savevm.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for CONFIG_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #include <arpa/inet.h>
  46 #include <dirent.h>
  47 #include <netdb.h>
  48 #include <sys/select.h>
  49 #ifdef CONFIG_BSD
  50 #include <sys/stat.h>
  51 #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
  52 #include <libutil.h>
  53 #else
  54 #include <util.h>
  55 #endif
  56 #ifdef __linux__
  57 #include <pty.h>
  58 #include <malloc.h>
  59 #include <linux/rtc.h>
  60 #endif
  61 #endif
  62 #endif
  63
  64 #ifdef _WIN32
  65 #include <windows.h>
  66 #include <malloc.h>
  67 #include <sys/timeb.h>
  68 #include <mmsystem.h>
  69 #define getopt_long_only getopt_long
  70 #define memalign(align, size) malloc(size)
  71 #endif
  72
  73 #include "qemu-common.h"
  74 #include "hw/hw.h"
  75 #include "net.h"
  76 #include "monitor.h"
  77 #include "sysemu.h"
  78 #include "qemu-timer.h"
  79 #include "qemu-char.h"
  80 #include "block.h"
  81 #include "audio/audio.h"
  82 #include "migration.h"
  83 #include "qemu_socket.h"
  84 #include "qemu-queue.h"
  85
  86 /* point to the block driver where the snapshots are managed */
  87 static BlockDriverState *bs_snapshots;
  88
  89 #define SELF_ANNOUNCE_ROUNDS 5
  90
  91 #ifndef ETH_P_RARP
  92 #define ETH_P_RARP 0x0835
  93 #endif
  94 #define ARP_HTYPE_ETH 0x0001
  95 #define ARP_PTYPE_IP 0x0800
  96 #define ARP_OP_REQUEST_REV 0x3
  97
  98 static int announce_self_create(uint8_t *buf,
  99                                 uint8_t *mac_addr)
 100 {
 101     /* Ethernet header. */
 102     memset(buf, 0xff, 6);         /* destination MAC addr */
 103     memcpy(buf + 6, mac_addr, 6); /* source MAC addr */
 104     *(uint16_t *)(buf + 12) = htons(ETH_P_RARP); /* ethertype */
 105
 106     /* RARP header. */
 107     *(uint16_t *)(buf + 14) = htons(ARP_HTYPE_ETH); /* hardware addr space */
 108     *(uint16_t *)(buf + 16) = htons(ARP_PTYPE_IP); /* protocol addr space */
 109     *(buf + 18) = 6; /* hardware addr length (ethernet) */
 110     *(buf + 19) = 4; /* protocol addr length (IPv4) */
 111     *(uint16_t *)(buf + 20) = htons(ARP_OP_REQUEST_REV); /* opcode */
 112     memcpy(buf + 22, mac_addr, 6); /* source hw addr */
 113     memset(buf + 28, 0x00, 4);     /* source protocol addr */
 114     memcpy(buf + 32, mac_addr, 6); /* target hw addr */
 115     memset(buf + 38, 0x00, 4);     /* target protocol addr */
 116
 117     /* Padding to get up to 60 bytes (ethernet min packet size, minus FCS). */
 118     memset(buf + 42, 0x00, 18);
 119
 120     return 60; /* len (FCS will be added by hardware) */
 121 }
 122
 123 static void qemu_announce_self_iter(NICState *nic, void *opaque)
 124 {
 125     uint8_t buf[60];
 126     int len;
 127
 128     len = announce_self_create(buf, nic->conf->macaddr.a);
 129
 130     qemu_send_packet_raw(&nic->nc, buf, len);
 131 }
 132
 133
 134 static void qemu_announce_self_once(void *opaque)
 135 {
 136     static int count = SELF_ANNOUNCE_ROUNDS;
 137     QEMUTimer *timer = *(QEMUTimer **)opaque;
 138
 139     qemu_foreach_nic(qemu_announce_self_iter, NULL);
 140
 141     if (--count) {
 142         /* delay 50ms, 150ms, 250ms, ... */
 143         qemu_mod_timer(timer, qemu_get_clock(rt_clock) +
 144                        50 + (SELF_ANNOUNCE_ROUNDS - count - 1) * 100);
 145     } else {
 146             qemu_del_timer(timer);
 147             qemu_free_timer(timer);
 148     }
 149 }
 150
 151 void qemu_announce_self(void)
 152 {
 153         static QEMUTimer *timer;
 154         timer = qemu_new_timer(rt_clock, qemu_announce_self_once, &timer);
 155         qemu_announce_self_once(&timer);
 156 }
 157
 158 /***********************************************************/
 159 /* savevm/loadvm support */
 160
 161 #define IO_BUF_SIZE 32768
 162
 163 struct QEMUFile {
 164     QEMUFilePutBufferFunc *put_buffer;
 165     QEMUFileGetBufferFunc *get_buffer;
 166     QEMUFileCloseFunc *close;
 167     QEMUFileRateLimit *rate_limit;
 168     QEMUFileSetRateLimit *set_rate_limit;
 169     QEMUFileGetRateLimit *get_rate_limit;
 170     void *opaque;
 171     int is_write;
 172
 173     int64_t buf_offset; /* start of buffer when writing, end of buffer
 174                            when reading */
 175     int buf_index;
 176     int buf_size; /* 0 when writing */
 177     uint8_t buf[IO_BUF_SIZE];
 178
 179     int has_error;
 180 };
 181
 182 typedef struct QEMUFileStdio
 183 {
 184     FILE *stdio_file;
 185     QEMUFile *file;
 186 } QEMUFileStdio;
 187
 188 typedef struct QEMUFileSocket
 189 {
 190     int fd;
 191     QEMUFile *file;
 192 } QEMUFileSocket;
 193
 194 static int socket_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 195 {
 196     QEMUFileSocket *s = opaque;
 197     ssize_t len;
 198
 199     do {
 200         len = recv(s->fd, (void *)buf, size, 0);
 201     } while (len == -1 && socket_error() == EINTR);
 202
 203     if (len == -1)
 204         len = -socket_error();
 205
 206     return len;
 207 }
 208
 209 static int socket_close(void *opaque)
 210 {
 211     QEMUFileSocket *s = opaque;
 212     qemu_free(s);
 213     return 0;
 214 }
 215
 216 static int stdio_put_buffer(void *opaque, const uint8_t *buf, int64_t pos, int size)
 217 {
 218     QEMUFileStdio *s = opaque;
 219     return fwrite(buf, 1, size, s->stdio_file);
 220 }
 221
 222 static int stdio_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 223 {
 224     QEMUFileStdio *s = opaque;
 225     FILE *fp = s->stdio_file;
 226     int bytes;
 227
 228     do {
 229         clearerr(fp);
 230         bytes = fread(buf, 1, size, fp);
 231     } while ((bytes == 0) && ferror(fp) && (errno == EINTR));
 232     return bytes;
 233 }
 234
 235 static int stdio_pclose(void *opaque)
 236 {
 237     QEMUFileStdio *s = opaque;
 238     pclose(s->stdio_file);
 239     qemu_free(s);
 240     return 0;
 241 }
 242
 243 static int stdio_fclose(void *opaque)
 244 {
 245     QEMUFileStdio *s = opaque;
 246     fclose(s->stdio_file);
 247     qemu_free(s);
 248     return 0;
 249 }
 250
 251 QEMUFile *qemu_popen(FILE *stdio_file, const char *mode)
 252 {
 253     QEMUFileStdio *s;
 254
 255     if (stdio_file == NULL || mode == NULL || (mode[0] != 'r' && mode[0] != 'w') || mode[1] != 0) {
 256         fprintf(stderr, "qemu_popen: Argument validity check failed\n");
 257         return NULL;
 258     }
 259
 260     s = qemu_mallocz(sizeof(QEMUFileStdio));
 261
 262     s->stdio_file = stdio_file;
 263
