315 status = g_io_channel_read_chars(s->fd, (gchar *)buf, len, &size, NULL);
1316 if (status != G_IO_STATUS_NORMAL) {
6f97dba0 1317 pty_chr_state(chr, 0);
093d3a20
AL
1318 return FALSE;
1319 } else {
6f97dba0 1320 pty_chr_state(chr, 1);
fa5efccb 1321 qemu_chr_be_write(chr, buf, size);
6f97dba0 1322 }
093d3a20 1323 return TRUE;
6f97dba0
AL
1324}
1325
7b3621f4
PB
1326static gboolean qemu_chr_be_generic_open_func(gpointer opaque)
1327{
1328 CharDriverState *chr = opaque;
1329 PtyCharDriver *s = chr->opaque;
1330
1331 s->open_tag = 0;
1332 qemu_chr_be_generic_open(chr);
1333 return FALSE;
1334}
1335
9005b2a7 1336/* Called with chr_write_lock held. */
6f97dba0
AL
1337static void pty_chr_state(CharDriverState *chr, int connected)
1338{
1339 PtyCharDriver *s = chr->opaque;
1340
1341 if (!connected) {
7b3621f4
PB
1342 if (s->open_tag) {
1343 g_source_remove(s->open_tag);
1344 s->open_tag = 0;
1345 }
26da70c7 1346 remove_fd_in_watch(chr);
6f97dba0 1347 s->connected = 0;
6f97dba0
AL
1348 /* (re-)connect poll interval for idle guests: once per second.
1349 * We check more frequently in case the guests sends data to
1350 * the virtual device linked to our pty. */
8aa33caf 1351 pty_chr_rearm_timer(chr, 1000);
6f97dba0 1352 } else {
85a67692
PB
1353 if (s->timer_tag) {
1354 g_source_remove(s->timer_tag);
1355 s->timer_tag = 0;
1356 }
1357 if (!s->connected) {
7b3621f4 1358 g_assert(s->open_tag == 0);
85a67692 1359 s->connected = 1;
7b3621f4 1360 s->open_tag = g_idle_add(qemu_chr_be_generic_open_func, chr);
ac1b84dd
GH
1361 }
1362 if (!chr->fd_in_tag) {
7ba9addc
AS
1363 chr->fd_in_tag = io_add_watch_poll(s->fd, pty_chr_read_poll,
1364 pty_chr_read, chr);
85a67692 1365 }
6f97dba0
AL
1366 }
1367}
1368
6f97dba0
AL
1369static void pty_chr_close(struct CharDriverState *chr)
1370{
1371 PtyCharDriver *s = chr->opaque;
093d3a20 1372 int fd;
6f97dba0 1373
7b3621f4
PB
1374 qemu_mutex_lock(&chr->chr_write_lock);
1375 pty_chr_state(chr, 0);
093d3a20
AL
1376 fd = g_io_channel_unix_get_fd(s->fd);
1377 g_io_channel_unref(s->fd);
1378 close(fd);
8aa33caf
AL
1379 if (s->timer_tag) {
1380 g_source_remove(s->timer_tag);
910b6368 1381 s->timer_tag = 0;
8aa33caf 1382 }
7b3621f4 1383 qemu_mutex_unlock(&chr->chr_write_lock);
7267c094 1384 g_free(s);
a425d23f 1385 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL
1386}
1387
e68c5958 1388static CharDriverState *qemu_chr_open_pty(const char *id,
c2e75a43
PB
1389 ChardevBackend *backend,
1390 ChardevReturn *ret,
1391 Error **errp)
6f97dba0
AL
1392{
1393 CharDriverState *chr;
1394 PtyCharDriver *s;
e68c5958 1395 int master_fd, slave_fd;
6f97dba0 1396 char pty_name[PATH_MAX];
6f97dba0 1397
4efeabbb
MT
1398 master_fd = qemu_openpty_raw(&slave_fd, pty_name);
1399 if (master_fd < 0) {
c2e75a43 1400 error_setg_errno(errp, errno, "Failed to create PTY");
1f51470d 1401 return NULL;
6f97dba0
AL
1402 }
1403
6f97dba0 1404 close(slave_fd);
fac6688a 1405 qemu_set_nonblock(master_fd);
6f97dba0 1406
db39fcf1 1407 chr = qemu_chr_alloc();
a4e26048 1408
4efeabbb
MT
1409 chr->filename = g_strdup_printf("pty:%s", pty_name);
1410 ret->pty = g_strdup(pty_name);
e68c5958 1411 ret->has_pty = true;
58650218 1412
e68c5958 1413 fprintf(stderr, "char device redirected to %s (label %s)\n",
4efeabbb 1414 pty_name, id);
6f97dba0 1415
2d528d45 1416 s = g_new0(PtyCharDriver, 1);
6f97dba0
AL
1417 chr->opaque = s;
1418 chr->chr_write = pty_chr_write;
1419 chr->chr_update_read_handler = pty_chr_update_read_handler;
1420 chr->chr_close = pty_chr_close;
e6a87ed8 1421 chr->chr_add_watch = pty_chr_add_watch;
bd5c51ee 1422 chr->explicit_be_open = true;
6f97dba0 1423
093d3a20 1424 s->fd = io_channel_from_fd(master_fd);
8aa33caf 1425 s->timer_tag = 0;
6f97dba0 1426
1f51470d 1427 return chr;
6f97dba0
AL
1428}
1429
1430static void tty_serial_init(int fd, int speed,
1431 int parity, int data_bits, int stop_bits)
1432{
1433 struct termios tty;
1434 speed_t spd;
1435
1436#if 0
1437 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1438 speed, parity, data_bits, stop_bits);
1439#endif
1440 tcgetattr (fd, &tty);
1441
45eea13b
SW
1442#define check_speed(val) if (speed <= val) { spd = B##val; break; }
1443 speed = speed * 10 / 11;
1444 do {
1445 check_speed(50);
1446 check_speed(75);
1447 check_speed(110);
1448 check_speed(134);
1449 check_speed(150);
1450 check_speed(200);
1451 check_speed(300);
1452 check_speed(600);
1453 check_speed(1200);
1454 check_speed(1800);
1455 check_speed(2400);
1456 check_speed(4800);
1457 check_speed(9600);
1458 check_speed(19200);
1459 check_speed(38400);
1460 /* Non-Posix values follow. They may be unsupported on some systems. */
1461 check_speed(57600);
1462 check_speed(115200);
1463#ifdef B230400
1464 check_speed(230400);
1465#endif
1466#ifdef B460800
1467 check_speed(460800);
1468#endif
1469#ifdef B500000
1470 check_speed(500000);
1471#endif
1472#ifdef B576000
1473 check_speed(576000);
1474#endif
1475#ifdef B921600
1476 check_speed(921600);
1477#endif
1478#ifdef B1000000
1479 check_speed(1000000);
1480#endif
1481#ifdef B1152000
1482 check_speed(1152000);
1483#endif
1484#ifdef B1500000
1485 check_speed(1500000);
1486#endif
1487#ifdef B2000000
1488 check_speed(2000000);
1489#endif
1490#ifdef B2500000
1491 check_speed(2500000);
1492#endif
1493#ifdef B3000000
1494 check_speed(3000000);
1495#endif
1496#ifdef B3500000
1497 check_speed(3500000);
1498#endif
1499#ifdef B4000000
1500 check_speed(4000000);
1501#endif
6f97dba0 1502 spd = B115200;
45eea13b 1503 } while (0);
6f97dba0
AL
1504
1505 cfsetispeed(&tty, spd);
1506 cfsetospeed(&tty, spd);
1507
1508 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1509 |INLCR|IGNCR|ICRNL|IXON);
1510 tty.c_oflag |= OPOST;
1511 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1512 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1513 switch(data_bits) {
1514 default:
1515 case 8:
1516 tty.c_cflag |= CS8;
1517 break;
1518 case 7:
1519 tty.c_cflag |= CS7;
1520 break;
1521 case 6:
1522 tty.c_cflag |= CS6;
1523 break;
1524 case 5:
1525 tty.c_cflag |= CS5;
1526 break;
1527 }
1528 switch(parity) {
1529 default:
1530 case 'N':
1531 break;
1532 case 'E':
1533 tty.c_cflag |= PARENB;
1534 break;
1535 case 'O':
1536 tty.c_cflag |= PARENB | PARODD;
1537 break;
1538 }
1539 if (stop_bits == 2)
1540 tty.c_cflag |= CSTOPB;
1541
1542 tcsetattr (fd, TCSANOW, &tty);
1543}
1544
1545static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1546{
1547 FDCharDriver *s = chr->opaque;
1548
1549 switch(cmd) {
1550 case CHR_IOCTL_SERIAL_SET_PARAMS:
1551 {
1552 QEMUSerialSetParams *ssp = arg;
a29753f8
AL
1553 tty_serial_init(g_io_channel_unix_get_fd(s->fd_in),
1554 ssp->speed, ssp->parity,
6f97dba0
AL
1555 ssp->data_bits, ssp->stop_bits);
1556 }
1557 break;
1558 case CHR_IOCTL_SERIAL_SET_BREAK:
1559 {
1560 int enable = *(int *)arg;
a29753f8
AL
1561 if (enable) {
1562 tcsendbreak(g_io_channel_unix_get_fd(s->fd_in), 1);
1563 }
6f97dba0
AL
1564 }
1565 break;
1566 case CHR_IOCTL_SERIAL_GET_TIOCM:
1567 {
1568 int sarg = 0;
1569 int *targ = (int *)arg;
a29753f8 1570 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMGET, &sarg);
6f97dba0 1571 *targ = 0;
b4abdfa4 1572 if (sarg & TIOCM_CTS)
6f97dba0 1573 *targ |= CHR_TIOCM_CTS;
b4abdfa4 1574 if (sarg & TIOCM_CAR)
6f97dba0 1575 *targ |= CHR_TIOCM_CAR;
b4abdfa4 1576 if (sarg & TIOCM_DSR)
6f97dba0 1577 *targ |= CHR_TIOCM_DSR;
b4abdfa4 1578 if (sarg & TIOCM_RI)
6f97dba0 1579 *targ |= CHR_TIOCM_RI;
b4abdfa4 1580 if (sarg & TIOCM_DTR)
6f97dba0 1581 *targ |= CHR_TIOCM_DTR;
b4abdfa4 1582 if (sarg & TIOCM_RTS)
6f97dba0
AL
1583 *targ |= CHR_TIOCM_RTS;
1584 }
1585 break;
1586 case CHR_IOCTL_SERIAL_SET_TIOCM:
1587 {
1588 int sarg = *(int *)arg;
1589 int targ = 0;
a29753f8 1590 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMGET, &targ);
b4abdfa4
AJ
1591 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1592 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1593 if (sarg & CHR_TIOCM_CTS)
1594 targ |= TIOCM_CTS;
1595 if (sarg & CHR_TIOCM_CAR)
1596 targ |= TIOCM_CAR;
1597 if (sarg & CHR_TIOCM_DSR)
1598 targ |= TIOCM_DSR;
1599 if (sarg & CHR_TIOCM_RI)
1600 targ |= TIOCM_RI;
1601 if (sarg & CHR_TIOCM_DTR)
6f97dba0 1602 targ |= TIOCM_DTR;
b4abdfa4 1603 if (sarg & CHR_TIOCM_RTS)
6f97dba0 1604 targ |= TIOCM_RTS;
a29753f8 1605 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMSET, &targ);
6f97dba0
AL
1606 }
1607 break;
1608 default:
1609 return -ENOTSUP;
1610 }
1611 return 0;
1612}
1613
4266a134
DA
1614static void qemu_chr_close_tty(CharDriverState *chr)
1615{
1616 FDCharDriver *s = chr->opaque;
1617 int fd = -1;
1618
1619 if (s) {
a29753f8 1620 fd = g_io_channel_unix_get_fd(s->fd_in);
4266a134
DA
1621 }
1622
1623 fd_chr_close(chr);
1624
1625 if (fd >= 0) {
1626 close(fd);
1627 }
1628}
1629
d59044ef
GH
1630static CharDriverState *qemu_chr_open_tty_fd(int fd)
1631{
1632 CharDriverState *chr;
1633
1634 tty_serial_init(fd, 115200, 'N', 8, 1);
1635 chr = qemu_chr_open_fd(fd, fd);
1636 chr->chr_ioctl = tty_serial_ioctl;
1637 chr->chr_close = qemu_chr_close_tty;
1638 return chr;
1639}
6f97dba0
AL
1640#endif /* __linux__ || __sun__ */
1641
1642#if defined(__linux__)
e551498e
GH
1643
1644#define HAVE_CHARDEV_PARPORT 1
1645
6f97dba0
AL
1646typedef struct {
1647 int fd;
1648 int mode;
1649} ParallelCharDriver;
1650
1651static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1652{
1653 if (s->mode != mode) {
1654 int m = mode;
1655 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1656 return 0;
1657 s->mode = mode;
1658 }
1659 return 1;
1660}
1661
1662static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1663{
1664 ParallelCharDriver *drv = chr->opaque;
1665 int fd = drv->fd;
1666 uint8_t b;
1667
1668 switch(cmd) {
1669 case CHR_IOCTL_PP_READ_DATA:
1670 if (ioctl(fd, PPRDATA, &b) < 0)
1671 return -ENOTSUP;
1672 *(uint8_t *)arg = b;
1673 break;
1674 case CHR_IOCTL_PP_WRITE_DATA:
1675 b = *(uint8_t *)arg;
1676 if (ioctl(fd, PPWDATA, &b) < 0)
1677 return -ENOTSUP;
1678 break;
1679 case CHR_IOCTL_PP_READ_CONTROL:
1680 if (ioctl(fd, PPRCONTROL, &b) < 0)
1681 return -ENOTSUP;
1682 /* Linux gives only the lowest bits, and no way to know data
1683 direction! For better compatibility set the fixed upper
1684 bits. */
1685 *(uint8_t *)arg = b | 0xc0;
1686 break;
1687 case CHR_IOCTL_PP_WRITE_CONTROL:
1688 b = *(uint8_t *)arg;
1689 if (ioctl(fd, PPWCONTROL, &b) < 0)
1690 return -ENOTSUP;
1691 break;
1692 case CHR_IOCTL_PP_READ_STATUS:
1693 if (ioctl(fd, PPRSTATUS, &b) < 0)
1694 return -ENOTSUP;
1695 *(uint8_t *)arg = b;
1696 break;
1697 case CHR_IOCTL_PP_DATA_DIR:
1698 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1699 return -ENOTSUP;
1700 break;
1701 case CHR_IOCTL_PP_EPP_READ_ADDR:
1702 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1703 struct ParallelIOArg *parg = arg;
1704 int n = read(fd, parg->buffer, parg->count);
1705 if (n != parg->count) {
1706 return -EIO;
1707 }
1708 }
1709 break;
1710 case CHR_IOCTL_PP_EPP_READ:
1711 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1712 struct ParallelIOArg *parg = arg;
1713 int n = read(fd, parg->buffer, parg->count);
1714 if (n != parg->count) {
1715 return -EIO;
1716 }
1717 }
1718 break;
1719 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1720 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1721 struct ParallelIOArg *parg = arg;
1722 int n = write(fd, parg->buffer, parg->count);
1723 if (n != parg->count) {
1724 return -EIO;
1725 }
1726 }
1727 break;
1728 case CHR_IOCTL_PP_EPP_WRITE:
1729 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1730 struct ParallelIOArg *parg = arg;
1731 int n = write(fd, parg->buffer, parg->count);
1732 if (n != parg->count) {
1733 return -EIO;
1734 }
1735 }
1736 break;
1737 default:
1738 return -ENOTSUP;
1739 }
1740 return 0;
1741}
1742
1743static void pp_close(CharDriverState *chr)
1744{
1745 ParallelCharDriver *drv = chr->opaque;
1746 int fd = drv->fd;
1747
1748 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1749 ioctl(fd, PPRELEASE);
1750 close(fd);
7267c094 1751 g_free(drv);
a425d23f 1752 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL
1753}
1754
38bfb1a6 1755static CharDriverState *qemu_chr_open_pp_fd(int fd, Error **errp)
6f97dba0
AL
1756{
1757 CharDriverState *chr;
1758 ParallelCharDriver *drv;
6f97dba0
AL
1759
1760 if (ioctl(fd, PPCLAIM) < 0) {
38bfb1a6 1761 error_setg_errno(errp, errno, "not a parallel port");
6f97dba0 1762 close(fd);
1f51470d 1763 return NULL;
6f97dba0
AL
1764 }
1765
2d528d45 1766 drv = g_new0(ParallelCharDriver, 1);
6f97dba0
AL
1767 drv->fd = fd;
1768 drv->mode = IEEE1284_MODE_COMPAT;
1769
db39fcf1 1770 chr = qemu_chr_alloc();
6f97dba0
