]> git.proxmox.com Git - mirror_qemu.git/blob - qemu-char.c
projects / mirror_qemu.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
char: move fe_open in CharBackend
[mirror_qemu.git] / qemu-char.c
1 /*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24 #include "qemu/osdep.h"
25 #include "qemu-common.h"
26 #include "qemu/cutils.h"
27 #include "monitor/monitor.h"
28 #include "sysemu/sysemu.h"
29 #include "sysemu/block-backend.h"
30 #include "qemu/error-report.h"
31 #include "qemu/timer.h"
32 #include "sysemu/char.h"
33 #include "hw/usb.h"
34 #include "qmp-commands.h"
35 #include "qapi/clone-visitor.h"
36 #include "qapi-visit.h"
37 #include "qemu/base64.h"
38 #include "io/channel-socket.h"
39 #include "io/channel-file.h"
40 #include "io/channel-tls.h"
41 #include "sysemu/replay.h"
42 #include "qemu/help_option.h"
43
44 #include <zlib.h>
45
46 #ifndef _WIN32
47 #include <sys/times.h>
48 #include <sys/wait.h>
49 #include <termios.h>
50 #include <sys/ioctl.h>
51 #include <sys/resource.h>
52 #include <sys/socket.h>
53 #include <netinet/in.h>
54 #include <net/if.h>
55 #include <arpa/inet.h>
56 #include <netdb.h>
57 #include <sys/select.h>
58 #ifdef CONFIG_BSD
59 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
60 #include <dev/ppbus/ppi.h>
61 #include <dev/ppbus/ppbconf.h>
62 #elif defined(__DragonFly__)
63 #include <dev/misc/ppi/ppi.h>
64 #include <bus/ppbus/ppbconf.h>
65 #endif
66 #else
67 #ifdef __linux__
68 #include <linux/ppdev.h>
69 #include <linux/parport.h>
70 #endif
71 #ifdef __sun__
72 #include <sys/ethernet.h>
73 #include <sys/sockio.h>
74 #include <netinet/arp.h>
75 #include <netinet/in.h>
76 #include <netinet/in_systm.h>
77 #include <netinet/ip.h>
78 #include <netinet/ip_icmp.h> // must come after ip.h
79 #include <netinet/udp.h>
80 #include <netinet/tcp.h>
81 #endif
82 #endif
83 #endif
84
85 #include "qemu/sockets.h"
86 #include "ui/qemu-spice.h"
87
88 #define READ_BUF_LEN 4096
89 #define READ_RETRIES 10
90 #define TCP_MAX_FDS 16
91
92 typedef struct MuxDriver MuxDriver;
93
94 /***********************************************************/
95 /* Socket address helpers */
96
97 static char *SocketAddress_to_str(const char *prefix, SocketAddress *addr,
98 bool is_listen, bool is_telnet)
99 {
100 switch (addr->type) {
101 case SOCKET_ADDRESS_KIND_INET:
102 return g_strdup_printf("%s%s:%s:%s%s", prefix,
103 is_telnet ? "telnet" : "tcp",
104 addr->u.inet.data->host,
105 addr->u.inet.data->port,
106 is_listen ? ",server" : "");
107 break;
108 case SOCKET_ADDRESS_KIND_UNIX:
109 return g_strdup_printf("%sunix:%s%s", prefix,
110 addr->u.q_unix.data->path,
111 is_listen ? ",server" : "");
112 break;
113 case SOCKET_ADDRESS_KIND_FD:
114 return g_strdup_printf("%sfd:%s%s", prefix, addr->u.fd.data->str,
115 is_listen ? ",server" : "");
116 break;
117 default:
118 abort();
119 }
120 }
121
122 static char *sockaddr_to_str(struct sockaddr_storage *ss, socklen_t ss_len,
123 struct sockaddr_storage *ps, socklen_t ps_len,
124 bool is_listen, bool is_telnet)
125 {
126 char shost[NI_MAXHOST], sserv[NI_MAXSERV];
127 char phost[NI_MAXHOST], pserv[NI_MAXSERV];
128 const char *left = "", *right = "";
129
130 switch (ss->ss_family) {
131 #ifndef _WIN32
132 case AF_UNIX:
133 return g_strdup_printf("unix:%s%s",
134 ((struct sockaddr_un *)(ss))->sun_path,
135 is_listen ? ",server" : "");
136 #endif
137 case AF_INET6:
138 left = "[";
139 right = "]";
140 /* fall through */
141 case AF_INET:
142 getnameinfo((struct sockaddr *) ss, ss_len, shost, sizeof(shost),
143 sserv, sizeof(sserv), NI_NUMERICHOST | NI_NUMERICSERV);
144 getnameinfo((struct sockaddr *) ps, ps_len, phost, sizeof(phost),
145 pserv, sizeof(pserv), NI_NUMERICHOST | NI_NUMERICSERV);
146 return g_strdup_printf("%s:%s%s%s:%s%s <-> %s%s%s:%s",
147 is_telnet ? "telnet" : "tcp",
148 left, shost, right, sserv,
149 is_listen ? ",server" : "",
150 left, phost, right, pserv);
151
152 default:
153 return g_strdup_printf("unknown");
154 }
155 }
156
157 /***********************************************************/
158 /* character device */
159
160 static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
161 QTAILQ_HEAD_INITIALIZER(chardevs);
162
163 static void qemu_chr_free_common(CharDriverState *chr);
164
165 CharDriverState *qemu_chr_alloc(ChardevCommon *backend, Error **errp)
166 {
167 CharDriverState *chr = g_malloc0(sizeof(CharDriverState));
168 qemu_mutex_init(&chr->chr_write_lock);
169
170 if (backend->has_logfile) {
171 int flags = O_WRONLY | O_CREAT;
172 if (backend->has_logappend &&
173 backend->logappend) {
174 flags |= O_APPEND;
175 } else {
176 flags |= O_TRUNC;
177 }
178 chr->logfd = qemu_open(backend->logfile, flags, 0666);
179 if (chr->logfd < 0) {
180 error_setg_errno(errp, errno,
181 "Unable to open logfile %s",
182 backend->logfile);
183 g_free(chr);
184 return NULL;
185 }
186 } else {
187 chr->logfd = -1;
188 }
189
190 return chr;
191 }
192
193 void qemu_chr_be_event(CharDriverState *s, int event)
194 {
195 CharBackend *be = s->be;
196
197 /* Keep track if the char device is open */
198 switch (event) {
199 case CHR_EVENT_OPENED:
200 s->be_open = 1;
201 break;
202 case CHR_EVENT_CLOSED:
203 s->be_open = 0;
204 break;
205 }
206
207 if (!be || !be->chr_event) {
208 return;
209 }
210
211 be->chr_event(be->opaque, event);
212 }
213
214 void qemu_chr_be_generic_open(CharDriverState *s)
215 {
216 qemu_chr_be_event(s, CHR_EVENT_OPENED);
217 }
218
219
220 /* Not reporting errors from writing to logfile, as logs are
221 * defined to be "best effort" only */
222 static void qemu_chr_fe_write_log(CharDriverState *s,
223 const uint8_t *buf, size_t len)
224 {
225 size_t done = 0;
226 ssize_t ret;
227
228 if (s->logfd < 0) {
229 return;
230 }
231
232 while (done < len) {
233 retry:
234 ret = write(s->logfd, buf + done, len - done);
235 if (ret == -1 && errno == EAGAIN) {
236 g_usleep(100);
237 goto retry;
238 }
239
240 if (ret <= 0) {
241 return;
242 }
243 done += ret;
244 }
245 }
246
247 static int qemu_chr_fe_write_buffer(CharDriverState *s, const uint8_t *buf, int len, int *offset)
248 {
249 int res = 0;
250 *offset = 0;
251
252 qemu_mutex_lock(&s->chr_write_lock);
253 while (*offset < len) {
254 retry:
255 res = s->chr_write(s, buf + *offset, len - *offset);
256 if (res < 0 && errno == EAGAIN) {
257 g_usleep(100);
258 goto retry;
259 }
260
261 if (res <= 0) {
262 break;
263 }
264
265 *offset += res;
266 }
267 if (*offset > 0) {
268 qemu_chr_fe_write_log(s, buf, *offset);
269 }
270 qemu_mutex_unlock(&s->chr_write_lock);
271
272 return res;
273 }
274
275 int qemu_chr_fe_write(CharBackend *be, const uint8_t *buf, int len)
276 {
277 CharDriverState *s = be->chr;
278 int ret;
279
280 if (!s) {
281 return 0;
282 }
283
284 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
285 int offset;
286 replay_char_write_event_load(&ret, &offset);
287 assert(offset <= len);
288 qemu_chr_fe_write_buffer(s, buf, offset, &offset);
289 return ret;
290 }
291
292 qemu_mutex_lock(&s->chr_write_lock);
293 ret = s->chr_write(s, buf, len);
294
295 if (ret > 0) {
296 qemu_chr_fe_write_log(s, buf, ret);
297 }
298
299 qemu_mutex_unlock(&s->chr_write_lock);
300
301 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
302 replay_char_write_event_save(ret, ret < 0 ? 0 : ret);
303 }
304
305 return ret;
306 }
307
308 static int qemu_chr_write_all(CharDriverState *s, const uint8_t *buf, int len)
309 {
310 int offset;
311 int res;
312
313 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
314 replay_char_write_event_load(&res, &offset);
315 assert(offset <= len);
316 qemu_chr_fe_write_buffer(s, buf, offset, &offset);
317 return res;
318 }
319
320 res = qemu_chr_fe_write_buffer(s, buf, len, &offset);
321
322 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
323 replay_char_write_event_save(res, offset);
324 }
325
326 if (res < 0) {
327 return res;
328 }
329 return offset;
330 }
331
332 int qemu_chr_fe_write_all(CharBackend *be, const uint8_t *buf, int len)
333 {
334 CharDriverState *s = be->chr;
335
336 if (!s) {
337 return 0;
338 }
339
340 return qemu_chr_write_all(s, buf, len);
341 }
342
343 int qemu_chr_fe_read_all(CharBackend *be, uint8_t *buf, int len)
344 {
345 CharDriverState *s = be->chr;
346 int offset = 0, counter = 10;
347 int res;
348
349 if (!s || !s->chr_sync_read) {
350 return 0;
351 }
352
353 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
354 return replay_char_read_all_load(buf);
355 }
356
357 while (offset < len) {
358 retry:
359 res = s->chr_sync_read(s, buf + offset, len - offset);
360 if (res == -1 && errno == EAGAIN) {
361 g_usleep(100);
362 goto retry;
363 }
364
365 if (res == 0) {
366 break;
367 }
368
369 if (res < 0) {
370 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
371 replay_char_read_all_save_error(res);
372 }
373 return res;
374 }
375
376 offset += res;
377
378 if (!counter--) {
379 break;
380 }
381 }
382
383 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
384 replay_char_read_all_save_buf(buf, offset);
385 }
386 return offset;
387 }
388
389 int qemu_chr_fe_ioctl(CharBackend *be, int cmd, void *arg)
390 {
391 CharDriverState *s = be->chr;
392 int res;
393
394 if (!s || !s->chr_ioctl || s->replay) {
395 res = -ENOTSUP;
396 } else {
397 res = s->chr_ioctl(s, cmd, arg);
398 }
399
400 return res;
401 }
402
403 int qemu_chr_be_can_write(CharDriverState *s)
404 {
405 CharBackend *be = s->be;
406
407 if (!be || !be->chr_can_read) {
408 return 0;
409 }
410
411 return be->chr_can_read(be->opaque);
412 }
413
414 void qemu_chr_be_write_impl(CharDriverState *s, uint8_t *buf, int len)
415 {
416 CharBackend *be = s->be;
417
418 if (be && be->chr_read) {
419 be->chr_read(be->opaque, buf, len);
420 }
421 }
422
423 void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
424 {
425 if (s->replay) {
426 if (replay_mode == REPLAY_MODE_PLAY) {
427 return;
428 }
429 replay_chr_be_write(s, buf, len);
430 } else {
431 qemu_chr_be_write_impl(s, buf, len);
432 }
433 }
434
435 int qemu_chr_fe_get_msgfd(CharBackend *be)
436 {
437 CharDriverState *s = be->chr;
438 int fd;
439 int res = (qemu_chr_fe_get_msgfds(be, &fd, 1) == 1) ? fd : -1;
440 if (s && s->replay) {
441 fprintf(stderr,
442 "Replay: get msgfd is not supported for serial devices yet\n");
443 exit(1);
444 }
445 return res;
446 }
447
448 int qemu_chr_fe_get_msgfds(CharBackend *be, int *fds, int len)
449 {
450 CharDriverState *s = be->chr;
451
452 if (!s) {
453 return -1;
454 }
455
456 return s->get_msgfds ? s->get_msgfds(s, fds, len) : -1;
457 }
458
459 int qemu_chr_fe_set_msgfds(CharBackend *be, int *fds, int num)
460 {
461 CharDriverState *s = be->chr;
462
463 if (!s) {
464 return -1;
465 }
466
467 return s->set_msgfds ? s->set_msgfds(s, fds, num) : -1;
468 }
469
470 int qemu_chr_add_client(CharDriverState *s, int fd)
471 {
472 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
473 }
474
475 void qemu_chr_fe_accept_input(CharBackend *be)
476 {
477 CharDriverState *s = be->chr;
478
479 if (!s) {
480 return;
481 }
482
483 if (s->chr_accept_input)
484 s->chr_accept_input(s);
485 qemu_notify_event();
486 }
487
488 void qemu_chr_fe_printf(CharBackend *be, const char *fmt, ...)
489 {
490 char buf[READ_BUF_LEN];
491 va_list ap;
492 va_start(ap, fmt);
493 vsnprintf(buf, sizeof(buf), fmt, ap);
494 /* XXX this blocks entire thread. Rewrite to use
495 * qemu_chr_fe_write and background I/O callbacks */
496 qemu_chr_fe_write_all(be, (uint8_t *)buf, strlen(buf));
497 va_end(ap);
498 }
499
500 static void remove_fd_in_watch(CharDriverState *chr);
501 static void mux_chr_set_handlers(CharDriverState *chr, GMainContext *context);
502 static void mux_set_focus(MuxDriver *d, int focus);
503
504 static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
505 {
506 return len;
507 }
508
509 static CharDriverState *qemu_chr_open_null(const char *id,
510 ChardevBackend *backend,
511 ChardevReturn *ret,
512 Error **errp)
513 {
514 CharDriverState *chr;
515 ChardevCommon *common = backend->u.null.data;
516
517 chr = qemu_chr_alloc(common, errp);
518 if (!chr) {
519 return NULL;
520 }
521 chr->chr_write = null_chr_write;
522 chr->explicit_be_open = true;
523 return chr;
524 }
525
526 /* MUX driver for serial I/O splitting */
527 #define MAX_MUX 4
528 #define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
529 #define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
530 struct MuxDriver {
531 CharBackend *backends[MAX_MUX];
532 CharBackend chr;
533 int focus;
534 int mux_cnt;
535 int term_got_escape;
536 int max_size;
537 /* Intermediate input buffer allows to catch escape sequences even if the
538 currently active device is not accepting any input - but only until it
539 is full as well. */
540 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
541 int prod[MAX_MUX];
542 int cons[MAX_MUX];
543 int timestamps;
544
545 /* Protected by the CharDriverState chr_write_lock. */
546 int linestart;
547 int64_t timestamps_start;
548 };
549
550 /* Called with chr_write_lock held. */
551 static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
552 {
553 MuxDriver *d = chr->opaque;
554 int ret;
555 if (!d->timestamps) {
556 ret = qemu_chr_fe_write(&d->chr, buf, len);
557 } else {
558 int i;
559
560 ret = 0;
561 for (i = 0; i < len; i++) {
562 if (d->linestart) {
563 char buf1[64];
564 int64_t ti;
565 int secs;
566
567 ti = qemu_clock_get_ms(QEMU_CLOCK_REALTIME);
568 if (d->timestamps_start == -1)
569 d->timestamps_start = ti;
570 ti -= d->timestamps_start;
571 secs = ti / 1000;
572 snprintf(buf1, sizeof(buf1),
573 "[%02d:%02d:%02d.%03d] ",
574 secs / 3600,
575 (secs / 60) % 60,
576 secs % 60,
577 (int)(ti % 1000));
578 /* XXX this blocks entire thread. Rewrite to use
579 * qemu_chr_fe_write and background I/O callbacks */
580 qemu_chr_fe_write_all(&d->chr,
581 (uint8_t *)buf1, strlen(buf1));
582 d->linestart = 0;
583 }
584 ret += qemu_chr_fe_write(&d->chr, buf + i, 1);
585 if (buf[i] == '\n') {
586 d->linestart = 1;
587 }
588 }
589 }
590 return ret;
591 }
592
593 static const char * const mux_help[] = {
594 "% h print this help\n\r",
595 "% x exit emulator\n\r",
596 "% s save disk data back to file (if -snapshot)\n\r",
597 "% t toggle console timestamps\n\r",
598 "% b send break (magic sysrq)\n\r",
599 "% c switch between console and monitor\n\r",
600 "% % sends %\n\r",
601 NULL
602 };
603
604 int term_escape_char = 0x01; /* ctrl-a is used for escape */
605 static void mux_print_help(CharDriverState *chr)
606 {
607 int i, j;
608 char ebuf[15] = "Escape-Char";
609 char cbuf[50] = "\n\r";
610
611 if (term_escape_char > 0 && term_escape_char < 26) {
612 snprintf(cbuf, sizeof(cbuf), "\n\r");
613 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
614 } else {
615 snprintf(cbuf, sizeof(cbuf),
616 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
617 term_escape_char);
618 }
619 /* XXX this blocks entire thread. Rewrite to use
620 * qemu_chr_fe_write and background I/O callbacks */
621 qemu_chr_write_all(chr, (uint8_t *)cbuf, strlen(cbuf));
622 for (i = 0; mux_help[i] != NULL; i++) {
623 for (j=0; mux_help[i][j] != '\0'; j++) {
624 if (mux_help[i][j] == '%')
625 qemu_chr_write_all(chr, (uint8_t *)ebuf, strlen(ebuf));
626 else
627 qemu_chr_write_all(chr, (uint8_t *)&mux_help[i][j], 1);
628 }
629 }
630 }
631
632 static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
633 {
634 CharBackend *be = d->backends[mux_nr];
635
636 if (be && be->chr_event) {
637 be->chr_event(be->opaque, event);
638 }
639 }
640
641 static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
642 {
643 if (d->term_got_escape) {
644 d->term_got_escape = 0;
645 if (ch == term_escape_char)
646 goto send_char;
647 switch(ch) {
648 case '?':
649 case 'h':
650 mux_print_help(chr);
651 break;
652 case 'x':
653 {
654 const char *term = "QEMU: Terminated\n\r";
655 qemu_chr_write_all(chr, (uint8_t *)term, strlen(term));
656 exit(0);
657 break;
658 }
659 case 's':
660 blk_commit_all();
661 break;
662 case 'b':
663 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
664 break;
665 case 'c':
666 assert(d->mux_cnt > 0); /* handler registered with first fe */
667 /* Switch to the next registered device */
668 mux_set_focus(d, (d->focus + 1) % d->mux_cnt);
669 break;
670 case 't':
671 d->timestamps = !d->timestamps;
672 d->timestamps_start = -1;
673 d->linestart = 0;
674 break;
675 }
676 } else if (ch == term_escape_char) {
677 d->term_got_escape = 1;
678 } else {
679 send_char:
680 return 1;
681 }
682 return 0;
683 }
684
685 static void mux_chr_accept_input(CharDriverState *chr)
686 {
687 MuxDriver *d = chr->opaque;
688 int m = d->focus;
689 CharBackend *be = d->backends[m];
690
691 while (be && d->prod[m] != d->cons[m] &&
692 be->chr_can_read && be->chr_can_read(be->opaque)) {
693 be->chr_read(be->opaque,
694 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
695 }
696 }
697
698 static int mux_chr_can_read(void *opaque)
699 {
700 CharDriverState *chr = opaque;
701 MuxDriver *d = chr->opaque;
702 int m = d->focus;
703 CharBackend *be = d->backends[m];
704
705 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE) {
706 return 1;
707 }
708
709 if (be && be->chr_can_read) {
710 return be->chr_can_read(be->opaque);
711 }
712
713 return 0;
714 }
715
716 static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
717 {
718 CharDriverState *chr = opaque;
719 MuxDriver *d = chr->opaque;
720 int m = d->focus;
721 CharBackend *be = d->backends[m];
722 int i;
723
724 mux_chr_accept_input(opaque);
725
726 for (i = 0; i < size; i++)
727 if (mux_proc_byte(chr, d, buf[i])) {
728 if (d->prod[m] == d->cons[m] &&
729 be && be->chr_can_read &&
730 be->chr_can_read(be->opaque))
731 be->chr_read(be->opaque, &buf[i], 1);
732 else
733 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
734 }
735 }
736
737 static void mux_chr_event(void *opaque, int event)
738 {
739 CharDriverState *chr = opaque;
740 MuxDriver *d = chr->opaque;
741 int i;
742
743 /* Send the event to all registered listeners */
744 for (i = 0; i < d->mux_cnt; i++)
745 mux_chr_send_event(d, i, event);
746 }
747
748 static bool muxes_realized;
749
750 /**
751 * Called after processing of default and command-line-specified
752 * chardevs to deliver CHR_EVENT_OPENED events to any FEs attached
753 * to a mux chardev. This is done here to ensure that
754 * output/prompts/banners are only displayed for the FE that has
755 * focus when initial command-line processing/machine init is
756 * completed.
