]> git.proxmox.com Git - qemu.git/blame - qemu-char.c
projects / qemu.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
qemu-char: convert UDP to GIOChannel
[qemu.git] / qemu-char.c
CommitLineData
6f97dba0
AL		 1/*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24#include "qemu-common.h"
83c9089e 25#include "monitor/monitor.h"
28ecbaee 26#include "ui/console.h"
9c17d615 27#include "sysemu/sysemu.h"
1de7afc9 28#include "qemu/timer.h"
927d4878 29#include "char/char.h"
cf3ebac7
AJ		 30#include "hw/usb.h"
31#include "hw/baum.h"
aa71cf80 32#include "hw/msmouse.h"
c5a415a0 33#include "qmp-commands.h"
6f97dba0
AL		 34
35#include <unistd.h>
36#include <fcntl.h>
6f97dba0
AL		 37#include <time.h>
38#include <errno.h>
39#include <sys/time.h>
40#include <zlib.h>
41
42#ifndef _WIN32
43#include <sys/times.h>
44#include <sys/wait.h>
45#include <termios.h>
46#include <sys/mman.h>
47#include <sys/ioctl.h>
24646c7e 48#include <sys/resource.h>
6f97dba0
AL		 49#include <sys/socket.h>
50#include <netinet/in.h>
24646c7e 51#include <net/if.h>
24646c7e 52#include <arpa/inet.h>
6f97dba0
AL		 53#include <dirent.h>
54#include <netdb.h>
55#include <sys/select.h>
71e72a19 56#ifdef CONFIG_BSD
6f97dba0 57#include <sys/stat.h>
a167ba50
AJ		 58#if defined(__GLIBC__)
59#include <pty.h>
3294ce18
MT		 60#elif defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
61#include <libutil.h>
62#else
63#include <util.h>
a167ba50 64#endif
3294ce18
MT		 65#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
66#include <dev/ppbus/ppi.h>
67#include <dev/ppbus/ppbconf.h>
c5e97233 68#elif defined(__DragonFly__)
c5e97233
BS		 69#include <dev/misc/ppi/ppi.h>
70#include <bus/ppbus/ppbconf.h>
6f97dba0 71#endif
bbe813a2 72#else
6f97dba0 73#ifdef __linux__
6f97dba0
AL		 74#include <pty.h>
75
76#include <linux/ppdev.h>
77#include <linux/parport.h>
78#endif
79#ifdef __sun__
80#include <sys/stat.h>
81#include <sys/ethernet.h>
82#include <sys/sockio.h>
83#include <netinet/arp.h>
84#include <netinet/in.h>
85#include <netinet/in_systm.h>
86#include <netinet/ip.h>
87#include <netinet/ip_icmp.h> // must come after ip.h
88#include <netinet/udp.h>
89#include <netinet/tcp.h>
90#include <net/if.h>
91#include <syslog.h>
92#include <stropts.h>
93#endif
94#endif
95#endif
96
1de7afc9 97#include "qemu/sockets.h"
cbcc6336 98#include "ui/qemu-spice.h"
6f97dba0 99
9bd7854e
AS		 100#define READ_BUF_LEN 4096
101
6f97dba0
AL		 102/***********************************************************/
103/* character device */
104
72cf2d4f
BS		 105static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
106 QTAILQ_HEAD_INITIALIZER(chardevs);
2970a6c9 107
a425d23f 108void qemu_chr_be_event(CharDriverState *s, int event)
6f97dba0 109{
73cdf3f2
AG		 110 /* Keep track if the char device is open */
111 switch (event) {
112 case CHR_EVENT_OPENED:
113 s->opened = 1;
114 break;
115 case CHR_EVENT_CLOSED:
116 s->opened = 0;
117 break;
118 }
119
6f97dba0
AL		 120 if (!s->chr_event)
121 return;
122 s->chr_event(s->handler_opaque, event);
123}
124
ac4119c0 125static void qemu_chr_fire_open_event(void *opaque)
6f97dba0
AL		 126{
127 CharDriverState *s = opaque;
a425d23f 128 qemu_chr_be_event(s, CHR_EVENT_OPENED);
ac4119c0
JK		 129 qemu_free_timer(s->open_timer);
130 s->open_timer = NULL;
6f97dba0
AL		 131}
132
127338e6 133void qemu_chr_generic_open(CharDriverState *s)
6f97dba0 134{
ac4119c0 135 if (s->open_timer == NULL) {
06dec083 136 s->open_timer = qemu_new_timer_ms(rt_clock,
ac4119c0 137 qemu_chr_fire_open_event, s);
06dec083 138 qemu_mod_timer(s->open_timer, qemu_get_clock_ms(rt_clock) - 1);
6f97dba0
AL		 139 }
140}
141
2cc6e0a1 142int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
6f97dba0
AL		 143{
144 return s->chr_write(s, buf, len);
145}
146
41084f1b 147int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
6f97dba0
AL		 148{
149 if (!s->chr_ioctl)
150 return -ENOTSUP;
151 return s->chr_ioctl(s, cmd, arg);
152}
153
909cda12 154int qemu_chr_be_can_write(CharDriverState *s)
6f97dba0
AL		 155{
156 if (!s->chr_can_read)
157 return 0;
158 return s->chr_can_read(s->handler_opaque);
159}
160
fa5efccb 161void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
6f97dba0 162{
ac310734
SW		 163 if (s->chr_read) {
164 s->chr_read(s->handler_opaque, buf, len);
165 }
6f97dba0
AL		 166}
167
74c0d6f0 168int qemu_chr_fe_get_msgfd(CharDriverState *s)
7d174059
MM		 169{
170 return s->get_msgfd ? s->get_msgfd(s) : -1;
171}
172
13661089
DB		 173int qemu_chr_add_client(CharDriverState *s, int fd)
174{
175 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
176}
177
6f97dba0
AL		 178void qemu_chr_accept_input(CharDriverState *s)
179{
180 if (s->chr_accept_input)
181 s->chr_accept_input(s);
98c8ee1d 182 qemu_notify_event();
6f97dba0
AL		 183}
184
e7e71b0e 185void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
6f97dba0 186{
9bd7854e 187 char buf[READ_BUF_LEN];
6f97dba0
AL		 188 va_list ap;
189 va_start(ap, fmt);
190 vsnprintf(buf, sizeof(buf), fmt, ap);
2cc6e0a1 191 qemu_chr_fe_write(s, (uint8_t *)buf, strlen(buf));
6f97dba0
AL		 192 va_end(ap);
193}
194
6f97dba0 195void qemu_chr_add_handlers(CharDriverState *s,
7b27a769 196 IOCanReadHandler *fd_can_read,
6f97dba0
AL		 197 IOReadHandler *fd_read,
198 IOEventHandler *fd_event,
199 void *opaque)
200{
da7d998b 201 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
2d6c1ef4 202 /* chr driver being released. */
d5b27167 203 ++s->avail_connections;
2d6c1ef4 204 }
6f97dba0
AL		 205 s->chr_can_read = fd_can_read;
206 s->chr_read = fd_read;
207 s->chr_event = fd_event;
208 s->handler_opaque = opaque;
209 if (s->chr_update_read_handler)
210 s->chr_update_read_handler(s);
73cdf3f2
AG		 211
212 /* We're connecting to an already opened device, so let's make sure we
213 also get the open event */
214 if (s->opened) {
215 qemu_chr_generic_open(s);
216 }
6f97dba0
AL		 217}
218
219static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
220{
221 return len;
222}
223
1f51470d 224static CharDriverState *qemu_chr_open_null(QemuOpts *opts)
6f97dba0
AL		 225{
226 CharDriverState *chr;
227
7267c094 228 chr = g_malloc0(sizeof(CharDriverState));
6f97dba0 229 chr->chr_write = null_chr_write;
1f51470d 230 return chr;
6f97dba0
AL		 231}
232
233/* MUX driver for serial I/O splitting */
6f97dba0
AL		 234#define MAX_MUX 4
235#define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
236#define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
237typedef struct {
7b27a769 238 IOCanReadHandler *chr_can_read[MAX_MUX];
6f97dba0
AL		 239 IOReadHandler *chr_read[MAX_MUX];
240 IOEventHandler *chr_event[MAX_MUX];
241 void *ext_opaque[MAX_MUX];
242 CharDriverState *drv;
799f1f23 243 int focus;
6f97dba0
AL		 244 int mux_cnt;
245 int term_got_escape;
246 int max_size;
a80bf99f
AL		 247 /* Intermediate input buffer allows to catch escape sequences even if the
248 currently active device is not accepting any input - but only until it
249 is full as well. */
250 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
251 int prod[MAX_MUX];
252 int cons[MAX_MUX];
2d22959d 253 int timestamps;
4ab312f7 254 int linestart;
2d22959d 255 int64_t timestamps_start;
6f97dba0
AL		 256} MuxDriver;
257
258
259static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
260{
261 MuxDriver *d = chr->opaque;
262 int ret;
2d22959d 263 if (!d->timestamps) {
6f97dba0
AL		 264 ret = d->drv->chr_write(d->drv, buf, len);
265 } else {
266 int i;
267
268 ret = 0;
4ab312f7
JK		 269 for (i = 0; i < len; i++) {
270 if (d->linestart) {
6f97dba0
AL		 271 char buf1[64];
272 int64_t ti;
273 int secs;
274
7bd427d8 275 ti = qemu_get_clock_ms(rt_clock);
2d22959d
JK		 276 if (d->timestamps_start == -1)
277 d->timestamps_start = ti;
278 ti -= d->timestamps_start;
a4bb1db8 279 secs = ti / 1000;
6f97dba0
AL		 280 snprintf(buf1, sizeof(buf1),
281 "[%02d:%02d:%02d.%03d] ",
282 secs / 3600,
283 (secs / 60) % 60,
284 secs % 60,
a4bb1db8 285 (int)(ti % 1000));
6f97dba0 286 d->drv->chr_write(d->drv, (uint8_t *)buf1, strlen(buf1));
4ab312f7
JK		 287 d->linestart = 0;
288 }
289 ret += d->drv->chr_write(d->drv, buf+i, 1);
290 if (buf[i] == '\n') {
291 d->linestart = 1;
6f97dba0
AL		 292 }
293 }
294 }
295 return ret;
296}
297
298static const char * const mux_help[] = {
299 "% h print this help\n\r",
300 "% x exit emulator\n\r",
301 "% s save disk data back to file (if -snapshot)\n\r",
302 "% t toggle console timestamps\n\r"
303 "% b send break (magic sysrq)\n\r",
304 "% c switch between console and monitor\n\r",
305 "% % sends %\n\r",
306 NULL
307};
308
309int term_escape_char = 0x01; /* ctrl-a is used for escape */
310static void mux_print_help(CharDriverState *chr)
311{
312 int i, j;
313 char ebuf[15] = "Escape-Char";
314 char cbuf[50] = "\n\r";
315
316 if (term_escape_char > 0 && term_escape_char < 26) {
317 snprintf(cbuf, sizeof(cbuf), "\n\r");
318 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
319 } else {
320 snprintf(cbuf, sizeof(cbuf),
321 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
322 term_escape_char);
323 }
324 chr->chr_write(chr, (uint8_t *)cbuf, strlen(cbuf));
325 for (i = 0; mux_help[i] != NULL; i++) {
326 for (j=0; mux_help[i][j] != '\0'; j++) {
327 if (mux_help[i][j] == '%')
328 chr->chr_write(chr, (uint8_t *)ebuf, strlen(ebuf));
329 else
330 chr->chr_write(chr, (uint8_t *)&mux_help[i][j], 1);
331 }
332 }
333}
334
2724b180
AL		 335static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
336{
337 if (d->chr_event[mux_nr])
338 d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
339}
340
6f97dba0
AL		 341static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
342{
343 if (d->term_got_escape) {
344 d->term_got_escape = 0;
345 if (ch == term_escape_char)
346 goto send_char;
347 switch(ch) {
348 case '?':
349 case 'h':
350 mux_print_help(chr);
351 break;
352 case 'x':
353 {
354 const char *term = "QEMU: Terminated\n\r";
355 chr->chr_write(chr,(uint8_t *)term,strlen(term));
356 exit(0);
357 break;
358 }
359 case 's':
6ab4b5ab 360 bdrv_commit_all();
6f97dba0
AL		 361 break;
362 case 'b':
a425d23f 363 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
6f97dba0
AL		 364 break;
365 case 'c':
366 /* Switch to the next registered device */
799f1f23
GH		 367 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
368 d->focus++;
369 if (d->focus >= d->mux_cnt)
370 d->focus = 0;
371 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
6f97dba0 372 break;
2d22959d
JK		 373 case 't':
374 d->timestamps = !d->timestamps;
375 d->timestamps_start = -1;
4ab312f7 376 d->linestart = 0;
2d22959d 377 break;
6f97dba0
AL		 378 }
379 } else if (ch == term_escape_char) {
380 d->term_got_escape = 1;
381 } else {
382 send_char:
383 return 1;
384 }
385 return 0;
386}
387
388static void mux_chr_accept_input(CharDriverState *chr)
389{
6f97dba0 390 MuxDriver *d = chr->opaque;
799f1f23 391 int m = d->focus;
6f97dba0 392
a80bf99f 393 while (d->prod[m] != d->cons[m] &&
6f97dba0
AL		 394 d->chr_can_read[m] &&
395 d->chr_can_read[m](d->ext_opaque[m])) {
396 d->chr_read[m](d->ext_opaque[m],
a80bf99f 397 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
6f97dba0
AL		 398 }
399}
400
401static int mux_chr_can_read(void *opaque)
402{
403 CharDriverState *chr = opaque;
404 MuxDriver *d = chr->opaque;
799f1f23 405 int m = d->focus;
6f97dba0 406
a80bf99f 407 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
6f97dba0 408 return 1;
a80bf99f
AL		 409 if (d->chr_can_read[m])
410 return d->chr_can_read[m](d->ext_opaque[m]);
6f97dba0
AL		 411 return 0;
412}
413
414static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
415{
416 CharDriverState *chr = opaque;
417 MuxDriver *d = chr->opaque;
799f1f23 418 int m = d->focus;
6f97dba0
AL		 419 int i;
420
421 mux_chr_accept_input (opaque);
422
423 for(i = 0; i < size; i++)
424 if (mux_proc_byte(chr, d, buf[i])) {
a80bf99f 425 if (d->prod[m] == d->cons[m] &&
6f97dba0
AL		 426 d->chr_can_read[m] &&
427 d->chr_can_read[m](d->ext_opaque[m]))
428 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
429 else
a80bf99f 430 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
6f97dba0
AL		 431 }
432}
433
434static void mux_chr_event(void *opaque, int event)
435{
436 CharDriverState *chr = opaque;
437 MuxDriver *d = chr->opaque;
438 int i;
439
440 /* Send the event to all registered listeners */
441 for (i = 0; i < d->mux_cnt; i++)
2724b180 442 mux_chr_send_event(d, i, event);
6f97dba0
AL		 443}
444
445static void mux_chr_update_read_handler(CharDriverState *chr)
446{
447 MuxDriver *d = chr->opaque;
448
449 if (d->mux_cnt >= MAX_MUX) {
450 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
451 return;
452 }
453 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
454 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
455 d->chr_read[d->mux_cnt] = chr->chr_read;
456 d->chr_event[d->mux_cnt] = chr->chr_event;
457 /* Fix up the real driver with mux routines */
458 if (d->mux_cnt == 0) {
459 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
460 mux_chr_event, chr);
461 }
799f1f23
GH		 462 if (d->focus != -1) {
463 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
a7aec5da 464 }
799f1f23 465 d->focus = d->mux_cnt;
6f97dba0 466 d->mux_cnt++;
799f1f23 467 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
6f97dba0
AL		 468}
469
470static CharDriverState *qemu_chr_open_mux(CharDriverState *drv)
471{
472 CharDriverState *chr;
473 MuxDriver *d;
474
7267c094
AL		 475 chr = g_malloc0(sizeof(CharDriverState));
476 d = g_malloc0(sizeof(MuxDriver));
6f97dba0
AL		 477
478 chr->opaque = d;
479 d->drv = drv;
799f1f23 480 d->focus = -1;
6f97dba0
AL		 481 chr->chr_write = mux_chr_write;
482 chr->chr_update_read_handler = mux_chr_update_read_handler;
483 chr->chr_accept_input = mux_chr_accept_input;
7c32c4fe
HG		 484 /* Frontend guest-open / -close notification is not support with muxes */
485 chr->chr_guest_open = NULL;
486 chr->chr_guest_close = NULL;
73cdf3f2
AG		 487
488 /* Muxes are always open on creation */
489 qemu_chr_generic_open(chr);
490
6f97dba0
AL		 491 return chr;
492}
493
494
495#ifdef _WIN32
d247d25f 496int send_all(int fd, const void *buf, int len1)
6f97dba0
AL		 497{
498 int ret, len;
499
500 len = len1;
501 while (len > 0) {
502 ret = send(fd, buf, len, 0);
503 if (ret < 0) {
6f97dba0
AL		 504 errno = WSAGetLastError();
505 if (errno != WSAEWOULDBLOCK) {
506 return -1;
507 }
508 } else if (ret == 0) {
509 break;
510 } else {
511 buf += ret;
512 len -= ret;
