]> git.proxmox.com Git - mirror_qemu.git/blob - qemu-char.c
char: start converting mux driver to use CharBackend
[mirror_qemu.git] / qemu-char.c
1 /*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24 #include "qemu/osdep.h"
25 #include "qemu-common.h"
26 #include "qemu/cutils.h"
27 #include "monitor/monitor.h"
28 #include "sysemu/sysemu.h"
29 #include "sysemu/block-backend.h"
30 #include "qemu/error-report.h"
31 #include "qemu/timer.h"
32 #include "sysemu/char.h"
33 #include "hw/usb.h"
34 #include "qmp-commands.h"
35 #include "qapi/clone-visitor.h"
36 #include "qapi-visit.h"
37 #include "qemu/base64.h"
38 #include "io/channel-socket.h"
39 #include "io/channel-file.h"
40 #include "io/channel-tls.h"
41 #include "sysemu/replay.h"
42 #include "qemu/help_option.h"
43
44 #include <zlib.h>
45
46 #ifndef _WIN32
47 #include <sys/times.h>
48 #include <sys/wait.h>
49 #include <termios.h>
50 #include <sys/ioctl.h>
51 #include <sys/resource.h>
52 #include <sys/socket.h>
53 #include <netinet/in.h>
54 #include <net/if.h>
55 #include <arpa/inet.h>
56 #include <netdb.h>
57 #include <sys/select.h>
58 #ifdef CONFIG_BSD
59 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
60 #include <dev/ppbus/ppi.h>
61 #include <dev/ppbus/ppbconf.h>
62 #elif defined(__DragonFly__)
63 #include <dev/misc/ppi/ppi.h>
64 #include <bus/ppbus/ppbconf.h>
65 #endif
66 #else
67 #ifdef __linux__
68 #include <linux/ppdev.h>
69 #include <linux/parport.h>
70 #endif
71 #ifdef __sun__
72 #include <sys/ethernet.h>
73 #include <sys/sockio.h>
74 #include <netinet/arp.h>
75 #include <netinet/in.h>
76 #include <netinet/in_systm.h>
77 #include <netinet/ip.h>
78 #include <netinet/ip_icmp.h> // must come after ip.h
79 #include <netinet/udp.h>
80 #include <netinet/tcp.h>
81 #endif
82 #endif
83 #endif
84
85 #include "qemu/sockets.h"
86 #include "ui/qemu-spice.h"
87
88 #define READ_BUF_LEN 4096
89 #define READ_RETRIES 10
90 #define TCP_MAX_FDS 16
91
92 typedef struct MuxDriver MuxDriver;
93
94 /***********************************************************/
95 /* Socket address helpers */
96
97 static char *SocketAddress_to_str(const char *prefix, SocketAddress *addr,
98 bool is_listen, bool is_telnet)
99 {
100 switch (addr->type) {
101 case SOCKET_ADDRESS_KIND_INET:
102 return g_strdup_printf("%s%s:%s:%s%s", prefix,
103 is_telnet ? "telnet" : "tcp",
104 addr->u.inet.data->host,
105 addr->u.inet.data->port,
106 is_listen ? ",server" : "");
107 break;
108 case SOCKET_ADDRESS_KIND_UNIX:
109 return g_strdup_printf("%sunix:%s%s", prefix,
110 addr->u.q_unix.data->path,
111 is_listen ? ",server" : "");
112 break;
113 case SOCKET_ADDRESS_KIND_FD:
114 return g_strdup_printf("%sfd:%s%s", prefix, addr->u.fd.data->str,
115 is_listen ? ",server" : "");
116 break;
117 default:
118 abort();
119 }
120 }
121
122 static char *sockaddr_to_str(struct sockaddr_storage *ss, socklen_t ss_len,
123 struct sockaddr_storage *ps, socklen_t ps_len,
124 bool is_listen, bool is_telnet)
125 {
126 char shost[NI_MAXHOST], sserv[NI_MAXSERV];
127 char phost[NI_MAXHOST], pserv[NI_MAXSERV];
128 const char *left = "", *right = "";
129
130 switch (ss->ss_family) {
131 #ifndef _WIN32
132 case AF_UNIX:
133 return g_strdup_printf("unix:%s%s",
134 ((struct sockaddr_un *)(ss))->sun_path,
135 is_listen ? ",server" : "");
136 #endif
137 case AF_INET6:
138 left = "[";
139 right = "]";
140 /* fall through */
141 case AF_INET:
142 getnameinfo((struct sockaddr *) ss, ss_len, shost, sizeof(shost),
143 sserv, sizeof(sserv), NI_NUMERICHOST | NI_NUMERICSERV);
144 getnameinfo((struct sockaddr *) ps, ps_len, phost, sizeof(phost),
145 pserv, sizeof(pserv), NI_NUMERICHOST | NI_NUMERICSERV);
146 return g_strdup_printf("%s:%s%s%s:%s%s <-> %s%s%s:%s",
147 is_telnet ? "telnet" : "tcp",
148 left, shost, right, sserv,
149 is_listen ? ",server" : "",
150 left, phost, right, pserv);
151
152 default:
153 return g_strdup_printf("unknown");
154 }
155 }
156
157 /***********************************************************/
158 /* character device */
159
160 static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
161 QTAILQ_HEAD_INITIALIZER(chardevs);
162
163 static void qemu_chr_free_common(CharDriverState *chr);
164
165 CharDriverState *qemu_chr_alloc(ChardevCommon *backend, Error **errp)
166 {
167 CharDriverState *chr = g_malloc0(sizeof(CharDriverState));
168 qemu_mutex_init(&chr->chr_write_lock);
169
170 if (backend->has_logfile) {
171 int flags = O_WRONLY | O_CREAT;
172 if (backend->has_logappend &&
173 backend->logappend) {
174 flags |= O_APPEND;
175 } else {
176 flags |= O_TRUNC;
177 }
178 chr->logfd = qemu_open(backend->logfile, flags, 0666);
179 if (chr->logfd < 0) {
180 error_setg_errno(errp, errno,
181 "Unable to open logfile %s",
182 backend->logfile);
183 g_free(chr);
184 return NULL;
185 }
186 } else {
187 chr->logfd = -1;
188 }
189
190 return chr;
191 }
192
193 void qemu_chr_be_event(CharDriverState *s, int event)
194 {
195 /* Keep track if the char device is open */
196 switch (event) {
197 case CHR_EVENT_OPENED:
198 s->be_open = 1;
199 break;
200 case CHR_EVENT_CLOSED:
201 s->be_open = 0;
202 break;
203 }
204
205 if (!s->chr_event)
206 return;
207 s->chr_event(s->handler_opaque, event);
208 }
209
210 void qemu_chr_be_generic_open(CharDriverState *s)
211 {
212 qemu_chr_be_event(s, CHR_EVENT_OPENED);
213 }
214
215
216 /* Not reporting errors from writing to logfile, as logs are
217 * defined to be "best effort" only */
218 static void qemu_chr_fe_write_log(CharDriverState *s,
219 const uint8_t *buf, size_t len)
220 {
221 size_t done = 0;
222 ssize_t ret;
223
224 if (s->logfd < 0) {
225 return;
226 }
227
228 while (done < len) {
229 retry:
230 ret = write(s->logfd, buf + done, len - done);
231 if (ret == -1 && errno == EAGAIN) {
232 g_usleep(100);
233 goto retry;
234 }
235
236 if (ret <= 0) {
237 return;
238 }
239 done += ret;
240 }
241 }
242
243 static int qemu_chr_fe_write_buffer(CharDriverState *s, const uint8_t *buf, int len, int *offset)
244 {
245 int res = 0;
246 *offset = 0;
247
248 qemu_mutex_lock(&s->chr_write_lock);
249 while (*offset < len) {
250 retry:
251 res = s->chr_write(s, buf + *offset, len - *offset);
252 if (res < 0 && errno == EAGAIN) {
253 g_usleep(100);
254 goto retry;
255 }
256
257 if (res <= 0) {
258 break;
259 }
260
261 *offset += res;
262 }
263 if (*offset > 0) {
264 qemu_chr_fe_write_log(s, buf, *offset);
265 }
266 qemu_mutex_unlock(&s->chr_write_lock);
267
268 return res;
269 }
270
271 int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
272 {
273 int ret;
274
275 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
276 int offset;
277 replay_char_write_event_load(&ret, &offset);
278 assert(offset <= len);
279 qemu_chr_fe_write_buffer(s, buf, offset, &offset);
280 return ret;
281 }
282
283 qemu_mutex_lock(&s->chr_write_lock);
284 ret = s->chr_write(s, buf, len);
285
286 if (ret > 0) {
287 qemu_chr_fe_write_log(s, buf, ret);
288 }
289
290 qemu_mutex_unlock(&s->chr_write_lock);
291
292 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
293 replay_char_write_event_save(ret, ret < 0 ? 0 : ret);
294 }
295
296 return ret;
297 }
298
299 int qemu_chr_fe_write_all(CharDriverState *s, const uint8_t *buf, int len)
300 {
301 int offset;
302 int res;
303
304 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
305 replay_char_write_event_load(&res, &offset);
306 assert(offset <= len);
307 qemu_chr_fe_write_buffer(s, buf, offset, &offset);
308 return res;
309 }
310
311 res = qemu_chr_fe_write_buffer(s, buf, len, &offset);
312
313 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
314 replay_char_write_event_save(res, offset);
315 }
316
317 if (res < 0) {
318 return res;
319 }
320 return offset;
321 }
322
323 int qemu_chr_fe_read_all(CharDriverState *s, uint8_t *buf, int len)
324 {
325 int offset = 0, counter = 10;
326 int res;
327
328 if (!s->chr_sync_read) {
329 return 0;
330 }
331
332 if (s->replay && replay_mode == REPLAY_MODE_PLAY) {
333 return replay_char_read_all_load(buf);
334 }
335
336 while (offset < len) {
337 retry:
338 res = s->chr_sync_read(s, buf + offset, len - offset);
339 if (res == -1 && errno == EAGAIN) {
340 g_usleep(100);
341 goto retry;
342 }
343
344 if (res == 0) {
345 break;
346 }
347
348 if (res < 0) {
349 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
350 replay_char_read_all_save_error(res);
351 }
352 return res;
353 }
354
355 offset += res;
356
357 if (!counter--) {
358 break;
359 }
360 }
361
362 if (s->replay && replay_mode == REPLAY_MODE_RECORD) {
363 replay_char_read_all_save_buf(buf, offset);
364 }
365 return offset;
366 }
367
368 int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
369 {
370 int res;
371 if (!s->chr_ioctl || s->replay) {
372 res = -ENOTSUP;
373 } else {
374 res = s->chr_ioctl(s, cmd, arg);
375 }
376
377 return res;
378 }
379
380 int qemu_chr_be_can_write(CharDriverState *s)
381 {
382 if (!s->chr_can_read)
383 return 0;
384 return s->chr_can_read(s->handler_opaque);
385 }
386
387 void qemu_chr_be_write_impl(CharDriverState *s, uint8_t *buf, int len)
388 {
389 if (s->chr_read) {
390 s->chr_read(s->handler_opaque, buf, len);
391 }
392 }
393
394 void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
395 {
396 if (s->replay) {
397 if (replay_mode == REPLAY_MODE_PLAY) {
398 return;
399 }
400 replay_chr_be_write(s, buf, len);
401 } else {
402 qemu_chr_be_write_impl(s, buf, len);
403 }
404 }
405
406 int qemu_chr_fe_get_msgfd(CharDriverState *s)
407 {
408 int fd;
409 int res = (qemu_chr_fe_get_msgfds(s, &fd, 1) == 1) ? fd : -1;
410 if (s->replay) {
411 fprintf(stderr,
412 "Replay: get msgfd is not supported for serial devices yet\n");
413 exit(1);
414 }
415 return res;
416 }
417
418 int qemu_chr_fe_get_msgfds(CharDriverState *s, int *fds, int len)
419 {
420 return s->get_msgfds ? s->get_msgfds(s, fds, len) : -1;
421 }
422
423 int qemu_chr_fe_set_msgfds(CharDriverState *s, int *fds, int num)
424 {
425 return s->set_msgfds ? s->set_msgfds(s, fds, num) : -1;
426 }
427
428 int qemu_chr_add_client(CharDriverState *s, int fd)
429 {
430 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
431 }
432
433 void qemu_chr_accept_input(CharDriverState *s)
434 {
435 if (s->chr_accept_input)
436 s->chr_accept_input(s);
437 qemu_notify_event();
438 }
439
440 void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
441 {
442 char buf[READ_BUF_LEN];
443 va_list ap;
444 va_start(ap, fmt);
445 vsnprintf(buf, sizeof(buf), fmt, ap);
446 /* XXX this blocks entire thread. Rewrite to use
447 * qemu_chr_fe_write and background I/O callbacks */
448 qemu_chr_fe_write_all(s, (uint8_t *)buf, strlen(buf));
449 va_end(ap);
450 }
451
452 static void remove_fd_in_watch(CharDriverState *chr);
453
454 static void
455 qemu_chr_set_handlers(CharDriverState *s,
456 IOCanReadHandler *fd_can_read,
457 IOReadHandler *fd_read,
458 IOEventHandler *fd_event,
459 void *opaque,
460 GMainContext *context,
461 int tag)
462 {
463 int fe_open;
464
465 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
466 fe_open = 0;
467 remove_fd_in_watch(s);
468 } else {
469 fe_open = 1;
470 }
471 s->chr_can_read = fd_can_read;
472 s->chr_read = fd_read;
473 s->chr_event = fd_event;
474 s->handler_opaque = opaque;
475 if (s->chr_update_read_handler) {
476 s->chr_update_read_handler(s, context, tag);
477 }
478
479 if (!s->explicit_fe_open) {
480 qemu_chr_fe_set_open(s, fe_open);
481 }
482
483 /* We're connecting to an already opened device, so let's make sure we
484 also get the open event */
485 if (fe_open && s->be_open) {
486 qemu_chr_be_generic_open(s);
487 }
488 }
489
490 static int mux_chr_new_handler_tag(CharDriverState *chr, Error **errp);
491 static void mux_chr_set_handlers(CharDriverState *chr, GMainContext *context);
492 static void mux_set_focus(MuxDriver *d, int focus);
493
494 void qemu_chr_add_handlers_full(CharDriverState *s,
495 IOCanReadHandler *fd_can_read,
496 IOReadHandler *fd_read,
497 IOEventHandler *fd_event,
498 void *opaque,
499 GMainContext *context)
500 {
501 int tag = 0;
502
503 if (s->is_mux) {
504 tag = mux_chr_new_handler_tag(s, &error_abort);
505 mux_chr_set_handlers(s, context);
506 }
507
508 qemu_chr_set_handlers(s, fd_can_read, fd_read,
509 fd_event, opaque, context, tag);
510
511 if (s->is_mux) {
512 mux_set_focus(s->opaque, tag);
513 }
514 }
515
516 void qemu_chr_add_handlers(CharDriverState *s,
517 IOCanReadHandler *fd_can_read,
518 IOReadHandler *fd_read,
519 IOEventHandler *fd_event,
520 void *opaque)
521 {
522 qemu_chr_add_handlers_full(s, fd_can_read, fd_read,
523 fd_event, opaque, NULL);
524 }
525
526 static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
527 {
528 return len;
529 }
530
531 static CharDriverState *qemu_chr_open_null(const char *id,
532 ChardevBackend *backend,
533 ChardevReturn *ret,
534 Error **errp)
535 {
536 CharDriverState *chr;
537 ChardevCommon *common = backend->u.null.data;
538
539 chr = qemu_chr_alloc(common, errp);
540 if (!chr) {
541 return NULL;
542 }
543 chr->chr_write = null_chr_write;
544 chr->explicit_be_open = true;
545 return chr;
546 }
547
548 /* MUX driver for serial I/O splitting */
549 #define MAX_MUX 4
550 #define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
551 #define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
552 struct MuxDriver {
553 IOCanReadHandler *chr_can_read[MAX_MUX];
554 IOReadHandler *chr_read[MAX_MUX];
555 IOEventHandler *chr_event[MAX_MUX];
556 void *ext_opaque[MAX_MUX];
557 CharDriverState *drv;
558 CharBackend chr;
559 int focus;
560 int mux_cnt;
561 int term_got_escape;
562 int max_size;
563 /* Intermediate input buffer allows to catch escape sequences even if the
564 currently active device is not accepting any input - but only until it
565 is full as well. */
566 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
567 int prod[MAX_MUX];
568 int cons[MAX_MUX];
569 int timestamps;
570
571 /* Protected by the CharDriverState chr_write_lock. */
572 int linestart;
573 int64_t timestamps_start;
574 };
575
576 /* Called with chr_write_lock held. */
577 static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
578 {
579 MuxDriver *d = chr->opaque;
580 int ret;
581 if (!d->timestamps) {
582 ret = qemu_chr_fe_write(d->drv, buf, len);
583 } else {
584 int i;
585
586 ret = 0;
587 for (i = 0; i < len; i++) {
588 if (d->linestart) {
589 char buf1[64];
590 int64_t ti;
591 int secs;
592
593 ti = qemu_clock_get_ms(QEMU_CLOCK_REALTIME);
594 if (d->timestamps_start == -1)
595 d->timestamps_start = ti;
596 ti -= d->timestamps_start;
597 secs = ti / 1000;
598 snprintf(buf1, sizeof(buf1),
599 "[%02d:%02d:%02d.%03d] ",
600 secs / 3600,
601 (secs / 60) % 60,
602 secs % 60,
603 (int)(ti % 1000));
604 /* XXX this blocks entire thread. Rewrite to use
605 * qemu_chr_fe_write and background I/O callbacks */
606 qemu_chr_fe_write_all(d->drv, (uint8_t *)buf1, strlen(buf1));
607 d->linestart = 0;
608 }
609 ret += qemu_chr_fe_write(d->drv, buf+i, 1);
610 if (buf[i] == '\n') {
611 d->linestart = 1;
612 }
613 }
614 }
615 return ret;
616 }
617
618 static const char * const mux_help[] = {
619 "% h print this help\n\r",
620 "% x exit emulator\n\r",
621 "% s save disk data back to file (if -snapshot)\n\r",
622 "% t toggle console timestamps\n\r",
623 "% b send break (magic sysrq)\n\r",
624 "% c switch between console and monitor\n\r",
625 "% % sends %\n\r",
626 NULL
627 };
628
629 int term_escape_char = 0x01; /* ctrl-a is used for escape */
630 static void mux_print_help(CharDriverState *chr)
631 {
632 int i, j;
633 char ebuf[15] = "Escape-Char";
634 char cbuf[50] = "\n\r";
635
636 if (term_escape_char > 0 && term_escape_char < 26) {
637 snprintf(cbuf, sizeof(cbuf), "\n\r");
638 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
639 } else {
640 snprintf(cbuf, sizeof(cbuf),
641 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
642 term_escape_char);
643 }
644 /* XXX this blocks entire thread. Rewrite to use
645 * qemu_chr_fe_write and background I/O callbacks */
646 qemu_chr_fe_write_all(chr, (uint8_t *)cbuf, strlen(cbuf));
647 for (i = 0; mux_help[i] != NULL; i++) {
648 for (j=0; mux_help[i][j] != '\0'; j++) {
649 if (mux_help[i][j] == '%')
650 qemu_chr_fe_write_all(chr, (uint8_t *)ebuf, strlen(ebuf));
651 else
652 qemu_chr_fe_write_all(chr, (uint8_t *)&mux_help[i][j], 1);
653 }
654 }
655 }
656
657 static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
658 {
659 if (d->chr_event[mux_nr])
660 d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
661 }
662
663 static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
664 {
665 if (d->term_got_escape) {
666 d->term_got_escape = 0;
667 if (ch == term_escape_char)
668 goto send_char;
669 switch(ch) {
670 case '?':
671 case 'h':
672 mux_print_help(chr);
673 break;
674 case 'x':
675 {
676 const char *term = "QEMU: Terminated\n\r";
677 qemu_chr_fe_write_all(chr, (uint8_t *)term, strlen(term));
678 exit(0);
679 break;
680 }
681 case 's':
682 blk_commit_all();
683 break;
684 case 'b':
685 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
686 break;
687 case 'c':
688 assert(d->mux_cnt > 0); /* handler registered with first fe */
689 /* Switch to the next registered device */
690 mux_set_focus(d, (d->focus + 1) % d->mux_cnt);
691 break;
692 case 't':
693 d->timestamps = !d->timestamps;
694 d->timestamps_start = -1;
695 d->linestart = 0;
696 break;
697 }
698 } else if (ch == term_escape_char) {
699 d->term_got_escape = 1;
700 } else {
701 send_char:
702 return 1;
703 }
704 return 0;
705 }
706
707 static void mux_chr_accept_input(CharDriverState *chr)
708 {
709 MuxDriver *d = chr->opaque;
710 int m = d->focus;
711
712 while (d->prod[m] != d->cons[m] &&
713 d->chr_can_read[m] &&
714 d->chr_can_read[m](d->ext_opaque[m])) {
715 d->chr_read[m](d->ext_opaque[m],
716 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
717 }
718 }
719
720 static int mux_chr_can_read(void *opaque)
721 {
722 CharDriverState *chr = opaque;
723 MuxDriver *d = chr->opaque;
724 int m = d->focus;
725
726 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
727 return 1;
728 if (d->chr_can_read[m])
729 return d->chr_can_read[m](d->ext_opaque[m]);
730 return 0;
731 }
732
733 static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
734 {
735 CharDriverState *chr = opaque;
736 MuxDriver *d = chr->opaque;
737 int m = d->focus;
738 int i;
739
740 mux_chr_accept_input (opaque);
741
742 for(i = 0; i < size; i++)
743 if (mux_proc_byte(chr, d, buf[i])) {
744 if (d->prod[m] == d->cons[m] &&
745 d->chr_can_read[m] &&
746 d->chr_can_read[m](d->ext_opaque[m]))
747 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
748 else
749 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
750 }
751 }
752
753 static void mux_chr_event(void *opaque, int event)
754 {
755 CharDriverState *chr = opaque;
756 MuxDriver *d = chr->opaque;
757 int i;
758
759 /* Send the event to all registered listeners */
760 for (i = 0; i < d->mux_cnt; i++)
761 mux_chr_send_event(d, i, event);
762 }
763
764 static void mux_chr_update_read_handler(CharDriverState *chr,
765 GMainContext *context,
766 int tag)
767 {
768 MuxDriver *d = chr->opaque;
769
770 assert(tag >= 0);
771 assert(tag < d->mux_cnt);
772
773 d->ext_opaque[tag] = chr->handler_opaque;
774 d->chr_can_read[tag] = chr->chr_can_read;
775 d->chr_read[tag] = chr->chr_read;
776 d->chr_event[tag] = chr->chr_event;
777 }
778
779 static bool muxes_realized;
780
781 /**
782 * Called after processing of default and command-line-specified
783 * chardevs to deliver CHR_EVENT_OPENED events to any FEs attached
784 * to a mux chardev. This is done here to ensure that
785 * output/prompts/banners are only displayed for the FE that has
786 * focus when initial command-line processing/machine init is
787 * completed.
