monitor.c

   1 /*
   2  * QEMU monitor
   3  *
   4  * Copyright (c) 2003-2004 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <dirent.h>
  25 #include "hw/hw.h"
  26 #include "hw/qdev.h"
  27 #include "hw/usb.h"
  28 #include "hw/pcmcia.h"
  29 #include "hw/pc.h"
  30 #include "hw/pci.h"
  31 #include "hw/watchdog.h"
  32 #include "hw/loader.h"
  33 #include "gdbstub.h"
  34 #include "net.h"
  35 #include "net/slirp.h"
  36 #include "qemu-char.h"
  37 #include "sysemu.h"
  38 #include "monitor.h"
  39 #include "readline.h"
  40 #include "console.h"
  41 #include "block.h"
  42 #include "audio/audio.h"
  43 #include "disas.h"
  44 #include "balloon.h"
  45 #include "qemu-timer.h"
  46 #include "migration.h"
  47 #include "kvm.h"
  48 #include "acl.h"
  49 #include "qint.h"
  50 #include "qlist.h"
  51 #include "qdict.h"
  52 #include "qbool.h"
  53 #include "qstring.h"
  54 #include "qerror.h"
  55 #include "qjson.h"
  56 #include "json-streamer.h"
  57 #include "json-parser.h"
  58 #include "osdep.h"
  59
  60 //#define DEBUG
  61 //#define DEBUG_COMPLETION
  62
  63 /*
  64  * Supported types:
  65  *
  66  * 'F'          filename
  67  * 'B'          block device name
  68  * 's'          string (accept optional quote)
  69  * 'i'          32 bit integer
  70  * 'l'          target long (32 or 64 bit)
  71  * '/'          optional gdb-like print format (like "/10x")
  72  *
  73  * '?'          optional type (for all types, except '/')
  74  * '.'          other form of optional type (for 'i' and 'l')
  75  * '-'          optional parameter (eg. '-f')
  76  *
  77  */
  78
  79 typedef struct mon_cmd_t {
  80     const char *name;
  81     const char *args_type;
  82     const char *params;
  83     const char *help;
  84     void (*user_print)(Monitor *mon, const QObject *data);
  85     union {
  86         void (*info)(Monitor *mon);
  87         void (*info_new)(Monitor *mon, QObject **ret_data);
  88         void (*cmd)(Monitor *mon, const QDict *qdict);
  89         void (*cmd_new)(Monitor *mon, const QDict *params, QObject **ret_data);
  90     } mhandler;
  91 } mon_cmd_t;
  92
  93 /* file descriptors passed via SCM_RIGHTS */
  94 typedef struct mon_fd_t mon_fd_t;
  95 struct mon_fd_t {
  96     char *name;
  97     int fd;
  98     QLIST_ENTRY(mon_fd_t) next;
  99 };
 100
 101 typedef struct MonitorControl {
 102     QObject *id;
 103     int print_enabled;
 104     JSONMessageParser parser;
 105 } MonitorControl;
 106
 107 struct Monitor {
 108     CharDriverState *chr;
 109     int mux_out;
 110     int reset_seen;
 111     int flags;
 112     int suspend_cnt;
 113     uint8_t outbuf[1024];
 114     int outbuf_index;
 115     ReadLineState *rs;
 116     MonitorControl *mc;
 117     CPUState *mon_cpu;
 118     BlockDriverCompletionFunc *password_completion_cb;
 119     void *password_opaque;
 120     QError *error;
 121     QLIST_HEAD(,mon_fd_t) fds;
 122     QLIST_ENTRY(Monitor) entry;
 123 };
 124
 125 static QLIST_HEAD(mon_list, Monitor) mon_list;
 126
 127 static const mon_cmd_t mon_cmds[];
 128 static const mon_cmd_t info_cmds[];
 129
 130 Monitor *cur_mon = NULL;
 131
 132 static void monitor_command_cb(Monitor *mon, const char *cmdline,
 133                                void *opaque);
 134
 135 /* Return true if in control mode, false otherwise */
 136 static inline int monitor_ctrl_mode(const Monitor *mon)
 137 {
 138     return (mon->flags & MONITOR_USE_CONTROL);
 139 }
 140
 141 static void monitor_read_command(Monitor *mon, int show_prompt)
 142 {
 143     readline_start(mon->rs, "(qemu) ", 0, monitor_command_cb, NULL);
 144     if (show_prompt)
 145         readline_show_prompt(mon->rs);
 146 }
 147
 148 static int monitor_read_password(Monitor *mon, ReadLineFunc *readline_func,
 149                                  void *opaque)
 150 {
 151     if (monitor_ctrl_mode(mon)) {
 152         qemu_error_new(QERR_MISSING_PARAMETER, "password");
 153         return -EINVAL;
 154     } else if (mon->rs) {
 155         readline_start(mon->rs, "Password: ", 1, readline_func, opaque);
 156         /* prompt is printed on return from the command handler */
 157         return 0;
 158     } else {
 159         monitor_printf(mon, "terminal does not support password prompting\n");
 160         return -ENOTTY;
 161     }
 162 }
 163
 164 void monitor_flush(Monitor *mon)
 165 {
 166     if (mon && mon->outbuf_index != 0 && !mon->mux_out) {
 167         qemu_chr_write(mon->chr, mon->outbuf, mon->outbuf_index);
 168         mon->outbuf_index = 0;
 169     }
 170 }
 171
 172 /* flush at every end of line or if the buffer is full */
 173 static void monitor_puts(Monitor *mon, const char *str)
 174 {
 175     char c;
 176
 177     if (!mon)
 178         return;
 179
 180     for(;;) {
 181         c = *str++;
 182         if (c == '\0')
 183             break;
 184         if (c == '\n')
 185             mon->outbuf[mon->outbuf_index++] = '\r';
 186         mon->outbuf[mon->outbuf_index++] = c;
 187         if (mon->outbuf_index >= (sizeof(mon->outbuf) - 1)
 188             || c == '\n')
 189             monitor_flush(mon);
 190     }
 191 }
 192
 193 void monitor_vprintf(Monitor *mon, const char *fmt, va_list ap)
 194 {
 195     if (mon->mc && !mon->mc->print_enabled) {
 196         qemu_error_new(QERR_UNDEFINED_ERROR);
 197     } else {
 198         char buf[4096];
 199         vsnprintf(buf, sizeof(buf), fmt, ap);
 200         monitor_puts(mon, buf);
 201     }
 202 }
 203
 204 void monitor_printf(Monitor *mon, const char *fmt, ...)
 205 {
 206     va_list ap;
 207     va_start(ap, fmt);
 208     monitor_vprintf(mon, fmt, ap);
 209     va_end(ap);
 210 }
 211
 212 void monitor_print_filename(Monitor *mon, const char *filename)
 213 {
 214     int i;
 215
 216     for (i = 0; filename[i]; i++) {
 217         switch (filename[i]) {
 218         case ' ':
 219         case '"':
 220         case '\\':
 221             monitor_printf(mon, "\\%c", filename[i]);
 222             break;
 223         case '\t':
 224             monitor_printf(mon, "\\t");
 225             break;
 226         case '\r':
 227             monitor_printf(mon, "\\r");
 228             break;
 229         case '\n':
 230             monitor_printf(mon, "\\n");
 231             break;
 232         default:
 233             monitor_printf(mon, "%c", filename[i]);
 234             break;
 235         }
 236     }
 237 }
 238
 239 static int monitor_fprintf(FILE *stream, const char *fmt, ...)
 240 {
 241     va_list ap;
 242     va_start(ap, fmt);
 243     monitor_vprintf((Monitor *)stream, fmt, ap);
 244     va_end(ap);
 245     return 0;
 246 }
 247
 248 static void monitor_user_noop(Monitor *mon, const QObject *data) { }
 249
 250 static inline int monitor_handler_ported(const mon_cmd_t *cmd)
 251 {
 252     return cmd->user_print != NULL;
 253 }
 254
 255 static inline int monitor_has_error(const Monitor *mon)
 256 {
 257     return mon->error != NULL;
 258 }
 259
 260 static void monitor_print_qobject(Monitor *mon, const QObject *data)
 261 {
 262     switch (qobject_type(data)) {
 263         case QTYPE_QSTRING:
 264             monitor_printf(mon, "%s",qstring_get_str(qobject_to_qstring(data)));
 265             break;
 266         case QTYPE_QINT:
 267             monitor_printf(mon, "%" PRId64,qint_get_int(qobject_to_qint(data)));
 268             break;
 269         default:
 270             monitor_printf(mon, "ERROR: unsupported type: %d",
 271                                                         qobject_type(data));
 272             break;
 273     }
 274
 275     monitor_puts(mon, "\n");
 276 }
 277
 278 static void monitor_json_emitter(Monitor *mon, const QObject *data)
 279 {
 280     QString *json;
 281
 282     json = qobject_to_json(data);
 283     assert(json != NULL);
 284
 285     mon->mc->print_enabled = 1;
 286     monitor_printf(mon, "%s\n", qstring_get_str(json));
 287     mon->mc->print_enabled = 0;
 288
 289     QDECREF(json);
 290 }
 291
 292 static void monitor_protocol_emitter(Monitor *mon, QObject *data)
 293 {
 294     QDict *qmp;
 295
 296     qmp = qdict_new();
 297
 298     if (!monitor_has_error(mon)) {
 299         /* success response */
 300         if (data) {
 301             qobject_incref(data);
 302             qdict_put_obj(qmp, "return", data);
 303         } else {
 304             qdict_put(qmp, "return", qstring_from_str("OK"));
 305         }
 306     } else {
 307         /* error response */
 308         qdict_put(mon->error->error, "desc", qerror_human(mon->error));
 309         qdict_put(qmp, "error", mon->error->error);
 310         QINCREF(mon->error->error);
 311         QDECREF(mon->error);
 312         mon->error = NULL;
 313     }
 314
 315     if (mon->mc->id) {
 316         qdict_put_obj(qmp, "id", mon->mc->id);
 317         mon->mc->id = NULL;
 318     }
 319
 320     monitor_json_emitter(mon, QOBJECT(qmp));
 321     QDECREF(qmp);
 322 }
 323
 324 static void timestamp_put(QDict *qdict)
 325 {
 326     int err;
 327     QObject *obj;
 328     qemu_timeval tv;
 329
 330     err = qemu_gettimeofday(&tv);
 331     if (err < 0)
 332         return;
 333
 334     obj = qobject_from_jsonf("{ 'seconds': %" PRId64 ", "
 335                                 "'microseconds': %" PRId64 " }",
 336                                 (int64_t) tv.tv_sec, (int64_t) tv.tv_usec);
 337     assert(obj != NULL);
 338
 339     qdict_put_obj(qdict, "timestamp", obj);
 340 }
 341
 342 /**
 343  * monitor_protocol_event(): Generate a Monitor event
 344  *
 345  * Event-specific data can be emitted through the (optional) 'data' parameter.
 346  */
 347 void monitor_protocol_event(MonitorEvent event, QObject *data)
 348 {
 349     QDict *qmp;
 350     const char *event_name;
 351     Monitor *mon = cur_mon;
 352
 353     assert(event < QEVENT_MAX);
 354
 355     if (!monitor_ctrl_mode(mon))
 356         return;
 357
 358     switch (event) {
 359         case QEVENT_DEBUG:
 360             event_name = "DEBUG";
 361             break;
 362         case QEVENT_SHUTDOWN:
 363             event_name = "SHUTDOWN";
 364             break;
 365         case QEVENT_RESET:
 366             event_name = "RESET";
 367             break;
 368         case QEVENT_POWERDOWN:
 369             event_name = "POWERDOWN";
 370             break;
 371         case QEVENT_STOP:
 372             event_name = "STOP";
 373             break;
 374         default:
 375             abort();
 376             break;
 377     }
 378
 379     qmp = qdict_new();
 380     timestamp_put(qmp);
 381     qdict_put(qmp, "event", qstring_from_str(event_name));
 382     if (data)
 383         qdict_put_obj(qmp, "data", data);
 384
 385     monitor_json_emitter(mon, QOBJECT(qmp));
 386     QDECREF(qmp);
 387 }
 388
 389 static int compare_cmd(const char *name, const char *list)
 390 {
 391     const char *p, *pstart;
 392     int len;
 393     len = strlen(name);
 394     p = list;
 395     for(;;) {
 396         pstart = p;
 397         p = strchr(p, '|');
 398         if (!p)
 399             p = pstart + strlen(pstart);
 400         if ((p - pstart) == len && !memcmp(pstart, name, len))
 401             return 1;
 402         if (*p == '\0')
 403             break;
 404         p++;
 405     }
 406     return 0;
 407 }
 408
 409 static void help_cmd_dump(Monitor *mon, const mon_cmd_t *cmds,
 410                           const char *prefix, const char *name)
 411 {
 412     const mon_cmd_t *cmd;
 413
 414     for(cmd = cmds; cmd->name != NULL; cmd++) {
 415         if (!name || !strcmp(name, cmd->name))
 416             monitor_printf(mon, "%s%s %s -- %s\n", prefix, cmd->name,
 417                            cmd->params, cmd->help);
 418     }
 419 }
 420
 421 static void help_cmd(Monitor *mon, const char *name)
 422 {
 423     if (name && !strcmp(name, "info")) {
 424         help_cmd_dump(mon, info_cmds, "info ", NULL);
 425     } else {
 426         help_cmd_dump(mon, mon_cmds, "", name);
 427         if (name && !strcmp(name, "log")) {
 428             const CPULogItem *item;
 429             monitor_printf(mon, "Log items (comma separated):\n");
 430             monitor_printf(mon, "%-10s %s\n", "none", "remove all logs");
 431             for(item = cpu_log_items; item->mask != 0; item++) {
 432                 monitor_printf(mon, "%-10s %s\n", item->name, item->help);
 433             }
 434         }
 435     }
 436 }
 437
 438 static void do_help_cmd(Monitor *mon, const QDict *qdict)
 439 {
 440     help_cmd(mon, qdict_get_try_str(qdict, "name"));
 441 }
 442
 443 static void do_commit(Monitor *mon, const QDict *qdict)
 444 {
 445     int all_devices;
 446     DriveInfo *dinfo;
 447     const char *device = qdict_get_str(qdict, "device");
 448
 449     all_devices = !strcmp(device, "all");
 450     QTAILQ_FOREACH(dinfo, &drives, next) {
 451         if (!all_devices)
 452             if (strcmp(bdrv_get_device_name(dinfo->bdrv), device))
 453                 continue;
 454         bdrv_commit(dinfo->bdrv);
 455     }
 456 }
 457
 458 static void do_info(Monitor *mon, const QDict *qdict, QObject **ret_data)
 459 {
 460     const mon_cmd_t *cmd;
 461     const char *item = qdict_get_try_str(qdict, "item");
 462
 463     if (!item) {
 464         assert(monitor_ctrl_mode(mon) == 0);
 465         goto help;
 466     }
 467
 468     for (cmd = info_cmds; cmd->name != NULL; cmd++) {
 469         if (compare_cmd(item, cmd->name))
 470             break;
 471     }
 472
 473     if (cmd->name == NULL) {
 474         if (monitor_ctrl_mode(mon)) {
 475             qemu_error_new(QERR_COMMAND_NOT_FOUND, item);
 476             return;
 477         }
 478         goto help;
 479     }
 480
 481     if (monitor_handler_ported(cmd)) {
 482         cmd->mhandler.info_new(mon, ret_data);
 483
 484         if (!monitor_ctrl_mode(mon)) {
 485             /*
 486              * User Protocol function is called here, Monitor Protocol is
 487              * handled by monitor_call_handler()
 488              */
 489             if (*ret_data)
 490                 cmd->user_print(mon, *ret_data);
 491         }
 492     } else {
 493         if (monitor_ctrl_mode(mon)) {
 494             /* handler not converted yet */
 495             qemu_error_new(QERR_COMMAND_NOT_FOUND, item);
 496         } else {
 497             cmd->mhandler.info(mon);
 498         }
 499     }
 500
 501     return;
 502
 503 help:
 504     help_cmd(mon, "info");
 505 }
 506
 507 /**
 508  * do_info_version(): Show QEMU version
 509  */
 510 static void do_info_version(Monitor *mon, QObject **ret_data)
 511 {
 512     *ret_data = QOBJECT(qstring_from_str(QEMU_VERSION QEMU_PKGVERSION));
 513 }
 514
 515 static void do_info_name(Monitor *mon)
 516 {
 517     if (qemu_name)
 518         monitor_printf(mon, "%s\n", qemu_name);
 519 }
 520
 521 static QObject *get_cmd_dict(const char *name)
 522 {
 523     const char *p;
 524
 525     /* Remove '|' from some commands */
 526     p = strchr(name, '|');
 527     if (p) {
 528         p++;
 529     } else {
 530         p = name;
 531     }
 532
 533     return qobject_from_jsonf("{ 'name': %s }", p);
 534 }
 535
 536 /**
 537  * do_info_commands(): List QMP available commands
 538  *
 539  * Each command is represented by a QDict, the returned QObject is a QList
 540  * of all commands.