AL
1771 chr->chr_write = null_chr_write;
1772 chr->chr_ioctl = pp_ioctl;
1773 chr->chr_close = pp_close;
1774 chr->opaque = drv;
1775
1f51470d 1776 return chr;
6f97dba0
AL
1777}
1778#endif /* __linux__ */
1779
a167ba50 1780#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
e551498e
GH
1781
1782#define HAVE_CHARDEV_PARPORT 1
1783
6972f935
BS
1784static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1785{
e0efb993 1786 int fd = (int)(intptr_t)chr->opaque;
6972f935
BS
1787 uint8_t b;
1788
1789 switch(cmd) {
1790 case CHR_IOCTL_PP_READ_DATA:
1791 if (ioctl(fd, PPIGDATA, &b) < 0)
1792 return -ENOTSUP;
1793 *(uint8_t *)arg = b;
1794 break;
1795 case CHR_IOCTL_PP_WRITE_DATA:
1796 b = *(uint8_t *)arg;
1797 if (ioctl(fd, PPISDATA, &b) < 0)
1798 return -ENOTSUP;
1799 break;
1800 case CHR_IOCTL_PP_READ_CONTROL:
1801 if (ioctl(fd, PPIGCTRL, &b) < 0)
1802 return -ENOTSUP;
1803 *(uint8_t *)arg = b;
1804 break;
1805 case CHR_IOCTL_PP_WRITE_CONTROL:
1806 b = *(uint8_t *)arg;
1807 if (ioctl(fd, PPISCTRL, &b) < 0)
1808 return -ENOTSUP;
1809 break;
1810 case CHR_IOCTL_PP_READ_STATUS:
1811 if (ioctl(fd, PPIGSTATUS, &b) < 0)
1812 return -ENOTSUP;
1813 *(uint8_t *)arg = b;
1814 break;
1815 default:
1816 return -ENOTSUP;
1817 }
1818 return 0;
1819}
1820
38bfb1a6 1821static CharDriverState *qemu_chr_open_pp_fd(int fd, Error **errp)
6972f935
BS
1822{
1823 CharDriverState *chr;
6972f935 1824
db39fcf1 1825 chr = qemu_chr_alloc();
e0efb993 1826 chr->opaque = (void *)(intptr_t)fd;
6972f935
BS
1827 chr->chr_write = null_chr_write;
1828 chr->chr_ioctl = pp_ioctl;
bd5c51ee 1829 chr->explicit_be_open = true;
1f51470d 1830 return chr;
6972f935
BS
1831}
1832#endif
1833
6f97dba0
AL
1834#else /* _WIN32 */
1835
d809ab95
PB
1836#define HAVE_CHARDEV_SERIAL 1
1837
6f97dba0
AL
1838typedef struct {
1839 int max_size;
1840 HANDLE hcom, hrecv, hsend;
9005b2a7 1841 OVERLAPPED orecv;
6f97dba0
AL
1842 BOOL fpipe;
1843 DWORD len;
9005b2a7
PB
1844
1845 /* Protected by the CharDriverState chr_write_lock. */
1846 OVERLAPPED osend;
6f97dba0
AL
1847} WinCharState;
1848
db418a0a
FC
1849typedef struct {
1850 HANDLE hStdIn;
1851 HANDLE hInputReadyEvent;
1852 HANDLE hInputDoneEvent;
1853 HANDLE hInputThread;
1854 uint8_t win_stdio_buf;
1855} WinStdioCharState;
1856
6f97dba0
AL
1857#define NSENDBUF 2048
1858#define NRECVBUF 2048
1859#define MAXCONNECT 1
1860#define NTIMEOUT 5000
1861
1862static int win_chr_poll(void *opaque);
1863static int win_chr_pipe_poll(void *opaque);
1864
1865static void win_chr_close(CharDriverState *chr)
1866{
1867 WinCharState *s = chr->opaque;
1868
1869 if (s->hsend) {
1870 CloseHandle(s->hsend);
1871 s->hsend = NULL;
1872 }
1873 if (s->hrecv) {
1874 CloseHandle(s->hrecv);
1875 s->hrecv = NULL;
1876 }
1877 if (s->hcom) {
1878 CloseHandle(s->hcom);
1879 s->hcom = NULL;
1880 }
1881 if (s->fpipe)
1882 qemu_del_polling_cb(win_chr_pipe_poll, chr);
1883 else
1884 qemu_del_polling_cb(win_chr_poll, chr);
793cbfb5 1885
a425d23f 1886 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL
1887}
1888
6511d396 1889static int win_chr_init(CharDriverState *chr, const char *filename, Error **errp)
6f97dba0
AL
1890{
1891 WinCharState *s = chr->opaque;
1892 COMMCONFIG comcfg;
1893 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
1894 COMSTAT comstat;
1895 DWORD size;
1896 DWORD err;
1897
1898 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1899 if (!s->hsend) {
6511d396 1900 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL
1901 goto fail;
1902 }
1903 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1904 if (!s->hrecv) {
6511d396 1905 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL
1906 goto fail;
1907 }
1908
1909 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
1910 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
1911 if (s->hcom == INVALID_HANDLE_VALUE) {
6511d396 1912 error_setg(errp, "Failed CreateFile (%lu)", GetLastError());
6f97dba0
AL
1913 s->hcom = NULL;
1914 goto fail;
1915 }
1916
1917 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
6511d396 1918 error_setg(errp, "Failed SetupComm");
6f97dba0
AL
1919 goto fail;
1920 }
1921
1922 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
1923 size = sizeof(COMMCONFIG);
1924 GetDefaultCommConfig(filename, &comcfg, &size);
1925 comcfg.dcb.DCBlength = sizeof(DCB);
1926 CommConfigDialog(filename, NULL, &comcfg);
1927
1928 if (!SetCommState(s->hcom, &comcfg.dcb)) {
6511d396 1929 error_setg(errp, "Failed SetCommState");
6f97dba0
AL
1930 goto fail;
1931 }
1932
1933 if (!SetCommMask(s->hcom, EV_ERR)) {
6511d396 1934 error_setg(errp, "Failed SetCommMask");
6f97dba0
AL
1935 goto fail;
1936 }
1937
1938 cto.ReadIntervalTimeout = MAXDWORD;
1939 if (!SetCommTimeouts(s->hcom, &cto)) {
6511d396 1940 error_setg(errp, "Failed SetCommTimeouts");
6f97dba0
AL
1941 goto fail;
1942 }
1943
1944 if (!ClearCommError(s->hcom, &err, &comstat)) {
6511d396 1945 error_setg(errp, "Failed ClearCommError");
6f97dba0
AL
1946 goto fail;
1947 }
1948 qemu_add_polling_cb(win_chr_poll, chr);
1949 return 0;
1950
1951 fail:
1952 win_chr_close(chr);
1953 return -1;
1954}
1955
9005b2a7 1956/* Called with chr_write_lock held. */
6f97dba0
AL
1957static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
1958{
1959 WinCharState *s = chr->opaque;
1960 DWORD len, ret, size, err;
1961
1962 len = len1;
1963 ZeroMemory(&s->osend, sizeof(s->osend));
1964 s->osend.hEvent = s->hsend;
1965 while (len > 0) {
1966 if (s->hsend)
1967 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
1968 else
1969 ret = WriteFile(s->hcom, buf, len, &size, NULL);
1970 if (!ret) {
1971 err = GetLastError();
1972 if (err == ERROR_IO_PENDING) {
1973 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
1974 if (ret) {
1975 buf += size;
1976 len -= size;
1977 } else {
1978 break;
1979 }
1980 } else {
1981 break;
1982 }
1983 } else {
1984 buf += size;
1985 len -= size;
1986 }
1987 }
1988 return len1 - len;
1989}
1990
1991static int win_chr_read_poll(CharDriverState *chr)
1992{
1993 WinCharState *s = chr->opaque;
1994
909cda12 1995 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL
1996 return s->max_size;
1997}
1998
1999static void win_chr_readfile(CharDriverState *chr)
2000{
2001 WinCharState *s = chr->opaque;
2002 int ret, err;
9bd7854e 2003 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL
2004 DWORD size;
2005
2006 ZeroMemory(&s->orecv, sizeof(s->orecv));
2007 s->orecv.hEvent = s->hrecv;
2008 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
2009 if (!ret) {
2010 err = GetLastError();
2011 if (err == ERROR_IO_PENDING) {
2012 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
2013 }
2014 }
2015
2016 if (size > 0) {
fa5efccb 2017 qemu_chr_be_write(chr, buf, size);
6f97dba0
AL
2018 }
2019}
2020
2021static void win_chr_read(CharDriverState *chr)
2022{
2023 WinCharState *s = chr->opaque;
2024
2025 if (s->len > s->max_size)
2026 s->len = s->max_size;
2027 if (s->len == 0)
2028 return;
2029
2030 win_chr_readfile(chr);
2031}
2032
2033static int win_chr_poll(void *opaque)
2034{
2035 CharDriverState *chr = opaque;
2036 WinCharState *s = chr->opaque;
2037 COMSTAT status;
2038 DWORD comerr;
2039
2040 ClearCommError(s->hcom, &comerr, &status);
2041 if (status.cbInQue > 0) {
2042 s->len = status.cbInQue;
2043 win_chr_read_poll(chr);
2044 win_chr_read(chr);
2045 return 1;
2046 }
2047 return 0;
2048}
2049
6511d396
PB
2050static CharDriverState *qemu_chr_open_win_path(const char *filename,
2051 Error **errp)
6f97dba0
AL
2052{
2053 CharDriverState *chr;
2054 WinCharState *s;
2055
db39fcf1 2056 chr = qemu_chr_alloc();
2d528d45 2057 s = g_new0(WinCharState, 1);
6f97dba0
AL
2058 chr->opaque = s;
2059 chr->chr_write = win_chr_write;
2060 chr->chr_close = win_chr_close;
2061
6511d396 2062 if (win_chr_init(chr, filename, errp) < 0) {
2e02e18b
SW
2063 g_free(s);
2064 g_free(chr);
1f51470d 2065 return NULL;
6f97dba0 2066 }
1f51470d 2067 return chr;
6f97dba0
AL
2068}
2069
2070static int win_chr_pipe_poll(void *opaque)
2071{
2072 CharDriverState *chr = opaque;
2073 WinCharState *s = chr->opaque;
2074 DWORD size;
2075
2076 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
2077 if (size > 0) {
2078 s->len = size;
2079 win_chr_read_poll(chr);
2080 win_chr_read(chr);
2081 return 1;
2082 }
2083 return 0;
2084}
2085
20cbe7a2
PB
2086static int win_chr_pipe_init(CharDriverState *chr, const char *filename,
2087 Error **errp)
6f97dba0
AL
2088{
2089 WinCharState *s = chr->opaque;
2090 OVERLAPPED ov;
2091 int ret;
2092 DWORD size;
9f781168 2093 char openname[CHR_MAX_FILENAME_SIZE];
6f97dba0
AL
2094
2095 s->fpipe = TRUE;
2096
2097 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2098 if (!s->hsend) {
20cbe7a2 2099 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL
2100 goto fail;
2101 }
2102 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
2103 if (!s->hrecv) {
20cbe7a2 2104 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL
2105 goto fail;
2106 }
2107
2108 snprintf(openname, sizeof(openname), "\\\\.\\pipe\\%s", filename);
2109 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
2110 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
2111 PIPE_WAIT,
2112 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
2113 if (s->hcom == INVALID_HANDLE_VALUE) {
20cbe7a2 2114 error_setg(errp, "Failed CreateNamedPipe (%lu)", GetLastError());
6f97dba0
AL
2115 s->hcom = NULL;
2116 goto fail;
2117 }
2118
2119 ZeroMemory(&ov, sizeof(ov));
2120 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
2121 ret = ConnectNamedPipe(s->hcom, &ov);
2122 if (ret) {
20cbe7a2 2123 error_setg(errp, "Failed ConnectNamedPipe");
6f97dba0
AL
2124 goto fail;
2125 }
2126
2127 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
2128 if (!ret) {
20cbe7a2 2129 error_setg(errp, "Failed GetOverlappedResult");
6f97dba0
AL
2130 if (ov.hEvent) {
2131 CloseHandle(ov.hEvent);
2132 ov.hEvent = NULL;
2133 }
2134 goto fail;
2135 }
2136
2137 if (ov.hEvent) {
2138 CloseHandle(ov.hEvent);
2139 ov.hEvent = NULL;
2140 }
2141 qemu_add_polling_cb(win_chr_pipe_poll, chr);
2142 return 0;
2143
2144 fail:
2145 win_chr_close(chr);
2146 return -1;
2147}
2148
2149
20cbe7a2
PB
2150static CharDriverState *qemu_chr_open_pipe(const char *id,
2151 ChardevBackend *backend,
2152 ChardevReturn *ret,
2153 Error **errp)
6f97dba0 2154{
130257dc 2155 ChardevHostdev *opts = backend->u.pipe;
548cbb36 2156 const char *filename = opts->device;
6f97dba0
AL
2157 CharDriverState *chr;
2158 WinCharState *s;
2159
db39fcf1 2160 chr = qemu_chr_alloc();
2d528d45 2161 s = g_new0(WinCharState, 1);
6f97dba0
AL
2162 chr->opaque = s;
2163 chr->chr_write = win_chr_write;
2164 chr->chr_close = win_chr_close;
2165
20cbe7a2 2166 if (win_chr_pipe_init(chr, filename, errp) < 0) {
2e02e18b
SW
2167 g_free(s);
2168 g_free(chr);
1f51470d 2169 return NULL;
6f97dba0 2170 }
1f51470d 2171 return chr;
6f97dba0
AL
2172}
2173
1f51470d 2174static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out)
6f97dba0
AL
2175{
2176 CharDriverState *chr;
2177 WinCharState *s;
2178
db39fcf1 2179 chr = qemu_chr_alloc();
2d528d45 2180 s = g_new0(WinCharState, 1);
6f97dba0
AL
2181 s->hcom = fd_out;
2182 chr->opaque = s;
2183 chr->chr_write = win_chr_write;
1f51470d 2184 return chr;
6f97dba0
AL
2185}
2186
122e5ed4
PB
2187static CharDriverState *qemu_chr_open_win_con(const char *id,
2188 ChardevBackend *backend,
2189 ChardevReturn *ret,
2190 Error **errp)
6f97dba0 2191{
1f51470d 2192 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE));
6f97dba0
AL
2193}
2194
db418a0a
FC
2195static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
2196{
2197 HANDLE hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
2198 DWORD dwSize;
2199 int len1;
2200
2201 len1 = len;
2202
2203 while (len1 > 0) {
2204 if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
2205 break;
2206 }
2207 buf += dwSize;
2208 len1 -= dwSize;
2209 }
2210
2211 return len - len1;
2212}
2213
2214static void win_stdio_wait_func(void *opaque)
2215{
2216 CharDriverState *chr = opaque;
2217 WinStdioCharState *stdio = chr->opaque;
2218 INPUT_RECORD buf[4];
2219 int ret;
2220 DWORD dwSize;
2221 int i;
2222
dff7424d 2223 ret = ReadConsoleInput(stdio->hStdIn, buf, ARRAY_SIZE(buf), &dwSize);
db418a0a
FC
2224
2225 if (!ret) {
2226 /* Avoid error storm */
2227 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2228 return;
2229 }
2230
2231 for (i = 0; i < dwSize; i++) {
2232 KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
2233
2234 if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
2235 int j;
2236 if (kev->uChar.AsciiChar != 0) {
2237 for (j = 0; j < kev->wRepeatCount; j++) {