513 }
514 }
515 return len1 - len;
516}
517
518#else
519
5fc9cfed 520int send_all(int fd, const void *_buf, int len1)
6f97dba0
AL		 521{
522 int ret, len;
5fc9cfed 523 const uint8_t *buf = _buf;
6f97dba0
AL		 524
525 len = len1;
526 while (len > 0) {
527 ret = write(fd, buf, len);
528 if (ret < 0) {
529 if (errno != EINTR && errno != EAGAIN)
530 return -1;
531 } else if (ret == 0) {
532 break;
533 } else {
534 buf += ret;
535 len -= ret;
536 }
537 }
538 return len1 - len;
539}
6f97dba0
AL		 540#endif /* !_WIN32 */
541
542#ifndef _WIN32
543
96c63847
AL		 544typedef struct IOWatchPoll
545{
546 GSource *src;
547 int max_size;
548
549 IOCanReadHandler *fd_can_read;
550 void *opaque;
551
552 QTAILQ_ENTRY(IOWatchPoll) node;
553} IOWatchPoll;
554
555static QTAILQ_HEAD(, IOWatchPoll) io_watch_poll_list =
556 QTAILQ_HEAD_INITIALIZER(io_watch_poll_list);
557
558static IOWatchPoll *io_watch_poll_from_source(GSource *source)
559{
560 IOWatchPoll *i;
561
562 QTAILQ_FOREACH(i, &io_watch_poll_list, node) {
563 if (i->src == source) {
564 return i;
565 }
566 }
567
568 return NULL;
569}
570
571static gboolean io_watch_poll_prepare(GSource *source, gint *timeout_)
572{
573 IOWatchPoll *iwp = io_watch_poll_from_source(source);
574
575 iwp->max_size = iwp->fd_can_read(iwp->opaque);
576 if (iwp->max_size == 0) {
577 return FALSE;
578 }
579
580 return g_io_watch_funcs.prepare(source, timeout_);
581}
582
583static gboolean io_watch_poll_check(GSource *source)
584{
585 IOWatchPoll *iwp = io_watch_poll_from_source(source);
586
587 if (iwp->max_size == 0) {
588 return FALSE;
589 }
590
591 return g_io_watch_funcs.check(source);
592}
593
594static gboolean io_watch_poll_dispatch(GSource *source, GSourceFunc callback,
595 gpointer user_data)
596{
597 return g_io_watch_funcs.dispatch(source, callback, user_data);
598}
599
600static void io_watch_poll_finalize(GSource *source)
601{
602 IOWatchPoll *iwp = io_watch_poll_from_source(source);
603 QTAILQ_REMOVE(&io_watch_poll_list, iwp, node);
604 g_io_watch_funcs.finalize(source);
605}
606
607static GSourceFuncs io_watch_poll_funcs = {
608 .prepare = io_watch_poll_prepare,
609 .check = io_watch_poll_check,
610 .dispatch = io_watch_poll_dispatch,
611 .finalize = io_watch_poll_finalize,
612};
613
614/* Can only be used for read */
615static guint io_add_watch_poll(GIOChannel *channel,
616 IOCanReadHandler *fd_can_read,
617 GIOFunc fd_read,
618 gpointer user_data)
619{
620 IOWatchPoll *iwp;
621 GSource *src;
622 guint tag;
623
624 src = g_io_create_watch(channel, G_IO_IN | G_IO_ERR | G_IO_HUP);
625 g_source_set_funcs(src, &io_watch_poll_funcs);
626 g_source_set_callback(src, (GSourceFunc)fd_read, user_data, NULL);
627 tag = g_source_attach(src, NULL);
628 g_source_unref(src);
629
630 iwp = g_malloc0(sizeof(*iwp));
631 iwp->src = src;
632 iwp->max_size = 0;
633 iwp->fd_can_read = fd_can_read;
634 iwp->opaque = user_data;
635
636 QTAILQ_INSERT_HEAD(&io_watch_poll_list, iwp, node);
637
638 return tag;
639}
640
641static GIOChannel *io_channel_from_fd(int fd)
642{
643 GIOChannel *chan;
644
645 if (fd == -1) {
646 return NULL;
647 }
648
649 chan = g_io_channel_unix_new(fd);
650
651 g_io_channel_set_encoding(chan, NULL, NULL);
652 g_io_channel_set_buffered(chan, FALSE);
653
654 return chan;
655}
656
76a9644b
AL		 657static GIOChannel *io_channel_from_socket(int fd)
658{
659 GIOChannel *chan;
660
661 if (fd == -1) {
662 return NULL;
663 }
664
665#ifdef _WIN32
666 chan = g_io_channel_win32_new_socket(fd);
667#else
668 chan = g_io_channel_unix_new(fd);
669#endif
670
671 g_io_channel_set_encoding(chan, NULL, NULL);
672 g_io_channel_set_buffered(chan, FALSE);
673
674 return chan;
675}
676
96c63847
AL		 677static int io_channel_send_all(GIOChannel *fd, const void *_buf, int len1)
678{
679 GIOStatus status;
680 gsize bytes_written;
681 int len;
682 const uint8_t *buf = _buf;
683
684 len = len1;
685 while (len > 0) {
686 status = g_io_channel_write_chars(fd, (const gchar *)buf, len,
687 &bytes_written, NULL);
688 if (status != G_IO_STATUS_NORMAL) {
689 if (status != G_IO_STATUS_AGAIN) {
690 return -1;
691 }
692 } else if (status == G_IO_STATUS_EOF) {
693 break;
694 } else {
695 buf += bytes_written;
696 len -= bytes_written;
697 }
698 }
699 return len1 - len;
700}
96c63847 701
a29753f8
AL		 702typedef struct FDCharDriver {
703 CharDriverState *chr;
704 GIOChannel *fd_in, *fd_out;
705 guint fd_in_tag;
6f97dba0 706 int max_size;
a29753f8 707 QTAILQ_ENTRY(FDCharDriver) node;
6f97dba0
AL		 708} FDCharDriver;
709
6f97dba0
AL		 710static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
711{
712 FDCharDriver *s = chr->opaque;
a29753f8
AL		 713
714 return io_channel_send_all(s->fd_out, buf, len);
6f97dba0
AL		 715}
716
a29753f8 717static gboolean fd_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL		 718{
719 CharDriverState *chr = opaque;
720 FDCharDriver *s = chr->opaque;
a29753f8 721 int len;
9bd7854e 722 uint8_t buf[READ_BUF_LEN];
a29753f8
AL		 723 GIOStatus status;
724 gsize bytes_read;
6f97dba0
AL		 725
726 len = sizeof(buf);
a29753f8 727 if (len > s->max_size) {
6f97dba0 728 len = s->max_size;
a29753f8
AL		 729 }
730 if (len == 0) {
731 return FALSE;
732 }
733
734 status = g_io_channel_read_chars(chan, (gchar *)buf,
735 len, &bytes_read, NULL);
736 if (status == G_IO_STATUS_EOF) {
a425d23f 737 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
a29753f8 738 return FALSE;
6f97dba0 739 }
a29753f8
AL		 740 if (status == G_IO_STATUS_NORMAL) {
741 qemu_chr_be_write(chr, buf, bytes_read);
6f97dba0 742 }
a29753f8
AL		 743
744 return TRUE;
745}
746
747static int fd_chr_read_poll(void *opaque)
748{
749 CharDriverState *chr = opaque;
750 FDCharDriver *s = chr->opaque;
751
752 s->max_size = qemu_chr_be_can_write(chr);
753 return s->max_size;
6f97dba0
AL		 754}
755
756static void fd_chr_update_read_handler(CharDriverState *chr)
757{
758 FDCharDriver *s = chr->opaque;
759
a29753f8
AL		 760 if (s->fd_in_tag) {
761 g_source_remove(s->fd_in_tag);
762 }
763
764 if (s->fd_in) {
765 s->fd_in_tag = io_add_watch_poll(s->fd_in, fd_chr_read_poll, fd_chr_read, chr);
6f97dba0
AL		 766 }
767}
768
769static void fd_chr_close(struct CharDriverState *chr)
770{
771 FDCharDriver *s = chr->opaque;
772
a29753f8
AL		 773 if (s->fd_in_tag) {
774 g_source_remove(s->fd_in_tag);
775 s->fd_in_tag = 0;
776 }
777
778 if (s->fd_in) {
779 g_io_channel_unref(s->fd_in);
780 }
781 if (s->fd_out) {
782 g_io_channel_unref(s->fd_out);
6f97dba0
AL		 783 }
784
7267c094 785 g_free(s);
a425d23f 786 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 787}
788
789/* open a character device to a unix fd */
790static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
791{
792 CharDriverState *chr;
793 FDCharDriver *s;
794
7267c094
AL		 795 chr = g_malloc0(sizeof(CharDriverState));
796 s = g_malloc0(sizeof(FDCharDriver));
a29753f8
AL		 797 s->fd_in = io_channel_from_fd(fd_in);
798 s->fd_out = io_channel_from_fd(fd_out);
799 s->chr = chr;
6f97dba0
AL		 800 chr->opaque = s;
801 chr->chr_write = fd_chr_write;
802 chr->chr_update_read_handler = fd_chr_update_read_handler;
803 chr->chr_close = fd_chr_close;
804
127338e6 805 qemu_chr_generic_open(chr);
6f97dba0
AL		 806
807 return chr;
808}
809
1f51470d 810static CharDriverState *qemu_chr_open_file_out(QemuOpts *opts)
6f97dba0
AL		 811{
812 int fd_out;
813
40ff6d7e 814 TFR(fd_out = qemu_open(qemu_opt_get(opts, "path"),
7d31544f 815 O_WRONLY | O_TRUNC | O_CREAT | O_BINARY, 0666));
a89dd6c3 816 if (fd_out < 0) {
1f51470d 817 return NULL;
a89dd6c3 818 }
1f51470d 819 return qemu_chr_open_fd(-1, fd_out);
6f97dba0
AL		 820}
821
1f51470d 822static CharDriverState *qemu_chr_open_pipe(QemuOpts *opts)
6f97dba0
AL		 823{
824 int fd_in, fd_out;
825 char filename_in[256], filename_out[256];
7d31544f
GH		 826 const char *filename = qemu_opt_get(opts, "path");
827
828 if (filename == NULL) {
829 fprintf(stderr, "chardev: pipe: no filename given\n");
1f51470d 830 return NULL;
7d31544f 831 }
6f97dba0
AL		 832
833 snprintf(filename_in, 256, "%s.in", filename);
834 snprintf(filename_out, 256, "%s.out", filename);
40ff6d7e
KW		 835 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
836 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
6f97dba0
AL		 837 if (fd_in < 0 || fd_out < 0) {
838 if (fd_in >= 0)
839 close(fd_in);
840 if (fd_out >= 0)
841 close(fd_out);
b181e047 842 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
a89dd6c3 843 if (fd_in < 0) {
1f51470d 844 return NULL;
a89dd6c3 845 }
6f97dba0 846 }
1f51470d 847 return qemu_chr_open_fd(fd_in, fd_out);
6f97dba0
AL		 848}
849
6f97dba0
AL		 850/* init terminal so that we can grab keys */
851static struct termios oldtty;
852static int old_fd0_flags;
bb002513 853static bool stdio_allow_signal;
6f97dba0
AL		 854
855static void term_exit(void)
856{
857 tcsetattr (0, TCSANOW, &oldtty);
858 fcntl(0, F_SETFL, old_fd0_flags);
859}
860
bb002513 861static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
6f97dba0
AL		 862{
863 struct termios tty;
864
0369364b 865 tty = oldtty;
bb002513
PB		 866 if (!echo) {
867 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
6f97dba0 868 |INLCR|IGNCR|ICRNL|IXON);
bb002513
PB		 869 tty.c_oflag |= OPOST;
870 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
871 tty.c_cflag &= ~(CSIZE|PARENB);
872 tty.c_cflag |= CS8;
873 tty.c_cc[VMIN] = 1;
874 tty.c_cc[VTIME] = 0;
875 }
6f97dba0 876 /* if graphical mode, we allow Ctrl-C handling */
bb002513 877 if (!stdio_allow_signal)
6f97dba0 878 tty.c_lflag &= ~ISIG;
6f97dba0
AL		 879
880 tcsetattr (0, TCSANOW, &tty);
6f97dba0
AL		 881}
882
883static void qemu_chr_close_stdio(struct CharDriverState *chr)
884{
885 term_exit();
6f97dba0
AL		 886 fd_chr_close(chr);
887}
888
1f51470d 889static CharDriverState *qemu_chr_open_stdio(QemuOpts *opts)
6f97dba0
AL		 890{
891 CharDriverState *chr;
892
ab51b1d5
MT		 893 if (is_daemonized()) {
894 error_report("cannot use stdio with -daemonize");
895 return NULL;
896 }
ed7a1540
AL		 897 old_fd0_flags = fcntl(0, F_GETFL);
898 tcgetattr (0, &oldtty);
899 fcntl(0, F_SETFL, O_NONBLOCK);
900 atexit(term_exit);
0369364b 901
6f97dba0
AL		 902 chr = qemu_chr_open_fd(0, 1);
903 chr->chr_close = qemu_chr_close_stdio;
bb002513 904 chr->chr_set_echo = qemu_chr_set_echo_stdio;
bb002513
PB		 905 stdio_allow_signal = qemu_opt_get_bool(opts, "signal",
906 display_type != DT_NOGRAPHIC);
15f31519 907 qemu_chr_fe_set_echo(chr, false);
6f97dba0 908
1f51470d 909 return chr;
6f97dba0
AL		 910}
911
912#ifdef __sun__
913/* Once Solaris has openpty(), this is going to be removed. */
3f4cb3d3
BS		 914static int openpty(int *amaster, int *aslave, char *name,
915 struct termios *termp, struct winsize *winp)
6f97dba0
AL		 916{
917 const char *slave;
918 int mfd = -1, sfd = -1;
919
920 *amaster = *aslave = -1;
921
922 mfd = open("/dev/ptmx", O_RDWR | O_NOCTTY);
923 if (mfd < 0)
924 goto err;
925
926 if (grantpt(mfd) == -1 || unlockpt(mfd) == -1)
927 goto err;
928
929 if ((slave = ptsname(mfd)) == NULL)
930 goto err;
931
932 if ((sfd = open(slave, O_RDONLY | O_NOCTTY)) == -1)
933 goto err;
934
935 if (ioctl(sfd, I_PUSH, "ptem") == -1 ||
936 (termp != NULL && tcgetattr(sfd, termp) < 0))
937 goto err;
938
939 if (amaster)
940 *amaster = mfd;
941 if (aslave)
942 *aslave = sfd;
943 if (winp)
944 ioctl(sfd, TIOCSWINSZ, winp);
945
946 return 0;
947
948err:
949 if (sfd != -1)
950 close(sfd);
951 close(mfd);
952 return -1;
953}
954
3f4cb3d3 955static void cfmakeraw (struct termios *termios_p)
6f97dba0
AL		 956{
957 termios_p->c_iflag &=
958 ~(IGNBRK|BRKINT|PARMRK|ISTRIP|INLCR|IGNCR|ICRNL|IXON);
959 termios_p->c_oflag &= ~OPOST;
960 termios_p->c_lflag &= ~(ECHO|ECHONL|ICANON|ISIG|IEXTEN);
961 termios_p->c_cflag &= ~(CSIZE|PARENB);
962 termios_p->c_cflag |= CS8;
963
964 termios_p->c_cc[VMIN] = 0;
965 termios_p->c_cc[VTIME] = 0;
966}
967#endif
968
969#if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
a167ba50
AJ		 970 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
971 || defined(__GLIBC__)
6f97dba0 972
e551498e
GH		 973#define HAVE_CHARDEV_TTY 1
974
6f97dba0 975typedef struct {
093d3a20
AL		 976 GIOChannel *fd;
977 guint fd_tag;
6f97dba0
AL		 978 int connected;
979 int polling;
980 int read_bytes;
981 QEMUTimer *timer;
982} PtyCharDriver;
983
984static void pty_chr_update_read_handler(CharDriverState *chr);
985static void pty_chr_state(CharDriverState *chr, int connected);
986
987static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
988{
989 PtyCharDriver *s = chr->opaque;
990
991 if (!s->connected) {
992 /* guest sends data, check for (re-)connect */
993 pty_chr_update_read_handler(chr);
994 return 0;
995 }
093d3a20 996 return io_channel_send_all(s->fd, buf, len);
6f97dba0
AL		 997}
998
999static int pty_chr_read_poll(void *opaque)
1000{
1001 CharDriverState *chr = opaque;
1002 PtyCharDriver *s = chr->opaque;
1003
909cda12 1004 s->read_bytes = qemu_chr_be_can_write(chr);
6f97dba0
AL		 1005 return s->read_bytes;
1006}
1007
093d3a20 1008static gboolean pty_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL		 1009{
1010 CharDriverState *chr = opaque;
1011 PtyCharDriver *s = chr->opaque;
093d3a20 1012 gsize size, len;
9bd7854e 1013 uint8_t buf[READ_BUF_LEN];
093d3a20 1014 GIOStatus status;
6f97dba0
AL		 1015
1016 len = sizeof(buf);
1017 if (len > s->read_bytes)
1018 len = s->read_bytes;
1019 if (len == 0)
093d3a20
AL		 1020 return FALSE;
1021 status = g_io_channel_read_chars(s->fd, (gchar *)buf, len, &size, NULL);
1022 if (status != G_IO_STATUS_NORMAL) {
6f97dba0 1023 pty_chr_state(chr, 0);
093d3a20
AL		 1024 return FALSE;
1025 } else {
6f97dba0 1026 pty_chr_state(chr, 1);
fa5efccb 1027 qemu_chr_be_write(chr, buf, size);
6f97dba0 1028 }
093d3a20 1029 return TRUE;
6f97dba0
AL		 1030}
1031
1032static void pty_chr_update_read_handler(CharDriverState *chr)
1033{
1034 PtyCharDriver *s = chr->opaque;
1035
093d3a20
AL		 1036 if (s->fd_tag) {
1037 g_source_remove(s->fd_tag);
1038 }
1039
1040 s->fd_tag = io_add_watch_poll(s->fd, pty_chr_read_poll, pty_chr_read, chr);
6f97dba0
AL		 1041 s->polling = 1;
1042 /*
1043 * Short timeout here: just need wait long enougth that qemu makes
1044 * it through the poll loop once. When reconnected we want a
1045 * short timeout so we notice it almost instantly. Otherwise
1046 * read() gives us -EIO instantly, making pty_chr_state() reset the
1047 * timeout to the normal (much longer) poll interval before the
1048 * timer triggers.
