]> git.proxmox.com Git - qemu.git/blame_incremental - qemu-char.c
projects / qemu.git / blame_incremental
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (non-incremental) | history | HEAD
qemu-char: tcp: make use GIOChannel
[qemu.git] / qemu-char.c
... / ...
CommitLineData
1/*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24#include "qemu-common.h"
25#include "monitor/monitor.h"
26#include "ui/console.h"
27#include "sysemu/sysemu.h"
28#include "qemu/timer.h"
29#include "char/char.h"
30#include "hw/usb.h"
31#include "hw/baum.h"
32#include "hw/msmouse.h"
33#include "qmp-commands.h"
34
35#include <unistd.h>
36#include <fcntl.h>
37#include <time.h>
38#include <errno.h>
39#include <sys/time.h>
40#include <zlib.h>
41
42#ifndef _WIN32
43#include <sys/times.h>
44#include <sys/wait.h>
45#include <termios.h>
46#include <sys/mman.h>
47#include <sys/ioctl.h>
48#include <sys/resource.h>
49#include <sys/socket.h>
50#include <netinet/in.h>
51#include <net/if.h>
52#include <arpa/inet.h>
53#include <dirent.h>
54#include <netdb.h>
55#include <sys/select.h>
56#ifdef CONFIG_BSD
57#include <sys/stat.h>
58#if defined(__GLIBC__)
59#include <pty.h>
60#elif defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
61#include <libutil.h>
62#else
63#include <util.h>
64#endif
65#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
66#include <dev/ppbus/ppi.h>
67#include <dev/ppbus/ppbconf.h>
68#elif defined(__DragonFly__)
69#include <dev/misc/ppi/ppi.h>
70#include <bus/ppbus/ppbconf.h>
71#endif
72#else
73#ifdef __linux__
74#include <pty.h>
75
76#include <linux/ppdev.h>
77#include <linux/parport.h>
78#endif
79#ifdef __sun__
80#include <sys/stat.h>
81#include <sys/ethernet.h>
82#include <sys/sockio.h>
83#include <netinet/arp.h>
84#include <netinet/in.h>
85#include <netinet/in_systm.h>
86#include <netinet/ip.h>
87#include <netinet/ip_icmp.h> // must come after ip.h
88#include <netinet/udp.h>
89#include <netinet/tcp.h>
90#include <net/if.h>
91#include <syslog.h>
92#include <stropts.h>
93#endif
94#endif
95#endif
96
97#include "qemu/sockets.h"
98#include "ui/qemu-spice.h"
99
100#define READ_BUF_LEN 4096
101
102/***********************************************************/
103/* character device */
104
105static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
106 QTAILQ_HEAD_INITIALIZER(chardevs);
107
108void qemu_chr_be_event(CharDriverState *s, int event)
109{
110 /* Keep track if the char device is open */
111 switch (event) {
112 case CHR_EVENT_OPENED:
113 s->opened = 1;
114 break;
115 case CHR_EVENT_CLOSED:
116 s->opened = 0;
117 break;
118 }
119
120 if (!s->chr_event)
121 return;
122 s->chr_event(s->handler_opaque, event);
123}
124
125static void qemu_chr_fire_open_event(void *opaque)
126{
127 CharDriverState *s = opaque;
128 qemu_chr_be_event(s, CHR_EVENT_OPENED);
129 qemu_free_timer(s->open_timer);
130 s->open_timer = NULL;
131}
132
133void qemu_chr_generic_open(CharDriverState *s)
134{
135 if (s->open_timer == NULL) {
136 s->open_timer = qemu_new_timer_ms(rt_clock,
137 qemu_chr_fire_open_event, s);
138 qemu_mod_timer(s->open_timer, qemu_get_clock_ms(rt_clock) - 1);
139 }
140}
141
142int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
143{
144 return s->chr_write(s, buf, len);
145}
146
147int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
148{
149 if (!s->chr_ioctl)
150 return -ENOTSUP;
151 return s->chr_ioctl(s, cmd, arg);
152}
153
154int qemu_chr_be_can_write(CharDriverState *s)
155{
156 if (!s->chr_can_read)
157 return 0;
158 return s->chr_can_read(s->handler_opaque);
159}
160
161void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
162{
163 if (s->chr_read) {
164 s->chr_read(s->handler_opaque, buf, len);
165 }
166}
167
168int qemu_chr_fe_get_msgfd(CharDriverState *s)
169{
170 return s->get_msgfd ? s->get_msgfd(s) : -1;
171}
172
173int qemu_chr_add_client(CharDriverState *s, int fd)
174{
175 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
176}
177
178void qemu_chr_accept_input(CharDriverState *s)
179{
180 if (s->chr_accept_input)
181 s->chr_accept_input(s);
182 qemu_notify_event();
183}
184
185void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
186{
187 char buf[READ_BUF_LEN];
188 va_list ap;
189 va_start(ap, fmt);
190 vsnprintf(buf, sizeof(buf), fmt, ap);
191 qemu_chr_fe_write(s, (uint8_t *)buf, strlen(buf));
192 va_end(ap);
193}
194
195void qemu_chr_add_handlers(CharDriverState *s,
196 IOCanReadHandler *fd_can_read,
197 IOReadHandler *fd_read,
198 IOEventHandler *fd_event,
199 void *opaque)
200{
201 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
202 /* chr driver being released. */
203 ++s->avail_connections;
204 }
205 s->chr_can_read = fd_can_read;
206 s->chr_read = fd_read;
207 s->chr_event = fd_event;
208 s->handler_opaque = opaque;
209 if (s->chr_update_read_handler)
210 s->chr_update_read_handler(s);
211
212 /* We're connecting to an already opened device, so let's make sure we
213 also get the open event */
214 if (s->opened) {
215 qemu_chr_generic_open(s);
216 }
217}
218
219static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
220{
221 return len;
222}
223
224static CharDriverState *qemu_chr_open_null(QemuOpts *opts)
225{
226 CharDriverState *chr;
227
228 chr = g_malloc0(sizeof(CharDriverState));
229 chr->chr_write = null_chr_write;
230 return chr;
231}
232
233/* MUX driver for serial I/O splitting */
234#define MAX_MUX 4
235#define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
236#define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
237typedef struct {
238 IOCanReadHandler *chr_can_read[MAX_MUX];
239 IOReadHandler *chr_read[MAX_MUX];
240 IOEventHandler *chr_event[MAX_MUX];
241 void *ext_opaque[MAX_MUX];
242 CharDriverState *drv;
243 int focus;
244 int mux_cnt;
245 int term_got_escape;
246 int max_size;
247 /* Intermediate input buffer allows to catch escape sequences even if the
248 currently active device is not accepting any input - but only until it
249 is full as well. */
250 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
251 int prod[MAX_MUX];
252 int cons[MAX_MUX];
253 int timestamps;
254 int linestart;
255 int64_t timestamps_start;
256} MuxDriver;
257
258
259static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
260{
261 MuxDriver *d = chr->opaque;
262 int ret;
263 if (!d->timestamps) {
264 ret = d->drv->chr_write(d->drv, buf, len);
265 } else {
266 int i;
267
268 ret = 0;
269 for (i = 0; i < len; i++) {
270 if (d->linestart) {
271 char buf1[64];
272 int64_t ti;
273 int secs;
274
275 ti = qemu_get_clock_ms(rt_clock);
276 if (d->timestamps_start == -1)
277 d->timestamps_start = ti;
278 ti -= d->timestamps_start;
279 secs = ti / 1000;
280 snprintf(buf1, sizeof(buf1),
281 "[%02d:%02d:%02d.%03d] ",
282 secs / 3600,
283 (secs / 60) % 60,
284 secs % 60,
285 (int)(ti % 1000));
286 d->drv->chr_write(d->drv, (uint8_t *)buf1, strlen(buf1));
287 d->linestart = 0;
288 }
289 ret += d->drv->chr_write(d->drv, buf+i, 1);
290 if (buf[i] == '\n') {
291 d->linestart = 1;
292 }
293 }
294 }
295 return ret;
296}
297
298static const char * const mux_help[] = {
299 "% h print this help\n\r",
300 "% x exit emulator\n\r",
301 "% s save disk data back to file (if -snapshot)\n\r",
302 "% t toggle console timestamps\n\r"
303 "% b send break (magic sysrq)\n\r",
304 "% c switch between console and monitor\n\r",
305 "% % sends %\n\r",
306 NULL
307};
308
309int term_escape_char = 0x01; /* ctrl-a is used for escape */
310static void mux_print_help(CharDriverState *chr)
311{
312 int i, j;
313 char ebuf[15] = "Escape-Char";
314 char cbuf[50] = "\n\r";
315
316 if (term_escape_char > 0 && term_escape_char < 26) {
317 snprintf(cbuf, sizeof(cbuf), "\n\r");
318 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
319 } else {
320 snprintf(cbuf, sizeof(cbuf),
321 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
322 term_escape_char);
323 }
324 chr->chr_write(chr, (uint8_t *)cbuf, strlen(cbuf));
325 for (i = 0; mux_help[i] != NULL; i++) {
326 for (j=0; mux_help[i][j] != '\0'; j++) {
327 if (mux_help[i][j] == '%')
328 chr->chr_write(chr, (uint8_t *)ebuf, strlen(ebuf));
329 else
330 chr->chr_write(chr, (uint8_t *)&mux_help[i][j], 1);
331 }
332 }
333}
334
335static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
336{
337 if (d->chr_event[mux_nr])
338 d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
339}
340
341static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
342{
343 if (d->term_got_escape) {
344 d->term_got_escape = 0;
345 if (ch == term_escape_char)
346 goto send_char;
347 switch(ch) {
348 case '?':
349 case 'h':
350 mux_print_help(chr);
351 break;
352 case 'x':
353 {
354 const char *term = "QEMU: Terminated\n\r";
355 chr->chr_write(chr,(uint8_t *)term,strlen(term));
356 exit(0);
357 break;
358 }
359 case 's':
360 bdrv_commit_all();
361 break;
362 case 'b':
363 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
364 break;
365 case 'c':
366 /* Switch to the next registered device */
367 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
368 d->focus++;
369 if (d->focus >= d->mux_cnt)
370 d->focus = 0;
371 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
372 break;
373 case 't':
374 d->timestamps = !d->timestamps;
375 d->timestamps_start = -1;
376 d->linestart = 0;
377 break;
378 }
379 } else if (ch == term_escape_char) {
380 d->term_got_escape = 1;
381 } else {
382 send_char:
383 return 1;
384 }
385 return 0;
386}
387
388static void mux_chr_accept_input(CharDriverState *chr)
389{
390 MuxDriver *d = chr->opaque;
391 int m = d->focus;
392
393 while (d->prod[m] != d->cons[m] &&
394 d->chr_can_read[m] &&
395 d->chr_can_read[m](d->ext_opaque[m])) {
396 d->chr_read[m](d->ext_opaque[m],
397 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
398 }
399}
400
401static int mux_chr_can_read(void *opaque)
402{
403 CharDriverState *chr = opaque;
404 MuxDriver *d = chr->opaque;
405 int m = d->focus;
406
407 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
408 return 1;
409 if (d->chr_can_read[m])
410 return d->chr_can_read[m](d->ext_opaque[m]);
411 return 0;
412}
413
414static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
415{
416 CharDriverState *chr = opaque;
417 MuxDriver *d = chr->opaque;
418 int m = d->focus;
419 int i;
420
421 mux_chr_accept_input (opaque);
422
423 for(i = 0; i < size; i++)
424 if (mux_proc_byte(chr, d, buf[i])) {
425 if (d->prod[m] == d->cons[m] &&
426 d->chr_can_read[m] &&
427 d->chr_can_read[m](d->ext_opaque[m]))
428 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
429 else
430 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
431 }
432}
433
434static void mux_chr_event(void *opaque, int event)
435{
436 CharDriverState *chr = opaque;
437 MuxDriver *d = chr->opaque;
438 int i;
439
440 /* Send the event to all registered listeners */
441 for (i = 0; i < d->mux_cnt; i++)
442 mux_chr_send_event(d, i, event);
443}
444
445static void mux_chr_update_read_handler(CharDriverState *chr)
446{
447 MuxDriver *d = chr->opaque;
448
449 if (d->mux_cnt >= MAX_MUX) {
450 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
451 return;
452 }
453 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
454 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
455 d->chr_read[d->mux_cnt] = chr->chr_read;
456 d->chr_event[d->mux_cnt] = chr->chr_event;
457 /* Fix up the real driver with mux routines */
458 if (d->mux_cnt == 0) {
459 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
460 mux_chr_event, chr);
461 }
462 if (d->focus != -1) {
463 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
464 }
465 d->focus = d->mux_cnt;
466 d->mux_cnt++;
467 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
468}
469
470static CharDriverState *qemu_chr_open_mux(CharDriverState *drv)
471{
472 CharDriverState *chr;
473 MuxDriver *d;
474
475 chr = g_malloc0(sizeof(CharDriverState));
476 d = g_malloc0(sizeof(MuxDriver));
477
478 chr->opaque = d;
479 d->drv = drv;
480 d->focus = -1;
481 chr->chr_write = mux_chr_write;
482 chr->chr_update_read_handler = mux_chr_update_read_handler;
483 chr->chr_accept_input = mux_chr_accept_input;
484 /* Frontend guest-open / -close notification is not support with muxes */
485 chr->chr_guest_open = NULL;
486 chr->chr_guest_close = NULL;
487
488 /* Muxes are always open on creation */
489 qemu_chr_generic_open(chr);
490
491 return chr;
492}
493
494
495#ifdef _WIN32
496int send_all(int fd, const void *buf, int len1)
497{
498 int ret, len;
499
500 len = len1;
501 while (len > 0) {
502 ret = send(fd, buf, len, 0);
503 if (ret < 0) {
504 errno = WSAGetLastError();
505 if (errno != WSAEWOULDBLOCK) {
506 return -1;
507 }
508 } else if (ret == 0) {
509 break;
510 } else {
511 buf += ret;
512 len -= ret;
513 }
514 }
515 return len1 - len;
516}
517
518#else
519
520int send_all(int fd, const void *_buf, int len1)
521{
522 int ret, len;
523 const uint8_t *buf = _buf;