757 *
758 * After this point, any new FE attached to any new or existing
759 * mux will receive CHR_EVENT_OPENED notifications for the BE
760 * immediately.
761 */
762 static void muxes_realize_done(Notifier *notifier, void *unused)
763 {
764 CharDriverState *chr;
765
766 QTAILQ_FOREACH(chr, &chardevs, next) {
767 if (chr->is_mux) {
768 MuxDriver *d = chr->opaque;
769 int i;
770
771 /* send OPENED to all already-attached FEs */
772 for (i = 0; i < d->mux_cnt; i++) {
773 mux_chr_send_event(d, i, CHR_EVENT_OPENED);
774 }
775 /* mark mux as OPENED so any new FEs will immediately receive
776 * OPENED event
777 */
778 qemu_chr_be_generic_open(chr);
779 }
780 }
781 muxes_realized = true;
782 }
783
784 static Notifier muxes_realize_notify = {
785 .notify = muxes_realize_done,
786 };
787
788 static GSource *mux_chr_add_watch(CharDriverState *s, GIOCondition cond)
789 {
790 MuxDriver *d = s->opaque;
791 CharDriverState *chr = qemu_chr_fe_get_driver(&d->chr);
792
793 return chr->chr_add_watch(chr, cond);
794 }
795
796 static void mux_chr_free(struct CharDriverState *chr)
797 {
798 MuxDriver *d = chr->opaque;
799 int i;
800
801 for (i = 0; i < d->mux_cnt; i++) {
802 CharBackend *be = d->backends[i];
803 if (be) {
804 be->chr = NULL;
805 }
806 }
807 qemu_chr_fe_deinit(&d->chr);
808 g_free(d);
809 }
810
811 static int mux_chr_new_fe(CharDriverState *chr, CharBackend *be, Error **errp)
812 {
813 MuxDriver *d = chr->opaque;
814
815 if (d->mux_cnt >= MAX_MUX) {
816 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
817 return -1;
818 }
819
820 d->backends[d->mux_cnt] = be;
821
822 return d->mux_cnt++;
823 }
824
825 static void mux_chr_set_handlers(CharDriverState *chr, GMainContext *context)
826 {
827 MuxDriver *d = chr->opaque;
828
829 /* Fix up the real driver with mux routines */
830 qemu_chr_fe_set_handlers(&d->chr,
831 mux_chr_can_read,
832 mux_chr_read,
833 mux_chr_event,
834 chr,
835 context, true);
836 }
837
838 static void mux_set_focus(MuxDriver *d, int focus)
839 {
840 assert(focus >= 0);
841 assert(focus < d->mux_cnt);
842
843 if (d->focus != -1) {
844 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
845 }
846
847 d->focus = focus;
848 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
849 }
850
851 static CharDriverState *qemu_chr_open_mux(const char *id,
852 ChardevBackend *backend,
853 ChardevReturn *ret, Error **errp)
854 {
855 ChardevMux *mux = backend->u.mux.data;
856 CharDriverState *chr, *drv;
857 MuxDriver *d;
858 ChardevCommon *common = qapi_ChardevMux_base(mux);
859
860 drv = qemu_chr_find(mux->chardev);
861 if (drv == NULL) {
862 error_setg(errp, "mux: base chardev %s not found", mux->chardev);
863 return NULL;
864 }
865
866 chr = qemu_chr_alloc(common, errp);
867 if (!chr) {
868 return NULL;
869 }
870 d = g_new0(MuxDriver, 1);
871
872 chr->opaque = d;
873 d->focus = -1;
874 chr->chr_free = mux_chr_free;
875 chr->chr_write = mux_chr_write;
876 chr->chr_accept_input = mux_chr_accept_input;
877 /* Frontend guest-open / -close notification is not support with muxes */
878 chr->chr_set_fe_open = NULL;
879 if (drv->chr_add_watch) {
880 chr->chr_add_watch = mux_chr_add_watch;
881 }
882 /* only default to opened state if we've realized the initial
883 * set of muxes
884 */
885 chr->explicit_be_open = muxes_realized ? 0 : 1;
886 chr->is_mux = 1;
887 if (!qemu_chr_fe_init(&d->chr, drv, errp)) {
888 qemu_chr_free(chr);
889 return NULL;
890 }
891
892 return chr;
893 }
894
895 CharDriverState *qemu_chr_fe_get_driver(CharBackend *be)
896 {
897 return be->chr;
898 }
899
900 bool qemu_chr_fe_init(CharBackend *b, CharDriverState *s, Error **errp)
901 {
902 int tag = 0;
903
904 if (s->is_mux) {
905 tag = mux_chr_new_fe(s, b, errp);
906 if (tag < 0) {
907 return false;
908 }
909 } else {
910 s->be = b;
911 }
912
913 b->fe_open = false;
914 b->tag = tag;
915 b->chr = s;
916
917 return true;
918 }
919
920 static bool qemu_chr_is_busy(CharDriverState *s)
921 {
922 if (s->is_mux) {
923 MuxDriver *d = s->opaque;
924 return d->mux_cnt >= 0;
925 } else {
926 return s->be != NULL;
927 }
928 }
929
930 void qemu_chr_fe_deinit(CharBackend *b)
931 {
932 assert(b);
933
934 if (b->chr) {
935 qemu_chr_fe_set_handlers(b, NULL, NULL, NULL, NULL, NULL, true);
936 b->chr->avail_connections++;
937 b->chr->be = NULL;
938 if (b->chr->is_mux) {
939 MuxDriver *d = b->chr->opaque;
940 d->backends[b->tag] = NULL;
941 }
942 b->chr = NULL;
943 }
944 }
945
946 void qemu_chr_fe_set_handlers(CharBackend *b,
947 IOCanReadHandler *fd_can_read,
948 IOReadHandler *fd_read,
949 IOEventHandler *fd_event,
950 void *opaque,
951 GMainContext *context,
952 bool set_open)
953 {
954 CharDriverState *s;
955 int fe_open;
956
957 s = b->chr;
958 if (!s) {
959 return;
960 }
961
962 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
963 fe_open = 0;
964 remove_fd_in_watch(s);
965 } else {
966 fe_open = 1;
967 }
968 b->chr_can_read = fd_can_read;
969 b->chr_read = fd_read;
970 b->chr_event = fd_event;
971 b->opaque = opaque;
972 if (s->chr_update_read_handler) {
973 s->chr_update_read_handler(s, context);
974 }
975
976 if (set_open) {
977 qemu_chr_fe_set_open(b, fe_open);
978 }
979
980 if (fe_open) {
981 qemu_chr_fe_take_focus(b);
982 /* We're connecting to an already opened device, so let's make sure we
983 also get the open event */
984 if (s->be_open) {
985 qemu_chr_be_generic_open(s);
986 }
987 }
988
989 if (s->is_mux) {
990 mux_chr_set_handlers(s, context);
991 }
992 }
993
994 void qemu_chr_fe_take_focus(CharBackend *b)
995 {
996 if (!b->chr) {
997 return;
998 }
999
1000 if (b->chr->is_mux) {
1001 mux_set_focus(b->chr->opaque, b->tag);
1002 }
1003 }
1004
1005 typedef struct IOWatchPoll
1006 {
1007 GSource parent;
1008
1009 QIOChannel *ioc;
1010 GSource *src;
1011
1012 IOCanReadHandler *fd_can_read;
1013 GSourceFunc fd_read;
1014 void *opaque;
1015 GMainContext *context;
1016 } IOWatchPoll;
1017
1018 static IOWatchPoll *io_watch_poll_from_source(GSource *source)
1019 {
1020 return container_of(source, IOWatchPoll, parent);
1021 }
1022
1023 static gboolean io_watch_poll_prepare(GSource *source,
1024 gint *timeout_)
1025 {
1026 IOWatchPoll *iwp = io_watch_poll_from_source(source);
1027 bool now_active = iwp->fd_can_read(iwp->opaque) > 0;
1028 bool was_active = iwp->src != NULL;
1029 if (was_active == now_active) {
1030 return FALSE;
1031 }
1032
1033 if (now_active) {
1034 iwp->src = qio_channel_create_watch(
1035 iwp->ioc, G_IO_IN | G_IO_ERR | G_IO_HUP | G_IO_NVAL);
1036 g_source_set_callback(iwp->src, iwp->fd_read, iwp->opaque, NULL);
1037 g_source_attach(iwp->src, iwp->context);
1038 } else {
1039 g_source_destroy(iwp->src);
1040 g_source_unref(iwp->src);
1041 iwp->src = NULL;
1042 }
1043 return FALSE;
1044 }
1045
1046 static gboolean io_watch_poll_check(GSource *source)
1047 {
1048 return FALSE;
1049 }
1050
1051 static gboolean io_watch_poll_dispatch(GSource *source, GSourceFunc callback,
1052 gpointer user_data)
1053 {
1054 abort();
1055 }
1056
1057 static void io_watch_poll_finalize(GSource *source)
1058 {
1059 /* Due to a glib bug, removing the last reference to a source
1060 * inside a finalize callback causes recursive locking (and a
1061 * deadlock). This is not a problem inside other callbacks,
1062 * including dispatch callbacks, so we call io_remove_watch_poll
1063 * to remove this source. At this point, iwp->src must
1064 * be NULL, or we would leak it.
1065 *
1066 * This would be solved much more elegantly by child sources,
1067 * but we support older glib versions that do not have them.
1068 */
1069 IOWatchPoll *iwp = io_watch_poll_from_source(source);
1070 assert(iwp->src == NULL);
1071 }
1072
1073 static GSourceFuncs io_watch_poll_funcs = {
1074 .prepare = io_watch_poll_prepare,
1075 .check = io_watch_poll_check,
1076 .dispatch = io_watch_poll_dispatch,
1077 .finalize = io_watch_poll_finalize,
1078 };
1079
1080 /* Can only be used for read */
1081 static guint io_add_watch_poll(QIOChannel *ioc,
1082 IOCanReadHandler *fd_can_read,
1083 QIOChannelFunc fd_read,
1084 gpointer user_data,
1085 GMainContext *context)
1086 {
1087 IOWatchPoll *iwp;
1088 int tag;
1089
1090 iwp = (IOWatchPoll *) g_source_new(&io_watch_poll_funcs,
1091 sizeof(IOWatchPoll));
1092 iwp->fd_can_read = fd_can_read;
1093 iwp->opaque = user_data;
1094 iwp->ioc = ioc;
1095 iwp->fd_read = (GSourceFunc) fd_read;
1096 iwp->src = NULL;
1097 iwp->context = context;
1098
1099 tag = g_source_attach(&iwp->parent, context);
1100 g_source_unref(&iwp->parent);
1101 return tag;
1102 }
1103
1104 static void io_remove_watch_poll(guint tag)
1105 {
1106 GSource *source;
1107 IOWatchPoll *iwp;
1108
1109 g_return_if_fail (tag > 0);
1110
1111 source = g_main_context_find_source_by_id(NULL, tag);
1112 g_return_if_fail (source != NULL);
1113
1114 iwp = io_watch_poll_from_source(source);
1115 if (iwp->src) {
1116 g_source_destroy(iwp->src);
1117 g_source_unref(iwp->src);
1118 iwp->src = NULL;
1119 }
1120 g_source_destroy(&iwp->parent);
1121 }
1122
1123 static void remove_fd_in_watch(CharDriverState *chr)
1124 {
1125 if (chr->fd_in_tag) {
1126 io_remove_watch_poll(chr->fd_in_tag);
1127 chr->fd_in_tag = 0;
1128 }
1129 }
1130
1131
1132 static int io_channel_send_full(QIOChannel *ioc,
1133 const void *buf, size_t len,
1134 int *fds, size_t nfds)
1135 {
1136 size_t offset = 0;
1137
1138 while (offset < len) {
1139 ssize_t ret = 0;
1140 struct iovec iov = { .iov_base = (char *)buf + offset,
1141 .iov_len = len - offset };
1142
1143 ret = qio_channel_writev_full(
1144 ioc, &iov, 1,
1145 fds, nfds, NULL);
1146 if (ret == QIO_CHANNEL_ERR_BLOCK) {
1147 if (offset) {
1148 return offset;
1149 }
1150
1151 errno = EAGAIN;
1152 return -1;
1153 } else if (ret < 0) {
1154 errno = EINVAL;
1155 return -1;
1156 }
1157
1158 offset += ret;
1159 }
1160
1161 return offset;
1162 }
1163
1164
1165 #ifndef _WIN32
1166 static int io_channel_send(QIOChannel *ioc, const void *buf, size_t len)
1167 {
1168 return io_channel_send_full(ioc, buf, len, NULL, 0);
1169 }
1170
1171
1172 typedef struct FDCharDriver {
1173 CharDriverState *chr;
1174 QIOChannel *ioc_in, *ioc_out;
1175 int max_size;
1176 } FDCharDriver;
1177
1178 /* Called with chr_write_lock held. */
1179 static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1180 {
1181 FDCharDriver *s = chr->opaque;
1182
1183 return io_channel_send(s->ioc_out, buf, len);
1184 }
1185
1186 static gboolean fd_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
1187 {
1188 CharDriverState *chr = opaque;
1189 FDCharDriver *s = chr->opaque;
1190 int len;
1191 uint8_t buf[READ_BUF_LEN];
1192 ssize_t ret;
1193
1194 len = sizeof(buf);
1195 if (len > s->max_size) {
1196 len = s->max_size;
1197 }
1198 if (len == 0) {
1199 return TRUE;
1200 }
1201
1202 ret = qio_channel_read(
1203 chan, (gchar *)buf, len, NULL);
1204 if (ret == 0) {
1205 remove_fd_in_watch(chr);
1206 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1207 return FALSE;
1208 }
1209 if (ret > 0) {
1210 qemu_chr_be_write(chr, buf, ret);
1211 }
1212
1213 return TRUE;
1214 }
1215
1216 static int fd_chr_read_poll(void *opaque)
1217 {
1218 CharDriverState *chr = opaque;
1219 FDCharDriver *s = chr->opaque;
1220
1221 s->max_size = qemu_chr_be_can_write(chr);
1222 return s->max_size;
1223 }
1224
1225 static GSource *fd_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1226 {
1227 FDCharDriver *s = chr->opaque;
1228 return qio_channel_create_watch(s->ioc_out, cond);
1229 }
1230
1231 static void fd_chr_update_read_handler(CharDriverState *chr,
1232 GMainContext *context)
1233 {
1234 FDCharDriver *s = chr->opaque;
1235
1236 remove_fd_in_watch(chr);
1237 if (s->ioc_in) {
1238 chr->fd_in_tag = io_add_watch_poll(s->ioc_in,
1239 fd_chr_read_poll,
1240 fd_chr_read, chr,
1241 context);
1242 }
1243 }
1244
1245 static void fd_chr_free(struct CharDriverState *chr)
1246 {
1247 FDCharDriver *s = chr->opaque;
1248
1249 remove_fd_in_watch(chr);
1250 if (s->ioc_in) {
1251 object_unref(OBJECT(s->ioc_in));
1252 }
1253 if (s->ioc_out) {
1254 object_unref(OBJECT(s->ioc_out));
1255 }
1256
1257 g_free(s);
1258 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1259 }
1260
1261 /* open a character device to a unix fd */
1262 static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out,
1263 ChardevCommon *backend, Error **errp)
1264 {
1265 CharDriverState *chr;
1266 FDCharDriver *s;
1267
1268 chr = qemu_chr_alloc(backend, errp);
1269 if (!chr) {
1270 return NULL;
1271 }
1272 s = g_new0(FDCharDriver, 1);
1273 s->ioc_in = QIO_CHANNEL(qio_channel_file_new_fd(fd_in));
1274 s->ioc_out = QIO_CHANNEL(qio_channel_file_new_fd(fd_out));
1275 qemu_set_nonblock(fd_out);
1276 s->chr = chr;
1277 chr->opaque = s;
1278 chr->chr_add_watch = fd_chr_add_watch;
1279 chr->chr_write = fd_chr_write;
1280 chr->chr_update_read_handler = fd_chr_update_read_handler;
1281 chr->chr_free = fd_chr_free;
1282
1283 return chr;
1284 }
1285
1286 static CharDriverState *qemu_chr_open_pipe(const char *id,
1287 ChardevBackend *backend,
1288 ChardevReturn *ret,
1289 Error **errp)
1290 {
1291 ChardevHostdev *opts = backend->u.pipe.data;
1292 int fd_in, fd_out;
1293 char *filename_in;
1294 char *filename_out;
1295 const char *filename = opts->device;
1296 ChardevCommon *common = qapi_ChardevHostdev_base(opts);
1297
1298
1299 filename_in = g_strdup_printf("%s.in", filename);
1300 filename_out = g_strdup_printf("%s.out", filename);
1301 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
1302 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
1303 g_free(filename_in);
1304 g_free(filename_out);
1305 if (fd_in < 0 || fd_out < 0) {
1306 if (fd_in >= 0)
1307 close(fd_in);
1308 if (fd_out >= 0)
1309 close(fd_out);
1310 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
1311 if (fd_in < 0) {
1312 error_setg_file_open(errp, errno, filename);
1313 return NULL;
1314 }
1315 }
1316 return qemu_chr_open_fd(fd_in, fd_out, common, errp);
1317 }
1318
1319 /* init terminal so that we can grab keys */
1320 static struct termios oldtty;
1321 static int old_fd0_flags;
1322 static bool stdio_in_use;
1323 static bool stdio_allow_signal;
1324 static bool stdio_echo_state;
1325
1326 static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo);
1327
1328 static void term_exit(void)
1329 {
1330 tcsetattr (0, TCSANOW, &oldtty);
1331 fcntl(0, F_SETFL, old_fd0_flags);
1332 }
1333
1334 static void term_stdio_handler(int sig)
1335 {
1336 /* restore echo after resume from suspend. */
1337 qemu_chr_set_echo_stdio(NULL, stdio_echo_state);
1338 }
1339
1340 static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
1341 {
1342 struct termios tty;
1343