1049 */
7bd427d8 1050 qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 10);
6f97dba0
AL		 1051}
1052
1053static void pty_chr_state(CharDriverState *chr, int connected)
1054{
1055 PtyCharDriver *s = chr->opaque;
1056
1057 if (!connected) {
093d3a20
AL		 1058 g_source_remove(s->fd_tag);
1059 s->fd_tag = 0;
6f97dba0
AL		 1060 s->connected = 0;
1061 s->polling = 0;
1062 /* (re-)connect poll interval for idle guests: once per second.
1063 * We check more frequently in case the guests sends data to
1064 * the virtual device linked to our pty. */
7bd427d8 1065 qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 1000);
6f97dba0
AL		 1066 } else {
1067 if (!s->connected)
127338e6 1068 qemu_chr_generic_open(chr);
6f97dba0
AL		 1069 s->connected = 1;
1070 }
1071}
1072
1073static void pty_chr_timer(void *opaque)
1074{
1075 struct CharDriverState *chr = opaque;
1076 PtyCharDriver *s = chr->opaque;
1077
1078 if (s->connected)
1079 return;
1080 if (s->polling) {
1081 /* If we arrive here without polling being cleared due
1082 * read returning -EIO, then we are (re-)connected */
1083 pty_chr_state(chr, 1);
1084 return;
1085 }
1086
1087 /* Next poll ... */
1088 pty_chr_update_read_handler(chr);
1089}
1090
1091static void pty_chr_close(struct CharDriverState *chr)
1092{
1093 PtyCharDriver *s = chr->opaque;
093d3a20 1094 int fd;
6f97dba0 1095
093d3a20
AL		 1096 if (s->fd_tag) {
1097 g_source_remove(s->fd_tag);
1098 }
1099 fd = g_io_channel_unix_get_fd(s->fd);
1100 g_io_channel_unref(s->fd);
1101 close(fd);
819f56b7
AL		 1102 qemu_del_timer(s->timer);
1103 qemu_free_timer(s->timer);
7267c094 1104 g_free(s);
a425d23f 1105 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 1106}
1107
1f51470d 1108static CharDriverState *qemu_chr_open_pty(QemuOpts *opts)
6f97dba0
AL		 1109{
1110 CharDriverState *chr;
1111 PtyCharDriver *s;
1112 struct termios tty;
58650218 1113 const char *label;
a4e26048 1114 int master_fd, slave_fd, len;
c5e97233 1115#if defined(__OpenBSD__) || defined(__DragonFly__)
6f97dba0
AL		 1116 char pty_name[PATH_MAX];
1117#define q_ptsname(x) pty_name
1118#else
1119 char *pty_name = NULL;
1120#define q_ptsname(x) ptsname(x)
1121#endif
1122
a4e26048 1123 if (openpty(&master_fd, &slave_fd, pty_name, NULL, NULL) < 0) {
1f51470d 1124 return NULL;
6f97dba0
AL		 1125 }
1126
1127 /* Set raw attributes on the pty. */
c3b972c3 1128 tcgetattr(slave_fd, &tty);
6f97dba0
AL		 1129 cfmakeraw(&tty);
1130 tcsetattr(slave_fd, TCSAFLUSH, &tty);
1131 close(slave_fd);
1132
a4e26048
MA		 1133 chr = g_malloc0(sizeof(CharDriverState));
1134
1135 len = strlen(q_ptsname(master_fd)) + 5;
7267c094 1136 chr->filename = g_malloc(len);
a4e26048
MA		 1137 snprintf(chr->filename, len, "pty:%s", q_ptsname(master_fd));
1138 qemu_opt_set(opts, "path", q_ptsname(master_fd));
58650218
LL		 1139
1140 label = qemu_opts_id(opts);
25bbf61e
GH		 1141 fprintf(stderr, "char device redirected to %s%s%s%s\n",
1142 q_ptsname(master_fd),
1143 label ? " (label " : "",
1144 label ? label : "",
1145 label ? ")" : "");
6f97dba0 1146
a4e26048 1147 s = g_malloc0(sizeof(PtyCharDriver));
6f97dba0
AL		 1148 chr->opaque = s;
1149 chr->chr_write = pty_chr_write;
1150 chr->chr_update_read_handler = pty_chr_update_read_handler;
1151 chr->chr_close = pty_chr_close;
1152
093d3a20 1153 s->fd = io_channel_from_fd(master_fd);
7bd427d8 1154 s->timer = qemu_new_timer_ms(rt_clock, pty_chr_timer, chr);
6f97dba0 1155
1f51470d 1156 return chr;
6f97dba0
AL		 1157}
1158
1159static void tty_serial_init(int fd, int speed,
1160 int parity, int data_bits, int stop_bits)
1161{
1162 struct termios tty;
1163 speed_t spd;
1164
1165#if 0
1166 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1167 speed, parity, data_bits, stop_bits);
1168#endif
1169 tcgetattr (fd, &tty);
1170
45eea13b
SW		 1171#define check_speed(val) if (speed <= val) { spd = B##val; break; }
1172 speed = speed * 10 / 11;
1173 do {
1174 check_speed(50);
1175 check_speed(75);
1176 check_speed(110);
1177 check_speed(134);
1178 check_speed(150);
1179 check_speed(200);
1180 check_speed(300);
1181 check_speed(600);
1182 check_speed(1200);
1183 check_speed(1800);
1184 check_speed(2400);
1185 check_speed(4800);
1186 check_speed(9600);
1187 check_speed(19200);
1188 check_speed(38400);
1189 /* Non-Posix values follow. They may be unsupported on some systems. */
1190 check_speed(57600);
1191 check_speed(115200);
1192#ifdef B230400
1193 check_speed(230400);
1194#endif
1195#ifdef B460800
1196 check_speed(460800);
1197#endif
1198#ifdef B500000
1199 check_speed(500000);
1200#endif
1201#ifdef B576000
1202 check_speed(576000);
1203#endif
1204#ifdef B921600
1205 check_speed(921600);
1206#endif
1207#ifdef B1000000
1208 check_speed(1000000);
1209#endif
1210#ifdef B1152000
1211 check_speed(1152000);
1212#endif
1213#ifdef B1500000
1214 check_speed(1500000);
1215#endif
1216#ifdef B2000000
1217 check_speed(2000000);
1218#endif
1219#ifdef B2500000
1220 check_speed(2500000);
1221#endif
1222#ifdef B3000000
1223 check_speed(3000000);
1224#endif
1225#ifdef B3500000
1226 check_speed(3500000);
1227#endif
1228#ifdef B4000000
1229 check_speed(4000000);
1230#endif
6f97dba0 1231 spd = B115200;
45eea13b 1232 } while (0);
6f97dba0
AL		 1233
1234 cfsetispeed(&tty, spd);
1235 cfsetospeed(&tty, spd);
1236
1237 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1238 |INLCR|IGNCR|ICRNL|IXON);
1239 tty.c_oflag |= OPOST;
1240 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1241 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1242 switch(data_bits) {
1243 default:
1244 case 8:
1245 tty.c_cflag |= CS8;
1246 break;
1247 case 7:
1248 tty.c_cflag |= CS7;
1249 break;
1250 case 6:
1251 tty.c_cflag |= CS6;
1252 break;
1253 case 5:
1254 tty.c_cflag |= CS5;
1255 break;
1256 }
1257 switch(parity) {
1258 default:
1259 case 'N':
1260 break;
1261 case 'E':
1262 tty.c_cflag |= PARENB;
1263 break;
1264 case 'O':
1265 tty.c_cflag |= PARENB | PARODD;
1266 break;
1267 }
1268 if (stop_bits == 2)
1269 tty.c_cflag |= CSTOPB;
1270
1271 tcsetattr (fd, TCSANOW, &tty);
1272}
1273
1274static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1275{
1276 FDCharDriver *s = chr->opaque;
1277
1278 switch(cmd) {
1279 case CHR_IOCTL_SERIAL_SET_PARAMS:
1280 {
1281 QEMUSerialSetParams *ssp = arg;
a29753f8
AL		 1282 tty_serial_init(g_io_channel_unix_get_fd(s->fd_in),
1283 ssp->speed, ssp->parity,
6f97dba0
AL		 1284 ssp->data_bits, ssp->stop_bits);
1285 }
1286 break;
1287 case CHR_IOCTL_SERIAL_SET_BREAK:
1288 {
1289 int enable = *(int *)arg;
a29753f8
AL		 1290 if (enable) {
1291 tcsendbreak(g_io_channel_unix_get_fd(s->fd_in), 1);
1292 }
6f97dba0
AL		 1293 }
1294 break;
1295 case CHR_IOCTL_SERIAL_GET_TIOCM:
1296 {
1297 int sarg = 0;
1298 int *targ = (int *)arg;
a29753f8 1299 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMGET, &sarg);
6f97dba0 1300 *targ = 0;
b4abdfa4 1301 if (sarg & TIOCM_CTS)
6f97dba0 1302 *targ |= CHR_TIOCM_CTS;
b4abdfa4 1303 if (sarg & TIOCM_CAR)
6f97dba0 1304 *targ |= CHR_TIOCM_CAR;
b4abdfa4 1305 if (sarg & TIOCM_DSR)
6f97dba0 1306 *targ |= CHR_TIOCM_DSR;
b4abdfa4 1307 if (sarg & TIOCM_RI)
6f97dba0 1308 *targ |= CHR_TIOCM_RI;
b4abdfa4 1309 if (sarg & TIOCM_DTR)
6f97dba0 1310 *targ |= CHR_TIOCM_DTR;
b4abdfa4 1311 if (sarg & TIOCM_RTS)
6f97dba0
AL		 1312 *targ |= CHR_TIOCM_RTS;
1313 }
1314 break;
1315 case CHR_IOCTL_SERIAL_SET_TIOCM:
1316 {
1317 int sarg = *(int *)arg;
1318 int targ = 0;
a29753f8 1319 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMGET, &targ);
b4abdfa4
AJ		 1320 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1321 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1322 if (sarg & CHR_TIOCM_CTS)
1323 targ |= TIOCM_CTS;
1324 if (sarg & CHR_TIOCM_CAR)
1325 targ |= TIOCM_CAR;
1326 if (sarg & CHR_TIOCM_DSR)
1327 targ |= TIOCM_DSR;
1328 if (sarg & CHR_TIOCM_RI)
1329 targ |= TIOCM_RI;
1330 if (sarg & CHR_TIOCM_DTR)
6f97dba0 1331 targ |= TIOCM_DTR;
b4abdfa4 1332 if (sarg & CHR_TIOCM_RTS)
6f97dba0 1333 targ |= TIOCM_RTS;
a29753f8 1334 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMSET, &targ);
6f97dba0
AL		 1335 }
1336 break;
1337 default:
1338 return -ENOTSUP;
1339 }
1340 return 0;
1341}
1342
4266a134
DA		 1343static void qemu_chr_close_tty(CharDriverState *chr)
1344{
1345 FDCharDriver *s = chr->opaque;
1346 int fd = -1;
1347
1348 if (s) {
a29753f8 1349 fd = g_io_channel_unix_get_fd(s->fd_in);
4266a134
DA		 1350 }
1351
1352 fd_chr_close(chr);
1353
1354 if (fd >= 0) {
1355 close(fd);
1356 }
1357}
1358
d59044ef
GH		 1359static CharDriverState *qemu_chr_open_tty_fd(int fd)
1360{
1361 CharDriverState *chr;
1362
1363 tty_serial_init(fd, 115200, 'N', 8, 1);
1364 chr = qemu_chr_open_fd(fd, fd);
1365 chr->chr_ioctl = tty_serial_ioctl;
1366 chr->chr_close = qemu_chr_close_tty;
1367 return chr;
1368}
1369
1f51470d 1370static CharDriverState *qemu_chr_open_tty(QemuOpts *opts)
6f97dba0 1371{
48b76496 1372 const char *filename = qemu_opt_get(opts, "path");
6f97dba0
AL		 1373 int fd;
1374
b181e047 1375 TFR(fd = qemu_open(filename, O_RDWR | O_NONBLOCK));
afc535ac 1376 if (fd < 0) {
1f51470d 1377 return NULL;
afc535ac 1378 }
d59044ef 1379 return qemu_chr_open_tty_fd(fd);
6f97dba0 1380}
6f97dba0
AL		 1381#endif /* __linux__ || __sun__ */
1382
1383#if defined(__linux__)
e551498e
GH		 1384
1385#define HAVE_CHARDEV_PARPORT 1
1386
6f97dba0
AL		 1387typedef struct {
1388 int fd;
1389 int mode;
1390} ParallelCharDriver;
1391
1392static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1393{
1394 if (s->mode != mode) {
1395 int m = mode;
1396 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1397 return 0;
1398 s->mode = mode;
1399 }
1400 return 1;
1401}
1402
1403static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1404{
1405 ParallelCharDriver *drv = chr->opaque;
1406 int fd = drv->fd;
1407 uint8_t b;
1408
1409 switch(cmd) {
1410 case CHR_IOCTL_PP_READ_DATA:
1411 if (ioctl(fd, PPRDATA, &b) < 0)
1412 return -ENOTSUP;
1413 *(uint8_t *)arg = b;
1414 break;
1415 case CHR_IOCTL_PP_WRITE_DATA:
1416 b = *(uint8_t *)arg;
1417 if (ioctl(fd, PPWDATA, &b) < 0)
1418 return -ENOTSUP;
1419 break;
1420 case CHR_IOCTL_PP_READ_CONTROL:
1421 if (ioctl(fd, PPRCONTROL, &b) < 0)
1422 return -ENOTSUP;
1423 /* Linux gives only the lowest bits, and no way to know data
1424 direction! For better compatibility set the fixed upper
1425 bits. */
1426 *(uint8_t *)arg = b | 0xc0;
1427 break;
1428 case CHR_IOCTL_PP_WRITE_CONTROL:
1429 b = *(uint8_t *)arg;
1430 if (ioctl(fd, PPWCONTROL, &b) < 0)
1431 return -ENOTSUP;
1432 break;
1433 case CHR_IOCTL_PP_READ_STATUS:
1434 if (ioctl(fd, PPRSTATUS, &b) < 0)
1435 return -ENOTSUP;
1436 *(uint8_t *)arg = b;
1437 break;
1438 case CHR_IOCTL_PP_DATA_DIR:
1439 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1440 return -ENOTSUP;
1441 break;
1442 case CHR_IOCTL_PP_EPP_READ_ADDR:
1443 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1444 struct ParallelIOArg *parg = arg;
1445 int n = read(fd, parg->buffer, parg->count);
1446 if (n != parg->count) {
1447 return -EIO;
1448 }
1449 }
1450 break;
1451 case CHR_IOCTL_PP_EPP_READ:
1452 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1453 struct ParallelIOArg *parg = arg;
1454 int n = read(fd, parg->buffer, parg->count);
1455 if (n != parg->count) {
1456 return -EIO;
1457 }
1458 }
1459 break;
1460 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1461 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1462 struct ParallelIOArg *parg = arg;
1463 int n = write(fd, parg->buffer, parg->count);
1464 if (n != parg->count) {
1465 return -EIO;
1466 }
1467 }
1468 break;
1469 case CHR_IOCTL_PP_EPP_WRITE:
1470 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1471 struct ParallelIOArg *parg = arg;
1472 int n = write(fd, parg->buffer, parg->count);
1473 if (n != parg->count) {