 541  *
 542  * The QDict contains:
 543  *
 544  * - "name": command's name
 545  *
 546  * Example:
 547  *
 548  * { [ { "name": "query-balloon" }, { "name": "system_powerdown" } ] }
 549  */
 550 static void do_info_commands(Monitor *mon, QObject **ret_data)
 551 {
 552     QList *cmd_list;
 553     const mon_cmd_t *cmd;
 554
 555     cmd_list = qlist_new();
 556
 557     for (cmd = mon_cmds; cmd->name != NULL; cmd++) {
 558         if (monitor_handler_ported(cmd) && !compare_cmd(cmd->name, "info")) {
 559             qlist_append_obj(cmd_list, get_cmd_dict(cmd->name));
 560         }
 561     }
 562
 563     for (cmd = info_cmds; cmd->name != NULL; cmd++) {
 564         if (monitor_handler_ported(cmd)) {
 565             char buf[128];
 566             snprintf(buf, sizeof(buf), "query-%s", cmd->name);
 567             qlist_append_obj(cmd_list, get_cmd_dict(buf));
 568         }
 569     }
 570
 571     *ret_data = QOBJECT(cmd_list);
 572 }
 573
 574 #if defined(TARGET_I386)
 575 static void do_info_hpet(Monitor *mon)
 576 {
 577     monitor_printf(mon, "HPET is %s by QEMU\n",
 578                    (no_hpet) ? "disabled" : "enabled");
 579 }
 580 #endif
 581
 582 static void do_info_uuid(Monitor *mon)
 583 {
 584     monitor_printf(mon, UUID_FMT "\n", qemu_uuid[0], qemu_uuid[1],
 585                    qemu_uuid[2], qemu_uuid[3], qemu_uuid[4], qemu_uuid[5],
 586                    qemu_uuid[6], qemu_uuid[7], qemu_uuid[8], qemu_uuid[9],
 587                    qemu_uuid[10], qemu_uuid[11], qemu_uuid[12], qemu_uuid[13],
 588                    qemu_uuid[14], qemu_uuid[15]);
 589 }
 590
 591 /* get the current CPU defined by the user */
 592 static int mon_set_cpu(int cpu_index)
 593 {
 594     CPUState *env;
 595
 596     for(env = first_cpu; env != NULL; env = env->next_cpu) {
 597         if (env->cpu_index == cpu_index) {
 598             cur_mon->mon_cpu = env;
 599             return 0;
 600         }
 601     }
 602     return -1;
 603 }
 604
 605 static CPUState *mon_get_cpu(void)
 606 {
 607     if (!cur_mon->mon_cpu) {
 608         mon_set_cpu(0);
 609     }
 610     cpu_synchronize_state(cur_mon->mon_cpu);
 611     return cur_mon->mon_cpu;
 612 }
 613
 614 static void do_info_registers(Monitor *mon)
 615 {
 616     CPUState *env;
 617     env = mon_get_cpu();
 618     if (!env)
 619         return;
 620 #ifdef TARGET_I386
 621     cpu_dump_state(env, (FILE *)mon, monitor_fprintf,
 622                    X86_DUMP_FPU);
 623 #else
 624     cpu_dump_state(env, (FILE *)mon, monitor_fprintf,
 625                    0);
 626 #endif
 627 }
 628
 629 static void print_cpu_iter(QObject *obj, void *opaque)
 630 {
 631     QDict *cpu;
 632     int active = ' ';
 633     Monitor *mon = opaque;
 634
 635     assert(qobject_type(obj) == QTYPE_QDICT);
 636     cpu = qobject_to_qdict(obj);
 637
 638     if (strcmp(qdict_get_str(cpu, "current"), "yes") == 0)
 639         active = '*';
 640
 641     monitor_printf(mon, "%c CPU #%d: ", active, (int)qdict_get_int(cpu, "CPU"));
 642
 643 #if defined(TARGET_I386)
 644     monitor_printf(mon, "pc=0x" TARGET_FMT_lx,
 645                    (target_ulong) qdict_get_int(cpu, "pc"));
 646 #elif defined(TARGET_PPC)
 647     monitor_printf(mon, "nip=0x" TARGET_FMT_lx,
 648                    (target_long) qdict_get_int(cpu, "nip"));
 649 #elif defined(TARGET_SPARC)
 650     monitor_printf(mon, "pc=0x " TARGET_FMT_lx,
 651                    (target_long) qdict_get_int(cpu, "pc"));
 652     monitor_printf(mon, "npc=0x" TARGET_FMT_lx,
 653                    (target_long) qdict_get_int(cpu, "npc"));
 654 #elif defined(TARGET_MIPS)
 655     monitor_printf(mon, "PC=0x" TARGET_FMT_lx,
 656                    (target_long) qdict_get_int(cpu, "PC"));
 657 #endif
 658
 659     if (strcmp(qdict_get_str(cpu, "halted"), "yes") == 0)
 660         monitor_printf(mon, " (halted)");
 661
 662     monitor_printf(mon, "\n");
 663 }
 664
 665 static void monitor_print_cpus(Monitor *mon, const QObject *data)
 666 {
 667     QList *cpu_list;
 668
 669     assert(qobject_type(data) == QTYPE_QLIST);
 670     cpu_list = qobject_to_qlist(data);
 671     qlist_iter(cpu_list, print_cpu_iter, mon);
 672 }
 673
 674 /**
 675  * do_info_cpus(): Show CPU information
 676  *
 677  * Return a QList with a QDict for each CPU.
 678  *
 679  * For example:
 680  *
 681  * [ { "CPU": 0, "current": "yes", "pc": 0x..., "halted": "no" },
 682  *   { "CPU": 1, "current": "no",  "pc": 0x..., "halted": "yes" } ]
 683  */
 684 static void do_info_cpus(Monitor *mon, QObject **ret_data)
 685 {
 686     CPUState *env;
 687     QList *cpu_list;
 688
 689     cpu_list = qlist_new();
 690
 691     /* just to set the default cpu if not already done */
 692     mon_get_cpu();
 693
 694     for(env = first_cpu; env != NULL; env = env->next_cpu) {
 695         const char *answer;
 696         QDict *cpu = qdict_new();
 697
 698         cpu_synchronize_state(env);
 699
 700         qdict_put(cpu, "CPU", qint_from_int(env->cpu_index));
 701         answer = (env == mon->mon_cpu) ? "yes" : "no";
 702         qdict_put(cpu, "current", qstring_from_str(answer));
 703
 704 #if defined(TARGET_I386)
 705         qdict_put(cpu, "pc", qint_from_int(env->eip + env->segs[R_CS].base));
 706 #elif defined(TARGET_PPC)
 707         qdict_put(cpu, "nip", qint_from_int(env->nip));
 708 #elif defined(TARGET_SPARC)
 709         qdict_put(cpu, "pc", qint_from_int(env->pc));
 710         qdict_put(cpu, "npc", qint_from_int(env->npc));
 711 #elif defined(TARGET_MIPS)
 712         qdict_put(cpu, "PC", qint_from_int(env->active_tc.PC));
 713 #endif
 714         answer = env->halted ? "yes" : "no";
 715         qdict_put(cpu, "halted", qstring_from_str(answer));
 716
 717         qlist_append(cpu_list, cpu);
 718     }
 719
 720     *ret_data = QOBJECT(cpu_list);
 721 }
 722
 723 static void do_cpu_set(Monitor *mon, const QDict *qdict)
 724 {
 725     int index = qdict_get_int(qdict, "index");
 726     if (mon_set_cpu(index) < 0)
 727         monitor_printf(mon, "Invalid CPU index\n");
 728 }
 729
 730 static void do_info_jit(Monitor *mon)
 731 {
 732     dump_exec_info((FILE *)mon, monitor_fprintf);
 733 }
 734
 735 static void do_info_history(Monitor *mon)
 736 {
 737     int i;
 738     const char *str;
 739
 740     if (!mon->rs)
 741         return;
 742     i = 0;
 743     for(;;) {
 744         str = readline_get_history(mon->rs, i);
 745         if (!str)
 746             break;
 747         monitor_printf(mon, "%d: '%s'\n", i, str);
 748         i++;
 749     }
 750 }
 751
 752 #if defined(TARGET_PPC)
 753 /* XXX: not implemented in other targets */
 754 static void do_info_cpu_stats(Monitor *mon)
 755 {
 756     CPUState *env;
 757
 758     env = mon_get_cpu();
 759     cpu_dump_statistics(env, (FILE *)mon, &monitor_fprintf, 0);
 760 }
 761 #endif
 762
 763 /**
 764  * do_quit(): Quit QEMU execution
 765  */
 766 static void do_quit(Monitor *mon, const QDict *qdict, QObject **ret_data)
 767 {
 768     exit(0);
 769 }
 770
 771 static int eject_device(Monitor *mon, BlockDriverState *bs, int force)
 772 {
 773     if (bdrv_is_inserted(bs)) {
 774         if (!force) {
 775             if (!bdrv_is_removable(bs)) {
 776                 qemu_error_new(QERR_DEVICE_NOT_REMOVABLE,
 777                                bdrv_get_device_name(bs));
 778                 return -1;
 779             }
 780             if (bdrv_is_locked(bs)) {
 781                 qemu_error_new(QERR_DEVICE_LOCKED, bdrv_get_device_name(bs));
 782                 return -1;
 783             }
 784         }
 785         bdrv_close(bs);
 786     }
 787     return 0;
 788 }
 789
 790 static void do_eject(Monitor *mon, const QDict *qdict, QObject **ret_data)
 791 {
 792     BlockDriverState *bs;
 793     int force = qdict_get_int(qdict, "force");
 794     const char *filename = qdict_get_str(qdict, "filename");
 795
 796     bs = bdrv_find(filename);
 797     if (!bs) {
 798         qemu_error_new(QERR_DEVICE_NOT_FOUND, filename);
 799         return;
 800     }
 801     eject_device(mon, bs, force);
 802 }
 803
 804 static void do_block_set_passwd(Monitor *mon, const QDict *qdict,
 805                                 QObject **ret_data)
 806 {
 807     BlockDriverState *bs;
 808
 809     bs = bdrv_find(qdict_get_str(qdict, "device"));
 810     if (!bs) {
 811         qemu_error_new(QERR_DEVICE_NOT_FOUND, qdict_get_str(qdict, "device"));
 812         return;
 813     }
 814
 815     if (bdrv_set_key(bs, qdict_get_str(qdict, "password")) < 0) {
 816         qemu_error_new(QERR_INVALID_PASSWORD);
 817     }
 818 }
 819
 820 static void do_change_block(Monitor *mon, const char *device,
 821                             const char *filename, const char *fmt)
 822 {
 823     BlockDriverState *bs;
 824     BlockDriver *drv = NULL;
 825
 826     bs = bdrv_find(device);
 827     if (!bs) {
 828         qemu_error_new(QERR_DEVICE_NOT_FOUND, device);
 829         return;
 830     }
 831     if (fmt) {
 832         drv = bdrv_find_whitelisted_format(fmt);
 833         if (!drv) {
 834             qemu_error_new(QERR_INVALID_BLOCK_FORMAT, fmt);
 835             return;
 836         }
 837     }
 838     if (eject_device(mon, bs, 0) < 0)
 839         return;
 840     bdrv_open2(bs, filename, 0, drv);
 841     monitor_read_bdrv_key_start(mon, bs, NULL, NULL);
 842 }
 843
 844 static void change_vnc_password(const char *password)
 845 {
 846     if (vnc_display_password(NULL, password) < 0)
 847         qemu_error_new(QERR_SET_PASSWD_FAILED);
 848
 849 }
 850
 851 static void change_vnc_password_cb(Monitor *mon, const char *password,
 852                                    void *opaque)
 853 {
 854     change_vnc_password(password);
 855     monitor_read_command(mon, 1);
 856 }
 857
 858 static void do_change_vnc(Monitor *mon, const char *target, const char *arg)
 859 {
 860     if (strcmp(target, "passwd") == 0 ||
 861         strcmp(target, "password") == 0) {
 862         if (arg) {
 863             char password[9];
 864             strncpy(password, arg, sizeof(password));
 865             password[sizeof(password) - 1] = '\0';
 866             change_vnc_password(password);
 867         } else {
 868             monitor_read_password(mon, change_vnc_password_cb, NULL);
 869         }
 870     } else {
 871         if (vnc_display_open(NULL, target) < 0)
 872             qemu_error_new(QERR_VNC_SERVER_FAILED, target);
 873     }
 874 }
 875
 876 /**
 877  * do_change(): Change a removable medium, or VNC configuration
 878  */
 879 static void do_change(Monitor *mon, const QDict *qdict, QObject **ret_data)
 880 {
 881     const char *device = qdict_get_str(qdict, "device");
 882     const char *target = qdict_get_str(qdict, "target");
 883     const char *arg = qdict_get_try_str(qdict, "arg");
 884     if (strcmp(device, "vnc") == 0) {
 885         do_change_vnc(mon, target, arg);
 886     } else {
 887         do_change_block(mon, device, target, arg);
 888     }
 889 }
 890
 891 static void do_screen_dump(Monitor *mon, const QDict *qdict)
 892 {
 893     vga_hw_screen_dump(qdict_get_str(qdict, "filename"));
 894 }
 895
 896 static void do_logfile(Monitor *mon, const QDict *qdict)
 897 {
 898     cpu_set_log_filename(qdict_get_str(qdict, "filename"));
 899 }
 900
 901 static void do_log(Monitor *mon, const QDict *qdict)
 902 {
 903     int mask;
 904     const char *items = qdict_get_str(qdict, "items");
 905
 906     if (!strcmp(items, "none")) {
 907         mask = 0;
 908     } else {
 909         mask = cpu_str_to_log_mask(items);
 910         if (!mask) {
 911             help_cmd(mon, "log");
 912             return;
 913         }
 914     }
 915     cpu_set_log(mask);
 916 }
 917
 918 static void do_singlestep(Monitor *mon, const QDict *qdict)
 919 {
 920     const char *option = qdict_get_try_str(qdict, "option");
 921     if (!option || !strcmp(option, "on")) {
 922         singlestep = 1;
 923     } else if (!strcmp(option, "off")) {
 924         singlestep = 0;
 925     } else {
 926         monitor_printf(mon, "unexpected option %s\n", option);
 927     }
 928 }
 929
 930 /**
 931  * do_stop(): Stop VM execution
 932  */
 933 static void do_stop(Monitor *mon, const QDict *qdict, QObject **ret_data)
 934 {
 935     vm_stop(EXCP_INTERRUPT);
 936 }
 937
 938 static void encrypted_bdrv_it(void *opaque, BlockDriverState *bs);
 939
 940 struct bdrv_iterate_context {
 941     Monitor *mon;
 942     int err;
 943 };
 944
 945 /**
 946  * do_cont(): Resume emulation.