1344 stdio_echo_state = echo;
1345 tty = oldtty;
1346 if (!echo) {
1347 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1348 |INLCR|IGNCR|ICRNL|IXON);
1349 tty.c_oflag |= OPOST;
1350 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
1351 tty.c_cflag &= ~(CSIZE|PARENB);
1352 tty.c_cflag |= CS8;
1353 tty.c_cc[VMIN] = 1;
1354 tty.c_cc[VTIME] = 0;
1355 }
1356 if (!stdio_allow_signal)
1357 tty.c_lflag &= ~ISIG;
1358
1359 tcsetattr (0, TCSANOW, &tty);
1360 }
1361
1362 static void qemu_chr_free_stdio(struct CharDriverState *chr)
1363 {
1364 term_exit();
1365 fd_chr_free(chr);
1366 }
1367
1368 static CharDriverState *qemu_chr_open_stdio(const char *id,
1369 ChardevBackend *backend,
1370 ChardevReturn *ret,
1371 Error **errp)
1372 {
1373 ChardevStdio *opts = backend->u.stdio.data;
1374 CharDriverState *chr;
1375 struct sigaction act;
1376 ChardevCommon *common = qapi_ChardevStdio_base(opts);
1377
1378 if (is_daemonized()) {
1379 error_setg(errp, "cannot use stdio with -daemonize");
1380 return NULL;
1381 }
1382
1383 if (stdio_in_use) {
1384 error_setg(errp, "cannot use stdio by multiple character devices");
1385 return NULL;
1386 }
1387
1388 stdio_in_use = true;
1389 old_fd0_flags = fcntl(0, F_GETFL);
1390 tcgetattr(0, &oldtty);
1391 qemu_set_nonblock(0);
1392 atexit(term_exit);
1393
1394 memset(&act, 0, sizeof(act));
1395 act.sa_handler = term_stdio_handler;
1396 sigaction(SIGCONT, &act, NULL);
1397
1398 chr = qemu_chr_open_fd(0, 1, common, errp);
1399 if (!chr) {
1400 return NULL;
1401 }
1402 chr->chr_free = qemu_chr_free_stdio;
1403 chr->chr_set_echo = qemu_chr_set_echo_stdio;
1404 if (opts->has_signal) {
1405 stdio_allow_signal = opts->signal;
1406 }
1407 qemu_chr_set_echo_stdio(chr, false);
1408
1409 return chr;
1410 }
1411
1412 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
1413 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
1414 || defined(__GLIBC__)
1415
1416 #define HAVE_CHARDEV_SERIAL 1
1417 #define HAVE_CHARDEV_PTY 1
1418
1419 typedef struct {
1420 QIOChannel *ioc;
1421 int read_bytes;
1422
1423 /* Protected by the CharDriverState chr_write_lock. */
1424 int connected;
1425 guint timer_tag;
1426 guint open_tag;
1427 } PtyCharDriver;
1428
1429 static void pty_chr_update_read_handler_locked(CharDriverState *chr);
1430 static void pty_chr_state(CharDriverState *chr, int connected);
1431
1432 static gboolean pty_chr_timer(gpointer opaque)
1433 {
1434 struct CharDriverState *chr = opaque;
1435 PtyCharDriver *s = chr->opaque;
1436
1437 qemu_mutex_lock(&chr->chr_write_lock);
1438 s->timer_tag = 0;
1439 s->open_tag = 0;
1440 if (!s->connected) {
1441 /* Next poll ... */
1442 pty_chr_update_read_handler_locked(chr);
1443 }
1444 qemu_mutex_unlock(&chr->chr_write_lock);
1445 return FALSE;
1446 }
1447
1448 /* Called with chr_write_lock held. */
1449 static void pty_chr_rearm_timer(CharDriverState *chr, int ms)
1450 {
1451 PtyCharDriver *s = chr->opaque;
1452
1453 if (s->timer_tag) {
1454 g_source_remove(s->timer_tag);
1455 s->timer_tag = 0;
1456 }
1457
1458 if (ms == 1000) {
1459 s->timer_tag = g_timeout_add_seconds(1, pty_chr_timer, chr);
1460 } else {
1461 s->timer_tag = g_timeout_add(ms, pty_chr_timer, chr);
1462 }
1463 }
1464
1465 /* Called with chr_write_lock held. */
1466 static void pty_chr_update_read_handler_locked(CharDriverState *chr)
1467 {
1468 PtyCharDriver *s = chr->opaque;
1469 GPollFD pfd;
1470 int rc;
1471 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc);
1472
1473 pfd.fd = fioc->fd;
1474 pfd.events = G_IO_OUT;
1475 pfd.revents = 0;
1476 do {
1477 rc = g_poll(&pfd, 1, 0);
1478 } while (rc == -1 && errno == EINTR);
1479 assert(rc >= 0);
1480
1481 if (pfd.revents & G_IO_HUP) {
1482 pty_chr_state(chr, 0);
1483 } else {
1484 pty_chr_state(chr, 1);
1485 }
1486 }
1487
1488 static void pty_chr_update_read_handler(CharDriverState *chr,
1489 GMainContext *context)
1490 {
1491 qemu_mutex_lock(&chr->chr_write_lock);
1492 pty_chr_update_read_handler_locked(chr);
1493 qemu_mutex_unlock(&chr->chr_write_lock);
1494 }
1495
1496 /* Called with chr_write_lock held. */
1497 static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1498 {
1499 PtyCharDriver *s = chr->opaque;
1500
1501 if (!s->connected) {
1502 /* guest sends data, check for (re-)connect */
1503 pty_chr_update_read_handler_locked(chr);
1504 if (!s->connected) {
1505 return 0;
1506 }
1507 }
1508 return io_channel_send(s->ioc, buf, len);
1509 }
1510
1511 static GSource *pty_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1512 {
1513 PtyCharDriver *s = chr->opaque;
1514 if (!s->connected) {
1515 return NULL;
1516 }
1517 return qio_channel_create_watch(s->ioc, cond);
1518 }
1519
1520 static int pty_chr_read_poll(void *opaque)
1521 {
1522 CharDriverState *chr = opaque;
1523 PtyCharDriver *s = chr->opaque;
1524
1525 s->read_bytes = qemu_chr_be_can_write(chr);
1526 return s->read_bytes;
1527 }
1528
1529 static gboolean pty_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
1530 {
1531 CharDriverState *chr = opaque;
1532 PtyCharDriver *s = chr->opaque;
1533 gsize len;
1534 uint8_t buf[READ_BUF_LEN];
1535 ssize_t ret;
1536
1537 len = sizeof(buf);
1538 if (len > s->read_bytes)
1539 len = s->read_bytes;
1540 if (len == 0) {
1541 return TRUE;
1542 }
1543 ret = qio_channel_read(s->ioc, (char *)buf, len, NULL);
1544 if (ret <= 0) {
1545 pty_chr_state(chr, 0);
1546 return FALSE;
1547 } else {
1548 pty_chr_state(chr, 1);
1549 qemu_chr_be_write(chr, buf, ret);
1550 }
1551 return TRUE;
1552 }
1553
1554 static gboolean qemu_chr_be_generic_open_func(gpointer opaque)
1555 {
1556 CharDriverState *chr = opaque;
1557 PtyCharDriver *s = chr->opaque;
1558
1559 s->open_tag = 0;
1560 qemu_chr_be_generic_open(chr);
1561 return FALSE;
1562 }
1563
1564 /* Called with chr_write_lock held. */
1565 static void pty_chr_state(CharDriverState *chr, int connected)
1566 {
1567 PtyCharDriver *s = chr->opaque;
1568
1569 if (!connected) {
1570 if (s->open_tag) {
1571 g_source_remove(s->open_tag);
1572 s->open_tag = 0;
1573 }
1574 remove_fd_in_watch(chr);
1575 s->connected = 0;
1576 /* (re-)connect poll interval for idle guests: once per second.
1577 * We check more frequently in case the guests sends data to
1578 * the virtual device linked to our pty. */
1579 pty_chr_rearm_timer(chr, 1000);
1580 } else {
1581 if (s->timer_tag) {
1582 g_source_remove(s->timer_tag);
1583 s->timer_tag = 0;
1584 }
1585 if (!s->connected) {
1586 g_assert(s->open_tag == 0);
1587 s->connected = 1;
1588 s->open_tag = g_idle_add(qemu_chr_be_generic_open_func, chr);
1589 }
1590 if (!chr->fd_in_tag) {
1591 chr->fd_in_tag = io_add_watch_poll(s->ioc,
1592 pty_chr_read_poll,
1593 pty_chr_read,
1594 chr, NULL);
1595 }
1596 }
1597 }
1598
1599 static void pty_chr_free(struct CharDriverState *chr)
1600 {
1601 PtyCharDriver *s = chr->opaque;
1602
1603 qemu_mutex_lock(&chr->chr_write_lock);
1604 pty_chr_state(chr, 0);
1605 object_unref(OBJECT(s->ioc));
1606 if (s->timer_tag) {
1607 g_source_remove(s->timer_tag);
1608 s->timer_tag = 0;
1609 }
1610 qemu_mutex_unlock(&chr->chr_write_lock);
1611 g_free(s);
1612 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1613 }
1614
1615 static CharDriverState *qemu_chr_open_pty(const char *id,
1616 ChardevBackend *backend,
1617 ChardevReturn *ret,
1618 Error **errp)
1619 {
1620 CharDriverState *chr;
1621 PtyCharDriver *s;
1622 int master_fd, slave_fd;
1623 char pty_name[PATH_MAX];
1624 ChardevCommon *common = backend->u.pty.data;
1625
1626 master_fd = qemu_openpty_raw(&slave_fd, pty_name);
1627 if (master_fd < 0) {
1628 error_setg_errno(errp, errno, "Failed to create PTY");
1629 return NULL;
1630 }
1631
1632 close(slave_fd);
1633 qemu_set_nonblock(master_fd);
1634
1635 chr = qemu_chr_alloc(common, errp);
1636 if (!chr) {
1637 close(master_fd);
1638 return NULL;
1639 }
1640
1641 chr->filename = g_strdup_printf("pty:%s", pty_name);
1642 ret->pty = g_strdup(pty_name);
1643 ret->has_pty = true;
1644
1645 fprintf(stderr, "char device redirected to %s (label %s)\n",
1646 pty_name, id);
1647
1648 s = g_new0(PtyCharDriver, 1);
1649 chr->opaque = s;
1650 chr->chr_write = pty_chr_write;
1651 chr->chr_update_read_handler = pty_chr_update_read_handler;
1652 chr->chr_free = pty_chr_free;
1653 chr->chr_add_watch = pty_chr_add_watch;
1654 chr->explicit_be_open = true;
1655
1656 s->ioc = QIO_CHANNEL(qio_channel_file_new_fd(master_fd));
1657 s->timer_tag = 0;
1658
1659 return chr;
1660 }
1661
1662 static void tty_serial_init(int fd, int speed,
1663 int parity, int data_bits, int stop_bits)
1664 {
1665 struct termios tty;
1666 speed_t spd;
1667
1668 #if 0
1669 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1670 speed, parity, data_bits, stop_bits);
1671 #endif
1672 tcgetattr (fd, &tty);
1673
1674 #define check_speed(val) if (speed <= val) { spd = B##val; break; }
1675 speed = speed * 10 / 11;
1676 do {
1677 check_speed(50);
1678 check_speed(75);
1679 check_speed(110);
1680 check_speed(134);
1681 check_speed(150);
1682 check_speed(200);
1683 check_speed(300);
1684 check_speed(600);
1685 check_speed(1200);
1686 check_speed(1800);
1687 check_speed(2400);
1688 check_speed(4800);
1689 check_speed(9600);
1690 check_speed(19200);
1691 check_speed(38400);
1692 /* Non-Posix values follow. They may be unsupported on some systems. */
1693 check_speed(57600);
1694 check_speed(115200);
1695 #ifdef B230400
1696 check_speed(230400);
1697 #endif
1698 #ifdef B460800
1699 check_speed(460800);
1700 #endif
1701 #ifdef B500000
1702 check_speed(500000);
1703 #endif
1704 #ifdef B576000
1705 check_speed(576000);
1706 #endif
1707 #ifdef B921600
1708 check_speed(921600);
1709 #endif
1710 #ifdef B1000000
1711 check_speed(1000000);
1712 #endif
1713 #ifdef B1152000
1714 check_speed(1152000);
1715 #endif
1716 #ifdef B1500000
1717 check_speed(1500000);
1718 #endif
1719 #ifdef B2000000
1720 check_speed(2000000);
1721 #endif
1722 #ifdef B2500000
1723 check_speed(2500000);
1724 #endif
1725 #ifdef B3000000
1726 check_speed(3000000);
1727 #endif
1728 #ifdef B3500000
1729 check_speed(3500000);
1730 #endif
1731 #ifdef B4000000
1732 check_speed(4000000);
1733 #endif
1734 spd = B115200;
1735 } while (0);
1736
1737 cfsetispeed(&tty, spd);
1738 cfsetospeed(&tty, spd);
1739
1740 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1741 |INLCR|IGNCR|ICRNL|IXON);
1742 tty.c_oflag |= OPOST;
1743 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1744 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1745 switch(data_bits) {
1746 default:
1747 case 8:
1748 tty.c_cflag |= CS8;
1749 break;
1750 case 7:
1751 tty.c_cflag |= CS7;
1752 break;
1753 case 6:
1754 tty.c_cflag |= CS6;
1755 break;
1756 case 5:
1757 tty.c_cflag |= CS5;
1758 break;
1759 }
1760 switch(parity) {
1761 default:
1762 case 'N':
1763 break;
1764 case 'E':
1765 tty.c_cflag |= PARENB;
1766 break;
1767 case 'O':
1768 tty.c_cflag |= PARENB | PARODD;
1769 break;
1770 }
1771 if (stop_bits == 2)
1772 tty.c_cflag |= CSTOPB;
1773
1774 tcsetattr (fd, TCSANOW, &tty);
1775 }
1776
1777 static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1778 {
1779 FDCharDriver *s = chr->opaque;
1780 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc_in);
1781
1782 switch(cmd) {
1783 case CHR_IOCTL_SERIAL_SET_PARAMS:
1784 {
1785 QEMUSerialSetParams *ssp = arg;
1786 tty_serial_init(fioc->fd,
1787 ssp->speed, ssp->parity,
1788 ssp->data_bits, ssp->stop_bits);
1789 }
1790 break;
1791 case CHR_IOCTL_SERIAL_SET_BREAK:
1792 {
1793 int enable = *(int *)arg;
1794 if (enable) {
1795 tcsendbreak(fioc->fd, 1);
1796 }
1797 }
1798 break;
1799 case CHR_IOCTL_SERIAL_GET_TIOCM:
1800 {
1801 int sarg = 0;
1802 int *targ = (int *)arg;
1803 ioctl(fioc->fd, TIOCMGET, &sarg);
1804 *targ = 0;
1805 if (sarg & TIOCM_CTS)
1806 *targ |= CHR_TIOCM_CTS;
1807 if (sarg & TIOCM_CAR)
1808 *targ |= CHR_TIOCM_CAR;
1809 if (sarg & TIOCM_DSR)
1810 *targ |= CHR_TIOCM_DSR;
1811 if (sarg & TIOCM_RI)
1812 *targ |= CHR_TIOCM_RI;
1813 if (sarg & TIOCM_DTR)
1814 *targ |= CHR_TIOCM_DTR;
1815 if (sarg & TIOCM_RTS)
1816 *targ |= CHR_TIOCM_RTS;
1817 }
1818 break;
1819 case CHR_IOCTL_SERIAL_SET_TIOCM:
1820 {
1821 int sarg = *(int *)arg;
1822 int targ = 0;
1823 ioctl(fioc->fd, TIOCMGET, &targ);
1824 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1825 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1826 if (sarg & CHR_TIOCM_CTS)
1827 targ |= TIOCM_CTS;
1828 if (sarg & CHR_TIOCM_CAR)
1829 targ |= TIOCM_CAR;
1830 if (sarg & CHR_TIOCM_DSR)
1831 targ |= TIOCM_DSR;
1832 if (sarg & CHR_TIOCM_RI)
1833 targ |= TIOCM_RI;
1834 if (sarg & CHR_TIOCM_DTR)
1835 targ |= TIOCM_DTR;
1836 if (sarg & CHR_TIOCM_RTS)
1837 targ |= TIOCM_RTS;
1838 ioctl(fioc->fd, TIOCMSET, &targ);
1839 }
1840 break;
1841 default:
1842 return -ENOTSUP;
1843 }
1844 return 0;
1845 }
1846
1847 static void qemu_chr_free_tty(CharDriverState *chr)
1848 {
1849 fd_chr_free(chr);
1850 }
1851
1852 static CharDriverState *qemu_chr_open_tty_fd(int fd,
1853 ChardevCommon *backend,
1854 Error **errp)
1855 {
1856 CharDriverState *chr;
1857
1858 tty_serial_init(fd, 115200, 'N', 8, 1);
1859 chr = qemu_chr_open_fd(fd, fd, backend, errp);
1860 if (!chr) {
1861 return NULL;
1862 }
1863 chr->chr_ioctl = tty_serial_ioctl;
1864 chr->chr_free = qemu_chr_free_tty;
1865 return chr;
1866 }
1867 #endif /* __linux__ || __sun__ */
1868
1869 #if defined(__linux__)
1870
1871 #define HAVE_CHARDEV_PARPORT 1
1872
1873 typedef struct {
1874 int fd;
1875 int mode;
1876 } ParallelCharDriver;
1877
1878 static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1879 {
1880 if (s->mode != mode) {
1881 int m = mode;
1882 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1883 return 0;
1884 s->mode = mode;
1885 }
1886 return 1;
1887 }
1888
1889 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1890 {
1891 ParallelCharDriver *drv = chr->opaque;
1892 int fd = drv->fd;
1893 uint8_t b;
1894
1895 switch(cmd) {
1896 case CHR_IOCTL_PP_READ_DATA:
1897 if (ioctl(fd, PPRDATA, &b) < 0)
1898 return -ENOTSUP;
1899 *(uint8_t *)arg = b;
1900 break;
1901 case CHR_IOCTL_PP_WRITE_DATA:
1902 b = *(uint8_t *)arg;
1903 if (ioctl(fd, PPWDATA, &b) < 0)
1904 return -ENOTSUP;
1905 break;
1906 case CHR_IOCTL_PP_READ_CONTROL:
1907 if (ioctl(fd, PPRCONTROL, &b) < 0)
1908 return -ENOTSUP;
1909 /* Linux gives only the lowest bits, and no way to know data
1910 direction! For better compatibility set the fixed upper
1911 bits. */
1912 *(uint8_t *)arg = b | 0xc0;
1913 break;
1914 case CHR_IOCTL_PP_WRITE_CONTROL:
1915 b = *(uint8_t *)arg;
1916 if (ioctl(fd, PPWCONTROL, &b) < 0)
1917 return -ENOTSUP;
1918 break;
1919 case CHR_IOCTL_PP_READ_STATUS:
1920 if (ioctl(fd, PPRSTATUS, &b) < 0)
1921 return -ENOTSUP;
1922 *(uint8_t *)arg = b;
1923 break;
1924 case CHR_IOCTL_PP_DATA_DIR:
1925 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1926 return -ENOTSUP;
1927 break;
1928 case CHR_IOCTL_PP_EPP_READ_ADDR:
1929 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1930 struct ParallelIOArg *parg = arg;
1931 int n = read(fd, parg->buffer, parg->count);
1932 if (n != parg->count) {
1933 return -EIO;
1934 }
1935 }
1936 break;
1937 case CHR_IOCTL_PP_EPP_READ:
1938 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1939 struct ParallelIOArg *parg = arg;
1940 int n = read(fd, parg->buffer, parg->count);
1941 if (n != parg->count) {
1942 return -EIO;
1943 }
1944 }
1945 break;
1946 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1947 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1948 struct ParallelIOArg *parg = arg;
1949 int n = write(fd, parg->buffer, parg->count);
1950 if (n != parg->count) {
1951 return -EIO;
1952 }
1953 }
1954 break;
1955 case CHR_IOCTL_PP_EPP_WRITE:
1956 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1957 struct ParallelIOArg *parg = arg;
1958 int n = write(fd, parg->buffer, parg->count);
1959 if (n != parg->count) {
1960 return -EIO;
1961 }
1962 }
1963 break;
1964 default:
1965 return -ENOTSUP;
1966 }
1967 return 0;
1968 }
1969
1970 static void pp_free(CharDriverState *chr)
1971 {
1972 ParallelCharDriver *drv = chr->opaque;
1973 int fd = drv->fd;
1974
1975 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1976 ioctl(fd, PPRELEASE);
1977 close(fd);
1978 g_free(drv);
1979 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1980 }
1981
1982 static CharDriverState *qemu_chr_open_pp_fd(int fd,
1983 ChardevCommon *backend,
1984 Error **errp)
1985 {
1986 CharDriverState *chr;
1987 ParallelCharDriver *drv;
1988
1989 if (ioctl(fd, PPCLAIM) < 0) {
1990 error_setg_errno(errp, errno, "not a parallel port");
1991 close(fd);
1992 return NULL;
1993 }
1994
1995 chr = qemu_chr_alloc(backend, errp);
1996 if (!chr) {
1997 return NULL;
1998 }
1999
2000 drv = g_new0(ParallelCharDriver, 1);
2001 chr->opaque = drv;
2002 chr->chr_write = null_chr_write;
2003 chr->chr_ioctl = pp_ioctl;
2004 chr->chr_free = pp_free;
2005
2006 drv->fd = fd;
2007 drv->mode = IEEE1284_MODE_COMPAT;
2008
2009 return chr;
2010 }
2011 #endif /* __linux__ */
2012
2013 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
2014
2015 #define HAVE_CHARDEV_PARPORT 1
2016
2017 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
2018 {
2019 int fd = (int)(intptr_t)chr->opaque;
2020 uint8_t b;
2021
2022 switch(cmd) {
2023 case CHR_IOCTL_PP_READ_DATA:
2024 if (ioctl(fd, PPIGDATA, &b) < 0)
2025 return -ENOTSUP;
2026 *(uint8_t *)arg = b;
2027 break;
2028 case CHR_IOCTL_PP_WRITE_DATA:
2029 b = *(uint8_t *)arg;
2030 if (ioctl(fd, PPISDATA, &b) < 0)
2031 return -ENOTSUP;
2032 break;
2033 case CHR_IOCTL_PP_READ_CONTROL:
2034 if (ioctl(fd, PPIGCTRL, &b) < 0)
2035 return -ENOTSUP;
2036 *(uint8_t *)arg = b;
2037 break;
2038 case CHR_IOCTL_PP_WRITE_CONTROL:
2039 b = *(uint8_t *)arg;
2040 if (ioctl(fd, PPISCTRL, &b) < 0)
2041 return -ENOTSUP;
2042 break;
2043 case CHR_IOCTL_PP_READ_STATUS:
2044 if (ioctl(fd, PPIGSTATUS, &b) < 0)
2045 return -ENOTSUP;
2046 *(uint8_t *)arg = b;
2047 break;
2048 default:
2049 return -ENOTSUP;
2050 }
2051 return 0;
2052 }
2053
2054 static CharDriverState *qemu_chr_open_pp_fd(int fd,
2055 ChardevCommon *backend,
2056 Error **errp)
2057 {
2058 CharDriverState *chr;
2059
2060 chr = qemu_chr_alloc(backend, errp);
2061 if (!chr) {
2062 return NULL;
2063 }
2064 chr->opaque = (void *)(intptr_t)fd;
2065 chr->chr_write = null_chr_write;
2066 chr->chr_ioctl = pp_ioctl;
2067 chr->explicit_be_open = true;
2068 return chr;
2069 }
2070 #endif
2071
2072 #else /* _WIN32 */
2073
2074 #define HAVE_CHARDEV_SERIAL 1
2075
2076 typedef struct {
2077 int max_size;
2078 HANDLE hcom, hrecv, hsend;
2079 OVERLAPPED orecv;
2080 BOOL fpipe;
2081 DWORD len;
2082
2083 /* Protected by the CharDriverState chr_write_lock. */
2084 OVERLAPPED osend;
2085 } WinCharState;
2086
2087 typedef struct {
2088 HANDLE hStdIn;
2089 HANDLE hInputReadyEvent;
2090 HANDLE hInputDoneEvent;
2091 HANDLE hInputThread;
2092 uint8_t win_stdio_buf;
2093 } WinStdioCharState;
2094
2095 #define NSENDBUF 2048
2096 #define NRECVBUF 2048
2097 #define MAXCONNECT 1
2098 #define NTIMEOUT 5000
2099
2100 static int win_chr_poll(void *opaque);
2101 static int win_chr_pipe_poll(void *opaque);
2102
2103 static void win_chr_free(CharDriverState *chr)
2104 {
2105 WinCharState *s = chr->opaque;
2106
2107 if (s->hsend) {
2108 CloseHandle(s->hsend);
2109 s->hsend = NULL;
2110 }
2111 if (s->hrecv) {
2112 CloseHandle(s->hrecv);
2113 s->hrecv = NULL;
2114 }
2115 if (s->hcom) {
2116 CloseHandle(s->hcom);
2117 s->hcom = NULL;
2118 }
2119 if (s->fpipe)
2120 qemu_del_polling_cb(win_chr_pipe_poll, chr);
2121 else
2122 qemu_del_polling_cb(win_chr_poll, chr);
2123
2124 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2125 }
2126
2127 static int win_chr_init(CharDriverState *chr, const char *filename, Error **errp)
2128 {
2129 WinCharState *s = chr->opaque;
2130 COMMCONFIG comcfg;
2131 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
2132 COMSTAT comstat;
2133 DWORD size;
2134 DWORD err;
2135
2136 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2137 if (!s->hsend) {
2138 error_setg(errp, "Failed CreateEvent");
2139 goto fail;
2140 }
2141 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
2142 if (!s->hrecv) {
2143 error_setg(errp, "Failed CreateEvent");
2144 goto fail;
2145 }
2146
2147 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
2148 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
2149 if (s->hcom == INVALID_HANDLE_VALUE) {
2150 error_setg(errp, "Failed CreateFile (%lu)", GetLastError());
2151 s->hcom = NULL;
2152 goto fail;
2153 }
2154
2155 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
2156 error_setg(errp, "Failed SetupComm");
2157 goto fail;
2158 }
2159
2160 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
2161 size = sizeof(COMMCONFIG);
2162 GetDefaultCommConfig(filename, &comcfg, &size);
2163 comcfg.dcb.DCBlength = sizeof(DCB);
2164 CommConfigDialog(filename, NULL, &comcfg);
2165
2166 if (!SetCommState(s->hcom, &comcfg.dcb)) {
2167 error_setg(errp, "Failed SetCommState");
2168 goto fail;
2169 }
2170
2171 if (!SetCommMask(s->hcom, EV_ERR)) {
2172 error_setg(errp, "Failed SetCommMask");
2173 goto fail;
2174 }
2175
2176 cto.ReadIntervalTimeout = MAXDWORD;
2177 if (!SetCommTimeouts(s->hcom, &cto)) {
2178 error_setg(errp, "Failed SetCommTimeouts");
2179 goto fail;
2180 }
2181
2182 if (!ClearCommError(s->hcom, &err, &comstat)) {
2183 error_setg(errp, "Failed ClearCommError");
2184 goto fail;
2185 }
2186 qemu_add_polling_cb(win_chr_poll, chr);
2187 return 0;
2188
2189 fail:
2190 win_chr_free(chr);
2191 return -1;
2192 }
2193
2194 /* Called with chr_write_lock held. */
2195 static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
2196 {
2197 WinCharState *s = chr->opaque;
2198 DWORD len, ret, size, err;
2199
2200 len = len1;
2201 ZeroMemory(&s->osend, sizeof(s->osend));
2202 s->osend.hEvent = s->hsend;
2203 while (len > 0) {
2204 if (s->hsend)
2205 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
2206 else
2207 ret = WriteFile(s->hcom, buf, len, &size, NULL);
2208 if (!ret) {
2209 err = GetLastError();
2210 if (err == ERROR_IO_PENDING) {
2211 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
2212 if (ret) {
2213 buf += size;
2214 len -= size;
2215 } else {
2216 break;
2217 }
2218 } else {
2219 break;
2220 }
2221 } else {
2222 buf += size;
2223 len -= size;
2224 }
2225 }
2226 return len1 - len;
2227 }
2228
2229 static int win_chr_read_poll(CharDriverState *chr)
2230 {
2231 WinCharState *s = chr->opaque;
2232
2233 s->max_size = qemu_chr_be_can_write(chr);
2234 return s->max_size;
2235 }
2236
2237 static void win_chr_readfile(CharDriverState *chr)
2238 {
2239 WinCharState *s = chr->opaque;
2240 int ret, err;
2241 uint8_t buf[READ_BUF_LEN];
2242 DWORD size;
2243
2244 ZeroMemory(&s->orecv, sizeof(s->orecv));
2245 s->orecv.hEvent = s->hrecv;
2246 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
2247 if (!ret) {
2248 err = GetLastError();
2249 if (err == ERROR_IO_PENDING) {
2250 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
2251 }
2252 }
2253
2254 if (size > 0) {
2255 qemu_chr_be_write(chr, buf, size);
2256 }
2257 }
2258
2259 static void win_chr_read(CharDriverState *chr)
2260 {
2261 WinCharState *s = chr->opaque;
2262
2263 if (s->len > s->max_size)
2264 s->len = s->max_size;
2265 if (s->len == 0)
2266 return;
2267
2268 win_chr_readfile(chr);
2269 }
2270
2271 static int win_chr_poll(void *opaque)
2272 {
2273 CharDriverState *chr = opaque;
2274 WinCharState *s = chr->opaque;
2275 COMSTAT status;
2276 DWORD comerr;
2277
2278 ClearCommError(s->hcom, &comerr, &status);
2279 if (status.cbInQue > 0) {
2280 s->len = status.cbInQue;
2281 win_chr_read_poll(chr);
2282 win_chr_read(chr);
2283 return 1;
2284 }
2285 return 0;
2286 }
2287
2288 static CharDriverState *qemu_chr_open_win_path(const char *filename,
2289 ChardevCommon *backend,
2290 Error **errp)
2291 {
2292 CharDriverState *chr;
2293 WinCharState *s;
2294
2295 chr = qemu_chr_alloc(backend, errp);
2296 if (!chr) {
2297 return NULL;
2298 }
2299 s = g_new0(WinCharState, 1);
2300 chr->opaque = s;
2301 chr->chr_write = win_chr_write;
2302 chr->chr_free = win_chr_free;
2303
2304 if (win_chr_init(chr, filename, errp) < 0) {
2305 g_free(s);
2306 qemu_chr_free_common(chr);
2307 return NULL;
2308 }
2309 return chr;
2310 }
2311
2312 static int win_chr_pipe_poll(void *opaque)
2313 {
2314 CharDriverState *chr = opaque;
2315 WinCharState *s = chr->opaque;
2316 DWORD size;
2317
2318 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
2319 if (size > 0) {
2320 s->len = size;
2321 win_chr_read_poll(chr);
2322 win_chr_read(chr);
2323 return 1;
2324 }
2325 return 0;
2326 }
2327
2328 static int win_chr_pipe_init(CharDriverState *chr, const char *filename,
2329 Error **errp)
2330 {
2331 WinCharState *s = chr->opaque;
2332 OVERLAPPED ov;
2333 int ret;
2334 DWORD size;
2335 char *openname;
2336
2337 s->fpipe = TRUE;
2338
2339 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2340 if (!s->hsend) {
2341 error_setg(errp, "Failed CreateEvent");
2342 goto fail;
2343 }
2344 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
2345 if (!s->hrecv) {
2346 error_setg(errp, "Failed CreateEvent");
2347 goto fail;
2348 }
2349
2350 openname = g_strdup_printf("\\\\.\\pipe\\%s", filename);
2351 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
2352 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
2353 PIPE_WAIT,
2354 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
2355 g_free(openname);
2356 if (s->hcom == INVALID_HANDLE_VALUE) {
2357 error_setg(errp, "Failed CreateNamedPipe (%lu)", GetLastError());
2358 s->hcom = NULL;
2359 goto fail;
2360 }
2361
2362 ZeroMemory(&ov, sizeof(ov));
2363 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
2364 ret = ConnectNamedPipe(s->hcom, &ov);
2365 if (ret) {
2366 error_setg(errp, "Failed ConnectNamedPipe");
2367 goto fail;
2368 }
2369
2370 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
2371 if (!ret) {
2372 error_setg(errp, "Failed GetOverlappedResult");
2373 if (ov.hEvent) {
2374 CloseHandle(ov.hEvent);
2375 ov.hEvent = NULL;
2376 }
2377 goto fail;
2378 }
2379
2380 if (ov.hEvent) {
2381 CloseHandle(ov.hEvent);
2382 ov.hEvent = NULL;
2383 }
2384 qemu_add_polling_cb(win_chr_pipe_poll, chr);
2385 return 0;
2386
2387 fail:
2388 win_chr_free(chr);
2389 return -1;
2390 }
2391
2392
2393 static CharDriverState *qemu_chr_open_pipe(const char *id,
2394 ChardevBackend *backend,
2395 ChardevReturn *ret,
2396 Error **errp)
2397 {
2398 ChardevHostdev *opts = backend->u.pipe.data;
2399 const char *filename = opts->device;
2400 CharDriverState *chr;
2401 WinCharState *s;
2402 ChardevCommon *common = qapi_ChardevHostdev_base(opts);
2403
2404 chr = qemu_chr_alloc(common, errp);
2405 if (!chr) {
2406 return NULL;
2407 }
2408 s = g_new0(WinCharState, 1);
2409 chr->opaque = s;
2410 chr->chr_write = win_chr_write;
2411 chr->chr_free = win_chr_free;
2412
2413 if (win_chr_pipe_init(chr, filename, errp) < 0) {
2414 g_free(s);
2415 qemu_chr_free_common(chr);
2416 return NULL;
2417 }
2418 return chr;
2419 }
2420
2421 static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out,
2422 ChardevCommon *backend,
2423 Error **errp)
2424 {
2425 CharDriverState *chr;
2426 WinCharState *s;
2427
2428 chr = qemu_chr_alloc(backend, errp);
2429 if (!chr) {
2430 return NULL;
2431 }
2432 s = g_new0(WinCharState, 1);
2433 s->hcom = fd_out;
2434 chr->opaque = s;
2435 chr->chr_write = win_chr_write;
2436 return chr;
2437 }
2438
2439 static CharDriverState *qemu_chr_open_win_con(const char *id,
2440 ChardevBackend *backend,
2441 ChardevReturn *ret,
2442 Error **errp)
2443 {
2444 ChardevCommon *common = backend->u.console.data;
2445 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE),
2446 common, errp);
2447 }
2448
2449 static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
2450 {
2451 HANDLE hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
2452 DWORD dwSize;
2453 int len1;
2454
2455 len1 = len;
2456
2457 while (len1 > 0) {
2458 if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
2459 break;
2460 }
2461 buf += dwSize;
2462 len1 -= dwSize;
2463 }
2464
2465 return len - len1;
2466 }
2467
2468 static void win_stdio_wait_func(void *opaque)
2469 {
2470 CharDriverState *chr = opaque;
2471 WinStdioCharState *stdio = chr->opaque;
2472 INPUT_RECORD buf[4];
2473 int ret;
2474 DWORD dwSize;
2475 int i;
2476
2477 ret = ReadConsoleInput(stdio->hStdIn, buf, ARRAY_SIZE(buf), &dwSize);
2478
2479 if (!ret) {
2480 /* Avoid error storm */
2481 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2482 return;
2483 }
2484
2485 for (i = 0; i < dwSize; i++) {
2486 KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
2487
2488 if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
2489 int j;
2490 if (kev->uChar.AsciiChar != 0) {
2491 for (j = 0; j < kev->wRepeatCount; j++) {
2492 if (qemu_chr_be_can_write(chr)) {
2493 uint8_t c = kev->uChar.AsciiChar;
2494 qemu_chr_be_write(chr, &c, 1);
2495 }
2496 }
2497 }
2498 }
2499 }
2500 }
2501
2502 static DWORD WINAPI win_stdio_thread(LPVOID param)
2503 {
2504 CharDriverState *chr = param;
2505 WinStdioCharState *stdio = chr->opaque;
2506 int ret;
2507 DWORD dwSize;
2508
2509 while (1) {
2510
2511 /* Wait for one byte */
2512 ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