1474 return -EIO;
1475 }
1476 }
1477 break;
1478 default:
1479 return -ENOTSUP;
1480 }
1481 return 0;
1482}
1483
1484static void pp_close(CharDriverState *chr)
1485{
1486 ParallelCharDriver *drv = chr->opaque;
1487 int fd = drv->fd;
1488
1489 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1490 ioctl(fd, PPRELEASE);
1491 close(fd);
7267c094 1492 g_free(drv);
a425d23f 1493 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 1494}
1495
88a946d3 1496static CharDriverState *qemu_chr_open_pp_fd(int fd)
6f97dba0
AL		 1497{
1498 CharDriverState *chr;
1499 ParallelCharDriver *drv;
6f97dba0
AL		 1500
1501 if (ioctl(fd, PPCLAIM) < 0) {
1502 close(fd);
1f51470d 1503 return NULL;
6f97dba0
AL		 1504 }
1505
7267c094 1506 drv = g_malloc0(sizeof(ParallelCharDriver));
6f97dba0
AL		 1507 drv->fd = fd;
1508 drv->mode = IEEE1284_MODE_COMPAT;
1509
7267c094 1510 chr = g_malloc0(sizeof(CharDriverState));
6f97dba0
AL		 1511 chr->chr_write = null_chr_write;
1512 chr->chr_ioctl = pp_ioctl;
1513 chr->chr_close = pp_close;
1514 chr->opaque = drv;
1515
127338e6 1516 qemu_chr_generic_open(chr);
6f97dba0 1517
1f51470d 1518 return chr;
6f97dba0
AL		 1519}
1520#endif /* __linux__ */
1521
a167ba50 1522#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
e551498e
GH		 1523
1524#define HAVE_CHARDEV_PARPORT 1
1525
6972f935
BS		 1526static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1527{
e0efb993 1528 int fd = (int)(intptr_t)chr->opaque;
6972f935
BS		 1529 uint8_t b;
1530
1531 switch(cmd) {
1532 case CHR_IOCTL_PP_READ_DATA:
1533 if (ioctl(fd, PPIGDATA, &b) < 0)
1534 return -ENOTSUP;
1535 *(uint8_t *)arg = b;
1536 break;
1537 case CHR_IOCTL_PP_WRITE_DATA:
1538 b = *(uint8_t *)arg;
1539 if (ioctl(fd, PPISDATA, &b) < 0)
1540 return -ENOTSUP;
1541 break;
1542 case CHR_IOCTL_PP_READ_CONTROL:
1543 if (ioctl(fd, PPIGCTRL, &b) < 0)
1544 return -ENOTSUP;
1545 *(uint8_t *)arg = b;
1546 break;
1547 case CHR_IOCTL_PP_WRITE_CONTROL:
1548 b = *(uint8_t *)arg;
1549 if (ioctl(fd, PPISCTRL, &b) < 0)
1550 return -ENOTSUP;
1551 break;
1552 case CHR_IOCTL_PP_READ_STATUS:
1553 if (ioctl(fd, PPIGSTATUS, &b) < 0)
1554 return -ENOTSUP;
1555 *(uint8_t *)arg = b;
1556 break;
1557 default:
1558 return -ENOTSUP;
1559 }
1560 return 0;
1561}
1562
88a946d3 1563static CharDriverState *qemu_chr_open_pp_fd(int fd)
6972f935
BS		 1564{
1565 CharDriverState *chr;
6972f935 1566
7267c094 1567 chr = g_malloc0(sizeof(CharDriverState));
e0efb993 1568 chr->opaque = (void *)(intptr_t)fd;
6972f935
BS		 1569 chr->chr_write = null_chr_write;
1570 chr->chr_ioctl = pp_ioctl;
1f51470d 1571 return chr;
6972f935
BS		 1572}
1573#endif
1574
6f97dba0
AL		 1575#else /* _WIN32 */
1576
1577typedef struct {
1578 int max_size;
1579 HANDLE hcom, hrecv, hsend;
1580 OVERLAPPED orecv, osend;
1581 BOOL fpipe;
1582 DWORD len;
1583} WinCharState;
1584
db418a0a
FC		 1585typedef struct {
1586 HANDLE hStdIn;
1587 HANDLE hInputReadyEvent;
1588 HANDLE hInputDoneEvent;
1589 HANDLE hInputThread;
1590 uint8_t win_stdio_buf;
1591} WinStdioCharState;
1592
6f97dba0
AL		 1593#define NSENDBUF 2048
1594#define NRECVBUF 2048
1595#define MAXCONNECT 1
1596#define NTIMEOUT 5000
1597
1598static int win_chr_poll(void *opaque);
1599static int win_chr_pipe_poll(void *opaque);
1600
1601static void win_chr_close(CharDriverState *chr)
1602{
1603 WinCharState *s = chr->opaque;
1604
1605 if (s->hsend) {
1606 CloseHandle(s->hsend);
1607 s->hsend = NULL;
1608 }
1609 if (s->hrecv) {
1610 CloseHandle(s->hrecv);
1611 s->hrecv = NULL;
1612 }
1613 if (s->hcom) {
1614 CloseHandle(s->hcom);
1615 s->hcom = NULL;
1616 }
1617 if (s->fpipe)
1618 qemu_del_polling_cb(win_chr_pipe_poll, chr);
1619 else
1620 qemu_del_polling_cb(win_chr_poll, chr);
793cbfb5 1621
a425d23f 1622 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 1623}
1624
1625static int win_chr_init(CharDriverState *chr, const char *filename)
1626{
1627 WinCharState *s = chr->opaque;
1628 COMMCONFIG comcfg;
1629 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
1630 COMSTAT comstat;
1631 DWORD size;
1632 DWORD err;
1633
1634 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1635 if (!s->hsend) {
1636 fprintf(stderr, "Failed CreateEvent\n");
1637 goto fail;
1638 }
1639 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1640 if (!s->hrecv) {
1641 fprintf(stderr, "Failed CreateEvent\n");
1642 goto fail;
1643 }
1644
1645 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
1646 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
1647 if (s->hcom == INVALID_HANDLE_VALUE) {
1648 fprintf(stderr, "Failed CreateFile (%lu)\n", GetLastError());
1649 s->hcom = NULL;
1650 goto fail;
1651 }
1652
1653 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
1654 fprintf(stderr, "Failed SetupComm\n");
1655 goto fail;
1656 }
1657
1658 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
1659 size = sizeof(COMMCONFIG);
1660 GetDefaultCommConfig(filename, &comcfg, &size);
1661 comcfg.dcb.DCBlength = sizeof(DCB);
1662 CommConfigDialog(filename, NULL, &comcfg);
1663
1664 if (!SetCommState(s->hcom, &comcfg.dcb)) {
1665 fprintf(stderr, "Failed SetCommState\n");
1666 goto fail;
1667 }
1668
1669 if (!SetCommMask(s->hcom, EV_ERR)) {
1670 fprintf(stderr, "Failed SetCommMask\n");
1671 goto fail;
1672 }
1673
1674 cto.ReadIntervalTimeout = MAXDWORD;
1675 if (!SetCommTimeouts(s->hcom, &cto)) {
1676 fprintf(stderr, "Failed SetCommTimeouts\n");
1677 goto fail;
1678 }
1679
1680 if (!ClearCommError(s->hcom, &err, &comstat)) {
1681 fprintf(stderr, "Failed ClearCommError\n");
1682 goto fail;
1683 }
1684 qemu_add_polling_cb(win_chr_poll, chr);
1685 return 0;
1686
1687 fail:
1688 win_chr_close(chr);
1689 return -1;
1690}
1691
1692static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
1693{
1694 WinCharState *s = chr->opaque;
1695 DWORD len, ret, size, err;
1696
1697 len = len1;
1698 ZeroMemory(&s->osend, sizeof(s->osend));
1699 s->osend.hEvent = s->hsend;
1700 while (len > 0) {
1701 if (s->hsend)
1702 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
1703 else
1704 ret = WriteFile(s->hcom, buf, len, &size, NULL);
1705 if (!ret) {
1706 err = GetLastError();
1707 if (err == ERROR_IO_PENDING) {
1708 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
1709 if (ret) {
1710 buf += size;
1711 len -= size;
1712 } else {
1713 break;
1714 }
1715 } else {
1716 break;
1717 }
1718 } else {
1719 buf += size;
1720 len -= size;
1721 }
1722 }
1723 return len1 - len;
1724}
1725
1726static int win_chr_read_poll(CharDriverState *chr)
1727{
1728 WinCharState *s = chr->opaque;
1729
909cda12 1730 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 1731 return s->max_size;
1732}
1733
1734static void win_chr_readfile(CharDriverState *chr)
1735{
1736 WinCharState *s = chr->opaque;
1737 int ret, err;
9bd7854e 1738 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL		 1739 DWORD size;
1740
1741 ZeroMemory(&s->orecv, sizeof(s->orecv));
1742 s->orecv.hEvent = s->hrecv;
1743 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
1744 if (!ret) {
1745 err = GetLastError();
1746 if (err == ERROR_IO_PENDING) {
1747 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
1748 }
1749 }
1750
1751 if (size > 0) {
fa5efccb 1752 qemu_chr_be_write(chr, buf, size);
6f97dba0
AL		 1753 }
1754}
1755
1756static void win_chr_read(CharDriverState *chr)
1757{
1758 WinCharState *s = chr->opaque;
1759
1760 if (s->len > s->max_size)
1761 s->len = s->max_size;
1762 if (s->len == 0)
1763 return;
1764
1765 win_chr_readfile(chr);
1766}
1767
1768static int win_chr_poll(void *opaque)
1769{
1770 CharDriverState *chr = opaque;
1771 WinCharState *s = chr->opaque;
1772 COMSTAT status;
1773 DWORD comerr;
1774
1775 ClearCommError(s->hcom, &comerr, &status);
1776 if (status.cbInQue > 0) {
1777 s->len = status.cbInQue;
1778 win_chr_read_poll(chr);
1779 win_chr_read(chr);
1780 return 1;
1781 }
1782 return 0;
1783}
1784
d59044ef 1785static CharDriverState *qemu_chr_open_win_path(const char *filename)
6f97dba0
AL		 1786{
1787 CharDriverState *chr;
1788 WinCharState *s;
1789
7267c094
AL		 1790 chr = g_malloc0(sizeof(CharDriverState));
1791 s = g_malloc0(sizeof(WinCharState));
6f97dba0
AL		 1792 chr->opaque = s;
1793 chr->chr_write = win_chr_write;
1794 chr->chr_close = win_chr_close;
1795
1796 if (win_chr_init(chr, filename) < 0) {
2e02e18b
SW		 1797 g_free(s);
1798 g_free(chr);
1f51470d 1799 return NULL;
6f97dba0 1800 }
127338e6 1801 qemu_chr_generic_open(chr);
1f51470d 1802 return chr;
6f97dba0
AL		 1803}
1804
d59044ef
GH		 1805static CharDriverState *qemu_chr_open_win(QemuOpts *opts)
1806{
1807 return qemu_chr_open_win_path(qemu_opt_get(opts, "path"));
1808}
1809
6f97dba0
AL		 1810static int win_chr_pipe_poll(void *opaque)
1811{
1812 CharDriverState *chr = opaque;
1813 WinCharState *s = chr->opaque;
1814 DWORD size;
1815
1816 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
1817 if (size > 0) {
1818 s->len = size;
1819 win_chr_read_poll(chr);
1820 win_chr_read(chr);
1821 return 1;
1822 }
1823 return 0;
1824}
1825
1826static int win_chr_pipe_init(CharDriverState *chr, const char *filename)
1827{
1828 WinCharState *s = chr->opaque;
1829 OVERLAPPED ov;
1830 int ret;
1831 DWORD size;
1832 char openname[256];
1833
1834 s->fpipe = TRUE;
1835
1836 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1837 if (!s->hsend) {
1838 fprintf(stderr, "Failed CreateEvent\n");
1839 goto fail;
1840 }
1841 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1842 if (!s->hrecv) {
1843 fprintf(stderr, "Failed CreateEvent\n");
1844 goto fail;
1845 }
1846
1847 snprintf(openname, sizeof(openname), "\\\\.\\pipe\\%s", filename);
1848 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
1849 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
1850 PIPE_WAIT,
1851 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
1852 if (s->hcom == INVALID_HANDLE_VALUE) {
1853 fprintf(stderr, "Failed CreateNamedPipe (%lu)\n", GetLastError());
1854 s->hcom = NULL;
1855 goto fail;
1856 }
1857
1858 ZeroMemory(&ov, sizeof(ov));
1859 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
1860 ret = ConnectNamedPipe(s->hcom, &ov);
1861 if (ret) {
1862 fprintf(stderr, "Failed ConnectNamedPipe\n");
1863 goto fail;
1864 }
1865
1866 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
1867 if (!ret) {
1868 fprintf(stderr, "Failed GetOverlappedResult\n");
1869 if (ov.hEvent) {
1870 CloseHandle(ov.hEvent);
1871 ov.hEvent = NULL;
1872 }
1873 goto fail;
1874 }
1875
1876 if (ov.hEvent) {
1877 CloseHandle(ov.hEvent);
1878 ov.hEvent = NULL;
1879 }
1880 qemu_add_polling_cb(win_chr_pipe_poll, chr);
1881 return 0;
1882
1883 fail:
1884 win_chr_close(chr);
1885 return -1;
1886}
1887
1888
1f51470d 1889static CharDriverState *qemu_chr_open_win_pipe(QemuOpts *opts)
6f97dba0 1890{
7d31544f 1891 const char *filename = qemu_opt_get(opts, "path");
6f97dba0
AL		 1892 CharDriverState *chr;
1893 WinCharState *s;
1894
7267c094
AL		 1895 chr = g_malloc0(sizeof(CharDriverState));
1896 s = g_malloc0(sizeof(WinCharState));
6f97dba0
AL		 1897 chr->opaque = s;
1898 chr->chr_write = win_chr_write;
1899 chr->chr_close = win_chr_close;
1900
1901 if (win_chr_pipe_init(chr, filename) < 0) {
2e02e18b
SW		 1902 g_free(s);
1903 g_free(chr);
1f51470d 1904 return NULL;
6f97dba0 1905 }
127338e6 1906 qemu_chr_generic_open(chr);
1f51470d 1907 return chr;
6f97dba0
AL		 1908}
1909
1f51470d 1910static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out)
6f97dba0
AL		 1911{
1912 CharDriverState *chr;
1913 WinCharState *s;
1914
7267c094
AL		 1915 chr = g_malloc0(sizeof(CharDriverState));
1916 s = g_malloc0(sizeof(WinCharState));
6f97dba0
AL		 1917 s->hcom = fd_out;
1918 chr->opaque = s;
1919 chr->chr_write = win_chr_write;
127338e6 1920 qemu_chr_generic_open(chr);
1f51470d 1921 return chr;
6f97dba0
AL		 1922}
1923