788 *
789 * After this point, any new FE attached to any new or existing
790 * mux will receive CHR_EVENT_OPENED notifications for the BE
791 * immediately.
792 */
793 static void muxes_realize_done(Notifier *notifier, void *unused)
794 {
795 CharDriverState *chr;
796
797 QTAILQ_FOREACH(chr, &chardevs, next) {
798 if (chr->is_mux) {
799 MuxDriver *d = chr->opaque;
800 int i;
801
802 /* send OPENED to all already-attached FEs */
803 for (i = 0; i < d->mux_cnt; i++) {
804 mux_chr_send_event(d, i, CHR_EVENT_OPENED);
805 }
806 /* mark mux as OPENED so any new FEs will immediately receive
807 * OPENED event
808 */
809 qemu_chr_be_generic_open(chr);
810 }
811 }
812 muxes_realized = true;
813 }
814
815 static Notifier muxes_realize_notify = {
816 .notify = muxes_realize_done,
817 };
818
819 static GSource *mux_chr_add_watch(CharDriverState *s, GIOCondition cond)
820 {
821 MuxDriver *d = s->opaque;
822 return d->drv->chr_add_watch(d->drv, cond);
823 }
824
825 static void mux_chr_close(struct CharDriverState *chr)
826 {
827 MuxDriver *d = chr->opaque;
828
829 g_free(d);
830 }
831
832 static int mux_chr_new_handler_tag(CharDriverState *chr, Error **errp)
833 {
834 MuxDriver *d = chr->opaque;
835
836 if (d->mux_cnt >= MAX_MUX) {
837 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
838 return -1;
839 }
840
841 return d->mux_cnt++;
842 }
843
844 static void mux_chr_set_handlers(CharDriverState *chr, GMainContext *context)
845 {
846 MuxDriver *d = chr->opaque;
847
848 /* Fix up the real driver with mux routines */
849 qemu_chr_fe_set_handlers(&d->chr,
850 mux_chr_can_read,
851 mux_chr_read,
852 mux_chr_event,
853 chr,
854 context);
855 }
856
857 static void mux_set_focus(MuxDriver *d, int focus)
858 {
859 assert(focus >= 0);
860 assert(focus < d->mux_cnt);
861
862 if (d->focus != -1) {
863 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
864 }
865
866 d->focus = focus;
867 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
868 }
869
870 static CharDriverState *qemu_chr_open_mux(const char *id,
871 ChardevBackend *backend,
872 ChardevReturn *ret, Error **errp)
873 {
874 ChardevMux *mux = backend->u.mux.data;
875 CharDriverState *chr, *drv;
876 MuxDriver *d;
877 ChardevCommon *common = qapi_ChardevMux_base(mux);
878
879 drv = qemu_chr_find(mux->chardev);
880 if (drv == NULL) {
881 error_setg(errp, "mux: base chardev %s not found", mux->chardev);
882 return NULL;
883 }
884
885 chr = qemu_chr_alloc(common, errp);
886 if (!chr) {
887 return NULL;
888 }
889 d = g_new0(MuxDriver, 1);
890
891 chr->opaque = d;
892 d->drv = drv;
893 d->focus = -1;
894 chr->chr_close = mux_chr_close;
895 chr->chr_write = mux_chr_write;
896 chr->chr_update_read_handler = mux_chr_update_read_handler;
897 chr->chr_accept_input = mux_chr_accept_input;
898 /* Frontend guest-open / -close notification is not support with muxes */
899 chr->chr_set_fe_open = NULL;
900 if (drv->chr_add_watch) {
901 chr->chr_add_watch = mux_chr_add_watch;
902 }
903 /* only default to opened state if we've realized the initial
904 * set of muxes
905 */
906 chr->explicit_be_open = muxes_realized ? 0 : 1;
907 chr->is_mux = 1;
908 if (!qemu_chr_fe_init(&d->chr, d->drv, errp)) {
909 qemu_chr_free(chr);
910 return NULL;
911 }
912
913 return chr;
914 }
915
916 CharDriverState *qemu_chr_fe_get_driver(CharBackend *be)
917 {
918 return be->chr;
919 }
920
921 bool qemu_chr_fe_init(CharBackend *b, CharDriverState *s, Error **errp)
922 {
923 int tag = 0;
924
925 if (s->is_mux) {
926 tag = mux_chr_new_handler_tag(s, errp);
927 if (tag < 0) {
928 return false;
929 }
930 }
931
932 b->tag = tag;
933 b->chr = s;
934
935 return true;
936 }
937
938 void qemu_chr_fe_set_handlers(CharBackend *b,
939 IOCanReadHandler *fd_can_read,
940 IOReadHandler *fd_read,
941 IOEventHandler *fd_event,
942 void *opaque,
943 GMainContext *context)
944 {
945 if (!b->chr) {
946 return;
947 }
948
949 qemu_chr_set_handlers(b->chr, fd_can_read, fd_read,
950 fd_event, opaque, context, b->tag);
951
952 if (b->chr->is_mux) {
953 mux_chr_set_handlers(b->chr, context);
954 }
955 }
956
957 void qemu_chr_fe_take_focus(CharBackend *b)
958 {
959 if (b->chr->is_mux) {
960 mux_set_focus(b->chr->opaque, b->tag);
961 }
962 }
963
964 typedef struct IOWatchPoll
965 {
966 GSource parent;
967
968 QIOChannel *ioc;
969 GSource *src;
970
971 IOCanReadHandler *fd_can_read;
972 GSourceFunc fd_read;
973 void *opaque;
974 GMainContext *context;
975 } IOWatchPoll;
976
977 static IOWatchPoll *io_watch_poll_from_source(GSource *source)
978 {
979 return container_of(source, IOWatchPoll, parent);
980 }
981
982 static gboolean io_watch_poll_prepare(GSource *source,
983 gint *timeout_)
984 {
985 IOWatchPoll *iwp = io_watch_poll_from_source(source);
986 bool now_active = iwp->fd_can_read(iwp->opaque) > 0;
987 bool was_active = iwp->src != NULL;
988 if (was_active == now_active) {
989 return FALSE;
990 }
991
992 if (now_active) {
993 iwp->src = qio_channel_create_watch(
994 iwp->ioc, G_IO_IN | G_IO_ERR | G_IO_HUP | G_IO_NVAL);
995 g_source_set_callback(iwp->src, iwp->fd_read, iwp->opaque, NULL);
996 g_source_attach(iwp->src, iwp->context);
997 } else {
998 g_source_destroy(iwp->src);
999 g_source_unref(iwp->src);
1000 iwp->src = NULL;
1001 }
1002 return FALSE;
1003 }
1004
1005 static gboolean io_watch_poll_check(GSource *source)
1006 {
1007 return FALSE;
1008 }
1009
1010 static gboolean io_watch_poll_dispatch(GSource *source, GSourceFunc callback,
1011 gpointer user_data)
1012 {
1013 abort();
1014 }
1015
1016 static void io_watch_poll_finalize(GSource *source)
1017 {
1018 /* Due to a glib bug, removing the last reference to a source
1019 * inside a finalize callback causes recursive locking (and a
1020 * deadlock). This is not a problem inside other callbacks,
1021 * including dispatch callbacks, so we call io_remove_watch_poll
1022 * to remove this source. At this point, iwp->src must
1023 * be NULL, or we would leak it.
1024 *
1025 * This would be solved much more elegantly by child sources,
1026 * but we support older glib versions that do not have them.
1027 */
1028 IOWatchPoll *iwp = io_watch_poll_from_source(source);
1029 assert(iwp->src == NULL);
1030 }
1031
1032 static GSourceFuncs io_watch_poll_funcs = {
1033 .prepare = io_watch_poll_prepare,
1034 .check = io_watch_poll_check,
1035 .dispatch = io_watch_poll_dispatch,
1036 .finalize = io_watch_poll_finalize,
1037 };
1038
1039 /* Can only be used for read */
1040 static guint io_add_watch_poll(QIOChannel *ioc,
1041 IOCanReadHandler *fd_can_read,
1042 QIOChannelFunc fd_read,
1043 gpointer user_data,
1044 GMainContext *context)
1045 {
1046 IOWatchPoll *iwp;
1047 int tag;
1048
1049 iwp = (IOWatchPoll *) g_source_new(&io_watch_poll_funcs,
1050 sizeof(IOWatchPoll));
1051 iwp->fd_can_read = fd_can_read;
1052 iwp->opaque = user_data;
1053 iwp->ioc = ioc;
1054 iwp->fd_read = (GSourceFunc) fd_read;
1055 iwp->src = NULL;
1056 iwp->context = context;
1057
1058 tag = g_source_attach(&iwp->parent, context);
1059 g_source_unref(&iwp->parent);
1060 return tag;
1061 }
1062
1063 static void io_remove_watch_poll(guint tag)
1064 {
1065 GSource *source;
1066 IOWatchPoll *iwp;
1067
1068 g_return_if_fail (tag > 0);
1069
1070 source = g_main_context_find_source_by_id(NULL, tag);
1071 g_return_if_fail (source != NULL);
1072
1073 iwp = io_watch_poll_from_source(source);
1074 if (iwp->src) {
1075 g_source_destroy(iwp->src);
1076 g_source_unref(iwp->src);
1077 iwp->src = NULL;
1078 }
1079 g_source_destroy(&iwp->parent);
1080 }
1081
1082 static void remove_fd_in_watch(CharDriverState *chr)
1083 {
1084 if (chr->fd_in_tag) {
1085 io_remove_watch_poll(chr->fd_in_tag);
1086 chr->fd_in_tag = 0;
1087 }
1088 }
1089
1090
1091 static int io_channel_send_full(QIOChannel *ioc,
1092 const void *buf, size_t len,
1093 int *fds, size_t nfds)
1094 {
1095 size_t offset = 0;
1096
1097 while (offset < len) {
1098 ssize_t ret = 0;
1099 struct iovec iov = { .iov_base = (char *)buf + offset,
1100 .iov_len = len - offset };
1101
1102 ret = qio_channel_writev_full(
1103 ioc, &iov, 1,
1104 fds, nfds, NULL);
1105 if (ret == QIO_CHANNEL_ERR_BLOCK) {
1106 if (offset) {
1107 return offset;
1108 }
1109
1110 errno = EAGAIN;
1111 return -1;
1112 } else if (ret < 0) {
1113 errno = EINVAL;
1114 return -1;
1115 }
1116
1117 offset += ret;
1118 }
1119
1120 return offset;
1121 }
1122
1123
1124 #ifndef _WIN32
1125 static int io_channel_send(QIOChannel *ioc, const void *buf, size_t len)
1126 {
1127 return io_channel_send_full(ioc, buf, len, NULL, 0);
1128 }
1129
1130
1131 typedef struct FDCharDriver {
1132 CharDriverState *chr;
1133 QIOChannel *ioc_in, *ioc_out;
1134 int max_size;
1135 } FDCharDriver;
1136
1137 /* Called with chr_write_lock held. */
1138 static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1139 {
1140 FDCharDriver *s = chr->opaque;
1141
1142 return io_channel_send(s->ioc_out, buf, len);
1143 }
1144
1145 static gboolean fd_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
1146 {
1147 CharDriverState *chr = opaque;
1148 FDCharDriver *s = chr->opaque;
1149 int len;
1150 uint8_t buf[READ_BUF_LEN];
1151 ssize_t ret;
1152
1153 len = sizeof(buf);
1154 if (len > s->max_size) {
1155 len = s->max_size;
1156 }
1157 if (len == 0) {
1158 return TRUE;
1159 }
1160
1161 ret = qio_channel_read(
1162 chan, (gchar *)buf, len, NULL);
1163 if (ret == 0) {
1164 remove_fd_in_watch(chr);
1165 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1166 return FALSE;
1167 }
1168 if (ret > 0) {
1169 qemu_chr_be_write(chr, buf, ret);
1170 }
1171
1172 return TRUE;
1173 }
1174
1175 static int fd_chr_read_poll(void *opaque)
1176 {
1177 CharDriverState *chr = opaque;
1178 FDCharDriver *s = chr->opaque;
1179
1180 s->max_size = qemu_chr_be_can_write(chr);
1181 return s->max_size;
1182 }
1183
1184 static GSource *fd_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1185 {
1186 FDCharDriver *s = chr->opaque;
1187 return qio_channel_create_watch(s->ioc_out, cond);
1188 }
1189
1190 static void fd_chr_update_read_handler(CharDriverState *chr,
1191 GMainContext *context,
1192 int tag)
1193 {
1194 FDCharDriver *s = chr->opaque;
1195
1196 remove_fd_in_watch(chr);
1197 if (s->ioc_in) {
1198 chr->fd_in_tag = io_add_watch_poll(s->ioc_in,
1199 fd_chr_read_poll,
1200 fd_chr_read, chr,
1201 context);
1202 }
1203 }
1204
1205 static void fd_chr_close(struct CharDriverState *chr)
1206 {
1207 FDCharDriver *s = chr->opaque;
1208
1209 remove_fd_in_watch(chr);
1210 if (s->ioc_in) {
1211 object_unref(OBJECT(s->ioc_in));
1212 }
1213 if (s->ioc_out) {
1214 object_unref(OBJECT(s->ioc_out));
1215 }
1216
1217 g_free(s);
1218 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1219 }
1220
1221 /* open a character device to a unix fd */
1222 static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out,
1223 ChardevCommon *backend, Error **errp)
1224 {
1225 CharDriverState *chr;
1226 FDCharDriver *s;
1227
1228 chr = qemu_chr_alloc(backend, errp);
1229 if (!chr) {
1230 return NULL;
1231 }
1232 s = g_new0(FDCharDriver, 1);
1233 s->ioc_in = QIO_CHANNEL(qio_channel_file_new_fd(fd_in));
1234 s->ioc_out = QIO_CHANNEL(qio_channel_file_new_fd(fd_out));
1235 qemu_set_nonblock(fd_out);
1236 s->chr = chr;
1237 chr->opaque = s;
1238 chr->chr_add_watch = fd_chr_add_watch;
1239 chr->chr_write = fd_chr_write;
1240 chr->chr_update_read_handler = fd_chr_update_read_handler;
1241 chr->chr_close = fd_chr_close;
1242
1243 return chr;
1244 }
1245
1246 static CharDriverState *qemu_chr_open_pipe(const char *id,
1247 ChardevBackend *backend,
1248 ChardevReturn *ret,
1249 Error **errp)
1250 {
1251 ChardevHostdev *opts = backend->u.pipe.data;
1252 int fd_in, fd_out;
1253 char *filename_in;
1254 char *filename_out;
1255 const char *filename = opts->device;
1256 ChardevCommon *common = qapi_ChardevHostdev_base(opts);
1257
1258
1259 filename_in = g_strdup_printf("%s.in", filename);
1260 filename_out = g_strdup_printf("%s.out", filename);
1261 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
1262 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
1263 g_free(filename_in);
1264 g_free(filename_out);
1265 if (fd_in < 0 || fd_out < 0) {
1266 if (fd_in >= 0)
1267 close(fd_in);
1268 if (fd_out >= 0)
1269 close(fd_out);
1270 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
1271 if (fd_in < 0) {
1272 error_setg_file_open(errp, errno, filename);
1273 return NULL;
1274 }
1275 }
1276 return qemu_chr_open_fd(fd_in, fd_out, common, errp);
1277 }
1278
1279 /* init terminal so that we can grab keys */
1280 static struct termios oldtty;
1281 static int old_fd0_flags;
1282 static bool stdio_in_use;
1283 static bool stdio_allow_signal;
1284 static bool stdio_echo_state;
1285
1286 static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo);
1287
1288 static void term_exit(void)
1289 {
1290 tcsetattr (0, TCSANOW, &oldtty);
1291 fcntl(0, F_SETFL, old_fd0_flags);
1292 }
1293
1294 static void term_stdio_handler(int sig)
1295 {
1296 /* restore echo after resume from suspend. */
1297 qemu_chr_set_echo_stdio(NULL, stdio_echo_state);
1298 }
1299
1300 static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
1301 {
1302 struct termios tty;
1303
1304 stdio_echo_state = echo;
1305 tty = oldtty;
1306 if (!echo) {
1307 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1308 |INLCR|IGNCR|ICRNL|IXON);
1309 tty.c_oflag |= OPOST;
1310 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
1311 tty.c_cflag &= ~(CSIZE|PARENB);
1312 tty.c_cflag |= CS8;
1313 tty.c_cc[VMIN] = 1;
1314 tty.c_cc[VTIME] = 0;
1315 }
1316 if (!stdio_allow_signal)
1317 tty.c_lflag &= ~ISIG;
1318
1319 tcsetattr (0, TCSANOW, &tty);
1320 }
1321
1322 static void qemu_chr_close_stdio(struct CharDriverState *chr)
1323 {
1324 term_exit();
1325 fd_chr_close(chr);
1326 }
1327
1328 static CharDriverState *qemu_chr_open_stdio(const char *id,
1329 ChardevBackend *backend,
1330 ChardevReturn *ret,
1331 Error **errp)
1332 {
1333 ChardevStdio *opts = backend->u.stdio.data;
1334 CharDriverState *chr;
1335 struct sigaction act;
1336 ChardevCommon *common = qapi_ChardevStdio_base(opts);
1337
1338 if (is_daemonized()) {
1339 error_setg(errp, "cannot use stdio with -daemonize");
1340 return NULL;
1341 }
1342
1343 if (stdio_in_use) {
1344 error_setg(errp, "cannot use stdio by multiple character devices");