 947  */
 948 static void do_cont(Monitor *mon, const QDict *qdict, QObject **ret_data)
 949 {
 950     struct bdrv_iterate_context context = { mon, 0 };
 951
 952     bdrv_iterate(encrypted_bdrv_it, &context);
 953     /* only resume the vm if all keys are set and valid */
 954     if (!context.err)
 955         vm_start();
 956 }
 957
 958 static void bdrv_key_cb(void *opaque, int err)
 959 {
 960     Monitor *mon = opaque;
 961
 962     /* another key was set successfully, retry to continue */
 963     if (!err)
 964         do_cont(mon, NULL, NULL);
 965 }
 966
 967 static void encrypted_bdrv_it(void *opaque, BlockDriverState *bs)
 968 {
 969     struct bdrv_iterate_context *context = opaque;
 970
 971     if (!context->err && bdrv_key_required(bs)) {
 972         context->err = -EBUSY;
 973         monitor_read_bdrv_key_start(context->mon, bs, bdrv_key_cb,
 974                                     context->mon);
 975     }
 976 }
 977
 978 static void do_gdbserver(Monitor *mon, const QDict *qdict)
 979 {
 980     const char *device = qdict_get_try_str(qdict, "device");
 981     if (!device)
 982         device = "tcp::" DEFAULT_GDBSTUB_PORT;
 983     if (gdbserver_start(device) < 0) {
 984         monitor_printf(mon, "Could not open gdbserver on device '%s'\n",
 985                        device);
 986     } else if (strcmp(device, "none") == 0) {
 987         monitor_printf(mon, "Disabled gdbserver\n");
 988     } else {
 989         monitor_printf(mon, "Waiting for gdb connection on device '%s'\n",
 990                        device);
 991     }
 992 }
 993
 994 static void do_watchdog_action(Monitor *mon, const QDict *qdict)
 995 {
 996     const char *action = qdict_get_str(qdict, "action");
 997     if (select_watchdog_action(action) == -1) {
 998         monitor_printf(mon, "Unknown watchdog action '%s'\n", action);
 999     }
1000 }
1001
1002 static void monitor_printc(Monitor *mon, int c)
1003 {
1004     monitor_printf(mon, "'");
1005     switch(c) {
1006     case '\'':
1007         monitor_printf(mon, "\\'");
1008         break;
1009     case '\\':
1010         monitor_printf(mon, "\\\\");
1011         break;
1012     case '\n':
1013         monitor_printf(mon, "\\n");
1014         break;
1015     case '\r':
1016         monitor_printf(mon, "\\r");
1017         break;
1018     default:
1019         if (c >= 32 && c <= 126) {
1020             monitor_printf(mon, "%c", c);
1021         } else {
1022             monitor_printf(mon, "\\x%02x", c);
1023         }
1024         break;
1025     }
1026     monitor_printf(mon, "'");
1027 }
1028
1029 static void memory_dump(Monitor *mon, int count, int format, int wsize,
1030                         target_phys_addr_t addr, int is_physical)
1031 {
1032     CPUState *env;
1033     int nb_per_line, l, line_size, i, max_digits, len;
1034     uint8_t buf[16];
1035     uint64_t v;
1036
1037     if (format == 'i') {
1038         int flags;
1039         flags = 0;
1040         env = mon_get_cpu();
1041         if (!env && !is_physical)
1042             return;
1043 #ifdef TARGET_I386
1044         if (wsize == 2) {
1045             flags = 1;
1046         } else if (wsize == 4) {
1047             flags = 0;
1048         } else {
1049             /* as default we use the current CS size */
1050             flags = 0;
1051             if (env) {
1052 #ifdef TARGET_X86_64
1053                 if ((env->efer & MSR_EFER_LMA) &&
1054                     (env->segs[R_CS].flags & DESC_L_MASK))
1055                     flags = 2;
1056                 else
1057 #endif
1058                 if (!(env->segs[R_CS].flags & DESC_B_MASK))
1059                     flags = 1;
1060             }
1061         }
1062 #endif
1063         monitor_disas(mon, env, addr, count, is_physical, flags);
1064         return;
1065     }
1066
1067     len = wsize * count;
1068     if (wsize == 1)
1069         line_size = 8;
1070     else
1071         line_size = 16;
1072     nb_per_line = line_size / wsize;
1073     max_digits = 0;
1074
1075     switch(format) {
1076     case 'o':
1077         max_digits = (wsize * 8 + 2) / 3;
1078         break;
1079     default:
1080     case 'x':
1081         max_digits = (wsize * 8) / 4;
1082         break;
1083     case 'u':
1084     case 'd':
1085         max_digits = (wsize * 8 * 10 + 32) / 33;
1086         break;
1087     case 'c':
1088         wsize = 1;
1089         break;
1090     }
1091
1092     while (len > 0) {
1093         if (is_physical)
1094             monitor_printf(mon, TARGET_FMT_plx ":", addr);
1095         else
1096             monitor_printf(mon, TARGET_FMT_lx ":", (target_ulong)addr);
1097         l = len;
1098         if (l > line_size)
1099             l = line_size;
1100         if (is_physical) {
1101             cpu_physical_memory_rw(addr, buf, l, 0);
1102         } else {
1103             env = mon_get_cpu();
1104             if (!env)
1105                 break;
1106             if (cpu_memory_rw_debug(env, addr, buf, l, 0) < 0) {
1107                 monitor_printf(mon, " Cannot access memory\n");
1108                 break;
1109             }
1110         }
1111         i = 0;
1112         while (i < l) {
1113             switch(wsize) {
1114             default:
1115             case 1:
1116                 v = ldub_raw(buf + i);
1117                 break;
1118             case 2:
1119                 v = lduw_raw(buf + i);
1120                 break;
1121             case 4:
1122                 v = (uint32_t)ldl_raw(buf + i);
1123                 break;
1124             case 8:
1125                 v = ldq_raw(buf + i);
1126                 break;
1127             }
1128             monitor_printf(mon, " ");
1129             switch(format) {
1130             case 'o':
1131                 monitor_printf(mon, "%#*" PRIo64, max_digits, v);
1132                 break;
1133             case 'x':
1134                 monitor_printf(mon, "0x%0*" PRIx64, max_digits, v);
1135                 break;
1136             case 'u':
1137                 monitor_printf(mon, "%*" PRIu64, max_digits, v);
1138                 break;
1139             case 'd':
1140                 monitor_printf(mon, "%*" PRId64, max_digits, v);
1141                 break;
1142             case 'c':
1143                 monitor_printc(mon, v);
1144                 break;
1145             }
1146             i += wsize;
1147         }
1148         monitor_printf(mon, "\n");
1149         addr += l;
1150         len -= l;
1151     }
1152 }
1153
1154 static void do_memory_dump(Monitor *mon, const QDict *qdict)
1155 {
1156     int count = qdict_get_int(qdict, "count");
1157     int format = qdict_get_int(qdict, "format");
1158     int size = qdict_get_int(qdict, "size");
1159     target_long addr = qdict_get_int(qdict, "addr");
1160
1161     memory_dump(mon, count, format, size, addr, 0);
1162 }
1163
1164 static void do_physical_memory_dump(Monitor *mon, const QDict *qdict)
1165 {
1166     int count = qdict_get_int(qdict, "count");
1167     int format = qdict_get_int(qdict, "format");
1168     int size = qdict_get_int(qdict, "size");
1169     target_phys_addr_t addr = qdict_get_int(qdict, "addr");
1170
1171     memory_dump(mon, count, format, size, addr, 1);
1172 }
1173
1174 static void do_print(Monitor *mon, const QDict *qdict)
1175 {
1176     int format = qdict_get_int(qdict, "format");
1177     target_phys_addr_t val = qdict_get_int(qdict, "val");
1178
1179 #if TARGET_PHYS_ADDR_BITS == 32
1180     switch(format) {
1181     case 'o':
1182         monitor_printf(mon, "%#o", val);
1183         break;
1184     case 'x':
1185         monitor_printf(mon, "%#x", val);
1186         break;
1187     case 'u':
1188         monitor_printf(mon, "%u", val);
1189         break;
1190     default:
1191     case 'd':
1192         monitor_printf(mon, "%d", val);
1193         break;
1194     case 'c':
1195         monitor_printc(mon, val);
1196         break;
1197     }
1198 #else
1199     switch(format) {
1200     case 'o':
1201         monitor_printf(mon, "%#" PRIo64, val);
1202         break;
1203     case 'x':
1204         monitor_printf(mon, "%#" PRIx64, val);
1205         break;
1206     case 'u':
1207         monitor_printf(mon, "%" PRIu64, val);
1208         break;
1209     default:
1210     case 'd':
1211         monitor_printf(mon, "%" PRId64, val);
1212         break;
1213     case 'c':
1214         monitor_printc(mon, val);
1215         break;
1216     }
1217 #endif
1218     monitor_printf(mon, "\n");
1219 }
1220
1221 static void do_memory_save(Monitor *mon, const QDict *qdict, QObject **ret_data)
1222 {
1223     FILE *f;
1224     uint32_t size = qdict_get_int(qdict, "size");
1225     const char *filename = qdict_get_str(qdict, "filename");
1226     target_long addr = qdict_get_int(qdict, "val");
1227     uint32_t l;
1228     CPUState *env;
1229     uint8_t buf[1024];
1230
1231     env = mon_get_cpu();
1232     if (!env)
1233         return;
1234
1235     f = fopen(filename, "wb");
1236     if (!f) {
1237         monitor_printf(mon, "could not open '%s'\n", filename);
1238         return;
1239     }
1240     while (size != 0) {
1241         l = sizeof(buf);
1242         if (l > size)
1243             l = size;
1244         cpu_memory_rw_debug(env, addr, buf, l, 0);
1245         fwrite(buf, 1, l, f);
1246         addr += l;
1247         size -= l;
1248     }
1249     fclose(f);
1250 }
1251
1252 static void do_physical_memory_save(Monitor *mon, const QDict *qdict,
1253                                     QObject **ret_data)
1254 {
1255     FILE *f;
1256     uint32_t l;
1257     uint8_t buf[1024];
1258     uint32_t size = qdict_get_int(qdict, "size");
1259     const char *filename = qdict_get_str(qdict, "filename");
1260     target_phys_addr_t addr = qdict_get_int(qdict, "val");
1261
1262     f = fopen(filename, "wb");
1263     if (!f) {
1264         monitor_printf(mon, "could not open '%s'\n", filename);
1265         return;
1266     }
1267     while (size != 0) {
1268         l = sizeof(buf);
1269         if (l > size)
1270             l = size;
1271         cpu_physical_memory_rw(addr, buf, l, 0);
1272         fwrite(buf, 1, l, f);
1273         fflush(f);
1274         addr += l;
1275         size -= l;
1276     }
1277     fclose(f);
1278 }
1279
1280 static void do_sum(Monitor *mon, const QDict *qdict)
1281 {
1282     uint32_t addr;
1283     uint8_t buf[1];
1284     uint16_t sum;
1285     uint32_t start = qdict_get_int(qdict, "start");
1286     uint32_t size = qdict_get_int(qdict, "size");
1287
1288     sum = 0;
1289     for(addr = start; addr < (start + size); addr++) {
1290         cpu_physical_memory_rw(addr, buf, 1, 0);
1291         /* BSD sum algorithm ('sum' Unix command) */
1292         sum = (sum >> 1) | (sum << 15);
1293         sum += buf[0];
1294     }
1295     monitor_printf(mon, "%05d\n", sum);
1296 }
1297
1298 typedef struct {
1299     int keycode;
1300     const char *name;
1301 } KeyDef;
1302
1303 static const KeyDef key_defs[] = {
1304     { 0x2a, "shift" },
1305     { 0x36, "shift_r" },
1306
1307     { 0x38, "alt" },
1308     { 0xb8, "alt_r" },
1309     { 0x64, "altgr" },
1310     { 0xe4, "altgr_r" },
1311     { 0x1d, "ctrl" },
1312     { 0x9d, "ctrl_r" },
1313
1314     { 0xdd, "menu" },
1315
1316     { 0x01, "esc" },
1317
1318     { 0x02, "1" },
1319     { 0x03, "2" },
1320     { 0x04, "3" },
1321     { 0x05, "4" },
1322     { 0x06, "5" },
1323     { 0x07, "6" },
1324     { 0x08, "7" },
1325     { 0x09, "8" },
1326     { 0x0a, "9" },
1327     { 0x0b, "0" },
1328     { 0x0c, "minus" },
1329     { 0x0d, "equal" },
1330     { 0x0e, "backspace" },
1331
1332     { 0x0f, "tab" },
1333     { 0x10, "q" },
1334     { 0x11, "w" },
1335     { 0x12, "e" },
1336     { 0x13, "r" },
1337     { 0x14, "t" },
1338     { 0x15, "y" },
1339     { 0x16, "u" },
1340     { 0x17, "i" },
1341     { 0x18, "o" },
1342     { 0x19, "p" },
1343
1344     { 0x1c, "ret" },
1345
1346     { 0x1e, "a" },
1347     { 0x1f, "s" },
1348     { 0x20, "d" },
1349     { 0x21, "f" },
1350     { 0x22, "g" },
1351     { 0x23, "h" },
1352     { 0x24, "j" },
1353     { 0x25, "k" },
1354     { 0x26, "l" },
1355
1356     { 0x2c, "z" },
1357     { 0x2d, "x" },
1358     { 0x2e, "c" },
1359     { 0x2f, "v" },
1360     { 0x30, "b" },
1361     { 0x31, "n" },
1362     { 0x32, "m" },
1363     { 0x33, "comma" },
1364     { 0x34, "dot" },
1365     { 0x35, "slash" },
1366
1367     { 0x37, "asterisk" },
1368
1369     { 0x39, "spc" },
1370     { 0x3a, "caps_lock" },
1371     { 0x3b, "f1" },
1372     { 0x3c, "f2" },
1373     { 0x3d, "f3" },
1374     { 0x3e, "f4" },
1375     { 0x3f, "f5" },
1376     { 0x40, "f6" },
1377     { 0x41, "f7" },
1378     { 0x42, "f8" },
1379     { 0x43, "f9" },
1380     { 0x44, "f10" },
1381     { 0x45, "num_lock" },
1382     { 0x46, "scroll_lock" },
1383
1384     { 0xb5, "kp_divide" },
1385     { 0x37, "kp_multiply" },
1386     { 0x4a, "kp_subtract" },
1387     { 0x4e, "kp_add" },
1388     { 0x9c, "kp_enter" },
1389     { 0x53, "kp_decimal" },
1390     { 0x54, "sysrq" },
1391
1392     { 0x52, "kp_0" },
1393     { 0x4f, "kp_1" },
1394     { 0x50, "kp_2" },
1395     { 0x51, "kp_3" },
1396     { 0x4b, "kp_4" },
1397     { 0x4c, "kp_5" },
1398     { 0x4d, "kp_6" },
1399     { 0x47, "kp_7" },
1400     { 0x48, "kp_8" },
1401     { 0x49, "kp_9" },
1402
1403     { 0x56, "<" },
1404
1405     { 0x57, "f11" },
1406     { 0x58, "f12" },
1407
1408     { 0xb7, "print" },
1409
1410     { 0xc7, "home" },
1411     { 0xc9, "pgup" },
1412     { 0xd1, "pgdn" },
1413     { 0xcf, "end" },
1414
1415     { 0xcb, "left" },
1416     { 0xc8, "up" },
1417     { 0xd0, "down" },
1418     { 0xcd, "right" },
1419
1420     { 0xd2, "insert" },
1421     { 0xd3, "delete" },
1422 #if defined(TARGET_SPARC) && !defined(TARGET_SPARC64)
1423     { 0xf0, "stop" },
1424     { 0xf1, "again" },
1425     { 0xf2, "props" },
1426     { 0xf3, "undo" },
1427     { 0xf4, "front" },
1428     { 0xf5, "copy" },
1429     { 0xf6, "open" },
1430     { 0xf7, "paste" },
1431     { 0xf8, "find" },
1432     { 0xf9, "cut" },
1433     { 0xfa, "lf" },
1434     { 0xfb, "help" },
1435     { 0xfc, "meta_l" },
1436     { 0xfd, "meta_r" },
1437     { 0xfe, "compose" },
1438 #endif
1439     { 0, NULL },
1440 };
1441
1442 static int get_keycode(const char *key)
1443 {
1444     const KeyDef *p;
1445     char *endp;
1446     int ret;
1447
1448     for(p = key_defs; p->name != NULL; p++) {
1449         if (!strcmp(key, p->name))
1450             return p->keycode;
1451     }
1452     if (strstart(key, "0x", NULL)) {
1453         ret = strtoul(key, &endp, 0);
1454         if (*endp == '\0' && ret >= 0x01 && ret <= 0xff)
1455             return ret;
1456     }
1457     return -1;
1458 }
1459
1460 #define MAX_KEYCODES 16
1461 static uint8_t keycodes[MAX_KEYCODES];
1462 static int nb_pending_keycodes;
1463 static QEMUTimer *key_timer;
1464
1465 static void release_keys(void *opaque)
1466 {
1467     int keycode;
1468
1469     while (nb_pending_keycodes > 0) {
1470         nb_pending_keycodes--;
1471         keycode = keycodes[nb_pending_keycodes];
1472         if (keycode & 0x80)
1473             kbd_put_keycode(0xe0);
1474         kbd_put_keycode(keycode | 0x80);
1475     }
1476 }
1477
1478 static void do_sendkey(Monitor *mon, const QDict *qdict)
1479 {
1480     char keyname_buf[16];
1481     char *separator;
1482     int keyname_len, keycode, i;
1483     const char *string = qdict_get_str(qdict, "string");
1484     int has_hold_time = qdict_haskey(qdict, "hold_time");
1485     int hold_time = qdict_get_try_int(qdict, "hold_time", -1);
1486
1487     if (nb_pending_keycodes > 0) {
1488         qemu_del_timer(key_timer);
1489         release_keys(NULL);
1490     }
1491     if (!has_hold_time)
1492         hold_time = 100;
1493     i = 0;
1494     while (1) {
1495         separator = strchr(string, '-');
1496         keyname_len = separator ? separator - string : strlen(string);
1497         if (keyname_len > 0) {
1498             pstrcpy(keyname_buf, sizeof(keyname_buf), string);
1499             if (keyname_len > sizeof(keyname_buf) - 1) {
1500                 monitor_printf(mon, "invalid key: '%s...'\n", keyname_buf);
1501                 return;
1502             }
1503             if (i == MAX_KEYCODES) {
1504                 monitor_printf(mon, "too many keys\n");
1505                 return;
1506             }
1507             keyname_buf[keyname_len] = 0;
1508             keycode = get_keycode(keyname_buf);
1509             if (keycode < 0) {
1510                 monitor_printf(mon, "unknown key: '%s'\n", keyname_buf);
1511                 return;
1512             }
1513             keycodes[i++] = keycode;
1514         }
1515         if (!separator)
1516             break;
1517         string = separator + 1;
1518     }
1519     nb_pending_keycodes = i;
1520     /* key down events */
1521     for (i = 0; i < nb_pending_keycodes; i++) {
1522         keycode = keycodes[i];
1523         if (keycode & 0x80)
1524             kbd_put_keycode(0xe0);
1525         kbd_put_keycode(keycode & 0x7f);
1526     }
1527     /* delayed key up events */
1528     qemu_mod_timer(key_timer, qemu_get_clock(vm_clock) +
1529                    muldiv64(get_ticks_per_sec(), hold_time, 1000));
1530 }
1531