524
525 len = len1;
526 while (len > 0) {
527 ret = write(fd, buf, len);
528 if (ret < 0) {
529 if (errno != EINTR && errno != EAGAIN)
530 return -1;
531 } else if (ret == 0) {
532 break;
533 } else {
534 buf += ret;
535 len -= ret;
536 }
537 }
538 return len1 - len;
539}
540#endif /* !_WIN32 */
541
542#ifndef _WIN32
543
544typedef struct IOWatchPoll
545{
546 GSource *src;
547 int max_size;
548
549 IOCanReadHandler *fd_can_read;
550 void *opaque;
551
552 QTAILQ_ENTRY(IOWatchPoll) node;
553} IOWatchPoll;
554
555static QTAILQ_HEAD(, IOWatchPoll) io_watch_poll_list =
556 QTAILQ_HEAD_INITIALIZER(io_watch_poll_list);
557
558static IOWatchPoll *io_watch_poll_from_source(GSource *source)
559{
560 IOWatchPoll *i;
561
562 QTAILQ_FOREACH(i, &io_watch_poll_list, node) {
563 if (i->src == source) {
564 return i;
565 }
566 }
567
568 return NULL;
569}
570
571static gboolean io_watch_poll_prepare(GSource *source, gint *timeout_)
572{
573 IOWatchPoll *iwp = io_watch_poll_from_source(source);
574
575 iwp->max_size = iwp->fd_can_read(iwp->opaque);
576 if (iwp->max_size == 0) {
577 return FALSE;
578 }
579
580 return g_io_watch_funcs.prepare(source, timeout_);
581}
582
583static gboolean io_watch_poll_check(GSource *source)
584{
585 IOWatchPoll *iwp = io_watch_poll_from_source(source);
586
587 if (iwp->max_size == 0) {
588 return FALSE;
589 }
590
591 return g_io_watch_funcs.check(source);
592}
593
594static gboolean io_watch_poll_dispatch(GSource *source, GSourceFunc callback,
595 gpointer user_data)
596{
597 return g_io_watch_funcs.dispatch(source, callback, user_data);
598}
599
600static void io_watch_poll_finalize(GSource *source)
601{
602 IOWatchPoll *iwp = io_watch_poll_from_source(source);
603 QTAILQ_REMOVE(&io_watch_poll_list, iwp, node);
604 g_io_watch_funcs.finalize(source);
605}
606
607static GSourceFuncs io_watch_poll_funcs = {
608 .prepare = io_watch_poll_prepare,
609 .check = io_watch_poll_check,
610 .dispatch = io_watch_poll_dispatch,
611 .finalize = io_watch_poll_finalize,
612};
613
614/* Can only be used for read */
615static guint io_add_watch_poll(GIOChannel *channel,
616 IOCanReadHandler *fd_can_read,
617 GIOFunc fd_read,
618 gpointer user_data)
619{
620 IOWatchPoll *iwp;
621 GSource *src;
622 guint tag;
623
624 src = g_io_create_watch(channel, G_IO_IN | G_IO_ERR | G_IO_HUP);
625 g_source_set_funcs(src, &io_watch_poll_funcs);
626 g_source_set_callback(src, (GSourceFunc)fd_read, user_data, NULL);
627 tag = g_source_attach(src, NULL);
628 g_source_unref(src);
629
630 iwp = g_malloc0(sizeof(*iwp));
631 iwp->src = src;
632 iwp->max_size = 0;
633 iwp->fd_can_read = fd_can_read;
634 iwp->opaque = user_data;
635
636 QTAILQ_INSERT_HEAD(&io_watch_poll_list, iwp, node);
637
638 return tag;
639}
640
641static GIOChannel *io_channel_from_fd(int fd)
642{
643 GIOChannel *chan;
644
645 if (fd == -1) {
646 return NULL;
647 }
648
649 chan = g_io_channel_unix_new(fd);
650
651 g_io_channel_set_encoding(chan, NULL, NULL);
652 g_io_channel_set_buffered(chan, FALSE);
653
654 return chan;
655}
656
657static GIOChannel *io_channel_from_socket(int fd)
658{
659 GIOChannel *chan;
660
661 if (fd == -1) {
662 return NULL;
663 }
664
665#ifdef _WIN32
666 chan = g_io_channel_win32_new_socket(fd);
667#else
668 chan = g_io_channel_unix_new(fd);
669#endif
670
671 g_io_channel_set_encoding(chan, NULL, NULL);
672 g_io_channel_set_buffered(chan, FALSE);
673
674 return chan;
675}
676
677static int io_channel_send_all(GIOChannel *fd, const void *_buf, int len1)
678{
679 GIOStatus status;
680 gsize bytes_written;
681 int len;
682 const uint8_t *buf = _buf;
683
684 len = len1;
685 while (len > 0) {
686 status = g_io_channel_write_chars(fd, (const gchar *)buf, len,
687 &bytes_written, NULL);
688 if (status != G_IO_STATUS_NORMAL) {
689 if (status != G_IO_STATUS_AGAIN) {
690 return -1;
691 }
692 } else if (status == G_IO_STATUS_EOF) {
693 break;
694 } else {
695 buf += bytes_written;
696 len -= bytes_written;
697 }
698 }
699 return len1 - len;
700}
701
702typedef struct FDCharDriver {
703 CharDriverState *chr;
704 GIOChannel *fd_in, *fd_out;
705 guint fd_in_tag;
706 int max_size;
707 QTAILQ_ENTRY(FDCharDriver) node;
708} FDCharDriver;
709
710static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
711{
712 FDCharDriver *s = chr->opaque;
713
714 return io_channel_send_all(s->fd_out, buf, len);
715}
716
717static gboolean fd_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
718{
719 CharDriverState *chr = opaque;
720 FDCharDriver *s = chr->opaque;
721 int len;
722 uint8_t buf[READ_BUF_LEN];
723 GIOStatus status;
724 gsize bytes_read;
725
726 len = sizeof(buf);
727 if (len > s->max_size) {
728 len = s->max_size;
729 }
730 if (len == 0) {
731 return FALSE;
732 }
733
734 status = g_io_channel_read_chars(chan, (gchar *)buf,
735 len, &bytes_read, NULL);
736 if (status == G_IO_STATUS_EOF) {
737 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
738 return FALSE;
739 }
740 if (status == G_IO_STATUS_NORMAL) {
741 qemu_chr_be_write(chr, buf, bytes_read);
742 }
743
744 return TRUE;
745}
746
747static int fd_chr_read_poll(void *opaque)
748{
749 CharDriverState *chr = opaque;
750 FDCharDriver *s = chr->opaque;
751
752 s->max_size = qemu_chr_be_can_write(chr);
753 return s->max_size;
754}
755
756static void fd_chr_update_read_handler(CharDriverState *chr)
757{
758 FDCharDriver *s = chr->opaque;
759
760 if (s->fd_in_tag) {
761 g_source_remove(s->fd_in_tag);
762 }
763
764 if (s->fd_in) {
765 s->fd_in_tag = io_add_watch_poll(s->fd_in, fd_chr_read_poll, fd_chr_read, chr);
766 }
767}
768
769static void fd_chr_close(struct CharDriverState *chr)
770{
771 FDCharDriver *s = chr->opaque;
772
773 if (s->fd_in_tag) {
774 g_source_remove(s->fd_in_tag);
775 s->fd_in_tag = 0;
776 }
777
778 if (s->fd_in) {
779 g_io_channel_unref(s->fd_in);
780 }
781 if (s->fd_out) {
782 g_io_channel_unref(s->fd_out);
783 }
784
785 g_free(s);
786 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
787}
788
789/* open a character device to a unix fd */
790static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
791{
792 CharDriverState *chr;
793 FDCharDriver *s;
794
795 chr = g_malloc0(sizeof(CharDriverState));
796 s = g_malloc0(sizeof(FDCharDriver));
797 s->fd_in = io_channel_from_fd(fd_in);
798 s->fd_out = io_channel_from_fd(fd_out);
799 s->chr = chr;
800 chr->opaque = s;
801 chr->chr_write = fd_chr_write;
802 chr->chr_update_read_handler = fd_chr_update_read_handler;
803 chr->chr_close = fd_chr_close;
804
805 qemu_chr_generic_open(chr);
806
807 return chr;
808}
809
810static CharDriverState *qemu_chr_open_file_out(QemuOpts *opts)
811{
812 int fd_out;
813
814 TFR(fd_out = qemu_open(qemu_opt_get(opts, "path"),
815 O_WRONLY | O_TRUNC | O_CREAT | O_BINARY, 0666));
816 if (fd_out < 0) {
817 return NULL;
818 }
819 return qemu_chr_open_fd(-1, fd_out);
820}
821
822static CharDriverState *qemu_chr_open_pipe(QemuOpts *opts)
823{
824 int fd_in, fd_out;
825 char filename_in[256], filename_out[256];
826 const char *filename = qemu_opt_get(opts, "path");
827
828 if (filename == NULL) {
829 fprintf(stderr, "chardev: pipe: no filename given\n");
830 return NULL;
831 }
832
833 snprintf(filename_in, 256, "%s.in", filename);
834 snprintf(filename_out, 256, "%s.out", filename);
835 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
836 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
837 if (fd_in < 0 || fd_out < 0) {
838 if (fd_in >= 0)
839 close(fd_in);
840 if (fd_out >= 0)
841 close(fd_out);
842 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
843 if (fd_in < 0) {
844 return NULL;
845 }
846 }
847 return qemu_chr_open_fd(fd_in, fd_out);
848}
849
850/* init terminal so that we can grab keys */
851static struct termios oldtty;
852static int old_fd0_flags;
853static bool stdio_allow_signal;
854
855static void term_exit(void)
856{
857 tcsetattr (0, TCSANOW, &oldtty);
858 fcntl(0, F_SETFL, old_fd0_flags);
859}
860
861static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
862{
863 struct termios tty;
864
865 tty = oldtty;
866 if (!echo) {
867 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
868 |INLCR|IGNCR|ICRNL|IXON);
869 tty.c_oflag |= OPOST;
870 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
871 tty.c_cflag &= ~(CSIZE|PARENB);
872 tty.c_cflag |= CS8;
873 tty.c_cc[VMIN] = 1;
874 tty.c_cc[VTIME] = 0;
875 }
876 /* if graphical mode, we allow Ctrl-C handling */
877 if (!stdio_allow_signal)
878 tty.c_lflag &= ~ISIG;
879
880 tcsetattr (0, TCSANOW, &tty);
881}
882
883static void qemu_chr_close_stdio(struct CharDriverState *chr)
884{
885 term_exit();
886 fd_chr_close(chr);
887}
888
889static CharDriverState *qemu_chr_open_stdio(QemuOpts *opts)
890{
891 CharDriverState *chr;
892
893 if (is_daemonized()) {
894 error_report("cannot use stdio with -daemonize");
895 return NULL;
896 }
897 old_fd0_flags = fcntl(0, F_GETFL);
898 tcgetattr (0, &oldtty);
899 fcntl(0, F_SETFL, O_NONBLOCK);
900 atexit(term_exit);
901
902 chr = qemu_chr_open_fd(0, 1);
903 chr->chr_close = qemu_chr_close_stdio;
904 chr->chr_set_echo = qemu_chr_set_echo_stdio;
905 stdio_allow_signal = qemu_opt_get_bool(opts, "signal",
906 display_type != DT_NOGRAPHIC);
907 qemu_chr_fe_set_echo(chr, false);
908
909 return chr;
910}
911
912#ifdef __sun__
913/* Once Solaris has openpty(), this is going to be removed. */
914static int openpty(int *amaster, int *aslave, char *name,
915 struct termios *termp, struct winsize *winp)
916{
917 const char *slave;
918 int mfd = -1, sfd = -1;
919
920 *amaster = *aslave = -1;
921
922 mfd = open("/dev/ptmx", O_RDWR | O_NOCTTY);
923 if (mfd < 0)
924 goto err;
925
926 if (grantpt(mfd) == -1 || unlockpt(mfd) == -1)
927 goto err;
928
929 if ((slave = ptsname(mfd)) == NULL)
930 goto err;
931
932 if ((sfd = open(slave, O_RDONLY | O_NOCTTY)) == -1)
933 goto err;
934
935 if (ioctl(sfd, I_PUSH, "ptem") == -1 ||
936 (termp != NULL && tcgetattr(sfd, termp) < 0))
937 goto err;
938
939 if (amaster)
940 *amaster = mfd;
941 if (aslave)
942 *aslave = sfd;
943 if (winp)
944 ioctl(sfd, TIOCSWINSZ, winp);
945
946 return 0;
947
948err:
949 if (sfd != -1)
950 close(sfd);
951 close(mfd);
952 return -1;
953}
954
955static void cfmakeraw (struct termios *termios_p)
956{
957 termios_p->c_iflag &=
958 ~(IGNBRK|BRKINT|PARMRK|ISTRIP|INLCR|IGNCR|ICRNL|IXON);
959 termios_p->c_oflag &= ~OPOST;
960 termios_p->c_lflag &= ~(ECHO|ECHONL|ICANON|ISIG|IEXTEN);
961 termios_p->c_cflag &= ~(CSIZE|PARENB);
962 termios_p->c_cflag |= CS8;
963
964 termios_p->c_cc[VMIN] = 0;
965 termios_p->c_cc[VTIME] = 0;
966}
967#endif
968
969#if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
970 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
971 || defined(__GLIBC__)
972
973#define HAVE_CHARDEV_TTY 1
974
975typedef struct {
976 GIOChannel *fd;
977 guint fd_tag;
978 int connected;
979 int polling;
980 int read_bytes;
981 QEMUTimer *timer;
982} PtyCharDriver;
983
984static void pty_chr_update_read_handler(CharDriverState *chr);
985static void pty_chr_state(CharDriverState *chr, int connected);
986
987static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
988{
989 PtyCharDriver *s = chr->opaque;
990
991 if (!s->connected) {
992 /* guest sends data, check for (re-)connect */
993 pty_chr_update_read_handler(chr);
994 return 0;
995 }
996 return io_channel_send_all(s->fd, buf, len);
997}
998
999static int pty_chr_read_poll(void *opaque)
1000{
1001 CharDriverState *chr = opaque;
1002 PtyCharDriver *s = chr->opaque;
1003
1004 s->read_bytes = qemu_chr_be_can_write(chr);
1005 return s->read_bytes;
1006}
1007
1008static gboolean pty_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
1009{
1010 CharDriverState *chr = opaque;
1011 PtyCharDriver *s = chr->opaque;
1012 gsize size, len;
1013 uint8_t buf[READ_BUF_LEN];
1014 GIOStatus status;
1015
1016 len = sizeof(buf);
1017 if (len > s->read_bytes)
1018 len = s->read_bytes;
1019 if (len == 0)
1020 return FALSE;
1021 status = g_io_channel_read_chars(s->fd, (gchar *)buf, len, &size, NULL);
1022 if (status != G_IO_STATUS_NORMAL) {
1023 pty_chr_state(chr, 0);
1024 return FALSE;
1025 } else {
1026 pty_chr_state(chr, 1);
1027 qemu_chr_be_write(chr, buf, size);
1028 }
1029 return TRUE;
1030}
1031
1032static void pty_chr_update_read_handler(CharDriverState *chr)
1033{
1034 PtyCharDriver *s = chr->opaque;
1035
1036 if (s->fd_tag) {
1037 g_source_remove(s->fd_tag);
1038 }
1039
1040 s->fd_tag = io_add_watch_poll(s->fd, pty_chr_read_poll, pty_chr_read, chr);
1041 s->polling = 1;
1042 /*
1043 * Short timeout here: just need wait long enougth that qemu makes
1044 * it through the poll loop once. When reconnected we want a
1045 * short timeout so we notice it almost instantly. Otherwise
1046 * read() gives us -EIO instantly, making pty_chr_state() reset the
1047 * timeout to the normal (much longer) poll interval before the
1048 * timer triggers.