1345 return NULL;
1346 }
1347
1348 stdio_in_use = true;
1349 old_fd0_flags = fcntl(0, F_GETFL);
1350 tcgetattr(0, &oldtty);
1351 qemu_set_nonblock(0);
1352 atexit(term_exit);
1353
1354 memset(&act, 0, sizeof(act));
1355 act.sa_handler = term_stdio_handler;
1356 sigaction(SIGCONT, &act, NULL);
1357
1358 chr = qemu_chr_open_fd(0, 1, common, errp);
1359 if (!chr) {
1360 return NULL;
1361 }
1362 chr->chr_close = qemu_chr_close_stdio;
1363 chr->chr_set_echo = qemu_chr_set_echo_stdio;
1364 if (opts->has_signal) {
1365 stdio_allow_signal = opts->signal;
1366 }
1367 qemu_chr_fe_set_echo(chr, false);
1368
1369 return chr;
1370 }
1371
1372 #if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
1373 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
1374 || defined(__GLIBC__)
1375
1376 #define HAVE_CHARDEV_SERIAL 1
1377 #define HAVE_CHARDEV_PTY 1
1378
1379 typedef struct {
1380 QIOChannel *ioc;
1381 int read_bytes;
1382
1383 /* Protected by the CharDriverState chr_write_lock. */
1384 int connected;
1385 guint timer_tag;
1386 guint open_tag;
1387 } PtyCharDriver;
1388
1389 static void pty_chr_update_read_handler_locked(CharDriverState *chr);
1390 static void pty_chr_state(CharDriverState *chr, int connected);
1391
1392 static gboolean pty_chr_timer(gpointer opaque)
1393 {
1394 struct CharDriverState *chr = opaque;
1395 PtyCharDriver *s = chr->opaque;
1396
1397 qemu_mutex_lock(&chr->chr_write_lock);
1398 s->timer_tag = 0;
1399 s->open_tag = 0;
1400 if (!s->connected) {
1401 /* Next poll ... */
1402 pty_chr_update_read_handler_locked(chr);
1403 }
1404 qemu_mutex_unlock(&chr->chr_write_lock);
1405 return FALSE;
1406 }
1407
1408 /* Called with chr_write_lock held. */
1409 static void pty_chr_rearm_timer(CharDriverState *chr, int ms)
1410 {
1411 PtyCharDriver *s = chr->opaque;
1412
1413 if (s->timer_tag) {
1414 g_source_remove(s->timer_tag);
1415 s->timer_tag = 0;
1416 }
1417
1418 if (ms == 1000) {
1419 s->timer_tag = g_timeout_add_seconds(1, pty_chr_timer, chr);
1420 } else {
1421 s->timer_tag = g_timeout_add(ms, pty_chr_timer, chr);
1422 }
1423 }
1424
1425 /* Called with chr_write_lock held. */
1426 static void pty_chr_update_read_handler_locked(CharDriverState *chr)
1427 {
1428 PtyCharDriver *s = chr->opaque;
1429 GPollFD pfd;
1430 int rc;
1431 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc);
1432
1433 pfd.fd = fioc->fd;
1434 pfd.events = G_IO_OUT;
1435 pfd.revents = 0;
1436 do {
1437 rc = g_poll(&pfd, 1, 0);
1438 } while (rc == -1 && errno == EINTR);
1439 assert(rc >= 0);
1440
1441 if (pfd.revents & G_IO_HUP) {
1442 pty_chr_state(chr, 0);
1443 } else {
1444 pty_chr_state(chr, 1);
1445 }
1446 }
1447
1448 static void pty_chr_update_read_handler(CharDriverState *chr,
1449 GMainContext *context,
1450 int tag)
1451 {
1452 qemu_mutex_lock(&chr->chr_write_lock);
1453 pty_chr_update_read_handler_locked(chr);
1454 qemu_mutex_unlock(&chr->chr_write_lock);
1455 }
1456
1457 /* Called with chr_write_lock held. */
1458 static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1459 {
1460 PtyCharDriver *s = chr->opaque;
1461
1462 if (!s->connected) {
1463 /* guest sends data, check for (re-)connect */
1464 pty_chr_update_read_handler_locked(chr);
1465 if (!s->connected) {
1466 return 0;
1467 }
1468 }
1469 return io_channel_send(s->ioc, buf, len);
1470 }
1471
1472 static GSource *pty_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1473 {
1474 PtyCharDriver *s = chr->opaque;
1475 if (!s->connected) {
1476 return NULL;
1477 }
1478 return qio_channel_create_watch(s->ioc, cond);
1479 }
1480
1481 static int pty_chr_read_poll(void *opaque)
1482 {
1483 CharDriverState *chr = opaque;
1484 PtyCharDriver *s = chr->opaque;
1485
1486 s->read_bytes = qemu_chr_be_can_write(chr);
1487 return s->read_bytes;
1488 }
1489
1490 static gboolean pty_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
1491 {
1492 CharDriverState *chr = opaque;
1493 PtyCharDriver *s = chr->opaque;
1494 gsize len;
1495 uint8_t buf[READ_BUF_LEN];
1496 ssize_t ret;
1497
1498 len = sizeof(buf);
1499 if (len > s->read_bytes)
1500 len = s->read_bytes;
1501 if (len == 0) {
1502 return TRUE;
1503 }
1504 ret = qio_channel_read(s->ioc, (char *)buf, len, NULL);
1505 if (ret <= 0) {
1506 pty_chr_state(chr, 0);
1507 return FALSE;
1508 } else {
1509 pty_chr_state(chr, 1);
1510 qemu_chr_be_write(chr, buf, ret);
1511 }
1512 return TRUE;
1513 }
1514
1515 static gboolean qemu_chr_be_generic_open_func(gpointer opaque)
1516 {
1517 CharDriverState *chr = opaque;
1518 PtyCharDriver *s = chr->opaque;
1519
1520 s->open_tag = 0;
1521 qemu_chr_be_generic_open(chr);
1522 return FALSE;
1523 }
1524
1525 /* Called with chr_write_lock held. */
1526 static void pty_chr_state(CharDriverState *chr, int connected)
1527 {
1528 PtyCharDriver *s = chr->opaque;
1529
1530 if (!connected) {
1531 if (s->open_tag) {
1532 g_source_remove(s->open_tag);
1533 s->open_tag = 0;
1534 }
1535 remove_fd_in_watch(chr);
1536 s->connected = 0;
1537 /* (re-)connect poll interval for idle guests: once per second.
1538 * We check more frequently in case the guests sends data to
1539 * the virtual device linked to our pty. */
1540 pty_chr_rearm_timer(chr, 1000);
1541 } else {
1542 if (s->timer_tag) {
1543 g_source_remove(s->timer_tag);
1544 s->timer_tag = 0;
1545 }
1546 if (!s->connected) {
1547 g_assert(s->open_tag == 0);
1548 s->connected = 1;
1549 s->open_tag = g_idle_add(qemu_chr_be_generic_open_func, chr);
1550 }
1551 if (!chr->fd_in_tag) {
1552 chr->fd_in_tag = io_add_watch_poll(s->ioc,
1553 pty_chr_read_poll,
1554 pty_chr_read,
1555 chr, NULL);
1556 }
1557 }
1558 }
1559
1560 static void pty_chr_close(struct CharDriverState *chr)
1561 {
1562 PtyCharDriver *s = chr->opaque;
1563
1564 qemu_mutex_lock(&chr->chr_write_lock);
1565 pty_chr_state(chr, 0);
1566 object_unref(OBJECT(s->ioc));
1567 if (s->timer_tag) {
1568 g_source_remove(s->timer_tag);
1569 s->timer_tag = 0;
1570 }
1571 qemu_mutex_unlock(&chr->chr_write_lock);
1572 g_free(s);
1573 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1574 }
1575
1576 static CharDriverState *qemu_chr_open_pty(const char *id,
1577 ChardevBackend *backend,
1578 ChardevReturn *ret,
1579 Error **errp)
1580 {
1581 CharDriverState *chr;
1582 PtyCharDriver *s;
1583 int master_fd, slave_fd;
1584 char pty_name[PATH_MAX];
1585 ChardevCommon *common = backend->u.pty.data;
1586
1587 master_fd = qemu_openpty_raw(&slave_fd, pty_name);
1588 if (master_fd < 0) {
1589 error_setg_errno(errp, errno, "Failed to create PTY");
1590 return NULL;
1591 }
1592
1593 close(slave_fd);
1594 qemu_set_nonblock(master_fd);
1595
1596 chr = qemu_chr_alloc(common, errp);
1597 if (!chr) {
1598 close(master_fd);
1599 return NULL;
1600 }
1601
1602 chr->filename = g_strdup_printf("pty:%s", pty_name);
1603 ret->pty = g_strdup(pty_name);
1604 ret->has_pty = true;
1605
1606 fprintf(stderr, "char device redirected to %s (label %s)\n",
1607 pty_name, id);
1608
1609 s = g_new0(PtyCharDriver, 1);
1610 chr->opaque = s;
1611 chr->chr_write = pty_chr_write;
1612 chr->chr_update_read_handler = pty_chr_update_read_handler;
1613 chr->chr_close = pty_chr_close;
1614 chr->chr_add_watch = pty_chr_add_watch;
1615 chr->explicit_be_open = true;
1616
1617 s->ioc = QIO_CHANNEL(qio_channel_file_new_fd(master_fd));
1618 s->timer_tag = 0;
1619
1620 return chr;
1621 }
1622
1623 static void tty_serial_init(int fd, int speed,
1624 int parity, int data_bits, int stop_bits)
1625 {
1626 struct termios tty;
1627 speed_t spd;
1628
1629 #if 0
1630 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1631 speed, parity, data_bits, stop_bits);
1632 #endif
1633 tcgetattr (fd, &tty);
1634
1635 #define check_speed(val) if (speed <= val) { spd = B##val; break; }
1636 speed = speed * 10 / 11;
1637 do {
1638 check_speed(50);
1639 check_speed(75);
1640 check_speed(110);
1641 check_speed(134);
1642 check_speed(150);
1643 check_speed(200);
1644 check_speed(300);
1645 check_speed(600);
1646 check_speed(1200);
1647 check_speed(1800);
1648 check_speed(2400);
1649 check_speed(4800);
1650 check_speed(9600);
1651 check_speed(19200);
1652 check_speed(38400);
1653 /* Non-Posix values follow. They may be unsupported on some systems. */
1654 check_speed(57600);
1655 check_speed(115200);
1656 #ifdef B230400
1657 check_speed(230400);
1658 #endif
1659 #ifdef B460800
1660 check_speed(460800);
1661 #endif
1662 #ifdef B500000
1663 check_speed(500000);
1664 #endif
1665 #ifdef B576000
1666 check_speed(576000);
1667 #endif
1668 #ifdef B921600
1669 check_speed(921600);
1670 #endif
1671 #ifdef B1000000
1672 check_speed(1000000);
1673 #endif
1674 #ifdef B1152000
1675 check_speed(1152000);
1676 #endif
1677 #ifdef B1500000
1678 check_speed(1500000);
1679 #endif
1680 #ifdef B2000000
1681 check_speed(2000000);
1682 #endif
1683 #ifdef B2500000
1684 check_speed(2500000);
1685 #endif
1686 #ifdef B3000000
1687 check_speed(3000000);
1688 #endif
1689 #ifdef B3500000
1690 check_speed(3500000);
1691 #endif
1692 #ifdef B4000000
1693 check_speed(4000000);
1694 #endif
1695 spd = B115200;
1696 } while (0);
1697
1698 cfsetispeed(&tty, spd);
1699 cfsetospeed(&tty, spd);
1700
1701 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1702 |INLCR|IGNCR|ICRNL|IXON);
1703 tty.c_oflag |= OPOST;
1704 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1705 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1706 switch(data_bits) {
1707 default:
1708 case 8:
1709 tty.c_cflag |= CS8;
1710 break;
1711 case 7:
1712 tty.c_cflag |= CS7;
1713 break;
1714 case 6:
1715 tty.c_cflag |= CS6;
1716 break;
1717 case 5:
1718 tty.c_cflag |= CS5;
1719 break;
1720 }
1721 switch(parity) {
1722 default:
1723 case 'N':
1724 break;
1725 case 'E':
1726 tty.c_cflag |= PARENB;
1727 break;
1728 case 'O':
1729 tty.c_cflag |= PARENB | PARODD;
1730 break;
1731 }
1732 if (stop_bits == 2)
1733 tty.c_cflag |= CSTOPB;
1734
1735 tcsetattr (fd, TCSANOW, &tty);
1736 }
1737
1738 static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1739 {
1740 FDCharDriver *s = chr->opaque;
1741 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc_in);
1742
1743 switch(cmd) {
1744 case CHR_IOCTL_SERIAL_SET_PARAMS:
1745 {
1746 QEMUSerialSetParams *ssp = arg;
1747 tty_serial_init(fioc->fd,
1748 ssp->speed, ssp->parity,
1749 ssp->data_bits, ssp->stop_bits);
1750 }
1751 break;
1752 case CHR_IOCTL_SERIAL_SET_BREAK:
1753 {
1754 int enable = *(int *)arg;
1755 if (enable) {
1756 tcsendbreak(fioc->fd, 1);
1757 }
1758 }
1759 break;
1760 case CHR_IOCTL_SERIAL_GET_TIOCM:
1761 {
1762 int sarg = 0;
1763 int *targ = (int *)arg;
1764 ioctl(fioc->fd, TIOCMGET, &sarg);
1765 *targ = 0;
1766 if (sarg & TIOCM_CTS)
1767 *targ |= CHR_TIOCM_CTS;
1768 if (sarg & TIOCM_CAR)
1769 *targ |= CHR_TIOCM_CAR;
1770 if (sarg & TIOCM_DSR)
1771 *targ |= CHR_TIOCM_DSR;
1772 if (sarg & TIOCM_RI)
1773 *targ |= CHR_TIOCM_RI;
1774 if (sarg & TIOCM_DTR)
1775 *targ |= CHR_TIOCM_DTR;
1776 if (sarg & TIOCM_RTS)
1777 *targ |= CHR_TIOCM_RTS;
1778 }
1779 break;
1780 case CHR_IOCTL_SERIAL_SET_TIOCM:
1781 {
1782 int sarg = *(int *)arg;
1783 int targ = 0;
1784 ioctl(fioc->fd, TIOCMGET, &targ);
1785 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1786 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1787 if (sarg & CHR_TIOCM_CTS)
1788 targ |= TIOCM_CTS;
1789 if (sarg & CHR_TIOCM_CAR)
1790 targ |= TIOCM_CAR;
1791 if (sarg & CHR_TIOCM_DSR)
1792 targ |= TIOCM_DSR;
1793 if (sarg & CHR_TIOCM_RI)
1794 targ |= TIOCM_RI;
1795 if (sarg & CHR_TIOCM_DTR)
1796 targ |= TIOCM_DTR;
1797 if (sarg & CHR_TIOCM_RTS)
1798 targ |= TIOCM_RTS;
1799 ioctl(fioc->fd, TIOCMSET, &targ);
1800 }
1801 break;
1802 default:
1803 return -ENOTSUP;
1804 }
1805 return 0;
1806 }
1807
1808 static void qemu_chr_close_tty(CharDriverState *chr)
1809 {
1810 fd_chr_close(chr);
1811 }
1812
1813 static CharDriverState *qemu_chr_open_tty_fd(int fd,
1814 ChardevCommon *backend,
1815 Error **errp)
1816 {
1817 CharDriverState *chr;
1818
1819 tty_serial_init(fd, 115200, 'N', 8, 1);
1820 chr = qemu_chr_open_fd(fd, fd, backend, errp);
1821 if (!chr) {
1822 return NULL;
1823 }
1824 chr->chr_ioctl = tty_serial_ioctl;
1825 chr->chr_close = qemu_chr_close_tty;
1826 return chr;
1827 }
1828 #endif /* __linux__ || __sun__ */
1829
1830 #if defined(__linux__)
1831
1832 #define HAVE_CHARDEV_PARPORT 1
1833
1834 typedef struct {
1835 int fd;
1836 int mode;
1837 } ParallelCharDriver;
1838
1839 static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1840 {
1841 if (s->mode != mode) {
1842 int m = mode;
1843 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1844 return 0;
1845 s->mode = mode;
1846 }
1847 return 1;
1848 }
1849
1850 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1851 {
1852 ParallelCharDriver *drv = chr->opaque;
1853 int fd = drv->fd;
1854 uint8_t b;
1855
1856 switch(cmd) {
1857 case CHR_IOCTL_PP_READ_DATA:
1858 if (ioctl(fd, PPRDATA, &b) < 0)
1859 return -ENOTSUP;
1860 *(uint8_t *)arg = b;
1861 break;
1862 case CHR_IOCTL_PP_WRITE_DATA:
1863 b = *(uint8_t *)arg;
1864 if (ioctl(fd, PPWDATA, &b) < 0)
1865 return -ENOTSUP;
1866 break;
1867 case CHR_IOCTL_PP_READ_CONTROL:
1868 if (ioctl(fd, PPRCONTROL, &b) < 0)
1869 return -ENOTSUP;
1870 /* Linux gives only the lowest bits, and no way to know data
1871 direction! For better compatibility set the fixed upper
1872 bits. */
1873 *(uint8_t *)arg = b | 0xc0;
1874 break;
1875 case CHR_IOCTL_PP_WRITE_CONTROL:
1876 b = *(uint8_t *)arg;
1877 if (ioctl(fd, PPWCONTROL, &b) < 0)
1878 return -ENOTSUP;
1879 break;
1880 case CHR_IOCTL_PP_READ_STATUS:
1881 if (ioctl(fd, PPRSTATUS, &b) < 0)
1882 return -ENOTSUP;
1883 *(uint8_t *)arg = b;
1884 break;
1885 case CHR_IOCTL_PP_DATA_DIR:
1886 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1887 return -ENOTSUP;
1888 break;
1889 case CHR_IOCTL_PP_EPP_READ_ADDR:
1890 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1891 struct ParallelIOArg *parg = arg;
1892 int n = read(fd, parg->buffer, parg->count);
1893 if (n != parg->count) {
1894 return -EIO;
1895 }
1896 }
1897 break;
1898 case CHR_IOCTL_PP_EPP_READ:
1899 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1900 struct ParallelIOArg *parg = arg;
1901 int n = read(fd, parg->buffer, parg->count);
1902 if (n != parg->count) {
1903 return -EIO;
1904 }
1905 }
1906 break;