1f51470d 1924static CharDriverState *qemu_chr_open_win_con(QemuOpts *opts)
6f97dba0 1925{
1f51470d 1926 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE));
6f97dba0
AL		 1927}
1928
1f51470d 1929static CharDriverState *qemu_chr_open_win_file_out(QemuOpts *opts)
6f97dba0 1930{
7d31544f 1931 const char *file_out = qemu_opt_get(opts, "path");
6f97dba0
AL		 1932 HANDLE fd_out;
1933
1934 fd_out = CreateFile(file_out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
1935 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
a89dd6c3 1936 if (fd_out == INVALID_HANDLE_VALUE) {
1f51470d 1937 return NULL;
a89dd6c3 1938 }
6f97dba0 1939
1f51470d 1940 return qemu_chr_open_win_file(fd_out);
6f97dba0 1941}
db418a0a
FC		 1942
1943static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
1944{
1945 HANDLE hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
1946 DWORD dwSize;
1947 int len1;
1948
1949 len1 = len;
1950
1951 while (len1 > 0) {
1952 if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
1953 break;
1954 }
1955 buf += dwSize;
1956 len1 -= dwSize;
1957 }
1958
1959 return len - len1;
1960}
1961
1962static void win_stdio_wait_func(void *opaque)
1963{
1964 CharDriverState *chr = opaque;
1965 WinStdioCharState *stdio = chr->opaque;
1966 INPUT_RECORD buf[4];
1967 int ret;
1968 DWORD dwSize;
1969 int i;
1970
1971 ret = ReadConsoleInput(stdio->hStdIn, buf, sizeof(buf) / sizeof(*buf),
1972 &dwSize);
1973
1974 if (!ret) {
1975 /* Avoid error storm */
1976 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
1977 return;
1978 }
1979
1980 for (i = 0; i < dwSize; i++) {
1981 KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
1982
1983 if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
1984 int j;
1985 if (kev->uChar.AsciiChar != 0) {
1986 for (j = 0; j < kev->wRepeatCount; j++) {
1987 if (qemu_chr_be_can_write(chr)) {
1988 uint8_t c = kev->uChar.AsciiChar;
1989 qemu_chr_be_write(chr, &c, 1);
1990 }
1991 }
1992 }
1993 }
1994 }
1995}
1996
1997static DWORD WINAPI win_stdio_thread(LPVOID param)
1998{
1999 CharDriverState *chr = param;
2000 WinStdioCharState *stdio = chr->opaque;
2001 int ret;
2002 DWORD dwSize;
2003
2004 while (1) {
2005
2006 /* Wait for one byte */
2007 ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
2008
2009 /* Exit in case of error, continue if nothing read */
2010 if (!ret) {
2011 break;
2012 }
2013 if (!dwSize) {
2014 continue;
2015 }
2016
2017 /* Some terminal emulator returns \r\n for Enter, just pass \n */
2018 if (stdio->win_stdio_buf == '\r') {
2019 continue;
2020 }
2021
2022 /* Signal the main thread and wait until the byte was eaten */
2023 if (!SetEvent(stdio->hInputReadyEvent)) {
2024 break;
2025 }
2026 if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
2027 != WAIT_OBJECT_0) {
2028 break;
2029 }
2030 }
2031
2032 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2033 return 0;
2034}
2035
2036static void win_stdio_thread_wait_func(void *opaque)
2037{
2038 CharDriverState *chr = opaque;
2039 WinStdioCharState *stdio = chr->opaque;
2040
2041 if (qemu_chr_be_can_write(chr)) {
2042 qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
2043 }
2044
2045 SetEvent(stdio->hInputDoneEvent);
2046}
2047
2048static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
2049{
2050 WinStdioCharState *stdio = chr->opaque;
2051 DWORD dwMode = 0;
2052
2053 GetConsoleMode(stdio->hStdIn, &dwMode);
2054
2055 if (echo) {
2056 SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
2057 } else {
2058 SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
2059 }
2060}
2061
2062static void win_stdio_close(CharDriverState *chr)
2063{
2064 WinStdioCharState *stdio = chr->opaque;
2065
2066 if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
2067 CloseHandle(stdio->hInputReadyEvent);
2068 }
2069 if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
2070 CloseHandle(stdio->hInputDoneEvent);
2071 }
2072 if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
2073 TerminateThread(stdio->hInputThread, 0);
2074 }
2075
2076 g_free(chr->opaque);
2077 g_free(chr);
db418a0a
FC		 2078}
2079
1f51470d 2080static CharDriverState *qemu_chr_open_win_stdio(QemuOpts *opts)
db418a0a
FC		 2081{
2082 CharDriverState *chr;
2083 WinStdioCharState *stdio;
2084 DWORD dwMode;
2085 int is_console = 0;
2086
db418a0a
FC		 2087 chr = g_malloc0(sizeof(CharDriverState));
2088 stdio = g_malloc0(sizeof(WinStdioCharState));
2089
2090 stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
2091 if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
2092 fprintf(stderr, "cannot open stdio: invalid handle\n");
2093 exit(1);
2094 }
2095
2096 is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
2097
2098 chr->opaque = stdio;
2099 chr->chr_write = win_stdio_write;
2100 chr->chr_close = win_stdio_close;
2101
ed7a1540
AL		 2102 if (is_console) {
2103 if (qemu_add_wait_object(stdio->hStdIn,
2104 win_stdio_wait_func, chr)) {
2105 fprintf(stderr, "qemu_add_wait_object: failed\n");
2106 }
2107 } else {
2108 DWORD dwId;
2109
2110 stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2111 stdio->hInputDoneEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2112 stdio->hInputThread = CreateThread(NULL, 0, win_stdio_thread,
2113 chr, 0, &dwId);
2114
2115 if (stdio->hInputThread == INVALID_HANDLE_VALUE
2116 || stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
2117 || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
2118 fprintf(stderr, "cannot create stdio thread or event\n");
2119 exit(1);
2120 }
2121 if (qemu_add_wait_object(stdio->hInputReadyEvent,
2122 win_stdio_thread_wait_func, chr)) {
2123 fprintf(stderr, "qemu_add_wait_object: failed\n");
db418a0a
FC		 2124 }
2125 }
2126
2127 dwMode |= ENABLE_LINE_INPUT;
2128
ed7a1540 2129 if (is_console) {
db418a0a
FC		 2130 /* set the terminal in raw mode */
2131 /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2132 dwMode |= ENABLE_PROCESSED_INPUT;
2133 }
2134
2135 SetConsoleMode(stdio->hStdIn, dwMode);
2136
2137 chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2138 qemu_chr_fe_set_echo(chr, false);
2139
1f51470d 2140 return chr;
db418a0a 2141}
6f97dba0
AL		 2142#endif /* !_WIN32 */
2143
2144/***********************************************************/
2145/* UDP Net console */
2146
2147typedef struct {
2148 int fd;
76a9644b
AL		 2149 GIOChannel *chan;
2150 guint tag;
9bd7854e 2151 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL		 2152 int bufcnt;
2153 int bufptr;
2154 int max_size;
2155} NetCharDriver;
2156
2157static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2158{
2159 NetCharDriver *s = chr->opaque;
76a9644b
AL		 2160 gsize bytes_written;
2161 GIOStatus status;
2162
2163 status = g_io_channel_write_chars(s->chan, (const gchar *)buf, len, &bytes_written, NULL);
2164 if (status == G_IO_STATUS_EOF) {
2165 return 0;
2166 } else if (status != G_IO_STATUS_NORMAL) {
2167 return -1;
2168 }
6f97dba0 2169
76a9644b 2170 return bytes_written;
6f97dba0
AL		 2171}
2172
2173static int udp_chr_read_poll(void *opaque)
2174{
2175 CharDriverState *chr = opaque;
2176 NetCharDriver *s = chr->opaque;
2177
909cda12 2178 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 2179
2180 /* If there were any stray characters in the queue process them
2181 * first
2182 */
2183 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
fa5efccb 2184 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
6f97dba0 2185 s->bufptr++;
909cda12 2186 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 2187 }
2188 return s->max_size;
2189}
2190
76a9644b 2191static gboolean udp_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL		 2192{
2193 CharDriverState *chr = opaque;
2194 NetCharDriver *s = chr->opaque;
76a9644b
AL		 2195 gsize bytes_read = 0;
2196 GIOStatus status;
6f97dba0
AL		 2197
2198 if (s->max_size == 0)
76a9644b
AL		 2199 return FALSE;
2200 status = g_io_channel_read_chars(s->chan, (gchar *)s->buf, sizeof(s->buf),
2201 &bytes_read, NULL);
2202 s->bufcnt = bytes_read;
6f97dba0 2203 s->bufptr = s->bufcnt;
76a9644b
AL		 2204 if (status != G_IO_STATUS_NORMAL) {
2205 return FALSE;
2206 }
6f97dba0
AL		 2207
2208 s->bufptr = 0;
2209 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
fa5efccb 2210 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
6f97dba0 2211 s->bufptr++;
909cda12 2212 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0 2213 }
76a9644b
AL		 2214
2215 return TRUE;
6f97dba0
AL		 2216}
2217
2218static void udp_chr_update_read_handler(CharDriverState *chr)
2219{
2220 NetCharDriver *s = chr->opaque;
2221
76a9644b
AL		 2222 if (s->tag) {
2223 g_source_remove(s->tag);
2224 s->tag = 0;
2225 }
2226
2227 if (s->chan) {
2228 s->tag = io_add_watch_poll(s->chan, udp_chr_read_poll, udp_chr_read, chr);
6f97dba0
AL		 2229 }
2230}
2231
819f56b7
AL		 2232static void udp_chr_close(CharDriverState *chr)
2233{
2234 NetCharDriver *s = chr->opaque;
76a9644b
AL		 2235 if (s->tag) {
2236 g_source_remove(s->tag);
2237 }
2238 if (s->chan) {
2239 g_io_channel_unref(s->chan);
819f56b7
AL		 2240 closesocket(s->fd);
2241 }
7267c094 2242 g_free(s);
a425d23f 2243 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
819f56b7
AL		 2244}
2245
1f51470d 2246static CharDriverState *qemu_chr_open_udp(QemuOpts *opts)
6f97dba0
AL		 2247{
2248 CharDriverState *chr = NULL;
2249 NetCharDriver *s = NULL;
87d5f24f 2250 Error *local_err = NULL;
6f97dba0 2251 int fd = -1;
6f97dba0 2252
7267c094
AL		 2253 chr = g_malloc0(sizeof(CharDriverState));
2254 s = g_malloc0(sizeof(NetCharDriver));
6f97dba0 2255
87d5f24f 2256 fd = inet_dgram_opts(opts, &local_err);
6f97dba0 2257 if (fd < 0) {
6f97dba0
AL		 2258 goto return_err;
2259 }
2260
2261 s->fd = fd;
76a9644b 2262 s->chan = io_channel_from_socket(s->fd);
6f97dba0
AL		 2263 s->bufcnt = 0;
2264 s->bufptr = 0;
2265 chr->opaque = s;
2266 chr->chr_write = udp_chr_write;
2267 chr->chr_update_read_handler = udp_chr_update_read_handler;
819f56b7 2268 chr->chr_close = udp_chr_close;
1f51470d 2269 return chr;
6f97dba0
AL		 2270
2271return_err:
87d5f24f
PB		 2272 if (local_err) {
2273 qerror_report_err(local_err);
2274 error_free(local_err);
2275 }
7267c094
AL		 2276 g_free(chr);
2277 g_free(s);
6e1db57b 2278 if (fd >= 0) {
6f97dba0 2279 closesocket(fd);
6e1db57b 2280 }
1f51470d 2281 return NULL;
6f97dba0
AL		 2282}
2283
2284/***********************************************************/
2285/* TCP Net console */
2286
2287typedef struct {
2288 int fd, listen_fd;
2289 int connected;
2290 int max_size;
2291 int do_telnetopt;
2292 int do_nodelay;
2293 int is_unix;
7d174059 2294 int msgfd;
6f97dba0
AL		 2295} TCPCharDriver;
2296
2297static void tcp_chr_accept(void *opaque);
2298
2299static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2300{
2301 TCPCharDriver *s = chr->opaque;
2302 if (s->connected) {
2303 return send_all(s->fd, buf, len);
455aa1e0 2304 } else {
6db0fdce 2305 /* XXX: indicate an error ? */
455aa1e0 2306 return len;
6f97dba0
AL		 2307 }
2308}
2309
2310static int tcp_chr_read_poll(void *opaque)
2311{
2312 CharDriverState *chr = opaque;
2313 TCPCharDriver *s = chr->opaque;
2314 if (!s->connected)
2315 return 0;
909cda12 2316 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 2317 return s->max_size;
2318}
2319
2320#define IAC 255
2321#define IAC_BREAK 243
2322static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2323 TCPCharDriver *s,
2324 uint8_t *buf, int *size)
2325{
2326 /* Handle any telnet client's basic IAC options to satisfy char by
2327 * char mode with no echo. All IAC options will be removed from
2328 * the buf and the do_telnetopt variable will be used to track the
2329 * state of the width of the IAC information.
2330 *
2331 * IAC commands come in sets of 3 bytes with the exception of the
2332 * "IAC BREAK" command and the double IAC.