1049 */
1050 qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 10);
1051}
1052
1053static void pty_chr_state(CharDriverState *chr, int connected)
1054{
1055 PtyCharDriver *s = chr->opaque;
1056
1057 if (!connected) {
1058 g_source_remove(s->fd_tag);
1059 s->fd_tag = 0;
1060 s->connected = 0;
1061 s->polling = 0;
1062 /* (re-)connect poll interval for idle guests: once per second.
1063 * We check more frequently in case the guests sends data to
1064 * the virtual device linked to our pty. */
1065 qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 1000);
1066 } else {
1067 if (!s->connected)
1068 qemu_chr_generic_open(chr);
1069 s->connected = 1;
1070 }
1071}
1072
1073static void pty_chr_timer(void *opaque)
1074{
1075 struct CharDriverState *chr = opaque;
1076 PtyCharDriver *s = chr->opaque;
1077
1078 if (s->connected)
1079 return;
1080 if (s->polling) {
1081 /* If we arrive here without polling being cleared due
1082 * read returning -EIO, then we are (re-)connected */
1083 pty_chr_state(chr, 1);
1084 return;
1085 }
1086
1087 /* Next poll ... */
1088 pty_chr_update_read_handler(chr);
1089}
1090
1091static void pty_chr_close(struct CharDriverState *chr)
1092{
1093 PtyCharDriver *s = chr->opaque;
1094 int fd;
1095
1096 if (s->fd_tag) {
1097 g_source_remove(s->fd_tag);
1098 }
1099 fd = g_io_channel_unix_get_fd(s->fd);
1100 g_io_channel_unref(s->fd);
1101 close(fd);
1102 qemu_del_timer(s->timer);
1103 qemu_free_timer(s->timer);
1104 g_free(s);
1105 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1106}
1107
1108static CharDriverState *qemu_chr_open_pty(QemuOpts *opts)
1109{
1110 CharDriverState *chr;
1111 PtyCharDriver *s;
1112 struct termios tty;
1113 const char *label;
1114 int master_fd, slave_fd, len;
1115#if defined(__OpenBSD__) || defined(__DragonFly__)
1116 char pty_name[PATH_MAX];
1117#define q_ptsname(x) pty_name
1118#else
1119 char *pty_name = NULL;
1120#define q_ptsname(x) ptsname(x)
1121#endif
1122
1123 if (openpty(&master_fd, &slave_fd, pty_name, NULL, NULL) < 0) {
1124 return NULL;
1125 }
1126
1127 /* Set raw attributes on the pty. */
1128 tcgetattr(slave_fd, &tty);
1129 cfmakeraw(&tty);
1130 tcsetattr(slave_fd, TCSAFLUSH, &tty);
1131 close(slave_fd);
1132
1133 chr = g_malloc0(sizeof(CharDriverState));
1134
1135 len = strlen(q_ptsname(master_fd)) + 5;
1136 chr->filename = g_malloc(len);
1137 snprintf(chr->filename, len, "pty:%s", q_ptsname(master_fd));
1138 qemu_opt_set(opts, "path", q_ptsname(master_fd));
1139
1140 label = qemu_opts_id(opts);
1141 fprintf(stderr, "char device redirected to %s%s%s%s\n",
1142 q_ptsname(master_fd),
1143 label ? " (label " : "",
1144 label ? label : "",
1145 label ? ")" : "");
1146
1147 s = g_malloc0(sizeof(PtyCharDriver));
1148 chr->opaque = s;
1149 chr->chr_write = pty_chr_write;
1150 chr->chr_update_read_handler = pty_chr_update_read_handler;
1151 chr->chr_close = pty_chr_close;
1152
1153 s->fd = io_channel_from_fd(master_fd);
1154 s->timer = qemu_new_timer_ms(rt_clock, pty_chr_timer, chr);
1155
1156 return chr;
1157}
1158
1159static void tty_serial_init(int fd, int speed,
1160 int parity, int data_bits, int stop_bits)
1161{
1162 struct termios tty;
1163 speed_t spd;
1164
1165#if 0
1166 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1167 speed, parity, data_bits, stop_bits);
1168#endif
1169 tcgetattr (fd, &tty);
1170
1171#define check_speed(val) if (speed <= val) { spd = B##val; break; }
1172 speed = speed * 10 / 11;
1173 do {
1174 check_speed(50);
1175 check_speed(75);
1176 check_speed(110);
1177 check_speed(134);
1178 check_speed(150);
1179 check_speed(200);
1180 check_speed(300);
1181 check_speed(600);
1182 check_speed(1200);
1183 check_speed(1800);
1184 check_speed(2400);
1185 check_speed(4800);
1186 check_speed(9600);
1187 check_speed(19200);
1188 check_speed(38400);
1189 /* Non-Posix values follow. They may be unsupported on some systems. */
1190 check_speed(57600);
1191 check_speed(115200);
1192#ifdef B230400
1193 check_speed(230400);
1194#endif
1195#ifdef B460800
1196 check_speed(460800);
1197#endif
1198#ifdef B500000
1199 check_speed(500000);
1200#endif
1201#ifdef B576000
1202 check_speed(576000);
1203#endif
1204#ifdef B921600
1205 check_speed(921600);
1206#endif
1207#ifdef B1000000
1208 check_speed(1000000);
1209#endif
1210#ifdef B1152000
1211 check_speed(1152000);
1212#endif
1213#ifdef B1500000
1214 check_speed(1500000);
1215#endif
1216#ifdef B2000000
1217 check_speed(2000000);
1218#endif
1219#ifdef B2500000
1220 check_speed(2500000);
1221#endif
1222#ifdef B3000000
1223 check_speed(3000000);
1224#endif
1225#ifdef B3500000
1226 check_speed(3500000);
1227#endif
1228#ifdef B4000000
1229 check_speed(4000000);
1230#endif
1231 spd = B115200;
1232 } while (0);
1233
1234 cfsetispeed(&tty, spd);
1235 cfsetospeed(&tty, spd);
1236
1237 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1238 |INLCR|IGNCR|ICRNL|IXON);
1239 tty.c_oflag |= OPOST;
1240 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1241 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1242 switch(data_bits) {
1243 default:
1244 case 8:
1245 tty.c_cflag |= CS8;
1246 break;
1247 case 7:
1248 tty.c_cflag |= CS7;
1249 break;
1250 case 6:
1251 tty.c_cflag |= CS6;
1252 break;
1253 case 5:
1254 tty.c_cflag |= CS5;
1255 break;
1256 }
1257 switch(parity) {
1258 default:
1259 case 'N':
1260 break;
1261 case 'E':
1262 tty.c_cflag |= PARENB;
1263 break;
1264 case 'O':
1265 tty.c_cflag |= PARENB | PARODD;
1266 break;
1267 }
1268 if (stop_bits == 2)
1269 tty.c_cflag |= CSTOPB;
1270
1271 tcsetattr (fd, TCSANOW, &tty);
1272}
1273
1274static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1275{
1276 FDCharDriver *s = chr->opaque;
1277
1278 switch(cmd) {
1279 case CHR_IOCTL_SERIAL_SET_PARAMS:
1280 {
1281 QEMUSerialSetParams *ssp = arg;
1282 tty_serial_init(g_io_channel_unix_get_fd(s->fd_in),
1283 ssp->speed, ssp->parity,
1284 ssp->data_bits, ssp->stop_bits);
1285 }
1286 break;
1287 case CHR_IOCTL_SERIAL_SET_BREAK:
1288 {
1289 int enable = *(int *)arg;
1290 if (enable) {
1291 tcsendbreak(g_io_channel_unix_get_fd(s->fd_in), 1);
1292 }
1293 }
1294 break;
1295 case CHR_IOCTL_SERIAL_GET_TIOCM:
1296 {
1297 int sarg = 0;
1298 int *targ = (int *)arg;
1299 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMGET, &sarg);
1300 *targ = 0;
1301 if (sarg & TIOCM_CTS)
1302 *targ |= CHR_TIOCM_CTS;
1303 if (sarg & TIOCM_CAR)
1304 *targ |= CHR_TIOCM_CAR;
1305 if (sarg & TIOCM_DSR)
1306 *targ |= CHR_TIOCM_DSR;
1307 if (sarg & TIOCM_RI)
1308 *targ |= CHR_TIOCM_RI;
1309 if (sarg & TIOCM_DTR)
1310 *targ |= CHR_TIOCM_DTR;
1311 if (sarg & TIOCM_RTS)
1312 *targ |= CHR_TIOCM_RTS;
1313 }
1314 break;
1315 case CHR_IOCTL_SERIAL_SET_TIOCM:
1316 {
1317 int sarg = *(int *)arg;
1318 int targ = 0;
1319 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMGET, &targ);
1320 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1321 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1322 if (sarg & CHR_TIOCM_CTS)
1323 targ |= TIOCM_CTS;
1324 if (sarg & CHR_TIOCM_CAR)
1325 targ |= TIOCM_CAR;
1326 if (sarg & CHR_TIOCM_DSR)
1327 targ |= TIOCM_DSR;
1328 if (sarg & CHR_TIOCM_RI)
1329 targ |= TIOCM_RI;
1330 if (sarg & CHR_TIOCM_DTR)
1331 targ |= TIOCM_DTR;
1332 if (sarg & CHR_TIOCM_RTS)
1333 targ |= TIOCM_RTS;
1334 ioctl(g_io_channel_unix_get_fd(s->fd_in), TIOCMSET, &targ);
1335 }
1336 break;
1337 default:
1338 return -ENOTSUP;
1339 }
1340 return 0;
1341}
1342
1343static void qemu_chr_close_tty(CharDriverState *chr)
1344{
1345 FDCharDriver *s = chr->opaque;
1346 int fd = -1;
1347
1348 if (s) {
1349 fd = g_io_channel_unix_get_fd(s->fd_in);
1350 }
1351
1352 fd_chr_close(chr);
1353
1354 if (fd >= 0) {
1355 close(fd);
1356 }
1357}
1358
1359static CharDriverState *qemu_chr_open_tty_fd(int fd)
1360{
1361 CharDriverState *chr;
1362
1363 tty_serial_init(fd, 115200, 'N', 8, 1);
1364 chr = qemu_chr_open_fd(fd, fd);
1365 chr->chr_ioctl = tty_serial_ioctl;
1366 chr->chr_close = qemu_chr_close_tty;
1367 return chr;
1368}
1369
1370static CharDriverState *qemu_chr_open_tty(QemuOpts *opts)
1371{
1372 const char *filename = qemu_opt_get(opts, "path");
1373 int fd;
1374
1375 TFR(fd = qemu_open(filename, O_RDWR | O_NONBLOCK));
1376 if (fd < 0) {
1377 return NULL;
1378 }
1379 return qemu_chr_open_tty_fd(fd);
1380}
1381#endif /* __linux__ || __sun__ */
1382
1383#if defined(__linux__)
1384
1385#define HAVE_CHARDEV_PARPORT 1
1386
1387typedef struct {
1388 int fd;
1389 int mode;
1390} ParallelCharDriver;
1391
1392static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1393{
1394 if (s->mode != mode) {
1395 int m = mode;
1396 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1397 return 0;
1398 s->mode = mode;
1399 }
1400 return 1;
1401}
1402
1403static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1404{
1405 ParallelCharDriver *drv = chr->opaque;
1406 int fd = drv->fd;
1407 uint8_t b;
1408
1409 switch(cmd) {
1410 case CHR_IOCTL_PP_READ_DATA:
1411 if (ioctl(fd, PPRDATA, &b) < 0)
1412 return -ENOTSUP;
1413 *(uint8_t *)arg = b;
1414 break;
1415 case CHR_IOCTL_PP_WRITE_DATA:
1416 b = *(uint8_t *)arg;
1417 if (ioctl(fd, PPWDATA, &b) < 0)
1418 return -ENOTSUP;
1419 break;
1420 case CHR_IOCTL_PP_READ_CONTROL:
1421 if (ioctl(fd, PPRCONTROL, &b) < 0)
1422 return -ENOTSUP;
1423 /* Linux gives only the lowest bits, and no way to know data
1424 direction! For better compatibility set the fixed upper
1425 bits. */
1426 *(uint8_t *)arg = b | 0xc0;
1427 break;
1428 case CHR_IOCTL_PP_WRITE_CONTROL:
1429 b = *(uint8_t *)arg;
1430 if (ioctl(fd, PPWCONTROL, &b) < 0)
1431 return -ENOTSUP;
1432 break;
1433 case CHR_IOCTL_PP_READ_STATUS:
1434 if (ioctl(fd, PPRSTATUS, &b) < 0)
1435 return -ENOTSUP;
1436 *(uint8_t *)arg = b;
1437 break;
1438 case CHR_IOCTL_PP_DATA_DIR:
1439 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1440 return -ENOTSUP;
1441 break;
1442 case CHR_IOCTL_PP_EPP_READ_ADDR:
1443 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1444 struct ParallelIOArg *parg = arg;
1445 int n = read(fd, parg->buffer, parg->count);
1446 if (n != parg->count) {
1447 return -EIO;
1448 }
1449 }
1450 break;
1451 case CHR_IOCTL_PP_EPP_READ:
1452 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1453 struct ParallelIOArg *parg = arg;
1454 int n = read(fd, parg->buffer, parg->count);
1455 if (n != parg->count) {
1456 return -EIO;
1457 }
1458 }
1459 break;
1460 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1461 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1462 struct ParallelIOArg *parg = arg;
1463 int n = write(fd, parg->buffer, parg->count);
1464 if (n != parg->count) {
1465 return -EIO;
1466 }
1467 }
1468 break;
1469 case CHR_IOCTL_PP_EPP_WRITE:
1470 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1471 struct ParallelIOArg *parg = arg;
1472 int n = write(fd, parg->buffer, parg->count);
1473 if (n != parg->count) {
1474 return -EIO;
1475 }
1476 }
1477 break;