1532 static int mouse_button_state;
1533
1534 static void do_mouse_move(Monitor *mon, const QDict *qdict)
1535 {
1536     int dx, dy, dz;
1537     const char *dx_str = qdict_get_str(qdict, "dx_str");
1538     const char *dy_str = qdict_get_str(qdict, "dy_str");
1539     const char *dz_str = qdict_get_try_str(qdict, "dz_str");
1540     dx = strtol(dx_str, NULL, 0);
1541     dy = strtol(dy_str, NULL, 0);
1542     dz = 0;
1543     if (dz_str)
1544         dz = strtol(dz_str, NULL, 0);
1545     kbd_mouse_event(dx, dy, dz, mouse_button_state);
1546 }
1547
1548 static void do_mouse_button(Monitor *mon, const QDict *qdict)
1549 {
1550     int button_state = qdict_get_int(qdict, "button_state");
1551     mouse_button_state = button_state;
1552     kbd_mouse_event(0, 0, 0, mouse_button_state);
1553 }
1554
1555 static void do_ioport_read(Monitor *mon, const QDict *qdict)
1556 {
1557     int size = qdict_get_int(qdict, "size");
1558     int addr = qdict_get_int(qdict, "addr");
1559     int has_index = qdict_haskey(qdict, "index");
1560     uint32_t val;
1561     int suffix;
1562
1563     if (has_index) {
1564         int index = qdict_get_int(qdict, "index");
1565         cpu_outb(addr & IOPORTS_MASK, index & 0xff);
1566         addr++;
1567     }
1568     addr &= 0xffff;
1569
1570     switch(size) {
1571     default:
1572     case 1:
1573         val = cpu_inb(addr);
1574         suffix = 'b';
1575         break;
1576     case 2:
1577         val = cpu_inw(addr);
1578         suffix = 'w';
1579         break;
1580     case 4:
1581         val = cpu_inl(addr);
1582         suffix = 'l';
1583         break;
1584     }
1585     monitor_printf(mon, "port%c[0x%04x] = %#0*x\n",
1586                    suffix, addr, size * 2, val);
1587 }
1588
1589 static void do_ioport_write(Monitor *mon, const QDict *qdict)
1590 {
1591     int size = qdict_get_int(qdict, "size");
1592     int addr = qdict_get_int(qdict, "addr");
1593     int val = qdict_get_int(qdict, "val");
1594
1595     addr &= IOPORTS_MASK;
1596
1597     switch (size) {
1598     default:
1599     case 1:
1600         cpu_outb(addr, val);
1601         break;
1602     case 2:
1603         cpu_outw(addr, val);
1604         break;
1605     case 4:
1606         cpu_outl(addr, val);
1607         break;
1608     }
1609 }
1610
1611 static void do_boot_set(Monitor *mon, const QDict *qdict)
1612 {
1613     int res;
1614     const char *bootdevice = qdict_get_str(qdict, "bootdevice");
1615
1616     res = qemu_boot_set(bootdevice);
1617     if (res == 0) {
1618         monitor_printf(mon, "boot device list now set to %s\n", bootdevice);
1619     } else if (res > 0) {
1620         monitor_printf(mon, "setting boot device list failed\n");
1621     } else {
1622         monitor_printf(mon, "no function defined to set boot device list for "
1623                        "this architecture\n");
1624     }
1625 }
1626
1627 /**
1628  * do_system_reset(): Issue a machine reset
1629  */
1630 static void do_system_reset(Monitor *mon, const QDict *qdict,
1631                             QObject **ret_data)
1632 {
1633     qemu_system_reset_request();
1634 }
1635
1636 /**
1637  * do_system_powerdown(): Issue a machine powerdown
1638  */
1639 static void do_system_powerdown(Monitor *mon, const QDict *qdict,
1640                                 QObject **ret_data)
1641 {
1642     qemu_system_powerdown_request();
1643 }
1644
1645 #if defined(TARGET_I386)
1646 static void print_pte(Monitor *mon, uint32_t addr, uint32_t pte, uint32_t mask)
1647 {
1648     monitor_printf(mon, "%08x: %08x %c%c%c%c%c%c%c%c\n",
1649                    addr,
1650                    pte & mask,
1651                    pte & PG_GLOBAL_MASK ? 'G' : '-',
1652                    pte & PG_PSE_MASK ? 'P' : '-',
1653                    pte & PG_DIRTY_MASK ? 'D' : '-',
1654                    pte & PG_ACCESSED_MASK ? 'A' : '-',
1655                    pte & PG_PCD_MASK ? 'C' : '-',
1656                    pte & PG_PWT_MASK ? 'T' : '-',
1657                    pte & PG_USER_MASK ? 'U' : '-',
1658                    pte & PG_RW_MASK ? 'W' : '-');
1659 }
1660
1661 static void tlb_info(Monitor *mon)
1662 {
1663     CPUState *env;
1664     int l1, l2;
1665     uint32_t pgd, pde, pte;
1666
1667     env = mon_get_cpu();
1668     if (!env)
1669         return;
1670
1671     if (!(env->cr[0] & CR0_PG_MASK)) {
1672         monitor_printf(mon, "PG disabled\n");
1673         return;
1674     }
1675     pgd = env->cr[3] & ~0xfff;
1676     for(l1 = 0; l1 < 1024; l1++) {
1677         cpu_physical_memory_read(pgd + l1 * 4, (uint8_t *)&pde, 4);
1678         pde = le32_to_cpu(pde);
1679         if (pde & PG_PRESENT_MASK) {
1680             if ((pde & PG_PSE_MASK) && (env->cr[4] & CR4_PSE_MASK)) {
1681                 print_pte(mon, (l1 << 22), pde, ~((1 << 20) - 1));
1682             } else {
1683                 for(l2 = 0; l2 < 1024; l2++) {
1684                     cpu_physical_memory_read((pde & ~0xfff) + l2 * 4,
1685                                              (uint8_t *)&pte, 4);
1686                     pte = le32_to_cpu(pte);
1687                     if (pte & PG_PRESENT_MASK) {
1688                         print_pte(mon, (l1 << 22) + (l2 << 12),
1689                                   pte & ~PG_PSE_MASK,
1690                                   ~0xfff);
1691                     }
1692                 }
1693             }
1694         }
1695     }
1696 }
1697
1698 static void mem_print(Monitor *mon, uint32_t *pstart, int *plast_prot,
1699                       uint32_t end, int prot)
1700 {
1701     int prot1;
1702     prot1 = *plast_prot;
1703     if (prot != prot1) {
1704         if (*pstart != -1) {
1705             monitor_printf(mon, "%08x-%08x %08x %c%c%c\n",
1706                            *pstart, end, end - *pstart,
1707                            prot1 & PG_USER_MASK ? 'u' : '-',
1708                            'r',
1709                            prot1 & PG_RW_MASK ? 'w' : '-');
1710         }
1711         if (prot != 0)
1712             *pstart = end;
1713         else
1714             *pstart = -1;
1715         *plast_prot = prot;
1716     }
1717 }
1718
1719 static void mem_info(Monitor *mon)
1720 {
1721     CPUState *env;
1722     int l1, l2, prot, last_prot;
1723     uint32_t pgd, pde, pte, start, end;
1724
1725     env = mon_get_cpu();
1726     if (!env)
1727         return;
1728
1729     if (!(env->cr[0] & CR0_PG_MASK)) {
1730         monitor_printf(mon, "PG disabled\n");
1731         return;
1732     }
1733     pgd = env->cr[3] & ~0xfff;
1734     last_prot = 0;
1735     start = -1;
1736     for(l1 = 0; l1 < 1024; l1++) {
1737         cpu_physical_memory_read(pgd + l1 * 4, (uint8_t *)&pde, 4);
1738         pde = le32_to_cpu(pde);
1739         end = l1 << 22;
1740         if (pde & PG_PRESENT_MASK) {
1741             if ((pde & PG_PSE_MASK) && (env->cr[4] & CR4_PSE_MASK)) {
1742                 prot = pde & (PG_USER_MASK | PG_RW_MASK | PG_PRESENT_MASK);
1743                 mem_print(mon, &start, &last_prot, end, prot);
1744             } else {
1745                 for(l2 = 0; l2 < 1024; l2++) {
1746                     cpu_physical_memory_read((pde & ~0xfff) + l2 * 4,
1747                                              (uint8_t *)&pte, 4);
1748                     pte = le32_to_cpu(pte);
1749                     end = (l1 << 22) + (l2 << 12);
1750                     if (pte & PG_PRESENT_MASK) {
1751                         prot = pte & (PG_USER_MASK | PG_RW_MASK | PG_PRESENT_MASK);
1752                     } else {
1753                         prot = 0;
1754                     }
1755                     mem_print(mon, &start, &last_prot, end, prot);
1756                 }
1757             }
1758         } else {
1759             prot = 0;
1760             mem_print(mon, &start, &last_prot, end, prot);
1761         }
1762     }
1763 }
1764 #endif
1765
1766 #if defined(TARGET_SH4)
1767
1768 static void print_tlb(Monitor *mon, int idx, tlb_t *tlb)
1769 {
1770     monitor_printf(mon, " tlb%i:\t"
1771                    "asid=%hhu vpn=%x\tppn=%x\tsz=%hhu size=%u\t"
1772                    "v=%hhu shared=%hhu cached=%hhu prot=%hhu "
1773                    "dirty=%hhu writethrough=%hhu\n",
1774                    idx,
1775                    tlb->asid, tlb->vpn, tlb->ppn, tlb->sz, tlb->size,
1776                    tlb->v, tlb->sh, tlb->c, tlb->pr,
1777                    tlb->d, tlb->wt);
1778 }
1779
1780 static void tlb_info(Monitor *mon)
1781 {
1782     CPUState *env = mon_get_cpu();
1783     int i;
1784
1785     monitor_printf (mon, "ITLB:\n");
1786     for (i = 0 ; i < ITLB_SIZE ; i++)
1787         print_tlb (mon, i, &env->itlb[i]);
1788     monitor_printf (mon, "UTLB:\n");
1789     for (i = 0 ; i < UTLB_SIZE ; i++)
1790         print_tlb (mon, i, &env->utlb[i]);
1791 }
1792
1793 #endif
1794
1795 static void do_info_kvm(Monitor *mon)
1796 {
1797 #ifdef CONFIG_KVM
1798     monitor_printf(mon, "kvm support: ");
1799     if (kvm_enabled())
1800         monitor_printf(mon, "enabled\n");
1801     else
1802         monitor_printf(mon, "disabled\n");
1803 #else
1804     monitor_printf(mon, "kvm support: not compiled\n");
1805 #endif
1806 }
1807
1808 static void do_info_numa(Monitor *mon)
1809 {
1810     int i;
1811     CPUState *env;
1812
1813     monitor_printf(mon, "%d nodes\n", nb_numa_nodes);
1814     for (i = 0; i < nb_numa_nodes; i++) {
1815         monitor_printf(mon, "node %d cpus:", i);
1816         for (env = first_cpu; env != NULL; env = env->next_cpu) {
1817             if (env->numa_node == i) {
1818                 monitor_printf(mon, " %d", env->cpu_index);
1819             }
1820         }
1821         monitor_printf(mon, "\n");
1822         monitor_printf(mon, "node %d size: %" PRId64 " MB\n", i,
1823             node_mem[i] >> 20);
1824     }
1825 }
1826
1827 #ifdef CONFIG_PROFILER
1828
1829 int64_t qemu_time;
1830 int64_t dev_time;
1831
1832 static void do_info_profile(Monitor *mon)
1833 {
1834     int64_t total;
1835     total = qemu_time;
1836     if (total == 0)
1837         total = 1;
1838     monitor_printf(mon, "async time  %" PRId64 " (%0.3f)\n",
1839                    dev_time, dev_time / (double)get_ticks_per_sec());
1840     monitor_printf(mon, "qemu time   %" PRId64 " (%0.3f)\n",
1841                    qemu_time, qemu_time / (double)get_ticks_per_sec());
1842     qemu_time = 0;
1843     dev_time = 0;
1844 }
1845 #else
1846 static void do_info_profile(Monitor *mon)
1847 {
1848     monitor_printf(mon, "Internal profiler not compiled\n");
1849 }
1850 #endif
1851
1852 /* Capture support */
1853 static QLIST_HEAD (capture_list_head, CaptureState) capture_head;
1854
1855 static void do_info_capture(Monitor *mon)
1856 {
1857     int i;
1858     CaptureState *s;
1859
1860     for (s = capture_head.lh_first, i = 0; s; s = s->entries.le_next, ++i) {
1861         monitor_printf(mon, "[%d]: ", i);
1862         s->ops.info (s->opaque);
1863     }
1864 }
1865
1866 #ifdef HAS_AUDIO
1867 static void do_stop_capture(Monitor *mon, const QDict *qdict)
1868 {
1869     int i;
1870     int n = qdict_get_int(qdict, "n");
1871     CaptureState *s;
1872
1873     for (s = capture_head.lh_first, i = 0; s; s = s->entries.le_next, ++i) {
1874         if (i == n) {
1875             s->ops.destroy (s->opaque);
1876             QLIST_REMOVE (s, entries);
1877             qemu_free (s);
1878             return;
1879         }
1880     }
1881 }
1882
1883 static void do_wav_capture(Monitor *mon, const QDict *qdict)
1884 {
1885     const char *path = qdict_get_str(qdict, "path");
1886     int has_freq = qdict_haskey(qdict, "freq");
1887     int freq = qdict_get_try_int(qdict, "freq", -1);
1888     int has_bits = qdict_haskey(qdict, "bits");
1889     int bits = qdict_get_try_int(qdict, "bits", -1);
1890     int has_channels = qdict_haskey(qdict, "nchannels");
1891     int nchannels = qdict_get_try_int(qdict, "nchannels", -1);
1892     CaptureState *s;
1893
1894     s = qemu_mallocz (sizeof (*s));
1895
1896     freq = has_freq ? freq : 44100;
1897     bits = has_bits ? bits : 16;
1898     nchannels = has_channels ? nchannels : 2;
1899
1900     if (wav_start_capture (s, path, freq, bits, nchannels)) {
1901         monitor_printf(mon, "Faied to add wave capture\n");
1902         qemu_free (s);
1903     }
1904     QLIST_INSERT_HEAD (&capture_head, s, entries);
1905 }
1906 #endif
1907
1908 #if defined(TARGET_I386)
1909 static void do_inject_nmi(Monitor *mon, const QDict *qdict)
1910 {
1911     CPUState *env;
1912     int cpu_index = qdict_get_int(qdict, "cpu_index");
1913
1914     for (env = first_cpu; env != NULL; env = env->next_cpu)
1915         if (env->cpu_index == cpu_index) {
1916             cpu_interrupt(env, CPU_INTERRUPT_NMI);
1917             break;
1918         }
1919 }
1920 #endif
1921
1922 static void do_info_status(Monitor *mon)
1923 {
1924     if (vm_running) {
1925         if (singlestep) {
1926             monitor_printf(mon, "VM status: running (single step mode)\n");
1927         } else {
1928             monitor_printf(mon, "VM status: running\n");
1929         }
1930     } else
1931        monitor_printf(mon, "VM status: paused\n");
1932 }
1933
1934 /**
1935  * do_balloon(): Request VM to change its memory allocation
1936  */
1937 static void do_balloon(Monitor *mon, const QDict *qdict, QObject **ret_data)
1938 {
1939     int value = qdict_get_int(qdict, "value");
1940     ram_addr_t target = value;
1941     qemu_balloon(target << 20);
1942 }
1943
1944 static void monitor_print_balloon(Monitor *mon, const QObject *data)
1945 {
1946     QDict *qdict;
1947
1948     qdict = qobject_to_qdict(data);
1949
1950     monitor_printf(mon, "balloon: actual=%" PRId64 "\n",
1951                         qdict_get_int(qdict, "balloon") >> 20);
1952 }
1953
1954 /**
1955  * do_info_balloon(): Balloon information
1956  *
1957  * Return a QDict with the following information:
1958  *
1959  * - "balloon": current balloon value in bytes
1960  *
1961  * Example:
1962  *
1963  * { "balloon": 1073741824 }
1964  */
1965 static void do_info_balloon(Monitor *mon, QObject **ret_data)
1966 {
1967     ram_addr_t actual;
1968
1969     actual = qemu_balloon_status();
1970     if (kvm_enabled() && !kvm_has_sync_mmu())
1971         qemu_error_new(QERR_KVM_MISSING_CAP, "synchronous MMU", "balloon");
1972     else if (actual == 0)
1973         qemu_error_new(QERR_DEVICE_NOT_ACTIVE, "balloon");
1974     else
1975         *ret_data = qobject_from_jsonf("{ 'balloon': %" PRId64 "}",
1976                                        (int64_t) actual);
1977 }
1978
1979 static qemu_acl *find_acl(Monitor *mon, const char *name)
1980 {
1981     qemu_acl *acl = qemu_acl_find(name);
1982
1983     if (!acl) {
1984         monitor_printf(mon, "acl: unknown list '%s'\n", name);
1985     }
1986     return acl;
1987 }
1988
1989 static void do_acl_show(Monitor *mon, const QDict *qdict)
1990 {
1991     const char *aclname = qdict_get_str(qdict, "aclname");
1992     qemu_acl *acl = find_acl(mon, aclname);
1993     qemu_acl_entry *entry;
1994     int i = 0;
1995
1996     if (acl) {
1997         monitor_printf(mon, "policy: %s\n",
1998                        acl->defaultDeny ? "deny" : "allow");
1999         QTAILQ_FOREACH(entry, &acl->entries, next) {
2000             i++;
2001             monitor_printf(mon, "%d: %s %s\n", i,
2002                            entry->deny ? "deny" : "allow", entry->match);
2003         }
2004     }
2005 }
2006
2007 static void do_acl_reset(Monitor *mon, const QDict *qdict)
2008 {
2009     const char *aclname = qdict_get_str(qdict, "aclname");
2010     qemu_acl *acl = find_acl(mon, aclname);
2011
2012     if (acl) {
2013         qemu_acl_reset(acl);
2014         monitor_printf(mon, "acl: removed all rules\n");
2015     }
2016 }
2017
2018 static void do_acl_policy(Monitor *mon, const QDict *qdict)
2019 {
2020     const char *aclname = qdict_get_str(qdict, "aclname");
2021     const char *policy = qdict_get_str(qdict, "policy");
2022     qemu_acl *acl = find_acl(mon, aclname);
2023
2024     if (acl) {
2025         if (strcmp(policy, "allow") == 0) {
2026             acl->defaultDeny = 0;
2027             monitor_printf(mon, "acl: policy set to 'allow'\n");
2028         } else if (strcmp(policy, "deny") == 0) {
2029             acl->defaultDeny = 1;
2030             monitor_printf(mon, "acl: policy set to 'deny'\n");
2031         } else {
2032             monitor_printf(mon, "acl: unknown policy '%s', "
2033                            "expected 'deny' or 'allow'\n", policy);
2034         }
2035     }
2036 }
2037
2038 static void do_acl_add(Monitor *mon, const QDict *qdict)
2039 {
2040     const char *aclname = qdict_get_str(qdict, "aclname");
2041     const char *match = qdict_get_str(qdict, "match");
2042     const char *policy = qdict_get_str(qdict, "policy");
2043     int has_index = qdict_haskey(qdict, "index");
2044     int index = qdict_get_try_int(qdict, "index", -1);
2045     qemu_acl *acl = find_acl(mon, aclname);
2046     int deny, ret;
2047
2048     if (acl) {
2049         if (strcmp(policy, "allow") == 0) {
2050             deny = 0;
2051         } else if (strcmp(policy, "deny") == 0) {
2052             deny = 1;
2053         } else {
2054             monitor_printf(mon, "acl: unknown policy '%s', "