 264     if(mode[0] == 'r') {
 265         s->file = qemu_fopen_ops(s, NULL, stdio_get_buffer, stdio_pclose,
 266                                  NULL, NULL, NULL);
 267     } else {
 268         s->file = qemu_fopen_ops(s, stdio_put_buffer, NULL, stdio_pclose,
 269                                  NULL, NULL, NULL);
 270     }
 271     return s->file;
 272 }
 273
 274 QEMUFile *qemu_popen_cmd(const char *command, const char *mode)
 275 {
 276     FILE *popen_file;
 277
 278     popen_file = popen(command, mode);
 279     if(popen_file == NULL) {
 280         return NULL;
 281     }
 282
 283     return qemu_popen(popen_file, mode);
 284 }
 285
 286 int qemu_stdio_fd(QEMUFile *f)
 287 {
 288     QEMUFileStdio *p;
 289     int fd;
 290
 291     p = (QEMUFileStdio *)f->opaque;
 292     fd = fileno(p->stdio_file);
 293
 294     return fd;
 295 }
 296
 297 QEMUFile *qemu_fdopen(int fd, const char *mode)
 298 {
 299     QEMUFileStdio *s;
 300
 301     if (mode == NULL ||
 302         (mode[0] != 'r' && mode[0] != 'w') ||
 303         mode[1] != 'b' || mode[2] != 0) {
 304         fprintf(stderr, "qemu_fdopen: Argument validity check failed\n");
 305         return NULL;
 306     }
 307
 308     s = qemu_mallocz(sizeof(QEMUFileStdio));
 309     s->stdio_file = fdopen(fd, mode);
 310     if (!s->stdio_file)
 311         goto fail;
 312
 313     if(mode[0] == 'r') {
 314         s->file = qemu_fopen_ops(s, NULL, stdio_get_buffer, stdio_fclose,
 315                                  NULL, NULL, NULL);
 316     } else {
 317         s->file = qemu_fopen_ops(s, stdio_put_buffer, NULL, stdio_fclose,
 318                                  NULL, NULL, NULL);
 319     }
 320     return s->file;
 321
 322 fail:
 323     qemu_free(s);
 324     return NULL;
 325 }
 326
 327 QEMUFile *qemu_fopen_socket(int fd)
 328 {
 329     QEMUFileSocket *s = qemu_mallocz(sizeof(QEMUFileSocket));
 330
 331     s->fd = fd;
 332     s->file = qemu_fopen_ops(s, NULL, socket_get_buffer, socket_close,
 333                              NULL, NULL, NULL);
 334     return s->file;
 335 }
 336
 337 static int file_put_buffer(void *opaque, const uint8_t *buf,
 338                             int64_t pos, int size)
 339 {
 340     QEMUFileStdio *s = opaque;
 341     fseek(s->stdio_file, pos, SEEK_SET);
 342     fwrite(buf, 1, size, s->stdio_file);
 343     return size;
 344 }
 345
 346 static int file_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 347 {
 348     QEMUFileStdio *s = opaque;
 349     fseek(s->stdio_file, pos, SEEK_SET);
 350     return fread(buf, 1, size, s->stdio_file);
 351 }
 352
 353 QEMUFile *qemu_fopen(const char *filename, const char *mode)
 354 {
 355     QEMUFileStdio *s;
 356
 357     if (mode == NULL ||
 358         (mode[0] != 'r' && mode[0] != 'w') ||
 359         mode[1] != 'b' || mode[2] != 0) {
 360         fprintf(stderr, "qemu_fdopen: Argument validity check failed\n");
 361         return NULL;
 362     }
 363
 364     s = qemu_mallocz(sizeof(QEMUFileStdio));
 365
 366     s->stdio_file = fopen(filename, mode);
 367     if (!s->stdio_file)
 368         goto fail;
 369
 370     if(mode[0] == 'w') {
 371         s->file = qemu_fopen_ops(s, file_put_buffer, NULL, stdio_fclose,
 372                                  NULL, NULL, NULL);
 373     } else {
 374         s->file = qemu_fopen_ops(s, NULL, file_get_buffer, stdio_fclose,
 375                                NULL, NULL, NULL);
 376     }
 377     return s->file;
 378 fail:
 379     qemu_free(s);
 380     return NULL;
 381 }
 382
 383 static int block_put_buffer(void *opaque, const uint8_t *buf,
 384                            int64_t pos, int size)
 385 {
 386     bdrv_save_vmstate(opaque, buf, pos, size);
 387     return size;
 388 }
 389
 390 static int block_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 391 {
 392     return bdrv_load_vmstate(opaque, buf, pos, size);
 393 }
 394
 395 static int bdrv_fclose(void *opaque)
 396 {
 397     return 0;
 398 }
 399
 400 static QEMUFile *qemu_fopen_bdrv(BlockDriverState *bs, int is_writable)
 401 {
 402     if (is_writable)
 403         return qemu_fopen_ops(bs, block_put_buffer, NULL, bdrv_fclose,
 404                               NULL, NULL, NULL);
 405     return qemu_fopen_ops(bs, NULL, block_get_buffer, bdrv_fclose, NULL, NULL, NULL);
 406 }
 407
 408 QEMUFile *qemu_fopen_ops(void *opaque, QEMUFilePutBufferFunc *put_buffer,
 409                          QEMUFileGetBufferFunc *get_buffer,
 410                          QEMUFileCloseFunc *close,
 411                          QEMUFileRateLimit *rate_limit,
 412                          QEMUFileSetRateLimit *set_rate_limit,
 413                          QEMUFileGetRateLimit *get_rate_limit)
 414 {
 415     QEMUFile *f;
 416
 417     f = qemu_mallocz(sizeof(QEMUFile));
 418
 419     f->opaque = opaque;
 420     f->put_buffer = put_buffer;
 421     f->get_buffer = get_buffer;
 422     f->close = close;
 423     f->rate_limit = rate_limit;
 424     f->set_rate_limit = set_rate_limit;
 425     f->get_rate_limit = get_rate_limit;
 426     f->is_write = 0;
 427
 428     return f;
 429 }
 430
 431 int qemu_file_has_error(QEMUFile *f)
 432 {
 433     return f->has_error;
 434 }
 435
 436 void qemu_file_set_error(QEMUFile *f)
 437 {
 438     f->has_error = 1;
 439 }
 440
 441 void qemu_fflush(QEMUFile *f)
 442 {
 443     if (!f->put_buffer)
 444         return;
 445
 446     if (f->is_write && f->buf_index > 0) {
 447         int len;
 448
 449         len = f->put_buffer(f->opaque, f->buf, f->buf_offset, f->buf_index);
 450         if (len > 0)
 451             f->buf_offset += f->buf_index;
 452         else
 453             f->has_error = 1;
 454         f->buf_index = 0;
 455     }
 456 }
 457
 458 static void qemu_fill_buffer(QEMUFile *f)
 459 {
 460     int len;
 461
 462     if (!f->get_buffer)
 463         return;
 464
 465     if (f->is_write)
 466         abort();
 467
 468     len = f->get_buffer(f->opaque, f->buf, f->buf_offset, IO_BUF_SIZE);
 469     if (len > 0) {
 470         f->buf_index = 0;
 471         f->buf_size = len;
 472         f->buf_offset += len;
 473     } else if (len != -EAGAIN)
 474         f->has_error = 1;
 475 }
 476
 477 int qemu_fclose(QEMUFile *f)
 478 {
 479     int ret = 0;
 480     qemu_fflush(f);
 481     if (f->close)
 482         ret = f->close(f->opaque);
 483     qemu_free(f);
 484     return ret;
 485 }
 486
 487 void qemu_file_put_notify(QEMUFile *f)
 488 {
 489     f->put_buffer(f->opaque, NULL, 0, 0);