1478 default:
1479 return -ENOTSUP;
1480 }
1481 return 0;
1482}
1483
1484static void pp_close(CharDriverState *chr)
1485{
1486 ParallelCharDriver *drv = chr->opaque;
1487 int fd = drv->fd;
1488
1489 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1490 ioctl(fd, PPRELEASE);
1491 close(fd);
1492 g_free(drv);
1493 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1494}
1495
1496static CharDriverState *qemu_chr_open_pp_fd(int fd)
1497{
1498 CharDriverState *chr;
1499 ParallelCharDriver *drv;
1500
1501 if (ioctl(fd, PPCLAIM) < 0) {
1502 close(fd);
1503 return NULL;
1504 }
1505
1506 drv = g_malloc0(sizeof(ParallelCharDriver));
1507 drv->fd = fd;
1508 drv->mode = IEEE1284_MODE_COMPAT;
1509
1510 chr = g_malloc0(sizeof(CharDriverState));
1511 chr->chr_write = null_chr_write;
1512 chr->chr_ioctl = pp_ioctl;
1513 chr->chr_close = pp_close;
1514 chr->opaque = drv;
1515
1516 qemu_chr_generic_open(chr);
1517
1518 return chr;
1519}
1520#endif /* __linux__ */
1521
1522#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
1523
1524#define HAVE_CHARDEV_PARPORT 1
1525
1526static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1527{
1528 int fd = (int)(intptr_t)chr->opaque;
1529 uint8_t b;
1530
1531 switch(cmd) {
1532 case CHR_IOCTL_PP_READ_DATA:
1533 if (ioctl(fd, PPIGDATA, &b) < 0)
1534 return -ENOTSUP;
1535 *(uint8_t *)arg = b;
1536 break;
1537 case CHR_IOCTL_PP_WRITE_DATA:
1538 b = *(uint8_t *)arg;
1539 if (ioctl(fd, PPISDATA, &b) < 0)
1540 return -ENOTSUP;
1541 break;
1542 case CHR_IOCTL_PP_READ_CONTROL:
1543 if (ioctl(fd, PPIGCTRL, &b) < 0)
1544 return -ENOTSUP;
1545 *(uint8_t *)arg = b;
1546 break;
1547 case CHR_IOCTL_PP_WRITE_CONTROL:
1548 b = *(uint8_t *)arg;
1549 if (ioctl(fd, PPISCTRL, &b) < 0)
1550 return -ENOTSUP;
1551 break;
1552 case CHR_IOCTL_PP_READ_STATUS:
1553 if (ioctl(fd, PPIGSTATUS, &b) < 0)
1554 return -ENOTSUP;
1555 *(uint8_t *)arg = b;
1556 break;
1557 default:
1558 return -ENOTSUP;
1559 }
1560 return 0;
1561}
1562
1563static CharDriverState *qemu_chr_open_pp_fd(int fd)
1564{
1565 CharDriverState *chr;
1566
1567 chr = g_malloc0(sizeof(CharDriverState));
1568 chr->opaque = (void *)(intptr_t)fd;
1569 chr->chr_write = null_chr_write;
1570 chr->chr_ioctl = pp_ioctl;
1571 return chr;
1572}
1573#endif
1574
1575#else /* _WIN32 */
1576
1577typedef struct {
1578 int max_size;
1579 HANDLE hcom, hrecv, hsend;
1580 OVERLAPPED orecv, osend;
1581 BOOL fpipe;
1582 DWORD len;
1583} WinCharState;
1584
1585typedef struct {
1586 HANDLE hStdIn;
1587 HANDLE hInputReadyEvent;
1588 HANDLE hInputDoneEvent;
1589 HANDLE hInputThread;
1590 uint8_t win_stdio_buf;
1591} WinStdioCharState;
1592
1593#define NSENDBUF 2048
1594#define NRECVBUF 2048
1595#define MAXCONNECT 1
1596#define NTIMEOUT 5000
1597
1598static int win_chr_poll(void *opaque);
1599static int win_chr_pipe_poll(void *opaque);
1600
1601static void win_chr_close(CharDriverState *chr)
1602{
1603 WinCharState *s = chr->opaque;
1604
1605 if (s->hsend) {
1606 CloseHandle(s->hsend);
1607 s->hsend = NULL;
1608 }
1609 if (s->hrecv) {
1610 CloseHandle(s->hrecv);
1611 s->hrecv = NULL;
1612 }
1613 if (s->hcom) {
1614 CloseHandle(s->hcom);
1615 s->hcom = NULL;
1616 }
1617 if (s->fpipe)
1618 qemu_del_polling_cb(win_chr_pipe_poll, chr);
1619 else
1620 qemu_del_polling_cb(win_chr_poll, chr);
1621
1622 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1623}
1624
1625static int win_chr_init(CharDriverState *chr, const char *filename)
1626{
1627 WinCharState *s = chr->opaque;
1628 COMMCONFIG comcfg;
1629 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
1630 COMSTAT comstat;
1631 DWORD size;
1632 DWORD err;
1633
1634 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1635 if (!s->hsend) {
1636 fprintf(stderr, "Failed CreateEvent\n");
1637 goto fail;
1638 }
1639 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1640 if (!s->hrecv) {
1641 fprintf(stderr, "Failed CreateEvent\n");
1642 goto fail;
1643 }
1644
1645 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
1646 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
1647 if (s->hcom == INVALID_HANDLE_VALUE) {
1648 fprintf(stderr, "Failed CreateFile (%lu)\n", GetLastError());
1649 s->hcom = NULL;
1650 goto fail;
1651 }
1652
1653 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
1654 fprintf(stderr, "Failed SetupComm\n");
1655 goto fail;
1656 }
1657
1658 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
1659 size = sizeof(COMMCONFIG);
1660 GetDefaultCommConfig(filename, &comcfg, &size);
1661 comcfg.dcb.DCBlength = sizeof(DCB);
1662 CommConfigDialog(filename, NULL, &comcfg);
1663
1664 if (!SetCommState(s->hcom, &comcfg.dcb)) {
1665 fprintf(stderr, "Failed SetCommState\n");
1666 goto fail;
1667 }
1668
1669 if (!SetCommMask(s->hcom, EV_ERR)) {
1670 fprintf(stderr, "Failed SetCommMask\n");
1671 goto fail;
1672 }
1673
1674 cto.ReadIntervalTimeout = MAXDWORD;
1675 if (!SetCommTimeouts(s->hcom, &cto)) {
1676 fprintf(stderr, "Failed SetCommTimeouts\n");
1677 goto fail;
1678 }
1679
1680 if (!ClearCommError(s->hcom, &err, &comstat)) {
1681 fprintf(stderr, "Failed ClearCommError\n");
1682 goto fail;
1683 }
1684 qemu_add_polling_cb(win_chr_poll, chr);
1685 return 0;
1686
1687 fail:
1688 win_chr_close(chr);
1689 return -1;
1690}
1691
1692static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
1693{
1694 WinCharState *s = chr->opaque;
1695 DWORD len, ret, size, err;
1696
1697 len = len1;
1698 ZeroMemory(&s->osend, sizeof(s->osend));
1699 s->osend.hEvent = s->hsend;
1700 while (len > 0) {
1701 if (s->hsend)
1702 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
1703 else
1704 ret = WriteFile(s->hcom, buf, len, &size, NULL);
1705 if (!ret) {
1706 err = GetLastError();
1707 if (err == ERROR_IO_PENDING) {
1708 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
1709 if (ret) {
1710 buf += size;
1711 len -= size;
1712 } else {
1713 break;
1714 }
1715 } else {
1716 break;
1717 }
1718 } else {
1719 buf += size;
1720 len -= size;
1721 }
1722 }
1723 return len1 - len;
1724}
1725
1726static int win_chr_read_poll(CharDriverState *chr)
1727{
1728 WinCharState *s = chr->opaque;
1729
1730 s->max_size = qemu_chr_be_can_write(chr);
1731 return s->max_size;
1732}
1733
1734static void win_chr_readfile(CharDriverState *chr)
1735{
1736 WinCharState *s = chr->opaque;
1737 int ret, err;
1738 uint8_t buf[READ_BUF_LEN];
1739 DWORD size;
1740
1741 ZeroMemory(&s->orecv, sizeof(s->orecv));
1742 s->orecv.hEvent = s->hrecv;
1743 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
1744 if (!ret) {
1745 err = GetLastError();
1746 if (err == ERROR_IO_PENDING) {
1747 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
1748 }
1749 }
1750
1751 if (size > 0) {
1752 qemu_chr_be_write(chr, buf, size);
1753 }
1754}
1755
1756static void win_chr_read(CharDriverState *chr)
1757{
1758 WinCharState *s = chr->opaque;
1759
1760 if (s->len > s->max_size)
1761 s->len = s->max_size;
1762 if (s->len == 0)
1763 return;
1764
1765 win_chr_readfile(chr);
1766}
1767
1768static int win_chr_poll(void *opaque)
1769{
1770 CharDriverState *chr = opaque;
1771 WinCharState *s = chr->opaque;
1772 COMSTAT status;
1773 DWORD comerr;
1774
1775 ClearCommError(s->hcom, &comerr, &status);
1776 if (status.cbInQue > 0) {
1777 s->len = status.cbInQue;
1778 win_chr_read_poll(chr);
1779 win_chr_read(chr);
1780 return 1;
1781 }
1782 return 0;
1783}
1784
1785static CharDriverState *qemu_chr_open_win_path(const char *filename)
1786{
1787 CharDriverState *chr;
1788 WinCharState *s;
1789
1790 chr = g_malloc0(sizeof(CharDriverState));
1791 s = g_malloc0(sizeof(WinCharState));
1792 chr->opaque = s;
1793 chr->chr_write = win_chr_write;
1794 chr->chr_close = win_chr_close;
1795
1796 if (win_chr_init(chr, filename) < 0) {
1797 g_free(s);
1798 g_free(chr);
1799 return NULL;
1800 }
1801 qemu_chr_generic_open(chr);
1802 return chr;
1803}
1804
1805static CharDriverState *qemu_chr_open_win(QemuOpts *opts)
1806{
1807 return qemu_chr_open_win_path(qemu_opt_get(opts, "path"));
1808}
1809
1810static int win_chr_pipe_poll(void *opaque)
1811{
1812 CharDriverState *chr = opaque;
1813 WinCharState *s = chr->opaque;
1814 DWORD size;
1815
1816 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
1817 if (size > 0) {
1818 s->len = size;
1819 win_chr_read_poll(chr);
1820 win_chr_read(chr);
1821 return 1;
1822 }
1823 return 0;
1824}
1825
1826static int win_chr_pipe_init(CharDriverState *chr, const char *filename)
1827{
1828 WinCharState *s = chr->opaque;
1829 OVERLAPPED ov;
1830 int ret;
1831 DWORD size;
1832 char openname[256];
1833
1834 s->fpipe = TRUE;
1835
1836 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1837 if (!s->hsend) {
1838 fprintf(stderr, "Failed CreateEvent\n");
1839 goto fail;
1840 }
1841 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1842 if (!s->hrecv) {
1843 fprintf(stderr, "Failed CreateEvent\n");
1844 goto fail;
1845 }
1846
1847 snprintf(openname, sizeof(openname), "\\\\.\\pipe\\%s", filename);
1848 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
1849 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
1850 PIPE_WAIT,
1851 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
1852 if (s->hcom == INVALID_HANDLE_VALUE) {
1853 fprintf(stderr, "Failed CreateNamedPipe (%lu)\n", GetLastError());
1854 s->hcom = NULL;
1855 goto fail;
1856 }
1857
1858 ZeroMemory(&ov, sizeof(ov));
1859 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
1860 ret = ConnectNamedPipe(s->hcom, &ov);
1861 if (ret) {
1862 fprintf(stderr, "Failed ConnectNamedPipe\n");
1863 goto fail;
1864 }
1865
1866 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
1867 if (!ret) {
1868 fprintf(stderr, "Failed GetOverlappedResult\n");
1869 if (ov.hEvent) {
1870 CloseHandle(ov.hEvent);
1871 ov.hEvent = NULL;
1872 }
1873 goto fail;
1874 }
1875
1876 if (ov.hEvent) {
1877 CloseHandle(ov.hEvent);
1878 ov.hEvent = NULL;
1879 }
1880 qemu_add_polling_cb(win_chr_pipe_poll, chr);
1881 return 0;
1882
1883 fail:
1884 win_chr_close(chr);
1885 return -1;
1886}
1887
1888
1889static CharDriverState *qemu_chr_open_win_pipe(QemuOpts *opts)
1890{
1891 const char *filename = qemu_opt_get(opts, "path");
1892 CharDriverState *chr;
1893 WinCharState *s;
1894
1895 chr = g_malloc0(sizeof(CharDriverState));
1896 s = g_malloc0(sizeof(WinCharState));
1897 chr->opaque = s;
1898 chr->chr_write = win_chr_write;
1899 chr->chr_close = win_chr_close;
1900
1901 if (win_chr_pipe_init(chr, filename) < 0) {
1902 g_free(s);
1903 g_free(chr);
1904 return NULL;
1905 }
1906 qemu_chr_generic_open(chr);
1907 return chr;
1908}
1909
1910static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out)
1911{
1912 CharDriverState *chr;
1913 WinCharState *s;
1914
1915 chr = g_malloc0(sizeof(CharDriverState));
1916 s = g_malloc0(sizeof(WinCharState));
1917 s->hcom = fd_out;
1918 chr->opaque = s;
1919 chr->chr_write = win_chr_write;
1920 qemu_chr_generic_open(chr);
1921 return chr;