1907 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1908 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1909 struct ParallelIOArg *parg = arg;
1910 int n = write(fd, parg->buffer, parg->count);
1911 if (n != parg->count) {
1912 return -EIO;
1913 }
1914 }
1915 break;
1916 case CHR_IOCTL_PP_EPP_WRITE:
1917 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1918 struct ParallelIOArg *parg = arg;
1919 int n = write(fd, parg->buffer, parg->count);
1920 if (n != parg->count) {
1921 return -EIO;
1922 }
1923 }
1924 break;
1925 default:
1926 return -ENOTSUP;
1927 }
1928 return 0;
1929 }
1930
1931 static void pp_close(CharDriverState *chr)
1932 {
1933 ParallelCharDriver *drv = chr->opaque;
1934 int fd = drv->fd;
1935
1936 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1937 ioctl(fd, PPRELEASE);
1938 close(fd);
1939 g_free(drv);
1940 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1941 }
1942
1943 static CharDriverState *qemu_chr_open_pp_fd(int fd,
1944 ChardevCommon *backend,
1945 Error **errp)
1946 {
1947 CharDriverState *chr;
1948 ParallelCharDriver *drv;
1949
1950 if (ioctl(fd, PPCLAIM) < 0) {
1951 error_setg_errno(errp, errno, "not a parallel port");
1952 close(fd);
1953 return NULL;
1954 }
1955
1956 chr = qemu_chr_alloc(backend, errp);
1957 if (!chr) {
1958 return NULL;
1959 }
1960
1961 drv = g_new0(ParallelCharDriver, 1);
1962 chr->opaque = drv;
1963 chr->chr_write = null_chr_write;
1964 chr->chr_ioctl = pp_ioctl;
1965 chr->chr_close = pp_close;
1966
1967 drv->fd = fd;
1968 drv->mode = IEEE1284_MODE_COMPAT;
1969
1970 return chr;
1971 }
1972 #endif /* __linux__ */
1973
1974 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
1975
1976 #define HAVE_CHARDEV_PARPORT 1
1977
1978 static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1979 {
1980 int fd = (int)(intptr_t)chr->opaque;
1981 uint8_t b;
1982
1983 switch(cmd) {
1984 case CHR_IOCTL_PP_READ_DATA:
1985 if (ioctl(fd, PPIGDATA, &b) < 0)
1986 return -ENOTSUP;
1987 *(uint8_t *)arg = b;
1988 break;
1989 case CHR_IOCTL_PP_WRITE_DATA:
1990 b = *(uint8_t *)arg;
1991 if (ioctl(fd, PPISDATA, &b) < 0)
1992 return -ENOTSUP;
1993 break;
1994 case CHR_IOCTL_PP_READ_CONTROL:
1995 if (ioctl(fd, PPIGCTRL, &b) < 0)
1996 return -ENOTSUP;
1997 *(uint8_t *)arg = b;
1998 break;
1999 case CHR_IOCTL_PP_WRITE_CONTROL:
2000 b = *(uint8_t *)arg;
2001 if (ioctl(fd, PPISCTRL, &b) < 0)
2002 return -ENOTSUP;
2003 break;
2004 case CHR_IOCTL_PP_READ_STATUS:
2005 if (ioctl(fd, PPIGSTATUS, &b) < 0)
2006 return -ENOTSUP;
2007 *(uint8_t *)arg = b;
2008 break;
2009 default:
2010 return -ENOTSUP;
2011 }
2012 return 0;
2013 }
2014
2015 static CharDriverState *qemu_chr_open_pp_fd(int fd,
2016 ChardevCommon *backend,
2017 Error **errp)
2018 {
2019 CharDriverState *chr;
2020
2021 chr = qemu_chr_alloc(backend, errp);
2022 if (!chr) {
2023 return NULL;
2024 }
2025 chr->opaque = (void *)(intptr_t)fd;
2026 chr->chr_write = null_chr_write;
2027 chr->chr_ioctl = pp_ioctl;
2028 chr->explicit_be_open = true;
2029 return chr;
2030 }
2031 #endif
2032
2033 #else /* _WIN32 */
2034
2035 #define HAVE_CHARDEV_SERIAL 1
2036
2037 typedef struct {
2038 int max_size;
2039 HANDLE hcom, hrecv, hsend;
2040 OVERLAPPED orecv;
2041 BOOL fpipe;
2042 DWORD len;
2043
2044 /* Protected by the CharDriverState chr_write_lock. */
2045 OVERLAPPED osend;
2046 } WinCharState;
2047
2048 typedef struct {
2049 HANDLE hStdIn;
2050 HANDLE hInputReadyEvent;
2051 HANDLE hInputDoneEvent;
2052 HANDLE hInputThread;
2053 uint8_t win_stdio_buf;
2054 } WinStdioCharState;
2055
2056 #define NSENDBUF 2048
2057 #define NRECVBUF 2048
2058 #define MAXCONNECT 1
2059 #define NTIMEOUT 5000
2060
2061 static int win_chr_poll(void *opaque);
2062 static int win_chr_pipe_poll(void *opaque);
2063
2064 static void win_chr_close(CharDriverState *chr)
2065 {
2066 WinCharState *s = chr->opaque;
2067
2068 if (s->hsend) {
2069 CloseHandle(s->hsend);
2070 s->hsend = NULL;
2071 }
2072 if (s->hrecv) {
2073 CloseHandle(s->hrecv);
2074 s->hrecv = NULL;
2075 }
2076 if (s->hcom) {
2077 CloseHandle(s->hcom);
2078 s->hcom = NULL;
2079 }
2080 if (s->fpipe)
2081 qemu_del_polling_cb(win_chr_pipe_poll, chr);
2082 else
2083 qemu_del_polling_cb(win_chr_poll, chr);
2084
2085 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2086 }
2087
2088 static int win_chr_init(CharDriverState *chr, const char *filename, Error **errp)
2089 {
2090 WinCharState *s = chr->opaque;
2091 COMMCONFIG comcfg;
2092 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
2093 COMSTAT comstat;
2094 DWORD size;
2095 DWORD err;
2096
2097 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2098 if (!s->hsend) {
2099 error_setg(errp, "Failed CreateEvent");
2100 goto fail;
2101 }
2102 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
2103 if (!s->hrecv) {
2104 error_setg(errp, "Failed CreateEvent");
2105 goto fail;
2106 }
2107
2108 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
2109 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
2110 if (s->hcom == INVALID_HANDLE_VALUE) {
2111 error_setg(errp, "Failed CreateFile (%lu)", GetLastError());
2112 s->hcom = NULL;
2113 goto fail;
2114 }
2115
2116 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
2117 error_setg(errp, "Failed SetupComm");
2118 goto fail;
2119 }
2120
2121 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
2122 size = sizeof(COMMCONFIG);
2123 GetDefaultCommConfig(filename, &comcfg, &size);
2124 comcfg.dcb.DCBlength = sizeof(DCB);
2125 CommConfigDialog(filename, NULL, &comcfg);
2126
2127 if (!SetCommState(s->hcom, &comcfg.dcb)) {
2128 error_setg(errp, "Failed SetCommState");
2129 goto fail;
2130 }
2131
2132 if (!SetCommMask(s->hcom, EV_ERR)) {
2133 error_setg(errp, "Failed SetCommMask");
2134 goto fail;
2135 }
2136
2137 cto.ReadIntervalTimeout = MAXDWORD;
2138 if (!SetCommTimeouts(s->hcom, &cto)) {
2139 error_setg(errp, "Failed SetCommTimeouts");
2140 goto fail;
2141 }
2142
2143 if (!ClearCommError(s->hcom, &err, &comstat)) {
2144 error_setg(errp, "Failed ClearCommError");
2145 goto fail;
2146 }
2147 qemu_add_polling_cb(win_chr_poll, chr);
2148 return 0;
2149
2150 fail:
2151 win_chr_close(chr);
2152 return -1;
2153 }
2154
2155 /* Called with chr_write_lock held. */
2156 static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
2157 {
2158 WinCharState *s = chr->opaque;
2159 DWORD len, ret, size, err;
2160
2161 len = len1;
2162 ZeroMemory(&s->osend, sizeof(s->osend));
2163 s->osend.hEvent = s->hsend;
2164 while (len > 0) {
2165 if (s->hsend)
2166 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
2167 else
2168 ret = WriteFile(s->hcom, buf, len, &size, NULL);
2169 if (!ret) {
2170 err = GetLastError();
2171 if (err == ERROR_IO_PENDING) {
2172 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
2173 if (ret) {
2174 buf += size;
2175 len -= size;
2176 } else {
2177 break;
2178 }
2179 } else {
2180 break;
2181 }
2182 } else {
2183 buf += size;
2184 len -= size;
2185 }
2186 }
2187 return len1 - len;
2188 }
2189
2190 static int win_chr_read_poll(CharDriverState *chr)
2191 {
2192 WinCharState *s = chr->opaque;
2193
2194 s->max_size = qemu_chr_be_can_write(chr);
2195 return s->max_size;
2196 }
2197
2198 static void win_chr_readfile(CharDriverState *chr)
2199 {
2200 WinCharState *s = chr->opaque;
2201 int ret, err;
2202 uint8_t buf[READ_BUF_LEN];
2203 DWORD size;
2204
2205 ZeroMemory(&s->orecv, sizeof(s->orecv));
2206 s->orecv.hEvent = s->hrecv;
2207 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
2208 if (!ret) {
2209 err = GetLastError();
2210 if (err == ERROR_IO_PENDING) {
2211 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
2212 }
2213 }
2214
2215 if (size > 0) {
2216 qemu_chr_be_write(chr, buf, size);
2217 }
2218 }
2219
2220 static void win_chr_read(CharDriverState *chr)
2221 {
2222 WinCharState *s = chr->opaque;
2223
2224 if (s->len > s->max_size)
2225 s->len = s->max_size;
2226 if (s->len == 0)
2227 return;
2228
2229 win_chr_readfile(chr);
2230 }
2231
2232 static int win_chr_poll(void *opaque)
2233 {
2234 CharDriverState *chr = opaque;
2235 WinCharState *s = chr->opaque;
2236 COMSTAT status;
2237 DWORD comerr;
2238
2239 ClearCommError(s->hcom, &comerr, &status);
2240 if (status.cbInQue > 0) {
2241 s->len = status.cbInQue;
2242 win_chr_read_poll(chr);
2243 win_chr_read(chr);
2244 return 1;
2245 }
2246 return 0;
2247 }
2248
2249 static CharDriverState *qemu_chr_open_win_path(const char *filename,
2250 ChardevCommon *backend,
2251 Error **errp)
2252 {
2253 CharDriverState *chr;
2254 WinCharState *s;
2255
2256 chr = qemu_chr_alloc(backend, errp);
2257 if (!chr) {
2258 return NULL;
2259 }
2260 s = g_new0(WinCharState, 1);
2261 chr->opaque = s;
2262 chr->chr_write = win_chr_write;
2263 chr->chr_close = win_chr_close;
2264
2265 if (win_chr_init(chr, filename, errp) < 0) {
2266 g_free(s);
2267 qemu_chr_free_common(chr);
2268 return NULL;
2269 }
2270 return chr;
2271 }
2272
2273 static int win_chr_pipe_poll(void *opaque)
2274 {
2275 CharDriverState *chr = opaque;
2276 WinCharState *s = chr->opaque;
2277 DWORD size;
2278
2279 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
2280 if (size > 0) {
2281 s->len = size;
2282 win_chr_read_poll(chr);
2283 win_chr_read(chr);
2284 return 1;
2285 }
2286 return 0;
2287 }
2288
2289 static int win_chr_pipe_init(CharDriverState *chr, const char *filename,
2290 Error **errp)
2291 {
2292 WinCharState *s = chr->opaque;
2293 OVERLAPPED ov;
2294 int ret;
2295 DWORD size;
2296 char *openname;
2297
2298 s->fpipe = TRUE;
2299
2300 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2301 if (!s->hsend) {
2302 error_setg(errp, "Failed CreateEvent");
2303 goto fail;
2304 }
2305 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
2306 if (!s->hrecv) {
2307 error_setg(errp, "Failed CreateEvent");
2308 goto fail;
2309 }
2310
2311 openname = g_strdup_printf("\\\\.\\pipe\\%s", filename);
2312 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
2313 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
2314 PIPE_WAIT,
2315 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
2316 g_free(openname);
2317 if (s->hcom == INVALID_HANDLE_VALUE) {
2318 error_setg(errp, "Failed CreateNamedPipe (%lu)", GetLastError());
2319 s->hcom = NULL;
2320 goto fail;
2321 }
2322
2323 ZeroMemory(&ov, sizeof(ov));
2324 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
2325 ret = ConnectNamedPipe(s->hcom, &ov);
2326 if (ret) {
2327 error_setg(errp, "Failed ConnectNamedPipe");
2328 goto fail;
2329 }
2330
2331 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
2332 if (!ret) {
2333 error_setg(errp, "Failed GetOverlappedResult");
2334 if (ov.hEvent) {
2335 CloseHandle(ov.hEvent);
2336 ov.hEvent = NULL;
2337 }
2338 goto fail;
2339 }
2340
2341 if (ov.hEvent) {
2342 CloseHandle(ov.hEvent);
2343 ov.hEvent = NULL;
2344 }
2345 qemu_add_polling_cb(win_chr_pipe_poll, chr);
2346 return 0;
2347
2348 fail:
2349 win_chr_close(chr);
2350 return -1;
2351 }
2352
2353
2354 static CharDriverState *qemu_chr_open_pipe(const char *id,
2355 ChardevBackend *backend,
2356 ChardevReturn *ret,
2357 Error **errp)
2358 {
2359 ChardevHostdev *opts = backend->u.pipe.data;
2360 const char *filename = opts->device;
2361 CharDriverState *chr;
2362 WinCharState *s;
2363 ChardevCommon *common = qapi_ChardevHostdev_base(opts);
2364
2365 chr = qemu_chr_alloc(common, errp);
2366 if (!chr) {
2367 return NULL;
2368 }
2369 s = g_new0(WinCharState, 1);
2370 chr->opaque = s;
2371 chr->chr_write = win_chr_write;
2372 chr->chr_close = win_chr_close;
2373
2374 if (win_chr_pipe_init(chr, filename, errp) < 0) {
2375 g_free(s);
2376 qemu_chr_free_common(chr);
2377 return NULL;
2378 }
2379 return chr;
2380 }
2381
2382 static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out,
2383 ChardevCommon *backend,
2384 Error **errp)
2385 {
2386 CharDriverState *chr;
2387 WinCharState *s;
2388
2389 chr = qemu_chr_alloc(backend, errp);
2390 if (!chr) {
2391 return NULL;
2392 }
2393 s = g_new0(WinCharState, 1);
2394 s->hcom = fd_out;
2395 chr->opaque = s;
2396 chr->chr_write = win_chr_write;
2397 return chr;
2398 }
2399
2400 static CharDriverState *qemu_chr_open_win_con(const char *id,
2401 ChardevBackend *backend,
2402 ChardevReturn *ret,
2403 Error **errp)
2404 {
2405 ChardevCommon *common = backend->u.console.data;
2406 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE),
2407 common, errp);
2408 }
2409
2410 static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
2411 {
2412 HANDLE hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
2413 DWORD dwSize;
2414 int len1;
2415
2416 len1 = len;
2417
2418 while (len1 > 0) {
2419 if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
2420 break;
2421 }
2422 buf += dwSize;
2423 len1 -= dwSize;
2424 }
2425
2426 return len - len1;
2427 }
2428
2429 static void win_stdio_wait_func(void *opaque)
2430 {
2431 CharDriverState *chr = opaque;
2432 WinStdioCharState *stdio = chr->opaque;
2433 INPUT_RECORD buf[4];
2434 int ret;
2435 DWORD dwSize;
2436 int i;
2437
2438 ret = ReadConsoleInput(stdio->hStdIn, buf, ARRAY_SIZE(buf), &dwSize);
2439
2440 if (!ret) {
2441 /* Avoid error storm */
2442 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2443 return;
2444 }
2445
2446 for (i = 0; i < dwSize; i++) {
2447 KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
2448
2449 if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
2450 int j;
2451 if (kev->uChar.AsciiChar != 0) {
2452 for (j = 0; j < kev->wRepeatCount; j++) {
2453 if (qemu_chr_be_can_write(chr)) {
2454 uint8_t c = kev->uChar.AsciiChar;
2455 qemu_chr_be_write(chr, &c, 1);
2456 }
2457 }
2458 }
2459 }
2460 }
2461 }
2462
2463 static DWORD WINAPI win_stdio_thread(LPVOID param)
2464 {
2465 CharDriverState *chr = param;
2466 WinStdioCharState *stdio = chr->opaque;
2467 int ret;
2468 DWORD dwSize;
2469
2470 while (1) {
2471
2472 /* Wait for one byte */
2473 ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
2474
2475 /* Exit in case of error, continue if nothing read */
2476 if (!ret) {
2477 break;
2478 }
2479 if (!dwSize) {
2480 continue;
2481 }
2482
2483 /* Some terminal emulator returns \r\n for Enter, just pass \n */
2484 if (stdio->win_stdio_buf == '\r') {
2485 continue;
2486 }
2487
2488 /* Signal the main thread and wait until the byte was eaten */
2489 if (!SetEvent(stdio->hInputReadyEvent)) {
2490 break;
2491 }