 490 }
 491
 492 void qemu_put_buffer(QEMUFile *f, const uint8_t *buf, int size)
 493 {
 494     int l;
 495
 496     if (!f->has_error && f->is_write == 0 && f->buf_index > 0) {
 497         fprintf(stderr,
 498                 "Attempted to write to buffer while read buffer is not empty\n");
 499         abort();
 500     }
 501
 502     while (!f->has_error && size > 0) {
 503         l = IO_BUF_SIZE - f->buf_index;
 504         if (l > size)
 505             l = size;
 506         memcpy(f->buf + f->buf_index, buf, l);
 507         f->is_write = 1;
 508         f->buf_index += l;
 509         buf += l;
 510         size -= l;
 511         if (f->buf_index >= IO_BUF_SIZE)
 512             qemu_fflush(f);
 513     }
 514 }
 515
 516 void qemu_put_byte(QEMUFile *f, int v)
 517 {
 518     if (!f->has_error && f->is_write == 0 && f->buf_index > 0) {
 519         fprintf(stderr,
 520                 "Attempted to write to buffer while read buffer is not empty\n");
 521         abort();
 522     }
 523
 524     f->buf[f->buf_index++] = v;
 525     f->is_write = 1;
 526     if (f->buf_index >= IO_BUF_SIZE)
 527         qemu_fflush(f);
 528 }
 529
 530 int qemu_get_buffer(QEMUFile *f, uint8_t *buf, int size1)
 531 {
 532     int size, l;
 533
 534     if (f->is_write)
 535         abort();
 536
 537     size = size1;
 538     while (size > 0) {
 539         l = f->buf_size - f->buf_index;
 540         if (l == 0) {
 541             qemu_fill_buffer(f);
 542             l = f->buf_size - f->buf_index;
 543             if (l == 0)
 544                 break;
 545         }
 546         if (l > size)
 547             l = size;
 548         memcpy(buf, f->buf + f->buf_index, l);
 549         f->buf_index += l;
 550         buf += l;
 551         size -= l;
 552     }
 553     return size1 - size;
 554 }
 555
 556 int qemu_get_byte(QEMUFile *f)
 557 {
 558     if (f->is_write)
 559         abort();
 560
 561     if (f->buf_index >= f->buf_size) {
 562         qemu_fill_buffer(f);
 563         if (f->buf_index >= f->buf_size)
 564             return 0;
 565     }
 566     return f->buf[f->buf_index++];
 567 }
 568
 569 int64_t qemu_ftell(QEMUFile *f)
 570 {
 571     return f->buf_offset - f->buf_size + f->buf_index;
 572 }
 573
 574 int64_t qemu_fseek(QEMUFile *f, int64_t pos, int whence)
 575 {
 576     if (whence == SEEK_SET) {
 577         /* nothing to do */
 578     } else if (whence == SEEK_CUR) {
 579         pos += qemu_ftell(f);
 580     } else {
 581         /* SEEK_END not supported */
 582         return -1;
 583     }
 584     if (f->put_buffer) {
 585         qemu_fflush(f);
 586         f->buf_offset = pos;
 587     } else {
 588         f->buf_offset = pos;
 589         f->buf_index = 0;
 590         f->buf_size = 0;
 591     }
 592     return pos;
 593 }
 594
 595 int qemu_file_rate_limit(QEMUFile *f)
 596 {
 597     if (f->rate_limit)
 598         return f->rate_limit(f->opaque);
 599
 600     return 0;
 601 }
 602
 603 size_t qemu_file_get_rate_limit(QEMUFile *f)
 604 {
 605     if (f->get_rate_limit)
 606         return f->get_rate_limit(f->opaque);
 607
 608     return 0;
 609 }
 610
 611 size_t qemu_file_set_rate_limit(QEMUFile *f, size_t new_rate)
 612 {
 613     /* any failed or completed migration keeps its state to allow probing of
 614      * migration data, but has no associated file anymore */
 615     if (f && f->set_rate_limit)
 616         return f->set_rate_limit(f->opaque, new_rate);
 617
 618     return 0;
 619 }
 620
 621 void qemu_put_be16(QEMUFile *f, unsigned int v)
 622 {
 623     qemu_put_byte(f, v >> 8);
 624     qemu_put_byte(f, v);
 625 }
 626
 627 void qemu_put_be32(QEMUFile *f, unsigned int v)
 628 {
 629     qemu_put_byte(f, v >> 24);
 630     qemu_put_byte(f, v >> 16);
 631     qemu_put_byte(f, v >> 8);
 632     qemu_put_byte(f, v);
 633 }
 634
 635 void qemu_put_be64(QEMUFile *f, uint64_t v)
 636 {
 637     qemu_put_be32(f, v >> 32);
 638     qemu_put_be32(f, v);
 639 }
 640
 641 unsigned int qemu_get_be16(QEMUFile *f)
 642 {
 643     unsigned int v;
 644     v = qemu_get_byte(f) << 8;
 645     v |= qemu_get_byte(f);
 646     return v;
 647 }
 648
 649 unsigned int qemu_get_be32(QEMUFile *f)
 650 {
 651     unsigned int v;
 652     v = qemu_get_byte(f) << 24;
 653     v |= qemu_get_byte(f) << 16;
 654     v |= qemu_get_byte(f) << 8;
 655     v |= qemu_get_byte(f);
 656     return v;
 657 }
 658
 659 uint64_t qemu_get_be64(QEMUFile *f)
 660 {
 661     uint64_t v;
 662     v = (uint64_t)qemu_get_be32(f) << 32;
 663     v |= qemu_get_be32(f);
 664     return v;
 665 }
 666
 667 /* 8 bit int */
 668
 669 static int get_int8(QEMUFile *f, void *pv, size_t size)
 670 {
 671     int8_t *v = pv;
 672     qemu_get_s8s(f, v);
 673     return 0;
 674 }
 675
 676 static void put_int8(QEMUFile *f, void *pv, size_t size)
 677 {
 678     int8_t *v = pv;
 679     qemu_put_s8s(f, v);
 680 }
 681
 682 const VMStateInfo vmstate_info_int8 = {
 683     .name = "int8",
 684     .get  = get_int8,
 685     .put  = put_int8,
 686 };
 687
 688 /* 16 bit int */
 689
 690 static int get_int16(QEMUFile *f, void *pv, size_t size)
 691 {
 692     int16_t *v = pv;
 693     qemu_get_sbe16s(f, v);
 694     return 0;
 695 }
 696
 697 static void put_int16(QEMUFile *f, void *pv, size_t size)
 698 {
 699     int16_t *v = pv;
 700     qemu_put_sbe16s(f, v);
 701 }
 702
 703 const VMStateInfo vmstate_info_int16 = {
 704     .name = "int16",
 705     .get  = get_int16,
 706     .put  = put_int16,
 707 };
 708
 709 /* 32 bit int */
 710
 711 static int get_int32(QEMUFile *f, void *pv, size_t size)
 712 {
 713     int32_t *v = pv;
 714     qemu_get_sbe32s(f, v);
 715     return 0;
 716 }
 717
 718 static void put_int32(QEMUFile *f, void *pv, size_t size)
 719 {
 720     int32_t *v = pv;
 721     qemu_put_sbe32s(f, v);
 722 }
 723
 724 const VMStateInfo vmstate_info_int32 = {
 725     .name = "int32",
 726     .get  = get_int32,
 727     .put  = put_int32,
 728 };
 729
 730 /* 32 bit int. See that the received value is the same than the one
 731    in the field */
 732
 733 static int get_int32_equal(QEMUFile *f, void *pv, size_t size)
 734 {
 735     int32_t *v = pv;
 736     int32_t v2;
 737     qemu_get_sbe32s(f, &v2);
 738
 739     if (*v == v2)
 740         return 0;
 741     return -EINVAL;
 742 }
 743
 744 const VMStateInfo vmstate_info_int32_equal = {
 745     .name = "int32 equal",
 746     .get  = get_int32_equal,
 747     .put  = put_int32,
 748 };
 749