2333 */
2334
2335 int i;
2336 int j = 0;
2337
2338 for (i = 0; i < *size; i++) {
2339 if (s->do_telnetopt > 1) {
2340 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2341 /* Double IAC means send an IAC */
2342 if (j != i)
2343 buf[j] = buf[i];
2344 j++;
2345 s->do_telnetopt = 1;
2346 } else {
2347 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2348 /* Handle IAC break commands by sending a serial break */
a425d23f 2349 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
6f97dba0
AL		 2350 s->do_telnetopt++;
2351 }
2352 s->do_telnetopt++;
2353 }
2354 if (s->do_telnetopt >= 4) {
2355 s->do_telnetopt = 1;
2356 }
2357 } else {
2358 if ((unsigned char)buf[i] == IAC) {
2359 s->do_telnetopt = 2;
2360 } else {
2361 if (j != i)
2362 buf[j] = buf[i];
2363 j++;
2364 }
2365 }
2366 }
2367 *size = j;
2368}
2369
7d174059
MM		 2370static int tcp_get_msgfd(CharDriverState *chr)
2371{
2372 TCPCharDriver *s = chr->opaque;
e53f27b9
PB		 2373 int fd = s->msgfd;
2374 s->msgfd = -1;
2375 return fd;
7d174059
MM		 2376}
2377
73bcc2ac 2378#ifndef _WIN32
7d174059
MM		 2379static void unix_process_msgfd(CharDriverState *chr, struct msghdr *msg)
2380{
2381 TCPCharDriver *s = chr->opaque;
2382 struct cmsghdr *cmsg;
2383
2384 for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) {
2385 int fd;
2386
2387 if (cmsg->cmsg_len != CMSG_LEN(sizeof(int)) ||
2388 cmsg->cmsg_level != SOL_SOCKET ||
2389 cmsg->cmsg_type != SCM_RIGHTS)
2390 continue;
2391
2392 fd = *((int *)CMSG_DATA(cmsg));
2393 if (fd < 0)
2394 continue;
2395
06138651
CB		 2396#ifndef MSG_CMSG_CLOEXEC
2397 qemu_set_cloexec(fd);
2398#endif
7d174059
MM		 2399 if (s->msgfd != -1)
2400 close(s->msgfd);
2401 s->msgfd = fd;
2402 }
2403}
2404
9977c894
MM		 2405static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2406{
2407 TCPCharDriver *s = chr->opaque;
7cba04f6 2408 struct msghdr msg = { NULL, };
9977c894 2409 struct iovec iov[1];
7d174059
MM		 2410 union {
2411 struct cmsghdr cmsg;
2412 char control[CMSG_SPACE(sizeof(int))];
2413 } msg_control;
06138651 2414 int flags = 0;
7d174059 2415 ssize_t ret;
9977c894
MM		 2416
2417 iov[0].iov_base = buf;
2418 iov[0].iov_len = len;
2419
2420 msg.msg_iov = iov;
2421 msg.msg_iovlen = 1;
7d174059
MM		 2422 msg.msg_control = &msg_control;
2423 msg.msg_controllen = sizeof(msg_control);
2424
06138651
CB		 2425#ifdef MSG_CMSG_CLOEXEC
2426 flags |= MSG_CMSG_CLOEXEC;
2427#endif
2428 ret = recvmsg(s->fd, &msg, flags);
2429 if (ret > 0 && s->is_unix) {
7d174059 2430 unix_process_msgfd(chr, &msg);
06138651 2431 }
9977c894 2432
7d174059 2433 return ret;
9977c894
MM		 2434}
2435#else
2436static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2437{
2438 TCPCharDriver *s = chr->opaque;
00aa0040 2439 return qemu_recv(s->fd, buf, len, 0);
9977c894
MM		 2440}
2441#endif
2442
6f97dba0
AL		 2443static void tcp_chr_read(void *opaque)
2444{
2445 CharDriverState *chr = opaque;
2446 TCPCharDriver *s = chr->opaque;
9bd7854e 2447 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL		 2448 int len, size;
2449
2450 if (!s->connected || s->max_size <= 0)
2451 return;
2452 len = sizeof(buf);
2453 if (len > s->max_size)
2454 len = s->max_size;
9977c894 2455 size = tcp_chr_recv(chr, (void *)buf, len);
6f97dba0
AL		 2456 if (size == 0) {
2457 /* connection closed */
2458 s->connected = 0;
2459 if (s->listen_fd >= 0) {
069c159e 2460 qemu_set_fd_handler2(s->listen_fd, NULL, tcp_chr_accept, NULL, chr);
6f97dba0 2461 }
069c159e 2462 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
6f97dba0
AL		 2463 closesocket(s->fd);
2464 s->fd = -1;
a425d23f 2465 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 2466 } else if (size > 0) {
2467 if (s->do_telnetopt)
2468 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
2469 if (size > 0)
fa5efccb 2470 qemu_chr_be_write(chr, buf, size);
6f97dba0
AL		 2471 }
2472}
2473
68c18d1c
BS		 2474#ifndef _WIN32
2475CharDriverState *qemu_chr_open_eventfd(int eventfd)
2476{
6cbf4c8c 2477 return qemu_chr_open_fd(eventfd, eventfd);
6cbf4c8c 2478}
68c18d1c 2479#endif
6cbf4c8c 2480
6f97dba0
AL		 2481static void tcp_chr_connect(void *opaque)
2482{
2483 CharDriverState *chr = opaque;
2484 TCPCharDriver *s = chr->opaque;
2485
2486 s->connected = 1;
bbdd2ad0
DG		 2487 if (s->fd >= 0) {
2488 qemu_set_fd_handler2(s->fd, tcp_chr_read_poll,
2489 tcp_chr_read, NULL, chr);
2490 }
127338e6 2491 qemu_chr_generic_open(chr);
6f97dba0
AL		 2492}
2493
2494#define IACSET(x,a,b,c) x[0] = a; x[1] = b; x[2] = c;
2495static void tcp_chr_telnet_init(int fd)
2496{
2497 char buf[3];
2498 /* Send the telnet negotion to put telnet in binary, no echo, single char mode */
2499 IACSET(buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
2500 send(fd, (char *)buf, 3, 0);
2501 IACSET(buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
2502 send(fd, (char *)buf, 3, 0);
2503 IACSET(buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
2504 send(fd, (char *)buf, 3, 0);
2505 IACSET(buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
2506 send(fd, (char *)buf, 3, 0);
2507}
2508
13661089
DB		 2509static int tcp_chr_add_client(CharDriverState *chr, int fd)
2510{
2511 TCPCharDriver *s = chr->opaque;
2512 if (s->fd != -1)
2513 return -1;
2514
2515 socket_set_nonblock(fd);
2516 if (s->do_nodelay)
2517 socket_set_nodelay(fd);
2518 s->fd = fd;
069c159e 2519 qemu_set_fd_handler2(s->listen_fd, NULL, NULL, NULL, NULL);
13661089
DB		 2520 tcp_chr_connect(chr);
2521
2522 return 0;
2523}
2524
6f97dba0
AL		 2525static void tcp_chr_accept(void *opaque)
2526{
2527 CharDriverState *chr = opaque;
2528 TCPCharDriver *s = chr->opaque;
2529 struct sockaddr_in saddr;
2530#ifndef _WIN32
2531 struct sockaddr_un uaddr;
2532#endif
2533 struct sockaddr *addr;
2534 socklen_t len;
2535 int fd;
2536
2537 for(;;) {
2538#ifndef _WIN32
2539 if (s->is_unix) {
2540 len = sizeof(uaddr);
2541 addr = (struct sockaddr *)&uaddr;
2542 } else
2543#endif
2544 {
2545 len = sizeof(saddr);
2546 addr = (struct sockaddr *)&saddr;
2547 }
40ff6d7e 2548 fd = qemu_accept(s->listen_fd, addr, &len);
6f97dba0
AL		 2549 if (fd < 0 && errno != EINTR) {
2550 return;
2551 } else if (fd >= 0) {
2552 if (s->do_telnetopt)
2553 tcp_chr_telnet_init(fd);
2554 break;
2555 }
2556 }
13661089
DB		 2557 if (tcp_chr_add_client(chr, fd) < 0)
2558 close(fd);
6f97dba0
AL		 2559}
2560
2561static void tcp_chr_close(CharDriverState *chr)
2562{
2563 TCPCharDriver *s = chr->opaque;
819f56b7 2564 if (s->fd >= 0) {
069c159e 2565 qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
6f97dba0 2566 closesocket(s->fd);
819f56b7
AL		 2567 }
2568 if (s->listen_fd >= 0) {
069c159e 2569 qemu_set_fd_handler2(s->listen_fd, NULL, NULL, NULL, NULL);
6f97dba0 2570 closesocket(s->listen_fd);
819f56b7 2571 }
7267c094 2572 g_free(s);
a425d23f 2573 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 2574}
2575
f6bd5d6e
GH		 2576static CharDriverState *qemu_chr_open_socket_fd(int fd, bool do_nodelay,
2577 bool is_listen, bool is_telnet,
2578 bool is_waitconnect,
2579 Error **errp)
6f97dba0
AL		 2580{
2581 CharDriverState *chr = NULL;
2582 TCPCharDriver *s = NULL;
f6bd5d6e
GH		 2583 char host[NI_MAXHOST], serv[NI_MAXSERV];
2584 const char *left = "", *right = "";
2585 struct sockaddr_storage ss;
2586 socklen_t ss_len = sizeof(ss);
2587
2588 memset(&ss, 0, ss_len);
2589 if (getsockname(fd, (struct sockaddr *) &ss, &ss_len) != 0) {
2590 error_setg(errp, "getsockname: %s", strerror(errno));
2591 return NULL;
2592 }
2593
2594 chr = g_malloc0(sizeof(CharDriverState));
2595 s = g_malloc0(sizeof(TCPCharDriver));
2596
2597 s->connected = 0;
2598 s->fd = -1;
2599 s->listen_fd = -1;
2600 s->msgfd = -1;
2601
2602 chr->filename = g_malloc(256);
2603 switch (ss.ss_family) {
2604#ifndef _WIN32
2605 case AF_UNIX:
2606 s->is_unix = 1;
2607 snprintf(chr->filename, 256, "unix:%s%s",
2608 ((struct sockaddr_un *)(&ss))->sun_path,
2609 is_listen ? ",server" : "");
2610 break;
2611#endif
2612 case AF_INET6:
2613 left = "[";
2614 right = "]";
2615 /* fall through */
2616 case AF_INET:
2617 s->do_nodelay = do_nodelay;
2618 getnameinfo((struct sockaddr *) &ss, ss_len, host, sizeof(host),
2619 serv, sizeof(serv), NI_NUMERICHOST | NI_NUMERICSERV);
2620 snprintf(chr->filename, 256, "%s:%s:%s%s%s%s",
2621 is_telnet ? "telnet" : "tcp",
2622 left, host, right, serv,
2623 is_listen ? ",server" : "");
2624 break;
2625 }
2626
2627 chr->opaque = s;
2628 chr->chr_write = tcp_chr_write;
2629 chr->chr_close = tcp_chr_close;
2630 chr->get_msgfd = tcp_get_msgfd;
2631 chr->chr_add_client = tcp_chr_add_client;
2632
2633 if (is_listen) {
2634 s->listen_fd = fd;
2635 qemu_set_fd_handler2(s->listen_fd, NULL, tcp_chr_accept, NULL, chr);
2636 if (is_telnet) {
2637 s->do_telnetopt = 1;
2638 }
2639 } else {
2640 s->connected = 1;
2641 s->fd = fd;
2642 socket_set_nodelay(fd);
2643 tcp_chr_connect(chr);
2644 }
2645
2646 if (is_listen && is_waitconnect) {
2647 printf("QEMU waiting for connection on: %s\n",
2648 chr->filename);
2649 tcp_chr_accept(chr);
2650 socket_set_nonblock(s->listen_fd);
2651 }
2652 return chr;
2653}
2654
2655static CharDriverState *qemu_chr_open_socket(QemuOpts *opts)
2656{
2657 CharDriverState *chr = NULL;
87d5f24f 2658 Error *local_err = NULL;
aeb2c47a
GH		 2659 int fd = -1;
2660 int is_listen;
2661 int is_waitconnect;
2662 int do_nodelay;
2663 int is_unix;
2664 int is_telnet;
2665
2666 is_listen = qemu_opt_get_bool(opts, "server", 0);
2667 is_waitconnect = qemu_opt_get_bool(opts, "wait", 1);
2668 is_telnet = qemu_opt_get_bool(opts, "telnet", 0);
2669 do_nodelay = !qemu_opt_get_bool(opts, "delay", 1);
2670 is_unix = qemu_opt_get(opts, "path") != NULL;
6f97dba0
AL		 2671 if (!is_listen)
2672 is_waitconnect = 0;
2673
f07b6003
AL		 2674 if (is_unix) {
2675 if (is_listen) {
87d5f24f 2676 fd = unix_listen_opts(opts, &local_err);
f07b6003 2677 } else {
87d5f24f 2678 fd = unix_connect_opts(opts, &local_err, NULL, NULL);
f07b6003
AL		 2679 }
2680 } else {
2681 if (is_listen) {
87d5f24f 2682 fd = inet_listen_opts(opts, 0, &local_err);
f07b6003 2683 } else {
87d5f24f 2684 fd = inet_connect_opts(opts, &local_err, NULL, NULL);
f07b6003
AL		 2685 }
2686 }
a89dd6c3 2687 if (fd < 0) {
6f97dba0 2688 goto fail;
a89dd6c3 2689 }
6f97dba0
AL		 2690
2691 if (!is_waitconnect)
2692 socket_set_nonblock(fd);
2693
f6bd5d6e
GH		 2694 chr = qemu_chr_open_socket_fd(fd, do_nodelay, is_listen, is_telnet,
2695 is_waitconnect, &local_err);
2696 if (error_is_set(&local_err)) {
2697 goto fail;
6f97dba0 2698 }
1f51470d 2699 return chr;
aeb2c47a 2700
f6bd5d6e 2701
6f97dba0 2702 fail:
87d5f24f
PB		 2703 if (local_err) {
2704 qerror_report_err(local_err);
2705 error_free(local_err);
2706 }
2707 if (fd >= 0) {
6f97dba0 2708 closesocket(fd);
87d5f24f 2709 }
f6bd5d6e
GH		 2710 if (chr) {
2711 g_free(chr->opaque);
2712 g_free(chr);
2713 }
1f51470d 2714 return NULL;
6f97dba0
AL		 2715}
2716
999bd67c
LC		 2717/***********************************************************/
2718/* Memory chardev */
2719typedef struct {
2720 size_t outbuf_size;
2721 size_t outbuf_capacity;
2722 uint8_t *outbuf;
2723} MemoryDriver;
2724
2725static int mem_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2726{
2727 MemoryDriver *d = chr->opaque;
2728
2729 /* TODO: the QString implementation has the same code, we should
2730 * introduce a generic way to do this in cutils.c */
2731 if (d->outbuf_capacity < d->outbuf_size + len) {
2732 /* grow outbuf */
2733 d->outbuf_capacity += len;
2734 d->outbuf_capacity *= 2;
7267c094 2735 d->outbuf = g_realloc(d->outbuf, d->outbuf_capacity);
999bd67c
LC		 2736 }
2737
2738 memcpy(d->outbuf + d->outbuf_size, buf, len);
2739 d->outbuf_size += len;
2740
2741 return len;
2742}
2743
2744void qemu_chr_init_mem(CharDriverState *chr)
2745{
2746 MemoryDriver *d;
2747
7267c094 2748 d = g_malloc(sizeof(*d));
999bd67c
LC		 2749 d->outbuf_size = 0;
2750 d->outbuf_capacity = 4096;
7267c094 2751 d->outbuf = g_malloc0(d->outbuf_capacity);
999bd67c
LC		 2752
2753 memset(chr, 0, sizeof(*chr));
2754 chr->opaque = d;
2755 chr->chr_write = mem_chr_write;
2756}
2757
2758QString *qemu_chr_mem_to_qs(CharDriverState *chr)
2759{
2760 MemoryDriver *d = chr->opaque;
2761 return qstring_from_substr((char *) d->outbuf, 0, d->outbuf_size - 1);
2762}
2763
70f24fb6 2764/* NOTE: this driver can not be closed with qemu_chr_delete()! */
999bd67c
LC		 2765void qemu_chr_close_mem(CharDriverState *chr)