2492 if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
2493 != WAIT_OBJECT_0) {
2494 break;
2495 }
2496 }
2497
2498 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2499 return 0;
2500 }
2501
2502 static void win_stdio_thread_wait_func(void *opaque)
2503 {
2504 CharDriverState *chr = opaque;
2505 WinStdioCharState *stdio = chr->opaque;
2506
2507 if (qemu_chr_be_can_write(chr)) {
2508 qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
2509 }
2510
2511 SetEvent(stdio->hInputDoneEvent);
2512 }
2513
2514 static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
2515 {
2516 WinStdioCharState *stdio = chr->opaque;
2517 DWORD dwMode = 0;
2518
2519 GetConsoleMode(stdio->hStdIn, &dwMode);
2520
2521 if (echo) {
2522 SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
2523 } else {
2524 SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
2525 }
2526 }
2527
2528 static void win_stdio_close(CharDriverState *chr)
2529 {
2530 WinStdioCharState *stdio = chr->opaque;
2531
2532 if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
2533 CloseHandle(stdio->hInputReadyEvent);
2534 }
2535 if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
2536 CloseHandle(stdio->hInputDoneEvent);
2537 }
2538 if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
2539 TerminateThread(stdio->hInputThread, 0);
2540 }
2541
2542 g_free(chr->opaque);
2543 }
2544
2545 static CharDriverState *qemu_chr_open_stdio(const char *id,
2546 ChardevBackend *backend,
2547 ChardevReturn *ret,
2548 Error **errp)
2549 {
2550 CharDriverState *chr;
2551 WinStdioCharState *stdio;
2552 DWORD dwMode;
2553 int is_console = 0;
2554 ChardevCommon *common = qapi_ChardevStdio_base(backend->u.stdio.data);
2555
2556 chr = qemu_chr_alloc(common, errp);
2557 if (!chr) {
2558 return NULL;
2559 }
2560 stdio = g_new0(WinStdioCharState, 1);
2561
2562 stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
2563 if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
2564 error_setg(errp, "cannot open stdio: invalid handle");
2565 return NULL;
2566 }
2567
2568 is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
2569
2570 chr->opaque = stdio;
2571 chr->chr_write = win_stdio_write;
2572 chr->chr_close = win_stdio_close;
2573
2574 if (is_console) {
2575 if (qemu_add_wait_object(stdio->hStdIn,
2576 win_stdio_wait_func, chr)) {
2577 error_setg(errp, "qemu_add_wait_object: failed");
2578 goto err1;
2579 }
2580 } else {
2581 DWORD dwId;
2582
2583 stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2584 stdio->hInputDoneEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2585 if (stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
2586 || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
2587 error_setg(errp, "cannot create event");
2588 goto err2;
2589 }
2590 if (qemu_add_wait_object(stdio->hInputReadyEvent,
2591 win_stdio_thread_wait_func, chr)) {
2592 error_setg(errp, "qemu_add_wait_object: failed");
2593 goto err2;
2594 }
2595 stdio->hInputThread = CreateThread(NULL, 0, win_stdio_thread,
2596 chr, 0, &dwId);
2597
2598 if (stdio->hInputThread == INVALID_HANDLE_VALUE) {
2599 error_setg(errp, "cannot create stdio thread");
2600 goto err3;
2601 }
2602 }
2603
2604 dwMode |= ENABLE_LINE_INPUT;
2605
2606 if (is_console) {
2607 /* set the terminal in raw mode */
2608 /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2609 dwMode |= ENABLE_PROCESSED_INPUT;
2610 }
2611
2612 SetConsoleMode(stdio->hStdIn, dwMode);
2613
2614 chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2615 qemu_chr_fe_set_echo(chr, false);
2616
2617 return chr;
2618
2619 err3:
2620 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2621 err2:
2622 CloseHandle(stdio->hInputReadyEvent);
2623 CloseHandle(stdio->hInputDoneEvent);
2624 err1:
2625 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2626 return NULL;
2627 }
2628 #endif /* !_WIN32 */
2629
2630
2631 /***********************************************************/
2632 /* UDP Net console */
2633
2634 typedef struct {
2635 QIOChannel *ioc;
2636 uint8_t buf[READ_BUF_LEN];
2637 int bufcnt;
2638 int bufptr;
2639 int max_size;
2640 } NetCharDriver;
2641
2642 /* Called with chr_write_lock held. */
2643 static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2644 {
2645 NetCharDriver *s = chr->opaque;
2646
2647 return qio_channel_write(
2648 s->ioc, (const char *)buf, len, NULL);
2649 }
2650
2651 static int udp_chr_read_poll(void *opaque)
2652 {
2653 CharDriverState *chr = opaque;
2654 NetCharDriver *s = chr->opaque;
2655
2656 s->max_size = qemu_chr_be_can_write(chr);
2657
2658 /* If there were any stray characters in the queue process them
2659 * first
2660 */
2661 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2662 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2663 s->bufptr++;
2664 s->max_size = qemu_chr_be_can_write(chr);
2665 }
2666 return s->max_size;
2667 }
2668
2669 static gboolean udp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
2670 {
2671 CharDriverState *chr = opaque;
2672 NetCharDriver *s = chr->opaque;
2673 ssize_t ret;
2674
2675 if (s->max_size == 0) {
2676 return TRUE;
2677 }
2678 ret = qio_channel_read(
2679 s->ioc, (char *)s->buf, sizeof(s->buf), NULL);
2680 if (ret <= 0) {
2681 remove_fd_in_watch(chr);
2682 return FALSE;
2683 }
2684 s->bufcnt = ret;
2685
2686 s->bufptr = 0;
2687 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2688 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2689 s->bufptr++;
2690 s->max_size = qemu_chr_be_can_write(chr);
2691 }
2692
2693 return TRUE;
2694 }
2695
2696 static void udp_chr_update_read_handler(CharDriverState *chr,
2697 GMainContext *context,
2698 int tag)
2699 {
2700 NetCharDriver *s = chr->opaque;
2701
2702 remove_fd_in_watch(chr);
2703 if (s->ioc) {
2704 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2705 udp_chr_read_poll,
2706 udp_chr_read, chr,
2707 context);
2708 }
2709 }
2710
2711 static void udp_chr_close(CharDriverState *chr)
2712 {
2713 NetCharDriver *s = chr->opaque;
2714
2715 remove_fd_in_watch(chr);
2716 if (s->ioc) {
2717 object_unref(OBJECT(s->ioc));
2718 }
2719 g_free(s);
2720 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2721 }
2722
2723 static CharDriverState *qemu_chr_open_udp(QIOChannelSocket *sioc,
2724 ChardevCommon *backend,
2725 Error **errp)
2726 {
2727 CharDriverState *chr = NULL;
2728 NetCharDriver *s = NULL;
2729
2730 chr = qemu_chr_alloc(backend, errp);
2731 if (!chr) {
2732 return NULL;
2733 }
2734 s = g_new0(NetCharDriver, 1);
2735
2736 s->ioc = QIO_CHANNEL(sioc);
2737 s->bufcnt = 0;
2738 s->bufptr = 0;
2739 chr->opaque = s;
2740 chr->chr_write = udp_chr_write;
2741 chr->chr_update_read_handler = udp_chr_update_read_handler;
2742 chr->chr_close = udp_chr_close;
2743 /* be isn't opened until we get a connection */
2744 chr->explicit_be_open = true;
2745 return chr;
2746 }
2747
2748 /***********************************************************/
2749 /* TCP Net console */
2750
2751 typedef struct {
2752 QIOChannel *ioc; /* Client I/O channel */
2753 QIOChannelSocket *sioc; /* Client master channel */
2754 QIOChannelSocket *listen_ioc;
2755 guint listen_tag;
2756 QCryptoTLSCreds *tls_creds;
2757 int connected;
2758 int max_size;
2759 int do_telnetopt;
2760 int do_nodelay;
2761 int is_unix;
2762 int *read_msgfds;
2763 size_t read_msgfds_num;
2764 int *write_msgfds;
2765 size_t write_msgfds_num;
2766
2767 SocketAddress *addr;
2768 bool is_listen;
2769 bool is_telnet;
2770
2771 guint reconnect_timer;
2772 int64_t reconnect_time;
2773 bool connect_err_reported;
2774 } TCPCharDriver;
2775
2776 static gboolean socket_reconnect_timeout(gpointer opaque);
2777
2778 static void qemu_chr_socket_restart_timer(CharDriverState *chr)
2779 {
2780 TCPCharDriver *s = chr->opaque;
2781 assert(s->connected == 0);
2782 s->reconnect_timer = g_timeout_add_seconds(s->reconnect_time,
2783 socket_reconnect_timeout, chr);
2784 }
2785
2786 static void check_report_connect_error(CharDriverState *chr,
2787 Error *err)
2788 {
2789 TCPCharDriver *s = chr->opaque;
2790
2791 if (!s->connect_err_reported) {
2792 error_report("Unable to connect character device %s: %s",
2793 chr->label, error_get_pretty(err));
2794 s->connect_err_reported = true;
2795 }
2796 qemu_chr_socket_restart_timer(chr);
2797 }
2798
2799 static gboolean tcp_chr_accept(QIOChannel *chan,
2800 GIOCondition cond,
2801 void *opaque);
2802
2803 /* Called with chr_write_lock held. */
2804 static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2805 {
2806 TCPCharDriver *s = chr->opaque;
2807 if (s->connected) {
2808 int ret = io_channel_send_full(s->ioc, buf, len,
2809 s->write_msgfds,
2810 s->write_msgfds_num);
2811
2812 /* free the written msgfds, no matter what */
2813 if (s->write_msgfds_num) {
2814 g_free(s->write_msgfds);
2815 s->write_msgfds = 0;
2816 s->write_msgfds_num = 0;
2817 }
2818
2819 return ret;
2820 } else {
2821 /* XXX: indicate an error ? */
2822 return len;
2823 }
2824 }
2825
2826 static int tcp_chr_read_poll(void *opaque)
2827 {
2828 CharDriverState *chr = opaque;
2829 TCPCharDriver *s = chr->opaque;
2830 if (!s->connected)
2831 return 0;
2832 s->max_size = qemu_chr_be_can_write(chr);
2833 return s->max_size;
2834 }
2835
2836 #define IAC 255
2837 #define IAC_BREAK 243
2838 static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2839 TCPCharDriver *s,
2840 uint8_t *buf, int *size)
2841 {
2842 /* Handle any telnet client's basic IAC options to satisfy char by
2843 * char mode with no echo. All IAC options will be removed from
2844 * the buf and the do_telnetopt variable will be used to track the
2845 * state of the width of the IAC information.
2846 *
2847 * IAC commands come in sets of 3 bytes with the exception of the
2848 * "IAC BREAK" command and the double IAC.
2849 */
2850
2851 int i;
2852 int j = 0;
2853
2854 for (i = 0; i < *size; i++) {
2855 if (s->do_telnetopt > 1) {
2856 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2857 /* Double IAC means send an IAC */
2858 if (j != i)
2859 buf[j] = buf[i];
2860 j++;
2861 s->do_telnetopt = 1;
2862 } else {
2863 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2864 /* Handle IAC break commands by sending a serial break */
2865 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
2866 s->do_telnetopt++;
2867 }
2868 s->do_telnetopt++;
2869 }
2870 if (s->do_telnetopt >= 4) {
2871 s->do_telnetopt = 1;
2872 }
2873 } else {
2874 if ((unsigned char)buf[i] == IAC) {
2875 s->do_telnetopt = 2;
2876 } else {
2877 if (j != i)
2878 buf[j] = buf[i];
2879 j++;
2880 }
2881 }
2882 }
2883 *size = j;
2884 }
2885
2886 static int tcp_get_msgfds(CharDriverState *chr, int *fds, int num)
2887 {
2888 TCPCharDriver *s = chr->opaque;
2889 int to_copy = (s->read_msgfds_num < num) ? s->read_msgfds_num : num;
2890
2891 assert(num <= TCP_MAX_FDS);
2892
2893 if (to_copy) {
2894 int i;
2895
2896 memcpy(fds, s->read_msgfds, to_copy * sizeof(int));
2897
2898 /* Close unused fds */
2899 for (i = to_copy; i < s->read_msgfds_num; i++) {
2900 close(s->read_msgfds[i]);
2901 }
2902
2903 g_free(s->read_msgfds);
2904 s->read_msgfds = 0;
2905 s->read_msgfds_num = 0;
2906 }
2907
2908 return to_copy;
2909 }
2910
2911 static int tcp_set_msgfds(CharDriverState *chr, int *fds, int num)
2912 {
2913 TCPCharDriver *s = chr->opaque;
2914
2915 /* clear old pending fd array */
2916 g_free(s->write_msgfds);
2917 s->write_msgfds = NULL;
2918 s->write_msgfds_num = 0;
2919
2920 if (!s->connected ||
2921 !qio_channel_has_feature(s->ioc,
2922 QIO_CHANNEL_FEATURE_FD_PASS)) {
2923 return -1;
2924 }
2925
2926 if (num) {
2927 s->write_msgfds = g_new(int, num);
2928 memcpy(s->write_msgfds, fds, num * sizeof(int));
2929 }
2930
2931 s->write_msgfds_num = num;
2932
2933 return 0;
2934 }
2935
2936 static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2937 {
2938 TCPCharDriver *s = chr->opaque;
2939 struct iovec iov = { .iov_base = buf, .iov_len = len };
2940 int ret;
2941 size_t i;
2942 int *msgfds = NULL;
2943 size_t msgfds_num = 0;
2944
2945 if (qio_channel_has_feature(s->ioc, QIO_CHANNEL_FEATURE_FD_PASS)) {
2946 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2947 &msgfds, &msgfds_num,
2948 NULL);
2949 } else {
2950 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2951 NULL, NULL,
2952 NULL);
2953 }
2954
2955 if (ret == QIO_CHANNEL_ERR_BLOCK) {
2956 errno = EAGAIN;
2957 ret = -1;
2958 } else if (ret == -1) {
2959 errno = EIO;
2960 }
2961
2962 if (msgfds_num) {
2963 /* close and clean read_msgfds */
2964 for (i = 0; i < s->read_msgfds_num; i++) {
2965 close(s->read_msgfds[i]);
2966 }
2967
2968 if (s->read_msgfds_num) {
2969 g_free(s->read_msgfds);
2970 }
2971
2972 s->read_msgfds = msgfds;
2973 s->read_msgfds_num = msgfds_num;
2974 }
2975
2976 for (i = 0; i < s->read_msgfds_num; i++) {
2977 int fd = s->read_msgfds[i];
2978 if (fd < 0) {
2979 continue;
2980 }
2981
2982 /* O_NONBLOCK is preserved across SCM_RIGHTS so reset it */
2983 qemu_set_block(fd);
2984
2985 #ifndef MSG_CMSG_CLOEXEC
2986 qemu_set_cloexec(fd);
2987 #endif
2988 }
2989
2990 return ret;
2991 }
2992
2993 static GSource *tcp_chr_add_watch(CharDriverState *chr, GIOCondition cond)
2994 {
2995 TCPCharDriver *s = chr->opaque;
2996 return qio_channel_create_watch(s->ioc, cond);
2997 }
2998
2999 static void tcp_chr_free_connection(CharDriverState *chr)
3000 {
3001 TCPCharDriver *s = chr->opaque;
3002 int i;
3003
3004 if (!s->connected) {
3005 return;
3006 }
3007
3008 if (s->read_msgfds_num) {
3009 for (i = 0; i < s->read_msgfds_num; i++) {
3010 close(s->read_msgfds[i]);
3011 }
3012 g_free(s->read_msgfds);
3013 s->read_msgfds = NULL;
3014 s->read_msgfds_num = 0;
3015 }
3016
3017 tcp_set_msgfds(chr, NULL, 0);
3018 remove_fd_in_watch(chr);
3019 object_unref(OBJECT(s->sioc));
3020 s->sioc = NULL;
3021 object_unref(OBJECT(s->ioc));
3022 s->ioc = NULL;
3023 g_free(chr->filename);
3024 chr->filename = NULL;
3025 s->connected = 0;
3026 }
3027
3028 static void tcp_chr_disconnect(CharDriverState *chr)
3029 {
3030 TCPCharDriver *s = chr->opaque;
3031
3032 if (!s->connected) {
3033 return;
3034 }
3035
3036 tcp_chr_free_connection(chr);
3037
3038 if (s->listen_ioc) {
3039 s->listen_tag = qio_channel_add_watch(
3040 QIO_CHANNEL(s->listen_ioc), G_IO_IN, tcp_chr_accept, chr, NULL);
3041 }
3042 chr->filename = SocketAddress_to_str("disconnected:", s->addr,