2238 if (qemu_chr_be_can_write(chr)) {
2239 uint8_t c = kev->uChar.AsciiChar;
2240 qemu_chr_be_write(chr, &c, 1);
2241 }
2242 }
2243 }
2244 }
2245 }
2246}
2247
2248static DWORD WINAPI win_stdio_thread(LPVOID param)
2249{
2250 CharDriverState *chr = param;
2251 WinStdioCharState *stdio = chr->opaque;
2252 int ret;
2253 DWORD dwSize;
2254
2255 while (1) {
2256
2257 /* Wait for one byte */
2258 ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
2259
2260 /* Exit in case of error, continue if nothing read */
2261 if (!ret) {
2262 break;
2263 }
2264 if (!dwSize) {
2265 continue;
2266 }
2267
2268 /* Some terminal emulator returns \r\n for Enter, just pass \n */
2269 if (stdio->win_stdio_buf == '\r') {
2270 continue;
2271 }
2272
2273 /* Signal the main thread and wait until the byte was eaten */
2274 if (!SetEvent(stdio->hInputReadyEvent)) {
2275 break;
2276 }
2277 if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
2278 != WAIT_OBJECT_0) {
2279 break;
2280 }
2281 }
2282
2283 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2284 return 0;
2285}
2286
2287static void win_stdio_thread_wait_func(void *opaque)
2288{
2289 CharDriverState *chr = opaque;
2290 WinStdioCharState *stdio = chr->opaque;
2291
2292 if (qemu_chr_be_can_write(chr)) {
2293 qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
2294 }
2295
2296 SetEvent(stdio->hInputDoneEvent);
2297}
2298
2299static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
2300{
2301 WinStdioCharState *stdio = chr->opaque;
2302 DWORD dwMode = 0;
2303
2304 GetConsoleMode(stdio->hStdIn, &dwMode);
2305
2306 if (echo) {
2307 SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
2308 } else {
2309 SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
2310 }
2311}
2312
2313static void win_stdio_close(CharDriverState *chr)
2314{
2315 WinStdioCharState *stdio = chr->opaque;
2316
2317 if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
2318 CloseHandle(stdio->hInputReadyEvent);
2319 }
2320 if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
2321 CloseHandle(stdio->hInputDoneEvent);
2322 }
2323 if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
2324 TerminateThread(stdio->hInputThread, 0);
2325 }
2326
2327 g_free(chr->opaque);
2328 g_free(chr);
db418a0a
FC
2329}
2330
8c84b25d
PB
2331static CharDriverState *qemu_chr_open_stdio(const char *id,
2332 ChardevBackend *backend,
2333 ChardevReturn *ret,
2334 Error **errp)
db418a0a
FC
2335{
2336 CharDriverState *chr;
2337 WinStdioCharState *stdio;
2338 DWORD dwMode;
2339 int is_console = 0;
2340
db39fcf1 2341 chr = qemu_chr_alloc();
2d528d45 2342 stdio = g_new0(WinStdioCharState, 1);
db418a0a
FC
2343
2344 stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
2345 if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
8c84b25d
PB
2346 error_setg(errp, "cannot open stdio: invalid handle");
2347 return NULL;
db418a0a
FC
2348 }
2349
2350 is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
2351
2352 chr->opaque = stdio;
2353 chr->chr_write = win_stdio_write;
2354 chr->chr_close = win_stdio_close;
2355
ed7a1540
AL
2356 if (is_console) {
2357 if (qemu_add_wait_object(stdio->hStdIn,
2358 win_stdio_wait_func, chr)) {
8c84b25d
PB
2359 error_setg(errp, "qemu_add_wait_object: failed");
2360 goto err1;
ed7a1540
AL
2361 }
2362 } else {
2363 DWORD dwId;
2364
2365 stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2366 stdio->hInputDoneEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
8c84b25d 2367 if (stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
ed7a1540 2368 || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
8c84b25d
PB
2369 error_setg(errp, "cannot create event");
2370 goto err2;
ed7a1540
AL
2371 }
2372 if (qemu_add_wait_object(stdio->hInputReadyEvent,
2373 win_stdio_thread_wait_func, chr)) {
8c84b25d
PB
2374 error_setg(errp, "qemu_add_wait_object: failed");
2375 goto err2;
2376 }
2377 stdio->hInputThread = CreateThread(NULL, 0, win_stdio_thread,
2378 chr, 0, &dwId);
2379
2380 if (stdio->hInputThread == INVALID_HANDLE_VALUE) {
2381 error_setg(errp, "cannot create stdio thread");
2382 goto err3;
db418a0a
FC
2383 }
2384 }
2385
2386 dwMode |= ENABLE_LINE_INPUT;
2387
ed7a1540 2388 if (is_console) {
db418a0a
FC
2389 /* set the terminal in raw mode */
2390 /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2391 dwMode |= ENABLE_PROCESSED_INPUT;
2392 }
2393
2394 SetConsoleMode(stdio->hStdIn, dwMode);
2395
2396 chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2397 qemu_chr_fe_set_echo(chr, false);
2398
1f51470d 2399 return chr;
8c84b25d
PB
2400
2401err3:
2402 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2403err2:
2404 CloseHandle(stdio->hInputReadyEvent);
2405 CloseHandle(stdio->hInputDoneEvent);
2406err1:
2407 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2408 return NULL;
db418a0a 2409}
6f97dba0
AL
2410#endif /* !_WIN32 */
2411
5ab8211b 2412
6f97dba0
AL
2413/***********************************************************/
2414/* UDP Net console */
2415
2416typedef struct {
2417 int fd;
76a9644b 2418 GIOChannel *chan;
9bd7854e 2419 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL
2420 int bufcnt;
2421 int bufptr;
2422 int max_size;
2423} NetCharDriver;
2424
9005b2a7 2425/* Called with chr_write_lock held. */
6f97dba0
AL
2426static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2427{
2428 NetCharDriver *s = chr->opaque;
76a9644b
AL
2429 gsize bytes_written;
2430 GIOStatus status;
2431
2432 status = g_io_channel_write_chars(s->chan, (const gchar *)buf, len, &bytes_written, NULL);
2433 if (status == G_IO_STATUS_EOF) {
2434 return 0;
2435 } else if (status != G_IO_STATUS_NORMAL) {
2436 return -1;
2437 }
6f97dba0 2438
76a9644b 2439 return bytes_written;
6f97dba0
AL
2440}
2441
2442static int udp_chr_read_poll(void *opaque)
2443{
2444 CharDriverState *chr = opaque;
2445 NetCharDriver *s = chr->opaque;
2446
909cda12 2447 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL
2448
2449 /* If there were any stray characters in the queue process them
2450 * first
2451 */
2452 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
fa5efccb 2453 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
6f97dba0 2454 s->bufptr++;
909cda12 2455 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL
2456 }
2457 return s->max_size;
2458}
2459
76a9644b 2460static gboolean udp_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL
2461{
2462 CharDriverState *chr = opaque;
2463 NetCharDriver *s = chr->opaque;
76a9644b
AL
2464 gsize bytes_read = 0;
2465 GIOStatus status;
6f97dba0 2466
cdbf6e16
PB
2467 if (s->max_size == 0) {
2468 return TRUE;
2469 }
76a9644b
AL
2470 status = g_io_channel_read_chars(s->chan, (gchar *)s->buf, sizeof(s->buf),
2471 &bytes_read, NULL);
2472 s->bufcnt = bytes_read;
6f97dba0 2473 s->bufptr = s->bufcnt;
76a9644b 2474 if (status != G_IO_STATUS_NORMAL) {
26da70c7 2475 remove_fd_in_watch(chr);
76a9644b
AL
2476 return FALSE;
2477 }
6f97dba0
AL
2478
2479 s->bufptr = 0;
2480 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
fa5efccb 2481 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
6f97dba0 2482 s->bufptr++;
909cda12 2483 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0 2484 }
76a9644b
AL
2485
2486 return TRUE;
6f97dba0
AL
2487}
2488
2489static void udp_chr_update_read_handler(CharDriverState *chr)
2490{
2491 NetCharDriver *s = chr->opaque;
2492
26da70c7 2493 remove_fd_in_watch(chr);
76a9644b 2494 if (s->chan) {
7ba9addc
AS
2495 chr->fd_in_tag = io_add_watch_poll(s->chan, udp_chr_read_poll,
2496 udp_chr_read, chr);
6f97dba0
AL
2497 }
2498}
2499
819f56b7
AL
2500static void udp_chr_close(CharDriverState *chr)
2501{
2502 NetCharDriver *s = chr->opaque;
26da70c7
AS
2503
2504 remove_fd_in_watch(chr);
76a9644b
AL
2505 if (s->chan) {
2506 g_io_channel_unref(s->chan);
819f56b7
AL
2507 closesocket(s->fd);
2508 }
7267c094 2509 g_free(s);
a425d23f 2510 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
819f56b7
AL
2511}
2512
3ecc059d 2513static CharDriverState *qemu_chr_open_udp_fd(int fd)
6f97dba0
AL
2514{
2515 CharDriverState *chr = NULL;
2516 NetCharDriver *s = NULL;
6f97dba0 2517
db39fcf1 2518 chr = qemu_chr_alloc();
2d528d45 2519 s = g_new0(NetCharDriver, 1);
6f97dba0 2520
6f97dba0 2521 s->fd = fd;
76a9644b 2522 s->chan = io_channel_from_socket(s->fd);
6f97dba0
AL
2523 s->bufcnt = 0;
2524 s->bufptr = 0;
2525 chr->opaque = s;
2526 chr->chr_write = udp_chr_write;
2527 chr->chr_update_read_handler = udp_chr_update_read_handler;
819f56b7 2528 chr->chr_close = udp_chr_close;
bd5c51ee
MR
2529 /* be isn't opened until we get a connection */
2530 chr->explicit_be_open = true;
1f51470d 2531 return chr;
3ecc059d 2532}
6f97dba0 2533
6f97dba0
AL
2534/***********************************************************/
2535/* TCP Net console */
2536
2537typedef struct {
2ea5a7af
AL
2538
2539 GIOChannel *chan, *listen_chan;
7ba9addc 2540 guint listen_tag;
6f97dba0
AL
2541 int fd, listen_fd;
2542 int connected;
2543 int max_size;
2544 int do_telnetopt;
2545 int do_nodelay;
2546 int is_unix;
c76bf6bb
NN
2547 int *read_msgfds;
2548 int read_msgfds_num;
d39aac7a
NN
2549 int *write_msgfds;
2550 int write_msgfds_num;
cfb429cb
CM
2551
2552 SocketAddress *addr;
2553 bool is_listen;
2554 bool is_telnet;
5dd1f02b
CM
2555
2556 guint reconnect_timer;
2557 int64_t reconnect_time;
5008e5b7 2558 bool connect_err_reported;
6f97dba0
AL
2559} TCPCharDriver;
2560
5dd1f02b
CM
2561static gboolean socket_reconnect_timeout(gpointer opaque);
2562
2563static void qemu_chr_socket_restart_timer(CharDriverState *chr)
2564{
2565 TCPCharDriver *s = chr->opaque;
2566 assert(s->connected == 0);
2567 s->reconnect_timer = g_timeout_add_seconds(s->reconnect_time,
2568 socket_reconnect_timeout, chr);
2569}
2570
5008e5b7
CM
2571static void check_report_connect_error(CharDriverState *chr,
2572 Error *err)
2573{
2574 TCPCharDriver *s = chr->opaque;
2575
2576 if (!s->connect_err_reported) {
2577 error_report("Unable to connect character device %s: %s",
2578 chr->label, error_get_pretty(err));
2579 s->connect_err_reported = true;
2580 }
2581 qemu_chr_socket_restart_timer(chr);
2582}
2583
2ea5a7af 2584static gboolean tcp_chr_accept(GIOChannel *chan, GIOCondition cond, void *opaque);
6f97dba0 2585
d39aac7a
NN
2586#ifndef _WIN32
2587static int unix_send_msgfds(CharDriverState *chr, const uint8_t *buf, int len)
2588{
2589 TCPCharDriver *s = chr->opaque;
2590 struct msghdr msgh;
2591 struct iovec iov;
2592 int r;
2593
2594 size_t fd_size = s->write_msgfds_num * sizeof(int);
2595 char control[CMSG_SPACE(fd_size)];
2596 struct cmsghdr *cmsg;
2597
2598 memset(&msgh, 0, sizeof(msgh));
2599 memset(control, 0, sizeof(control));
2600
2601 /* set the payload */
2602 iov.iov_base = (uint8_t *) buf;
2603 iov.iov_len = len;
2604
2605 msgh.msg_iov = &iov;
2606 msgh.msg_iovlen = 1;
2607
2608 msgh.msg_control = control;
2609 msgh.msg_controllen = sizeof(control);
2610
2611 cmsg = CMSG_FIRSTHDR(&msgh);
2612
2613 cmsg->cmsg_len = CMSG_LEN(fd_size);
2614 cmsg->cmsg_level = SOL_SOCKET;
2615 cmsg->cmsg_type = SCM_RIGHTS;
2616 memcpy(CMSG_DATA(cmsg), s->write_msgfds, fd_size);
2617
2618 do {
2619 r = sendmsg(s->fd, &msgh, 0);
2620 } while (r < 0 && errno == EINTR);
2621
2622 /* free the written msgfds, no matter what */
2623 if (s->write_msgfds_num) {
2624 g_free(s->write_msgfds);
2625 s->write_msgfds = 0;
2626 s->write_msgfds_num = 0;
2627 }
2628
2629 return r;
2630}
2631#endif
2632
9005b2a7 2633/* Called with chr_write_lock held. */
6f97dba0
AL
2634static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2635{
2636 TCPCharDriver *s = chr->opaque;
2637 if (s->connected) {
d39aac7a
NN
2638#ifndef _WIN32
2639 if (s->is_unix && s->write_msgfds_num) {
2640 return unix_send_msgfds(chr, buf, len);
2641 } else
2642#endif
2643 {
2644 return io_channel_send(s->chan, buf, len);
2645 }
455aa1e0 2646 } else {
6db0fdce 2647 /* XXX: indicate an error ? */
455aa1e0 2648 return len;
6f97dba0
AL
2649 }
2650}
2651
2652static int tcp_chr_read_poll(void *opaque)
2653{
2654 CharDriverState *chr = opaque;
2655 TCPCharDriver *s = chr->opaque;
2656 if (!s->connected)
2657 return 0;
909cda12 2658 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL
2659 return s->max_size;
2660}
2661
2662#define IAC 255
2663#define IAC_BREAK 243
2664static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2665 TCPCharDriver *s,
2666 uint8_t *buf, int *size)
2667{
2668 /* Handle any telnet client's basic IAC options to satisfy char by
2669 * char mode with no echo. All IAC options will be removed from
2670 * the buf and the do_telnetopt variable will be used to track the
2671 * state of the width of the IAC information.