 750 /* 32 bit int. See that the received value is the less or the same
 751    than the one in the field */
 752
 753 static int get_int32_le(QEMUFile *f, void *pv, size_t size)
 754 {
 755     int32_t *old = pv;
 756     int32_t new;
 757     qemu_get_sbe32s(f, &new);
 758
 759     if (*old <= new)
 760         return 0;
 761     return -EINVAL;
 762 }
 763
 764 const VMStateInfo vmstate_info_int32_le = {
 765     .name = "int32 equal",
 766     .get  = get_int32_le,
 767     .put  = put_int32,
 768 };
 769
 770 /* 64 bit int */
 771
 772 static int get_int64(QEMUFile *f, void *pv, size_t size)
 773 {
 774     int64_t *v = pv;
 775     qemu_get_sbe64s(f, v);
 776     return 0;
 777 }
 778
 779 static void put_int64(QEMUFile *f, void *pv, size_t size)
 780 {
 781     int64_t *v = pv;
 782     qemu_put_sbe64s(f, v);
 783 }
 784
 785 const VMStateInfo vmstate_info_int64 = {
 786     .name = "int64",
 787     .get  = get_int64,
 788     .put  = put_int64,
 789 };
 790
 791 /* 8 bit unsigned int */
 792
 793 static int get_uint8(QEMUFile *f, void *pv, size_t size)
 794 {
 795     uint8_t *v = pv;
 796     qemu_get_8s(f, v);
 797     return 0;
 798 }
 799
 800 static void put_uint8(QEMUFile *f, void *pv, size_t size)
 801 {
 802     uint8_t *v = pv;
 803     qemu_put_8s(f, v);
 804 }
 805
 806 const VMStateInfo vmstate_info_uint8 = {
 807     .name = "uint8",
 808     .get  = get_uint8,
 809     .put  = put_uint8,
 810 };
 811
 812 /* 16 bit unsigned int */
 813
 814 static int get_uint16(QEMUFile *f, void *pv, size_t size)
 815 {
 816     uint16_t *v = pv;
 817     qemu_get_be16s(f, v);
 818     return 0;
 819 }
 820
 821 static void put_uint16(QEMUFile *f, void *pv, size_t size)
 822 {
 823     uint16_t *v = pv;
 824     qemu_put_be16s(f, v);
 825 }
 826
 827 const VMStateInfo vmstate_info_uint16 = {
 828     .name = "uint16",
 829     .get  = get_uint16,
 830     .put  = put_uint16,
 831 };
 832
 833 /* 32 bit unsigned int */
 834
 835 static int get_uint32(QEMUFile *f, void *pv, size_t size)
 836 {
 837     uint32_t *v = pv;
 838     qemu_get_be32s(f, v);
 839     return 0;
 840 }
 841
 842 static void put_uint32(QEMUFile *f, void *pv, size_t size)
 843 {
 844     uint32_t *v = pv;
 845     qemu_put_be32s(f, v);
 846 }
 847
 848 const VMStateInfo vmstate_info_uint32 = {
 849     .name = "uint32",
 850     .get  = get_uint32,
 851     .put  = put_uint32,
 852 };
 853
 854 /* 64 bit unsigned int */
 855
 856 static int get_uint64(QEMUFile *f, void *pv, size_t size)
 857 {
 858     uint64_t *v = pv;
 859     qemu_get_be64s(f, v);
 860     return 0;
 861 }
 862
 863 static void put_uint64(QEMUFile *f, void *pv, size_t size)
 864 {
 865     uint64_t *v = pv;
 866     qemu_put_be64s(f, v);
 867 }
 868
 869 const VMStateInfo vmstate_info_uint64 = {
 870     .name = "uint64",
 871     .get  = get_uint64,
 872     .put  = put_uint64,
 873 };
 874
 875 /* 8 bit int. See that the received value is the same than the one
 876    in the field */
 877
 878 static int get_uint8_equal(QEMUFile *f, void *pv, size_t size)
 879 {
 880     uint8_t *v = pv;
 881     uint8_t v2;
 882     qemu_get_8s(f, &v2);
 883
 884     if (*v == v2)
 885         return 0;
 886     return -EINVAL;
 887 }
 888
 889 const VMStateInfo vmstate_info_uint8_equal = {
 890     .name = "uint8 equal",
 891     .get  = get_uint8_equal,
 892     .put  = put_uint8,
 893 };
 894
 895 /* 16 bit unsigned int int. See that the received value is the same than the one
 896    in the field */
 897
 898 static int get_uint16_equal(QEMUFile *f, void *pv, size_t size)
 899 {
 900     uint16_t *v = pv;
 901     uint16_t v2;
 902     qemu_get_be16s(f, &v2);
 903
 904     if (*v == v2)
 905         return 0;
 906     return -EINVAL;
 907 }
 908
 909 const VMStateInfo vmstate_info_uint16_equal = {
 910     .name = "uint16 equal",
 911     .get  = get_uint16_equal,
 912     .put  = put_uint16,
 913 };
 914
 915 /* timers  */
 916
 917 static int get_timer(QEMUFile *f, void *pv, size_t size)
 918 {
 919     QEMUTimer *v = pv;
 920     qemu_get_timer(f, v);
 921     return 0;
 922 }
 923
 924 static void put_timer(QEMUFile *f, void *pv, size_t size)
 925 {
 926     QEMUTimer *v = pv;
 927     qemu_put_timer(f, v);
 928 }
 929
 930 const VMStateInfo vmstate_info_timer = {
 931     .name = "timer",
 932     .get  = get_timer,
 933     .put  = put_timer,
 934 };
 935
 936 /* uint8_t buffers */
 937
 938 static int get_buffer(QEMUFile *f, void *pv, size_t size)
 939 {
 940     uint8_t *v = pv;
 941     qemu_get_buffer(f, v, size);
 942     return 0;
 943 }
 944
 945 static void put_buffer(QEMUFile *f, void *pv, size_t size)
 946 {
 947     uint8_t *v = pv;
 948     qemu_put_buffer(f, v, size);
 949 }
 950
 951 const VMStateInfo vmstate_info_buffer = {
 952     .name = "buffer",
 953     .get  = get_buffer,
 954     .put  = put_buffer,
 955 };
 956
 957 /* unused buffers: space that was used for some fields that are
 958    not usefull anymore */
 959
 960 static int get_unused_buffer(QEMUFile *f, void *pv, size_t size)
 961 {
 962     uint8_t buf[1024];
 963     int block_len;
 964
 965     while (size > 0) {
 966         block_len = MIN(sizeof(buf), size);
 967         size -= block_len;
 968         qemu_get_buffer(f, buf, block_len);
 969     }
 970    return 0;
 971 }
 972
 973 static void put_unused_buffer(QEMUFile *f, void *pv, size_t size)
 974 {
 975     static const uint8_t buf[1024];
 976     int block_len;
 977
 978     while (size > 0) {
 979         block_len = MIN(sizeof(buf), size);
 980         size -= block_len;
 981         qemu_put_buffer(f, buf, block_len);
 982     }
 983 }
 984
 985 const VMStateInfo vmstate_info_unused_buffer = {
 986     .name = "unused_buffer",
 987     .get  = get_unused_buffer,
 988     .put  = put_unused_buffer,
 989 };
 990
 991 typedef struct SaveStateEntry {
 992     QTAILQ_ENTRY(SaveStateEntry) entry;
 993     char idstr[256];
 994     int instance_id;
 995     int version_id;
 996     int section_id;
 997     SaveSetParamsHandler *set_params;
 998     SaveLiveStateHandler *save_live_state;
 999     SaveStateHandler *save_state;
1000     LoadStateHandler *load_state;
1001     const VMStateDescription *vmsd;
1002     void *opaque;
1003 } SaveStateEntry;
1004
1005
1006 static QTAILQ_HEAD(savevm_handlers, SaveStateEntry) savevm_handlers =
1007     QTAILQ_HEAD_INITIALIZER(savevm_handlers);
1008 static int global_section_id;
1009
1010 static int calculate_new_instance_id(const char *idstr)
1011 {
1012     SaveStateEntry *se;
1013     int instance_id = 0;