1922}
1923
1924static CharDriverState *qemu_chr_open_win_con(QemuOpts *opts)
1925{
1926 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE));
1927}
1928
1929static CharDriverState *qemu_chr_open_win_file_out(QemuOpts *opts)
1930{
1931 const char *file_out = qemu_opt_get(opts, "path");
1932 HANDLE fd_out;
1933
1934 fd_out = CreateFile(file_out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
1935 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
1936 if (fd_out == INVALID_HANDLE_VALUE) {
1937 return NULL;
1938 }
1939
1940 return qemu_chr_open_win_file(fd_out);
1941}
1942
1943static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
1944{
1945 HANDLE hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
1946 DWORD dwSize;
1947 int len1;
1948
1949 len1 = len;
1950
1951 while (len1 > 0) {
1952 if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
1953 break;
1954 }
1955 buf += dwSize;
1956 len1 -= dwSize;
1957 }
1958
1959 return len - len1;
1960}
1961
1962static void win_stdio_wait_func(void *opaque)
1963{
1964 CharDriverState *chr = opaque;
1965 WinStdioCharState *stdio = chr->opaque;
1966 INPUT_RECORD buf[4];
1967 int ret;
1968 DWORD dwSize;
1969 int i;
1970
1971 ret = ReadConsoleInput(stdio->hStdIn, buf, sizeof(buf) / sizeof(*buf),
1972 &dwSize);
1973
1974 if (!ret) {
1975 /* Avoid error storm */
1976 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
1977 return;
1978 }
1979
1980 for (i = 0; i < dwSize; i++) {
1981 KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
1982
1983 if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
1984 int j;
1985 if (kev->uChar.AsciiChar != 0) {
1986 for (j = 0; j < kev->wRepeatCount; j++) {
1987 if (qemu_chr_be_can_write(chr)) {
1988 uint8_t c = kev->uChar.AsciiChar;
1989 qemu_chr_be_write(chr, &c, 1);
1990 }
1991 }
1992 }
1993 }
1994 }
1995}
1996
1997static DWORD WINAPI win_stdio_thread(LPVOID param)
1998{
1999 CharDriverState *chr = param;
2000 WinStdioCharState *stdio = chr->opaque;
2001 int ret;
2002 DWORD dwSize;
2003
2004 while (1) {
2005
2006 /* Wait for one byte */
2007 ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
2008
2009 /* Exit in case of error, continue if nothing read */
2010 if (!ret) {
2011 break;
2012 }
2013 if (!dwSize) {
2014 continue;
2015 }
2016
2017 /* Some terminal emulator returns \r\n for Enter, just pass \n */
2018 if (stdio->win_stdio_buf == '\r') {
2019 continue;
2020 }
2021
2022 /* Signal the main thread and wait until the byte was eaten */
2023 if (!SetEvent(stdio->hInputReadyEvent)) {
2024 break;
2025 }
2026 if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
2027 != WAIT_OBJECT_0) {
2028 break;
2029 }
2030 }
2031
2032 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2033 return 0;
2034}
2035
2036static void win_stdio_thread_wait_func(void *opaque)
2037{
2038 CharDriverState *chr = opaque;
2039 WinStdioCharState *stdio = chr->opaque;
2040
2041 if (qemu_chr_be_can_write(chr)) {
2042 qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
2043 }
2044
2045 SetEvent(stdio->hInputDoneEvent);
2046}
2047
2048static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
2049{
2050 WinStdioCharState *stdio = chr->opaque;
2051 DWORD dwMode = 0;
2052
2053 GetConsoleMode(stdio->hStdIn, &dwMode);
2054
2055 if (echo) {
2056 SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
2057 } else {
2058 SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
2059 }
2060}
2061
2062static void win_stdio_close(CharDriverState *chr)
2063{
2064 WinStdioCharState *stdio = chr->opaque;
2065
2066 if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
2067 CloseHandle(stdio->hInputReadyEvent);
2068 }
2069 if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
2070 CloseHandle(stdio->hInputDoneEvent);
2071 }
2072 if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
2073 TerminateThread(stdio->hInputThread, 0);
2074 }
2075
2076 g_free(chr->opaque);
2077 g_free(chr);
2078}
2079
2080static CharDriverState *qemu_chr_open_win_stdio(QemuOpts *opts)
2081{
2082 CharDriverState *chr;
2083 WinStdioCharState *stdio;
2084 DWORD dwMode;
2085 int is_console = 0;
2086
2087 chr = g_malloc0(sizeof(CharDriverState));
2088 stdio = g_malloc0(sizeof(WinStdioCharState));
2089
2090 stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
2091 if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
2092 fprintf(stderr, "cannot open stdio: invalid handle\n");
2093 exit(1);
2094 }
2095
2096 is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
2097
2098 chr->opaque = stdio;
2099 chr->chr_write = win_stdio_write;
2100 chr->chr_close = win_stdio_close;
2101
2102 if (is_console) {
2103 if (qemu_add_wait_object(stdio->hStdIn,
2104 win_stdio_wait_func, chr)) {
2105 fprintf(stderr, "qemu_add_wait_object: failed\n");
2106 }
2107 } else {
2108 DWORD dwId;
2109
2110 stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2111 stdio->hInputDoneEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2112 stdio->hInputThread = CreateThread(NULL, 0, win_stdio_thread,
2113 chr, 0, &dwId);
2114
2115 if (stdio->hInputThread == INVALID_HANDLE_VALUE
2116 || stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
2117 || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
2118 fprintf(stderr, "cannot create stdio thread or event\n");
2119 exit(1);
2120 }
2121 if (qemu_add_wait_object(stdio->hInputReadyEvent,
2122 win_stdio_thread_wait_func, chr)) {
2123 fprintf(stderr, "qemu_add_wait_object: failed\n");
2124 }
2125 }
2126
2127 dwMode |= ENABLE_LINE_INPUT;
2128
2129 if (is_console) {
2130 /* set the terminal in raw mode */
2131 /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2132 dwMode |= ENABLE_PROCESSED_INPUT;
2133 }
2134
2135 SetConsoleMode(stdio->hStdIn, dwMode);
2136
2137 chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2138 qemu_chr_fe_set_echo(chr, false);
2139
2140 return chr;
2141}
2142#endif /* !_WIN32 */
2143
2144/***********************************************************/
2145/* UDP Net console */
2146
2147typedef struct {
2148 int fd;
2149 GIOChannel *chan;
2150 guint tag;
2151 uint8_t buf[READ_BUF_LEN];
2152 int bufcnt;
2153 int bufptr;
2154 int max_size;
2155} NetCharDriver;
2156
2157static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2158{
2159 NetCharDriver *s = chr->opaque;
2160 gsize bytes_written;
2161 GIOStatus status;
2162
2163 status = g_io_channel_write_chars(s->chan, (const gchar *)buf, len, &bytes_written, NULL);
2164 if (status == G_IO_STATUS_EOF) {
2165 return 0;
2166 } else if (status != G_IO_STATUS_NORMAL) {
2167 return -1;
2168 }
2169
2170 return bytes_written;
2171}
2172
2173static int udp_chr_read_poll(void *opaque)
2174{
2175 CharDriverState *chr = opaque;
2176 NetCharDriver *s = chr->opaque;
2177
2178 s->max_size = qemu_chr_be_can_write(chr);
2179
2180 /* If there were any stray characters in the queue process them
2181 * first
2182 */
2183 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2184 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2185 s->bufptr++;
2186 s->max_size = qemu_chr_be_can_write(chr);
2187 }
2188 return s->max_size;
2189}
2190
2191static gboolean udp_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
2192{
2193 CharDriverState *chr = opaque;
2194 NetCharDriver *s = chr->opaque;
2195 gsize bytes_read = 0;
2196 GIOStatus status;
2197
2198 if (s->max_size == 0)
2199 return FALSE;
2200 status = g_io_channel_read_chars(s->chan, (gchar *)s->buf, sizeof(s->buf),
2201 &bytes_read, NULL);
2202 s->bufcnt = bytes_read;
2203 s->bufptr = s->bufcnt;
2204 if (status != G_IO_STATUS_NORMAL) {
2205 return FALSE;
2206 }
2207
2208 s->bufptr = 0;
2209 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2210 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2211 s->bufptr++;
2212 s->max_size = qemu_chr_be_can_write(chr);
2213 }
2214
2215 return TRUE;
2216}
2217
2218static void udp_chr_update_read_handler(CharDriverState *chr)
2219{
2220 NetCharDriver *s = chr->opaque;
2221
2222 if (s->tag) {
2223 g_source_remove(s->tag);
2224 s->tag = 0;
2225 }
2226
2227 if (s->chan) {
2228 s->tag = io_add_watch_poll(s->chan, udp_chr_read_poll, udp_chr_read, chr);
2229 }
2230}
2231
2232static void udp_chr_close(CharDriverState *chr)
2233{
2234 NetCharDriver *s = chr->opaque;
2235 if (s->tag) {
2236 g_source_remove(s->tag);
2237 }
2238 if (s->chan) {
2239 g_io_channel_unref(s->chan);
2240 closesocket(s->fd);
2241 }
2242 g_free(s);
2243 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2244}
2245
2246static CharDriverState *qemu_chr_open_udp(QemuOpts *opts)
2247{
2248 CharDriverState *chr = NULL;
2249 NetCharDriver *s = NULL;
2250 Error *local_err = NULL;
2251 int fd = -1;
2252
2253 chr = g_malloc0(sizeof(CharDriverState));
2254 s = g_malloc0(sizeof(NetCharDriver));
2255
2256 fd = inet_dgram_opts(opts, &local_err);
2257 if (fd < 0) {
2258 goto return_err;
2259 }
2260
2261 s->fd = fd;
2262 s->chan = io_channel_from_socket(s->fd);
2263 s->bufcnt = 0;
2264 s->bufptr = 0;
2265 chr->opaque = s;
2266 chr->chr_write = udp_chr_write;
2267 chr->chr_update_read_handler = udp_chr_update_read_handler;
2268 chr->chr_close = udp_chr_close;
2269 return chr;
2270
2271return_err:
2272 if (local_err) {
2273 qerror_report_err(local_err);
2274 error_free(local_err);
2275 }
2276 g_free(chr);
2277 g_free(s);
2278 if (fd >= 0) {
2279 closesocket(fd);
2280 }
2281 return NULL;
2282}
2283
2284/***********************************************************/
2285/* TCP Net console */
2286
2287typedef struct {
2288
2289 GIOChannel *chan, *listen_chan;
2290 guint tag, listen_tag;
2291 int fd, listen_fd;
2292 int connected;
2293 int max_size;
2294 int do_telnetopt;
2295 int do_nodelay;
2296 int is_unix;
2297 int msgfd;
2298} TCPCharDriver;
2299
2300static gboolean tcp_chr_accept(GIOChannel *chan, GIOCondition cond, void *opaque);
2301
2302static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2303{
2304 TCPCharDriver *s = chr->opaque;
2305 if (s->connected) {
2306 return io_channel_send_all(s->chan, buf, len);
2307 } else {
2308 /* XXX: indicate an error ? */
2309 return len;
2310 }
2311}
2312
2313static int tcp_chr_read_poll(void *opaque)
2314{
2315 CharDriverState *chr = opaque;
2316 TCPCharDriver *s = chr->opaque;
2317 if (!s->connected)
2318 return 0;
2319 s->max_size = qemu_chr_be_can_write(chr);
2320 return s->max_size;
2321}
2322
2323#define IAC 255
2324#define IAC_BREAK 243
2325static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2326 TCPCharDriver *s,
2327 uint8_t *buf, int *size)
2328{
2329 /* Handle any telnet client's basic IAC options to satisfy char by
2330 * char mode with no echo. All IAC options will be removed from
2331 * the buf and the do_telnetopt variable will be used to track the
2332 * state of the width of the IAC information.
2333 *
2334 * IAC commands come in sets of 3 bytes with the exception of the
2335 * "IAC BREAK" command and the double IAC.