2672 *
2673 * IAC commands come in sets of 3 bytes with the exception of the
2674 * "IAC BREAK" command and the double IAC.
2675 */
2676
2677 int i;
2678 int j = 0;
2679
2680 for (i = 0; i < *size; i++) {
2681 if (s->do_telnetopt > 1) {
2682 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2683 /* Double IAC means send an IAC */
2684 if (j != i)
2685 buf[j] = buf[i];
2686 j++;
2687 s->do_telnetopt = 1;
2688 } else {
2689 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2690 /* Handle IAC break commands by sending a serial break */
a425d23f 2691 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
6f97dba0
AL
2692 s->do_telnetopt++;
2693 }
2694 s->do_telnetopt++;
2695 }
2696 if (s->do_telnetopt >= 4) {
2697 s->do_telnetopt = 1;
2698 }
2699 } else {
2700 if ((unsigned char)buf[i] == IAC) {
2701 s->do_telnetopt = 2;
2702 } else {
2703 if (j != i)
2704 buf[j] = buf[i];
2705 j++;
2706 }
2707 }
2708 }
2709 *size = j;
2710}
2711
c76bf6bb 2712static int tcp_get_msgfds(CharDriverState *chr, int *fds, int num)
7d174059
MM
2713{
2714 TCPCharDriver *s = chr->opaque;
c76bf6bb
NN
2715 int to_copy = (s->read_msgfds_num < num) ? s->read_msgfds_num : num;
2716
c4095726
MT
2717 assert(num <= TCP_MAX_FDS);
2718
c76bf6bb 2719 if (to_copy) {
d2fc39b4
SH
2720 int i;
2721
c76bf6bb
NN
2722 memcpy(fds, s->read_msgfds, to_copy * sizeof(int));
2723
d2fc39b4
SH
2724 /* Close unused fds */
2725 for (i = to_copy; i < s->read_msgfds_num; i++) {
2726 close(s->read_msgfds[i]);
2727 }
2728
c76bf6bb
NN
2729 g_free(s->read_msgfds);
2730 s->read_msgfds = 0;
2731 s->read_msgfds_num = 0;
2732 }
2733
2734 return to_copy;
7d174059
MM
2735}
2736
d39aac7a
NN
2737static int tcp_set_msgfds(CharDriverState *chr, int *fds, int num)
2738{
2739 TCPCharDriver *s = chr->opaque;
2740
2741 /* clear old pending fd array */
ef1e1e07 2742 g_free(s->write_msgfds);
d39aac7a
NN
2743
2744 if (num) {
2d528d45 2745 s->write_msgfds = g_new(int, num);
d39aac7a
NN
2746 memcpy(s->write_msgfds, fds, num * sizeof(int));
2747 }
2748
2749 s->write_msgfds_num = num;
2750
2751 return 0;
2752}
2753
73bcc2ac 2754#ifndef _WIN32
7d174059
MM
2755static void unix_process_msgfd(CharDriverState *chr, struct msghdr *msg)
2756{
2757 TCPCharDriver *s = chr->opaque;
2758 struct cmsghdr *cmsg;
2759
2760 for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) {
c76bf6bb 2761 int fd_size, i;
7d174059 2762
c76bf6bb 2763 if (cmsg->cmsg_len < CMSG_LEN(sizeof(int)) ||
7d174059 2764 cmsg->cmsg_level != SOL_SOCKET ||
c76bf6bb 2765 cmsg->cmsg_type != SCM_RIGHTS) {
7d174059 2766 continue;
c76bf6bb 2767 }
7d174059 2768
c76bf6bb
NN
2769 fd_size = cmsg->cmsg_len - CMSG_LEN(0);
2770
2771 if (!fd_size) {
7d174059 2772 continue;
c76bf6bb 2773 }
7d174059 2774
c76bf6bb
NN
2775 /* close and clean read_msgfds */
2776 for (i = 0; i < s->read_msgfds_num; i++) {
2777 close(s->read_msgfds[i]);
2778 }
9b938c72 2779
c76bf6bb
NN
2780 if (s->read_msgfds_num) {
2781 g_free(s->read_msgfds);
2782 }
2783
2784 s->read_msgfds_num = fd_size / sizeof(int);
2785 s->read_msgfds = g_malloc(fd_size);
2786 memcpy(s->read_msgfds, CMSG_DATA(cmsg), fd_size);
2787
2788 for (i = 0; i < s->read_msgfds_num; i++) {
2789 int fd = s->read_msgfds[i];
2790 if (fd < 0) {
2791 continue;
2792 }
2793
2794 /* O_NONBLOCK is preserved across SCM_RIGHTS so reset it */
2795 qemu_set_block(fd);
2796
2797 #ifndef MSG_CMSG_CLOEXEC
2798 qemu_set_cloexec(fd);
2799 #endif
2800 }
7d174059
MM
2801 }
2802}
2803
9977c894
MM
2804static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2805{
2806 TCPCharDriver *s = chr->opaque;
7cba04f6 2807 struct msghdr msg = { NULL, };
9977c894 2808 struct iovec iov[1];
7d174059
MM
2809 union {
2810 struct cmsghdr cmsg;
c4095726 2811 char control[CMSG_SPACE(sizeof(int) * TCP_MAX_FDS)];
7d174059 2812 } msg_control;
06138651 2813 int flags = 0;
7d174059 2814 ssize_t ret;
9977c894
MM
2815
2816 iov[0].iov_base = buf;
2817 iov[0].iov_len = len;
2818
2819 msg.msg_iov = iov;
2820 msg.msg_iovlen = 1;
7d174059
MM
2821 msg.msg_control = &msg_control;
2822 msg.msg_controllen = sizeof(msg_control);
2823
06138651
CB
2824#ifdef MSG_CMSG_CLOEXEC
2825 flags |= MSG_CMSG_CLOEXEC;
2826#endif
9172f428
PB
2827 do {
2828 ret = recvmsg(s->fd, &msg, flags);
2829 } while (ret == -1 && errno == EINTR);
2830
06138651 2831 if (ret > 0 && s->is_unix) {
7d174059 2832 unix_process_msgfd(chr, &msg);
06138651 2833 }
9977c894 2834
7d174059 2835 return ret;
9977c894
MM
2836}
2837#else
2838static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2839{
2840 TCPCharDriver *s = chr->opaque;
9172f428
PB
2841 ssize_t ret;
2842
2843 do {
2844 ret = qemu_recv(s->fd, buf, len, 0);
2845 } while (ret == -1 && socket_error() == EINTR);
2846
2847 return ret;
9977c894
MM
2848}
2849#endif
2850
d3cc5bc4
AS
2851static GSource *tcp_chr_add_watch(CharDriverState *chr, GIOCondition cond)
2852{
2853 TCPCharDriver *s = chr->opaque;
2854 return g_io_create_watch(s->chan, cond);
2855}
2856
7b0bfdf5
NN
2857static void tcp_chr_disconnect(CharDriverState *chr)
2858{
2859 TCPCharDriver *s = chr->opaque;
2860
2861 s->connected = 0;
2862 if (s->listen_chan) {
2863 s->listen_tag = g_io_add_watch(s->listen_chan, G_IO_IN,
2864 tcp_chr_accept, chr);
2865 }
2866 remove_fd_in_watch(chr);
2867 g_io_channel_unref(s->chan);
2868 s->chan = NULL;
2869 closesocket(s->fd);
2870 s->fd = -1;
16cc4ffe
CM
2871 SocketAddress_to_str(chr->filename, CHR_MAX_FILENAME_SIZE,
2872 "disconnected:", s->addr, s->is_listen, s->is_telnet);
7b0bfdf5 2873 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
5dd1f02b
CM
2874 if (s->reconnect_time) {
2875 qemu_chr_socket_restart_timer(chr);
2876 }
7b0bfdf5
NN
2877}
2878
2ea5a7af 2879static gboolean tcp_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL
2880{
2881 CharDriverState *chr = opaque;
2882 TCPCharDriver *s = chr->opaque;
9bd7854e 2883 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL
2884 int len, size;
2885
2ea5a7af 2886 if (!s->connected || s->max_size <= 0) {
cdbf6e16 2887 return TRUE;
2ea5a7af 2888 }
6f97dba0
AL
2889 len = sizeof(buf);
2890 if (len > s->max_size)
2891 len = s->max_size;
9977c894 2892 size = tcp_chr_recv(chr, (void *)buf, len);
4bf1cb03
NC
2893 if (size == 0 ||
2894 (size < 0 &&
2895 socket_error() != EAGAIN && socket_error() != EWOULDBLOCK)) {
6f97dba0 2896 /* connection closed */
7b0bfdf5 2897 tcp_chr_disconnect(chr);
6f97dba0
AL
2898 } else if (size > 0) {
2899 if (s->do_telnetopt)
2900 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
2901 if (size > 0)
fa5efccb 2902 qemu_chr_be_write(chr, buf, size);
6f97dba0 2903 }
2ea5a7af
AL
2904
2905 return TRUE;
6f97dba0
AL
2906}
2907
7b0bfdf5
NN
2908static int tcp_chr_sync_read(CharDriverState *chr, const uint8_t *buf, int len)
2909{
2910 TCPCharDriver *s = chr->opaque;
2911 int size;
2912
2913 if (!s->connected) {
2914 return 0;
2915 }
2916
2917 size = tcp_chr_recv(chr, (void *) buf, len);
2918 if (size == 0) {
2919 /* connection closed */
2920 tcp_chr_disconnect(chr);
2921 }
2922
2923 return size;
2924}
2925
68c18d1c
BS
2926#ifndef _WIN32
2927CharDriverState *qemu_chr_open_eventfd(int eventfd)
2928{
e9d21c43
DM
2929 CharDriverState *chr = qemu_chr_open_fd(eventfd, eventfd);
2930
2931 if (chr) {
2932 chr->avail_connections = 1;
2933 }
2934
2935 return chr;
6cbf4c8c 2936}
68c18d1c 2937#endif
6cbf4c8c 2938
6f97dba0
AL
2939static void tcp_chr_connect(void *opaque)
2940{
2941 CharDriverState *chr = opaque;
2942 TCPCharDriver *s = chr->opaque;
01ca519f
CM
2943 struct sockaddr_storage ss, ps;
2944 socklen_t ss_len = sizeof(ss), ps_len = sizeof(ps);
16cc4ffe
CM
2945
2946 memset(&ss, 0, ss_len);
2947 if (getsockname(s->fd, (struct sockaddr *) &ss, &ss_len) != 0) {
2948 snprintf(chr->filename, CHR_MAX_FILENAME_SIZE,
2949 "Error in getsockname: %s\n", strerror(errno));
01ca519f
CM
2950 } else if (getpeername(s->fd, (struct sockaddr *) &ps, &ps_len) != 0) {
2951 snprintf(chr->filename, CHR_MAX_FILENAME_SIZE,
2952 "Error in getpeername: %s\n", strerror(errno));
16cc4ffe 2953 } else {
01ca519f
CM
2954 sockaddr_to_str(chr->filename, CHR_MAX_FILENAME_SIZE,
2955 &ss, ss_len, &ps, ps_len,
16cc4ffe
CM
2956 s->is_listen, s->is_telnet);
2957 }
6f97dba0
AL
2958
2959 s->connected = 1;
2ea5a7af 2960 if (s->chan) {
7ba9addc
AS
2961 chr->fd_in_tag = io_add_watch_poll(s->chan, tcp_chr_read_poll,
2962 tcp_chr_read, chr);
bbdd2ad0 2963 }
fee204fd 2964 qemu_chr_be_generic_open(chr);
6f97dba0
AL
2965}
2966
ac1b84dd
GH
2967static void tcp_chr_update_read_handler(CharDriverState *chr)
2968{
2969 TCPCharDriver *s = chr->opaque;
2970
2971 remove_fd_in_watch(chr);
2972 if (s->chan) {
2973 chr->fd_in_tag = io_add_watch_poll(s->chan, tcp_chr_read_poll,
2974 tcp_chr_read, chr);
2975 }
2976}
2977
6f97dba0
AL
2978#define IACSET(x,a,b,c) x[0] = a; x[1] = b; x[2] = c;
2979static void tcp_chr_telnet_init(int fd)
2980{
2981 char buf[3];
2982 /* Send the telnet negotion to put telnet in binary, no echo, single char mode */
2983 IACSET(buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
2984 send(fd, (char *)buf, 3, 0);
2985 IACSET(buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
2986 send(fd, (char *)buf, 3, 0);
2987 IACSET(buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
2988 send(fd, (char *)buf, 3, 0);
2989 IACSET(buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
2990 send(fd, (char *)buf, 3, 0);
2991}
2992
13661089
DB
2993static int tcp_chr_add_client(CharDriverState *chr, int fd)
2994{
2995 TCPCharDriver *s = chr->opaque;
2996 if (s->fd != -1)
2997 return -1;
2998
f9e8cacc 2999 qemu_set_nonblock(fd);
13661089
DB
3000 if (s->do_nodelay)
3001 socket_set_nodelay(fd);
3002 s->fd = fd;
2ea5a7af 3003 s->chan = io_channel_from_socket(fd);
910b6368
PB
3004 if (s->listen_tag) {
3005 g_source_remove(s->listen_tag);
3006 s->listen_tag = 0;
3007 }
13661089
DB
3008 tcp_chr_connect(chr);
3009
3010 return 0;
3011}
3012
2ea5a7af 3013static gboolean tcp_chr_accept(GIOChannel *channel, GIOCondition cond, void *opaque)
6f97dba0
AL
3014{
3015 CharDriverState *chr = opaque;
3016 TCPCharDriver *s = chr->opaque;
3017 struct sockaddr_in saddr;