2055                            "expected 'deny' or 'allow'\n", policy);
2056             return;
2057         }
2058         if (has_index)
2059             ret = qemu_acl_insert(acl, deny, match, index);
2060         else
2061             ret = qemu_acl_append(acl, deny, match);
2062         if (ret < 0)
2063             monitor_printf(mon, "acl: unable to add acl entry\n");
2064         else
2065             monitor_printf(mon, "acl: added rule at position %d\n", ret);
2066     }
2067 }
2068
2069 static void do_acl_remove(Monitor *mon, const QDict *qdict)
2070 {
2071     const char *aclname = qdict_get_str(qdict, "aclname");
2072     const char *match = qdict_get_str(qdict, "match");
2073     qemu_acl *acl = find_acl(mon, aclname);
2074     int ret;
2075
2076     if (acl) {
2077         ret = qemu_acl_remove(acl, match);
2078         if (ret < 0)
2079             monitor_printf(mon, "acl: no matching acl entry\n");
2080         else
2081             monitor_printf(mon, "acl: removed rule at position %d\n", ret);
2082     }
2083 }
2084
2085 #if defined(TARGET_I386)
2086 static void do_inject_mce(Monitor *mon, const QDict *qdict)
2087 {
2088     CPUState *cenv;
2089     int cpu_index = qdict_get_int(qdict, "cpu_index");
2090     int bank = qdict_get_int(qdict, "bank");
2091     uint64_t status = qdict_get_int(qdict, "status");
2092     uint64_t mcg_status = qdict_get_int(qdict, "mcg_status");
2093     uint64_t addr = qdict_get_int(qdict, "addr");
2094     uint64_t misc = qdict_get_int(qdict, "misc");
2095
2096     for (cenv = first_cpu; cenv != NULL; cenv = cenv->next_cpu)
2097         if (cenv->cpu_index == cpu_index && cenv->mcg_cap) {
2098             cpu_inject_x86_mce(cenv, bank, status, mcg_status, addr, misc);
2099             break;
2100         }
2101 }
2102 #endif
2103
2104 static void do_getfd(Monitor *mon, const QDict *qdict, QObject **ret_data)
2105 {
2106     const char *fdname = qdict_get_str(qdict, "fdname");
2107     mon_fd_t *monfd;
2108     int fd;
2109
2110     fd = qemu_chr_get_msgfd(mon->chr);
2111     if (fd == -1) {
2112         qemu_error_new(QERR_FD_NOT_SUPPLIED);
2113         return;
2114     }
2115
2116     if (qemu_isdigit(fdname[0])) {
2117         qemu_error_new(QERR_INVALID_PARAMETER, "fdname");
2118         return;
2119     }
2120
2121     fd = dup(fd);
2122     if (fd == -1) {
2123         if (errno == EMFILE)
2124             qemu_error_new(QERR_TOO_MANY_FILES);
2125         else
2126             qemu_error_new(QERR_UNDEFINED_ERROR);
2127         return;
2128     }
2129
2130     QLIST_FOREACH(monfd, &mon->fds, next) {
2131         if (strcmp(monfd->name, fdname) != 0) {
2132             continue;
2133         }
2134
2135         close(monfd->fd);
2136         monfd->fd = fd;
2137         return;
2138     }
2139
2140     monfd = qemu_mallocz(sizeof(mon_fd_t));
2141     monfd->name = qemu_strdup(fdname);
2142     monfd->fd = fd;
2143
2144     QLIST_INSERT_HEAD(&mon->fds, monfd, next);
2145 }
2146
2147 static void do_closefd(Monitor *mon, const QDict *qdict, QObject **ret_data)
2148 {
2149     const char *fdname = qdict_get_str(qdict, "fdname");
2150     mon_fd_t *monfd;
2151
2152     QLIST_FOREACH(monfd, &mon->fds, next) {
2153         if (strcmp(monfd->name, fdname) != 0) {
2154             continue;
2155         }
2156
2157         QLIST_REMOVE(monfd, next);
2158         close(monfd->fd);
2159         qemu_free(monfd->name);
2160         qemu_free(monfd);
2161         return;
2162     }
2163
2164     qemu_error_new(QERR_FD_NOT_FOUND, fdname);
2165 }
2166
2167 static void do_loadvm(Monitor *mon, const QDict *qdict)
2168 {
2169     int saved_vm_running  = vm_running;
2170     const char *name = qdict_get_str(qdict, "name");
2171
2172     vm_stop(0);
2173
2174     if (load_vmstate(mon, name) >= 0 && saved_vm_running)
2175         vm_start();
2176 }
2177
2178 int monitor_get_fd(Monitor *mon, const char *fdname)
2179 {
2180     mon_fd_t *monfd;
2181
2182     QLIST_FOREACH(monfd, &mon->fds, next) {
2183         int fd;
2184
2185         if (strcmp(monfd->name, fdname) != 0) {
2186             continue;
2187         }
2188
2189         fd = monfd->fd;
2190
2191         /* caller takes ownership of fd */
2192         QLIST_REMOVE(monfd, next);
2193         qemu_free(monfd->name);
2194         qemu_free(monfd);
2195
2196         return fd;
2197     }
2198
2199     return -1;
2200 }
2201
2202 static const mon_cmd_t mon_cmds[] = {
2203 #include "qemu-monitor.h"
2204     { NULL, NULL, },
2205 };
2206
2207 /* Please update qemu-monitor.hx when adding or changing commands */
2208 static const mon_cmd_t info_cmds[] = {
2209     {
2210         .name       = "version",
2211         .args_type  = "",
2212         .params     = "",
2213         .help       = "show the version of QEMU",
2214         .user_print = monitor_print_qobject,
2215         .mhandler.info_new = do_info_version,
2216     },
2217     {
2218         .name       = "commands",
2219         .args_type  = "",
2220         .params     = "",
2221         .help       = "list QMP available commands",
2222         .user_print = monitor_user_noop,
2223         .mhandler.info_new = do_info_commands,
2224     },
2225     {
2226         .name       = "network",
2227         .args_type  = "",
2228         .params     = "",
2229         .help       = "show the network state",
2230         .mhandler.info = do_info_network,
2231     },
2232     {
2233         .name       = "chardev",
2234         .args_type  = "",
2235         .params     = "",
2236         .help       = "show the character devices",
2237         .mhandler.info = qemu_chr_info,
2238     },
2239     {
2240         .name       = "block",
2241         .args_type  = "",
2242         .params     = "",
2243         .help       = "show the block devices",
2244         .mhandler.info = bdrv_info,
2245     },
2246     {
2247         .name       = "blockstats",
2248         .args_type  = "",
2249         .params     = "",
2250         .help       = "show block device statistics",
2251         .mhandler.info = bdrv_info_stats,
2252     },
2253     {
2254         .name       = "registers",
2255         .args_type  = "",
2256         .params     = "",
2257         .help       = "show the cpu registers",
2258         .mhandler.info = do_info_registers,
2259     },
2260     {
2261         .name       = "cpus",
2262         .args_type  = "",
2263         .params     = "",
2264         .help       = "show infos for each CPU",
2265         .user_print = monitor_print_cpus,
2266         .mhandler.info_new = do_info_cpus,
2267     },
2268     {
2269         .name       = "history",
2270         .args_type  = "",
2271         .params     = "",
2272         .help       = "show the command line history",
2273         .mhandler.info = do_info_history,
2274     },
2275     {
2276         .name       = "irq",
2277         .args_type  = "",
2278         .params     = "",
2279         .help       = "show the interrupts statistics (if available)",
2280         .mhandler.info = irq_info,
2281     },
2282     {
2283         .name       = "pic",
2284         .args_type  = "",
2285         .params     = "",
2286         .help       = "show i8259 (PIC) state",
2287         .mhandler.info = pic_info,
2288     },
2289     {
2290         .name       = "pci",
2291         .args_type  = "",
2292         .params     = "",
2293         .help       = "show PCI info",
2294         .mhandler.info = pci_info,
2295     },
2296 #if defined(TARGET_I386) || defined(TARGET_SH4)
2297     {
2298         .name       = "tlb",
2299         .args_type  = "",
2300         .params     = "",
2301         .help       = "show virtual to physical memory mappings",
2302         .mhandler.info = tlb_info,
2303     },
2304 #endif
2305 #if defined(TARGET_I386)
2306     {
2307         .name       = "mem",
2308         .args_type  = "",
2309         .params     = "",
2310         .help       = "show the active virtual memory mappings",
2311         .mhandler.info = mem_info,
2312     },
2313     {
2314         .name       = "hpet",
2315         .args_type  = "",
2316         .params     = "",
2317         .help       = "show state of HPET",
2318         .mhandler.info = do_info_hpet,
2319     },
2320 #endif
2321     {
2322         .name       = "jit",
2323         .args_type  = "",
2324         .params     = "",
2325         .help       = "show dynamic compiler info",
2326         .mhandler.info = do_info_jit,
2327     },
2328     {
2329         .name       = "kvm",
2330         .args_type  = "",
2331         .params     = "",
2332         .help       = "show KVM information",
2333         .mhandler.info = do_info_kvm,
2334     },
2335     {
2336         .name       = "numa",
2337         .args_type  = "",
2338         .params     = "",
2339         .help       = "show NUMA information",
2340         .mhandler.info = do_info_numa,
2341     },
2342     {
2343         .name       = "usb",
2344         .args_type  = "",
2345         .params     = "",
2346         .help       = "show guest USB devices",
2347         .mhandler.info = usb_info,
2348     },
2349     {
2350         .name       = "usbhost",
2351         .args_type  = "",
2352         .params     = "",
2353         .help       = "show host USB devices",
2354         .mhandler.info = usb_host_info,
2355     },
2356     {
2357         .name       = "profile",
2358         .args_type  = "",
2359         .params     = "",
2360         .help       = "show profiling information",
2361         .mhandler.info = do_info_profile,
2362     },
2363     {
2364         .name       = "capture",
2365         .args_type  = "",
2366         .params     = "",
2367         .help       = "show capture information",
2368         .mhandler.info = do_info_capture,
2369     },
2370     {
2371         .name       = "snapshots",
2372         .args_type  = "",
2373         .params     = "",
2374         .help       = "show the currently saved VM snapshots",
2375         .mhandler.info = do_info_snapshots,
2376     },
2377     {
2378         .name       = "status",
2379         .args_type  = "",
2380         .params     = "",
2381         .help       = "show the current VM status (running|paused)",
2382         .mhandler.info = do_info_status,
2383     },
2384     {
2385         .name       = "pcmcia",
2386         .args_type  = "",
2387         .params     = "",
2388         .help       = "show guest PCMCIA status",
2389         .mhandler.info = pcmcia_info,
2390     },
2391     {
2392         .name       = "mice",
2393         .args_type  = "",
2394         .params     = "",
2395         .help       = "show which guest mouse is receiving events",
2396         .mhandler.info = do_info_mice,
2397     },
2398     {
2399         .name       = "vnc",
2400         .args_type  = "",
2401         .params     = "",
2402         .help       = "show the vnc server status",
2403         .mhandler.info = do_info_vnc,
2404     },
2405     {
2406         .name       = "name",
2407         .args_type  = "",
2408         .params     = "",
2409         .help       = "show the current VM name",
2410         .mhandler.info = do_info_name,
2411     },
2412     {
2413         .name       = "uuid",
2414         .args_type  = "",
2415         .params     = "",
2416         .help       = "show the current VM UUID",
2417         .mhandler.info = do_info_uuid,
2418     },
2419 #if defined(TARGET_PPC)
2420     {
2421         .name       = "cpustats",
2422         .args_type  = "",
2423         .params     = "",
2424         .help       = "show CPU statistics",
2425         .mhandler.info = do_info_cpu_stats,
2426     },
2427 #endif
2428 #if defined(CONFIG_SLIRP)
2429     {
2430         .name       = "usernet",
2431         .args_type  = "",
2432         .params     = "",
2433         .help       = "show user network stack connection states",
2434         .mhandler.info = do_info_usernet,
2435     },
2436 #endif
2437     {
2438         .name       = "migrate",
2439         .args_type  = "",
2440         .params     = "",
2441         .help       = "show migration status",
2442         .mhandler.info = do_info_migrate,
2443     },
2444     {
2445         .name       = "balloon",
2446         .args_type  = "",
2447         .params     = "",
2448         .help       = "show balloon information",
2449         .user_print = monitor_print_balloon,
2450         .mhandler.info_new = do_info_balloon,
2451     },
2452     {
2453         .name       = "qtree",
2454         .args_type  = "",
2455         .params     = "",
2456         .help       = "show device tree",
2457         .mhandler.info = do_info_qtree,
2458     },
2459     {
2460         .name       = "qdm",
2461         .args_type  = "",
2462         .params     = "",
2463         .help       = "show qdev device model list",
2464         .mhandler.info = do_info_qdm,
2465     },
2466     {
2467         .name       = "roms",
2468         .args_type  = "",
2469         .params     = "",
2470         .help       = "show roms",
2471         .mhandler.info = do_info_roms,
2472     },
2473     {
2474         .name       = NULL,
2475     },
2476 };
2477
2478 /*******************************************************************/
2479
2480 static const char *pch;
2481 static jmp_buf expr_env;
2482
2483 #define MD_TLONG 0
2484 #define MD_I32   1
2485
2486 typedef struct MonitorDef {
2487     const char *name;
2488     int offset;
2489     target_long (*get_value)(const struct MonitorDef *md, int val);
2490     int type;
2491 } MonitorDef;
2492
2493 #if defined(TARGET_I386)
2494 static target_long monitor_get_pc (const struct MonitorDef *md, int val)
2495 {
2496     CPUState *env = mon_get_cpu();
2497     if (!env)
2498         return 0;
2499     return env->eip + env->segs[R_CS].base;
2500 }
2501 #endif
2502
2503 #if defined(TARGET_PPC)
2504 static target_long monitor_get_ccr (const struct MonitorDef *md, int val)
2505 {
2506     CPUState *env = mon_get_cpu();
2507     unsigned int u;
2508     int i;
2509
2510     if (!env)
2511         return 0;
2512
2513     u = 0;
2514     for (i = 0; i < 8; i++)
2515         u |= env->crf[i] << (32 - (4 * i));
2516
2517     return u;
2518 }
2519
2520 static target_long monitor_get_msr (const struct MonitorDef *md, int val)
2521 {
2522     CPUState *env = mon_get_cpu();
2523     if (!env)
2524         return 0;
2525     return env->msr;
2526 }
2527
2528 static target_long monitor_get_xer (const struct MonitorDef *md, int val)
2529 {
2530     CPUState *env = mon_get_cpu();
2531     if (!env)
2532         return 0;
2533     return env->xer;
2534 }
2535
2536 static target_long monitor_get_decr (const struct MonitorDef *md, int val)
2537 {
2538     CPUState *env = mon_get_cpu();
2539     if (!env)
2540         return 0;
2541     return cpu_ppc_load_decr(env);
2542 }
2543
2544 static target_long monitor_get_tbu (const struct MonitorDef *md, int val)
2545 {
2546     CPUState *env = mon_get_cpu();
2547     if (!env)
2548         return 0;
2549     return cpu_ppc_load_tbu(env);
2550 }
2551
2552 static target_long monitor_get_tbl (const struct MonitorDef *md, int val)
2553 {
2554     CPUState *env = mon_get_cpu();
2555     if (!env)
2556         return 0;
2557     return cpu_ppc_load_tbl(env);
2558 }
2559 #endif
2560
2561 #if defined(TARGET_SPARC)
2562 #ifndef TARGET_SPARC64
2563 static target_long monitor_get_psr (const struct MonitorDef *md, int val)
2564 {
2565     CPUState *env = mon_get_cpu();
2566     if (!env)
2567         return 0;
2568     return GET_PSR(env);
2569 }
2570 #endif
2571
2572 static target_long monitor_get_reg(const struct MonitorDef *md, int val)
2573 {
2574     CPUState *env = mon_get_cpu();
2575     if (!env)
2576         return 0;
2577     return env->regwptr[val];
2578 }
2579 #endif
2580
2581 static const MonitorDef monitor_defs[] = {
2582 #ifdef TARGET_I386
2583
2584 #define SEG(name, seg) \
2585     { name, offsetof(CPUState, segs[seg].selector), NULL, MD_I32 },\
2586     { name ".base", offsetof(CPUState, segs[seg].base) },\
2587     { name ".limit", offsetof(CPUState, segs[seg].limit), NULL, MD_I32 },
2588
2589     { "eax", offsetof(CPUState, regs[0]) },
2590     { "ecx", offsetof(CPUState, regs[1]) },
2591     { "edx", offsetof(CPUState, regs[2]) },
2592     { "ebx", offsetof(CPUState, regs[3]) },
2593     { "esp|sp", offsetof(CPUState, regs[4]) },
2594     { "ebp|fp", offsetof(CPUState, regs[5]) },
2595     { "esi", offsetof(CPUState, regs[6]) },
2596     { "edi", offsetof(CPUState, regs[7]) },
2597 #ifdef TARGET_X86_64
2598     { "r8", offsetof(CPUState, regs[8]) },
2599     { "r9", offsetof(CPUState, regs[9]) },
2600     { "r10", offsetof(CPUState, regs[10]) },
2601     { "r11", offsetof(CPUState, regs[11]) },
2602     { "r12", offsetof(CPUState, regs[12]) },
2603     { "r13", offsetof(CPUState, regs[13]) },
2604     { "r14", offsetof(CPUState, regs[14]) },
2605     { "r15", offsetof(CPUState, regs[15]) },
2606 #endif
2607     { "eflags", offsetof(CPUState, eflags) },
2608     { "eip", offsetof(CPUState, eip) },
2609     SEG("cs", R_CS)
2610     SEG("ds", R_DS)
2611     SEG("es", R_ES)
2612     SEG("ss", R_SS)
2613     SEG("fs", R_FS)
2614     SEG("gs", R_GS)
2615     { "pc", 0, monitor_get_pc, },
2616 #elif defined(TARGET_PPC)