2336 */
2337
2338 int i;
2339 int j = 0;
2340
2341 for (i = 0; i < *size; i++) {
2342 if (s->do_telnetopt > 1) {
2343 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2344 /* Double IAC means send an IAC */
2345 if (j != i)
2346 buf[j] = buf[i];
2347 j++;
2348 s->do_telnetopt = 1;
2349 } else {
2350 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2351 /* Handle IAC break commands by sending a serial break */
2352 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
2353 s->do_telnetopt++;
2354 }
2355 s->do_telnetopt++;
2356 }
2357 if (s->do_telnetopt >= 4) {
2358 s->do_telnetopt = 1;
2359 }
2360 } else {
2361 if ((unsigned char)buf[i] == IAC) {
2362 s->do_telnetopt = 2;
2363 } else {
2364 if (j != i)
2365 buf[j] = buf[i];
2366 j++;
2367 }
2368 }
2369 }
2370 *size = j;
2371}
2372
2373static int tcp_get_msgfd(CharDriverState *chr)
2374{
2375 TCPCharDriver *s = chr->opaque;
2376 int fd = s->msgfd;
2377 s->msgfd = -1;
2378 return fd;
2379}
2380
2381#ifndef _WIN32
2382static void unix_process_msgfd(CharDriverState *chr, struct msghdr *msg)
2383{
2384 TCPCharDriver *s = chr->opaque;
2385 struct cmsghdr *cmsg;
2386
2387 for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) {
2388 int fd;
2389
2390 if (cmsg->cmsg_len != CMSG_LEN(sizeof(int)) ||
2391 cmsg->cmsg_level != SOL_SOCKET ||
2392 cmsg->cmsg_type != SCM_RIGHTS)
2393 continue;
2394
2395 fd = *((int *)CMSG_DATA(cmsg));
2396 if (fd < 0)
2397 continue;
2398
2399#ifndef MSG_CMSG_CLOEXEC
2400 qemu_set_cloexec(fd);
2401#endif
2402 if (s->msgfd != -1)
2403 close(s->msgfd);
2404 s->msgfd = fd;
2405 }
2406}
2407
2408static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2409{
2410 TCPCharDriver *s = chr->opaque;
2411 struct msghdr msg = { NULL, };
2412 struct iovec iov[1];
2413 union {
2414 struct cmsghdr cmsg;
2415 char control[CMSG_SPACE(sizeof(int))];
2416 } msg_control;
2417 int flags = 0;
2418 ssize_t ret;
2419
2420 iov[0].iov_base = buf;
2421 iov[0].iov_len = len;
2422
2423 msg.msg_iov = iov;
2424 msg.msg_iovlen = 1;
2425 msg.msg_control = &msg_control;
2426 msg.msg_controllen = sizeof(msg_control);
2427
2428#ifdef MSG_CMSG_CLOEXEC
2429 flags |= MSG_CMSG_CLOEXEC;
2430#endif
2431 ret = recvmsg(s->fd, &msg, flags);
2432 if (ret > 0 && s->is_unix) {
2433 unix_process_msgfd(chr, &msg);
2434 }
2435
2436 return ret;
2437}
2438#else
2439static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2440{
2441 TCPCharDriver *s = chr->opaque;
2442 return qemu_recv(s->fd, buf, len, 0);
2443}
2444#endif
2445
2446static gboolean tcp_chr_read(GIOChannel *chan, GIOCondition cond, void *opaque)
2447{
2448 CharDriverState *chr = opaque;
2449 TCPCharDriver *s = chr->opaque;
2450 uint8_t buf[READ_BUF_LEN];
2451 int len, size;
2452
2453 if (!s->connected || s->max_size <= 0) {
2454 return FALSE;
2455 }
2456 len = sizeof(buf);
2457 if (len > s->max_size)
2458 len = s->max_size;
2459 size = tcp_chr_recv(chr, (void *)buf, len);
2460 if (size == 0) {
2461 /* connection closed */
2462 s->connected = 0;
2463 if (s->listen_chan) {
2464 s->listen_tag = g_io_add_watch(s->listen_chan, G_IO_IN, tcp_chr_accept, chr);
2465 }
2466 g_source_remove(s->tag);
2467 s->tag = 0;
2468 g_io_channel_unref(s->chan);
2469 s->chan = NULL;
2470 closesocket(s->fd);
2471 s->fd = -1;
2472 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2473 } else if (size > 0) {
2474 if (s->do_telnetopt)
2475 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
2476 if (size > 0)
2477 qemu_chr_be_write(chr, buf, size);
2478 }
2479
2480 return TRUE;
2481}
2482
2483#ifndef _WIN32
2484CharDriverState *qemu_chr_open_eventfd(int eventfd)
2485{
2486 return qemu_chr_open_fd(eventfd, eventfd);
2487}
2488#endif
2489
2490static void tcp_chr_connect(void *opaque)
2491{
2492 CharDriverState *chr = opaque;
2493 TCPCharDriver *s = chr->opaque;
2494
2495 s->connected = 1;
2496 if (s->chan) {
2497 s->tag = io_add_watch_poll(s->chan, tcp_chr_read_poll, tcp_chr_read, chr);
2498 }
2499 qemu_chr_generic_open(chr);
2500}
2501
2502#define IACSET(x,a,b,c) x[0] = a; x[1] = b; x[2] = c;
2503static void tcp_chr_telnet_init(int fd)
2504{
2505 char buf[3];
2506 /* Send the telnet negotion to put telnet in binary, no echo, single char mode */
2507 IACSET(buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
2508 send(fd, (char *)buf, 3, 0);
2509 IACSET(buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
2510 send(fd, (char *)buf, 3, 0);
2511 IACSET(buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
2512 send(fd, (char *)buf, 3, 0);
2513 IACSET(buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
2514 send(fd, (char *)buf, 3, 0);
2515}
2516
2517static int tcp_chr_add_client(CharDriverState *chr, int fd)
2518{
2519 TCPCharDriver *s = chr->opaque;
2520 if (s->fd != -1)
2521 return -1;
2522
2523 socket_set_nonblock(fd);
2524 if (s->do_nodelay)
2525 socket_set_nodelay(fd);
2526 s->fd = fd;
2527 s->chan = io_channel_from_socket(fd);
2528 g_source_remove(s->listen_tag);
2529 s->listen_tag = 0;
2530 tcp_chr_connect(chr);
2531
2532 return 0;
2533}
2534
2535static gboolean tcp_chr_accept(GIOChannel *channel, GIOCondition cond, void *opaque)
2536{
2537 CharDriverState *chr = opaque;
2538 TCPCharDriver *s = chr->opaque;
2539 struct sockaddr_in saddr;
2540#ifndef _WIN32
2541 struct sockaddr_un uaddr;
2542#endif
2543 struct sockaddr *addr;
2544 socklen_t len;
2545 int fd;
2546
2547 for(;;) {
2548#ifndef _WIN32
2549 if (s->is_unix) {
2550 len = sizeof(uaddr);
2551 addr = (struct sockaddr *)&uaddr;
2552 } else
2553#endif
2554 {
2555 len = sizeof(saddr);
2556 addr = (struct sockaddr *)&saddr;
2557 }
2558 fd = qemu_accept(s->listen_fd, addr, &len);
2559 if (fd < 0 && errno != EINTR) {
2560 return FALSE;
2561 } else if (fd >= 0) {
2562 if (s->do_telnetopt)
2563 tcp_chr_telnet_init(fd);
2564 break;
2565 }
2566 }
2567 if (tcp_chr_add_client(chr, fd) < 0)
2568 close(fd);
2569
2570 return TRUE;
2571}
2572
2573static void tcp_chr_close(CharDriverState *chr)
2574{
2575 TCPCharDriver *s = chr->opaque;
2576 if (s->fd >= 0) {
2577 if (s->tag) {
2578 g_source_remove(s->tag);
2579 }
2580 if (s->chan) {
2581 g_io_channel_unref(s->chan);
2582 }
2583 closesocket(s->fd);
2584 }
2585 if (s->listen_fd >= 0) {
2586 if (s->listen_tag) {
2587 g_source_remove(s->listen_tag);
2588 }
2589 if (s->listen_chan) {
2590 g_io_channel_unref(s->listen_chan);
2591 }
2592 closesocket(s->listen_fd);
2593 }
2594 g_free(s);
2595 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2596}
2597
2598static CharDriverState *qemu_chr_open_socket_fd(int fd, bool do_nodelay,
2599 bool is_listen, bool is_telnet,
2600 bool is_waitconnect,
2601 Error **errp)
2602{
2603 CharDriverState *chr = NULL;
2604 TCPCharDriver *s = NULL;
2605 char host[NI_MAXHOST], serv[NI_MAXSERV];
2606 const char *left = "", *right = "";
2607 struct sockaddr_storage ss;
2608 socklen_t ss_len = sizeof(ss);
2609
2610 memset(&ss, 0, ss_len);
2611 if (getsockname(fd, (struct sockaddr *) &ss, &ss_len) != 0) {
2612 error_setg(errp, "getsockname: %s", strerror(errno));
2613 return NULL;
2614 }
2615
2616 chr = g_malloc0(sizeof(CharDriverState));
2617 s = g_malloc0(sizeof(TCPCharDriver));
2618
2619 s->connected = 0;
2620 s->fd = -1;
2621 s->listen_fd = -1;
2622 s->msgfd = -1;
2623
2624 chr->filename = g_malloc(256);
2625 switch (ss.ss_family) {
2626#ifndef _WIN32
2627 case AF_UNIX:
2628 s->is_unix = 1;
2629 snprintf(chr->filename, 256, "unix:%s%s",
2630 ((struct sockaddr_un *)(&ss))->sun_path,
2631 is_listen ? ",server" : "");
2632 break;
2633#endif
2634 case AF_INET6:
2635 left = "[";
2636 right = "]";
2637 /* fall through */
2638 case AF_INET:
2639 s->do_nodelay = do_nodelay;
2640 getnameinfo((struct sockaddr *) &ss, ss_len, host, sizeof(host),
2641 serv, sizeof(serv), NI_NUMERICHOST | NI_NUMERICSERV);
2642 snprintf(chr->filename, 256, "%s:%s:%s%s%s%s",
2643 is_telnet ? "telnet" : "tcp",
2644 left, host, right, serv,
2645 is_listen ? ",server" : "");
2646 break;
2647 }
2648
2649 chr->opaque = s;
2650 chr->chr_write = tcp_chr_write;
2651 chr->chr_close = tcp_chr_close;
2652 chr->get_msgfd = tcp_get_msgfd;
2653 chr->chr_add_client = tcp_chr_add_client;
2654
2655 if (is_listen) {
2656 s->listen_fd = fd;
2657 s->listen_chan = io_channel_from_socket(s->listen_fd);
2658 s->listen_tag = g_io_add_watch(s->listen_chan, G_IO_IN, tcp_chr_accept, chr);
2659 if (is_telnet) {
2660 s->do_telnetopt = 1;
2661 }
2662 } else {
2663 s->connected = 1;
2664 s->fd = fd;
2665 socket_set_nodelay(fd);
2666 s->chan = io_channel_from_socket(s->fd);
2667 tcp_chr_connect(chr);
2668 }
2669
2670 if (is_listen && is_waitconnect) {
2671 printf("QEMU waiting for connection on: %s\n",
2672 chr->filename);
2673 tcp_chr_accept(s->listen_chan, G_IO_IN, chr);
2674 socket_set_nonblock(s->listen_fd);
2675 }
2676 return chr;
2677}
2678
2679static CharDriverState *qemu_chr_open_socket(QemuOpts *opts)
2680{
2681 CharDriverState *chr = NULL;
2682 Error *local_err = NULL;
2683 int fd = -1;
2684 int is_listen;
2685 int is_waitconnect;
2686 int do_nodelay;
2687 int is_unix;
2688 int is_telnet;
2689
2690 is_listen = qemu_opt_get_bool(opts, "server", 0);
2691 is_waitconnect = qemu_opt_get_bool(opts, "wait", 1);
2692 is_telnet = qemu_opt_get_bool(opts, "telnet", 0);
2693 do_nodelay = !qemu_opt_get_bool(opts, "delay", 1);
2694 is_unix = qemu_opt_get(opts, "path") != NULL;
2695 if (!is_listen)
2696 is_waitconnect = 0;
2697
2698 if (is_unix) {
2699 if (is_listen) {
2700 fd = unix_listen_opts(opts, &local_err);
2701 } else {
2702 fd = unix_connect_opts(opts, &local_err, NULL, NULL);
2703 }
2704 } else {
2705 if (is_listen) {
2706 fd = inet_listen_opts(opts, 0, &local_err);
2707 } else {
2708 fd = inet_connect_opts(opts, &local_err, NULL, NULL);
2709 }
2710 }
2711 if (fd < 0) {
2712 goto fail;
2713 }
2714
2715 if (!is_waitconnect)
2716 socket_set_nonblock(fd);
2717
2718 chr = qemu_chr_open_socket_fd(fd, do_nodelay, is_listen, is_telnet,
2719 is_waitconnect, &local_err);
2720 if (error_is_set(&local_err)) {
2721 goto fail;
2722 }
2723 return chr;
2724
2725
2726 fail:
2727 if (local_err) {
2728 qerror_report_err(local_err);
2729 error_free(local_err);
2730 }
2731 if (fd >= 0) {
2732 closesocket(fd);
2733 }
2734 if (chr) {
2735 g_free(chr->opaque);
2736 g_free(chr);
2737 }
2738 return NULL;
2739}
2740
2741/***********************************************************/
2742/* Memory chardev */
2743typedef struct {
2744 size_t outbuf_size;
2745 size_t outbuf_capacity;
2746 uint8_t *outbuf;
2747} MemoryDriver;
2748
2749static int mem_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2750{
2751 MemoryDriver *d = chr->opaque;
2752
2753 /* TODO: the QString implementation has the same code, we should
2754 * introduce a generic way to do this in cutils.c */
2755 if (d->outbuf_capacity < d->outbuf_size + len) {
2756 /* grow outbuf */
2757 d->outbuf_capacity += len;
2758 d->outbuf_capacity *= 2;
2759 d->outbuf = g_realloc(d->outbuf, d->outbuf_capacity);
2760 }
2761
2762 memcpy(d->outbuf + d->outbuf_size, buf, len);
2763 d->outbuf_size += len;
2764
2765 return len;
2766}
2767
2768void qemu_chr_init_mem(CharDriverState *chr)
2769{
2770 MemoryDriver *d;
2771