3018#ifndef _WIN32
3019 struct sockaddr_un uaddr;
3020#endif
3021 struct sockaddr *addr;
3022 socklen_t len;
3023 int fd;
3024
3025 for(;;) {
3026#ifndef _WIN32
3027 if (s->is_unix) {
3028 len = sizeof(uaddr);
3029 addr = (struct sockaddr *)&uaddr;
3030 } else
3031#endif
3032 {
3033 len = sizeof(saddr);
3034 addr = (struct sockaddr *)&saddr;
3035 }
40ff6d7e 3036 fd = qemu_accept(s->listen_fd, addr, &len);
6f97dba0 3037 if (fd < 0 && errno != EINTR) {
79f20075 3038 s->listen_tag = 0;
2ea5a7af 3039 return FALSE;
6f97dba0
AL
3040 } else if (fd >= 0) {
3041 if (s->do_telnetopt)
3042 tcp_chr_telnet_init(fd);
3043 break;
3044 }
3045 }
13661089
DB
3046 if (tcp_chr_add_client(chr, fd) < 0)
3047 close(fd);
2ea5a7af
AL
3048
3049 return TRUE;
6f97dba0
AL
3050}
3051
3052static void tcp_chr_close(CharDriverState *chr)
3053{
3054 TCPCharDriver *s = chr->opaque;
c76bf6bb 3055 int i;
cfb429cb 3056
5dd1f02b
CM
3057 if (s->reconnect_timer) {
3058 g_source_remove(s->reconnect_timer);
3059 s->reconnect_timer = 0;
3060 }
cfb429cb 3061 qapi_free_SocketAddress(s->addr);
819f56b7 3062 if (s->fd >= 0) {
26da70c7 3063 remove_fd_in_watch(chr);
2ea5a7af
AL
3064 if (s->chan) {
3065 g_io_channel_unref(s->chan);
3066 }
6f97dba0 3067 closesocket(s->fd);
819f56b7
AL
3068 }
3069 if (s->listen_fd >= 0) {
2ea5a7af
AL
3070 if (s->listen_tag) {
3071 g_source_remove(s->listen_tag);
910b6368 3072 s->listen_tag = 0;
2ea5a7af
AL
3073 }
3074 if (s->listen_chan) {
3075 g_io_channel_unref(s->listen_chan);
3076 }
6f97dba0 3077 closesocket(s->listen_fd);
819f56b7 3078 }
c76bf6bb
NN
3079 if (s->read_msgfds_num) {
3080 for (i = 0; i < s->read_msgfds_num; i++) {
3081 close(s->read_msgfds[i]);
3082 }
3083 g_free(s->read_msgfds);
3084 }
d39aac7a
NN
3085 if (s->write_msgfds_num) {
3086 g_free(s->write_msgfds);
3087 }
7267c094 3088 g_free(s);
a425d23f 3089 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL
3090}
3091
16cc4ffe 3092static void qemu_chr_finish_socket_connection(CharDriverState *chr, int fd)
6f97dba0 3093{
43ded1a0 3094 TCPCharDriver *s = chr->opaque;
f6bd5d6e 3095
cfb429cb 3096 if (s->is_listen) {
f6bd5d6e 3097 s->listen_fd = fd;
2ea5a7af 3098 s->listen_chan = io_channel_from_socket(s->listen_fd);
43ded1a0
CM
3099 s->listen_tag = g_io_add_watch(s->listen_chan, G_IO_IN,
3100 tcp_chr_accept, chr);
f6bd5d6e
GH
3101 } else {
3102 s->connected = 1;
3103 s->fd = fd;
3104 socket_set_nodelay(fd);
2ea5a7af 3105 s->chan = io_channel_from_socket(s->fd);
f6bd5d6e
GH
3106 tcp_chr_connect(chr);
3107 }
43ded1a0
CM
3108}
3109
51795029 3110static void qemu_chr_socket_connected(int fd, Error *err, void *opaque)
5dd1f02b
CM
3111{
3112 CharDriverState *chr = opaque;
5008e5b7 3113 TCPCharDriver *s = chr->opaque;
5dd1f02b
CM
3114
3115 if (fd < 0) {
5008e5b7 3116 check_report_connect_error(chr, err);
5dd1f02b
CM
3117 return;
3118 }
3119
5008e5b7 3120 s->connect_err_reported = false;
5dd1f02b
CM
3121 qemu_chr_finish_socket_connection(chr, fd);
3122}
3123
cfb429cb 3124static bool qemu_chr_open_socket_fd(CharDriverState *chr, Error **errp)
43ded1a0 3125{
cfb429cb 3126 TCPCharDriver *s = chr->opaque;
43ded1a0
CM
3127 int fd;
3128
cfb429cb
CM
3129 if (s->is_listen) {
3130 fd = socket_listen(s->addr, errp);
5dd1f02b
CM
3131 } else if (s->reconnect_time) {
3132 fd = socket_connect(s->addr, errp, qemu_chr_socket_connected, chr);
3133 return fd >= 0;
3134 } else {
cfb429cb 3135 fd = socket_connect(s->addr, errp, NULL, NULL);
f6bd5d6e 3136 }
43ded1a0
CM
3137 if (fd < 0) {
3138 return false;
3139 }
3140
16cc4ffe
CM
3141 qemu_chr_finish_socket_connection(chr, fd);
3142 return true;
f6bd5d6e
GH
3143}
3144
51767e7c 3145/*********************************************************/
3949e594 3146/* Ring buffer chardev */
51767e7c
LL
3147
3148typedef struct {
3149 size_t size;
3150 size_t prod;
3151 size_t cons;
3152 uint8_t *cbuf;
3949e594 3153} RingBufCharDriver;
51767e7c 3154
3949e594 3155static size_t ringbuf_count(const CharDriverState *chr)
51767e7c 3156{
3949e594 3157 const RingBufCharDriver *d = chr->opaque;
51767e7c 3158
5c230105 3159 return d->prod - d->cons;
51767e7c
LL
3160}
3161
9005b2a7 3162/* Called with chr_write_lock held. */
3949e594 3163static int ringbuf_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
51767e7c 3164{
3949e594 3165 RingBufCharDriver *d = chr->opaque;
51767e7c
LL
3166 int i;
3167
3168 if (!buf || (len < 0)) {
3169 return -1;
3170 }
3171
3172 for (i = 0; i < len; i++ ) {
5c230105
MA
3173 d->cbuf[d->prod++ & (d->size - 1)] = buf[i];
3174 if (d->prod - d->cons > d->size) {
51767e7c
LL
3175 d->cons = d->prod - d->size;
3176 }
3177 }
3178
3179 return 0;
3180}
3181
3949e594 3182static int ringbuf_chr_read(CharDriverState *chr, uint8_t *buf, int len)
51767e7c 3183{
3949e594 3184 RingBufCharDriver *d = chr->opaque;
51767e7c
LL
3185 int i;
3186
9005b2a7 3187 qemu_mutex_lock(&chr->chr_write_lock);
5c230105
MA
3188 for (i = 0; i < len && d->cons != d->prod; i++) {
3189 buf[i] = d->cbuf[d->cons++ & (d->size - 1)];
51767e7c 3190 }
9005b2a7 3191 qemu_mutex_unlock(&chr->chr_write_lock);
51767e7c
LL
3192
3193 return i;
3194}
3195
3949e594 3196static void ringbuf_chr_close(struct CharDriverState *chr)
51767e7c 3197{
3949e594 3198 RingBufCharDriver *d = chr->opaque;
51767e7c
LL
3199
3200 g_free(d->cbuf);
3201 g_free(d);
3202 chr->opaque = NULL;
3203}
3204
479f09a1
PB
3205static CharDriverState *qemu_chr_open_ringbuf(const char *id,
3206 ChardevBackend *backend,
3207 ChardevReturn *ret,
4f57378f 3208 Error **errp)
51767e7c 3209{
130257dc 3210 ChardevRingbuf *opts = backend->u.ringbuf;
51767e7c 3211 CharDriverState *chr;
3949e594 3212 RingBufCharDriver *d;
51767e7c 3213
db39fcf1 3214 chr = qemu_chr_alloc();
51767e7c
LL
3215 d = g_malloc(sizeof(*d));
3216
1da48c65 3217 d->size = opts->has_size ? opts->size : 65536;
51767e7c
LL
3218
3219 /* The size must be power of 2 */
3220 if (d->size & (d->size - 1)) {
4f57378f 3221 error_setg(errp, "size of ringbuf chardev must be power of two");
51767e7c
LL
3222 goto fail;
3223 }
3224
3225 d->prod = 0;
3226 d->cons = 0;
3227 d->cbuf = g_malloc0(d->size);
3228
3229 chr->opaque = d;
3949e594
MA
3230 chr->chr_write = ringbuf_chr_write;
3231 chr->chr_close = ringbuf_chr_close;
51767e7c
LL
3232
3233 return chr;
3234
3235fail:
3236 g_free(d);
3237 g_free(chr);
3238 return NULL;
3239}
3240
8e597779 3241bool chr_is_ringbuf(const CharDriverState *chr)
1f590cf9 3242{
3949e594 3243 return chr->chr_write == ringbuf_chr_write;
1f590cf9
LL
3244}
3245
3949e594 3246void qmp_ringbuf_write(const char *device, const char *data,
82e59a67 3247 bool has_format, enum DataFormat format,
1f590cf9
LL
3248 Error **errp)
3249{
3250 CharDriverState *chr;
c4f331b6 3251 const uint8_t *write_data;
1f590cf9 3252 int ret;
3d1bba20 3253 gsize write_count;
1f590cf9
LL
3254
3255 chr = qemu_chr_find(device);
3256 if (!chr) {
1a69278e 3257 error_setg(errp, "Device '%s' not found", device);
1f590cf9
LL
3258 return;
3259 }
3260
3949e594
MA
3261 if (!chr_is_ringbuf(chr)) {
3262 error_setg(errp,"%s is not a ringbuf device", device);
1f590cf9
LL
3263 return;
3264 }
3265
1f590cf9
LL
3266 if (has_format && (format == DATA_FORMAT_BASE64)) {
3267 write_data = g_base64_decode(data, &write_count);
3268 } else {
3269 write_data = (uint8_t *)data;
82e59a67 3270 write_count = strlen(data);
1f590cf9
LL
3271 }
3272
3949e594 3273 ret = ringbuf_chr_write(chr, write_data, write_count);
1f590cf9 3274
13289fb5
MA
3275 if (write_data != (uint8_t *)data) {
3276 g_free((void *)write_data);
3277 }
3278
1f590cf9
LL
3279 if (ret < 0) {
3280 error_setg(errp, "Failed to write to device %s", device);
3281 return;
3282 }
3283}
3284
3949e594 3285char *qmp_ringbuf_read(const char *device, int64_t size,
3ab651fc
MA
3286 bool has_format, enum DataFormat format,
3287 Error **errp)
49b6d722
LL
3288{
3289 CharDriverState *chr;
c4f331b6 3290 uint8_t *read_data;
49b6d722 3291 size_t count;
3ab651fc 3292 char *data;
49b6d722
LL
3293
3294 chr = qemu_chr_find(device);
3295 if (!chr) {
1a69278e 3296 error_setg(errp, "Device '%s' not found", device);
49b6d722
LL
3297 return NULL;
3298 }
3299
3949e594
MA
3300 if (!chr_is_ringbuf(chr)) {
3301 error_setg(errp,"%s is not a ringbuf device", device);
49b6d722
LL
3302 return NULL;
3303 }
3304
3305 if (size <= 0) {
3306 error_setg(errp, "size must be greater than zero");
3307 return NULL;
3308 }
3309
3949e594 3310 count = ringbuf_count(chr);
49b6d722 3311 size = size > count ? count : size;
44f3bcd2 3312 read_data = g_malloc(size + 1);
49b6d722 3313
3949e594 3314 ringbuf_chr_read(chr, read_data, size);
49b6d722
LL
3315
3316 if (has_format && (format == DATA_FORMAT_BASE64)) {
3ab651fc 3317 data = g_base64_encode(read_data, size);
13289fb5 3318 g_free(read_data);
49b6d722 3319 } else {
3949e594
MA
3320 /*
3321 * FIXME should read only complete, valid UTF-8 characters up
3322 * to @size bytes. Invalid sequences should be replaced by a
3323 * suitable replacement character. Except when (and only
3324 * when) ring buffer lost characters since last read, initial
3325 * continuation characters should be dropped.
3326 */
44f3bcd2 3327 read_data[size] = 0;
3ab651fc 3328 data = (char *)read_data;
49b6d722
LL
3329 }
3330
3ab651fc 3331 return data;
49b6d722
LL
3332}
3333
33521634 3334QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
191bc01b 3335{
6ea314d9 3336 char host[65], port[33], width[8], height[8];
aeb2c47a 3337 int pos;
7d31544f 3338 const char *p;
191bc01b 3339 QemuOpts *opts;
8be7e7e4 3340 Error *local_err = NULL;
191bc01b 3341
8be7e7e4 3342 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
84d18f06 3343 if (local_err) {
33394884 3344 error_report_err(local_err);
191bc01b 3345 return NULL;
8be7e7e4 3346 }
191bc01b 3347
7591c5c1
GH
3348 if (strstart(filename, "mon:", &p)) {
3349 filename = p;
f43e47db 3350 qemu_opt_set(opts, "mux", "on", &error_abort);
02c4bdf1
PB
3351 if (strcmp(filename, "stdio") == 0) {
3352 /* Monitor is muxed to stdio: do not exit on Ctrl+C by default
3353 * but pass it to the guest. Handle this only for compat syntax,
3354 * for -chardev syntax we have special option for this.