1014
1015     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1016         if (strcmp(idstr, se->idstr) == 0
1017             && instance_id <= se->instance_id) {
1018             instance_id = se->instance_id + 1;
1019         }
1020     }
1021     return instance_id;
1022 }
1023
1024 /* TODO: Individual devices generally have very little idea about the rest
1025    of the system, so instance_id should be removed/replaced.
1026    Meanwhile pass -1 as instance_id if you do not already have a clearly
1027    distinguishing id for all instances of your device class. */
1028 int register_savevm_live(const char *idstr,
1029                          int instance_id,
1030                          int version_id,
1031                          SaveSetParamsHandler *set_params,
1032                          SaveLiveStateHandler *save_live_state,
1033                          SaveStateHandler *save_state,
1034                          LoadStateHandler *load_state,
1035                          void *opaque)
1036 {
1037     SaveStateEntry *se;
1038
1039     se = qemu_mallocz(sizeof(SaveStateEntry));
1040     pstrcpy(se->idstr, sizeof(se->idstr), idstr);
1041     se->version_id = version_id;
1042     se->section_id = global_section_id++;
1043     se->set_params = set_params;
1044     se->save_live_state = save_live_state;
1045     se->save_state = save_state;
1046     se->load_state = load_state;
1047     se->opaque = opaque;
1048     se->vmsd = NULL;
1049
1050     if (instance_id == -1) {
1051         se->instance_id = calculate_new_instance_id(idstr);
1052     } else {
1053         se->instance_id = instance_id;
1054     }
1055     /* add at the end of list */
1056     QTAILQ_INSERT_TAIL(&savevm_handlers, se, entry);
1057     return 0;
1058 }
1059
1060 int register_savevm(const char *idstr,
1061                     int instance_id,
1062                     int version_id,
1063                     SaveStateHandler *save_state,
1064                     LoadStateHandler *load_state,
1065                     void *opaque)
1066 {
1067     return register_savevm_live(idstr, instance_id, version_id,
1068                                 NULL, NULL, save_state, load_state, opaque);
1069 }
1070
1071 void unregister_savevm(const char *idstr, void *opaque)
1072 {
1073     SaveStateEntry *se, *new_se;
1074
1075     QTAILQ_FOREACH_SAFE(se, &savevm_handlers, entry, new_se) {
1076         if (strcmp(se->idstr, idstr) == 0 && se->opaque == opaque) {
1077             QTAILQ_REMOVE(&savevm_handlers, se, entry);
1078             qemu_free(se);
1079         }
1080     }
1081 }
1082
1083 int vmstate_register(int instance_id, const VMStateDescription *vmsd,
1084                      void *opaque)
1085 {
1086     SaveStateEntry *se;
1087
1088     se = qemu_mallocz(sizeof(SaveStateEntry));
1089     pstrcpy(se->idstr, sizeof(se->idstr), vmsd->name);
1090     se->version_id = vmsd->version_id;
1091     se->section_id = global_section_id++;
1092     se->save_live_state = NULL;
1093     se->save_state = NULL;
1094     se->load_state = NULL;
1095     se->opaque = opaque;
1096     se->vmsd = vmsd;
1097
1098     if (instance_id == -1) {
1099         se->instance_id = calculate_new_instance_id(vmsd->name);
1100     } else {
1101         se->instance_id = instance_id;
1102     }
1103     /* add at the end of list */
1104     QTAILQ_INSERT_TAIL(&savevm_handlers, se, entry);
1105     return 0;
1106 }
1107
1108 void vmstate_unregister(const VMStateDescription *vmsd, void *opaque)
1109 {
1110     SaveStateEntry *se, *new_se;
1111
1112     QTAILQ_FOREACH_SAFE(se, &savevm_handlers, entry, new_se) {
1113         if (se->vmsd == vmsd && se->opaque == opaque) {
1114             QTAILQ_REMOVE(&savevm_handlers, se, entry);
1115             qemu_free(se);
1116         }
1117     }
1118 }
1119
1120 int vmstate_load_state(QEMUFile *f, const VMStateDescription *vmsd,
1121                        void *opaque, int version_id)
1122 {
1123     VMStateField *field = vmsd->fields;
1124
1125     if (version_id > vmsd->version_id) {
1126         return -EINVAL;
1127     }
1128     if (version_id < vmsd->minimum_version_id_old) {
1129         return -EINVAL;
1130     }
1131     if  (version_id < vmsd->minimum_version_id) {
1132         return vmsd->load_state_old(f, opaque, version_id);
1133     }
1134     if (vmsd->pre_load) {
1135         int ret = vmsd->pre_load(opaque);
1136         if (ret)
1137             return ret;
1138     }
1139     while(field->name) {
1140         if ((field->field_exists &&
1141              field->field_exists(opaque, version_id)) ||
1142             (!field->field_exists &&
1143              field->version_id <= version_id)) {
1144             void *base_addr = opaque + field->offset;
1145             int ret, i, n_elems = 1;
1146             int size = field->size;
1147
1148             if (field->flags & VMS_VBUFFER) {
1149                 size = *(int32_t *)(opaque+field->size_offset);
1150                 if (field->flags & VMS_MULTIPLY) {
1151                     size *= field->size;
1152                 }
1153             }
1154             if (field->flags & VMS_ARRAY) {
1155                 n_elems = field->num;
1156             } else if (field->flags & VMS_VARRAY_INT32) {
1157                 n_elems = *(int32_t *)(opaque+field->num_offset);
1158             } else if (field->flags & VMS_VARRAY_UINT16) {
1159                 n_elems = *(uint16_t *)(opaque+field->num_offset);
1160             }
1161             if (field->flags & VMS_POINTER) {
1162                 base_addr = *(void **)base_addr + field->start;
1163             }
1164             for (i = 0; i < n_elems; i++) {
1165                 void *addr = base_addr + size * i;
1166
1167                 if (field->flags & VMS_ARRAY_OF_POINTER) {
1168                     addr = *(void **)addr;
1169                 }
1170                 if (field->flags & VMS_STRUCT) {
1171                     ret = vmstate_load_state(f, field->vmsd, addr, field->vmsd->version_id);
1172                 } else {
1173                     ret = field->info->get(f, addr, size);
1174
1175                 }
1176                 if (ret < 0) {
1177                     return ret;
1178                 }
1179             }
1180         }
1181         field++;
1182     }
1183     if (vmsd->post_load) {
1184         return vmsd->post_load(opaque, version_id);
1185     }
1186     return 0;
1187 }
1188
1189 void vmstate_save_state(QEMUFile *f, const VMStateDescription *vmsd,