2766{
2767 MemoryDriver *d = chr->opaque;
2768
7267c094
AL		 2769 g_free(d->outbuf);
2770 g_free(chr->opaque);
999bd67c
LC		 2771 chr->opaque = NULL;
2772 chr->chr_write = NULL;
2773}
2774
2775size_t qemu_chr_mem_osize(const CharDriverState *chr)
2776{
2777 const MemoryDriver *d = chr->opaque;
2778 return d->outbuf_size;
2779}
2780
51767e7c 2781/*********************************************************/
3949e594 2782/* Ring buffer chardev */
51767e7c
LL		 2783
2784typedef struct {
2785 size_t size;
2786 size_t prod;
2787 size_t cons;
2788 uint8_t *cbuf;
3949e594 2789} RingBufCharDriver;
51767e7c 2790
3949e594 2791static size_t ringbuf_count(const CharDriverState *chr)
51767e7c 2792{
3949e594 2793 const RingBufCharDriver *d = chr->opaque;
51767e7c 2794
5c230105 2795 return d->prod - d->cons;
51767e7c
LL		 2796}
2797
3949e594 2798static int ringbuf_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
51767e7c 2799{
3949e594 2800 RingBufCharDriver *d = chr->opaque;
51767e7c
LL		 2801 int i;
2802
2803 if (!buf || (len < 0)) {
2804 return -1;
2805 }
2806
2807 for (i = 0; i < len; i++ ) {
5c230105
MA		 2808 d->cbuf[d->prod++ & (d->size - 1)] = buf[i];
2809 if (d->prod - d->cons > d->size) {
51767e7c
LL		 2810 d->cons = d->prod - d->size;
2811 }
2812 }
2813
2814 return 0;
2815}
2816
3949e594 2817static int ringbuf_chr_read(CharDriverState *chr, uint8_t *buf, int len)
51767e7c 2818{
3949e594 2819 RingBufCharDriver *d = chr->opaque;
51767e7c
LL		 2820 int i;
2821
5c230105
MA		 2822 for (i = 0; i < len && d->cons != d->prod; i++) {
2823 buf[i] = d->cbuf[d->cons++ & (d->size - 1)];
51767e7c
LL		 2824 }
2825
2826 return i;
2827}
2828
3949e594 2829static void ringbuf_chr_close(struct CharDriverState *chr)
51767e7c 2830{
3949e594 2831 RingBufCharDriver *d = chr->opaque;
51767e7c
LL		 2832
2833 g_free(d->cbuf);
2834 g_free(d);
2835 chr->opaque = NULL;
2836}
2837
3949e594 2838static CharDriverState *qemu_chr_open_ringbuf(QemuOpts *opts)
51767e7c
LL		 2839{
2840 CharDriverState *chr;
3949e594 2841 RingBufCharDriver *d;
51767e7c
LL		 2842
2843 chr = g_malloc0(sizeof(CharDriverState));
2844 d = g_malloc(sizeof(*d));
2845
de1cc36e 2846 d->size = qemu_opt_get_size(opts, "size", 0);
51767e7c 2847 if (d->size == 0) {
de1cc36e 2848 d->size = 65536;
51767e7c
LL		 2849 }
2850
2851 /* The size must be power of 2 */
2852 if (d->size & (d->size - 1)) {
3949e594 2853 error_report("size of ringbuf device must be power of two");
51767e7c
LL		 2854 goto fail;
2855 }
2856
2857 d->prod = 0;
2858 d->cons = 0;
2859 d->cbuf = g_malloc0(d->size);
2860
2861 chr->opaque = d;
3949e594
MA		 2862 chr->chr_write = ringbuf_chr_write;
2863 chr->chr_close = ringbuf_chr_close;
51767e7c
LL		 2864
2865 return chr;
2866
2867fail:
2868 g_free(d);
2869 g_free(chr);
2870 return NULL;
2871}
2872
3949e594 2873static bool chr_is_ringbuf(const CharDriverState *chr)
1f590cf9 2874{
3949e594 2875 return chr->chr_write == ringbuf_chr_write;
1f590cf9
LL		 2876}
2877
3949e594 2878void qmp_ringbuf_write(const char *device, const char *data,
82e59a67 2879 bool has_format, enum DataFormat format,
1f590cf9
LL		 2880 Error **errp)
2881{
2882 CharDriverState *chr;
c4f331b6 2883 const uint8_t *write_data;
1f590cf9 2884 int ret;
c4f331b6 2885 size_t write_count;
1f590cf9
LL		 2886
2887 chr = qemu_chr_find(device);
2888 if (!chr) {
1a69278e 2889 error_setg(errp, "Device '%s' not found", device);
1f590cf9
LL		 2890 return;
2891 }
2892
3949e594
MA		 2893 if (!chr_is_ringbuf(chr)) {
2894 error_setg(errp,"%s is not a ringbuf device", device);
1f590cf9
LL		 2895 return;
2896 }
2897
1f590cf9
LL		 2898 if (has_format && (format == DATA_FORMAT_BASE64)) {
2899 write_data = g_base64_decode(data, &write_count);
2900 } else {
2901 write_data = (uint8_t *)data;
82e59a67 2902 write_count = strlen(data);
1f590cf9
LL		 2903 }
2904
3949e594 2905 ret = ringbuf_chr_write(chr, write_data, write_count);
1f590cf9 2906
13289fb5
MA		 2907 if (write_data != (uint8_t *)data) {
2908 g_free((void *)write_data);
2909 }
2910
1f590cf9
LL		 2911 if (ret < 0) {
2912 error_setg(errp, "Failed to write to device %s", device);
2913 return;
2914 }
2915}
2916
3949e594 2917char *qmp_ringbuf_read(const char *device, int64_t size,
3ab651fc
MA		 2918 bool has_format, enum DataFormat format,
2919 Error **errp)
49b6d722
LL		 2920{
2921 CharDriverState *chr;
c4f331b6 2922 uint8_t *read_data;
49b6d722 2923 size_t count;
3ab651fc 2924 char *data;
49b6d722
LL		 2925
2926 chr = qemu_chr_find(device);
2927 if (!chr) {
1a69278e 2928 error_setg(errp, "Device '%s' not found", device);
49b6d722
LL		 2929 return NULL;
2930 }
2931
3949e594
MA		 2932 if (!chr_is_ringbuf(chr)) {
2933 error_setg(errp,"%s is not a ringbuf device", device);
49b6d722
LL		 2934 return NULL;
2935 }
2936
2937 if (size <= 0) {
2938 error_setg(errp, "size must be greater than zero");
2939 return NULL;
2940 }
2941
3949e594 2942 count = ringbuf_count(chr);
49b6d722 2943 size = size > count ? count : size;
44f3bcd2 2944 read_data = g_malloc(size + 1);
49b6d722 2945
3949e594 2946 ringbuf_chr_read(chr, read_data, size);
49b6d722
LL		 2947
2948 if (has_format && (format == DATA_FORMAT_BASE64)) {
3ab651fc 2949 data = g_base64_encode(read_data, size);
13289fb5 2950 g_free(read_data);
49b6d722 2951 } else {
3949e594
MA		 2952 /*
2953 * FIXME should read only complete, valid UTF-8 characters up
2954 * to @size bytes. Invalid sequences should be replaced by a
2955 * suitable replacement character. Except when (and only
2956 * when) ring buffer lost characters since last read, initial
2957 * continuation characters should be dropped.
2958 */
44f3bcd2 2959 read_data[size] = 0;
3ab651fc 2960 data = (char *)read_data;
49b6d722
LL		 2961 }
2962
3ab651fc 2963 return data;
49b6d722
LL		 2964}
2965
33521634 2966QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
191bc01b 2967{
6ea314d9 2968 char host[65], port[33], width[8], height[8];
aeb2c47a 2969 int pos;
7d31544f 2970 const char *p;
191bc01b 2971 QemuOpts *opts;
8be7e7e4 2972 Error *local_err = NULL;
191bc01b 2973
8be7e7e4
LC		 2974 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
2975 if (error_is_set(&local_err)) {
2976 qerror_report_err(local_err);
2977 error_free(local_err);
191bc01b 2978 return NULL;
8be7e7e4 2979 }
191bc01b 2980
7591c5c1
GH		 2981 if (strstart(filename, "mon:", &p)) {
2982 filename = p;
2983 qemu_opt_set(opts, "mux", "on");
2984 }
2985
f0457e8d
GH		 2986 if (strcmp(filename, "null") == 0 ||
2987 strcmp(filename, "pty") == 0 ||
2988 strcmp(filename, "msmouse") == 0 ||
dc1c21e6 2989 strcmp(filename, "braille") == 0 ||
f0457e8d 2990 strcmp(filename, "stdio") == 0) {
4490dadf 2991 qemu_opt_set(opts, "backend", filename);
191bc01b
GH		 2992 return opts;
2993 }
6ea314d9
GH		 2994 if (strstart(filename, "vc", &p)) {
2995 qemu_opt_set(opts, "backend", "vc");
2996 if (*p == ':') {
2997 if (sscanf(p+1, "%8[0-9]x%8[0-9]", width, height) == 2) {
2998 /* pixels */
2999 qemu_opt_set(opts, "width", width);
3000 qemu_opt_set(opts, "height", height);
3001 } else if (sscanf(p+1, "%8[0-9]Cx%8[0-9]C", width, height) == 2) {
3002 /* chars */
3003 qemu_opt_set(opts, "cols", width);
3004 qemu_opt_set(opts, "rows", height);
3005 } else {
3006 goto fail;
3007 }
3008 }
3009 return opts;
3010 }
d6c983cd
GH		 3011 if (strcmp(filename, "con:") == 0) {
3012 qemu_opt_set(opts, "backend", "console");
3013 return opts;
3014 }
48b76496
GH		 3015 if (strstart(filename, "COM", NULL)) {
3016 qemu_opt_set(opts, "backend", "serial");
3017 qemu_opt_set(opts, "path", filename);
3018 return opts;
3019 }
7d31544f
GH		 3020 if (strstart(filename, "file:", &p)) {
3021 qemu_opt_set(opts, "backend", "file");
3022 qemu_opt_set(opts, "path", p);
3023 return opts;
3024 }
3025 if (strstart(filename, "pipe:", &p)) {
3026 qemu_opt_set(opts, "backend", "pipe");
3027 qemu_opt_set(opts, "path", p);
3028 return opts;
3029 }
aeb2c47a
GH		 3030 if (strstart(filename, "tcp:", &p) ||
3031 strstart(filename, "telnet:", &p)) {
3032 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3033 host[0] = 0;
3034 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
3035 goto fail;
3036 }
3037 qemu_opt_set(opts, "backend", "socket");
3038 qemu_opt_set(opts, "host", host);
3039 qemu_opt_set(opts, "port", port);
3040 if (p[pos] == ',') {
3041 if (qemu_opts_do_parse(opts, p+pos+1, NULL) != 0)
3042 goto fail;
3043 }
3044 if (strstart(filename, "telnet:", &p))
3045 qemu_opt_set(opts, "telnet", "on");
3046 return opts;
3047 }
7e1b35b4
GH		 3048 if (strstart(filename, "udp:", &p)) {
3049 qemu_opt_set(opts, "backend", "udp");
3050 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
3051 host[0] = 0;
39324ca4 3052 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
7e1b35b4
GH		 3053 goto fail;
3054 }
3055 }
3056 qemu_opt_set(opts, "host", host);
3057 qemu_opt_set(opts, "port", port);
3058 if (p[pos] == '@') {
3059 p += pos + 1;
3060 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3061 host[0] = 0;
3062 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
7e1b35b4
GH		 3063 goto fail;
3064 }
3065 }
3066 qemu_opt_set(opts, "localaddr", host);
3067 qemu_opt_set(opts, "localport", port);
3068 }
3069 return opts;
3070 }
aeb2c47a
GH		 3071 if (strstart(filename, "unix:", &p)) {
3072 qemu_opt_set(opts, "backend", "socket");
3073 if (qemu_opts_do_parse(opts, p, "path") != 0)
3074 goto fail;
3075 return opts;
3076 }
48b76496
GH		 3077 if (strstart(filename, "/dev/parport", NULL) ||
3078 strstart(filename, "/dev/ppi", NULL)) {
3079 qemu_opt_set(opts, "backend", "parport");
3080 qemu_opt_set(opts, "path", filename);
3081 return opts;
3082 }
3083 if (strstart(filename, "/dev/", NULL)) {
3084 qemu_opt_set(opts, "backend", "tty");
3085 qemu_opt_set(opts, "path", filename);
3086 return opts;
3087 }
191bc01b 3088
aeb2c47a 3089fail:
191bc01b
GH		 3090 qemu_opts_del(opts);
3091 return NULL;
3092}
3093
88a946d3
GH		 3094#ifdef HAVE_CHARDEV_PARPORT
3095
3096static CharDriverState *qemu_chr_open_pp(QemuOpts *opts)
3097{
3098 const char *filename = qemu_opt_get(opts, "path");
3099 int fd;
3100
3101 fd = qemu_open(filename, O_RDWR);
3102 if (fd < 0) {
3103 return NULL;
3104 }
3105 return qemu_chr_open_pp_fd(fd);
3106}
3107
3108#endif
3109
191bc01b
GH		 3110static const struct {
3111 const char *name;
1f51470d 3112 CharDriverState *(*open)(QemuOpts *opts);
191bc01b
GH		 3113} backend_table[] = {
3114 { .name = "null", .open = qemu_chr_open_null },
aeb2c47a 3115 { .name = "socket", .open = qemu_chr_open_socket },
7e1b35b4 3116 { .name = "udp", .open = qemu_chr_open_udp },
f0457e8d 3117 { .name = "msmouse", .open = qemu_chr_open_msmouse },
d82831db 3118 { .name = "vc", .open = vc_init },
3949e594 3119 { .name = "memory", .open = qemu_chr_open_ringbuf },
7d31544f
GH		 3120#ifdef _WIN32
3121 { .name = "file", .open = qemu_chr_open_win_file_out },
3122 { .name = "pipe", .open = qemu_chr_open_win_pipe },
d6c983cd 3123 { .name = "console", .open = qemu_chr_open_win_con },
48b76496 3124 { .name = "serial", .open = qemu_chr_open_win },
db418a0a 3125 { .name = "stdio", .open = qemu_chr_open_win_stdio },
7d31544f
GH		 3126#else
3127 { .name = "file", .open = qemu_chr_open_file_out },
3128 { .name = "pipe", .open = qemu_chr_open_pipe },
3c17affb 3129 { .name = "stdio", .open = qemu_chr_open_stdio },
7d31544f 3130#endif
dc1c21e6
GH		 3131#ifdef CONFIG_BRLAPI
3132 { .name = "braille", .open = chr_baum_init },
3133#endif
e551498e 3134#ifdef HAVE_CHARDEV_TTY
48b76496 3135 { .name = "tty", .open = qemu_chr_open_tty },
d59044ef 3136 { .name = "serial", .open = qemu_chr_open_tty },
e551498e 3137 { .name = "pty", .open = qemu_chr_open_pty },
48b76496 3138#endif
e551498e 3139#ifdef HAVE_CHARDEV_PARPORT
88a946d3 3140 { .name = "parallel", .open = qemu_chr_open_pp },
48b76496
GH		 3141 { .name = "parport", .open = qemu_chr_open_pp },
3142#endif
cbcc6336
AL		 3143#ifdef CONFIG_SPICE
3144 { .name = "spicevmc", .open = qemu_chr_open_spice },
5a49d3e9
MAL		 3145#if SPICE_SERVER_VERSION >= 0x000c02
3146 { .name = "spiceport", .open = qemu_chr_open_spice_port },
3147#endif
cbcc6336 3148#endif
191bc01b
GH		 3149};
3150
f69554b9 3151CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
bd2d80b2
GH		 3152 void (*init)(struct CharDriverState *s),
3153 Error **errp)
191bc01b
GH		 3154{
3155 CharDriverState *chr;
3156 int i;
3157
3158 if (qemu_opts_id(opts) == NULL) {