3355 * This is what -nographic did, redirecting+muxing serial+monitor
3356 * to stdio causing Ctrl+C to be passed to guest. */
f43e47db 3357 qemu_opt_set(opts, "signal", "off", &error_abort);
02c4bdf1 3358 }
7591c5c1
GH
3359 }
3360
f0457e8d
GH
3361 if (strcmp(filename, "null") == 0 ||
3362 strcmp(filename, "pty") == 0 ||
3363 strcmp(filename, "msmouse") == 0 ||
dc1c21e6 3364 strcmp(filename, "braille") == 0 ||
5692399f 3365 strcmp(filename, "testdev") == 0 ||
f0457e8d 3366 strcmp(filename, "stdio") == 0) {
f43e47db 3367 qemu_opt_set(opts, "backend", filename, &error_abort);
191bc01b
GH
3368 return opts;
3369 }
6ea314d9 3370 if (strstart(filename, "vc", &p)) {
f43e47db 3371 qemu_opt_set(opts, "backend", "vc", &error_abort);
6ea314d9 3372 if (*p == ':') {
49aa4058 3373 if (sscanf(p+1, "%7[0-9]x%7[0-9]", width, height) == 2) {
6ea314d9 3374 /* pixels */
f43e47db
MA
3375 qemu_opt_set(opts, "width", width, &error_abort);
3376 qemu_opt_set(opts, "height", height, &error_abort);
49aa4058 3377 } else if (sscanf(p+1, "%7[0-9]Cx%7[0-9]C", width, height) == 2) {
6ea314d9 3378 /* chars */
f43e47db
MA
3379 qemu_opt_set(opts, "cols", width, &error_abort);
3380 qemu_opt_set(opts, "rows", height, &error_abort);
6ea314d9
GH
3381 } else {
3382 goto fail;
3383 }
3384 }
3385 return opts;
3386 }
d6c983cd 3387 if (strcmp(filename, "con:") == 0) {
f43e47db 3388 qemu_opt_set(opts, "backend", "console", &error_abort);
d6c983cd
GH
3389 return opts;
3390 }
48b76496 3391 if (strstart(filename, "COM", NULL)) {
f43e47db
MA
3392 qemu_opt_set(opts, "backend", "serial", &error_abort);
3393 qemu_opt_set(opts, "path", filename, &error_abort);
48b76496
GH
3394 return opts;
3395 }
7d31544f 3396 if (strstart(filename, "file:", &p)) {
f43e47db
MA
3397 qemu_opt_set(opts, "backend", "file", &error_abort);
3398 qemu_opt_set(opts, "path", p, &error_abort);
7d31544f
GH
3399 return opts;
3400 }
3401 if (strstart(filename, "pipe:", &p)) {
f43e47db
MA
3402 qemu_opt_set(opts, "backend", "pipe", &error_abort);
3403 qemu_opt_set(opts, "path", p, &error_abort);
7d31544f
GH
3404 return opts;
3405 }
aeb2c47a
GH
3406 if (strstart(filename, "tcp:", &p) ||
3407 strstart(filename, "telnet:", &p)) {
3408 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3409 host[0] = 0;
3410 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
3411 goto fail;
3412 }
f43e47db
MA
3413 qemu_opt_set(opts, "backend", "socket", &error_abort);
3414 qemu_opt_set(opts, "host", host, &error_abort);
3415 qemu_opt_set(opts, "port", port, &error_abort);
aeb2c47a 3416 if (p[pos] == ',') {
dc523cd3
MA
3417 qemu_opts_do_parse(opts, p+pos+1, NULL, &local_err);
3418 if (local_err) {
3419 error_report_err(local_err);
aeb2c47a 3420 goto fail;
dc523cd3 3421 }
aeb2c47a
GH
3422 }
3423 if (strstart(filename, "telnet:", &p))
f43e47db 3424 qemu_opt_set(opts, "telnet", "on", &error_abort);
aeb2c47a
GH
3425 return opts;
3426 }
7e1b35b4 3427 if (strstart(filename, "udp:", &p)) {
f43e47db 3428 qemu_opt_set(opts, "backend", "udp", &error_abort);
7e1b35b4
GH
3429 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
3430 host[0] = 0;
39324ca4 3431 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
7e1b35b4
GH
3432 goto fail;
3433 }
3434 }
f43e47db
MA
3435 qemu_opt_set(opts, "host", host, &error_abort);
3436 qemu_opt_set(opts, "port", port, &error_abort);
7e1b35b4
GH
3437 if (p[pos] == '@') {
3438 p += pos + 1;
3439 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3440 host[0] = 0;
3441 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
7e1b35b4
GH
3442 goto fail;
3443 }
3444 }
f43e47db
MA
3445 qemu_opt_set(opts, "localaddr", host, &error_abort);
3446 qemu_opt_set(opts, "localport", port, &error_abort);
7e1b35b4
GH
3447 }
3448 return opts;
3449 }
aeb2c47a 3450 if (strstart(filename, "unix:", &p)) {
f43e47db 3451 qemu_opt_set(opts, "backend", "socket", &error_abort);
dc523cd3
MA
3452 qemu_opts_do_parse(opts, p, "path", &local_err);
3453 if (local_err) {
3454 error_report_err(local_err);
aeb2c47a 3455 goto fail;
dc523cd3 3456 }
aeb2c47a
GH
3457 return opts;
3458 }
48b76496
GH
3459 if (strstart(filename, "/dev/parport", NULL) ||
3460 strstart(filename, "/dev/ppi", NULL)) {
f43e47db
MA
3461 qemu_opt_set(opts, "backend", "parport", &error_abort);
3462 qemu_opt_set(opts, "path", filename, &error_abort);
48b76496
GH
3463 return opts;
3464 }
3465 if (strstart(filename, "/dev/", NULL)) {
f43e47db
MA
3466 qemu_opt_set(opts, "backend", "tty", &error_abort);
3467 qemu_opt_set(opts, "path", filename, &error_abort);
48b76496
GH
3468 return opts;
3469 }
191bc01b 3470
aeb2c47a 3471fail:
191bc01b
GH
3472 qemu_opts_del(opts);
3473 return NULL;
3474}
3475
846e2e49
GH
3476static void qemu_chr_parse_file_out(QemuOpts *opts, ChardevBackend *backend,
3477 Error **errp)
3478{
3479 const char *path = qemu_opt_get(opts, "path");
3480
3481 if (path == NULL) {
3482 error_setg(errp, "chardev: file: no filename given");
3483 return;
3484 }
130257dc
EB
3485 backend->u.file = g_new0(ChardevFile, 1);
3486 backend->u.file->out = g_strdup(path);
846e2e49
GH
3487}
3488
7c358031
GH
3489static void qemu_chr_parse_stdio(QemuOpts *opts, ChardevBackend *backend,
3490 Error **errp)
3491{
130257dc
EB
3492 backend->u.stdio = g_new0(ChardevStdio, 1);
3493 backend->u.stdio->has_signal = true;
3494 backend->u.stdio->signal = qemu_opt_get_bool(opts, "signal", true);
7c358031
GH
3495}
3496
6511d396 3497#ifdef HAVE_CHARDEV_SERIAL
0f1cb51d
GH
3498static void qemu_chr_parse_serial(QemuOpts *opts, ChardevBackend *backend,
3499 Error **errp)
3500{
3501 const char *device = qemu_opt_get(opts, "path");
3502
3503 if (device == NULL) {
3504 error_setg(errp, "chardev: serial/tty: no device path given");
3505 return;
3506 }
130257dc
EB
3507 backend->u.serial = g_new0(ChardevHostdev, 1);
3508 backend->u.serial->device = g_strdup(device);
0f1cb51d 3509}
6511d396 3510#endif
0f1cb51d 3511
38bfb1a6 3512#ifdef HAVE_CHARDEV_PARPORT
dc375097
GH
3513static void qemu_chr_parse_parallel(QemuOpts *opts, ChardevBackend *backend,
3514 Error **errp)
3515{
3516 const char *device = qemu_opt_get(opts, "path");
3517
3518 if (device == NULL) {
3519 error_setg(errp, "chardev: parallel: no device path given");
3520 return;
3521 }
130257dc
EB
3522 backend->u.parallel = g_new0(ChardevHostdev, 1);
3523 backend->u.parallel->device = g_strdup(device);
dc375097 3524}
38bfb1a6 3525#endif
dc375097 3526
548cbb36
GH
3527static void qemu_chr_parse_pipe(QemuOpts *opts, ChardevBackend *backend,
3528 Error **errp)
3529{
3530 const char *device = qemu_opt_get(opts, "path");
3531
3532 if (device == NULL) {
3533 error_setg(errp, "chardev: pipe: no device path given");
3534 return;
3535 }
130257dc
EB
3536 backend->u.pipe = g_new0(ChardevHostdev, 1);
3537 backend->u.pipe->device = g_strdup(device);
548cbb36
GH
3538}
3539
4f57378f
MA
3540static void qemu_chr_parse_ringbuf(QemuOpts *opts, ChardevBackend *backend,
3541 Error **errp)
1da48c65
GH
3542{
3543 int val;
3544
130257dc 3545 backend->u.ringbuf = g_new0(ChardevRingbuf, 1);
1da48c65 3546
0f953051 3547 val = qemu_opt_get_size(opts, "size", 0);
1da48c65 3548 if (val != 0) {
130257dc
EB
3549 backend->u.ringbuf->has_size = true;
3550 backend->u.ringbuf->size = val;
1da48c65
GH
3551 }
3552}
3553
bb6fb7c0
GH
3554static void qemu_chr_parse_mux(QemuOpts *opts, ChardevBackend *backend,
3555 Error **errp)
3556{
3557 const char *chardev = qemu_opt_get(opts, "chardev");
3558
3559 if (chardev == NULL) {
3560 error_setg(errp, "chardev: mux: no chardev given");
3561 return;
3562 }
130257dc
EB
3563 backend->u.mux = g_new0(ChardevMux, 1);
3564 backend->u.mux->chardev = g_strdup(chardev);
bb6fb7c0
GH
3565}
3566
dafd325d
PM
3567static void qemu_chr_parse_socket(QemuOpts *opts, ChardevBackend *backend,
3568 Error **errp)
3569{
3570 bool is_listen = qemu_opt_get_bool(opts, "server", false);
3571 bool is_waitconnect = is_listen && qemu_opt_get_bool(opts, "wait", true);
3572 bool is_telnet = qemu_opt_get_bool(opts, "telnet", false);
3573 bool do_nodelay = !qemu_opt_get_bool(opts, "delay", true);
5dd1f02b 3574 int64_t reconnect = qemu_opt_get_number(opts, "reconnect", 0);
dafd325d
PM
3575 const char *path = qemu_opt_get(opts, "path");
3576 const char *host = qemu_opt_get(opts, "host");
3577 const char *port = qemu_opt_get(opts, "port");
3578 SocketAddress *addr;
3579
3580 if (!path) {
3581 if (!host) {
3582 error_setg(errp, "chardev: socket: no host given");
3583 return;
3584 }
3585 if (!port) {
3586 error_setg(errp, "chardev: socket: no port given");
3587 return;
3588 }
3589 }
3590
130257dc 3591 backend->u.socket = g_new0(ChardevSocket, 1);
dafd325d 3592
130257dc
EB
3593 backend->u.socket->has_nodelay = true;
3594 backend->u.socket->nodelay = do_nodelay;
3595 backend->u.socket->has_server = true;
3596 backend->u.socket->server = is_listen;
3597 backend->u.socket->has_telnet = true;
3598 backend->u.socket->telnet = is_telnet;
3599 backend->u.socket->has_wait = true;
3600 backend->u.socket->wait = is_waitconnect;
3601 backend->u.socket->has_reconnect = true;
3602 backend->u.socket->reconnect = reconnect;
dafd325d
PM
3603
3604 addr = g_new0(SocketAddress, 1);
3605 if (path) {
130257dc
EB
3606 addr->type = SOCKET_ADDRESS_KIND_UNIX;
3607 addr->u.q_unix = g_new0(UnixSocketAddress, 1);
3608 addr->u.q_unix->path = g_strdup(path);
dafd325d 3609 } else {
130257dc
EB
3610 addr->type = SOCKET_ADDRESS_KIND_INET;
3611 addr->u.inet = g_new0(InetSocketAddress, 1);
3612 addr->u.inet->host = g_strdup(host);
3613 addr->u.inet->port = g_strdup(port);
3614 addr->u.inet->has_to = qemu_opt_get(opts, "to");
3615 addr->u.inet->to = qemu_opt_get_number(opts, "to", 0);
3616 addr->u.inet->has_ipv4 = qemu_opt_get(opts, "ipv4");
3617 addr->u.inet->ipv4 = qemu_opt_get_bool(opts, "ipv4", 0);
3618 addr->u.inet->has_ipv6 = qemu_opt_get(opts, "ipv6");
3619 addr->u.inet->ipv6 = qemu_opt_get_bool(opts, "ipv6", 0);
dafd325d 3620 }
130257dc 3621 backend->u.socket->addr = addr;
dafd325d
PM
3622}
3623
90a14bfe
PM
3624static void qemu_chr_parse_udp(QemuOpts *opts, ChardevBackend *backend,
3625 Error **errp)
3626{
3627 const char *host = qemu_opt_get(opts, "host");
3628 const char *port = qemu_opt_get(opts, "port");
3629 const char *localaddr = qemu_opt_get(opts, "localaddr");
3630 const char *localport = qemu_opt_get(opts, "localport");
3631 bool has_local = false;
3632 SocketAddress *addr;
3633
3634 if (host == NULL || strlen(host) == 0) {
3635 host = "localhost";
3636 }
3637 if (port == NULL || strlen(port) == 0) {
3638 error_setg(errp, "chardev: udp: remote port not specified");
3639 return;
3640 }
3641 if (localport == NULL || strlen(localport) == 0) {
3642 localport = "0";
3643 } else {
3644 has_local = true;
3645 }
3646 if (localaddr == NULL || strlen(localaddr) == 0) {
3647 localaddr = "";
3648 } else {
3649 has_local = true;
3650 }
3651
130257dc 3652 backend->u.udp = g_new0(ChardevUdp, 1);
90a14bfe
PM
3653
3654 addr = g_new0(SocketAddress, 1);
130257dc
EB
3655 addr->type = SOCKET_ADDRESS_KIND_INET;
3656 addr->u.inet = g_new0(InetSocketAddress, 1);
3657 addr->u.inet->host = g_strdup(host);