2772 d = g_malloc(sizeof(*d));
2773 d->outbuf_size = 0;
2774 d->outbuf_capacity = 4096;
2775 d->outbuf = g_malloc0(d->outbuf_capacity);
2776
2777 memset(chr, 0, sizeof(*chr));
2778 chr->opaque = d;
2779 chr->chr_write = mem_chr_write;
2780}
2781
2782QString *qemu_chr_mem_to_qs(CharDriverState *chr)
2783{
2784 MemoryDriver *d = chr->opaque;
2785 return qstring_from_substr((char *) d->outbuf, 0, d->outbuf_size - 1);
2786}
2787
2788/* NOTE: this driver can not be closed with qemu_chr_delete()! */
2789void qemu_chr_close_mem(CharDriverState *chr)
2790{
2791 MemoryDriver *d = chr->opaque;
2792
2793 g_free(d->outbuf);
2794 g_free(chr->opaque);
2795 chr->opaque = NULL;
2796 chr->chr_write = NULL;
2797}
2798
2799size_t qemu_chr_mem_osize(const CharDriverState *chr)
2800{
2801 const MemoryDriver *d = chr->opaque;
2802 return d->outbuf_size;
2803}
2804
2805/*********************************************************/
2806/* Ring buffer chardev */
2807
2808typedef struct {
2809 size_t size;
2810 size_t prod;
2811 size_t cons;
2812 uint8_t *cbuf;
2813} RingBufCharDriver;
2814
2815static size_t ringbuf_count(const CharDriverState *chr)
2816{
2817 const RingBufCharDriver *d = chr->opaque;
2818
2819 return d->prod - d->cons;
2820}
2821
2822static int ringbuf_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2823{
2824 RingBufCharDriver *d = chr->opaque;
2825 int i;
2826
2827 if (!buf || (len < 0)) {
2828 return -1;
2829 }
2830
2831 for (i = 0; i < len; i++ ) {
2832 d->cbuf[d->prod++ & (d->size - 1)] = buf[i];
2833 if (d->prod - d->cons > d->size) {
2834 d->cons = d->prod - d->size;
2835 }
2836 }
2837
2838 return 0;
2839}
2840
2841static int ringbuf_chr_read(CharDriverState *chr, uint8_t *buf, int len)
2842{
2843 RingBufCharDriver *d = chr->opaque;
2844 int i;
2845
2846 for (i = 0; i < len && d->cons != d->prod; i++) {
2847 buf[i] = d->cbuf[d->cons++ & (d->size - 1)];
2848 }
2849
2850 return i;
2851}
2852
2853static void ringbuf_chr_close(struct CharDriverState *chr)
2854{
2855 RingBufCharDriver *d = chr->opaque;
2856
2857 g_free(d->cbuf);
2858 g_free(d);
2859 chr->opaque = NULL;
2860}
2861
2862static CharDriverState *qemu_chr_open_ringbuf(QemuOpts *opts)
2863{
2864 CharDriverState *chr;
2865 RingBufCharDriver *d;
2866
2867 chr = g_malloc0(sizeof(CharDriverState));
2868 d = g_malloc(sizeof(*d));
2869
2870 d->size = qemu_opt_get_size(opts, "size", 0);
2871 if (d->size == 0) {
2872 d->size = 65536;
2873 }
2874
2875 /* The size must be power of 2 */
2876 if (d->size & (d->size - 1)) {
2877 error_report("size of ringbuf device must be power of two");
2878 goto fail;
2879 }
2880
2881 d->prod = 0;
2882 d->cons = 0;
2883 d->cbuf = g_malloc0(d->size);
2884
2885 chr->opaque = d;
2886 chr->chr_write = ringbuf_chr_write;
2887 chr->chr_close = ringbuf_chr_close;
2888
2889 return chr;
2890
2891fail:
2892 g_free(d);
2893 g_free(chr);
2894 return NULL;
2895}
2896
2897static bool chr_is_ringbuf(const CharDriverState *chr)
2898{
2899 return chr->chr_write == ringbuf_chr_write;
2900}
2901
2902void qmp_ringbuf_write(const char *device, const char *data,
2903 bool has_format, enum DataFormat format,
2904 Error **errp)
2905{
2906 CharDriverState *chr;
2907 const uint8_t *write_data;
2908 int ret;
2909 size_t write_count;
2910
2911 chr = qemu_chr_find(device);
2912 if (!chr) {
2913 error_setg(errp, "Device '%s' not found", device);
2914 return;
2915 }
2916
2917 if (!chr_is_ringbuf(chr)) {
2918 error_setg(errp,"%s is not a ringbuf device", device);
2919 return;
2920 }
2921
2922 if (has_format && (format == DATA_FORMAT_BASE64)) {
2923 write_data = g_base64_decode(data, &write_count);
2924 } else {
2925 write_data = (uint8_t *)data;
2926 write_count = strlen(data);
2927 }
2928
2929 ret = ringbuf_chr_write(chr, write_data, write_count);
2930
2931 if (write_data != (uint8_t *)data) {
2932 g_free((void *)write_data);
2933 }
2934
2935 if (ret < 0) {
2936 error_setg(errp, "Failed to write to device %s", device);
2937 return;
2938 }
2939}
2940
2941char *qmp_ringbuf_read(const char *device, int64_t size,
2942 bool has_format, enum DataFormat format,
2943 Error **errp)
2944{
2945 CharDriverState *chr;
2946 uint8_t *read_data;
2947 size_t count;
2948 char *data;
2949
2950 chr = qemu_chr_find(device);
2951 if (!chr) {
2952 error_setg(errp, "Device '%s' not found", device);
2953 return NULL;
2954 }
2955
2956 if (!chr_is_ringbuf(chr)) {
2957 error_setg(errp,"%s is not a ringbuf device", device);
2958 return NULL;
2959 }
2960
2961 if (size <= 0) {
2962 error_setg(errp, "size must be greater than zero");
2963 return NULL;
2964 }
2965
2966 count = ringbuf_count(chr);
2967 size = size > count ? count : size;
2968 read_data = g_malloc(size + 1);
2969
2970 ringbuf_chr_read(chr, read_data, size);
2971
2972 if (has_format && (format == DATA_FORMAT_BASE64)) {
2973 data = g_base64_encode(read_data, size);
2974 g_free(read_data);
2975 } else {
2976 /*
2977 * FIXME should read only complete, valid UTF-8 characters up
2978 * to @size bytes. Invalid sequences should be replaced by a
2979 * suitable replacement character. Except when (and only
2980 * when) ring buffer lost characters since last read, initial
2981 * continuation characters should be dropped.
2982 */
2983 read_data[size] = 0;
2984 data = (char *)read_data;
2985 }
2986
2987 return data;
2988}
2989
2990QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
2991{
2992 char host[65], port[33], width[8], height[8];
2993 int pos;
2994 const char *p;
2995 QemuOpts *opts;
2996 Error *local_err = NULL;
2997
2998 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
2999 if (error_is_set(&local_err)) {
3000 qerror_report_err(local_err);
3001 error_free(local_err);
3002 return NULL;
3003 }
3004
3005 if (strstart(filename, "mon:", &p)) {
3006 filename = p;
3007 qemu_opt_set(opts, "mux", "on");
3008 }
3009
3010 if (strcmp(filename, "null") == 0 ||
3011 strcmp(filename, "pty") == 0 ||
3012 strcmp(filename, "msmouse") == 0 ||
3013 strcmp(filename, "braille") == 0 ||
3014 strcmp(filename, "stdio") == 0) {
3015 qemu_opt_set(opts, "backend", filename);
3016 return opts;
3017 }
3018 if (strstart(filename, "vc", &p)) {
3019 qemu_opt_set(opts, "backend", "vc");
3020 if (*p == ':') {
3021 if (sscanf(p+1, "%8[0-9]x%8[0-9]", width, height) == 2) {
3022 /* pixels */
3023 qemu_opt_set(opts, "width", width);
3024 qemu_opt_set(opts, "height", height);
3025 } else if (sscanf(p+1, "%8[0-9]Cx%8[0-9]C", width, height) == 2) {
3026 /* chars */
3027 qemu_opt_set(opts, "cols", width);
3028 qemu_opt_set(opts, "rows", height);
3029 } else {
3030 goto fail;
3031 }
3032 }
3033 return opts;
3034 }
3035 if (strcmp(filename, "con:") == 0) {
3036 qemu_opt_set(opts, "backend", "console");
3037 return opts;
3038 }
3039 if (strstart(filename, "COM", NULL)) {
3040 qemu_opt_set(opts, "backend", "serial");
3041 qemu_opt_set(opts, "path", filename);
3042 return opts;
3043 }
3044 if (strstart(filename, "file:", &p)) {
3045 qemu_opt_set(opts, "backend", "file");
3046 qemu_opt_set(opts, "path", p);
3047 return opts;
3048 }
3049 if (strstart(filename, "pipe:", &p)) {
3050 qemu_opt_set(opts, "backend", "pipe");
3051 qemu_opt_set(opts, "path", p);
3052 return opts;
3053 }
3054 if (strstart(filename, "tcp:", &p) ||
3055 strstart(filename, "telnet:", &p)) {
3056 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3057 host[0] = 0;
3058 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
3059 goto fail;
3060 }
3061 qemu_opt_set(opts, "backend", "socket");
3062 qemu_opt_set(opts, "host", host);
3063 qemu_opt_set(opts, "port", port);
3064 if (p[pos] == ',') {
3065 if (qemu_opts_do_parse(opts, p+pos+1, NULL) != 0)
3066 goto fail;
3067 }
3068 if (strstart(filename, "telnet:", &p))
3069 qemu_opt_set(opts, "telnet", "on");
3070 return opts;
3071 }
3072 if (strstart(filename, "udp:", &p)) {
3073 qemu_opt_set(opts, "backend", "udp");
3074 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
3075 host[0] = 0;
3076 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
3077 goto fail;
3078 }
3079 }
3080 qemu_opt_set(opts, "host", host);
3081 qemu_opt_set(opts, "port", port);
3082 if (p[pos] == '@') {
3083 p += pos + 1;
3084 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3085 host[0] = 0;
3086 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
3087 goto fail;
3088 }
3089 }
3090 qemu_opt_set(opts, "localaddr", host);
3091 qemu_opt_set(opts, "localport", port);
3092 }
3093 return opts;
3094 }
3095 if (strstart(filename, "unix:", &p)) {
3096 qemu_opt_set(opts, "backend", "socket");
3097 if (qemu_opts_do_parse(opts, p, "path") != 0)
3098 goto fail;
3099 return opts;
3100 }
3101 if (strstart(filename, "/dev/parport", NULL) ||
3102 strstart(filename, "/dev/ppi", NULL)) {
3103 qemu_opt_set(opts, "backend", "parport");
3104 qemu_opt_set(opts, "path", filename);
3105 return opts;
3106 }
3107 if (strstart(filename, "/dev/", NULL)) {
3108 qemu_opt_set(opts, "backend", "tty");
3109 qemu_opt_set(opts, "path", filename);
3110 return opts;
3111 }
3112
3113fail:
3114 qemu_opts_del(opts);
3115 return NULL;
3116}
3117
3118#ifdef HAVE_CHARDEV_PARPORT
3119
3120static CharDriverState *qemu_chr_open_pp(QemuOpts *opts)
3121{
3122 const char *filename = qemu_opt_get(opts, "path");
3123 int fd;
3124
3125 fd = qemu_open(filename, O_RDWR);
3126 if (fd < 0) {
3127 return NULL;
3128 }
3129 return qemu_chr_open_pp_fd(fd);
3130}
3131
3132#endif
3133
3134static const struct {
3135 const char *name;
3136 CharDriverState *(*open)(QemuOpts *opts);
3137} backend_table[] = {
3138 { .name = "null", .open = qemu_chr_open_null },
3139 { .name = "socket", .open = qemu_chr_open_socket },
3140 { .name = "udp", .open = qemu_chr_open_udp },
3141 { .name = "msmouse", .open = qemu_chr_open_msmouse },
3142 { .name = "vc", .open = vc_init },
3143 { .name = "memory", .open = qemu_chr_open_ringbuf },
3144#ifdef _WIN32
3145 { .name = "file", .open = qemu_chr_open_win_file_out },
3146 { .name = "pipe", .open = qemu_chr_open_win_pipe },
3147 { .name = "console", .open = qemu_chr_open_win_con },
3148 { .name = "serial", .open = qemu_chr_open_win },
3149 { .name = "stdio", .open = qemu_chr_open_win_stdio },
3150#else
3151 { .name = "file", .open = qemu_chr_open_file_out },
3152 { .name = "pipe", .open = qemu_chr_open_pipe },
3153 { .name = "stdio", .open = qemu_chr_open_stdio },
3154#endif
3155#ifdef CONFIG_BRLAPI
3156 { .name = "braille", .open = chr_baum_init },
3157#endif
3158#ifdef HAVE_CHARDEV_TTY
3159 { .name = "tty", .open = qemu_chr_open_tty },
3160 { .name = "serial", .open = qemu_chr_open_tty },
3161 { .name = "pty", .open = qemu_chr_open_pty },
3162#endif
3163#ifdef HAVE_CHARDEV_PARPORT
3164 { .name = "parallel", .open = qemu_chr_open_pp },
3165 { .name = "parport", .open = qemu_chr_open_pp },
3166#endif
3167#ifdef CONFIG_SPICE
3168 { .name = "spicevmc", .open = qemu_chr_open_spice },
3169#if SPICE_SERVER_VERSION >= 0x000c02
3170 { .name = "spiceport", .open = qemu_chr_open_spice_port },
3171#endif
3172#endif
3173};
3174
3175CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
3176 void (*init)(struct CharDriverState *s),
3177 Error **errp)
3178{
3179 CharDriverState *chr;
3180 int i;
3181