2617     /* General purpose registers */
2618     { "r0", offsetof(CPUState, gpr[0]) },
2619     { "r1", offsetof(CPUState, gpr[1]) },
2620     { "r2", offsetof(CPUState, gpr[2]) },
2621     { "r3", offsetof(CPUState, gpr[3]) },
2622     { "r4", offsetof(CPUState, gpr[4]) },
2623     { "r5", offsetof(CPUState, gpr[5]) },
2624     { "r6", offsetof(CPUState, gpr[6]) },
2625     { "r7", offsetof(CPUState, gpr[7]) },
2626     { "r8", offsetof(CPUState, gpr[8]) },
2627     { "r9", offsetof(CPUState, gpr[9]) },
2628     { "r10", offsetof(CPUState, gpr[10]) },
2629     { "r11", offsetof(CPUState, gpr[11]) },
2630     { "r12", offsetof(CPUState, gpr[12]) },
2631     { "r13", offsetof(CPUState, gpr[13]) },
2632     { "r14", offsetof(CPUState, gpr[14]) },
2633     { "r15", offsetof(CPUState, gpr[15]) },
2634     { "r16", offsetof(CPUState, gpr[16]) },
2635     { "r17", offsetof(CPUState, gpr[17]) },
2636     { "r18", offsetof(CPUState, gpr[18]) },
2637     { "r19", offsetof(CPUState, gpr[19]) },
2638     { "r20", offsetof(CPUState, gpr[20]) },
2639     { "r21", offsetof(CPUState, gpr[21]) },
2640     { "r22", offsetof(CPUState, gpr[22]) },
2641     { "r23", offsetof(CPUState, gpr[23]) },
2642     { "r24", offsetof(CPUState, gpr[24]) },
2643     { "r25", offsetof(CPUState, gpr[25]) },
2644     { "r26", offsetof(CPUState, gpr[26]) },
2645     { "r27", offsetof(CPUState, gpr[27]) },
2646     { "r28", offsetof(CPUState, gpr[28]) },
2647     { "r29", offsetof(CPUState, gpr[29]) },
2648     { "r30", offsetof(CPUState, gpr[30]) },
2649     { "r31", offsetof(CPUState, gpr[31]) },
2650     /* Floating point registers */
2651     { "f0", offsetof(CPUState, fpr[0]) },
2652     { "f1", offsetof(CPUState, fpr[1]) },
2653     { "f2", offsetof(CPUState, fpr[2]) },
2654     { "f3", offsetof(CPUState, fpr[3]) },
2655     { "f4", offsetof(CPUState, fpr[4]) },
2656     { "f5", offsetof(CPUState, fpr[5]) },
2657     { "f6", offsetof(CPUState, fpr[6]) },
2658     { "f7", offsetof(CPUState, fpr[7]) },
2659     { "f8", offsetof(CPUState, fpr[8]) },
2660     { "f9", offsetof(CPUState, fpr[9]) },
2661     { "f10", offsetof(CPUState, fpr[10]) },
2662     { "f11", offsetof(CPUState, fpr[11]) },
2663     { "f12", offsetof(CPUState, fpr[12]) },
2664     { "f13", offsetof(CPUState, fpr[13]) },
2665     { "f14", offsetof(CPUState, fpr[14]) },
2666     { "f15", offsetof(CPUState, fpr[15]) },
2667     { "f16", offsetof(CPUState, fpr[16]) },
2668     { "f17", offsetof(CPUState, fpr[17]) },
2669     { "f18", offsetof(CPUState, fpr[18]) },
2670     { "f19", offsetof(CPUState, fpr[19]) },
2671     { "f20", offsetof(CPUState, fpr[20]) },
2672     { "f21", offsetof(CPUState, fpr[21]) },
2673     { "f22", offsetof(CPUState, fpr[22]) },
2674     { "f23", offsetof(CPUState, fpr[23]) },
2675     { "f24", offsetof(CPUState, fpr[24]) },
2676     { "f25", offsetof(CPUState, fpr[25]) },
2677     { "f26", offsetof(CPUState, fpr[26]) },
2678     { "f27", offsetof(CPUState, fpr[27]) },
2679     { "f28", offsetof(CPUState, fpr[28]) },
2680     { "f29", offsetof(CPUState, fpr[29]) },
2681     { "f30", offsetof(CPUState, fpr[30]) },
2682     { "f31", offsetof(CPUState, fpr[31]) },
2683     { "fpscr", offsetof(CPUState, fpscr) },
2684     /* Next instruction pointer */
2685     { "nip|pc", offsetof(CPUState, nip) },
2686     { "lr", offsetof(CPUState, lr) },
2687     { "ctr", offsetof(CPUState, ctr) },
2688     { "decr", 0, &monitor_get_decr, },
2689     { "ccr", 0, &monitor_get_ccr, },
2690     /* Machine state register */
2691     { "msr", 0, &monitor_get_msr, },
2692     { "xer", 0, &monitor_get_xer, },
2693     { "tbu", 0, &monitor_get_tbu, },
2694     { "tbl", 0, &monitor_get_tbl, },
2695 #if defined(TARGET_PPC64)
2696     /* Address space register */
2697     { "asr", offsetof(CPUState, asr) },
2698 #endif
2699     /* Segment registers */
2700     { "sdr1", offsetof(CPUState, sdr1) },
2701     { "sr0", offsetof(CPUState, sr[0]) },
2702     { "sr1", offsetof(CPUState, sr[1]) },
2703     { "sr2", offsetof(CPUState, sr[2]) },
2704     { "sr3", offsetof(CPUState, sr[3]) },
2705     { "sr4", offsetof(CPUState, sr[4]) },
2706     { "sr5", offsetof(CPUState, sr[5]) },
2707     { "sr6", offsetof(CPUState, sr[6]) },
2708     { "sr7", offsetof(CPUState, sr[7]) },
2709     { "sr8", offsetof(CPUState, sr[8]) },
2710     { "sr9", offsetof(CPUState, sr[9]) },
2711     { "sr10", offsetof(CPUState, sr[10]) },
2712     { "sr11", offsetof(CPUState, sr[11]) },
2713     { "sr12", offsetof(CPUState, sr[12]) },
2714     { "sr13", offsetof(CPUState, sr[13]) },
2715     { "sr14", offsetof(CPUState, sr[14]) },
2716     { "sr15", offsetof(CPUState, sr[15]) },
2717     /* Too lazy to put BATs and SPRs ... */
2718 #elif defined(TARGET_SPARC)
2719     { "g0", offsetof(CPUState, gregs[0]) },
2720     { "g1", offsetof(CPUState, gregs[1]) },
2721     { "g2", offsetof(CPUState, gregs[2]) },
2722     { "g3", offsetof(CPUState, gregs[3]) },
2723     { "g4", offsetof(CPUState, gregs[4]) },
2724     { "g5", offsetof(CPUState, gregs[5]) },
2725     { "g6", offsetof(CPUState, gregs[6]) },
2726     { "g7", offsetof(CPUState, gregs[7]) },
2727     { "o0", 0, monitor_get_reg },
2728     { "o1", 1, monitor_get_reg },
2729     { "o2", 2, monitor_get_reg },
2730     { "o3", 3, monitor_get_reg },
2731     { "o4", 4, monitor_get_reg },
2732     { "o5", 5, monitor_get_reg },
2733     { "o6", 6, monitor_get_reg },
2734     { "o7", 7, monitor_get_reg },
2735     { "l0", 8, monitor_get_reg },
2736     { "l1", 9, monitor_get_reg },
2737     { "l2", 10, monitor_get_reg },
2738     { "l3", 11, monitor_get_reg },
2739     { "l4", 12, monitor_get_reg },
2740     { "l5", 13, monitor_get_reg },
2741     { "l6", 14, monitor_get_reg },
2742     { "l7", 15, monitor_get_reg },
2743     { "i0", 16, monitor_get_reg },
2744     { "i1", 17, monitor_get_reg },
2745     { "i2", 18, monitor_get_reg },
2746     { "i3", 19, monitor_get_reg },
2747     { "i4", 20, monitor_get_reg },
2748     { "i5", 21, monitor_get_reg },
2749     { "i6", 22, monitor_get_reg },
2750     { "i7", 23, monitor_get_reg },
2751     { "pc", offsetof(CPUState, pc) },
2752     { "npc", offsetof(CPUState, npc) },
2753     { "y", offsetof(CPUState, y) },
2754 #ifndef TARGET_SPARC64
2755     { "psr", 0, &monitor_get_psr, },
2756     { "wim", offsetof(CPUState, wim) },
2757 #endif
2758     { "tbr", offsetof(CPUState, tbr) },
2759     { "fsr", offsetof(CPUState, fsr) },
2760     { "f0", offsetof(CPUState, fpr[0]) },
2761     { "f1", offsetof(CPUState, fpr[1]) },
2762     { "f2", offsetof(CPUState, fpr[2]) },
2763     { "f3", offsetof(CPUState, fpr[3]) },
2764     { "f4", offsetof(CPUState, fpr[4]) },
2765     { "f5", offsetof(CPUState, fpr[5]) },
2766     { "f6", offsetof(CPUState, fpr[6]) },
2767     { "f7", offsetof(CPUState, fpr[7]) },
2768     { "f8", offsetof(CPUState, fpr[8]) },
2769     { "f9", offsetof(CPUState, fpr[9]) },
2770     { "f10", offsetof(CPUState, fpr[10]) },
2771     { "f11", offsetof(CPUState, fpr[11]) },
2772     { "f12", offsetof(CPUState, fpr[12]) },
2773     { "f13", offsetof(CPUState, fpr[13]) },
2774     { "f14", offsetof(CPUState, fpr[14]) },
2775     { "f15", offsetof(CPUState, fpr[15]) },
2776     { "f16", offsetof(CPUState, fpr[16]) },
2777     { "f17", offsetof(CPUState, fpr[17]) },
2778     { "f18", offsetof(CPUState, fpr[18]) },
2779     { "f19", offsetof(CPUState, fpr[19]) },
2780     { "f20", offsetof(CPUState, fpr[20]) },
2781     { "f21", offsetof(CPUState, fpr[21]) },
2782     { "f22", offsetof(CPUState, fpr[22]) },
2783     { "f23", offsetof(CPUState, fpr[23]) },
2784     { "f24", offsetof(CPUState, fpr[24]) },
2785     { "f25", offsetof(CPUState, fpr[25]) },
2786     { "f26", offsetof(CPUState, fpr[26]) },
2787     { "f27", offsetof(CPUState, fpr[27]) },
2788     { "f28", offsetof(CPUState, fpr[28]) },
2789     { "f29", offsetof(CPUState, fpr[29]) },
2790     { "f30", offsetof(CPUState, fpr[30]) },
2791     { "f31", offsetof(CPUState, fpr[31]) },
2792 #ifdef TARGET_SPARC64
2793     { "f32", offsetof(CPUState, fpr[32]) },
2794     { "f34", offsetof(CPUState, fpr[34]) },
2795     { "f36", offsetof(CPUState, fpr[36]) },
2796     { "f38", offsetof(CPUState, fpr[38]) },
2797     { "f40", offsetof(CPUState, fpr[40]) },
2798     { "f42", offsetof(CPUState, fpr[42]) },
2799     { "f44", offsetof(CPUState, fpr[44]) },
2800     { "f46", offsetof(CPUState, fpr[46]) },
2801     { "f48", offsetof(CPUState, fpr[48]) },
2802     { "f50", offsetof(CPUState, fpr[50]) },
2803     { "f52", offsetof(CPUState, fpr[52]) },
2804     { "f54", offsetof(CPUState, fpr[54]) },
2805     { "f56", offsetof(CPUState, fpr[56]) },
2806     { "f58", offsetof(CPUState, fpr[58]) },
2807     { "f60", offsetof(CPUState, fpr[60]) },
2808     { "f62", offsetof(CPUState, fpr[62]) },
2809     { "asi", offsetof(CPUState, asi) },
2810     { "pstate", offsetof(CPUState, pstate) },
2811     { "cansave", offsetof(CPUState, cansave) },
2812     { "canrestore", offsetof(CPUState, canrestore) },
2813     { "otherwin", offsetof(CPUState, otherwin) },
2814     { "wstate", offsetof(CPUState, wstate) },
2815     { "cleanwin", offsetof(CPUState, cleanwin) },
2816     { "fprs", offsetof(CPUState, fprs) },
2817 #endif
2818 #endif
2819     { NULL },
2820 };
2821
2822 static void expr_error(Monitor *mon, const char *msg)
2823 {
2824     monitor_printf(mon, "%s\n", msg);
2825     longjmp(expr_env, 1);
2826 }
2827
2828 /* return 0 if OK, -1 if not found, -2 if no CPU defined */
2829 static int get_monitor_def(target_long *pval, const char *name)
2830 {
2831     const MonitorDef *md;
2832     void *ptr;
2833
2834     for(md = monitor_defs; md->name != NULL; md++) {
2835         if (compare_cmd(name, md->name)) {
2836             if (md->get_value) {
2837                 *pval = md->get_value(md, md->offset);
2838             } else {
2839                 CPUState *env = mon_get_cpu();
2840                 if (!env)
2841                     return -2;
2842                 ptr = (uint8_t *)env + md->offset;
2843                 switch(md->type) {
2844                 case MD_I32:
2845                     *pval = *(int32_t *)ptr;
2846                     break;
2847                 case MD_TLONG:
2848                     *pval = *(target_long *)ptr;
2849                     break;
2850                 default:
2851                     *pval = 0;
2852                     break;
2853                 }
2854             }
2855             return 0;
2856         }
2857     }
2858     return -1;
2859 }
2860
2861 static void next(void)
2862 {
2863     if (*pch != '\0') {
2864         pch++;
2865         while (qemu_isspace(*pch))
2866             pch++;
2867     }
2868 }
2869
2870 static int64_t expr_sum(Monitor *mon);
2871
2872 static int64_t expr_unary(Monitor *mon)
2873 {
2874     int64_t n;
2875     char *p;
2876     int ret;
2877
2878     switch(*pch) {
2879     case '+':
2880         next();
2881         n = expr_unary(mon);
2882         break;
2883     case '-':
2884         next();
2885         n = -expr_unary(mon);
2886         break;
2887     case '~':
2888         next();
2889         n = ~expr_unary(mon);
2890         break;
2891     case '(':
2892         next();
2893         n = expr_sum(mon);
2894         if (*pch != ')') {
2895             expr_error(mon, "')' expected");
2896         }
2897         next();
2898         break;
2899     case '\'':
2900         pch++;
2901         if (*pch == '\0')
2902             expr_error(mon, "character constant expected");
2903         n = *pch;
2904         pch++;
2905         if (*pch != '\'')
2906             expr_error(mon, "missing terminating \' character");
2907         next();
2908         break;
2909     case '$':
2910         {
2911             char buf[128], *q;
2912             target_long reg=0;
2913
2914             pch++;
2915             q = buf;
2916             while ((*pch >= 'a' && *pch <= 'z') ||
2917                    (*pch >= 'A' && *pch <= 'Z') ||
2918                    (*pch >= '0' && *pch <= '9') ||
2919                    *pch == '_' || *pch == '.') {
2920                 if ((q - buf) < sizeof(buf) - 1)
2921                     *q++ = *pch;
2922                 pch++;
2923             }
2924             while (qemu_isspace(*pch))
2925                 pch++;
2926             *q = 0;
2927             ret = get_monitor_def(&reg, buf);
2928             if (ret == -1)
2929                 expr_error(mon, "unknown register");
2930             else if (ret == -2)
2931                 expr_error(mon, "no cpu defined");
2932             n = reg;
2933         }
2934         break;
2935     case '\0':
2936         expr_error(mon, "unexpected end of expression");
2937         n = 0;
2938         break;
2939     default:
2940 #if TARGET_PHYS_ADDR_BITS > 32
2941         n = strtoull(pch, &p, 0);
2942 #else
2943         n = strtoul(pch, &p, 0);
2944 #endif
2945         if (pch == p) {
2946             expr_error(mon, "invalid char in expression");
2947         }
2948         pch = p;
2949         while (qemu_isspace(*pch))
2950             pch++;
2951         break;
2952     }
2953     return n;
2954 }
2955
2956
2957 static int64_t expr_prod(Monitor *mon)
2958 {
2959     int64_t val, val2;
2960     int op;
2961
2962     val = expr_unary(mon);
2963     for(;;) {
2964         op = *pch;
2965         if (op != '*' && op != '/' && op != '%')
2966             break;
2967         next();
2968         val2 = expr_unary(mon);
2969         switch(op) {
2970         default:
2971         case '*':
2972             val *= val2;
2973             break;
2974         case '/':
2975         case '%':
2976             if (val2 == 0)
2977                 expr_error(mon, "division by zero");
2978             if (op == '/')
2979                 val /= val2;
2980             else
2981                 val %= val2;
2982             break;
2983         }
2984     }
2985     return val;
2986 }
2987
2988 static int64_t expr_logic(Monitor *mon)
2989 {
2990     int64_t val, val2;
2991     int op;
2992
2993     val = expr_prod(mon);
2994     for(;;) {
2995         op = *pch;
2996         if (op != '&' && op != '|' && op != '^')
2997             break;
2998         next();
2999         val2 = expr_prod(mon);
3000         switch(op) {
3001         default:
3002         case '&':
3003             val &= val2;
3004             break;
3005         case '|':
3006             val |= val2;
3007             break;
3008         case '^':
3009             val ^= val2;
3010             break;
3011         }
3012     }
3013     return val;
3014 }
3015
3016 static int64_t expr_sum(Monitor *mon)
3017 {
3018     int64_t val, val2;
3019     int op;
3020
3021     val = expr_logic(mon);
3022     for(;;) {
3023         op = *pch;
3024         if (op != '+' && op != '-')
3025             break;
3026         next();
3027         val2 = expr_logic(mon);
3028         if (op == '+')
3029             val += val2;
3030         else
3031             val -= val2;
3032     }
3033     return val;
3034 }
3035
3036 static int get_expr(Monitor *mon, int64_t *pval, const char **pp)
3037 {
3038     pch = *pp;
3039     if (setjmp(expr_env)) {
3040         *pp = pch;
3041         return -1;
3042     }
3043     while (qemu_isspace(*pch))
3044         pch++;
3045     *pval = expr_sum(mon);
3046     *pp = pch;
3047     return 0;
3048 }
3049
3050 static int get_str(char *buf, int buf_size, const char **pp)
3051 {
3052     const char *p;
3053     char *q;
3054     int c;
3055
3056     q = buf;
3057     p = *pp;
3058     while (qemu_isspace(*p))
3059         p++;
3060     if (*p == '\0') {
3061     fail:
3062         *q = '\0';
3063         *pp = p;
3064         return -1;
3065     }
3066     if (*p == '\"') {
3067         p++;
3068         while (*p != '\0' && *p != '\"') {
3069             if (*p == '\\') {
3070                 p++;
3071                 c = *p++;
3072                 switch(c) {
3073                 case 'n':
3074                     c = '\n';
3075                     break;
3076                 case 'r':
3077                     c = '\r';
3078                     break;
3079                 case '\\':
3080                 case '\'':
3081                 case '\"':
3082                     break;
3083                 default:
3084                     qemu_printf("unsupported escape code: '\\%c'\n", c);
3085                     goto fail;
3086                 }
3087                 if ((q - buf) < buf_size - 1) {
3088                     *q++ = c;
3089                 }
3090             } else {
3091                 if ((q - buf) < buf_size - 1) {
3092                     *q++ = *p;
3093                 }
3094                 p++;
3095             }
3096         }
3097         if (*p != '\"') {
3098             qemu_printf("unterminated string\n");
3099             goto fail;
3100         }
3101         p++;
3102     } else {
3103         while (*p != '\0' && !qemu_isspace(*p)) {
3104             if ((q - buf) < buf_size - 1) {
3105                 *q++ = *p;
3106             }
3107             p++;
3108         }
3109     }
3110     *q = '\0';
3111     *pp = p;
3112     return 0;
3113 }
3114
3115 /*
3116  * Store the command-name in cmdname, and return a pointer to
3117  * the remaining of the command string.