3658 addr->u.inet->port = g_strdup(port);
3659 addr->u.inet->has_ipv4 = qemu_opt_get(opts, "ipv4");
3660 addr->u.inet->ipv4 = qemu_opt_get_bool(opts, "ipv4", 0);
3661 addr->u.inet->has_ipv6 = qemu_opt_get(opts, "ipv6");
3662 addr->u.inet->ipv6 = qemu_opt_get_bool(opts, "ipv6", 0);
3663 backend->u.udp->remote = addr;
90a14bfe
PM
3664
3665 if (has_local) {
130257dc 3666 backend->u.udp->has_local = true;
90a14bfe 3667 addr = g_new0(SocketAddress, 1);
130257dc
EB
3668 addr->type = SOCKET_ADDRESS_KIND_INET;
3669 addr->u.inet = g_new0(InetSocketAddress, 1);
3670 addr->u.inet->host = g_strdup(localaddr);
3671 addr->u.inet->port = g_strdup(localport);
3672 backend->u.udp->local = addr;
90a14bfe
PM
3673 }
3674}
3675
d654f34e 3676typedef struct CharDriver {
191bc01b 3677 const char *name;
99aec012 3678 ChardevBackendKind kind;
2c5f4882 3679 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp);
4ca17281
PB
3680 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
3681 ChardevReturn *ret, Error **errp);
d654f34e
AL
3682} CharDriver;
3683
3684static GSList *backends;
3685
e4d50d47 3686void register_char_driver(const char *name, ChardevBackendKind kind,
4ca17281
PB
3687 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp),
3688 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
3689 ChardevReturn *ret, Error **errp))
2c5f4882
GH
3690{
3691 CharDriver *s;
3692
3693 s = g_malloc0(sizeof(*s));
3694 s->name = g_strdup(name);
3695 s->kind = kind;
3696 s->parse = parse;
4ca17281 3697 s->create = create;
2c5f4882
GH
3698
3699 backends = g_slist_append(backends, s);
3700}
3701
f69554b9 3702CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
bd2d80b2
GH
3703 void (*init)(struct CharDriverState *s),
3704 Error **errp)
191bc01b 3705{
0aff637e 3706 Error *local_err = NULL;
d654f34e 3707 CharDriver *cd;
191bc01b 3708 CharDriverState *chr;
d654f34e 3709 GSList *i;
a61ae7f8
PM
3710 ChardevReturn *ret = NULL;
3711 ChardevBackend *backend;
3712 const char *id = qemu_opts_id(opts);
3713 char *bid = NULL;
191bc01b 3714
a61ae7f8 3715 if (id == NULL) {
312fd5f2 3716 error_setg(errp, "chardev: no id specified");
2274ae9d 3717 goto err;
191bc01b
GH
3718 }
3719
1bbd185f 3720 if (qemu_opt_get(opts, "backend") == NULL) {
312fd5f2 3721 error_setg(errp, "chardev: \"%s\" missing backend",
bd2d80b2 3722 qemu_opts_id(opts));
2274ae9d 3723 goto err;
1bbd185f 3724 }
d654f34e
AL
3725 for (i = backends; i; i = i->next) {
3726 cd = i->data;
3727
3728 if (strcmp(cd->name, qemu_opt_get(opts, "backend")) == 0) {
191bc01b 3729 break;
d654f34e 3730 }
191bc01b 3731 }
d654f34e 3732 if (i == NULL) {
312fd5f2 3733 error_setg(errp, "chardev: backend \"%s\" not found",
bd2d80b2 3734 qemu_opt_get(opts, "backend"));
e668287d 3735 goto err;
191bc01b
GH
3736 }
3737
a61ae7f8 3738 backend = g_new0(ChardevBackend, 1);
edb2fb3c 3739
a61ae7f8
PM
3740 if (qemu_opt_get_bool(opts, "mux", 0)) {
3741 bid = g_strdup_printf("%s-base", id);
3742 }
2c5f4882 3743
a61ae7f8 3744 chr = NULL;
130257dc 3745 backend->type = cd->kind;
a61ae7f8
PM
3746 if (cd->parse) {
3747 cd->parse(opts, backend, &local_err);
3748 if (local_err) {
3749 error_propagate(errp, local_err);
2c5f4882
GH
3750 goto qapi_out;
3751 }
2c5f4882 3752 }
a61ae7f8
PM
3753 ret = qmp_chardev_add(bid ? bid : id, backend, errp);
3754 if (!ret) {
3755 goto qapi_out;
191bc01b
GH
3756 }
3757
a61ae7f8
PM
3758 if (bid) {
3759 qapi_free_ChardevBackend(backend);
3760 qapi_free_ChardevReturn(ret);
3761 backend = g_new0(ChardevBackend, 1);
130257dc
EB
3762 backend->u.mux = g_new0(ChardevMux, 1);
3763 backend->type = CHARDEV_BACKEND_KIND_MUX;
3764 backend->u.mux->chardev = g_strdup(bid);
a61ae7f8
PM
3765 ret = qmp_chardev_add(id, backend, errp);
3766 if (!ret) {
3767 chr = qemu_chr_find(bid);
3768 qemu_chr_delete(chr);
3769 chr = NULL;
3770 goto qapi_out;
3771 }
bd5c51ee 3772 }
7591c5c1 3773
a61ae7f8 3774 chr = qemu_chr_find(id);
2274ae9d 3775 chr->opts = opts;
a61ae7f8
PM
3776
3777qapi_out:
3778 qapi_free_ChardevBackend(backend);
3779 qapi_free_ChardevReturn(ret);
3780 g_free(bid);
191bc01b 3781 return chr;
2274ae9d
GH
3782
3783err:
3784 qemu_opts_del(opts);
3785 return NULL;
191bc01b
GH
3786}
3787
27143a44 3788CharDriverState *qemu_chr_new(const char *label, const char *filename, void (*init)(struct CharDriverState *s))
6f97dba0
AL
3789{
3790 const char *p;
3791 CharDriverState *chr;
191bc01b 3792 QemuOpts *opts;
bd2d80b2 3793 Error *err = NULL;
191bc01b 3794
c845f401
GH
3795 if (strstart(filename, "chardev:", &p)) {
3796 return qemu_chr_find(p);
3797 }
3798
191bc01b 3799 opts = qemu_chr_parse_compat(label, filename);
7e1b35b4
GH
3800 if (!opts)
3801 return NULL;
6f97dba0 3802
bd2d80b2 3803 chr = qemu_chr_new_from_opts(opts, init, &err);
84d18f06 3804 if (err) {
565f65d2 3805 error_report_err(err);
bd2d80b2 3806 }
7e1b35b4 3807 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
456d6069 3808 qemu_chr_fe_claim_no_fail(chr);
7e1b35b4 3809 monitor_init(chr, MONITOR_USE_READLINE);
6f97dba0
AL
3810 }
3811 return chr;
3812}
3813
15f31519 3814void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
c48855e1
PB
3815{
3816 if (chr->chr_set_echo) {
3817 chr->chr_set_echo(chr, echo);
3818 }
3819}
3820
8e25daa8 3821void qemu_chr_fe_set_open(struct CharDriverState *chr, int fe_open)
7c32c4fe 3822{
8e25daa8 3823 if (chr->fe_open == fe_open) {
c0c4bd2c
HG
3824 return;
3825 }
8e25daa8 3826 chr->fe_open = fe_open;
574b711a
HG
3827 if (chr->chr_set_fe_open) {
3828 chr->chr_set_fe_open(chr, fe_open);
7c32c4fe
HG
3829 }
3830}
3831
d61b0c9a
MAL
3832void qemu_chr_fe_event(struct CharDriverState *chr, int event)
3833{
3834 if (chr->chr_fe_event) {
3835 chr->chr_fe_event(chr, event);
3836 }
3837}
3838
2c8a5942
KW
3839int qemu_chr_fe_add_watch(CharDriverState *s, GIOCondition cond,
3840 GIOFunc func, void *user_data)
23673ca7
AL
3841{
3842 GSource *src;
3843 guint tag;
3844
3845 if (s->chr_add_watch == NULL) {
3846 return -ENOSYS;
3847 }
3848
3849 src = s->chr_add_watch(s, cond);
62c339c5
PB
3850 if (!src) {
3851 return -EINVAL;
3852 }
3853
23673ca7
AL
3854 g_source_set_callback(src, (GSourceFunc)func, user_data, NULL);
3855 tag = g_source_attach(src, NULL);
3856 g_source_unref(src);
3857
3858 return tag;
3859}
3860
44c473de
HG
3861int qemu_chr_fe_claim(CharDriverState *s)
3862{
3863 if (s->avail_connections < 1) {
3864 return -1;
3865 }
3866 s->avail_connections--;
3867 return 0;
3868}
3869
3870void qemu_chr_fe_claim_no_fail(CharDriverState *s)
3871{
3872 if (qemu_chr_fe_claim(s) != 0) {
3873 fprintf(stderr, "%s: error chardev \"%s\" already used\n",
3874 __func__, s->label);
3875 exit(1);
3876 }
3877}
3878
3879void qemu_chr_fe_release(CharDriverState *s)
3880{
3881 s->avail_connections++;
3882}
3883
1ad78ea5 3884void qemu_chr_free(CharDriverState *chr)
6f97dba0 3885{
2274ae9d 3886 if (chr->chr_close) {
6f97dba0 3887 chr->chr_close(chr);
2274ae9d 3888 }
7267c094
AL
3889 g_free(chr->filename);
3890 g_free(chr->label);
4ad60880 3891 qemu_opts_del(chr->opts);
7267c094 3892 g_free(chr);
6f97dba0
AL
3893}
3894
1ad78ea5
MAL
3895void qemu_chr_delete(CharDriverState *chr)
3896{
3897 QTAILQ_REMOVE(&chardevs, chr, next);
3898 qemu_chr_free(chr);
3899}
3900
c5a415a0 3901ChardevInfoList *qmp_query_chardev(Error **errp)
6f97dba0 3902{
c5a415a0 3903 ChardevInfoList *chr_list = NULL;
6f97dba0
AL
3904 CharDriverState *chr;
3905
72cf2d4f 3906 QTAILQ_FOREACH(chr, &chardevs, next) {
c5a415a0
LC
3907 ChardevInfoList *info = g_malloc0(sizeof(*info));
3908 info->value = g_malloc0(sizeof(*info->value));
3909 info->value->label = g_strdup(chr->label);
3910 info->value->filename = g_strdup(chr->filename);
32a97ea1 3911 info->value->frontend_open = chr->fe_open;
c5a415a0
LC
3912
3913 info->next = chr_list;
3914 chr_list = info;
6f97dba0 3915 }
588b3832 3916
c5a415a0 3917 return chr_list;
6f97dba0 3918}
c845f401 3919
77d1c3c6
MK
3920ChardevBackendInfoList *qmp_query_chardev_backends(Error **errp)
3921{
3922 ChardevBackendInfoList *backend_list = NULL;
3923 CharDriver *c = NULL;
3924 GSList *i = NULL;
3925
3926 for (i = backends; i; i = i->next) {
3927 ChardevBackendInfoList *info = g_malloc0(sizeof(*info));
3928 c = i->data;
3929 info->value = g_malloc0(sizeof(*info->value));
3930 info->value->name = g_strdup(c->name);
3931
3932 info->next = backend_list;
3933 backend_list = info;
3934 }
3935
3936 return backend_list;
3937}
3938
c845f401
GH
3939CharDriverState *qemu_chr_find(const char *name)
3940{
3941 CharDriverState *chr;
3942
72cf2d4f 3943 QTAILQ_FOREACH(chr, &chardevs, next) {
c845f401
GH
3944 if (strcmp(chr->label, name) != 0)
3945 continue;
3946 return chr;
3947 }
3948 return NULL;
3949}
0beb4942
AL
3950
3951/* Get a character (serial) device interface. */
3952CharDriverState *qemu_char_get_next_serial(void)
3953{
3954 static int next_serial;
456d6069 3955 CharDriverState *chr;
0beb4942
AL
3956
3957 /* FIXME: This function needs to go away: use chardev properties! */
456d6069
HG
3958
3959 while (next_serial < MAX_SERIAL_PORTS && serial_hds[next_serial]) {
3960 chr = serial_hds[next_serial++];
3961 qemu_chr_fe_claim_no_fail(chr);
3962 return chr;
3963 }
3964 return NULL;
0beb4942
AL
3965}
3966
4d454574
PB
3967QemuOptsList qemu_chardev_opts = {
3968 .name = "chardev",
3969 .implied_opt_name = "backend",
3970 .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
3971 .desc = {
3972 {
3973 .name = "backend",
3974 .type = QEMU_OPT_STRING,
3975 },{
3976 .name = "path",
3977 .type = QEMU_OPT_STRING,
3978 },{
3979 .name = "host",
3980 .type = QEMU_OPT_STRING,
3981 },{
3982 .name = "port",
3983 .type = QEMU_OPT_STRING,
3984 },{
3985 .name = "localaddr",
3986 .type = QEMU_OPT_STRING,
3987 },{
3988 .name = "localport",
3989 .type = QEMU_OPT_STRING,
3990 },{
3991 .name = "to",
3992 .type = QEMU_OPT_NUMBER,
3993 },{
3994 .name = "ipv4",
3995 .type = QEMU_OPT_BOOL,
3996 },{
3997 .name = "ipv6",
3998 .type = QEMU_OPT_BOOL,
3999 },{
4000 .name = "wait",
4001 .type = QEMU_OPT_BOOL,
4002 },{
4003 .name = "server",
4004 .type = QEMU_OPT_BOOL,
4005 },{
4006 .name = "delay",
4007 .type = QEMU_OPT_BOOL,
5dd1f02b
CM
4008 },{
4009 .name = "reconnect",
4010 .type = QEMU_OPT_NUMBER,
4d454574
PB
4011 },{
4012 .name = "telnet",
4013 .type = QEMU_OPT_BOOL,
4014 },{
4015 .name = "width",
4016 .type = QEMU_OPT_NUMBER,
4017 },{
4018 .name = "height",
4019 .type = QEMU_OPT_NUMBER,
4020 },{
4021 .name = "cols",
4022 .type = QEMU_OPT_NUMBER,
4023 },{
4024 .name = "rows",
4025 .type = QEMU_OPT_NUMBER,
4026 },{
4027 .name = "mux",
4028 .type = QEMU_OPT_BOOL,
4029 },{
4030 .name = "signal",
4031 .type = QEMU_OPT_BOOL,
4032 },{
4033 .name = "name",
4034 .type = QEMU_OPT_STRING,
4035 },{
4036 .name = "debug",
4037 .type = QEMU_OPT_NUMBER,
51767e7c 4038 },{
3949e594 4039 .name = "size",
de1cc36e 4040 .type = QEMU_OPT_SIZE,
bb6fb7c0
GH
4041 },{
4042 .name = "chardev",
4043 .type = QEMU_OPT_STRING,
4d454574
PB
4044 },
4045 { /* end of list */ }
4046 },
4047};
f1a1a356 4048
ffbdbe59
GH
4049#ifdef _WIN32
4050
fd5b036c
PB
4051static CharDriverState *qmp_chardev_open_file(const char *id,
4052 ChardevBackend *backend,