3182 if (qemu_opts_id(opts) == NULL) {
3183 error_setg(errp, "chardev: no id specified");
3184 goto err;
3185 }
3186
3187 if (qemu_opt_get(opts, "backend") == NULL) {
3188 error_setg(errp, "chardev: \"%s\" missing backend",
3189 qemu_opts_id(opts));
3190 goto err;
3191 }
3192 for (i = 0; i < ARRAY_SIZE(backend_table); i++) {
3193 if (strcmp(backend_table[i].name, qemu_opt_get(opts, "backend")) == 0)
3194 break;
3195 }
3196 if (i == ARRAY_SIZE(backend_table)) {
3197 error_setg(errp, "chardev: backend \"%s\" not found",
3198 qemu_opt_get(opts, "backend"));
3199 goto err;
3200 }
3201
3202 chr = backend_table[i].open(opts);
3203 if (!chr) {
3204 error_setg(errp, "chardev: opening backend \"%s\" failed",
3205 qemu_opt_get(opts, "backend"));
3206 goto err;
3207 }
3208
3209 if (!chr->filename)
3210 chr->filename = g_strdup(qemu_opt_get(opts, "backend"));
3211 chr->init = init;
3212 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
3213
3214 if (qemu_opt_get_bool(opts, "mux", 0)) {
3215 CharDriverState *base = chr;
3216 int len = strlen(qemu_opts_id(opts)) + 6;
3217 base->label = g_malloc(len);
3218 snprintf(base->label, len, "%s-base", qemu_opts_id(opts));
3219 chr = qemu_chr_open_mux(base);
3220 chr->filename = base->filename;
3221 chr->avail_connections = MAX_MUX;
3222 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
3223 } else {
3224 chr->avail_connections = 1;
3225 }
3226 chr->label = g_strdup(qemu_opts_id(opts));
3227 chr->opts = opts;
3228 return chr;
3229
3230err:
3231 qemu_opts_del(opts);
3232 return NULL;
3233}
3234
3235CharDriverState *qemu_chr_new(const char *label, const char *filename, void (*init)(struct CharDriverState *s))
3236{
3237 const char *p;
3238 CharDriverState *chr;
3239 QemuOpts *opts;
3240 Error *err = NULL;
3241
3242 if (strstart(filename, "chardev:", &p)) {
3243 return qemu_chr_find(p);
3244 }
3245
3246 opts = qemu_chr_parse_compat(label, filename);
3247 if (!opts)
3248 return NULL;
3249
3250 chr = qemu_chr_new_from_opts(opts, init, &err);
3251 if (error_is_set(&err)) {
3252 fprintf(stderr, "%s\n", error_get_pretty(err));
3253 error_free(err);
3254 }
3255 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
3256 monitor_init(chr, MONITOR_USE_READLINE);
3257 }
3258 return chr;
3259}
3260
3261void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
3262{
3263 if (chr->chr_set_echo) {
3264 chr->chr_set_echo(chr, echo);
3265 }
3266}
3267
3268void qemu_chr_fe_open(struct CharDriverState *chr)
3269{
3270 if (chr->chr_guest_open) {
3271 chr->chr_guest_open(chr);
3272 }
3273}
3274
3275void qemu_chr_fe_close(struct CharDriverState *chr)
3276{
3277 if (chr->chr_guest_close) {
3278 chr->chr_guest_close(chr);
3279 }
3280}
3281
3282void qemu_chr_delete(CharDriverState *chr)
3283{
3284 QTAILQ_REMOVE(&chardevs, chr, next);
3285 if (chr->chr_close) {
3286 chr->chr_close(chr);
3287 }
3288 g_free(chr->filename);
3289 g_free(chr->label);
3290 if (chr->opts) {
3291 qemu_opts_del(chr->opts);
3292 }
3293 g_free(chr);
3294}
3295
3296ChardevInfoList *qmp_query_chardev(Error **errp)
3297{
3298 ChardevInfoList *chr_list = NULL;
3299 CharDriverState *chr;
3300
3301 QTAILQ_FOREACH(chr, &chardevs, next) {
3302 ChardevInfoList *info = g_malloc0(sizeof(*info));
3303 info->value = g_malloc0(sizeof(*info->value));
3304 info->value->label = g_strdup(chr->label);
3305 info->value->filename = g_strdup(chr->filename);
3306
3307 info->next = chr_list;
3308 chr_list = info;
3309 }
3310
3311 return chr_list;
3312}
3313
3314CharDriverState *qemu_chr_find(const char *name)
3315{
3316 CharDriverState *chr;
3317
3318 QTAILQ_FOREACH(chr, &chardevs, next) {
3319 if (strcmp(chr->label, name) != 0)
3320 continue;
3321 return chr;
3322 }
3323 return NULL;
3324}
3325
3326/* Get a character (serial) device interface. */
3327CharDriverState *qemu_char_get_next_serial(void)
3328{
3329 static int next_serial;
3330
3331 /* FIXME: This function needs to go away: use chardev properties! */
3332 return serial_hds[next_serial++];
3333}
3334
3335QemuOptsList qemu_chardev_opts = {
3336 .name = "chardev",
3337 .implied_opt_name = "backend",
3338 .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
3339 .desc = {
3340 {
3341 .name = "backend",
3342 .type = QEMU_OPT_STRING,
3343 },{
3344 .name = "path",
3345 .type = QEMU_OPT_STRING,
3346 },{
3347 .name = "host",
3348 .type = QEMU_OPT_STRING,
3349 },{
3350 .name = "port",
3351 .type = QEMU_OPT_STRING,
3352 },{
3353 .name = "localaddr",
3354 .type = QEMU_OPT_STRING,
3355 },{
3356 .name = "localport",
3357 .type = QEMU_OPT_STRING,
3358 },{
3359 .name = "to",
3360 .type = QEMU_OPT_NUMBER,
3361 },{
3362 .name = "ipv4",
3363 .type = QEMU_OPT_BOOL,
3364 },{
3365 .name = "ipv6",
3366 .type = QEMU_OPT_BOOL,
3367 },{
3368 .name = "wait",
3369 .type = QEMU_OPT_BOOL,
3370 },{
3371 .name = "server",
3372 .type = QEMU_OPT_BOOL,
3373 },{
3374 .name = "delay",
3375 .type = QEMU_OPT_BOOL,
3376 },{
3377 .name = "telnet",
3378 .type = QEMU_OPT_BOOL,
3379 },{
3380 .name = "width",
3381 .type = QEMU_OPT_NUMBER,
3382 },{
3383 .name = "height",
3384 .type = QEMU_OPT_NUMBER,
3385 },{
3386 .name = "cols",
3387 .type = QEMU_OPT_NUMBER,
3388 },{
3389 .name = "rows",
3390 .type = QEMU_OPT_NUMBER,
3391 },{
3392 .name = "mux",
3393 .type = QEMU_OPT_BOOL,
3394 },{
3395 .name = "signal",
3396 .type = QEMU_OPT_BOOL,
3397 },{
3398 .name = "name",
3399 .type = QEMU_OPT_STRING,
3400 },{
3401 .name = "debug",
3402 .type = QEMU_OPT_NUMBER,
3403 },{
3404 .name = "size",
3405 .type = QEMU_OPT_SIZE,
3406 },
3407 { /* end of list */ }
3408 },
3409};
3410
3411#ifdef _WIN32
3412
3413static CharDriverState *qmp_chardev_open_file(ChardevFile *file, Error **errp)
3414{
3415 HANDLE out;
3416
3417 if (file->in) {
3418 error_setg(errp, "input file not supported");
3419 return NULL;
3420 }
3421
3422 out = CreateFile(file->out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
3423 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
3424 if (out == INVALID_HANDLE_VALUE) {
3425 error_setg(errp, "open %s failed", file->out);
3426 return NULL;
3427 }
3428 return qemu_chr_open_win_file(out);
3429}
3430
3431static CharDriverState *qmp_chardev_open_serial(ChardevHostdev *serial,
3432 Error **errp)
3433{
3434 return qemu_chr_open_win_path(serial->device);
3435}
3436
3437static CharDriverState *qmp_chardev_open_parallel(ChardevHostdev *parallel,
3438 Error **errp)
3439{
3440 error_setg(errp, "character device backend type 'parallel' not supported");
3441 return NULL;
3442}
3443
3444#else /* WIN32 */
3445
3446static int qmp_chardev_open_file_source(char *src, int flags,
3447 Error **errp)
3448{
3449 int fd = -1;
3450
3451 TFR(fd = qemu_open(src, flags, 0666));
3452 if (fd == -1) {
3453 error_setg(errp, "open %s: %s", src, strerror(errno));
3454 }
3455 return fd;
3456}
3457
3458static CharDriverState *qmp_chardev_open_file(ChardevFile *file, Error **errp)
3459{
3460 int flags, in = -1, out = -1;
3461
3462 flags = O_WRONLY | O_TRUNC | O_CREAT | O_BINARY;
3463 out = qmp_chardev_open_file_source(file->out, flags, errp);
3464 if (error_is_set(errp)) {
3465 return NULL;
3466 }
3467
3468 if (file->in) {
3469 flags = O_RDONLY;
3470 in = qmp_chardev_open_file_source(file->in, flags, errp);
3471 if (error_is_set(errp)) {
3472 qemu_close(out);
3473 return NULL;
3474 }
3475 }
3476
3477 return qemu_chr_open_fd(in, out);
3478}
3479
3480static CharDriverState *qmp_chardev_open_serial(ChardevHostdev *serial,
3481 Error **errp)
3482{
3483#ifdef HAVE_CHARDEV_TTY
3484 int fd;
3485
3486 fd = qmp_chardev_open_file_source(serial->device, O_RDWR, errp);
3487 if (error_is_set(errp)) {
3488 return NULL;
3489 }
3490 socket_set_nonblock(fd);
3491 return qemu_chr_open_tty_fd(fd);
3492#else
3493 error_setg(errp, "character device backend type 'serial' not supported");
3494 return NULL;
3495#endif
3496}
3497
3498static CharDriverState *qmp_chardev_open_parallel(ChardevHostdev *parallel,
3499 Error **errp)
3500{
3501#ifdef HAVE_CHARDEV_PARPORT
3502 int fd;
3503
3504 fd = qmp_chardev_open_file_source(parallel->device, O_RDWR, errp);
3505 if (error_is_set(errp)) {
3506 return NULL;
3507 }
3508 return qemu_chr_open_pp_fd(fd);
3509#else
3510 error_setg(errp, "character device backend type 'parallel' not supported");
3511 return NULL;
3512#endif
3513}
3514
3515#endif /* WIN32 */
3516
3517static CharDriverState *qmp_chardev_open_socket(ChardevSocket *sock,
3518 Error **errp)
3519{
3520 SocketAddress *addr = sock->addr;
3521 bool do_nodelay = sock->has_nodelay ? sock->nodelay : false;
3522 bool is_listen = sock->has_server ? sock->server : true;
3523 bool is_telnet = sock->has_telnet ? sock->telnet : false;
3524 bool is_waitconnect = sock->has_wait ? sock->wait : false;
3525 int fd;
3526
3527 if (is_listen) {
3528 fd = socket_listen(addr, errp);
3529 } else {
3530 fd = socket_connect(addr, errp, NULL, NULL);
3531 }
3532 if (error_is_set(errp)) {
3533 return NULL;
3534 }
3535 return qemu_chr_open_socket_fd(fd, do_nodelay, is_listen,
3536 is_telnet, is_waitconnect, errp);
3537}
3538
3539ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
3540 Error **errp)
3541{
3542 ChardevReturn *ret = g_new0(ChardevReturn, 1);
3543 CharDriverState *chr = NULL;
3544
3545 chr = qemu_chr_find(id);
3546 if (chr) {
3547 error_setg(errp, "Chardev '%s' already exists", id);
3548 g_free(ret);
3549 return NULL;
3550 }
3551
3552 switch (backend->kind) {
3553 case CHARDEV_BACKEND_KIND_FILE:
3554 chr = qmp_chardev_open_file(backend->file, errp);
3555 break;
3556 case CHARDEV_BACKEND_KIND_SERIAL:
3557 chr = qmp_chardev_open_serial(backend->serial, errp);
3558 break;
3559 case CHARDEV_BACKEND_KIND_PARALLEL:
3560 chr = qmp_chardev_open_parallel(backend->parallel, errp);
3561 break;
3562 case CHARDEV_BACKEND_KIND_SOCKET:
3563 chr = qmp_chardev_open_socket(backend->socket, errp);
3564 break;
3565#ifdef HAVE_CHARDEV_TTY
3566 case CHARDEV_BACKEND_KIND_PTY:
3567 {
3568 /* qemu_chr_open_pty sets "path" in opts */
3569 QemuOpts *opts;
3570 opts = qemu_opts_create_nofail(qemu_find_opts("chardev"));
3571 chr = qemu_chr_open_pty(opts);
3572 ret->pty = g_strdup(qemu_opt_get(opts, "path"));
3573 ret->has_pty = true;
3574 qemu_opts_del(opts);
3575 break;
3576 }
3577#endif
3578 case CHARDEV_BACKEND_KIND_NULL:
3579 chr = qemu_chr_open_null(NULL);
3580 break;
3581 default:
3582 error_setg(errp, "unknown chardev backend (%d)", backend->kind);
3583 break;
3584 }
3585
3586 if (chr == NULL && !error_is_set(errp)) {
3587 error_setg(errp, "Failed to create chardev");
3588 }
3589 if (chr) {
3590 chr->label = g_strdup(id);
3591 chr->avail_connections = 1;
3592 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
3593 return ret;
3594 } else {
3595 g_free(ret);
3596 return NULL;
3597 }
3598}
3599
3600void qmp_chardev_remove(const char *id, Error **errp)
3601{
3602 CharDriverState *chr;
3603
3604 chr = qemu_chr_find(id);
3605 if (NULL == chr) {
3606 error_setg(errp, "Chardev '%s' not found", id);
3607 return;
3608 }
3609 if (chr->chr_can_read || chr->chr_read ||
3610 chr->chr_event || chr->handler_opaque) {
3611 error_setg(errp, "Chardev '%s' is busy", id);
3612 return;
3613 }
3614 qemu_chr_delete(chr);
3615}
Qemu copy for testing