3043 s->is_listen, s->is_telnet);
3044 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
3045 if (s->reconnect_time) {
3046 qemu_chr_socket_restart_timer(chr);
3047 }
3048 }
3049
3050 static gboolean tcp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
3051 {
3052 CharDriverState *chr = opaque;
3053 TCPCharDriver *s = chr->opaque;
3054 uint8_t buf[READ_BUF_LEN];
3055 int len, size;
3056
3057 if (!s->connected || s->max_size <= 0) {
3058 return TRUE;
3059 }
3060 len = sizeof(buf);
3061 if (len > s->max_size)
3062 len = s->max_size;
3063 size = tcp_chr_recv(chr, (void *)buf, len);
3064 if (size == 0 || size == -1) {
3065 /* connection closed */
3066 tcp_chr_disconnect(chr);
3067 } else if (size > 0) {
3068 if (s->do_telnetopt)
3069 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
3070 if (size > 0)
3071 qemu_chr_be_write(chr, buf, size);
3072 }
3073
3074 return TRUE;
3075 }
3076
3077 static int tcp_chr_sync_read(CharDriverState *chr, const uint8_t *buf, int len)
3078 {
3079 TCPCharDriver *s = chr->opaque;
3080 int size;
3081
3082 if (!s->connected) {
3083 return 0;
3084 }
3085
3086 size = tcp_chr_recv(chr, (void *) buf, len);
3087 if (size == 0) {
3088 /* connection closed */
3089 tcp_chr_disconnect(chr);
3090 }
3091
3092 return size;
3093 }
3094
3095 static void tcp_chr_connect(void *opaque)
3096 {
3097 CharDriverState *chr = opaque;
3098 TCPCharDriver *s = chr->opaque;
3099
3100 g_free(chr->filename);
3101 chr->filename = sockaddr_to_str(
3102 &s->sioc->localAddr, s->sioc->localAddrLen,
3103 &s->sioc->remoteAddr, s->sioc->remoteAddrLen,
3104 s->is_listen, s->is_telnet);
3105
3106 s->connected = 1;
3107 if (s->ioc) {
3108 chr->fd_in_tag = io_add_watch_poll(s->ioc,
3109 tcp_chr_read_poll,
3110 tcp_chr_read,
3111 chr, NULL);
3112 }
3113 qemu_chr_be_generic_open(chr);
3114 }
3115
3116 static void tcp_chr_update_read_handler(CharDriverState *chr,
3117 GMainContext *context,
3118 int tag)
3119 {
3120 TCPCharDriver *s = chr->opaque;
3121
3122 if (!s->connected) {
3123 return;
3124 }
3125
3126 remove_fd_in_watch(chr);
3127 if (s->ioc) {
3128 chr->fd_in_tag = io_add_watch_poll(s->ioc,
3129 tcp_chr_read_poll,
3130 tcp_chr_read, chr,
3131 context);
3132 }
3133 }
3134
3135 typedef struct {
3136 CharDriverState *chr;
3137 char buf[12];
3138 size_t buflen;
3139 } TCPCharDriverTelnetInit;
3140
3141 static gboolean tcp_chr_telnet_init_io(QIOChannel *ioc,
3142 GIOCondition cond G_GNUC_UNUSED,
3143 gpointer user_data)
3144 {
3145 TCPCharDriverTelnetInit *init = user_data;
3146 ssize_t ret;
3147
3148 ret = qio_channel_write(ioc, init->buf, init->buflen, NULL);
3149 if (ret < 0) {
3150 if (ret == QIO_CHANNEL_ERR_BLOCK) {
3151 ret = 0;
3152 } else {
3153 tcp_chr_disconnect(init->chr);
3154 return FALSE;
3155 }
3156 }
3157 init->buflen -= ret;
3158
3159 if (init->buflen == 0) {
3160 tcp_chr_connect(init->chr);
3161 return FALSE;
3162 }
3163
3164 memmove(init->buf, init->buf + ret, init->buflen);
3165
3166 return TRUE;
3167 }
3168
3169 static void tcp_chr_telnet_init(CharDriverState *chr)
3170 {
3171 TCPCharDriver *s = chr->opaque;
3172 TCPCharDriverTelnetInit *init =
3173 g_new0(TCPCharDriverTelnetInit, 1);
3174 size_t n = 0;
3175
3176 init->chr = chr;
3177 init->buflen = 12;
3178
3179 #define IACSET(x, a, b, c) \
3180 do { \
3181 x[n++] = a; \
3182 x[n++] = b; \
3183 x[n++] = c; \
3184 } while (0)
3185
3186 /* Prep the telnet negotion to put telnet in binary,
3187 * no echo, single char mode */
3188 IACSET(init->buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
3189 IACSET(init->buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
3190 IACSET(init->buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
3191 IACSET(init->buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
3192
3193 #undef IACSET
3194
3195 qio_channel_add_watch(
3196 s->ioc, G_IO_OUT,
3197 tcp_chr_telnet_init_io,
3198 init, NULL);
3199 }
3200
3201
3202 static void tcp_chr_tls_handshake(Object *source,
3203 Error *err,
3204 gpointer user_data)
3205 {
3206 CharDriverState *chr = user_data;
3207 TCPCharDriver *s = chr->opaque;
3208
3209 if (err) {
3210 tcp_chr_disconnect(chr);
3211 } else {
3212 if (s->do_telnetopt) {
3213 tcp_chr_telnet_init(chr);
3214 } else {
3215 tcp_chr_connect(chr);
3216 }
3217 }
3218 }
3219
3220
3221 static void tcp_chr_tls_init(CharDriverState *chr)
3222 {
3223 TCPCharDriver *s = chr->opaque;
3224 QIOChannelTLS *tioc;
3225 Error *err = NULL;
3226
3227 if (s->is_listen) {
3228 tioc = qio_channel_tls_new_server(
3229 s->ioc, s->tls_creds,
3230 NULL, /* XXX Use an ACL */
3231 &err);
3232 } else {
3233 tioc = qio_channel_tls_new_client(
3234 s->ioc, s->tls_creds,
3235 s->addr->u.inet.data->host,
3236 &err);
3237 }
3238 if (tioc == NULL) {
3239 error_free(err);
3240 tcp_chr_disconnect(chr);
3241 return;
3242 }
3243 object_unref(OBJECT(s->ioc));
3244 s->ioc = QIO_CHANNEL(tioc);
3245
3246 qio_channel_tls_handshake(tioc,
3247 tcp_chr_tls_handshake,
3248 chr,
3249 NULL);
3250 }
3251
3252
3253 static int tcp_chr_new_client(CharDriverState *chr, QIOChannelSocket *sioc)
3254 {
3255 TCPCharDriver *s = chr->opaque;
3256 if (s->ioc != NULL) {
3257 return -1;
3258 }
3259
3260 s->ioc = QIO_CHANNEL(sioc);
3261 object_ref(OBJECT(sioc));
3262 s->sioc = sioc;
3263 object_ref(OBJECT(sioc));
3264
3265 qio_channel_set_blocking(s->ioc, false, NULL);
3266
3267 if (s->do_nodelay) {
3268 qio_channel_set_delay(s->ioc, false);
3269 }
3270 if (s->listen_tag) {
3271 g_source_remove(s->listen_tag);
3272 s->listen_tag = 0;
3273 }
3274
3275 if (s->tls_creds) {
3276 tcp_chr_tls_init(chr);
3277 } else {
3278 if (s->do_telnetopt) {
3279 tcp_chr_telnet_init(chr);
3280 } else {
3281 tcp_chr_connect(chr);
3282 }
3283 }
3284
3285 return 0;
3286 }
3287
3288
3289 static int tcp_chr_add_client(CharDriverState *chr, int fd)
3290 {
3291 int ret;
3292 QIOChannelSocket *sioc;
3293
3294 sioc = qio_channel_socket_new_fd(fd, NULL);
3295 if (!sioc) {
3296 return -1;
3297 }
3298 ret = tcp_chr_new_client(chr, sioc);
3299 object_unref(OBJECT(sioc));
3300 return ret;
3301 }
3302
3303 static gboolean tcp_chr_accept(QIOChannel *channel,
3304 GIOCondition cond,
3305 void *opaque)
3306 {
3307 CharDriverState *chr = opaque;
3308 QIOChannelSocket *sioc;
3309
3310 sioc = qio_channel_socket_accept(QIO_CHANNEL_SOCKET(channel),
3311 NULL);
3312 if (!sioc) {
3313 return TRUE;
3314 }
3315
3316 tcp_chr_new_client(chr, sioc);
3317
3318 object_unref(OBJECT(sioc));
3319
3320 return TRUE;
3321 }
3322
3323 static int tcp_chr_wait_connected(CharDriverState *chr, Error **errp)
3324 {
3325 TCPCharDriver *s = chr->opaque;
3326 QIOChannelSocket *sioc;
3327
3328 /* It can't wait on s->connected, since it is set asynchronously
3329 * in TLS and telnet cases, only wait for an accepted socket */
3330 while (!s->ioc) {
3331 if (s->is_listen) {
3332 fprintf(stderr, "QEMU waiting for connection on: %s\n",
3333 chr->filename);
3334 qio_channel_set_blocking(QIO_CHANNEL(s->listen_ioc), true, NULL);
3335 tcp_chr_accept(QIO_CHANNEL(s->listen_ioc), G_IO_IN, chr);
3336 qio_channel_set_blocking(QIO_CHANNEL(s->listen_ioc), false, NULL);
3337 } else {
3338 sioc = qio_channel_socket_new();
3339 if (qio_channel_socket_connect_sync(sioc, s->addr, errp) < 0) {
3340 object_unref(OBJECT(sioc));
3341 return -1;
3342 }
3343 tcp_chr_new_client(chr, sioc);
3344 object_unref(OBJECT(sioc));
3345 }
3346 }
3347
3348 return 0;
3349 }
3350
3351 int qemu_chr_wait_connected(CharDriverState *chr, Error **errp)
3352 {
3353 if (chr->chr_wait_connected) {
3354 return chr->chr_wait_connected(chr, errp);
3355 }
3356
3357 return 0;
3358 }
3359
3360 static void tcp_chr_close(CharDriverState *chr)
3361 {
3362 TCPCharDriver *s = chr->opaque;
3363
3364 tcp_chr_free_connection(chr);
3365
3366 if (s->reconnect_timer) {
3367 g_source_remove(s->reconnect_timer);
3368 s->reconnect_timer = 0;
3369 }
3370 qapi_free_SocketAddress(s->addr);
3371 if (s->listen_tag) {
3372 g_source_remove(s->listen_tag);
3373 s->listen_tag = 0;
3374 }
3375 if (s->listen_ioc) {
3376 object_unref(OBJECT(s->listen_ioc));
3377 }
3378 if (s->tls_creds) {
3379 object_unref(OBJECT(s->tls_creds));
3380 }
3381 g_free(s);
3382 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
3383 }
3384
3385
3386 static void qemu_chr_socket_connected(Object *src, Error *err, void *opaque)
3387 {
3388 QIOChannelSocket *sioc = QIO_CHANNEL_SOCKET(src);
3389 CharDriverState *chr = opaque;
3390 TCPCharDriver *s = chr->opaque;
3391
3392 if (err) {
3393 check_report_connect_error(chr, err);
3394 object_unref(src);
3395 return;
3396 }
3397
3398 s->connect_err_reported = false;
3399 tcp_chr_new_client(chr, sioc);
3400 object_unref(OBJECT(sioc));
3401 }
3402
3403
3404 /*********************************************************/
3405 /* Ring buffer chardev */
3406
3407 typedef struct {
3408 size_t size;
3409 size_t prod;
3410 size_t cons;
3411 uint8_t *cbuf;
3412 } RingBufCharDriver;
3413
3414 static size_t ringbuf_count(const CharDriverState *chr)
3415 {
3416 const RingBufCharDriver *d = chr->opaque;
3417
3418 return d->prod - d->cons;
3419 }
3420
3421 /* Called with chr_write_lock held. */
3422 static int ringbuf_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
3423 {
3424 RingBufCharDriver *d = chr->opaque;
3425 int i;
3426
3427 if (!buf || (len < 0)) {
3428 return -1;
3429 }
3430
3431 for (i = 0; i < len; i++ ) {
3432 d->cbuf[d->prod++ & (d->size - 1)] = buf[i];
3433 if (d->prod - d->cons > d->size) {
3434 d->cons = d->prod - d->size;
3435 }
3436 }
3437
3438 return len;
3439 }
3440
3441 static int ringbuf_chr_read(CharDriverState *chr, uint8_t *buf, int len)
3442 {
3443 RingBufCharDriver *d = chr->opaque;
3444 int i;
3445
3446 qemu_mutex_lock(&chr->chr_write_lock);
3447 for (i = 0; i < len && d->cons != d->prod; i++) {
3448 buf[i] = d->cbuf[d->cons++ & (d->size - 1)];
3449 }
3450 qemu_mutex_unlock(&chr->chr_write_lock);
3451
3452 return i;
3453 }
3454
3455 static void ringbuf_chr_close(struct CharDriverState *chr)
3456 {
3457 RingBufCharDriver *d = chr->opaque;
3458
3459 g_free(d->cbuf);
3460 g_free(d);
3461 chr->opaque = NULL;
3462 }
3463
3464 static CharDriverState *qemu_chr_open_ringbuf(const char *id,
3465 ChardevBackend *backend,
3466 ChardevReturn *ret,
3467 Error **errp)
3468 {
3469 ChardevRingbuf *opts = backend->u.ringbuf.data;
3470 ChardevCommon *common = qapi_ChardevRingbuf_base(opts);
3471 CharDriverState *chr;
3472 RingBufCharDriver *d;
3473
3474 chr = qemu_chr_alloc(common, errp);
3475 if (!chr) {
3476 return NULL;
3477 }
3478 d = g_malloc(sizeof(*d));
3479
3480 d->size = opts->has_size ? opts->size : 65536;
3481
3482 /* The size must be power of 2 */
3483 if (d->size & (d->size - 1)) {
3484 error_setg(errp, "size of ringbuf chardev must be power of two");
3485 goto fail;
3486 }
3487
3488 d->prod = 0;
3489 d->cons = 0;
3490 d->cbuf = g_malloc0(d->size);
3491
3492 chr->opaque = d;
3493 chr->chr_write = ringbuf_chr_write;
3494 chr->chr_close = ringbuf_chr_close;
3495
3496 return chr;
3497
3498 fail:
3499 g_free(d);
3500 qemu_chr_free_common(chr);
3501 return NULL;
3502 }
3503
3504 bool chr_is_ringbuf(const CharDriverState *chr)
3505 {
3506 return chr->chr_write == ringbuf_chr_write;
3507 }
3508
3509 void qmp_ringbuf_write(const char *device, const char *data,
3510 bool has_format, enum DataFormat format,
3511 Error **errp)
3512 {
3513 CharDriverState *chr;
3514 const uint8_t *write_data;
3515 int ret;
3516 gsize write_count;
3517
3518 chr = qemu_chr_find(device);
3519 if (!chr) {
3520 error_setg(errp, "Device '%s' not found", device);
3521 return;
3522 }
3523
3524 if (!chr_is_ringbuf(chr)) {
3525 error_setg(errp,"%s is not a ringbuf device", device);
3526 return;
3527 }
3528
3529 if (has_format && (format == DATA_FORMAT_BASE64)) {
3530 write_data = qbase64_decode(data, -1,
3531 &write_count,
3532 errp);
3533 if (!write_data) {
3534 return;
3535 }
3536 } else {
3537 write_data = (uint8_t *)data;
3538 write_count = strlen(data);
3539 }
3540
3541 ret = ringbuf_chr_write(chr, write_data, write_count);
3542
3543 if (write_data != (uint8_t *)data) {
3544 g_free((void *)write_data);
3545 }
3546
3547 if (ret < 0) {
3548 error_setg(errp, "Failed to write to device %s", device);
3549 return;
3550 }
3551 }
3552
3553 char *qmp_ringbuf_read(const char *device, int64_t size,
3554 bool has_format, enum DataFormat format,
3555 Error **errp)
3556 {
3557 CharDriverState *chr;
3558 uint8_t *read_data;
3559 size_t count;
3560 char *data;
3561
3562 chr = qemu_chr_find(device);
3563 if (!chr) {
3564 error_setg(errp, "Device '%s' not found", device);
3565 return NULL;
3566 }
3567
3568 if (!chr_is_ringbuf(chr)) {
3569 error_setg(errp,"%s is not a ringbuf device", device);
3570 return NULL;
3571 }
3572
3573 if (size <= 0) {
3574 error_setg(errp, "size must be greater than zero");
3575 return NULL;
3576 }
3577
3578 count = ringbuf_count(chr);
3579 size = size > count ? count : size;
3580 read_data = g_malloc(size + 1);
3581
3582 ringbuf_chr_read(chr, read_data, size);
3583
3584 if (has_format && (format == DATA_FORMAT_BASE64)) {
3585 data = g_base64_encode(read_data, size);
3586 g_free(read_data);
3587 } else {
3588 /*
3589 * FIXME should read only complete, valid UTF-8 characters up
3590 * to @size bytes. Invalid sequences should be replaced by a
3591 * suitable replacement character. Except when (and only
3592 * when) ring buffer lost characters since last read, initial
3593 * continuation characters should be dropped.
3594 */
3595 read_data[size] = 0;
3596 data = (char *)read_data;
3597 }
3598
3599 return data;
3600 }
3601
3602 QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
3603 {
3604 char host[65], port[33], width[8], height[8];
3605 int pos;
3606 const char *p;
3607 QemuOpts *opts;
3608 Error *local_err = NULL;
3609
3610 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
3611 if (local_err) {
3612 error_report_err(local_err);
3613 return NULL;
3614 }
3615
3616 if (strstart(filename, "mon:", &p)) {
3617 filename = p;
3618 qemu_opt_set(opts, "mux", "on", &error_abort);
3619 if (strcmp(filename, "stdio") == 0) {
3620 /* Monitor is muxed to stdio: do not exit on Ctrl+C by default
3621 * but pass it to the guest. Handle this only for compat syntax,
3622 * for -chardev syntax we have special option for this.