1190                         void *opaque)
1191 {
1192     VMStateField *field = vmsd->fields;
1193
1194     if (vmsd->pre_save) {
1195         vmsd->pre_save(opaque);
1196     }
1197     while(field->name) {
1198         if (!field->field_exists ||
1199             field->field_exists(opaque, vmsd->version_id)) {
1200             void *base_addr = opaque + field->offset;
1201             int i, n_elems = 1;
1202             int size = field->size;
1203
1204             if (field->flags & VMS_VBUFFER) {
1205                 size = *(int32_t *)(opaque+field->size_offset);
1206                 if (field->flags & VMS_MULTIPLY) {
1207                     size *= field->size;
1208                 }
1209             }
1210             if (field->flags & VMS_ARRAY) {
1211                 n_elems = field->num;
1212             } else if (field->flags & VMS_VARRAY_INT32) {
1213                 n_elems = *(int32_t *)(opaque+field->num_offset);
1214             } else if (field->flags & VMS_VARRAY_UINT16) {
1215                 n_elems = *(uint16_t *)(opaque+field->num_offset);
1216             }
1217             if (field->flags & VMS_POINTER) {
1218                 base_addr = *(void **)base_addr + field->start;
1219             }
1220             for (i = 0; i < n_elems; i++) {
1221                 void *addr = base_addr + size * i;
1222
1223                 if (field->flags & VMS_ARRAY_OF_POINTER) {
1224                     addr = *(void **)addr;
1225                 }
1226                 if (field->flags & VMS_STRUCT) {
1227                     vmstate_save_state(f, field->vmsd, addr);
1228                 } else {
1229                     field->info->put(f, addr, size);
1230                 }
1231             }
1232         }
1233         field++;
1234     }
1235     if (vmsd->post_save) {
1236         vmsd->post_save(opaque);
1237     }
1238 }
1239
1240 static int vmstate_load(QEMUFile *f, SaveStateEntry *se, int version_id)
1241 {
1242     if (!se->vmsd) {         /* Old style */
1243         return se->load_state(f, se->opaque, version_id);
1244     }
1245     return vmstate_load_state(f, se->vmsd, se->opaque, version_id);
1246 }
1247
1248 static void vmstate_save(QEMUFile *f, SaveStateEntry *se)
1249 {
1250     if (!se->vmsd) {         /* Old style */
1251         se->save_state(f, se->opaque);
1252         return;
1253     }
1254     vmstate_save_state(f,se->vmsd, se->opaque);
1255 }
1256
1257 #define QEMU_VM_FILE_MAGIC           0x5145564d
1258 #define QEMU_VM_FILE_VERSION_COMPAT  0x00000002
1259 #define QEMU_VM_FILE_VERSION         0x00000003
1260
1261 #define QEMU_VM_EOF                  0x00
1262 #define QEMU_VM_SECTION_START        0x01
1263 #define QEMU_VM_SECTION_PART         0x02
1264 #define QEMU_VM_SECTION_END          0x03
1265 #define QEMU_VM_SECTION_FULL         0x04
1266
1267 int qemu_savevm_state_begin(QEMUFile *f, int blk_enable, int shared)
1268 {
1269     SaveStateEntry *se;
1270
1271     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1272         if(se->set_params == NULL) {
1273             continue;
1274         }
1275         se->set_params(blk_enable, shared, se->opaque);
1276     }
1277
1278     qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
1279     qemu_put_be32(f, QEMU_VM_FILE_VERSION);
1280
1281     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1282         int len;
1283
1284         if (se->save_live_state == NULL)
1285             continue;
1286
1287         /* Section type */
1288         qemu_put_byte(f, QEMU_VM_SECTION_START);
1289         qemu_put_be32(f, se->section_id);
1290
1291         /* ID string */
1292         len = strlen(se->idstr);
1293         qemu_put_byte(f, len);
1294         qemu_put_buffer(f, (uint8_t *)se->idstr, len);
1295
1296         qemu_put_be32(f, se->instance_id);
1297         qemu_put_be32(f, se->version_id);
1298
1299         se->save_live_state(f, QEMU_VM_SECTION_START, se->opaque);
1300     }
1301
1302     if (qemu_file_has_error(f)) {
1303         qemu_savevm_state_cancel(f);
1304         return -EIO;
1305     }
1306
1307     return 0;
1308 }
1309
1310 int qemu_savevm_state_iterate(QEMUFile *f)
1311 {
1312     SaveStateEntry *se;
1313     int ret = 1;
1314
1315     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1316         if (se->save_live_state == NULL)
1317             continue;
1318
1319         /* Section type */
1320         qemu_put_byte(f, QEMU_VM_SECTION_PART);
1321         qemu_put_be32(f, se->section_id);
1322
1323         ret &= !!se->save_live_state(f, QEMU_VM_SECTION_PART, se->opaque);
1324     }
1325
1326     if (ret)
1327         return 1;
1328
1329     if (qemu_file_has_error(f)) {
1330         qemu_savevm_state_cancel(f);
1331         return -EIO;
1332     }
1333
1334     return 0;
1335 }
1336
1337 int qemu_savevm_state_complete(QEMUFile *f)
1338 {
1339     SaveStateEntry *se;
1340
1341     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1342         if (se->save_live_state == NULL)
1343             continue;
1344
1345         /* Section type */
1346         qemu_put_byte(f, QEMU_VM_SECTION_END);
1347         qemu_put_be32(f, se->section_id);
1348
1349         se->save_live_state(f, QEMU_VM_SECTION_END, se->opaque);
1350     }
1351
1352     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1353         int len;
1354
1355         if (se->save_state == NULL && se->vmsd == NULL)
1356             continue;
1357
1358         /* Section type */
1359         qemu_put_byte(f, QEMU_VM_SECTION_FULL);
1360         qemu_put_be32(f, se->section_id);
1361
1362         /* ID string */
1363         len = strlen(se->idstr);
1364         qemu_put_byte(f, len);
1365         qemu_put_buffer(f, (uint8_t *)se->idstr, len);
1366
1367         qemu_put_be32(f, se->instance_id);
1368         qemu_put_be32(f, se->version_id);
1369
1370         vmstate_save(f, se);
1371     }
1372
1373     qemu_put_byte(f, QEMU_VM_EOF);
1374
1375     if (qemu_file_has_error(f))
1376         return -EIO;
1377
1378     return 0;
1379 }
1380
1381 void qemu_savevm_state_cancel(QEMUFile *f)
1382 {
1383     SaveStateEntry *se;
1384
1385     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1386         if (se->save_live_state) {
1387             se->save_live_state(f, -1, se->opaque);
1388         }
1389     }
1390 }
1391
1392 int qemu_savevm_state(QEMUFile *f)
1393 {
1394     int saved_vm_running;
1395     int ret;
1396
1397     saved_vm_running = vm_running;
1398     vm_stop(0);
1399
1400     bdrv_flush_all();
1401