2513
2514 /* Exit in case of error, continue if nothing read */
2515 if (!ret) {
2516 break;
2517 }
2518 if (!dwSize) {
2519 continue;
2520 }
2521
2522 /* Some terminal emulator returns \r\n for Enter, just pass \n */
2523 if (stdio->win_stdio_buf == '\r') {
2524 continue;
2525 }
2526
2527 /* Signal the main thread and wait until the byte was eaten */
2528 if (!SetEvent(stdio->hInputReadyEvent)) {
2529 break;
2530 }
2531 if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
2532 != WAIT_OBJECT_0) {
2533 break;
2534 }
2535 }
2536
2537 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2538 return 0;
2539 }
2540
2541 static void win_stdio_thread_wait_func(void *opaque)
2542 {
2543 CharDriverState *chr = opaque;
2544 WinStdioCharState *stdio = chr->opaque;
2545
2546 if (qemu_chr_be_can_write(chr)) {
2547 qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
2548 }
2549
2550 SetEvent(stdio->hInputDoneEvent);
2551 }
2552
2553 static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
2554 {
2555 WinStdioCharState *stdio = chr->opaque;
2556 DWORD dwMode = 0;
2557
2558 GetConsoleMode(stdio->hStdIn, &dwMode);
2559
2560 if (echo) {
2561 SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
2562 } else {
2563 SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
2564 }
2565 }
2566
2567 static void win_stdio_free(CharDriverState *chr)
2568 {
2569 WinStdioCharState *stdio = chr->opaque;
2570
2571 if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
2572 CloseHandle(stdio->hInputReadyEvent);
2573 }
2574 if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
2575 CloseHandle(stdio->hInputDoneEvent);
2576 }
2577 if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
2578 TerminateThread(stdio->hInputThread, 0);
2579 }
2580
2581 g_free(chr->opaque);
2582 }
2583
2584 static CharDriverState *qemu_chr_open_stdio(const char *id,
2585 ChardevBackend *backend,
2586 ChardevReturn *ret,
2587 Error **errp)
2588 {
2589 CharDriverState *chr;
2590 WinStdioCharState *stdio;
2591 DWORD dwMode;
2592 int is_console = 0;
2593 ChardevCommon *common = qapi_ChardevStdio_base(backend->u.stdio.data);
2594
2595 chr = qemu_chr_alloc(common, errp);
2596 if (!chr) {
2597 return NULL;
2598 }
2599 stdio = g_new0(WinStdioCharState, 1);
2600
2601 stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
2602 if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
2603 error_setg(errp, "cannot open stdio: invalid handle");
2604 return NULL;
2605 }
2606
2607 is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
2608
2609 chr->opaque = stdio;
2610 chr->chr_write = win_stdio_write;
2611 chr->chr_free = win_stdio_free;
2612
2613 if (is_console) {
2614 if (qemu_add_wait_object(stdio->hStdIn,
2615 win_stdio_wait_func, chr)) {
2616 error_setg(errp, "qemu_add_wait_object: failed");
2617 goto err1;
2618 }
2619 } else {
2620 DWORD dwId;
2621
2622 stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2623 stdio->hInputDoneEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2624 if (stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
2625 || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
2626 error_setg(errp, "cannot create event");
2627 goto err2;
2628 }
2629 if (qemu_add_wait_object(stdio->hInputReadyEvent,
2630 win_stdio_thread_wait_func, chr)) {
2631 error_setg(errp, "qemu_add_wait_object: failed");
2632 goto err2;
2633 }
2634 stdio->hInputThread = CreateThread(NULL, 0, win_stdio_thread,
2635 chr, 0, &dwId);
2636
2637 if (stdio->hInputThread == INVALID_HANDLE_VALUE) {
2638 error_setg(errp, "cannot create stdio thread");
2639 goto err3;
2640 }
2641 }
2642
2643 dwMode |= ENABLE_LINE_INPUT;
2644
2645 if (is_console) {
2646 /* set the terminal in raw mode */
2647 /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2648 dwMode |= ENABLE_PROCESSED_INPUT;
2649 }
2650
2651 SetConsoleMode(stdio->hStdIn, dwMode);
2652
2653 chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2654 qemu_chr_set_echo_win_stdio(chr, false);
2655
2656 return chr;
2657
2658 err3:
2659 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2660 err2:
2661 CloseHandle(stdio->hInputReadyEvent);
2662 CloseHandle(stdio->hInputDoneEvent);
2663 err1:
2664 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2665 return NULL;
2666 }
2667 #endif /* !_WIN32 */
2668
2669 /***********************************************************/
2670 /* UDP Net console */
2671
2672 typedef struct {
2673 QIOChannel *ioc;
2674 uint8_t buf[READ_BUF_LEN];
2675 int bufcnt;
2676 int bufptr;
2677 int max_size;
2678 } NetCharDriver;
2679
2680 /* Called with chr_write_lock held. */
2681 static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2682 {
2683 NetCharDriver *s = chr->opaque;
2684
2685 return qio_channel_write(
2686 s->ioc, (const char *)buf, len, NULL);
2687 }
2688
2689 static int udp_chr_read_poll(void *opaque)
2690 {
2691 CharDriverState *chr = opaque;
2692 NetCharDriver *s = chr->opaque;
2693
2694 s->max_size = qemu_chr_be_can_write(chr);
2695
2696 /* If there were any stray characters in the queue process them
2697 * first
2698 */
2699 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2700 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2701 s->bufptr++;
2702 s->max_size = qemu_chr_be_can_write(chr);
2703 }
2704 return s->max_size;
2705 }
2706
2707 static gboolean udp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
2708 {
2709 CharDriverState *chr = opaque;
2710 NetCharDriver *s = chr->opaque;
2711 ssize_t ret;
2712
2713 if (s->max_size == 0) {
2714 return TRUE;
2715 }
2716 ret = qio_channel_read(
2717 s->ioc, (char *)s->buf, sizeof(s->buf), NULL);
2718 if (ret <= 0) {
2719 remove_fd_in_watch(chr);
2720 return FALSE;
2721 }
2722 s->bufcnt = ret;
2723
2724 s->bufptr = 0;
2725 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2726 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2727 s->bufptr++;
2728 s->max_size = qemu_chr_be_can_write(chr);
2729 }
2730
2731 return TRUE;
2732 }
2733
2734 static void udp_chr_update_read_handler(CharDriverState *chr,
2735 GMainContext *context)
2736 {
2737 NetCharDriver *s = chr->opaque;
2738
2739 remove_fd_in_watch(chr);
2740 if (s->ioc) {
2741 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2742 udp_chr_read_poll,
2743 udp_chr_read, chr,
2744 context);
2745 }
2746 }
2747
2748 static void udp_chr_free(CharDriverState *chr)
2749 {
2750 NetCharDriver *s = chr->opaque;
2751
2752 remove_fd_in_watch(chr);
2753 if (s->ioc) {
2754 object_unref(OBJECT(s->ioc));
2755 }
2756 g_free(s);
2757 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2758 }
2759
2760 static CharDriverState *qemu_chr_open_udp(QIOChannelSocket *sioc,
2761 ChardevCommon *backend,
2762 Error **errp)
2763 {
2764 CharDriverState *chr = NULL;
2765 NetCharDriver *s = NULL;
2766
2767 chr = qemu_chr_alloc(backend, errp);
2768 if (!chr) {
2769 return NULL;
2770 }
2771 s = g_new0(NetCharDriver, 1);
2772
2773 s->ioc = QIO_CHANNEL(sioc);
2774 s->bufcnt = 0;
2775 s->bufptr = 0;
2776 chr->opaque = s;
2777 chr->chr_write = udp_chr_write;
2778 chr->chr_update_read_handler = udp_chr_update_read_handler;
2779 chr->chr_free = udp_chr_free;
2780 /* be isn't opened until we get a connection */
2781 chr->explicit_be_open = true;
2782 return chr;
2783 }
2784
2785 /***********************************************************/
2786 /* TCP Net console */
2787
2788 typedef struct {
2789 QIOChannel *ioc; /* Client I/O channel */
2790 QIOChannelSocket *sioc; /* Client master channel */
2791 QIOChannelSocket *listen_ioc;
2792 guint listen_tag;
2793 QCryptoTLSCreds *tls_creds;
2794 int connected;
2795 int max_size;
2796 int do_telnetopt;
2797 int do_nodelay;
2798 int is_unix;
2799 int *read_msgfds;
2800 size_t read_msgfds_num;
2801 int *write_msgfds;
2802 size_t write_msgfds_num;
2803
2804 SocketAddress *addr;
2805 bool is_listen;
2806 bool is_telnet;
2807
2808 guint reconnect_timer;
2809 int64_t reconnect_time;
2810 bool connect_err_reported;
2811 } TCPCharDriver;
2812
2813 static gboolean socket_reconnect_timeout(gpointer opaque);
2814
2815 static void qemu_chr_socket_restart_timer(CharDriverState *chr)
2816 {
2817 TCPCharDriver *s = chr->opaque;
2818 assert(s->connected == 0);
2819 s->reconnect_timer = g_timeout_add_seconds(s->reconnect_time,
2820 socket_reconnect_timeout, chr);
2821 }
2822
2823 static void check_report_connect_error(CharDriverState *chr,
2824 Error *err)
2825 {
2826 TCPCharDriver *s = chr->opaque;
2827
2828 if (!s->connect_err_reported) {
2829 error_report("Unable to connect character device %s: %s",
2830 chr->label, error_get_pretty(err));
2831 s->connect_err_reported = true;
2832 }
2833 qemu_chr_socket_restart_timer(chr);
2834 }
2835
2836 static gboolean tcp_chr_accept(QIOChannel *chan,
2837 GIOCondition cond,
2838 void *opaque);
2839
2840 /* Called with chr_write_lock held. */
2841 static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2842 {
2843 TCPCharDriver *s = chr->opaque;
2844 if (s->connected) {
2845 int ret = io_channel_send_full(s->ioc, buf, len,
2846 s->write_msgfds,
2847 s->write_msgfds_num);
2848
2849 /* free the written msgfds, no matter what */
2850 if (s->write_msgfds_num) {
2851 g_free(s->write_msgfds);
2852 s->write_msgfds = 0;
2853 s->write_msgfds_num = 0;
2854 }
2855
2856 return ret;
2857 } else {
2858 /* XXX: indicate an error ? */
2859 return len;
2860 }
2861 }
2862
2863 static int tcp_chr_read_poll(void *opaque)
2864 {
2865 CharDriverState *chr = opaque;
2866 TCPCharDriver *s = chr->opaque;
2867 if (!s->connected)
2868 return 0;
2869 s->max_size = qemu_chr_be_can_write(chr);
2870 return s->max_size;
2871 }
2872
2873 #define IAC 255
2874 #define IAC_BREAK 243
2875 static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2876 TCPCharDriver *s,
2877 uint8_t *buf, int *size)
2878 {
2879 /* Handle any telnet client's basic IAC options to satisfy char by
2880 * char mode with no echo. All IAC options will be removed from
2881 * the buf and the do_telnetopt variable will be used to track the
2882 * state of the width of the IAC information.
2883 *
2884 * IAC commands come in sets of 3 bytes with the exception of the
2885 * "IAC BREAK" command and the double IAC.
2886 */
2887
2888 int i;
2889 int j = 0;
2890
2891 for (i = 0; i < *size; i++) {
2892 if (s->do_telnetopt > 1) {
2893 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2894 /* Double IAC means send an IAC */
2895 if (j != i)
2896 buf[j] = buf[i];
2897 j++;
2898 s->do_telnetopt = 1;
2899 } else {
2900 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2901 /* Handle IAC break commands by sending a serial break */
2902 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
2903 s->do_telnetopt++;
2904 }
2905 s->do_telnetopt++;
2906 }
2907 if (s->do_telnetopt >= 4) {
2908 s->do_telnetopt = 1;
2909 }
2910 } else {
2911 if ((unsigned char)buf[i] == IAC) {
2912 s->do_telnetopt = 2;
2913 } else {
2914 if (j != i)
2915 buf[j] = buf[i];
2916 j++;
2917 }
2918 }
2919 }
2920 *size = j;
2921 }
2922
2923 static int tcp_get_msgfds(CharDriverState *chr, int *fds, int num)
2924 {
2925 TCPCharDriver *s = chr->opaque;
2926 int to_copy = (s->read_msgfds_num < num) ? s->read_msgfds_num : num;
2927
2928 assert(num <= TCP_MAX_FDS);
2929
2930 if (to_copy) {
2931 int i;
2932
2933 memcpy(fds, s->read_msgfds, to_copy * sizeof(int));
2934
2935 /* Close unused fds */
2936 for (i = to_copy; i < s->read_msgfds_num; i++) {
2937 close(s->read_msgfds[i]);
2938 }
2939
2940 g_free(s->read_msgfds);
2941 s->read_msgfds = 0;
2942 s->read_msgfds_num = 0;
2943 }
2944
2945 return to_copy;
2946 }
2947
2948 static int tcp_set_msgfds(CharDriverState *chr, int *fds, int num)
2949 {
2950 TCPCharDriver *s = chr->opaque;
2951
2952 /* clear old pending fd array */
2953 g_free(s->write_msgfds);
2954 s->write_msgfds = NULL;
2955 s->write_msgfds_num = 0;
2956
2957 if (!s->connected ||
2958 !qio_channel_has_feature(s->ioc,
2959 QIO_CHANNEL_FEATURE_FD_PASS)) {
2960 return -1;
2961 }
2962
2963 if (num) {
2964 s->write_msgfds = g_new(int, num);
2965 memcpy(s->write_msgfds, fds, num * sizeof(int));
2966 }
2967
2968 s->write_msgfds_num = num;
2969
2970 return 0;
2971 }
2972
2973 static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2974 {
2975 TCPCharDriver *s = chr->opaque;
2976 struct iovec iov = { .iov_base = buf, .iov_len = len };
2977 int ret;
2978 size_t i;
2979 int *msgfds = NULL;
2980 size_t msgfds_num = 0;
2981
2982 if (qio_channel_has_feature(s->ioc, QIO_CHANNEL_FEATURE_FD_PASS)) {
2983 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2984 &msgfds, &msgfds_num,
2985 NULL);
2986 } else {
2987 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2988 NULL, NULL,
2989 NULL);
2990 }
2991
2992 if (ret == QIO_CHANNEL_ERR_BLOCK) {
2993 errno = EAGAIN;
2994 ret = -1;
2995 } else if (ret == -1) {
2996 errno = EIO;
2997 }
2998
2999 if (msgfds_num) {
3000 /* close and clean read_msgfds */
3001 for (i = 0; i < s->read_msgfds_num; i++) {
3002 close(s->read_msgfds[i]);
3003 }
3004
3005 if (s->read_msgfds_num) {
3006 g_free(s->read_msgfds);
3007 }
3008
3009 s->read_msgfds = msgfds;
3010 s->read_msgfds_num = msgfds_num;
3011 }
3012
3013 for (i = 0; i < s->read_msgfds_num; i++) {
3014 int fd = s->read_msgfds[i];
3015 if (fd < 0) {
3016 continue;
3017 }
3018
3019 /* O_NONBLOCK is preserved across SCM_RIGHTS so reset it */
3020 qemu_set_block(fd);
3021
3022 #ifndef MSG_CMSG_CLOEXEC
3023 qemu_set_cloexec(fd);
3024 #endif
3025 }
3026
3027 return ret;
3028 }
3029
3030 static GSource *tcp_chr_add_watch(CharDriverState *chr, GIOCondition cond)
3031 {
3032 TCPCharDriver *s = chr->opaque;
3033 return qio_channel_create_watch(s->ioc, cond);
3034 }
3035
3036 static void tcp_chr_free_connection(CharDriverState *chr)
3037 {
3038 TCPCharDriver *s = chr->opaque;
3039 int i;
3040
3041 if (!s->connected) {
3042 return;
3043 }
3044
3045 if (s->read_msgfds_num) {
3046 for (i = 0; i < s->read_msgfds_num; i++) {
3047 close(s->read_msgfds[i]);
3048 }
3049 g_free(s->read_msgfds);
3050 s->read_msgfds = NULL;
3051 s->read_msgfds_num = 0;
3052 }
3053
3054 tcp_set_msgfds(chr, NULL, 0);
3055 remove_fd_in_watch(chr);
3056 object_unref(OBJECT(s->sioc));
3057 s->sioc = NULL;
3058 object_unref(OBJECT(s->ioc));
3059 s->ioc = NULL;
3060 g_free(chr->filename);
3061 chr->filename = NULL;
3062 s->connected = 0;
3063 }
3064
3065 static void tcp_chr_disconnect(CharDriverState *chr)
3066 {
3067 TCPCharDriver *s = chr->opaque;
3068
3069 if (!s->connected) {
3070 return;
3071 }
3072
3073 tcp_chr_free_connection(chr);
3074
3075 if (s->listen_ioc) {
3076 s->listen_tag = qio_channel_add_watch(