312fd5f2 3159 error_setg(errp, "chardev: no id specified");
2274ae9d 3160 goto err;
191bc01b
GH		 3161 }
3162
1bbd185f 3163 if (qemu_opt_get(opts, "backend") == NULL) {
312fd5f2 3164 error_setg(errp, "chardev: \"%s\" missing backend",
bd2d80b2 3165 qemu_opts_id(opts));
2274ae9d 3166 goto err;
1bbd185f 3167 }
191bc01b
GH		 3168 for (i = 0; i < ARRAY_SIZE(backend_table); i++) {
3169 if (strcmp(backend_table[i].name, qemu_opt_get(opts, "backend")) == 0)
3170 break;
3171 }
3172 if (i == ARRAY_SIZE(backend_table)) {
312fd5f2 3173 error_setg(errp, "chardev: backend \"%s\" not found",
bd2d80b2 3174 qemu_opt_get(opts, "backend"));
2274ae9d 3175 goto err;
191bc01b
GH		 3176 }
3177
1f51470d
MA		 3178 chr = backend_table[i].open(opts);
3179 if (!chr) {
312fd5f2 3180 error_setg(errp, "chardev: opening backend \"%s\" failed",
bd2d80b2 3181 qemu_opt_get(opts, "backend"));
2274ae9d 3182 goto err;
191bc01b
GH		 3183 }
3184
3185 if (!chr->filename)
7267c094 3186 chr->filename = g_strdup(qemu_opt_get(opts, "backend"));
191bc01b 3187 chr->init = init;
72cf2d4f 3188 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
7591c5c1
GH		 3189
3190 if (qemu_opt_get_bool(opts, "mux", 0)) {
3191 CharDriverState *base = chr;
3192 int len = strlen(qemu_opts_id(opts)) + 6;
7267c094 3193 base->label = g_malloc(len);
7591c5c1
GH		 3194 snprintf(base->label, len, "%s-base", qemu_opts_id(opts));
3195 chr = qemu_chr_open_mux(base);
3196 chr->filename = base->filename;
d5b27167 3197 chr->avail_connections = MAX_MUX;
72cf2d4f 3198 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
d5b27167
KK		 3199 } else {
3200 chr->avail_connections = 1;
7591c5c1 3201 }
7267c094 3202 chr->label = g_strdup(qemu_opts_id(opts));
2274ae9d 3203 chr->opts = opts;
191bc01b 3204 return chr;
2274ae9d
GH		 3205
3206err:
3207 qemu_opts_del(opts);
3208 return NULL;
191bc01b
GH		 3209}
3210
27143a44 3211CharDriverState *qemu_chr_new(const char *label, const char *filename, void (*init)(struct CharDriverState *s))
6f97dba0
AL		 3212{
3213 const char *p;
3214 CharDriverState *chr;
191bc01b 3215 QemuOpts *opts;
bd2d80b2 3216 Error *err = NULL;
191bc01b 3217
c845f401
GH		 3218 if (strstart(filename, "chardev:", &p)) {
3219 return qemu_chr_find(p);
3220 }
3221
191bc01b 3222 opts = qemu_chr_parse_compat(label, filename);
7e1b35b4
GH		 3223 if (!opts)
3224 return NULL;
6f97dba0 3225
bd2d80b2
GH		 3226 chr = qemu_chr_new_from_opts(opts, init, &err);
3227 if (error_is_set(&err)) {
3228 fprintf(stderr, "%s\n", error_get_pretty(err));
3229 error_free(err);
3230 }
7e1b35b4
GH		 3231 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
3232 monitor_init(chr, MONITOR_USE_READLINE);
6f97dba0
AL		 3233 }
3234 return chr;
3235}
3236
15f31519 3237void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
c48855e1
PB		 3238{
3239 if (chr->chr_set_echo) {
3240 chr->chr_set_echo(chr, echo);
3241 }
3242}
3243
c9d830ed 3244void qemu_chr_fe_open(struct CharDriverState *chr)
7c32c4fe
HG		 3245{
3246 if (chr->chr_guest_open) {
3247 chr->chr_guest_open(chr);
3248 }
3249}
3250
2817822d 3251void qemu_chr_fe_close(struct CharDriverState *chr)
7c32c4fe
HG		 3252{
3253 if (chr->chr_guest_close) {
3254 chr->chr_guest_close(chr);
3255 }
3256}
3257
70f24fb6 3258void qemu_chr_delete(CharDriverState *chr)
6f97dba0 3259{
72cf2d4f 3260 QTAILQ_REMOVE(&chardevs, chr, next);
2274ae9d 3261 if (chr->chr_close) {
6f97dba0 3262 chr->chr_close(chr);
2274ae9d 3263 }
7267c094
AL		 3264 g_free(chr->filename);
3265 g_free(chr->label);
2274ae9d
GH		 3266 if (chr->opts) {
3267 qemu_opts_del(chr->opts);
3268 }
7267c094 3269 g_free(chr);
6f97dba0
AL		 3270}
3271
c5a415a0 3272ChardevInfoList *qmp_query_chardev(Error **errp)
6f97dba0 3273{
c5a415a0 3274 ChardevInfoList *chr_list = NULL;
6f97dba0
AL		 3275 CharDriverState *chr;
3276
72cf2d4f 3277 QTAILQ_FOREACH(chr, &chardevs, next) {
c5a415a0
LC		 3278 ChardevInfoList *info = g_malloc0(sizeof(*info));
3279 info->value = g_malloc0(sizeof(*info->value));
3280 info->value->label = g_strdup(chr->label);
3281 info->value->filename = g_strdup(chr->filename);
3282
3283 info->next = chr_list;
3284 chr_list = info;
6f97dba0 3285 }
588b3832 3286
c5a415a0 3287 return chr_list;
6f97dba0 3288}
c845f401
GH		 3289
3290CharDriverState *qemu_chr_find(const char *name)
3291{
3292 CharDriverState *chr;
3293
72cf2d4f 3294 QTAILQ_FOREACH(chr, &chardevs, next) {
c845f401
GH		 3295 if (strcmp(chr->label, name) != 0)
3296 continue;
3297 return chr;
3298 }
3299 return NULL;
3300}
0beb4942
AL		 3301
3302/* Get a character (serial) device interface. */
3303CharDriverState *qemu_char_get_next_serial(void)
3304{
3305 static int next_serial;
3306
3307 /* FIXME: This function needs to go away: use chardev properties! */
3308 return serial_hds[next_serial++];
3309}
3310
4d454574
PB		 3311QemuOptsList qemu_chardev_opts = {
3312 .name = "chardev",
3313 .implied_opt_name = "backend",
3314 .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
3315 .desc = {
3316 {
3317 .name = "backend",
3318 .type = QEMU_OPT_STRING,
3319 },{
3320 .name = "path",
3321 .type = QEMU_OPT_STRING,
3322 },{
3323 .name = "host",
3324 .type = QEMU_OPT_STRING,
3325 },{
3326 .name = "port",
3327 .type = QEMU_OPT_STRING,
3328 },{
3329 .name = "localaddr",
3330 .type = QEMU_OPT_STRING,
3331 },{
3332 .name = "localport",
3333 .type = QEMU_OPT_STRING,
3334 },{
3335 .name = "to",
3336 .type = QEMU_OPT_NUMBER,
3337 },{
3338 .name = "ipv4",
3339 .type = QEMU_OPT_BOOL,
3340 },{
3341 .name = "ipv6",
3342 .type = QEMU_OPT_BOOL,
3343 },{
3344 .name = "wait",
3345 .type = QEMU_OPT_BOOL,
3346 },{
3347 .name = "server",
3348 .type = QEMU_OPT_BOOL,
3349 },{
3350 .name = "delay",
3351 .type = QEMU_OPT_BOOL,
3352 },{
3353 .name = "telnet",
3354 .type = QEMU_OPT_BOOL,
3355 },{
3356 .name = "width",
3357 .type = QEMU_OPT_NUMBER,
3358 },{
3359 .name = "height",
3360 .type = QEMU_OPT_NUMBER,
3361 },{
3362 .name = "cols",
3363 .type = QEMU_OPT_NUMBER,
3364 },{
3365 .name = "rows",
3366 .type = QEMU_OPT_NUMBER,
3367 },{
3368 .name = "mux",
3369 .type = QEMU_OPT_BOOL,
3370 },{
3371 .name = "signal",
3372 .type = QEMU_OPT_BOOL,
3373 },{
3374 .name = "name",
3375 .type = QEMU_OPT_STRING,
3376 },{
3377 .name = "debug",
3378 .type = QEMU_OPT_NUMBER,
51767e7c 3379 },{
3949e594 3380 .name = "size",
de1cc36e 3381 .type = QEMU_OPT_SIZE,
4d454574
PB		 3382 },
3383 { /* end of list */ }
3384 },
3385};
f1a1a356 3386
ffbdbe59
GH		 3387#ifdef _WIN32
3388
3389static CharDriverState *qmp_chardev_open_file(ChardevFile *file, Error **errp)
3390{
3391 HANDLE out;
3392
3393 if (file->in) {
3394 error_setg(errp, "input file not supported");
3395 return NULL;
3396 }
3397
3398 out = CreateFile(file->out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
3399 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
3400 if (out == INVALID_HANDLE_VALUE) {
3401 error_setg(errp, "open %s failed", file->out);
3402 return NULL;
3403 }
3404 return qemu_chr_open_win_file(out);
3405}
3406
d36b2b90
MA		 3407static CharDriverState *qmp_chardev_open_serial(ChardevHostdev *serial,
3408 Error **errp)
d59044ef 3409{
d36b2b90
MA		 3410 return qemu_chr_open_win_path(serial->device);
3411}
3412
3413static CharDriverState *qmp_chardev_open_parallel(ChardevHostdev *parallel,
3414 Error **errp)
3415{
3416 error_setg(errp, "character device backend type 'parallel' not supported");
3417 return NULL;
d59044ef
GH		 3418}
3419
ffbdbe59
GH		 3420#else /* WIN32 */
3421
3422static int qmp_chardev_open_file_source(char *src, int flags,
3423 Error **errp)
3424{
3425 int fd = -1;
3426
3427 TFR(fd = qemu_open(src, flags, 0666));
3428 if (fd == -1) {
3429 error_setg(errp, "open %s: %s", src, strerror(errno));
3430 }
3431 return fd;
3432}
3433
3434static CharDriverState *qmp_chardev_open_file(ChardevFile *file, Error **errp)
3435{
3436 int flags, in = -1, out = -1;
3437
3438 flags = O_WRONLY | O_TRUNC | O_CREAT | O_BINARY;
3439 out = qmp_chardev_open_file_source(file->out, flags, errp);
3440 if (error_is_set(errp)) {
3441 return NULL;
3442 }
3443
3444 if (file->in) {
3445 flags = O_RDONLY;
3446 in = qmp_chardev_open_file_source(file->in, flags, errp);
3447 if (error_is_set(errp)) {
3448 qemu_close(out);
3449 return NULL;
3450 }
3451 }
3452
3453 return qemu_chr_open_fd(in, out);
3454}
3455
d36b2b90
MA		 3456static CharDriverState *qmp_chardev_open_serial(ChardevHostdev *serial,
3457 Error **errp)
d59044ef 3458{
d59044ef 3459#ifdef HAVE_CHARDEV_TTY
d36b2b90
MA		 3460 int fd;
3461
3462 fd = qmp_chardev_open_file_source(serial->device, O_RDWR, errp);
3463 if (error_is_set(errp)) {
3464 return NULL;
39099991 3465 }
d36b2b90
MA		 3466 socket_set_nonblock(fd);
3467 return qemu_chr_open_tty_fd(fd);
3468#else
3469 error_setg(errp, "character device backend type 'serial' not supported");
3470 return NULL;
88a946d3 3471#endif
d36b2b90
MA		 3472}
3473
3474static CharDriverState *qmp_chardev_open_parallel(ChardevHostdev *parallel,
3475 Error **errp)
3476{
88a946d3 3477#ifdef HAVE_CHARDEV_PARPORT
d36b2b90
MA		 3478 int fd;
3479
3480 fd = qmp_chardev_open_file_source(parallel->device, O_RDWR, errp);
3481 if (error_is_set(errp)) {
d59044ef
GH		 3482 return NULL;
3483 }
d36b2b90
MA		 3484 return qemu_chr_open_pp_fd(fd);
3485#else
3486 error_setg(errp, "character device backend type 'parallel' not supported");
3487 return NULL;
3488#endif
d59044ef
GH		 3489}
3490
ffbdbe59
GH		 3491#endif /* WIN32 */
3492
f6bd5d6e
GH		 3493static CharDriverState *qmp_chardev_open_socket(ChardevSocket *sock,
3494 Error **errp)
3495{
3496 SocketAddress *addr = sock->addr;
3497 bool do_nodelay = sock->has_nodelay ? sock->nodelay : false;
3498 bool is_listen = sock->has_server ? sock->server : true;
3499 bool is_telnet = sock->has_telnet ? sock->telnet : false;
3500 bool is_waitconnect = sock->has_wait ? sock->wait : false;
3501 int fd;
3502
3503 if (is_listen) {
3504 fd = socket_listen(addr, errp);
3505 } else {
3506 fd = socket_connect(addr, errp, NULL, NULL);
3507 }
3508 if (error_is_set(errp)) {
3509 return NULL;
3510 }
3511 return qemu_chr_open_socket_fd(fd, do_nodelay, is_listen,
3512 is_telnet, is_waitconnect, errp);
3513}
3514
f1a1a356
GH		 3515ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
3516 Error **errp)
3517{
3518 ChardevReturn *ret = g_new0(ChardevReturn, 1);
3519 CharDriverState *chr = NULL;
3520
3521 chr = qemu_chr_find(id);
3522 if (chr) {
3523 error_setg(errp, "Chardev '%s' already exists", id);
3524 g_free(ret);
3525 return NULL;
3526 }
3527
3528 switch (backend->kind) {
ffbdbe59
GH		 3529 case CHARDEV_BACKEND_KIND_FILE:
3530 chr = qmp_chardev_open_file(backend->file, errp);
3531 break;
d36b2b90
MA		 3532 case CHARDEV_BACKEND_KIND_SERIAL:
3533 chr = qmp_chardev_open_serial(backend->serial, errp);
3534 break;
3535 case CHARDEV_BACKEND_KIND_PARALLEL:
3536 chr = qmp_chardev_open_parallel(backend->parallel, errp);
d59044ef 3537 break;
f6bd5d6e
GH		 3538 case CHARDEV_BACKEND_KIND_SOCKET:
3539 chr = qmp_chardev_open_socket(backend->socket, errp);
3540 break;
0a1a7fab
GH		 3541#ifdef HAVE_CHARDEV_TTY
3542 case CHARDEV_BACKEND_KIND_PTY:
3543 {
3544 /* qemu_chr_open_pty sets "path" in opts */
3545 QemuOpts *opts;
3546 opts = qemu_opts_create_nofail(qemu_find_opts("chardev"));
3547 chr = qemu_chr_open_pty(opts);
3548 ret->pty = g_strdup(qemu_opt_get(opts, "path"));
3549 ret->has_pty = true;
3550 qemu_opts_del(opts);
3551 break;
3552 }
3553#endif
f1a1a356
GH		 3554 case CHARDEV_BACKEND_KIND_NULL:
3555 chr = qemu_chr_open_null(NULL);
3556 break;
3557 default:
3558 error_setg(errp, "unknown chardev backend (%d)", backend->kind);
3559 break;
3560 }
3561
3562 if (chr == NULL && !error_is_set(errp)) {
3563 error_setg(errp, "Failed to create chardev");
3564 }
3565 if (chr) {
3566 chr->label = g_strdup(id);
3567 chr->avail_connections = 1;
3568 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
3569 return ret;
3570 } else {
3571 g_free(ret);
3572 return NULL;
3573 }
3574}
3575
3576void qmp_chardev_remove(const char *id, Error **errp)
3577{
3578 CharDriverState *chr;
3579
3580 chr = qemu_chr_find(id);
3581 if (NULL == chr) {
3582 error_setg(errp, "Chardev '%s' not found", id);
3583 return;
3584 }
3585 if (chr->chr_can_read || chr->chr_read ||
3586 chr->chr_event || chr->handler_opaque) {
3587 error_setg(errp, "Chardev '%s' is busy", id);
3588 return;
3589 }
3590 qemu_chr_delete(chr);
3591}
Qemu copy for testing