1402     ret = qemu_savevm_state_begin(f, 0, 0);
1403     if (ret < 0)
1404         goto out;
1405
1406     do {
1407         ret = qemu_savevm_state_iterate(f);
1408         if (ret < 0)
1409             goto out;
1410     } while (ret == 0);
1411
1412     ret = qemu_savevm_state_complete(f);
1413
1414 out:
1415     if (qemu_file_has_error(f))
1416         ret = -EIO;
1417
1418     if (!ret && saved_vm_running)
1419         vm_start();
1420
1421     return ret;
1422 }
1423
1424 static SaveStateEntry *find_se(const char *idstr, int instance_id)
1425 {
1426     SaveStateEntry *se;
1427
1428     QTAILQ_FOREACH(se, &savevm_handlers, entry) {
1429         if (!strcmp(se->idstr, idstr) &&
1430             instance_id == se->instance_id)
1431             return se;
1432     }
1433     return NULL;
1434 }
1435
1436 typedef struct LoadStateEntry {
1437     QLIST_ENTRY(LoadStateEntry) entry;
1438     SaveStateEntry *se;
1439     int section_id;
1440     int version_id;
1441 } LoadStateEntry;
1442
1443 int qemu_loadvm_state(QEMUFile *f)
1444 {
1445     QLIST_HEAD(, LoadStateEntry) loadvm_handlers =
1446         QLIST_HEAD_INITIALIZER(loadvm_handlers);
1447     LoadStateEntry *le, *new_le;
1448     uint8_t section_type;
1449     unsigned int v;
1450     int ret;
1451
1452     v = qemu_get_be32(f);
1453     if (v != QEMU_VM_FILE_MAGIC)
1454         return -EINVAL;
1455
1456     v = qemu_get_be32(f);
1457     if (v == QEMU_VM_FILE_VERSION_COMPAT) {
1458         fprintf(stderr, "SaveVM v2 format is obsolete and don't work anymore\n");
1459         return -ENOTSUP;
1460     }
1461     if (v != QEMU_VM_FILE_VERSION)
1462         return -ENOTSUP;
1463
1464     while ((section_type = qemu_get_byte(f)) != QEMU_VM_EOF) {
1465         uint32_t instance_id, version_id, section_id;
1466         SaveStateEntry *se;
1467         char idstr[257];
1468         int len;
1469
1470         switch (section_type) {
1471         case QEMU_VM_SECTION_START:
1472         case QEMU_VM_SECTION_FULL:
1473             /* Read section start */
1474             section_id = qemu_get_be32(f);
1475             len = qemu_get_byte(f);
1476             qemu_get_buffer(f, (uint8_t *)idstr, len);
1477             idstr[len] = 0;
1478             instance_id = qemu_get_be32(f);
1479             version_id = qemu_get_be32(f);
1480
1481             /* Find savevm section */
1482             se = find_se(idstr, instance_id);
1483             if (se == NULL) {
1484                 fprintf(stderr, "Unknown savevm section or instance '%s' %d\n", idstr, instance_id);
1485                 ret = -EINVAL;
1486                 goto out;
1487             }
1488
1489             /* Validate version */
1490             if (version_id > se->version_id) {
1491                 fprintf(stderr, "savevm: unsupported version %d for '%s' v%d\n",
1492                         version_id, idstr, se->version_id);
1493                 ret = -EINVAL;
1494                 goto out;
1495             }
1496
1497             /* Add entry */
1498             le = qemu_mallocz(sizeof(*le));
1499
1500             le->se = se;
1501             le->section_id = section_id;
1502             le->version_id = version_id;
1503             QLIST_INSERT_HEAD(&loadvm_handlers, le, entry);
1504
1505             ret = vmstate_load(f, le->se, le->version_id);
1506             if (ret < 0) {
1507                 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1508                         instance_id, idstr);
1509                 goto out;
1510             }
1511             break;
1512         case QEMU_VM_SECTION_PART:
1513         case QEMU_VM_SECTION_END:
1514             section_id = qemu_get_be32(f);
1515
1516             QLIST_FOREACH(le, &loadvm_handlers, entry) {
1517                 if (le->section_id == section_id) {
1518                     break;
1519                 }
1520             }
1521             if (le == NULL) {
1522                 fprintf(stderr, "Unknown savevm section %d\n", section_id);
1523                 ret = -EINVAL;
1524                 goto out;
1525             }
1526
1527             ret = vmstate_load(f, le->se, le->version_id);
1528             if (ret < 0) {
1529                 fprintf(stderr, "qemu: warning: error while loading state section id %d\n",
1530                         section_id);
1531                 goto out;
1532             }
1533             break;
1534         default:
1535             fprintf(stderr, "Unknown savevm section type %d\n", section_type);
1536             ret = -EINVAL;
1537             goto out;
1538         }
1539     }
1540
1541     ret = 0;
1542
1543 out:
1544     QLIST_FOREACH_SAFE(le, &loadvm_handlers, entry, new_le) {
1545         QLIST_REMOVE(le, entry);
1546         qemu_free(le);
1547     }
1548
1549     if (qemu_file_has_error(f))
1550         ret = -EIO;
1551
1552     return ret;
1553 }
1554
1555 /* device can contain snapshots */
1556 static int bdrv_can_snapshot(BlockDriverState *bs)
1557 {
1558     return (bs &&
1559             !bdrv_is_removable(bs) &&
1560             !bdrv_is_read_only(bs));
1561 }
1562
1563 /* device must be snapshots in order to have a reliable snapshot */
1564 static int bdrv_has_snapshot(BlockDriverState *bs)
1565 {
1566     return (bs &&
1567             !bdrv_is_removable(bs) &&
1568             !bdrv_is_read_only(bs));
1569 }
1570
1571 static BlockDriverState *get_bs_snapshots(void)
1572 {
1573     BlockDriverState *bs;
1574     DriveInfo *dinfo;
1575
1576     if (bs_snapshots)
1577         return bs_snapshots;
1578     QTAILQ_FOREACH(dinfo, &drives, next) {
1579         bs = dinfo->bdrv;
1580         if (bdrv_can_snapshot(bs))
1581             goto ok;
1582     }
1583     return NULL;
1584  ok:
1585     bs_snapshots = bs;
1586     return bs;
1587 }
1588
1589 static int bdrv_snapshot_find(BlockDriverState *bs, QEMUSnapshotInfo *sn_info,
1590                               const char *name)
1591 {
1592     QEMUSnapshotInfo *sn_tab, *sn;
1593     int nb_sns, i, ret;
1594
1595     ret = -ENOENT;
1596     nb_sns = bdrv_snapshot_list(bs, &sn_tab);
1597     if (nb_sns < 0)
1598         return ret;
1599     for(i = 0; i < nb_sns; i++) {
1600         sn = &sn_tab[i];
1601         if (!strcmp(sn->id_str, name) || !strcmp(sn->name, name)) {
1602             *sn_info = *sn;
1603             ret = 0;
1604             break;
1605         }
1606     }
1607     qemu_free(sn_tab);
1608     return ret;
1609 }
1610
1611 /*
1612  * Deletes snapshots of a given name in all opened images.