3077 QIO_CHANNEL(s->listen_ioc), G_IO_IN, tcp_chr_accept, chr, NULL);
3078 }
3079 chr->filename = SocketAddress_to_str("disconnected:", s->addr,
3080 s->is_listen, s->is_telnet);
3081 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
3082 if (s->reconnect_time) {
3083 qemu_chr_socket_restart_timer(chr);
3084 }
3085 }
3086
3087 static gboolean tcp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
3088 {
3089 CharDriverState *chr = opaque;
3090 TCPCharDriver *s = chr->opaque;
3091 uint8_t buf[READ_BUF_LEN];
3092 int len, size;
3093
3094 if (!s->connected || s->max_size <= 0) {
3095 return TRUE;
3096 }
3097 len = sizeof(buf);
3098 if (len > s->max_size)
3099 len = s->max_size;
3100 size = tcp_chr_recv(chr, (void *)buf, len);
3101 if (size == 0 || size == -1) {
3102 /* connection closed */
3103 tcp_chr_disconnect(chr);
3104 } else if (size > 0) {
3105 if (s->do_telnetopt)
3106 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
3107 if (size > 0)
3108 qemu_chr_be_write(chr, buf, size);
3109 }
3110
3111 return TRUE;
3112 }
3113
3114 static int tcp_chr_sync_read(CharDriverState *chr, const uint8_t *buf, int len)
3115 {
3116 TCPCharDriver *s = chr->opaque;
3117 int size;
3118
3119 if (!s->connected) {
3120 return 0;
3121 }
3122
3123 size = tcp_chr_recv(chr, (void *) buf, len);
3124 if (size == 0) {
3125 /* connection closed */
3126 tcp_chr_disconnect(chr);
3127 }
3128
3129 return size;
3130 }
3131
3132 static void tcp_chr_connect(void *opaque)
3133 {
3134 CharDriverState *chr = opaque;
3135 TCPCharDriver *s = chr->opaque;
3136
3137 g_free(chr->filename);
3138 chr->filename = sockaddr_to_str(
3139 &s->sioc->localAddr, s->sioc->localAddrLen,
3140 &s->sioc->remoteAddr, s->sioc->remoteAddrLen,
3141 s->is_listen, s->is_telnet);
3142
3143 s->connected = 1;
3144 if (s->ioc) {
3145 chr->fd_in_tag = io_add_watch_poll(s->ioc,
3146 tcp_chr_read_poll,
3147 tcp_chr_read,
3148 chr, NULL);
3149 }
3150 qemu_chr_be_generic_open(chr);
3151 }
3152
3153 static void tcp_chr_update_read_handler(CharDriverState *chr,
3154 GMainContext *context)
3155 {
3156 TCPCharDriver *s = chr->opaque;
3157
3158 if (!s->connected) {
3159 return;
3160 }
3161
3162 remove_fd_in_watch(chr);
3163 if (s->ioc) {
3164 chr->fd_in_tag = io_add_watch_poll(s->ioc,
3165 tcp_chr_read_poll,
3166 tcp_chr_read, chr,
3167 context);
3168 }
3169 }
3170
3171 typedef struct {
3172 CharDriverState *chr;
3173 char buf[12];
3174 size_t buflen;
3175 } TCPCharDriverTelnetInit;
3176
3177 static gboolean tcp_chr_telnet_init_io(QIOChannel *ioc,
3178 GIOCondition cond G_GNUC_UNUSED,
3179 gpointer user_data)
3180 {
3181 TCPCharDriverTelnetInit *init = user_data;
3182 ssize_t ret;
3183
3184 ret = qio_channel_write(ioc, init->buf, init->buflen, NULL);
3185 if (ret < 0) {
3186 if (ret == QIO_CHANNEL_ERR_BLOCK) {
3187 ret = 0;
3188 } else {
3189 tcp_chr_disconnect(init->chr);
3190 return FALSE;
3191 }
3192 }
3193 init->buflen -= ret;
3194
3195 if (init->buflen == 0) {
3196 tcp_chr_connect(init->chr);
3197 return FALSE;
3198 }
3199
3200 memmove(init->buf, init->buf + ret, init->buflen);
3201
3202 return TRUE;
3203 }
3204
3205 static void tcp_chr_telnet_init(CharDriverState *chr)
3206 {
3207 TCPCharDriver *s = chr->opaque;
3208 TCPCharDriverTelnetInit *init =
3209 g_new0(TCPCharDriverTelnetInit, 1);
3210 size_t n = 0;
3211
3212 init->chr = chr;
3213 init->buflen = 12;
3214
3215 #define IACSET(x, a, b, c) \
3216 do { \
3217 x[n++] = a; \
3218 x[n++] = b; \
3219 x[n++] = c; \
3220 } while (0)
3221
3222 /* Prep the telnet negotion to put telnet in binary,
3223 * no echo, single char mode */
3224 IACSET(init->buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
3225 IACSET(init->buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
3226 IACSET(init->buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
3227 IACSET(init->buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
3228
3229 #undef IACSET
3230
3231 qio_channel_add_watch(
3232 s->ioc, G_IO_OUT,
3233 tcp_chr_telnet_init_io,
3234 init, NULL);
3235 }
3236
3237
3238 static void tcp_chr_tls_handshake(Object *source,
3239 Error *err,
3240 gpointer user_data)
3241 {
3242 CharDriverState *chr = user_data;
3243 TCPCharDriver *s = chr->opaque;
3244
3245 if (err) {
3246 tcp_chr_disconnect(chr);
3247 } else {
3248 if (s->do_telnetopt) {
3249 tcp_chr_telnet_init(chr);
3250 } else {
3251 tcp_chr_connect(chr);
3252 }
3253 }
3254 }
3255
3256
3257 static void tcp_chr_tls_init(CharDriverState *chr)
3258 {
3259 TCPCharDriver *s = chr->opaque;
3260 QIOChannelTLS *tioc;
3261 Error *err = NULL;
3262
3263 if (s->is_listen) {
3264 tioc = qio_channel_tls_new_server(
3265 s->ioc, s->tls_creds,
3266 NULL, /* XXX Use an ACL */
3267 &err);
3268 } else {
3269 tioc = qio_channel_tls_new_client(
3270 s->ioc, s->tls_creds,
3271 s->addr->u.inet.data->host,
3272 &err);
3273 }
3274 if (tioc == NULL) {
3275 error_free(err);
3276 tcp_chr_disconnect(chr);
3277 return;
3278 }
3279 object_unref(OBJECT(s->ioc));
3280 s->ioc = QIO_CHANNEL(tioc);
3281
3282 qio_channel_tls_handshake(tioc,
3283 tcp_chr_tls_handshake,
3284 chr,
3285 NULL);
3286 }
3287
3288
3289 static int tcp_chr_new_client(CharDriverState *chr, QIOChannelSocket *sioc)
3290 {
3291 TCPCharDriver *s = chr->opaque;
3292 if (s->ioc != NULL) {
3293 return -1;
3294 }
3295
3296 s->ioc = QIO_CHANNEL(sioc);
3297 object_ref(OBJECT(sioc));
3298 s->sioc = sioc;
3299 object_ref(OBJECT(sioc));
3300
3301 qio_channel_set_blocking(s->ioc, false, NULL);
3302
3303 if (s->do_nodelay) {
3304 qio_channel_set_delay(s->ioc, false);
3305 }
3306 if (s->listen_tag) {
3307 g_source_remove(s->listen_tag);
3308 s->listen_tag = 0;
3309 }
3310
3311 if (s->tls_creds) {
3312 tcp_chr_tls_init(chr);
3313 } else {
3314 if (s->do_telnetopt) {
3315 tcp_chr_telnet_init(chr);
3316 } else {
3317 tcp_chr_connect(chr);
3318 }
3319 }
3320
3321 return 0;
3322 }
3323
3324
3325 static int tcp_chr_add_client(CharDriverState *chr, int fd)
3326 {
3327 int ret;
3328 QIOChannelSocket *sioc;
3329
3330 sioc = qio_channel_socket_new_fd(fd, NULL);
3331 if (!sioc) {
3332 return -1;
3333 }
3334 ret = tcp_chr_new_client(chr, sioc);
3335 object_unref(OBJECT(sioc));
3336 return ret;
3337 }
3338
3339 static gboolean tcp_chr_accept(QIOChannel *channel,
3340 GIOCondition cond,
3341 void *opaque)
3342 {
3343 CharDriverState *chr = opaque;
3344 QIOChannelSocket *sioc;
3345
3346 sioc = qio_channel_socket_accept(QIO_CHANNEL_SOCKET(channel),
3347 NULL);
3348 if (!sioc) {
3349 return TRUE;
3350 }
3351
3352 tcp_chr_new_client(chr, sioc);
3353
3354 object_unref(OBJECT(sioc));
3355
3356 return TRUE;
3357 }
3358
3359 static int tcp_chr_wait_connected(CharDriverState *chr, Error **errp)
3360 {
3361 TCPCharDriver *s = chr->opaque;
3362 QIOChannelSocket *sioc;
3363
3364 /* It can't wait on s->connected, since it is set asynchronously
3365 * in TLS and telnet cases, only wait for an accepted socket */
3366 while (!s->ioc) {
3367 if (s->is_listen) {
3368 fprintf(stderr, "QEMU waiting for connection on: %s\n",
3369 chr->filename);
3370 qio_channel_set_blocking(QIO_CHANNEL(s->listen_ioc), true, NULL);
3371 tcp_chr_accept(QIO_CHANNEL(s->listen_ioc), G_IO_IN, chr);
3372 qio_channel_set_blocking(QIO_CHANNEL(s->listen_ioc), false, NULL);
3373 } else {
3374 sioc = qio_channel_socket_new();
3375 if (qio_channel_socket_connect_sync(sioc, s->addr, errp) < 0) {
3376 object_unref(OBJECT(sioc));
3377 return -1;
3378 }
3379 tcp_chr_new_client(chr, sioc);
3380 object_unref(OBJECT(sioc));
3381 }
3382 }
3383
3384 return 0;
3385 }
3386
3387 static int qemu_chr_wait_connected(CharDriverState *chr, Error **errp)
3388 {
3389 if (chr->chr_wait_connected) {
3390 return chr->chr_wait_connected(chr, errp);
3391 }
3392
3393 return 0;
3394 }
3395
3396 int qemu_chr_fe_wait_connected(CharBackend *be, Error **errp)
3397 {
3398 if (!be->chr) {
3399 error_setg(errp, "missing associated backend");
3400 return -1;
3401 }
3402
3403 return qemu_chr_wait_connected(be->chr, errp);
3404 }
3405
3406 static void tcp_chr_free(CharDriverState *chr)
3407 {
3408 TCPCharDriver *s = chr->opaque;
3409
3410 tcp_chr_free_connection(chr);
3411
3412 if (s->reconnect_timer) {
3413 g_source_remove(s->reconnect_timer);
3414 s->reconnect_timer = 0;
3415 }
3416 qapi_free_SocketAddress(s->addr);
3417 if (s->listen_tag) {
3418 g_source_remove(s->listen_tag);
3419 s->listen_tag = 0;
3420 }
3421 if (s->listen_ioc) {
3422 object_unref(OBJECT(s->listen_ioc));
3423 }
3424 if (s->tls_creds) {
3425 object_unref(OBJECT(s->tls_creds));
3426 }
3427 g_free(s);
3428 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
3429 }
3430
3431
3432 static void qemu_chr_socket_connected(Object *src, Error *err, void *opaque)
3433 {
3434 QIOChannelSocket *sioc = QIO_CHANNEL_SOCKET(src);
3435 CharDriverState *chr = opaque;
3436 TCPCharDriver *s = chr->opaque;
3437
3438 if (err) {
3439 check_report_connect_error(chr, err);
3440 object_unref(src);
3441 return;
3442 }
3443
3444 s->connect_err_reported = false;
3445 tcp_chr_new_client(chr, sioc);
3446 object_unref(OBJECT(sioc));
3447 }
3448
3449
3450 /*********************************************************/
3451 /* Ring buffer chardev */
3452
3453 typedef struct {
3454 size_t size;
3455 size_t prod;
3456 size_t cons;
3457 uint8_t *cbuf;
3458 } RingBufCharDriver;
3459
3460 static size_t ringbuf_count(const CharDriverState *chr)
3461 {
3462 const RingBufCharDriver *d = chr->opaque;
3463
3464 return d->prod - d->cons;
3465 }
3466
3467 /* Called with chr_write_lock held. */
3468 static int ringbuf_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
3469 {
3470 RingBufCharDriver *d = chr->opaque;
3471 int i;
3472
3473 if (!buf || (len < 0)) {
3474 return -1;
3475 }
3476
3477 for (i = 0; i < len; i++ ) {
3478 d->cbuf[d->prod++ & (d->size - 1)] = buf[i];
3479 if (d->prod - d->cons > d->size) {
3480 d->cons = d->prod - d->size;
3481 }
3482 }
3483
3484 return len;
3485 }
3486
3487 static int ringbuf_chr_read(CharDriverState *chr, uint8_t *buf, int len)
3488 {
3489 RingBufCharDriver *d = chr->opaque;
3490 int i;
3491
3492 qemu_mutex_lock(&chr->chr_write_lock);
3493 for (i = 0; i < len && d->cons != d->prod; i++) {
3494 buf[i] = d->cbuf[d->cons++ & (d->size - 1)];
3495 }
3496 qemu_mutex_unlock(&chr->chr_write_lock);
3497
3498 return i;
3499 }
3500
3501 static void ringbuf_chr_free(struct CharDriverState *chr)
3502 {
3503 RingBufCharDriver *d = chr->opaque;
3504
3505 g_free(d->cbuf);
3506 g_free(d);
3507 chr->opaque = NULL;
3508 }
3509
3510 static CharDriverState *qemu_chr_open_ringbuf(const char *id,
3511 ChardevBackend *backend,
3512 ChardevReturn *ret,
3513 Error **errp)
3514 {
3515 ChardevRingbuf *opts = backend->u.ringbuf.data;
3516 ChardevCommon *common = qapi_ChardevRingbuf_base(opts);
3517 CharDriverState *chr;
3518 RingBufCharDriver *d;
3519
3520 chr = qemu_chr_alloc(common, errp);
3521 if (!chr) {
3522 return NULL;
3523 }
3524 d = g_malloc(sizeof(*d));
3525
3526 d->size = opts->has_size ? opts->size : 65536;
3527
3528 /* The size must be power of 2 */
3529 if (d->size & (d->size - 1)) {
3530 error_setg(errp, "size of ringbuf chardev must be power of two");
3531 goto fail;
3532 }
3533
3534 d->prod = 0;
3535 d->cons = 0;
3536 d->cbuf = g_malloc0(d->size);
3537
3538 chr->opaque = d;
3539 chr->chr_write = ringbuf_chr_write;
3540 chr->chr_free = ringbuf_chr_free;
3541
3542 return chr;
3543
3544 fail:
3545 g_free(d);
3546 qemu_chr_free_common(chr);
3547 return NULL;
3548 }
3549
3550 bool chr_is_ringbuf(const CharDriverState *chr)
3551 {
3552 return chr->chr_write == ringbuf_chr_write;
3553 }
3554
3555 void qmp_ringbuf_write(const char *device, const char *data,
3556 bool has_format, enum DataFormat format,
3557 Error **errp)
3558 {
3559 CharDriverState *chr;
3560 const uint8_t *write_data;
3561 int ret;
3562 gsize write_count;
3563
3564 chr = qemu_chr_find(device);
3565 if (!chr) {
3566 error_setg(errp, "Device '%s' not found", device);
3567 return;
3568 }
3569
3570 if (!chr_is_ringbuf(chr)) {
3571 error_setg(errp,"%s is not a ringbuf device", device);
3572 return;
3573 }
3574
3575 if (has_format && (format == DATA_FORMAT_BASE64)) {
3576 write_data = qbase64_decode(data, -1,
3577 &write_count,
3578 errp);
3579 if (!write_data) {
3580 return;
3581 }
3582 } else {
3583 write_data = (uint8_t *)data;
3584 write_count = strlen(data);
3585 }
3586
3587 ret = ringbuf_chr_write(chr, write_data, write_count);
3588
3589 if (write_data != (uint8_t *)data) {
3590 g_free((void *)write_data);
3591 }
3592
3593 if (ret < 0) {
3594 error_setg(errp, "Failed to write to device %s", device);
3595 return;
3596 }
3597 }
3598
3599 char *qmp_ringbuf_read(const char *device, int64_t size,
3600 bool has_format, enum DataFormat format,
3601 Error **errp)
3602 {
3603 CharDriverState *chr;
3604 uint8_t *read_data;
3605 size_t count;
3606 char *data;
3607
3608 chr = qemu_chr_find(device);
3609 if (!chr) {
3610 error_setg(errp, "Device '%s' not found", device);
3611 return NULL;
3612 }
3613
3614 if (!chr_is_ringbuf(chr)) {
3615 error_setg(errp,"%s is not a ringbuf device", device);
3616 return NULL;
3617 }
3618
3619 if (size <= 0) {
3620 error_setg(errp, "size must be greater than zero");
3621 return NULL;
3622 }
3623
3624 count = ringbuf_count(chr);
3625 size = size > count ? count : size;
3626 read_data = g_malloc(size + 1);
3627
3628 ringbuf_chr_read(chr, read_data, size);
3629
3630 if (has_format && (format == DATA_FORMAT_BASE64)) {
3631 data = g_base64_encode(read_data, size);
3632 g_free(read_data);
3633 } else {
3634 /*
3635 * FIXME should read only complete, valid UTF-8 characters up
3636 * to @size bytes. Invalid sequences should be replaced by a
3637 * suitable replacement character. Except when (and only
3638 * when) ring buffer lost characters since last read, initial
3639 * continuation characters should be dropped.
3640 */
3641 read_data[size] = 0;
3642 data = (char *)read_data;
3643 }
3644
3645 return data;
3646 }
3647
3648 QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
3649 {
3650 char host[65], port[33], width[8], height[8];
3651 int pos;
3652 const char *p;
3653 QemuOpts *opts;
3654 Error *local_err = NULL;
3655
3656 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
3657 if (local_err) {
3658 error_report_err(local_err);
3659 return NULL;
3660 }
3661
3662 if (strstart(filename, "mon:", &p)) {
3663 filename = p;
3664 qemu_opt_set(opts, "mux", "on", &error_abort);
3665 if (strcmp(filename, "stdio") == 0) {
3666 /* Monitor is muxed to stdio: do not exit on Ctrl+C by default
3667 * but pass it to the guest. Handle this only for compat syntax,
3668 * for -chardev syntax we have special option for this.