3118  */
3119 static const char *get_command_name(const char *cmdline,
3120                                     char *cmdname, size_t nlen)
3121 {
3122     size_t len;
3123     const char *p, *pstart;
3124
3125     p = cmdline;
3126     while (qemu_isspace(*p))
3127         p++;
3128     if (*p == '\0')
3129         return NULL;
3130     pstart = p;
3131     while (*p != '\0' && *p != '/' && !qemu_isspace(*p))
3132         p++;
3133     len = p - pstart;
3134     if (len > nlen - 1)
3135         len = nlen - 1;
3136     memcpy(cmdname, pstart, len);
3137     cmdname[len] = '\0';
3138     return p;
3139 }
3140
3141 /**
3142  * Read key of 'type' into 'key' and return the current
3143  * 'type' pointer.
3144  */
3145 static char *key_get_info(const char *type, char **key)
3146 {
3147     size_t len;
3148     char *p, *str;
3149
3150     if (*type == ',')
3151         type++;
3152
3153     p = strchr(type, ':');
3154     if (!p) {
3155         *key = NULL;
3156         return NULL;
3157     }
3158     len = p - type;
3159
3160     str = qemu_malloc(len + 1);
3161     memcpy(str, type, len);
3162     str[len] = '\0';
3163
3164     *key = str;
3165     return ++p;
3166 }
3167
3168 static int default_fmt_format = 'x';
3169 static int default_fmt_size = 4;
3170
3171 #define MAX_ARGS 16
3172
3173 static int is_valid_option(const char *c, const char *typestr)
3174 {
3175     char option[3];
3176
3177     option[0] = '-';
3178     option[1] = *c;
3179     option[2] = '\0';
3180
3181     typestr = strstr(typestr, option);
3182     return (typestr != NULL);
3183 }
3184
3185 static const mon_cmd_t *monitor_find_command(const char *cmdname)
3186 {
3187     const mon_cmd_t *cmd;
3188
3189     for (cmd = mon_cmds; cmd->name != NULL; cmd++) {
3190         if (compare_cmd(cmdname, cmd->name)) {
3191             return cmd;
3192         }
3193     }
3194
3195     return NULL;
3196 }
3197
3198 static const mon_cmd_t *monitor_parse_command(Monitor *mon,
3199                                               const char *cmdline,
3200                                               QDict *qdict)
3201 {
3202     const char *p, *typestr;
3203     int c;
3204     const mon_cmd_t *cmd;
3205     char cmdname[256];
3206     char buf[1024];
3207     char *key;
3208
3209 #ifdef DEBUG
3210     monitor_printf(mon, "command='%s'\n", cmdline);
3211 #endif
3212
3213     /* extract the command name */
3214     p = get_command_name(cmdline, cmdname, sizeof(cmdname));
3215     if (!p)
3216         return NULL;
3217
3218     cmd = monitor_find_command(cmdname);
3219     if (!cmd) {
3220         monitor_printf(mon, "unknown command: '%s'\n", cmdname);
3221         return NULL;
3222     }
3223
3224     /* parse the parameters */
3225     typestr = cmd->args_type;
3226     for(;;) {
3227         typestr = key_get_info(typestr, &key);
3228         if (!typestr)
3229             break;
3230         c = *typestr;
3231         typestr++;
3232         switch(c) {
3233         case 'F':
3234         case 'B':
3235         case 's':
3236             {
3237                 int ret;
3238
3239                 while (qemu_isspace(*p))
3240                     p++;
3241                 if (*typestr == '?') {
3242                     typestr++;
3243                     if (*p == '\0') {
3244                         /* no optional string: NULL argument */
3245                         break;
3246                     }
3247                 }
3248                 ret = get_str(buf, sizeof(buf), &p);
3249                 if (ret < 0) {
3250                     switch(c) {
3251                     case 'F':
3252                         monitor_printf(mon, "%s: filename expected\n",
3253                                        cmdname);
3254                         break;
3255                     case 'B':
3256                         monitor_printf(mon, "%s: block device name expected\n",
3257                                        cmdname);
3258                         break;
3259                     default:
3260                         monitor_printf(mon, "%s: string expected\n", cmdname);
3261                         break;
3262                     }
3263                     goto fail;
3264                 }
3265                 qdict_put(qdict, key, qstring_from_str(buf));
3266             }
3267             break;
3268         case '/':
3269             {
3270                 int count, format, size;
3271
3272                 while (qemu_isspace(*p))
3273                     p++;
3274                 if (*p == '/') {
3275                     /* format found */
3276                     p++;
3277                     count = 1;
3278                     if (qemu_isdigit(*p)) {
3279                         count = 0;
3280                         while (qemu_isdigit(*p)) {
3281                             count = count * 10 + (*p - '0');
3282                             p++;
3283                         }
3284                     }
3285                     size = -1;
3286                     format = -1;
3287                     for(;;) {
3288                         switch(*p) {
3289                         case 'o':
3290                         case 'd':
3291                         case 'u':
3292                         case 'x':
3293                         case 'i':
3294                         case 'c':
3295                             format = *p++;
3296                             break;
3297                         case 'b':
3298                             size = 1;
3299                             p++;
3300                             break;
3301                         case 'h':
3302                             size = 2;
3303                             p++;
3304                             break;
3305                         case 'w':
3306                             size = 4;
3307                             p++;
3308                             break;
3309                         case 'g':
3310                         case 'L':
3311                             size = 8;
3312                             p++;
3313                             break;
3314                         default:
3315                             goto next;
3316                         }
3317                     }
3318                 next:
3319                     if (*p != '\0' && !qemu_isspace(*p)) {
3320                         monitor_printf(mon, "invalid char in format: '%c'\n",
3321                                        *p);
3322                         goto fail;
3323                     }
3324                     if (format < 0)
3325                         format = default_fmt_format;
3326                     if (format != 'i') {
3327                         /* for 'i', not specifying a size gives -1 as size */
3328                         if (size < 0)
3329                             size = default_fmt_size;
3330                         default_fmt_size = size;
3331                     }
3332                     default_fmt_format = format;
3333                 } else {
3334                     count = 1;
3335                     format = default_fmt_format;
3336                     if (format != 'i') {
3337                         size = default_fmt_size;
3338                     } else {
3339                         size = -1;
3340                     }
3341                 }
3342                 qdict_put(qdict, "count", qint_from_int(count));
3343                 qdict_put(qdict, "format", qint_from_int(format));
3344                 qdict_put(qdict, "size", qint_from_int(size));
3345             }
3346             break;
3347         case 'i':
3348         case 'l':
3349             {
3350                 int64_t val;
3351
3352                 while (qemu_isspace(*p))
3353                     p++;
3354                 if (*typestr == '?' || *typestr == '.') {
3355                     if (*typestr == '?') {
3356                         if (*p == '\0') {
3357                             typestr++;
3358                             break;
3359                         }
3360                     } else {
3361                         if (*p == '.') {
3362                             p++;
3363                             while (qemu_isspace(*p))
3364                                 p++;
3365                         } else {
3366                             typestr++;
3367                             break;
3368                         }
3369                     }
3370                     typestr++;
3371                 }
3372                 if (get_expr(mon, &val, &p))
3373                     goto fail;
3374                 /* Check if 'i' is greater than 32-bit */
3375                 if ((c == 'i') && ((val >> 32) & 0xffffffff)) {
3376                     monitor_printf(mon, "\'%s\' has failed: ", cmdname);
3377                     monitor_printf(mon, "integer is for 32-bit values\n");
3378                     goto fail;
3379                 }
3380                 qdict_put(qdict, key, qint_from_int(val));
3381             }
3382             break;
3383         case '-':
3384             {
3385                 const char *tmp = p;
3386                 int has_option, skip_key = 0;
3387                 /* option */
3388
3389                 c = *typestr++;
3390                 if (c == '\0')
3391                     goto bad_type;
3392                 while (qemu_isspace(*p))
3393                     p++;
3394                 has_option = 0;
3395                 if (*p == '-') {
3396                     p++;
3397                     if(c != *p) {
3398                         if(!is_valid_option(p, typestr)) {
3399
3400                             monitor_printf(mon, "%s: unsupported option -%c\n",
3401                                            cmdname, *p);
3402                             goto fail;
3403                         } else {
3404                             skip_key = 1;
3405                         }
3406                     }
3407                     if(skip_key) {
3408                         p = tmp;
3409                     } else {
3410                         p++;
3411                         has_option = 1;
3412                     }
3413                 }
3414                 qdict_put(qdict, key, qint_from_int(has_option));
3415             }
3416             break;
3417         default:
3418         bad_type:
3419             monitor_printf(mon, "%s: unknown type '%c'\n", cmdname, c);
3420             goto fail;
3421         }
3422         qemu_free(key);
3423         key = NULL;
3424     }
3425     /* check that all arguments were parsed */
3426     while (qemu_isspace(*p))
3427         p++;
3428     if (*p != '\0') {
3429         monitor_printf(mon, "%s: extraneous characters at the end of line\n",
3430                        cmdname);
3431         goto fail;
3432     }
3433
3434     return cmd;
3435
3436 fail:
3437     qemu_free(key);
3438     return NULL;
3439 }
3440
3441 static void monitor_print_error(Monitor *mon)
3442 {
3443     qerror_print(mon->error);
3444     QDECREF(mon->error);
3445     mon->error = NULL;
3446 }
3447
3448 static void monitor_call_handler(Monitor *mon, const mon_cmd_t *cmd,
3449                                  const QDict *params)
3450 {
3451     QObject *data = NULL;
3452
3453     cmd->mhandler.cmd_new(mon, params, &data);
3454
3455     if (monitor_ctrl_mode(mon)) {
3456         /* Monitor Protocol */
3457         monitor_protocol_emitter(mon, data);
3458     } else {
3459         /* User Protocol */
3460          if (data)
3461             cmd->user_print(mon, data);
3462     }
3463
3464     qobject_decref(data);
3465 }
3466
3467 static void handle_user_command(Monitor *mon, const char *cmdline)
3468 {
3469     QDict *qdict;
3470     const mon_cmd_t *cmd;
3471
3472     qdict = qdict_new();
3473
3474     cmd = monitor_parse_command(mon, cmdline, qdict);
3475     if (!cmd)
3476         goto out;
3477
3478     qemu_errors_to_mon(mon);
3479
3480     if (monitor_handler_ported(cmd)) {
3481         monitor_call_handler(mon, cmd, qdict);
3482     } else {
3483         cmd->mhandler.cmd(mon, qdict);
3484     }
3485
3486     if (monitor_has_error(mon))
3487         monitor_print_error(mon);
3488
3489     qemu_errors_to_previous();
3490
3491 out:
3492     QDECREF(qdict);
3493 }
3494
3495 static void cmd_completion(const char *name, const char *list)
3496 {
3497     const char *p, *pstart;
3498     char cmd[128];
3499     int len;
3500
3501     p = list;
3502     for(;;) {
3503         pstart = p;
3504         p = strchr(p, '|');
3505         if (!p)
3506             p = pstart + strlen(pstart);
3507         len = p - pstart;
3508         if (len > sizeof(cmd) - 2)
3509             len = sizeof(cmd) - 2;
3510         memcpy(cmd, pstart, len);
3511         cmd[len] = '\0';
3512         if (name[0] == '\0' || !strncmp(name, cmd, strlen(name))) {
3513             readline_add_completion(cur_mon->rs, cmd);
3514         }
3515         if (*p == '\0')
3516             break;
3517         p++;
3518     }
3519 }
3520
3521 static void file_completion(const char *input)
3522 {
3523     DIR *ffs;
3524     struct dirent *d;
3525     char path[1024];
3526     char file[1024], file_prefix[1024];
3527     int input_path_len;
3528     const char *p;
3529
3530     p = strrchr(input, '/');
3531     if (!p) {
3532         input_path_len = 0;
3533         pstrcpy(file_prefix, sizeof(file_prefix), input);
3534         pstrcpy(path, sizeof(path), ".");
3535     } else {
3536         input_path_len = p - input + 1;
3537         memcpy(path, input, input_path_len);
3538         if (input_path_len > sizeof(path) - 1)
3539             input_path_len = sizeof(path) - 1;
3540         path[input_path_len] = '\0';
3541         pstrcpy(file_prefix, sizeof(file_prefix), p + 1);
3542     }
3543 #ifdef DEBUG_COMPLETION
3544     monitor_printf(cur_mon, "input='%s' path='%s' prefix='%s'\n",
3545                    input, path, file_prefix);
3546 #endif
3547     ffs = opendir(path);
3548     if (!ffs)
3549         return;
3550     for(;;) {
3551         struct stat sb;
3552         d = readdir(ffs);
3553         if (!d)
3554             break;
3555         if (strstart(d->d_name, file_prefix, NULL)) {
3556             memcpy(file, input, input_path_len);
3557             if (input_path_len < sizeof(file))
3558                 pstrcpy(file + input_path_len, sizeof(file) - input_path_len,
3559                         d->d_name);
3560             /* stat the file to find out if it's a directory.
3561              * In that case add a slash to speed up typing long paths
3562              */
3563             stat(file, &sb);
3564             if(S_ISDIR(sb.st_mode))
3565                 pstrcat(file, sizeof(file), "/");
3566             readline_add_completion(cur_mon->rs, file);
3567         }
3568     }
3569     closedir(ffs);
3570 }
3571
3572 static void block_completion_it(void *opaque, BlockDriverState *bs)
3573 {
3574     const char *name = bdrv_get_device_name(bs);
3575     const char *input = opaque;
3576
3577     if (input[0] == '\0' ||
3578         !strncmp(name, (char *)input, strlen(input))) {
3579         readline_add_completion(cur_mon->rs, name);
3580     }
3581 }
3582
3583 /* NOTE: this parser is an approximate form of the real command parser */
3584 static void parse_cmdline(const char *cmdline,
3585                          int *pnb_args, char **args)
3586 {
3587     const char *p;
3588     int nb_args, ret;
3589     char buf[1024];
3590
3591     p = cmdline;
3592     nb_args = 0;
3593     for(;;) {
3594         while (qemu_isspace(*p))
3595             p++;
3596         if (*p == '\0')
3597             break;
3598         if (nb_args >= MAX_ARGS)
3599             break;
3600         ret = get_str(buf, sizeof(buf), &p);
3601         args[nb_args] = qemu_strdup(buf);
3602         nb_args++;
3603         if (ret < 0)
3604             break;
3605     }
3606     *pnb_args = nb_args;
3607 }
3608
3609 static const char *next_arg_type(const char *typestr)
3610 {
3611     const char *p = strchr(typestr, ':');
3612     return (p != NULL ? ++p : typestr);
3613 }
3614
3615 static void monitor_find_completion(const char *cmdline)
3616 {
3617     const char *cmdname;
3618     char *args[MAX_ARGS];
3619     int nb_args, i, len;
3620     const char *ptype, *str;
3621     const mon_cmd_t *cmd;
3622     const KeyDef *key;
3623
3624     parse_cmdline(cmdline, &nb_args, args);
3625 #ifdef DEBUG_COMPLETION
3626     for(i = 0; i < nb_args; i++) {
3627         monitor_printf(cur_mon, "arg%d = '%s'\n", i, (char *)args[i]);
3628     }
3629 #endif
3630
3631     /* if the line ends with a space, it means we want to complete the
3632        next arg */
3633     len = strlen(cmdline);
3634     if (len > 0 && qemu_isspace(cmdline[len - 1])) {
3635         if (nb_args >= MAX_ARGS)
3636             return;
3637         args[nb_args++] = qemu_strdup("");
3638     }
3639     if (nb_args <= 1) {
3640         /* command completion */
3641         if (nb_args == 0)
3642             cmdname = "";
3643         else
3644             cmdname = args[0];
3645         readline_set_completion_index(cur_mon->rs, strlen(cmdname));
3646         for(cmd = mon_cmds; cmd->name != NULL; cmd++) {
3647             cmd_completion(cmdname, cmd->name);
3648         }
3649     } else {
3650         /* find the command */
3651         for(cmd = mon_cmds; cmd->name != NULL; cmd++) {
3652             if (compare_cmd(args[0], cmd->name))
3653                 goto found;
3654         }
3655         return;
3656     found:
3657         ptype = next_arg_type(cmd->args_type);
3658         for(i = 0; i < nb_args - 2; i++) {
3659             if (*ptype != '\0') {
3660                 ptype = next_arg_type(ptype);
3661                 while (*ptype == '?')