3623 * This is what -nographic did, redirecting+muxing serial+monitor
3624 * to stdio causing Ctrl+C to be passed to guest. */
3625 qemu_opt_set(opts, "signal", "off", &error_abort);
3626 }
3627 }
3628
3629 if (strcmp(filename, "null") == 0 ||
3630 strcmp(filename, "pty") == 0 ||
3631 strcmp(filename, "msmouse") == 0 ||
3632 strcmp(filename, "braille") == 0 ||
3633 strcmp(filename, "testdev") == 0 ||
3634 strcmp(filename, "stdio") == 0) {
3635 qemu_opt_set(opts, "backend", filename, &error_abort);
3636 return opts;
3637 }
3638 if (strstart(filename, "vc", &p)) {
3639 qemu_opt_set(opts, "backend", "vc", &error_abort);
3640 if (*p == ':') {
3641 if (sscanf(p+1, "%7[0-9]x%7[0-9]", width, height) == 2) {
3642 /* pixels */
3643 qemu_opt_set(opts, "width", width, &error_abort);
3644 qemu_opt_set(opts, "height", height, &error_abort);
3645 } else if (sscanf(p+1, "%7[0-9]Cx%7[0-9]C", width, height) == 2) {
3646 /* chars */
3647 qemu_opt_set(opts, "cols", width, &error_abort);
3648 qemu_opt_set(opts, "rows", height, &error_abort);
3649 } else {
3650 goto fail;
3651 }
3652 }
3653 return opts;
3654 }
3655 if (strcmp(filename, "con:") == 0) {
3656 qemu_opt_set(opts, "backend", "console", &error_abort);
3657 return opts;
3658 }
3659 if (strstart(filename, "COM", NULL)) {
3660 qemu_opt_set(opts, "backend", "serial", &error_abort);
3661 qemu_opt_set(opts, "path", filename, &error_abort);
3662 return opts;
3663 }
3664 if (strstart(filename, "file:", &p)) {
3665 qemu_opt_set(opts, "backend", "file", &error_abort);
3666 qemu_opt_set(opts, "path", p, &error_abort);
3667 return opts;
3668 }
3669 if (strstart(filename, "pipe:", &p)) {
3670 qemu_opt_set(opts, "backend", "pipe", &error_abort);
3671 qemu_opt_set(opts, "path", p, &error_abort);
3672 return opts;
3673 }
3674 if (strstart(filename, "tcp:", &p) ||
3675 strstart(filename, "telnet:", &p)) {
3676 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3677 host[0] = 0;
3678 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
3679 goto fail;
3680 }
3681 qemu_opt_set(opts, "backend", "socket", &error_abort);
3682 qemu_opt_set(opts, "host", host, &error_abort);
3683 qemu_opt_set(opts, "port", port, &error_abort);
3684 if (p[pos] == ',') {
3685 qemu_opts_do_parse(opts, p+pos+1, NULL, &local_err);
3686 if (local_err) {
3687 error_report_err(local_err);
3688 goto fail;
3689 }
3690 }
3691 if (strstart(filename, "telnet:", &p))
3692 qemu_opt_set(opts, "telnet", "on", &error_abort);
3693 return opts;
3694 }
3695 if (strstart(filename, "udp:", &p)) {
3696 qemu_opt_set(opts, "backend", "udp", &error_abort);
3697 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
3698 host[0] = 0;
3699 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
3700 goto fail;
3701 }
3702 }
3703 qemu_opt_set(opts, "host", host, &error_abort);
3704 qemu_opt_set(opts, "port", port, &error_abort);
3705 if (p[pos] == '@') {
3706 p += pos + 1;
3707 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3708 host[0] = 0;
3709 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
3710 goto fail;
3711 }
3712 }
3713 qemu_opt_set(opts, "localaddr", host, &error_abort);
3714 qemu_opt_set(opts, "localport", port, &error_abort);
3715 }
3716 return opts;
3717 }
3718 if (strstart(filename, "unix:", &p)) {
3719 qemu_opt_set(opts, "backend", "socket", &error_abort);
3720 qemu_opts_do_parse(opts, p, "path", &local_err);
3721 if (local_err) {
3722 error_report_err(local_err);
3723 goto fail;
3724 }
3725 return opts;
3726 }
3727 if (strstart(filename, "/dev/parport", NULL) ||
3728 strstart(filename, "/dev/ppi", NULL)) {
3729 qemu_opt_set(opts, "backend", "parport", &error_abort);
3730 qemu_opt_set(opts, "path", filename, &error_abort);
3731 return opts;
3732 }
3733 if (strstart(filename, "/dev/", NULL)) {
3734 qemu_opt_set(opts, "backend", "tty", &error_abort);
3735 qemu_opt_set(opts, "path", filename, &error_abort);
3736 return opts;
3737 }
3738
3739 fail:
3740 qemu_opts_del(opts);
3741 return NULL;
3742 }
3743
3744 void qemu_chr_parse_common(QemuOpts *opts, ChardevCommon *backend)
3745 {
3746 const char *logfile = qemu_opt_get(opts, "logfile");
3747
3748 backend->has_logfile = logfile != NULL;
3749 backend->logfile = logfile ? g_strdup(logfile) : NULL;
3750
3751 backend->has_logappend = true;
3752 backend->logappend = qemu_opt_get_bool(opts, "logappend", false);
3753 }
3754
3755
3756 static void qemu_chr_parse_file_out(QemuOpts *opts, ChardevBackend *backend,
3757 Error **errp)
3758 {
3759 const char *path = qemu_opt_get(opts, "path");
3760 ChardevFile *file;
3761
3762 if (path == NULL) {
3763 error_setg(errp, "chardev: file: no filename given");
3764 return;
3765 }
3766 file = backend->u.file.data = g_new0(ChardevFile, 1);
3767 qemu_chr_parse_common(opts, qapi_ChardevFile_base(file));
3768 file->out = g_strdup(path);
3769
3770 file->has_append = true;
3771 file->append = qemu_opt_get_bool(opts, "append", false);
3772 }
3773
3774 static void qemu_chr_parse_stdio(QemuOpts *opts, ChardevBackend *backend,
3775 Error **errp)
3776 {
3777 ChardevStdio *stdio;
3778
3779 stdio = backend->u.stdio.data = g_new0(ChardevStdio, 1);
3780 qemu_chr_parse_common(opts, qapi_ChardevStdio_base(stdio));
3781 stdio->has_signal = true;
3782 stdio->signal = qemu_opt_get_bool(opts, "signal", true);
3783 }
3784
3785 #ifdef HAVE_CHARDEV_SERIAL
3786 static void qemu_chr_parse_serial(QemuOpts *opts, ChardevBackend *backend,
3787 Error **errp)
3788 {
3789 const char *device = qemu_opt_get(opts, "path");
3790 ChardevHostdev *serial;
3791
3792 if (device == NULL) {
3793 error_setg(errp, "chardev: serial/tty: no device path given");
3794 return;
3795 }
3796 serial = backend->u.serial.data = g_new0(ChardevHostdev, 1);
3797 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(serial));
3798 serial->device = g_strdup(device);
3799 }
3800 #endif
3801
3802 #ifdef HAVE_CHARDEV_PARPORT
3803 static void qemu_chr_parse_parallel(QemuOpts *opts, ChardevBackend *backend,
3804 Error **errp)
3805 {
3806 const char *device = qemu_opt_get(opts, "path");
3807 ChardevHostdev *parallel;
3808
3809 if (device == NULL) {
3810 error_setg(errp, "chardev: parallel: no device path given");
3811 return;
3812 }
3813 parallel = backend->u.parallel.data = g_new0(ChardevHostdev, 1);
3814 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(parallel));
3815 parallel->device = g_strdup(device);
3816 }
3817 #endif
3818
3819 static void qemu_chr_parse_pipe(QemuOpts *opts, ChardevBackend *backend,
3820 Error **errp)
3821 {
3822 const char *device = qemu_opt_get(opts, "path");
3823 ChardevHostdev *dev;
3824
3825 if (device == NULL) {
3826 error_setg(errp, "chardev: pipe: no device path given");
3827 return;
3828 }
3829 dev = backend->u.pipe.data = g_new0(ChardevHostdev, 1);
3830 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(dev));
3831 dev->device = g_strdup(device);
3832 }
3833
3834 static void qemu_chr_parse_ringbuf(QemuOpts *opts, ChardevBackend *backend,
3835 Error **errp)
3836 {
3837 int val;
3838 ChardevRingbuf *ringbuf;
3839
3840 ringbuf = backend->u.ringbuf.data = g_new0(ChardevRingbuf, 1);
3841 qemu_chr_parse_common(opts, qapi_ChardevRingbuf_base(ringbuf));
3842
3843 val = qemu_opt_get_size(opts, "size", 0);
3844 if (val != 0) {
3845 ringbuf->has_size = true;
3846 ringbuf->size = val;
3847 }
3848 }
3849
3850 static void qemu_chr_parse_mux(QemuOpts *opts, ChardevBackend *backend,
3851 Error **errp)
3852 {
3853 const char *chardev = qemu_opt_get(opts, "chardev");
3854 ChardevMux *mux;
3855
3856 if (chardev == NULL) {
3857 error_setg(errp, "chardev: mux: no chardev given");
3858 return;
3859 }
3860 mux = backend->u.mux.data = g_new0(ChardevMux, 1);
3861 qemu_chr_parse_common(opts, qapi_ChardevMux_base(mux));
3862 mux->chardev = g_strdup(chardev);
3863 }
3864
3865 static void qemu_chr_parse_socket(QemuOpts *opts, ChardevBackend *backend,
3866 Error **errp)
3867 {
3868 bool is_listen = qemu_opt_get_bool(opts, "server", false);
3869 bool is_waitconnect = is_listen && qemu_opt_get_bool(opts, "wait", true);
3870 bool is_telnet = qemu_opt_get_bool(opts, "telnet", false);
3871 bool do_nodelay = !qemu_opt_get_bool(opts, "delay", true);
3872 int64_t reconnect = qemu_opt_get_number(opts, "reconnect", 0);
3873 const char *path = qemu_opt_get(opts, "path");
3874 const char *host = qemu_opt_get(opts, "host");
3875 const char *port = qemu_opt_get(opts, "port");
3876 const char *tls_creds = qemu_opt_get(opts, "tls-creds");
3877 SocketAddress *addr;
3878 ChardevSocket *sock;
3879
3880 if (!path) {
3881 if (!host) {
3882 error_setg(errp, "chardev: socket: no host given");
3883 return;
3884 }
3885 if (!port) {
3886 error_setg(errp, "chardev: socket: no port given");
3887 return;
3888 }
3889 } else {
3890 if (tls_creds) {
3891 error_setg(errp, "TLS can only be used over TCP socket");
3892 return;
3893 }
3894 }
3895
3896 sock = backend->u.socket.data = g_new0(ChardevSocket, 1);
3897 qemu_chr_parse_common(opts, qapi_ChardevSocket_base(sock));
3898
3899 sock->has_nodelay = true;
3900 sock->nodelay = do_nodelay;
3901 sock->has_server = true;
3902 sock->server = is_listen;
3903 sock->has_telnet = true;
3904 sock->telnet = is_telnet;
3905 sock->has_wait = true;
3906 sock->wait = is_waitconnect;
3907 sock->has_reconnect = true;
3908 sock->reconnect = reconnect;
3909 sock->tls_creds = g_strdup(tls_creds);
3910
3911 addr = g_new0(SocketAddress, 1);
3912 if (path) {
3913 UnixSocketAddress *q_unix;
3914 addr->type = SOCKET_ADDRESS_KIND_UNIX;
3915 q_unix = addr->u.q_unix.data = g_new0(UnixSocketAddress, 1);
3916 q_unix->path = g_strdup(path);
3917 } else {
3918 addr->type = SOCKET_ADDRESS_KIND_INET;
3919 addr->u.inet.data = g_new(InetSocketAddress, 1);
3920 *addr->u.inet.data = (InetSocketAddress) {
3921 .host = g_strdup(host),
3922 .port = g_strdup(port),
3923 .has_to = qemu_opt_get(opts, "to"),
3924 .to = qemu_opt_get_number(opts, "to", 0),
3925 .has_ipv4 = qemu_opt_get(opts, "ipv4"),
3926 .ipv4 = qemu_opt_get_bool(opts, "ipv4", 0),
3927 .has_ipv6 = qemu_opt_get(opts, "ipv6"),
3928 .ipv6 = qemu_opt_get_bool(opts, "ipv6", 0),
3929 };
3930 }
3931 sock->addr = addr;
3932 }
3933
3934 static void qemu_chr_parse_udp(QemuOpts *opts, ChardevBackend *backend,
3935 Error **errp)
3936 {
3937 const char *host = qemu_opt_get(opts, "host");
3938 const char *port = qemu_opt_get(opts, "port");
3939 const char *localaddr = qemu_opt_get(opts, "localaddr");
3940 const char *localport = qemu_opt_get(opts, "localport");
3941 bool has_local = false;
3942 SocketAddress *addr;
3943 ChardevUdp *udp;
3944
3945 if (host == NULL || strlen(host) == 0) {
3946 host = "localhost";
3947 }
3948 if (port == NULL || strlen(port) == 0) {
3949 error_setg(errp, "chardev: udp: remote port not specified");
3950 return;
3951 }
3952 if (localport == NULL || strlen(localport) == 0) {
3953 localport = "0";
3954 } else {
3955 has_local = true;
3956 }
3957 if (localaddr == NULL || strlen(localaddr) == 0) {
3958 localaddr = "";
3959 } else {
3960 has_local = true;
3961 }
3962
3963 udp = backend->u.udp.data = g_new0(ChardevUdp, 1);
3964 qemu_chr_parse_common(opts, qapi_ChardevUdp_base(udp));
3965
3966 addr = g_new0(SocketAddress, 1);
3967 addr->type = SOCKET_ADDRESS_KIND_INET;
3968 addr->u.inet.data = g_new(InetSocketAddress, 1);
3969 *addr->u.inet.data = (InetSocketAddress) {
3970 .host = g_strdup(host),
3971 .port = g_strdup(port),
3972 .has_ipv4 = qemu_opt_get(opts, "ipv4"),
3973 .ipv4 = qemu_opt_get_bool(opts, "ipv4", 0),
3974 .has_ipv6 = qemu_opt_get(opts, "ipv6"),
3975 .ipv6 = qemu_opt_get_bool(opts, "ipv6", 0),
3976 };
3977 udp->remote = addr;
3978
3979 if (has_local) {
3980 udp->has_local = true;
3981 addr = g_new0(SocketAddress, 1);
3982 addr->type = SOCKET_ADDRESS_KIND_INET;
3983 addr->u.inet.data = g_new(InetSocketAddress, 1);
3984 *addr->u.inet.data = (InetSocketAddress) {
3985 .host = g_strdup(localaddr),
3986 .port = g_strdup(localport),
3987 };
3988 udp->local = addr;
3989 }
3990 }
3991
3992 typedef struct CharDriver {
3993 const char *name;
3994 ChardevBackendKind kind;
3995 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp);
3996 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
3997 ChardevReturn *ret, Error **errp);
3998 } CharDriver;
3999
4000 static GSList *backends;
4001
4002 void register_char_driver(const char *name, ChardevBackendKind kind,
4003 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp),
4004 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
4005 ChardevReturn *ret, Error **errp))
4006 {
4007 CharDriver *s;
4008
4009 s = g_malloc0(sizeof(*s));
4010 s->name = g_strdup(name);
4011 s->kind = kind;
4012 s->parse = parse;
4013 s->create = create;
4014
4015 backends = g_slist_append(backends, s);
4016 }
4017
4018 CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
4019 Error **errp)
4020 {
4021 Error *local_err = NULL;
4022 CharDriver *cd;
4023 CharDriverState *chr;
4024 GSList *i;
4025 ChardevReturn *ret = NULL;
4026 ChardevBackend *backend;
4027 const char *id = qemu_opts_id(opts);
4028 char *bid = NULL;
4029
4030 if (qemu_opt_get(opts, "backend") == NULL) {
4031 error_setg(errp, "chardev: \"%s\" missing backend",
4032 qemu_opts_id(opts));
4033 goto err;
4034 }
4035
4036 if (is_help_option(qemu_opt_get(opts, "backend"))) {
4037 fprintf(stderr, "Available chardev backend types:\n");
4038 for (i = backends; i; i = i->next) {
4039 cd = i->data;
4040 fprintf(stderr, "%s\n", cd->name);
4041 }
4042 exit(!is_help_option(qemu_opt_get(opts, "backend")));
4043 }
4044
4045 if (id == NULL) {
4046 error_setg(errp, "chardev: no id specified");
4047 goto err;
4048 }
4049
4050 for (i = backends; i; i = i->next) {
4051 cd = i->data;
4052
4053 if (strcmp(cd->name, qemu_opt_get(opts, "backend")) == 0) {
4054 break;
4055 }
4056 }
4057 if (i == NULL) {
4058 error_setg(errp, "chardev: backend \"%s\" not found",
4059 qemu_opt_get(opts, "backend"));
4060 goto err;
4061 }
4062
4063 backend = g_new0(ChardevBackend, 1);
4064
4065 if (qemu_opt_get_bool(opts, "mux", 0)) {
4066 bid = g_strdup_printf("%s-base", id);
4067 }
4068
4069 chr = NULL;
4070 backend->type = cd->kind;
4071 if (cd->parse) {
4072 cd->parse(opts, backend, &local_err);
4073 if (local_err) {
4074 error_propagate(errp, local_err);
4075 goto qapi_out;
4076 }
4077 } else {
4078 ChardevCommon *cc = g_new0(ChardevCommon, 1);
4079 qemu_chr_parse_common(opts, cc);
4080 backend->u.null.data = cc; /* Any ChardevCommon member would work */
4081 }
4082
4083 ret = qmp_chardev_add(bid ? bid : id, backend, errp);
4084 if (!ret) {
4085 goto qapi_out;
4086 }
4087
4088 if (bid) {
4089 qapi_free_ChardevBackend(backend);
4090 qapi_free_ChardevReturn(ret);
4091 backend = g_new0(ChardevBackend, 1);
4092 backend->u.mux.data = g_new0(ChardevMux, 1);
4093 backend->type = CHARDEV_BACKEND_KIND_MUX;
4094 backend->u.mux.data->chardev = g_strdup(bid);
4095 ret = qmp_chardev_add(id, backend, errp);
4096 if (!ret) {
4097 chr = qemu_chr_find(bid);
4098 qemu_chr_delete(chr);
4099 chr = NULL;
4100 goto qapi_out;
4101 }
4102 }
4103
4104 chr = qemu_chr_find(id);
4105
4106 qapi_out:
4107 qapi_free_ChardevBackend(backend);
4108 qapi_free_ChardevReturn(ret);
4109 g_free(bid);
4110 return chr;
4111
4112 err:
4113 return NULL;
4114 }
4115
4116 CharDriverState *qemu_chr_new_noreplay(const char *label, const char *filename)
4117 {
4118 const char *p;
4119 CharDriverState *chr;
4120 QemuOpts *opts;
4121 Error *err = NULL;
4122
4123 if (strstart(filename, "chardev:", &p)) {
4124 return qemu_chr_find(p);
4125 }
4126
4127 opts = qemu_chr_parse_compat(label, filename);
4128 if (!opts)
4129 return NULL;
4130
4131 chr = qemu_chr_new_from_opts(opts, &err);
4132 if (err) {
4133 error_report_err(err);
4134 }
4135 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
4136 qemu_chr_fe_claim_no_fail(chr);
4137 monitor_init(chr, MONITOR_USE_READLINE);
4138 }
4139 qemu_opts_del(opts);
4140 return chr;
4141 }
4142
4143 CharDriverState *qemu_chr_new(const char *label, const char *filename)
4144 {
4145 CharDriverState *chr;
4146 chr = qemu_chr_new_noreplay(label, filename);
4147 if (chr) {
4148 chr->replay = replay_mode != REPLAY_MODE_NONE;
4149 if (chr->replay && chr->chr_ioctl) {
4150 fprintf(stderr,
4151 "Replay: ioctl is not supported for serial devices yet\n");
4152 }
4153 replay_register_char_driver(chr);
4154 }
4155 return chr;
4156 }
4157
4158 void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
4159 {
4160 if (chr->chr_set_echo) {
4161 chr->chr_set_echo(chr, echo);
4162 }
4163 }
4164
4165 void qemu_chr_fe_set_open(struct CharDriverState *chr, int fe_open)
4166 {
4167 if (chr->fe_open == fe_open) {
4168 return;
4169 }
4170 chr->fe_open = fe_open;
4171 if (chr->chr_set_fe_open) {
4172 chr->chr_set_fe_open(chr, fe_open);
4173 }
4174 }
4175
4176 void qemu_chr_fe_event(struct CharDriverState *chr, int event)
4177 {
4178 if (chr->chr_fe_event) {
4179 chr->chr_fe_event(chr, event);
4180 }
4181 }
4182
4183 guint qemu_chr_fe_add_watch(CharDriverState *s, GIOCondition cond,
4184 GIOFunc func, void *user_data)
4185 {
4186 GSource *src;
4187 guint tag;
4188
4189 if (s->chr_add_watch == NULL) {
4190 return 0;
4191 }
4192
4193 src = s->chr_add_watch(s, cond);
4194 if (!src) {
4195 return 0;
4196 }
4197
4198 g_source_set_callback(src, (GSourceFunc)func, user_data, NULL);
4199 tag = g_source_attach(src, NULL);
4200 g_source_unref(src);
4201
4202 return tag;
4203 }
4204
4205 int qemu_chr_fe_claim(CharDriverState *s)
4206 {