3669 * This is what -nographic did, redirecting+muxing serial+monitor
3670 * to stdio causing Ctrl+C to be passed to guest. */
3671 qemu_opt_set(opts, "signal", "off", &error_abort);
3672 }
3673 }
3674
3675 if (strcmp(filename, "null") == 0 ||
3676 strcmp(filename, "pty") == 0 ||
3677 strcmp(filename, "msmouse") == 0 ||
3678 strcmp(filename, "braille") == 0 ||
3679 strcmp(filename, "testdev") == 0 ||
3680 strcmp(filename, "stdio") == 0) {
3681 qemu_opt_set(opts, "backend", filename, &error_abort);
3682 return opts;
3683 }
3684 if (strstart(filename, "vc", &p)) {
3685 qemu_opt_set(opts, "backend", "vc", &error_abort);
3686 if (*p == ':') {
3687 if (sscanf(p+1, "%7[0-9]x%7[0-9]", width, height) == 2) {
3688 /* pixels */
3689 qemu_opt_set(opts, "width", width, &error_abort);
3690 qemu_opt_set(opts, "height", height, &error_abort);
3691 } else if (sscanf(p+1, "%7[0-9]Cx%7[0-9]C", width, height) == 2) {
3692 /* chars */
3693 qemu_opt_set(opts, "cols", width, &error_abort);
3694 qemu_opt_set(opts, "rows", height, &error_abort);
3695 } else {
3696 goto fail;
3697 }
3698 }
3699 return opts;
3700 }
3701 if (strcmp(filename, "con:") == 0) {
3702 qemu_opt_set(opts, "backend", "console", &error_abort);
3703 return opts;
3704 }
3705 if (strstart(filename, "COM", NULL)) {
3706 qemu_opt_set(opts, "backend", "serial", &error_abort);
3707 qemu_opt_set(opts, "path", filename, &error_abort);
3708 return opts;
3709 }
3710 if (strstart(filename, "file:", &p)) {
3711 qemu_opt_set(opts, "backend", "file", &error_abort);
3712 qemu_opt_set(opts, "path", p, &error_abort);
3713 return opts;
3714 }
3715 if (strstart(filename, "pipe:", &p)) {
3716 qemu_opt_set(opts, "backend", "pipe", &error_abort);
3717 qemu_opt_set(opts, "path", p, &error_abort);
3718 return opts;
3719 }
3720 if (strstart(filename, "tcp:", &p) ||
3721 strstart(filename, "telnet:", &p)) {
3722 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3723 host[0] = 0;
3724 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
3725 goto fail;
3726 }
3727 qemu_opt_set(opts, "backend", "socket", &error_abort);
3728 qemu_opt_set(opts, "host", host, &error_abort);
3729 qemu_opt_set(opts, "port", port, &error_abort);
3730 if (p[pos] == ',') {
3731 qemu_opts_do_parse(opts, p+pos+1, NULL, &local_err);
3732 if (local_err) {
3733 error_report_err(local_err);
3734 goto fail;
3735 }
3736 }
3737 if (strstart(filename, "telnet:", &p))
3738 qemu_opt_set(opts, "telnet", "on", &error_abort);
3739 return opts;
3740 }
3741 if (strstart(filename, "udp:", &p)) {
3742 qemu_opt_set(opts, "backend", "udp", &error_abort);
3743 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
3744 host[0] = 0;
3745 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
3746 goto fail;
3747 }
3748 }
3749 qemu_opt_set(opts, "host", host, &error_abort);
3750 qemu_opt_set(opts, "port", port, &error_abort);
3751 if (p[pos] == '@') {
3752 p += pos + 1;
3753 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3754 host[0] = 0;
3755 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
3756 goto fail;
3757 }
3758 }
3759 qemu_opt_set(opts, "localaddr", host, &error_abort);
3760 qemu_opt_set(opts, "localport", port, &error_abort);
3761 }
3762 return opts;
3763 }
3764 if (strstart(filename, "unix:", &p)) {
3765 qemu_opt_set(opts, "backend", "socket", &error_abort);
3766 qemu_opts_do_parse(opts, p, "path", &local_err);
3767 if (local_err) {
3768 error_report_err(local_err);
3769 goto fail;
3770 }
3771 return opts;
3772 }
3773 if (strstart(filename, "/dev/parport", NULL) ||
3774 strstart(filename, "/dev/ppi", NULL)) {
3775 qemu_opt_set(opts, "backend", "parport", &error_abort);
3776 qemu_opt_set(opts, "path", filename, &error_abort);
3777 return opts;
3778 }
3779 if (strstart(filename, "/dev/", NULL)) {
3780 qemu_opt_set(opts, "backend", "tty", &error_abort);
3781 qemu_opt_set(opts, "path", filename, &error_abort);
3782 return opts;
3783 }
3784
3785 fail:
3786 qemu_opts_del(opts);
3787 return NULL;
3788 }
3789
3790 void qemu_chr_parse_common(QemuOpts *opts, ChardevCommon *backend)
3791 {
3792 const char *logfile = qemu_opt_get(opts, "logfile");
3793
3794 backend->has_logfile = logfile != NULL;
3795 backend->logfile = logfile ? g_strdup(logfile) : NULL;
3796
3797 backend->has_logappend = true;
3798 backend->logappend = qemu_opt_get_bool(opts, "logappend", false);
3799 }
3800
3801
3802 static void qemu_chr_parse_file_out(QemuOpts *opts, ChardevBackend *backend,
3803 Error **errp)
3804 {
3805 const char *path = qemu_opt_get(opts, "path");
3806 ChardevFile *file;
3807
3808 if (path == NULL) {
3809 error_setg(errp, "chardev: file: no filename given");
3810 return;
3811 }
3812 file = backend->u.file.data = g_new0(ChardevFile, 1);
3813 qemu_chr_parse_common(opts, qapi_ChardevFile_base(file));
3814 file->out = g_strdup(path);
3815
3816 file->has_append = true;
3817 file->append = qemu_opt_get_bool(opts, "append", false);
3818 }
3819
3820 static void qemu_chr_parse_stdio(QemuOpts *opts, ChardevBackend *backend,
3821 Error **errp)
3822 {
3823 ChardevStdio *stdio;
3824
3825 stdio = backend->u.stdio.data = g_new0(ChardevStdio, 1);
3826 qemu_chr_parse_common(opts, qapi_ChardevStdio_base(stdio));
3827 stdio->has_signal = true;
3828 stdio->signal = qemu_opt_get_bool(opts, "signal", true);
3829 }
3830
3831 #ifdef HAVE_CHARDEV_SERIAL
3832 static void qemu_chr_parse_serial(QemuOpts *opts, ChardevBackend *backend,
3833 Error **errp)
3834 {
3835 const char *device = qemu_opt_get(opts, "path");
3836 ChardevHostdev *serial;
3837
3838 if (device == NULL) {
3839 error_setg(errp, "chardev: serial/tty: no device path given");
3840 return;
3841 }
3842 serial = backend->u.serial.data = g_new0(ChardevHostdev, 1);
3843 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(serial));
3844 serial->device = g_strdup(device);
3845 }
3846 #endif
3847
3848 #ifdef HAVE_CHARDEV_PARPORT
3849 static void qemu_chr_parse_parallel(QemuOpts *opts, ChardevBackend *backend,
3850 Error **errp)
3851 {
3852 const char *device = qemu_opt_get(opts, "path");
3853 ChardevHostdev *parallel;
3854
3855 if (device == NULL) {
3856 error_setg(errp, "chardev: parallel: no device path given");
3857 return;
3858 }
3859 parallel = backend->u.parallel.data = g_new0(ChardevHostdev, 1);
3860 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(parallel));
3861 parallel->device = g_strdup(device);
3862 }
3863 #endif
3864
3865 static void qemu_chr_parse_pipe(QemuOpts *opts, ChardevBackend *backend,
3866 Error **errp)
3867 {
3868 const char *device = qemu_opt_get(opts, "path");
3869 ChardevHostdev *dev;
3870
3871 if (device == NULL) {
3872 error_setg(errp, "chardev: pipe: no device path given");
3873 return;
3874 }
3875 dev = backend->u.pipe.data = g_new0(ChardevHostdev, 1);
3876 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(dev));
3877 dev->device = g_strdup(device);
3878 }
3879
3880 static void qemu_chr_parse_ringbuf(QemuOpts *opts, ChardevBackend *backend,
3881 Error **errp)
3882 {
3883 int val;
3884 ChardevRingbuf *ringbuf;
3885
3886 ringbuf = backend->u.ringbuf.data = g_new0(ChardevRingbuf, 1);
3887 qemu_chr_parse_common(opts, qapi_ChardevRingbuf_base(ringbuf));
3888
3889 val = qemu_opt_get_size(opts, "size", 0);
3890 if (val != 0) {
3891 ringbuf->has_size = true;
3892 ringbuf->size = val;
3893 }
3894 }
3895
3896 static void qemu_chr_parse_mux(QemuOpts *opts, ChardevBackend *backend,
3897 Error **errp)
3898 {
3899 const char *chardev = qemu_opt_get(opts, "chardev");
3900 ChardevMux *mux;
3901
3902 if (chardev == NULL) {
3903 error_setg(errp, "chardev: mux: no chardev given");
3904 return;
3905 }
3906 mux = backend->u.mux.data = g_new0(ChardevMux, 1);
3907 qemu_chr_parse_common(opts, qapi_ChardevMux_base(mux));
3908 mux->chardev = g_strdup(chardev);
3909 }
3910
3911 static void qemu_chr_parse_socket(QemuOpts *opts, ChardevBackend *backend,
3912 Error **errp)
3913 {
3914 bool is_listen = qemu_opt_get_bool(opts, "server", false);
3915 bool is_waitconnect = is_listen && qemu_opt_get_bool(opts, "wait", true);
3916 bool is_telnet = qemu_opt_get_bool(opts, "telnet", false);
3917 bool do_nodelay = !qemu_opt_get_bool(opts, "delay", true);
3918 int64_t reconnect = qemu_opt_get_number(opts, "reconnect", 0);
3919 const char *path = qemu_opt_get(opts, "path");
3920 const char *host = qemu_opt_get(opts, "host");
3921 const char *port = qemu_opt_get(opts, "port");
3922 const char *tls_creds = qemu_opt_get(opts, "tls-creds");
3923 SocketAddress *addr;
3924 ChardevSocket *sock;
3925
3926 if (!path) {
3927 if (!host) {
3928 error_setg(errp, "chardev: socket: no host given");
3929 return;
3930 }
3931 if (!port) {
3932 error_setg(errp, "chardev: socket: no port given");
3933 return;
3934 }
3935 } else {
3936 if (tls_creds) {
3937 error_setg(errp, "TLS can only be used over TCP socket");
3938 return;
3939 }
3940 }
3941
3942 sock = backend->u.socket.data = g_new0(ChardevSocket, 1);
3943 qemu_chr_parse_common(opts, qapi_ChardevSocket_base(sock));
3944
3945 sock->has_nodelay = true;
3946 sock->nodelay = do_nodelay;
3947 sock->has_server = true;
3948 sock->server = is_listen;
3949 sock->has_telnet = true;
3950 sock->telnet = is_telnet;
3951 sock->has_wait = true;
3952 sock->wait = is_waitconnect;
3953 sock->has_reconnect = true;
3954 sock->reconnect = reconnect;
3955 sock->tls_creds = g_strdup(tls_creds);
3956
3957 addr = g_new0(SocketAddress, 1);
3958 if (path) {
3959 UnixSocketAddress *q_unix;
3960 addr->type = SOCKET_ADDRESS_KIND_UNIX;
3961 q_unix = addr->u.q_unix.data = g_new0(UnixSocketAddress, 1);
3962 q_unix->path = g_strdup(path);
3963 } else {
3964 addr->type = SOCKET_ADDRESS_KIND_INET;
3965 addr->u.inet.data = g_new(InetSocketAddress, 1);
3966 *addr->u.inet.data = (InetSocketAddress) {
3967 .host = g_strdup(host),
3968 .port = g_strdup(port),
3969 .has_to = qemu_opt_get(opts, "to"),
3970 .to = qemu_opt_get_number(opts, "to", 0),
3971 .has_ipv4 = qemu_opt_get(opts, "ipv4"),
3972 .ipv4 = qemu_opt_get_bool(opts, "ipv4", 0),
3973 .has_ipv6 = qemu_opt_get(opts, "ipv6"),
3974 .ipv6 = qemu_opt_get_bool(opts, "ipv6", 0),
3975 };
3976 }
3977 sock->addr = addr;
3978 }
3979
3980 static void qemu_chr_parse_udp(QemuOpts *opts, ChardevBackend *backend,
3981 Error **errp)
3982 {
3983 const char *host = qemu_opt_get(opts, "host");
3984 const char *port = qemu_opt_get(opts, "port");
3985 const char *localaddr = qemu_opt_get(opts, "localaddr");
3986 const char *localport = qemu_opt_get(opts, "localport");
3987 bool has_local = false;
3988 SocketAddress *addr;
3989 ChardevUdp *udp;
3990
3991 if (host == NULL || strlen(host) == 0) {
3992 host = "localhost";
3993 }
3994 if (port == NULL || strlen(port) == 0) {
3995 error_setg(errp, "chardev: udp: remote port not specified");
3996 return;
3997 }
3998 if (localport == NULL || strlen(localport) == 0) {
3999 localport = "0";
4000 } else {
4001 has_local = true;
4002 }
4003 if (localaddr == NULL || strlen(localaddr) == 0) {
4004 localaddr = "";
4005 } else {
4006 has_local = true;
4007 }
4008
4009 udp = backend->u.udp.data = g_new0(ChardevUdp, 1);
4010 qemu_chr_parse_common(opts, qapi_ChardevUdp_base(udp));
4011
4012 addr = g_new0(SocketAddress, 1);
4013 addr->type = SOCKET_ADDRESS_KIND_INET;
4014 addr->u.inet.data = g_new(InetSocketAddress, 1);
4015 *addr->u.inet.data = (InetSocketAddress) {
4016 .host = g_strdup(host),
4017 .port = g_strdup(port),
4018 .has_ipv4 = qemu_opt_get(opts, "ipv4"),
4019 .ipv4 = qemu_opt_get_bool(opts, "ipv4", 0),
4020 .has_ipv6 = qemu_opt_get(opts, "ipv6"),
4021 .ipv6 = qemu_opt_get_bool(opts, "ipv6", 0),
4022 };
4023 udp->remote = addr;
4024
4025 if (has_local) {
4026 udp->has_local = true;
4027 addr = g_new0(SocketAddress, 1);
4028 addr->type = SOCKET_ADDRESS_KIND_INET;
4029 addr->u.inet.data = g_new(InetSocketAddress, 1);
4030 *addr->u.inet.data = (InetSocketAddress) {
4031 .host = g_strdup(localaddr),
4032 .port = g_strdup(localport),
4033 };
4034 udp->local = addr;
4035 }
4036 }
4037
4038 typedef struct CharDriver {
4039 const char *name;
4040 ChardevBackendKind kind;
4041 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp);
4042 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
4043 ChardevReturn *ret, Error **errp);
4044 } CharDriver;
4045
4046 static GSList *backends;
4047
4048 void register_char_driver(const char *name, ChardevBackendKind kind,
4049 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp),
4050 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
4051 ChardevReturn *ret, Error **errp))
4052 {
4053 CharDriver *s;
4054
4055 s = g_malloc0(sizeof(*s));
4056 s->name = g_strdup(name);
4057 s->kind = kind;
4058 s->parse = parse;
4059 s->create = create;
4060
4061 backends = g_slist_append(backends, s);
4062 }
4063
4064 CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
4065 Error **errp)
4066 {
4067 Error *local_err = NULL;
4068 CharDriver *cd;
4069 CharDriverState *chr;
4070 GSList *i;
4071 ChardevReturn *ret = NULL;
4072 ChardevBackend *backend;
4073 const char *id = qemu_opts_id(opts);
4074 char *bid = NULL;
4075
4076 if (qemu_opt_get(opts, "backend") == NULL) {
4077 error_setg(errp, "chardev: \"%s\" missing backend",
4078 qemu_opts_id(opts));
4079 goto err;
4080 }
4081
4082 if (is_help_option(qemu_opt_get(opts, "backend"))) {
4083 fprintf(stderr, "Available chardev backend types:\n");
4084 for (i = backends; i; i = i->next) {
4085 cd = i->data;
4086 fprintf(stderr, "%s\n", cd->name);
4087 }
4088 exit(!is_help_option(qemu_opt_get(opts, "backend")));
4089 }
4090
4091 if (id == NULL) {
4092 error_setg(errp, "chardev: no id specified");
4093 goto err;
4094 }
4095
4096 for (i = backends; i; i = i->next) {
4097 cd = i->data;
4098
4099 if (strcmp(cd->name, qemu_opt_get(opts, "backend")) == 0) {
4100 break;
4101 }
4102 }
4103 if (i == NULL) {
4104 error_setg(errp, "chardev: backend \"%s\" not found",
4105 qemu_opt_get(opts, "backend"));
4106 goto err;
4107 }
4108
4109 backend = g_new0(ChardevBackend, 1);
4110
4111 if (qemu_opt_get_bool(opts, "mux", 0)) {
4112 bid = g_strdup_printf("%s-base", id);
4113 }
4114
4115 chr = NULL;
4116 backend->type = cd->kind;
4117 if (cd->parse) {
4118 cd->parse(opts, backend, &local_err);
4119 if (local_err) {
4120 error_propagate(errp, local_err);
4121 goto qapi_out;
4122 }
4123 } else {
4124 ChardevCommon *cc = g_new0(ChardevCommon, 1);
4125 qemu_chr_parse_common(opts, cc);
4126 backend->u.null.data = cc; /* Any ChardevCommon member would work */
4127 }
4128
4129 ret = qmp_chardev_add(bid ? bid : id, backend, errp);
4130 if (!ret) {
4131 goto qapi_out;
4132 }
4133
4134 if (bid) {
4135 qapi_free_ChardevBackend(backend);
4136 qapi_free_ChardevReturn(ret);
4137 backend = g_new0(ChardevBackend, 1);
4138 backend->u.mux.data = g_new0(ChardevMux, 1);
4139 backend->type = CHARDEV_BACKEND_KIND_MUX;
4140 backend->u.mux.data->chardev = g_strdup(bid);
4141 ret = qmp_chardev_add(id, backend, errp);
4142 if (!ret) {
4143 chr = qemu_chr_find(bid);
4144 qemu_chr_delete(chr);
4145 chr = NULL;
4146 goto qapi_out;
4147 }
4148 }
4149
4150 chr = qemu_chr_find(id);
4151
4152 qapi_out:
4153 qapi_free_ChardevBackend(backend);
4154 qapi_free_ChardevReturn(ret);
4155 g_free(bid);
4156 return chr;
4157
4158 err:
4159 return NULL;
4160 }
4161
4162 CharDriverState *qemu_chr_new_noreplay(const char *label, const char *filename)
4163 {
4164 const char *p;
4165 CharDriverState *chr;
4166 QemuOpts *opts;
4167 Error *err = NULL;
4168
4169 if (strstart(filename, "chardev:", &p)) {
4170 return qemu_chr_find(p);
4171 }
4172
4173 opts = qemu_chr_parse_compat(label, filename);
4174 if (!opts)
4175 return NULL;
4176
4177 chr = qemu_chr_new_from_opts(opts, &err);
4178 if (err) {
4179 error_report_err(err);
4180 }
4181 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
4182 monitor_init(chr, MONITOR_USE_READLINE);
4183 }
4184 qemu_opts_del(opts);
4185 return chr;
4186 }
4187
4188 CharDriverState *qemu_chr_new(const char *label, const char *filename)
4189 {
4190 CharDriverState *chr;
4191 chr = qemu_chr_new_noreplay(label, filename);
4192 if (chr) {
4193 chr->replay = replay_mode != REPLAY_MODE_NONE;
4194 if (chr->replay && chr->chr_ioctl) {
4195 fprintf(stderr,
4196 "Replay: ioctl is not supported for serial devices yet\n");
4197 }
4198 replay_register_char_driver(chr);
4199 }
4200 return chr;
4201 }
4202
4203 void qemu_chr_fe_set_echo(CharBackend *be, bool echo)
4204 {
4205 CharDriverState *chr = be->chr;
4206
4207 if (chr && chr->chr_set_echo) {
4208 chr->chr_set_echo(chr, echo);
4209 }
4210 }
4211
4212 void qemu_chr_fe_set_open(CharBackend *be, int fe_open)
4213 {
4214 CharDriverState *chr = be->chr;
4215
4216 if (!chr) {
4217 return;
4218 }
4219
4220 if (be->fe_open == fe_open) {
4221 return;
4222 }
4223 be->fe_open = fe_open;
4224 if (chr->chr_set_fe_open) {
4225 chr->chr_set_fe_open(chr, fe_open);
4226 }
4227 }
4228
4229 void qemu_chr_fe_event(CharBackend *be, int event)
4230 {
4231 CharDriverState *chr = be->chr;
4232
4233 if (chr && chr->chr_fe_event) {
4234 chr->chr_fe_event(chr, event);
4235 }
4236 }
4237
4238 guint qemu_chr_fe_add_watch(CharBackend *be, GIOCondition cond,
4239 GIOFunc func, void *user_data)
4240 {
4241 CharDriverState *s = be->chr;
4242 GSource *src;
4243 guint tag;
4244
4245 if (!s || s->chr_add_watch == NULL) {
4246 return 0;
4247 }
4248
4249 src = s->chr_add_watch(s, cond);