4053 ChardevReturn *ret,
4054 Error **errp)
ffbdbe59 4055{
130257dc 4056 ChardevFile *file = backend->u.file;
ffbdbe59
GH
4057 HANDLE out;
4058
e859eda5 4059 if (file->has_in) {
ffbdbe59
GH
4060 error_setg(errp, "input file not supported");
4061 return NULL;
4062 }
4063
4064 out = CreateFile(file->out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
4065 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
4066 if (out == INVALID_HANDLE_VALUE) {
4067 error_setg(errp, "open %s failed", file->out);
4068 return NULL;
4069 }
4070 return qemu_chr_open_win_file(out);
4071}
4072
6511d396
PB
4073static CharDriverState *qmp_chardev_open_serial(const char *id,
4074 ChardevBackend *backend,
4075 ChardevReturn *ret,
d36b2b90 4076 Error **errp)
d59044ef 4077{
130257dc 4078 ChardevHostdev *serial = backend->u.serial;
6511d396 4079 return qemu_chr_open_win_path(serial->device, errp);
d36b2b90
MA
4080}
4081
ffbdbe59
GH
4082#else /* WIN32 */
4083
4084static int qmp_chardev_open_file_source(char *src, int flags,
4085 Error **errp)
4086{
4087 int fd = -1;
4088
4089 TFR(fd = qemu_open(src, flags, 0666));
4090 if (fd == -1) {
20c39760 4091 error_setg_file_open(errp, errno, src);
ffbdbe59
GH
4092 }
4093 return fd;
4094}
4095
fd5b036c
PB
4096static CharDriverState *qmp_chardev_open_file(const char *id,
4097 ChardevBackend *backend,
4098 ChardevReturn *ret,
4099 Error **errp)
ffbdbe59 4100{
130257dc 4101 ChardevFile *file = backend->u.file;
5f758366 4102 int flags, in = -1, out;
ffbdbe59
GH
4103
4104 flags = O_WRONLY | O_TRUNC | O_CREAT | O_BINARY;
4105 out = qmp_chardev_open_file_source(file->out, flags, errp);
5f758366 4106 if (out < 0) {
ffbdbe59
GH
4107 return NULL;
4108 }
4109
e859eda5 4110 if (file->has_in) {
ffbdbe59
GH
4111 flags = O_RDONLY;
4112 in = qmp_chardev_open_file_source(file->in, flags, errp);
5f758366 4113 if (in < 0) {
ffbdbe59
GH
4114 qemu_close(out);
4115 return NULL;
4116 }
4117 }
4118
4119 return qemu_chr_open_fd(in, out);
4120}
4121
d809ab95 4122#ifdef HAVE_CHARDEV_SERIAL
6511d396
PB
4123static CharDriverState *qmp_chardev_open_serial(const char *id,
4124 ChardevBackend *backend,
4125 ChardevReturn *ret,
d36b2b90 4126 Error **errp)
d59044ef 4127{
130257dc 4128 ChardevHostdev *serial = backend->u.serial;
d36b2b90
MA
4129 int fd;
4130
4131 fd = qmp_chardev_open_file_source(serial->device, O_RDWR, errp);
5f758366 4132 if (fd < 0) {
d36b2b90 4133 return NULL;
39099991 4134 }
f9e8cacc 4135 qemu_set_nonblock(fd);
d36b2b90 4136 return qemu_chr_open_tty_fd(fd);
d36b2b90 4137}
6511d396 4138#endif
d36b2b90 4139
d809ab95 4140#ifdef HAVE_CHARDEV_PARPORT
38bfb1a6
PB
4141static CharDriverState *qmp_chardev_open_parallel(const char *id,
4142 ChardevBackend *backend,
4143 ChardevReturn *ret,
d36b2b90
MA
4144 Error **errp)
4145{
130257dc 4146 ChardevHostdev *parallel = backend->u.parallel;
d36b2b90
MA
4147 int fd;
4148
4149 fd = qmp_chardev_open_file_source(parallel->device, O_RDWR, errp);
5f758366 4150 if (fd < 0) {
d59044ef
GH
4151 return NULL;
4152 }
38bfb1a6 4153 return qemu_chr_open_pp_fd(fd, errp);
d59044ef 4154}
d809ab95 4155#endif
d59044ef 4156
ffbdbe59
GH
4157#endif /* WIN32 */
4158
5008e5b7
CM
4159static void socket_try_connect(CharDriverState *chr)
4160{
4161 Error *err = NULL;
4162
4163 if (!qemu_chr_open_socket_fd(chr, &err)) {
4164 check_report_connect_error(chr, err);
4165 }
4166}
4167
5dd1f02b
CM
4168static gboolean socket_reconnect_timeout(gpointer opaque)
4169{
4170 CharDriverState *chr = opaque;
4171 TCPCharDriver *s = chr->opaque;
5dd1f02b
CM
4172
4173 s->reconnect_timer = 0;
4174
4175 if (chr->be_open) {
4176 return false;
4177 }
4178
5008e5b7 4179 socket_try_connect(chr);
5dd1f02b
CM
4180
4181 return false;
4182}
4183
dbba8d1b
PB
4184static CharDriverState *qmp_chardev_open_socket(const char *id,
4185 ChardevBackend *backend,
4186 ChardevReturn *ret,
f6bd5d6e
GH
4187 Error **errp)
4188{
43ded1a0
CM
4189 CharDriverState *chr;
4190 TCPCharDriver *s;
130257dc 4191 ChardevSocket *sock = backend->u.socket;
f6bd5d6e
GH
4192 SocketAddress *addr = sock->addr;
4193 bool do_nodelay = sock->has_nodelay ? sock->nodelay : false;
4194 bool is_listen = sock->has_server ? sock->server : true;
4195 bool is_telnet = sock->has_telnet ? sock->telnet : false;
4196 bool is_waitconnect = sock->has_wait ? sock->wait : false;
5dd1f02b 4197 int64_t reconnect = sock->has_reconnect ? sock->reconnect : 0;
43ded1a0
CM
4198
4199 chr = qemu_chr_alloc();
2d528d45 4200 s = g_new0(TCPCharDriver, 1);
43ded1a0
CM
4201
4202 s->fd = -1;
4203 s->listen_fd = -1;
130257dc 4204 s->is_unix = addr->type == SOCKET_ADDRESS_KIND_UNIX;
cfb429cb
CM
4205 s->is_listen = is_listen;
4206 s->is_telnet = is_telnet;
43ded1a0 4207 s->do_nodelay = do_nodelay;
cfb429cb 4208 qapi_copy_SocketAddress(&s->addr, sock->addr);
43ded1a0
CM
4209
4210 chr->opaque = s;
4211 chr->chr_write = tcp_chr_write;
4212 chr->chr_sync_read = tcp_chr_sync_read;
4213 chr->chr_close = tcp_chr_close;
4214 chr->get_msgfds = tcp_get_msgfds;
4215 chr->set_msgfds = tcp_set_msgfds;
4216 chr->chr_add_client = tcp_chr_add_client;
4217 chr->chr_add_watch = tcp_chr_add_watch;
4218 chr->chr_update_read_handler = tcp_chr_update_read_handler;
4219 /* be isn't opened until we get a connection */
4220 chr->explicit_be_open = true;
4221
4222 chr->filename = g_malloc(CHR_MAX_FILENAME_SIZE);
16cc4ffe
CM
4223 SocketAddress_to_str(chr->filename, CHR_MAX_FILENAME_SIZE, "disconnected:",
4224 addr, is_listen, is_telnet);
f6bd5d6e
GH
4225
4226 if (is_listen) {
43ded1a0
CM
4227 if (is_telnet) {
4228 s->do_telnetopt = 1;
4229 }
5dd1f02b
CM
4230 } else if (reconnect > 0) {
4231 s->reconnect_time = reconnect;
f6bd5d6e 4232 }
43ded1a0 4233
5008e5b7
CM
4234 if (s->reconnect_time) {
4235 socket_try_connect(chr);
4236 } else if (!qemu_chr_open_socket_fd(chr, errp)) {
4237 g_free(s);
4238 g_free(chr->filename);
4239 g_free(chr);
4240 return NULL;
f6bd5d6e 4241 }
43ded1a0
CM
4242
4243 if (is_listen && is_waitconnect) {
4244 fprintf(stderr, "QEMU waiting for connection on: %s\n",
4245 chr->filename);
4246 tcp_chr_accept(s->listen_chan, G_IO_IN, chr);
4247 qemu_set_nonblock(s->listen_fd);
4248 }
4249
4250 return chr;
f6bd5d6e
GH
4251}
4252
e79b80da
PB
4253static CharDriverState *qmp_chardev_open_udp(const char *id,
4254 ChardevBackend *backend,
4255 ChardevReturn *ret,
08d0ab3f 4256 Error **errp)
3ecc059d 4257{
130257dc 4258 ChardevUdp *udp = backend->u.udp;
3ecc059d
GH
4259 int fd;
4260
08d0ab3f 4261 fd = socket_dgram(udp->remote, udp->local, errp);
5f758366 4262 if (fd < 0) {
3ecc059d
GH
4263 return NULL;
4264 }
4265 return qemu_chr_open_udp_fd(fd);
4266}
4267
f1a1a356
GH
4268ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
4269 Error **errp)
4270{
4271 ChardevReturn *ret = g_new0(ChardevReturn, 1);
3c0e5a4a 4272 CharDriverState *chr = NULL;
eaeba653 4273 Error *local_err = NULL;
4ca17281
PB
4274 GSList *i;
4275 CharDriver *cd;
f1a1a356
GH
4276
4277 chr = qemu_chr_find(id);
4278 if (chr) {
4279 error_setg(errp, "Chardev '%s' already exists", id);
4280 g_free(ret);
4281 return NULL;
4282 }
4283
4ca17281
PB
4284 for (i = backends; i; i = i->next) {
4285 cd = i->data;
4286
130257dc 4287 if (cd->kind == backend->type) {
4ca17281
PB
4288 chr = cd->create(id, backend, ret, &local_err);
4289 if (local_err) {
4290 error_propagate(errp, local_err);
4291 goto out_error;
4292 }
4293 break;
4294 }
4295 }
4296
4297 if (chr == NULL) {
1c3af0f4
PB
4298 assert(!i);
4299 error_setg(errp, "chardev backend not available");
4300 goto out_error;
eaeba653
PB
4301 }
4302
4303 chr->label = g_strdup(id);
4304 chr->avail_connections =
130257dc 4305 (backend->type == CHARDEV_BACKEND_KIND_MUX) ? MAX_MUX : 1;
eaeba653 4306 if (!chr->filename) {
130257dc 4307 chr->filename = g_strdup(ChardevBackendKind_lookup[backend->type]);
f1a1a356 4308 }
eaeba653
PB
4309 if (!chr->explicit_be_open) {
4310 qemu_chr_be_event(chr, CHR_EVENT_OPENED);
4311 }
4312 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
4313 return ret;
4314
4315out_error:
4316 g_free(ret);
4317 return NULL;
f1a1a356
GH
4318}
4319
4320void qmp_chardev_remove(const char *id, Error **errp)
4321{
4322 CharDriverState *chr;
4323
4324 chr = qemu_chr_find(id);
8108fd3e 4325 if (chr == NULL) {
f1a1a356
GH
4326 error_setg(errp, "Chardev '%s' not found", id);
4327 return;
4328 }
4329 if (chr->chr_can_read || chr->chr_read ||
4330 chr->chr_event || chr->handler_opaque) {
4331 error_setg(errp, "Chardev '%s' is busy", id);
4332 return;
4333 }
4334 qemu_chr_delete(chr);
4335}
d654f34e
AL
4336
4337static void register_types(void)
4338{
4ca17281 4339 register_char_driver("null", CHARDEV_BACKEND_KIND_NULL, NULL,
0d64992b 4340 qemu_chr_open_null);
e4d50d47 4341 register_char_driver("socket", CHARDEV_BACKEND_KIND_SOCKET,
dbba8d1b 4342 qemu_chr_parse_socket, qmp_chardev_open_socket);
4ca17281 4343 register_char_driver("udp", CHARDEV_BACKEND_KIND_UDP, qemu_chr_parse_udp,
e79b80da 4344 qmp_chardev_open_udp);
e4d50d47 4345 register_char_driver("ringbuf", CHARDEV_BACKEND_KIND_RINGBUF,
479f09a1 4346 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
e4d50d47 4347 register_char_driver("file", CHARDEV_BACKEND_KIND_FILE,
fd5b036c 4348 qemu_chr_parse_file_out, qmp_chardev_open_file);
e4d50d47 4349 register_char_driver("stdio", CHARDEV_BACKEND_KIND_STDIO,
8c84b25d 4350 qemu_chr_parse_stdio, qemu_chr_open_stdio);
6511d396 4351#if defined HAVE_CHARDEV_SERIAL
e4d50d47 4352 register_char_driver("serial", CHARDEV_BACKEND_KIND_SERIAL,
6511d396 4353 qemu_chr_parse_serial, qmp_chardev_open_serial);
e4d50d47 4354 register_char_driver("tty", CHARDEV_BACKEND_KIND_SERIAL,
6511d396
PB
4355 qemu_chr_parse_serial, qmp_chardev_open_serial);
4356#endif
38bfb1a6 4357#ifdef HAVE_CHARDEV_PARPORT
e4d50d47 4358 register_char_driver("parallel", CHARDEV_BACKEND_KIND_PARALLEL,
38bfb1a6 4359 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
e4d50d47 4360 register_char_driver("parport", CHARDEV_BACKEND_KIND_PARALLEL,
38bfb1a6
PB
4361 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4362#endif
c2e75a43 4363#ifdef HAVE_CHARDEV_PTY
4ca17281 4364 register_char_driver("pty", CHARDEV_BACKEND_KIND_PTY, NULL,
c2e75a43
PB
4365 qemu_chr_open_pty);
4366#endif
122e5ed4 4367#ifdef _WIN32
4ca17281 4368 register_char_driver("console", CHARDEV_BACKEND_KIND_CONSOLE, NULL,
122e5ed4
PB
4369 qemu_chr_open_win_con);
4370#endif
e4d50d47 4371 register_char_driver("pipe", CHARDEV_BACKEND_KIND_PIPE,
20cbe7a2 4372 qemu_chr_parse_pipe, qemu_chr_open_pipe);
4ca17281 4373 register_char_driver("mux", CHARDEV_BACKEND_KIND_MUX, qemu_chr_parse_mux,
3c0e5a4a 4374 qemu_chr_open_mux);
c11ed966 4375 /* Bug-compatibility: */
e4d50d47 4376 register_char_driver("memory", CHARDEV_BACKEND_KIND_MEMORY,
479f09a1 4377 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
7b7ab18d
MR
4378 /* this must be done after machine init, since we register FEs with muxes
4379 * as part of realize functions like serial_isa_realizefn when -nographic
4380 * is specified
4381 */
4382 qemu_add_machine_init_done_notifier(&muxes_realize_notify);
d654f34e
AL
4383}
4384
4385type_init(register_types);