3662                     ptype = next_arg_type(ptype);
3663             }
3664         }
3665         str = args[nb_args - 1];
3666         if (*ptype == '-' && ptype[1] != '\0') {
3667             ptype += 2;
3668         }
3669         switch(*ptype) {
3670         case 'F':
3671             /* file completion */
3672             readline_set_completion_index(cur_mon->rs, strlen(str));
3673             file_completion(str);
3674             break;
3675         case 'B':
3676             /* block device name completion */
3677             readline_set_completion_index(cur_mon->rs, strlen(str));
3678             bdrv_iterate(block_completion_it, (void *)str);
3679             break;
3680         case 's':
3681             /* XXX: more generic ? */
3682             if (!strcmp(cmd->name, "info")) {
3683                 readline_set_completion_index(cur_mon->rs, strlen(str));
3684                 for(cmd = info_cmds; cmd->name != NULL; cmd++) {
3685                     cmd_completion(str, cmd->name);
3686                 }
3687             } else if (!strcmp(cmd->name, "sendkey")) {
3688                 char *sep = strrchr(str, '-');
3689                 if (sep)
3690                     str = sep + 1;
3691                 readline_set_completion_index(cur_mon->rs, strlen(str));
3692                 for(key = key_defs; key->name != NULL; key++) {
3693                     cmd_completion(str, key->name);
3694                 }
3695             } else if (!strcmp(cmd->name, "help|?")) {
3696                 readline_set_completion_index(cur_mon->rs, strlen(str));
3697                 for (cmd = mon_cmds; cmd->name != NULL; cmd++) {
3698                     cmd_completion(str, cmd->name);
3699                 }
3700             }
3701             break;
3702         default:
3703             break;
3704         }
3705     }
3706     for(i = 0; i < nb_args; i++)
3707         qemu_free(args[i]);
3708 }
3709
3710 static int monitor_can_read(void *opaque)
3711 {
3712     Monitor *mon = opaque;
3713
3714     return (mon->suspend_cnt == 0) ? 128 : 0;
3715 }
3716
3717 typedef struct CmdArgs {
3718     QString *name;
3719     int type;
3720     int flag;
3721     int optional;
3722 } CmdArgs;
3723
3724 static int check_opt(const CmdArgs *cmd_args, const char *name, QDict *args)
3725 {
3726     if (!cmd_args->optional) {
3727         qemu_error_new(QERR_MISSING_PARAMETER, name);
3728         return -1;
3729     }
3730
3731     if (cmd_args->type == '-') {
3732         /* handlers expect a value, they need to be changed */
3733         qdict_put(args, name, qint_from_int(0));
3734     }
3735
3736     return 0;
3737 }
3738
3739 static int check_arg(const CmdArgs *cmd_args, QDict *args)
3740 {
3741     QObject *value;
3742     const char *name;
3743
3744     name = qstring_get_str(cmd_args->name);
3745
3746     if (!args) {
3747         return check_opt(cmd_args, name, args);
3748     }
3749
3750     value = qdict_get(args, name);
3751     if (!value) {
3752         return check_opt(cmd_args, name, args);
3753     }
3754
3755     switch (cmd_args->type) {
3756         case 'F':
3757         case 'B':
3758         case 's':
3759             if (qobject_type(value) != QTYPE_QSTRING) {
3760                 qemu_error_new(QERR_INVALID_PARAMETER_TYPE, name, "string");
3761                 return -1;
3762             }
3763             break;
3764         case '/': {
3765             int i;
3766             const char *keys[] = { "count", "format", "size", NULL };
3767
3768             for (i = 0; keys[i]; i++) {
3769                 QObject *obj = qdict_get(args, keys[i]);
3770                 if (!obj) {
3771                     qemu_error_new(QERR_MISSING_PARAMETER, name);
3772                     return -1;
3773                 }
3774                 if (qobject_type(obj) != QTYPE_QINT) {
3775                     qemu_error_new(QERR_INVALID_PARAMETER_TYPE, name, "int");
3776                     return -1;
3777                 }
3778             }
3779             break;
3780         }
3781         case 'i':
3782         case 'l':
3783             if (qobject_type(value) != QTYPE_QINT) {
3784                 qemu_error_new(QERR_INVALID_PARAMETER_TYPE, name, "int");
3785                 return -1;
3786             }
3787             break;
3788         case '-':
3789             if (qobject_type(value) != QTYPE_QINT &&
3790                 qobject_type(value) != QTYPE_QBOOL) {
3791                 qemu_error_new(QERR_INVALID_PARAMETER_TYPE, name, "bool");
3792                 return -1;
3793             }
3794             if (qobject_type(value) == QTYPE_QBOOL) {
3795                 /* handlers expect a QInt, they need to be changed */
3796                 qdict_put(args, name,
3797                          qint_from_int(qbool_get_int(qobject_to_qbool(value))));
3798             }
3799             break;
3800         default:
3801             /* impossible */
3802             abort();
3803     }
3804
3805     return 0;
3806 }
3807
3808 static void cmd_args_init(CmdArgs *cmd_args)
3809 {
3810     cmd_args->name = qstring_new();
3811     cmd_args->type = cmd_args->flag = cmd_args->optional = 0;
3812 }
3813
3814 /*
3815  * This is not trivial, we have to parse Monitor command's argument
3816  * type syntax to be able to check the arguments provided by clients.
3817  *
3818  * In the near future we will be using an array for that and will be
3819  * able to drop all this parsing...
3820  */
3821 static int monitor_check_qmp_args(const mon_cmd_t *cmd, QDict *args)
3822 {
3823     int err;
3824     const char *p;
3825     CmdArgs cmd_args;
3826
3827     if (cmd->args_type == NULL) {
3828         return (qdict_size(args) == 0 ? 0 : -1);
3829     }
3830
3831     err = 0;
3832     cmd_args_init(&cmd_args);
3833
3834     for (p = cmd->args_type;; p++) {
3835         if (*p == ':') {
3836             cmd_args.type = *++p;
3837             p++;
3838             if (cmd_args.type == '-') {
3839                 cmd_args.flag = *p++;
3840                 cmd_args.optional = 1;
3841             } else if (*p == '?') {
3842                 cmd_args.optional = 1;
3843                 p++;
3844             }
3845
3846             assert(*p == ',' || *p == '\0');
3847             err = check_arg(&cmd_args, args);
3848
3849             QDECREF(cmd_args.name);
3850             cmd_args_init(&cmd_args);
3851
3852             if (err < 0) {
3853                 break;
3854             }
3855         } else {
3856             qstring_append_chr(cmd_args.name, *p);
3857         }
3858
3859         if (*p == '\0') {
3860             break;
3861         }
3862     }
3863
3864     QDECREF(cmd_args.name);
3865     return err;
3866 }
3867
3868 static void handle_qmp_command(JSONMessageParser *parser, QList *tokens)
3869 {
3870     int err;
3871     QObject *obj;
3872     QDict *input, *args;
3873     const mon_cmd_t *cmd;
3874     Monitor *mon = cur_mon;
3875     const char *cmd_name, *info_item;
3876
3877     args = NULL;
3878     qemu_errors_to_mon(mon);
3879
3880     obj = json_parser_parse(tokens, NULL);
3881     if (!obj) {
3882         // FIXME: should be triggered in json_parser_parse()
3883         qemu_error_new(QERR_JSON_PARSING);
3884         goto err_out;
3885     } else if (qobject_type(obj) != QTYPE_QDICT) {
3886         qemu_error_new(QERR_QMP_BAD_INPUT_OBJECT, "object");
3887         qobject_decref(obj);
3888         goto err_out;
3889     }
3890
3891     input = qobject_to_qdict(obj);
3892
3893     mon->mc->id = qdict_get(input, "id");
3894     qobject_incref(mon->mc->id);
3895
3896     obj = qdict_get(input, "execute");
3897     if (!obj) {
3898         qemu_error_new(QERR_QMP_BAD_INPUT_OBJECT, "execute");
3899         goto err_input;
3900     } else if (qobject_type(obj) != QTYPE_QSTRING) {
3901         qemu_error_new(QERR_QMP_BAD_INPUT_OBJECT, "string");
3902         goto err_input;
3903     }
3904
3905     cmd_name = qstring_get_str(qobject_to_qstring(obj));
3906
3907     /*
3908      * XXX: We need this special case until we get info handlers
3909      * converted into 'query-' commands
3910      */
3911     if (compare_cmd(cmd_name, "info")) {
3912         qemu_error_new(QERR_COMMAND_NOT_FOUND, cmd_name);
3913         goto err_input;
3914     } else if (strstart(cmd_name, "query-", &info_item)) {
3915         cmd = monitor_find_command("info");
3916         qdict_put_obj(input, "arguments",
3917                       qobject_from_jsonf("{ 'item': %s }", info_item));
3918     } else {
3919         cmd = monitor_find_command(cmd_name);
3920         if (!cmd) {
3921             qemu_error_new(QERR_COMMAND_NOT_FOUND, cmd_name);
3922             goto err_input;
3923         }
3924     }
3925
3926     obj = qdict_get(input, "arguments");
3927     if (!obj) {
3928         args = qdict_new();
3929     } else {
3930         args = qobject_to_qdict(obj);
3931         QINCREF(args);
3932     }
3933
3934     QDECREF(input);
3935
3936     err = monitor_check_qmp_args(cmd, args);
3937     if (err < 0) {
3938         goto err_out;
3939     }
3940
3941     monitor_call_handler(mon, cmd, args);
3942     goto out;
3943
3944 err_input:
3945     QDECREF(input);
3946 err_out:
3947     monitor_protocol_emitter(mon, NULL);
3948 out:
3949     QDECREF(args);
3950     qemu_errors_to_previous();
3951 }
3952
3953 /**
3954  * monitor_control_read(): Read and handle QMP input
3955  */
3956 static void monitor_control_read(void *opaque, const uint8_t *buf, int size)
3957 {
3958     Monitor *old_mon = cur_mon;
3959
3960     cur_mon = opaque;
3961
3962     json_message_parser_feed(&cur_mon->mc->parser, (const char *) buf, size);
3963
3964     cur_mon = old_mon;
3965 }
3966
3967 static void monitor_read(void *opaque, const uint8_t *buf, int size)
3968 {
3969     Monitor *old_mon = cur_mon;
3970     int i;
3971
3972     cur_mon = opaque;
3973
3974     if (cur_mon->rs) {
3975         for (i = 0; i < size; i++)
3976             readline_handle_byte(cur_mon->rs, buf[i]);
3977     } else {
3978         if (size == 0 || buf[size - 1] != 0)
3979             monitor_printf(cur_mon, "corrupted command\n");
3980         else
3981             handle_user_command(cur_mon, (char *)buf);
3982     }
3983
3984     cur_mon = old_mon;
3985 }
3986
3987 static void monitor_command_cb(Monitor *mon, const char *cmdline, void *opaque)
3988 {
3989     monitor_suspend(mon);
3990     handle_user_command(mon, cmdline);
3991     monitor_resume(mon);
3992 }
3993
3994 int monitor_suspend(Monitor *mon)
3995 {
3996     if (!mon->rs)
3997         return -ENOTTY;
3998     mon->suspend_cnt++;
3999     return 0;
4000 }
4001
4002 void monitor_resume(Monitor *mon)
4003 {
4004     if (!mon->rs)
4005         return;
4006     if (--mon->suspend_cnt == 0)
4007         readline_show_prompt(mon->rs);
4008 }
4009
4010 /**
4011  * monitor_control_event(): Print QMP gretting
4012  */
4013 static void monitor_control_event(void *opaque, int event)
4014 {
4015     if (event == CHR_EVENT_OPENED) {
4016         QObject *data;
4017         Monitor *mon = opaque;
4018
4019         json_message_parser_init(&mon->mc->parser, handle_qmp_command);
4020
4021         data = qobject_from_jsonf("{ 'QMP': { 'capabilities': [] } }");
4022         assert(data != NULL);
4023
4024         monitor_json_emitter(mon, data);
4025         qobject_decref(data);
4026     }
4027 }
4028
4029 static void monitor_event(void *opaque, int event)
4030 {
4031     Monitor *mon = opaque;
4032
4033     switch (event) {
4034     case CHR_EVENT_MUX_IN:
4035         mon->mux_out = 0;
4036         if (mon->reset_seen) {
4037             readline_restart(mon->rs);
4038             monitor_resume(mon);
4039             monitor_flush(mon);
4040         } else {
4041             mon->suspend_cnt = 0;
4042         }
4043         break;
4044
4045     case CHR_EVENT_MUX_OUT:
4046         if (mon->reset_seen) {
4047             if (mon->suspend_cnt == 0) {
4048                 monitor_printf(mon, "\n");
4049             }
4050             monitor_flush(mon);
4051             monitor_suspend(mon);
4052         } else {
4053             mon->suspend_cnt++;
4054         }
4055         mon->mux_out = 1;
4056         break;
4057
4058     case CHR_EVENT_OPENED:
4059         monitor_printf(mon, "QEMU %s monitor - type 'help' for more "
4060                        "information\n", QEMU_VERSION);
4061         if (!mon->mux_out) {
4062             readline_show_prompt(mon->rs);
4063         }
4064         mon->reset_seen = 1;
4065         break;
4066     }
4067 }
4068
4069
4070 /*
4071  * Local variables:
4072  *  c-indent-level: 4
4073  *  c-basic-offset: 4
4074  *  tab-width: 8
4075  * End:
4076  */
4077
4078 void monitor_init(CharDriverState *chr, int flags)
4079 {
4080     static int is_first_init = 1;
4081     Monitor *mon;
4082
4083     if (is_first_init) {
4084         key_timer = qemu_new_timer(vm_clock, release_keys, NULL);
4085         is_first_init = 0;
4086     }
4087
4088     mon = qemu_mallocz(sizeof(*mon));
4089
4090     mon->chr = chr;
4091     mon->flags = flags;
4092     if (flags & MONITOR_USE_READLINE) {
4093         mon->rs = readline_init(mon, monitor_find_completion);
4094         monitor_read_command(mon, 0);
4095     }
4096
4097     if (monitor_ctrl_mode(mon)) {
4098         mon->mc = qemu_mallocz(sizeof(MonitorControl));
4099         /* Control mode requires special handlers */
4100         qemu_chr_add_handlers(chr, monitor_can_read, monitor_control_read,
4101                               monitor_control_event, mon);
4102     } else {
4103         qemu_chr_add_handlers(chr, monitor_can_read, monitor_read,
4104                               monitor_event, mon);
4105     }
4106
4107     QLIST_INSERT_HEAD(&mon_list, mon, entry);
4108     if (!cur_mon || (flags & MONITOR_IS_DEFAULT))
4109         cur_mon = mon;
4110 }
4111
4112 static void bdrv_password_cb(Monitor *mon, const char *password, void *opaque)
4113 {
4114     BlockDriverState *bs = opaque;
4115     int ret = 0;
4116
4117     if (bdrv_set_key(bs, password) != 0) {
4118         monitor_printf(mon, "invalid password\n");
4119         ret = -EPERM;
4120     }
4121     if (mon->password_completion_cb)
4122         mon->password_completion_cb(mon->password_opaque, ret);
4123
4124     monitor_read_command(mon, 1);
4125 }
4126
4127 void monitor_read_bdrv_key_start(Monitor *mon, BlockDriverState *bs,
4128                                  BlockDriverCompletionFunc *completion_cb,
4129                                  void *opaque)
4130 {
4131     int err;
4132
4133     if (!bdrv_key_required(bs)) {
4134         if (completion_cb)
4135             completion_cb(opaque, 0);
4136         return;
4137     }
4138
4139     if (monitor_ctrl_mode(mon)) {
4140         qemu_error_new(QERR_DEVICE_ENCRYPTED, bdrv_get_device_name(bs));
4141         return;
4142     }
4143
4144     monitor_printf(mon, "%s (%s) is encrypted.\n", bdrv_get_device_name(bs),
4145                    bdrv_get_encrypted_filename(bs));
4146
4147     mon->password_completion_cb = completion_cb;
4148     mon->password_opaque = opaque;
4149
4150     err = monitor_read_password(mon, bdrv_password_cb, bs);
4151
4152     if (err && completion_cb)
4153         completion_cb(opaque, err);
4154 }
4155
4156 typedef struct QemuErrorSink QemuErrorSink;
4157 struct QemuErrorSink {
4158     enum {
4159         ERR_SINK_FILE,
4160         ERR_SINK_MONITOR,
4161     } dest;
4162     union {
4163         FILE    *fp;
4164         Monitor *mon;
4165     };
4166     QemuErrorSink *previous;
4167 };
4168
4169 static QemuErrorSink *qemu_error_sink;
4170
4171 void qemu_errors_to_file(FILE *fp)
4172 {
4173     QemuErrorSink *sink;
4174
4175     sink = qemu_mallocz(sizeof(*sink));
4176     sink->dest = ERR_SINK_FILE;
4177     sink->fp = fp;
4178     sink->previous = qemu_error_sink;
4179     qemu_error_sink = sink;
4180 }
4181
4182 void qemu_errors_to_mon(Monitor *mon)
4183 {
4184     QemuErrorSink *sink;
4185
4186     sink = qemu_mallocz(sizeof(*sink));
4187     sink->dest = ERR_SINK_MONITOR;
4188     sink->mon = mon;
4189     sink->previous = qemu_error_sink;
4190     qemu_error_sink = sink;
4191 }
4192
4193 void qemu_errors_to_previous(void)
4194 {
4195     QemuErrorSink *sink;
4196
4197     assert(qemu_error_sink != NULL);
4198     sink = qemu_error_sink;
4199     qemu_error_sink = sink->previous;
4200     qemu_free(sink);
4201 }
4202
4203 void qemu_error(const char *fmt, ...)
4204 {
4205     va_list args;
4206
4207     assert(qemu_error_sink != NULL);
4208     switch (qemu_error_sink->dest) {
4209     case ERR_SINK_FILE:
4210         va_start(args, fmt);
4211         vfprintf(qemu_error_sink->fp, fmt, args);
4212         va_end(args);
4213         break;
4214     case ERR_SINK_MONITOR:
4215         va_start(args, fmt);
4216         monitor_vprintf(qemu_error_sink->mon, fmt, args);
4217         va_end(args);
4218         break;
4219     }
4220 }
4221
4222 void qemu_error_internal(const char *file, int linenr, const char *func,
4223                          const char *fmt, ...)
4224 {
4225     va_list va;
4226     QError *qerror;
4227
4228     assert(qemu_error_sink != NULL);
4229
4230     va_start(va, fmt);
4231     qerror = qerror_from_info(file, linenr, func, fmt, &va);
4232     va_end(va);
4233
4234     switch (qemu_error_sink->dest) {
4235     case ERR_SINK_FILE:
4236         qerror_print(qerror);
4237         QDECREF(qerror);
4238         break;
4239     case ERR_SINK_MONITOR:
4240         assert(qemu_error_sink->mon->error == NULL);
4241         qemu_error_sink->mon->error = qerror;
4242         break;
4243     }
4244 }