4250 if (!src) {
4251 return 0;
4252 }
4253
4254 g_source_set_callback(src, (GSourceFunc)func, user_data, NULL);
4255 tag = g_source_attach(src, NULL);
4256 g_source_unref(src);
4257
4258 return tag;
4259 }
4260
4261 void qemu_chr_fe_disconnect(CharBackend *be)
4262 {
4263 CharDriverState *chr = be->chr;
4264
4265 if (chr && chr->chr_disconnect) {
4266 chr->chr_disconnect(chr);
4267 }
4268 }
4269
4270 static void qemu_chr_free_common(CharDriverState *chr)
4271 {
4272 if (chr->be) {
4273 chr->be->chr = NULL;
4274 }
4275 g_free(chr->filename);
4276 g_free(chr->label);
4277 if (chr->logfd != -1) {
4278 close(chr->logfd);
4279 }
4280 qemu_mutex_destroy(&chr->chr_write_lock);
4281 g_free(chr);
4282 }
4283
4284 void qemu_chr_free(CharDriverState *chr)
4285 {
4286 if (chr->chr_free) {
4287 chr->chr_free(chr);
4288 }
4289 qemu_chr_free_common(chr);
4290 }
4291
4292 void qemu_chr_delete(CharDriverState *chr)
4293 {
4294 QTAILQ_REMOVE(&chardevs, chr, next);
4295 qemu_chr_free(chr);
4296 }
4297
4298 ChardevInfoList *qmp_query_chardev(Error **errp)
4299 {
4300 ChardevInfoList *chr_list = NULL;
4301 CharDriverState *chr;
4302
4303 QTAILQ_FOREACH(chr, &chardevs, next) {
4304 ChardevInfoList *info = g_malloc0(sizeof(*info));
4305 info->value = g_malloc0(sizeof(*info->value));
4306 info->value->label = g_strdup(chr->label);
4307 info->value->filename = g_strdup(chr->filename);
4308 info->value->frontend_open = chr->be && chr->be->fe_open;
4309
4310 info->next = chr_list;
4311 chr_list = info;
4312 }
4313
4314 return chr_list;
4315 }
4316
4317 ChardevBackendInfoList *qmp_query_chardev_backends(Error **errp)
4318 {
4319 ChardevBackendInfoList *backend_list = NULL;
4320 CharDriver *c = NULL;
4321 GSList *i = NULL;
4322
4323 for (i = backends; i; i = i->next) {
4324 ChardevBackendInfoList *info = g_malloc0(sizeof(*info));
4325 c = i->data;
4326 info->value = g_malloc0(sizeof(*info->value));
4327 info->value->name = g_strdup(c->name);
4328
4329 info->next = backend_list;
4330 backend_list = info;
4331 }
4332
4333 return backend_list;
4334 }
4335
4336 CharDriverState *qemu_chr_find(const char *name)
4337 {
4338 CharDriverState *chr;
4339
4340 QTAILQ_FOREACH(chr, &chardevs, next) {
4341 if (strcmp(chr->label, name) != 0)
4342 continue;
4343 return chr;
4344 }
4345 return NULL;
4346 }
4347
4348 QemuOptsList qemu_chardev_opts = {
4349 .name = "chardev",
4350 .implied_opt_name = "backend",
4351 .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
4352 .desc = {
4353 {
4354 .name = "backend",
4355 .type = QEMU_OPT_STRING,
4356 },{
4357 .name = "path",
4358 .type = QEMU_OPT_STRING,
4359 },{
4360 .name = "host",
4361 .type = QEMU_OPT_STRING,
4362 },{
4363 .name = "port",
4364 .type = QEMU_OPT_STRING,
4365 },{
4366 .name = "localaddr",
4367 .type = QEMU_OPT_STRING,
4368 },{
4369 .name = "localport",
4370 .type = QEMU_OPT_STRING,
4371 },{
4372 .name = "to",
4373 .type = QEMU_OPT_NUMBER,
4374 },{
4375 .name = "ipv4",
4376 .type = QEMU_OPT_BOOL,
4377 },{
4378 .name = "ipv6",
4379 .type = QEMU_OPT_BOOL,
4380 },{
4381 .name = "wait",
4382 .type = QEMU_OPT_BOOL,
4383 },{
4384 .name = "server",
4385 .type = QEMU_OPT_BOOL,
4386 },{
4387 .name = "delay",
4388 .type = QEMU_OPT_BOOL,
4389 },{
4390 .name = "reconnect",
4391 .type = QEMU_OPT_NUMBER,
4392 },{
4393 .name = "telnet",
4394 .type = QEMU_OPT_BOOL,
4395 },{
4396 .name = "tls-creds",
4397 .type = QEMU_OPT_STRING,
4398 },{
4399 .name = "width",
4400 .type = QEMU_OPT_NUMBER,
4401 },{
4402 .name = "height",
4403 .type = QEMU_OPT_NUMBER,
4404 },{
4405 .name = "cols",
4406 .type = QEMU_OPT_NUMBER,
4407 },{
4408 .name = "rows",
4409 .type = QEMU_OPT_NUMBER,
4410 },{
4411 .name = "mux",
4412 .type = QEMU_OPT_BOOL,
4413 },{
4414 .name = "signal",
4415 .type = QEMU_OPT_BOOL,
4416 },{
4417 .name = "name",
4418 .type = QEMU_OPT_STRING,
4419 },{
4420 .name = "debug",
4421 .type = QEMU_OPT_NUMBER,
4422 },{
4423 .name = "size",
4424 .type = QEMU_OPT_SIZE,
4425 },{
4426 .name = "chardev",
4427 .type = QEMU_OPT_STRING,
4428 },{
4429 .name = "append",
4430 .type = QEMU_OPT_BOOL,
4431 },{
4432 .name = "logfile",
4433 .type = QEMU_OPT_STRING,
4434 },{
4435 .name = "logappend",
4436 .type = QEMU_OPT_BOOL,
4437 },
4438 { /* end of list */ }
4439 },
4440 };
4441
4442 #ifdef _WIN32
4443
4444 static CharDriverState *qmp_chardev_open_file(const char *id,
4445 ChardevBackend *backend,
4446 ChardevReturn *ret,
4447 Error **errp)
4448 {
4449 ChardevFile *file = backend->u.file.data;
4450 ChardevCommon *common = qapi_ChardevFile_base(file);
4451 HANDLE out;
4452 DWORD accessmode;
4453 DWORD flags;
4454
4455 if (file->has_in) {
4456 error_setg(errp, "input file not supported");
4457 return NULL;
4458 }
4459
4460 if (file->has_append && file->append) {
4461 /* Append to file if it already exists. */
4462 accessmode = FILE_GENERIC_WRITE & ~FILE_WRITE_DATA;
4463 flags = OPEN_ALWAYS;
4464 } else {
4465 /* Truncate file if it already exists. */
4466 accessmode = GENERIC_WRITE;
4467 flags = CREATE_ALWAYS;
4468 }
4469
4470 out = CreateFile(file->out, accessmode, FILE_SHARE_READ, NULL, flags,
4471 FILE_ATTRIBUTE_NORMAL, NULL);
4472 if (out == INVALID_HANDLE_VALUE) {
4473 error_setg(errp, "open %s failed", file->out);
4474 return NULL;
4475 }
4476 return qemu_chr_open_win_file(out, common, errp);
4477 }
4478
4479 static CharDriverState *qmp_chardev_open_serial(const char *id,
4480 ChardevBackend *backend,
4481 ChardevReturn *ret,
4482 Error **errp)
4483 {
4484 ChardevHostdev *serial = backend->u.serial.data;
4485 ChardevCommon *common = qapi_ChardevHostdev_base(serial);
4486 return qemu_chr_open_win_path(serial->device, common, errp);
4487 }
4488
4489 #else /* WIN32 */
4490
4491 static int qmp_chardev_open_file_source(char *src, int flags,
4492 Error **errp)
4493 {
4494 int fd = -1;
4495
4496 TFR(fd = qemu_open(src, flags, 0666));
4497 if (fd == -1) {
4498 error_setg_file_open(errp, errno, src);
4499 }
4500 return fd;
4501 }
4502
4503 static CharDriverState *qmp_chardev_open_file(const char *id,
4504 ChardevBackend *backend,
4505 ChardevReturn *ret,
4506 Error **errp)
4507 {
4508 ChardevFile *file = backend->u.file.data;
4509 ChardevCommon *common = qapi_ChardevFile_base(file);
4510 int flags, in = -1, out;
4511
4512 flags = O_WRONLY | O_CREAT | O_BINARY;
4513 if (file->has_append && file->append) {
4514 flags |= O_APPEND;
4515 } else {
4516 flags |= O_TRUNC;
4517 }
4518
4519 out = qmp_chardev_open_file_source(file->out, flags, errp);
4520 if (out < 0) {
4521 return NULL;
4522 }
4523
4524 if (file->has_in) {
4525 flags = O_RDONLY;
4526 in = qmp_chardev_open_file_source(file->in, flags, errp);
4527 if (in < 0) {
4528 qemu_close(out);
4529 return NULL;
4530 }
4531 }
4532
4533 return qemu_chr_open_fd(in, out, common, errp);
4534 }
4535
4536 #ifdef HAVE_CHARDEV_SERIAL
4537 static CharDriverState *qmp_chardev_open_serial(const char *id,
4538 ChardevBackend *backend,
4539 ChardevReturn *ret,
4540 Error **errp)
4541 {
4542 ChardevHostdev *serial = backend->u.serial.data;
4543 ChardevCommon *common = qapi_ChardevHostdev_base(serial);
4544 int fd;
4545
4546 fd = qmp_chardev_open_file_source(serial->device, O_RDWR, errp);
4547 if (fd < 0) {
4548 return NULL;
4549 }
4550 qemu_set_nonblock(fd);
4551 return qemu_chr_open_tty_fd(fd, common, errp);
4552 }
4553 #endif
4554
4555 #ifdef HAVE_CHARDEV_PARPORT
4556 static CharDriverState *qmp_chardev_open_parallel(const char *id,
4557 ChardevBackend *backend,
4558 ChardevReturn *ret,
4559 Error **errp)
4560 {
4561 ChardevHostdev *parallel = backend->u.parallel.data;
4562 ChardevCommon *common = qapi_ChardevHostdev_base(parallel);
4563 int fd;
4564
4565 fd = qmp_chardev_open_file_source(parallel->device, O_RDWR, errp);
4566 if (fd < 0) {
4567 return NULL;
4568 }
4569 return qemu_chr_open_pp_fd(fd, common, errp);
4570 }
4571 #endif
4572
4573 #endif /* WIN32 */
4574
4575 static gboolean socket_reconnect_timeout(gpointer opaque)
4576 {
4577 CharDriverState *chr = opaque;
4578 TCPCharDriver *s = chr->opaque;
4579 QIOChannelSocket *sioc;
4580
4581 s->reconnect_timer = 0;
4582
4583 if (chr->be_open) {
4584 return false;
4585 }
4586
4587 sioc = qio_channel_socket_new();
4588 qio_channel_socket_connect_async(sioc, s->addr,
4589 qemu_chr_socket_connected,
4590 chr, NULL);
4591
4592 return false;
4593 }
4594
4595 static CharDriverState *qmp_chardev_open_socket(const char *id,
4596 ChardevBackend *backend,
4597 ChardevReturn *ret,
4598 Error **errp)
4599 {
4600 CharDriverState *chr;
4601 TCPCharDriver *s;
4602 ChardevSocket *sock = backend->u.socket.data;
4603 SocketAddress *addr = sock->addr;
4604 bool do_nodelay = sock->has_nodelay ? sock->nodelay : false;
4605 bool is_listen = sock->has_server ? sock->server : true;
4606 bool is_telnet = sock->has_telnet ? sock->telnet : false;
4607 bool is_waitconnect = sock->has_wait ? sock->wait : false;
4608 int64_t reconnect = sock->has_reconnect ? sock->reconnect : 0;
4609 ChardevCommon *common = qapi_ChardevSocket_base(sock);
4610 QIOChannelSocket *sioc = NULL;
4611
4612 chr = qemu_chr_alloc(common, errp);
4613 if (!chr) {
4614 return NULL;
4615 }
4616 s = g_new0(TCPCharDriver, 1);
4617
4618 s->is_unix = addr->type == SOCKET_ADDRESS_KIND_UNIX;
4619 s->is_listen = is_listen;
4620 s->is_telnet = is_telnet;
4621 s->do_nodelay = do_nodelay;
4622 if (sock->tls_creds) {
4623 Object *creds;
4624 creds = object_resolve_path_component(
4625 object_get_objects_root(), sock->tls_creds);
4626 if (!creds) {
4627 error_setg(errp, "No TLS credentials with id '%s'",
4628 sock->tls_creds);
4629 goto error;
4630 }
4631 s->tls_creds = (QCryptoTLSCreds *)
4632 object_dynamic_cast(creds,
4633 TYPE_QCRYPTO_TLS_CREDS);
4634 if (!s->tls_creds) {
4635 error_setg(errp, "Object with id '%s' is not TLS credentials",
4636 sock->tls_creds);
4637 goto error;
4638 }
4639 object_ref(OBJECT(s->tls_creds));
4640 if (is_listen) {
4641 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_SERVER) {
4642 error_setg(errp, "%s",
4643 "Expected TLS credentials for server endpoint");
4644 goto error;
4645 }
4646 } else {
4647 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT) {
4648 error_setg(errp, "%s",
4649 "Expected TLS credentials for client endpoint");
4650 goto error;
4651 }
4652 }
4653 }
4654
4655 s->addr = QAPI_CLONE(SocketAddress, sock->addr);
4656
4657 qemu_chr_set_feature(chr, QEMU_CHAR_FEATURE_RECONNECTABLE);
4658 if (s->is_unix) {
4659 qemu_chr_set_feature(chr, QEMU_CHAR_FEATURE_FD_PASS);
4660 }
4661
4662 chr->opaque = s;
4663 chr->chr_wait_connected = tcp_chr_wait_connected;
4664 chr->chr_write = tcp_chr_write;
4665 chr->chr_sync_read = tcp_chr_sync_read;
4666 chr->chr_free = tcp_chr_free;
4667 chr->chr_disconnect = tcp_chr_disconnect;
4668 chr->get_msgfds = tcp_get_msgfds;
4669 chr->set_msgfds = tcp_set_msgfds;
4670 chr->chr_add_client = tcp_chr_add_client;
4671 chr->chr_add_watch = tcp_chr_add_watch;
4672 chr->chr_update_read_handler = tcp_chr_update_read_handler;
4673 /* be isn't opened until we get a connection */
4674 chr->explicit_be_open = true;
4675
4676 chr->filename = SocketAddress_to_str("disconnected:",
4677 addr, is_listen, is_telnet);
4678
4679 if (is_listen) {
4680 if (is_telnet) {
4681 s->do_telnetopt = 1;
4682 }
4683 } else if (reconnect > 0) {
4684 s->reconnect_time = reconnect;
4685 }
4686
4687 if (s->reconnect_time) {
4688 sioc = qio_channel_socket_new();
4689 qio_channel_socket_connect_async(sioc, s->addr,
4690 qemu_chr_socket_connected,
4691 chr, NULL);
4692 } else {
4693 if (s->is_listen) {
4694 sioc = qio_channel_socket_new();
4695 if (qio_channel_socket_listen_sync(sioc, s->addr, errp) < 0) {
4696 goto error;
4697 }
4698 s->listen_ioc = sioc;
4699 if (is_waitconnect &&
4700 qemu_chr_wait_connected(chr, errp) < 0) {
4701 goto error;
4702 }
4703 if (!s->ioc) {
4704 s->listen_tag = qio_channel_add_watch(
4705 QIO_CHANNEL(s->listen_ioc), G_IO_IN,
4706 tcp_chr_accept, chr, NULL);
4707 }
4708 } else if (qemu_chr_wait_connected(chr, errp) < 0) {
4709 goto error;
4710 }
4711 }
4712
4713 return chr;
4714
4715 error:
4716 if (sioc) {
4717 object_unref(OBJECT(sioc));
4718 }
4719 if (s->tls_creds) {
4720 object_unref(OBJECT(s->tls_creds));
4721 }
4722 g_free(s);
4723 qemu_chr_free_common(chr);
4724 return NULL;
4725 }
4726
4727 static CharDriverState *qmp_chardev_open_udp(const char *id,
4728 ChardevBackend *backend,
4729 ChardevReturn *ret,
4730 Error **errp)
4731 {
4732 ChardevUdp *udp = backend->u.udp.data;
4733 ChardevCommon *common = qapi_ChardevUdp_base(udp);
4734 QIOChannelSocket *sioc = qio_channel_socket_new();
4735
4736 if (qio_channel_socket_dgram_sync(sioc,
4737 udp->local, udp->remote,
4738 errp) < 0) {
4739 object_unref(OBJECT(sioc));
4740 return NULL;
4741 }
4742 return qemu_chr_open_udp(sioc, common, errp);
4743 }
4744
4745
4746 bool qemu_chr_has_feature(CharDriverState *chr,
4747 CharDriverFeature feature)
4748 {
4749 return test_bit(feature, chr->features);
4750 }
4751
4752 void qemu_chr_set_feature(CharDriverState *chr,
4753 CharDriverFeature feature)
4754 {
4755 return set_bit(feature, chr->features);
4756 }
4757
4758 ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
4759 Error **errp)
4760 {
4761 ChardevReturn *ret = g_new0(ChardevReturn, 1);
4762 CharDriverState *chr = NULL;
4763 Error *local_err = NULL;
4764 GSList *i;
4765 CharDriver *cd;
4766
4767 chr = qemu_chr_find(id);
4768 if (chr) {
4769 error_setg(errp, "Chardev '%s' already exists", id);
4770 g_free(ret);
4771 return NULL;
4772 }
4773
4774 for (i = backends; i; i = i->next) {
4775 cd = i->data;
4776
4777 if (cd->kind == backend->type) {
4778 chr = cd->create(id, backend, ret, &local_err);
4779 if (local_err) {
4780 error_propagate(errp, local_err);
4781 goto out_error;
4782 }
4783 break;
4784 }
4785 }
4786
4787 if (chr == NULL) {
4788 assert(!i);
4789 error_setg(errp, "chardev backend not available");
4790 goto out_error;
4791 }
4792
4793 chr->label = g_strdup(id);
4794 chr->avail_connections =
4795 (backend->type == CHARDEV_BACKEND_KIND_MUX) ? MAX_MUX : 1;
4796 if (!chr->filename) {
4797 chr->filename = g_strdup(ChardevBackendKind_lookup[backend->type]);
4798 }
4799 if (!chr->explicit_be_open) {
4800 qemu_chr_be_event(chr, CHR_EVENT_OPENED);
4801 }
4802 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
4803 return ret;
4804
4805 out_error:
4806 g_free(ret);
4807 return NULL;
4808 }
4809
4810 void qmp_chardev_remove(const char *id, Error **errp)
4811 {
4812 CharDriverState *chr;
4813
4814 chr = qemu_chr_find(id);
4815 if (chr == NULL) {
4816 error_setg(errp, "Chardev '%s' not found", id);
4817 return;
4818 }
4819 if (qemu_chr_is_busy(chr)) {
4820 error_setg(errp, "Chardev '%s' is busy", id);
4821 return;
4822 }
4823 if (chr->replay) {
4824 error_setg(errp,
4825 "Chardev '%s' cannot be unplugged in record/replay mode", id);
4826 return;
4827 }
4828 qemu_chr_delete(chr);
4829 }
4830
4831 void qemu_chr_cleanup(void)
4832 {
4833 CharDriverState *chr, *tmp;
4834
4835 QTAILQ_FOREACH_SAFE(chr, &chardevs, next, tmp) {
4836 qemu_chr_delete(chr);
4837 }
4838 }
4839
4840 static void register_types(void)
4841 {
4842 register_char_driver("null", CHARDEV_BACKEND_KIND_NULL, NULL,
4843 qemu_chr_open_null);
4844 register_char_driver("socket", CHARDEV_BACKEND_KIND_SOCKET,
4845 qemu_chr_parse_socket, qmp_chardev_open_socket);
4846 register_char_driver("udp", CHARDEV_BACKEND_KIND_UDP, qemu_chr_parse_udp,
4847 qmp_chardev_open_udp);
4848 register_char_driver("ringbuf", CHARDEV_BACKEND_KIND_RINGBUF,
4849 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
4850 register_char_driver("file", CHARDEV_BACKEND_KIND_FILE,
4851 qemu_chr_parse_file_out, qmp_chardev_open_file);
4852 register_char_driver("stdio", CHARDEV_BACKEND_KIND_STDIO,
4853 qemu_chr_parse_stdio, qemu_chr_open_stdio);
4854 #if defined HAVE_CHARDEV_SERIAL
4855 register_char_driver("serial", CHARDEV_BACKEND_KIND_SERIAL,
4856 qemu_chr_parse_serial, qmp_chardev_open_serial);
4857 register_char_driver("tty", CHARDEV_BACKEND_KIND_SERIAL,
4858 qemu_chr_parse_serial, qmp_chardev_open_serial);
4859 #endif
4860 #ifdef HAVE_CHARDEV_PARPORT
4861 register_char_driver("parallel", CHARDEV_BACKEND_KIND_PARALLEL,
4862 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4863 register_char_driver("parport", CHARDEV_BACKEND_KIND_PARALLEL,
4864 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4865 #endif
4866 #ifdef HAVE_CHARDEV_PTY
4867 register_char_driver("pty", CHARDEV_BACKEND_KIND_PTY, NULL,
4868 qemu_chr_open_pty);
4869 #endif
4870 #ifdef _WIN32
4871 register_char_driver("console", CHARDEV_BACKEND_KIND_CONSOLE, NULL,
4872 qemu_chr_open_win_con);
4873 #endif
4874 register_char_driver("pipe", CHARDEV_BACKEND_KIND_PIPE,
4875 qemu_chr_parse_pipe, qemu_chr_open_pipe);
4876 register_char_driver("mux", CHARDEV_BACKEND_KIND_MUX, qemu_chr_parse_mux,
4877 qemu_chr_open_mux);
4878 /* Bug-compatibility: */
4879 register_char_driver("memory", CHARDEV_BACKEND_KIND_MEMORY,
4880 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
4881 /* this must be done after machine init, since we register FEs with muxes
4882 * as part of realize functions like serial_isa_realizefn when -nographic
4883 * is specified
4884 */
4885 qemu_add_machine_init_done_notifier(&muxes_realize_notify);
4886 }
4887
4888 type_init(register_types);
QEMU mirror