4207 if (s->avail_connections < 1) {
4208 return -1;
4209 }
4210 s->avail_connections--;
4211 return 0;
4212 }
4213
4214 void qemu_chr_fe_claim_no_fail(CharDriverState *s)
4215 {
4216 if (qemu_chr_fe_claim(s) != 0) {
4217 fprintf(stderr, "%s: error chardev \"%s\" already used\n",
4218 __func__, s->label);
4219 exit(1);
4220 }
4221 }
4222
4223 void qemu_chr_fe_release(CharDriverState *s)
4224 {
4225 s->avail_connections++;
4226 }
4227
4228 void qemu_chr_disconnect(CharDriverState *chr)
4229 {
4230 if (chr->chr_disconnect) {
4231 chr->chr_disconnect(chr);
4232 }
4233 }
4234
4235 static void qemu_chr_free_common(CharDriverState *chr)
4236 {
4237 g_free(chr->filename);
4238 g_free(chr->label);
4239 if (chr->logfd != -1) {
4240 close(chr->logfd);
4241 }
4242 qemu_mutex_destroy(&chr->chr_write_lock);
4243 g_free(chr);
4244 }
4245
4246 void qemu_chr_free(CharDriverState *chr)
4247 {
4248 if (chr->chr_close) {
4249 chr->chr_close(chr);
4250 }
4251 qemu_chr_free_common(chr);
4252 }
4253
4254 void qemu_chr_delete(CharDriverState *chr)
4255 {
4256 QTAILQ_REMOVE(&chardevs, chr, next);
4257 qemu_chr_free(chr);
4258 }
4259
4260 ChardevInfoList *qmp_query_chardev(Error **errp)
4261 {
4262 ChardevInfoList *chr_list = NULL;
4263 CharDriverState *chr;
4264
4265 QTAILQ_FOREACH(chr, &chardevs, next) {
4266 ChardevInfoList *info = g_malloc0(sizeof(*info));
4267 info->value = g_malloc0(sizeof(*info->value));
4268 info->value->label = g_strdup(chr->label);
4269 info->value->filename = g_strdup(chr->filename);
4270 info->value->frontend_open = chr->fe_open;
4271
4272 info->next = chr_list;
4273 chr_list = info;
4274 }
4275
4276 return chr_list;
4277 }
4278
4279 ChardevBackendInfoList *qmp_query_chardev_backends(Error **errp)
4280 {
4281 ChardevBackendInfoList *backend_list = NULL;
4282 CharDriver *c = NULL;
4283 GSList *i = NULL;
4284
4285 for (i = backends; i; i = i->next) {
4286 ChardevBackendInfoList *info = g_malloc0(sizeof(*info));
4287 c = i->data;
4288 info->value = g_malloc0(sizeof(*info->value));
4289 info->value->name = g_strdup(c->name);
4290
4291 info->next = backend_list;
4292 backend_list = info;
4293 }
4294
4295 return backend_list;
4296 }
4297
4298 CharDriverState *qemu_chr_find(const char *name)
4299 {
4300 CharDriverState *chr;
4301
4302 QTAILQ_FOREACH(chr, &chardevs, next) {
4303 if (strcmp(chr->label, name) != 0)
4304 continue;
4305 return chr;
4306 }
4307 return NULL;
4308 }
4309
4310 QemuOptsList qemu_chardev_opts = {
4311 .name = "chardev",
4312 .implied_opt_name = "backend",
4313 .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
4314 .desc = {
4315 {
4316 .name = "backend",
4317 .type = QEMU_OPT_STRING,
4318 },{
4319 .name = "path",
4320 .type = QEMU_OPT_STRING,
4321 },{
4322 .name = "host",
4323 .type = QEMU_OPT_STRING,
4324 },{
4325 .name = "port",
4326 .type = QEMU_OPT_STRING,
4327 },{
4328 .name = "localaddr",
4329 .type = QEMU_OPT_STRING,
4330 },{
4331 .name = "localport",
4332 .type = QEMU_OPT_STRING,
4333 },{
4334 .name = "to",
4335 .type = QEMU_OPT_NUMBER,
4336 },{
4337 .name = "ipv4",
4338 .type = QEMU_OPT_BOOL,
4339 },{
4340 .name = "ipv6",
4341 .type = QEMU_OPT_BOOL,
4342 },{
4343 .name = "wait",
4344 .type = QEMU_OPT_BOOL,
4345 },{
4346 .name = "server",
4347 .type = QEMU_OPT_BOOL,
4348 },{
4349 .name = "delay",
4350 .type = QEMU_OPT_BOOL,
4351 },{
4352 .name = "reconnect",
4353 .type = QEMU_OPT_NUMBER,
4354 },{
4355 .name = "telnet",
4356 .type = QEMU_OPT_BOOL,
4357 },{
4358 .name = "tls-creds",
4359 .type = QEMU_OPT_STRING,
4360 },{
4361 .name = "width",
4362 .type = QEMU_OPT_NUMBER,
4363 },{
4364 .name = "height",
4365 .type = QEMU_OPT_NUMBER,
4366 },{
4367 .name = "cols",
4368 .type = QEMU_OPT_NUMBER,
4369 },{
4370 .name = "rows",
4371 .type = QEMU_OPT_NUMBER,
4372 },{
4373 .name = "mux",
4374 .type = QEMU_OPT_BOOL,
4375 },{
4376 .name = "signal",
4377 .type = QEMU_OPT_BOOL,
4378 },{
4379 .name = "name",
4380 .type = QEMU_OPT_STRING,
4381 },{
4382 .name = "debug",
4383 .type = QEMU_OPT_NUMBER,
4384 },{
4385 .name = "size",
4386 .type = QEMU_OPT_SIZE,
4387 },{
4388 .name = "chardev",
4389 .type = QEMU_OPT_STRING,
4390 },{
4391 .name = "append",
4392 .type = QEMU_OPT_BOOL,
4393 },{
4394 .name = "logfile",
4395 .type = QEMU_OPT_STRING,
4396 },{
4397 .name = "logappend",
4398 .type = QEMU_OPT_BOOL,
4399 },
4400 { /* end of list */ }
4401 },
4402 };
4403
4404 #ifdef _WIN32
4405
4406 static CharDriverState *qmp_chardev_open_file(const char *id,
4407 ChardevBackend *backend,
4408 ChardevReturn *ret,
4409 Error **errp)
4410 {
4411 ChardevFile *file = backend->u.file.data;
4412 ChardevCommon *common = qapi_ChardevFile_base(file);
4413 HANDLE out;
4414 DWORD accessmode;
4415 DWORD flags;
4416
4417 if (file->has_in) {
4418 error_setg(errp, "input file not supported");
4419 return NULL;
4420 }
4421
4422 if (file->has_append && file->append) {
4423 /* Append to file if it already exists. */
4424 accessmode = FILE_GENERIC_WRITE & ~FILE_WRITE_DATA;
4425 flags = OPEN_ALWAYS;
4426 } else {
4427 /* Truncate file if it already exists. */
4428 accessmode = GENERIC_WRITE;
4429 flags = CREATE_ALWAYS;
4430 }
4431
4432 out = CreateFile(file->out, accessmode, FILE_SHARE_READ, NULL, flags,
4433 FILE_ATTRIBUTE_NORMAL, NULL);
4434 if (out == INVALID_HANDLE_VALUE) {
4435 error_setg(errp, "open %s failed", file->out);
4436 return NULL;
4437 }
4438 return qemu_chr_open_win_file(out, common, errp);
4439 }
4440
4441 static CharDriverState *qmp_chardev_open_serial(const char *id,
4442 ChardevBackend *backend,
4443 ChardevReturn *ret,
4444 Error **errp)
4445 {
4446 ChardevHostdev *serial = backend->u.serial.data;
4447 ChardevCommon *common = qapi_ChardevHostdev_base(serial);
4448 return qemu_chr_open_win_path(serial->device, common, errp);
4449 }
4450
4451 #else /* WIN32 */
4452
4453 static int qmp_chardev_open_file_source(char *src, int flags,
4454 Error **errp)
4455 {
4456 int fd = -1;
4457
4458 TFR(fd = qemu_open(src, flags, 0666));
4459 if (fd == -1) {
4460 error_setg_file_open(errp, errno, src);
4461 }
4462 return fd;
4463 }
4464
4465 static CharDriverState *qmp_chardev_open_file(const char *id,
4466 ChardevBackend *backend,
4467 ChardevReturn *ret,
4468 Error **errp)
4469 {
4470 ChardevFile *file = backend->u.file.data;
4471 ChardevCommon *common = qapi_ChardevFile_base(file);
4472 int flags, in = -1, out;
4473
4474 flags = O_WRONLY | O_CREAT | O_BINARY;
4475 if (file->has_append && file->append) {
4476 flags |= O_APPEND;
4477 } else {
4478 flags |= O_TRUNC;
4479 }
4480
4481 out = qmp_chardev_open_file_source(file->out, flags, errp);
4482 if (out < 0) {
4483 return NULL;
4484 }
4485
4486 if (file->has_in) {
4487 flags = O_RDONLY;
4488 in = qmp_chardev_open_file_source(file->in, flags, errp);
4489 if (in < 0) {
4490 qemu_close(out);
4491 return NULL;
4492 }
4493 }
4494
4495 return qemu_chr_open_fd(in, out, common, errp);
4496 }
4497
4498 #ifdef HAVE_CHARDEV_SERIAL
4499 static CharDriverState *qmp_chardev_open_serial(const char *id,
4500 ChardevBackend *backend,
4501 ChardevReturn *ret,
4502 Error **errp)
4503 {
4504 ChardevHostdev *serial = backend->u.serial.data;
4505 ChardevCommon *common = qapi_ChardevHostdev_base(serial);
4506 int fd;
4507
4508 fd = qmp_chardev_open_file_source(serial->device, O_RDWR, errp);
4509 if (fd < 0) {
4510 return NULL;
4511 }
4512 qemu_set_nonblock(fd);
4513 return qemu_chr_open_tty_fd(fd, common, errp);
4514 }
4515 #endif
4516
4517 #ifdef HAVE_CHARDEV_PARPORT
4518 static CharDriverState *qmp_chardev_open_parallel(const char *id,
4519 ChardevBackend *backend,
4520 ChardevReturn *ret,
4521 Error **errp)
4522 {
4523 ChardevHostdev *parallel = backend->u.parallel.data;
4524 ChardevCommon *common = qapi_ChardevHostdev_base(parallel);
4525 int fd;
4526
4527 fd = qmp_chardev_open_file_source(parallel->device, O_RDWR, errp);
4528 if (fd < 0) {
4529 return NULL;
4530 }
4531 return qemu_chr_open_pp_fd(fd, common, errp);
4532 }
4533 #endif
4534
4535 #endif /* WIN32 */
4536
4537 static gboolean socket_reconnect_timeout(gpointer opaque)
4538 {
4539 CharDriverState *chr = opaque;
4540 TCPCharDriver *s = chr->opaque;
4541 QIOChannelSocket *sioc;
4542
4543 s->reconnect_timer = 0;
4544
4545 if (chr->be_open) {
4546 return false;
4547 }
4548
4549 sioc = qio_channel_socket_new();
4550 qio_channel_socket_connect_async(sioc, s->addr,
4551 qemu_chr_socket_connected,
4552 chr, NULL);
4553
4554 return false;
4555 }
4556
4557 static CharDriverState *qmp_chardev_open_socket(const char *id,
4558 ChardevBackend *backend,
4559 ChardevReturn *ret,
4560 Error **errp)
4561 {
4562 CharDriverState *chr;
4563 TCPCharDriver *s;
4564 ChardevSocket *sock = backend->u.socket.data;
4565 SocketAddress *addr = sock->addr;
4566 bool do_nodelay = sock->has_nodelay ? sock->nodelay : false;
4567 bool is_listen = sock->has_server ? sock->server : true;
4568 bool is_telnet = sock->has_telnet ? sock->telnet : false;
4569 bool is_waitconnect = sock->has_wait ? sock->wait : false;
4570 int64_t reconnect = sock->has_reconnect ? sock->reconnect : 0;
4571 ChardevCommon *common = qapi_ChardevSocket_base(sock);
4572 QIOChannelSocket *sioc = NULL;
4573
4574 chr = qemu_chr_alloc(common, errp);
4575 if (!chr) {
4576 return NULL;
4577 }
4578 s = g_new0(TCPCharDriver, 1);
4579
4580 s->is_unix = addr->type == SOCKET_ADDRESS_KIND_UNIX;
4581 s->is_listen = is_listen;
4582 s->is_telnet = is_telnet;
4583 s->do_nodelay = do_nodelay;
4584 if (sock->tls_creds) {
4585 Object *creds;
4586 creds = object_resolve_path_component(
4587 object_get_objects_root(), sock->tls_creds);
4588 if (!creds) {
4589 error_setg(errp, "No TLS credentials with id '%s'",
4590 sock->tls_creds);
4591 goto error;
4592 }
4593 s->tls_creds = (QCryptoTLSCreds *)
4594 object_dynamic_cast(creds,
4595 TYPE_QCRYPTO_TLS_CREDS);
4596 if (!s->tls_creds) {
4597 error_setg(errp, "Object with id '%s' is not TLS credentials",
4598 sock->tls_creds);
4599 goto error;
4600 }
4601 object_ref(OBJECT(s->tls_creds));
4602 if (is_listen) {
4603 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_SERVER) {
4604 error_setg(errp, "%s",
4605 "Expected TLS credentials for server endpoint");
4606 goto error;
4607 }
4608 } else {
4609 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT) {
4610 error_setg(errp, "%s",
4611 "Expected TLS credentials for client endpoint");
4612 goto error;
4613 }
4614 }
4615 }
4616
4617 s->addr = QAPI_CLONE(SocketAddress, sock->addr);
4618
4619 qemu_chr_set_feature(chr, QEMU_CHAR_FEATURE_RECONNECTABLE);
4620 if (s->is_unix) {
4621 qemu_chr_set_feature(chr, QEMU_CHAR_FEATURE_FD_PASS);
4622 }
4623
4624 chr->opaque = s;
4625 chr->chr_wait_connected = tcp_chr_wait_connected;
4626 chr->chr_write = tcp_chr_write;
4627 chr->chr_sync_read = tcp_chr_sync_read;
4628 chr->chr_close = tcp_chr_close;
4629 chr->chr_disconnect = tcp_chr_disconnect;
4630 chr->get_msgfds = tcp_get_msgfds;
4631 chr->set_msgfds = tcp_set_msgfds;
4632 chr->chr_add_client = tcp_chr_add_client;
4633 chr->chr_add_watch = tcp_chr_add_watch;
4634 chr->chr_update_read_handler = tcp_chr_update_read_handler;
4635 /* be isn't opened until we get a connection */
4636 chr->explicit_be_open = true;
4637
4638 chr->filename = SocketAddress_to_str("disconnected:",
4639 addr, is_listen, is_telnet);
4640
4641 if (is_listen) {
4642 if (is_telnet) {
4643 s->do_telnetopt = 1;
4644 }
4645 } else if (reconnect > 0) {
4646 s->reconnect_time = reconnect;
4647 }
4648
4649 if (s->reconnect_time) {
4650 sioc = qio_channel_socket_new();
4651 qio_channel_socket_connect_async(sioc, s->addr,
4652 qemu_chr_socket_connected,
4653 chr, NULL);
4654 } else {
4655 if (s->is_listen) {
4656 sioc = qio_channel_socket_new();
4657 if (qio_channel_socket_listen_sync(sioc, s->addr, errp) < 0) {
4658 goto error;
4659 }
4660 s->listen_ioc = sioc;
4661 if (is_waitconnect &&
4662 qemu_chr_wait_connected(chr, errp) < 0) {
4663 goto error;
4664 }
4665 if (!s->ioc) {
4666 s->listen_tag = qio_channel_add_watch(
4667 QIO_CHANNEL(s->listen_ioc), G_IO_IN,
4668 tcp_chr_accept, chr, NULL);
4669 }
4670 } else if (qemu_chr_wait_connected(chr, errp) < 0) {
4671 goto error;
4672 }
4673 }
4674
4675 return chr;
4676
4677 error:
4678 if (sioc) {
4679 object_unref(OBJECT(sioc));
4680 }
4681 if (s->tls_creds) {
4682 object_unref(OBJECT(s->tls_creds));
4683 }
4684 g_free(s);
4685 qemu_chr_free_common(chr);
4686 return NULL;
4687 }
4688
4689 static CharDriverState *qmp_chardev_open_udp(const char *id,
4690 ChardevBackend *backend,
4691 ChardevReturn *ret,
4692 Error **errp)
4693 {
4694 ChardevUdp *udp = backend->u.udp.data;
4695 ChardevCommon *common = qapi_ChardevUdp_base(udp);
4696 QIOChannelSocket *sioc = qio_channel_socket_new();
4697
4698 if (qio_channel_socket_dgram_sync(sioc,
4699 udp->local, udp->remote,
4700 errp) < 0) {
4701 object_unref(OBJECT(sioc));
4702 return NULL;
4703 }
4704 return qemu_chr_open_udp(sioc, common, errp);
4705 }
4706
4707
4708 bool qemu_chr_has_feature(CharDriverState *chr,
4709 CharDriverFeature feature)
4710 {
4711 return test_bit(feature, chr->features);
4712 }
4713
4714 void qemu_chr_set_feature(CharDriverState *chr,
4715 CharDriverFeature feature)
4716 {
4717 return set_bit(feature, chr->features);
4718 }
4719
4720 ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
4721 Error **errp)
4722 {
4723 ChardevReturn *ret = g_new0(ChardevReturn, 1);
4724 CharDriverState *chr = NULL;
4725 Error *local_err = NULL;
4726 GSList *i;
4727 CharDriver *cd;
4728
4729 chr = qemu_chr_find(id);
4730 if (chr) {
4731 error_setg(errp, "Chardev '%s' already exists", id);
4732 g_free(ret);
4733 return NULL;
4734 }
4735
4736 for (i = backends; i; i = i->next) {
4737 cd = i->data;
4738
4739 if (cd->kind == backend->type) {
4740 chr = cd->create(id, backend, ret, &local_err);
4741 if (local_err) {
4742 error_propagate(errp, local_err);
4743 goto out_error;
4744 }
4745 break;
4746 }
4747 }
4748
4749 if (chr == NULL) {
4750 assert(!i);
4751 error_setg(errp, "chardev backend not available");
4752 goto out_error;
4753 }
4754
4755 chr->label = g_strdup(id);
4756 chr->avail_connections =
4757 (backend->type == CHARDEV_BACKEND_KIND_MUX) ? MAX_MUX : 1;
4758 if (!chr->filename) {
4759 chr->filename = g_strdup(ChardevBackendKind_lookup[backend->type]);
4760 }
4761 if (!chr->explicit_be_open) {
4762 qemu_chr_be_event(chr, CHR_EVENT_OPENED);
4763 }
4764 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
4765 return ret;
4766
4767 out_error:
4768 g_free(ret);
4769 return NULL;
4770 }
4771
4772 void qmp_chardev_remove(const char *id, Error **errp)
4773 {
4774 CharDriverState *chr;
4775
4776 chr = qemu_chr_find(id);
4777 if (chr == NULL) {
4778 error_setg(errp, "Chardev '%s' not found", id);
4779 return;
4780 }
4781 if (chr->chr_can_read || chr->chr_read ||
4782 chr->chr_event || chr->handler_opaque) {
4783 error_setg(errp, "Chardev '%s' is busy", id);
4784 return;
4785 }
4786 if (chr->replay) {
4787 error_setg(errp,
4788 "Chardev '%s' cannot be unplugged in record/replay mode", id);
4789 return;
4790 }
4791 qemu_chr_delete(chr);
4792 }
4793
4794 void qemu_chr_cleanup(void)
4795 {
4796 CharDriverState *chr, *tmp;
4797
4798 QTAILQ_FOREACH_SAFE(chr, &chardevs, next, tmp) {
4799 qemu_chr_delete(chr);
4800 }
4801 }
4802
4803 static void register_types(void)
4804 {
4805 register_char_driver("null", CHARDEV_BACKEND_KIND_NULL, NULL,
4806 qemu_chr_open_null);
4807 register_char_driver("socket", CHARDEV_BACKEND_KIND_SOCKET,
4808 qemu_chr_parse_socket, qmp_chardev_open_socket);
4809 register_char_driver("udp", CHARDEV_BACKEND_KIND_UDP, qemu_chr_parse_udp,
4810 qmp_chardev_open_udp);
4811 register_char_driver("ringbuf", CHARDEV_BACKEND_KIND_RINGBUF,
4812 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
4813 register_char_driver("file", CHARDEV_BACKEND_KIND_FILE,
4814 qemu_chr_parse_file_out, qmp_chardev_open_file);
4815 register_char_driver("stdio", CHARDEV_BACKEND_KIND_STDIO,
4816 qemu_chr_parse_stdio, qemu_chr_open_stdio);
4817 #if defined HAVE_CHARDEV_SERIAL
4818 register_char_driver("serial", CHARDEV_BACKEND_KIND_SERIAL,
4819 qemu_chr_parse_serial, qmp_chardev_open_serial);
4820 register_char_driver("tty", CHARDEV_BACKEND_KIND_SERIAL,
4821 qemu_chr_parse_serial, qmp_chardev_open_serial);
4822 #endif
4823 #ifdef HAVE_CHARDEV_PARPORT
4824 register_char_driver("parallel", CHARDEV_BACKEND_KIND_PARALLEL,
4825 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4826 register_char_driver("parport", CHARDEV_BACKEND_KIND_PARALLEL,
4827 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4828 #endif
4829 #ifdef HAVE_CHARDEV_PTY
4830 register_char_driver("pty", CHARDEV_BACKEND_KIND_PTY, NULL,
4831 qemu_chr_open_pty);
4832 #endif
4833 #ifdef _WIN32
4834 register_char_driver("console", CHARDEV_BACKEND_KIND_CONSOLE, NULL,
4835 qemu_chr_open_win_con);
4836 #endif
4837 register_char_driver("pipe", CHARDEV_BACKEND_KIND_PIPE,
4838 qemu_chr_parse_pipe, qemu_chr_open_pipe);
4839 register_char_driver("mux", CHARDEV_BACKEND_KIND_MUX, qemu_chr_parse_mux,
4840 qemu_chr_open_mux);
4841 /* Bug-compatibility: */
4842 register_char_driver("memory", CHARDEV_BACKEND_KIND_MEMORY,
4843 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
4844 /* this must be done after machine init, since we register FEs with muxes
4845 * as part of realize functions like serial_isa_realizefn when -nographic
4846 * is specified
4847 */
4848 qemu_add_machine_init_done_notifier(&muxes_realize_notify);
4849 }
4850
4851 type_init(register_types);