1613  */
1614 static int del_existing_snapshots(Monitor *mon, const char *name)
1615 {
1616     BlockDriverState *bs;
1617     DriveInfo *dinfo;
1618     QEMUSnapshotInfo sn1, *snapshot = &sn1;
1619     int ret;
1620
1621     QTAILQ_FOREACH(dinfo, &drives, next) {
1622         bs = dinfo->bdrv;
1623         if (bdrv_can_snapshot(bs) &&
1624             bdrv_snapshot_find(bs, snapshot, name) >= 0)
1625         {
1626             ret = bdrv_snapshot_delete(bs, name);
1627             if (ret < 0) {
1628                 monitor_printf(mon,
1629                                "Error while deleting snapshot on '%s'\n",
1630                                bdrv_get_device_name(bs));
1631                 return -1;
1632             }
1633         }
1634     }
1635
1636     return 0;
1637 }
1638
1639 void do_savevm(Monitor *mon, const QDict *qdict)
1640 {
1641     DriveInfo *dinfo;
1642     BlockDriverState *bs, *bs1;
1643     QEMUSnapshotInfo sn1, *sn = &sn1, old_sn1, *old_sn = &old_sn1;
1644     int ret;
1645     QEMUFile *f;
1646     int saved_vm_running;
1647     uint32_t vm_state_size;
1648 #ifdef _WIN32
1649     struct _timeb tb;
1650 #else
1651     struct timeval tv;
1652 #endif
1653     const char *name = qdict_get_try_str(qdict, "name");
1654
1655     bs = get_bs_snapshots();
1656     if (!bs) {
1657         monitor_printf(mon, "No block device can accept snapshots\n");
1658         return;
1659     }
1660
1661     /* ??? Should this occur after vm_stop?  */
1662     qemu_aio_flush();
1663
1664     saved_vm_running = vm_running;
1665     vm_stop(0);
1666
1667     memset(sn, 0, sizeof(*sn));
1668     if (name) {
1669         ret = bdrv_snapshot_find(bs, old_sn, name);
1670         if (ret >= 0) {
1671             pstrcpy(sn->name, sizeof(sn->name), old_sn->name);
1672             pstrcpy(sn->id_str, sizeof(sn->id_str), old_sn->id_str);
1673         } else {
1674             pstrcpy(sn->name, sizeof(sn->name), name);
1675         }
1676     }
1677
1678     /* fill auxiliary fields */
1679 #ifdef _WIN32
1680     _ftime(&tb);
1681     sn->date_sec = tb.time;
1682     sn->date_nsec = tb.millitm * 1000000;
1683 #else
1684     gettimeofday(&tv, NULL);
1685     sn->date_sec = tv.tv_sec;
1686     sn->date_nsec = tv.tv_usec * 1000;
1687 #endif
1688     sn->vm_clock_nsec = qemu_get_clock(vm_clock);
1689
1690     /* Delete old snapshots of the same name */
1691     if (del_existing_snapshots(mon, name) < 0) {
1692         goto the_end;
1693     }
1694
1695     /* save the VM state */
1696     f = qemu_fopen_bdrv(bs, 1);
1697     if (!f) {
1698         monitor_printf(mon, "Could not open VM state file\n");
1699         goto the_end;
1700     }
1701     ret = qemu_savevm_state(f);
1702     vm_state_size = qemu_ftell(f);
1703     qemu_fclose(f);
1704     if (ret < 0) {
1705         monitor_printf(mon, "Error %d while writing VM\n", ret);
1706         goto the_end;
1707     }
1708
1709     /* create the snapshots */
1710
1711     QTAILQ_FOREACH(dinfo, &drives, next) {
1712         bs1 = dinfo->bdrv;
1713         if (bdrv_has_snapshot(bs1)) {
1714             /* Write VM state size only to the image that contains the state */
1715             sn->vm_state_size = (bs == bs1 ? vm_state_size : 0);
1716             ret = bdrv_snapshot_create(bs1, sn);
1717             if (ret < 0) {
1718                 monitor_printf(mon, "Error while creating snapshot on '%s'\n",
1719                                bdrv_get_device_name(bs1));
1720             }
1721         }
1722     }
1723
1724  the_end:
1725     if (saved_vm_running)
1726         vm_start();
1727 }
1728
1729 int load_vmstate(Monitor *mon, const char *name)
1730 {
1731     DriveInfo *dinfo;
1732     BlockDriverState *bs, *bs1;
1733     QEMUSnapshotInfo sn;
1734     QEMUFile *f;
1735     int ret;
1736
1737     bs = get_bs_snapshots();
1738     if (!bs) {
1739         monitor_printf(mon, "No block device supports snapshots\n");
1740         return -EINVAL;
1741     }
1742
1743     /* Flush all IO requests so they don't interfere with the new state.  */
1744     qemu_aio_flush();
1745
1746     QTAILQ_FOREACH(dinfo, &drives, next) {
1747         bs1 = dinfo->bdrv;
1748         if (bdrv_has_snapshot(bs1)) {
1749             ret = bdrv_snapshot_goto(bs1, name);
1750             if (ret < 0) {
1751                 if (bs != bs1)
1752                     monitor_printf(mon, "Warning: ");
1753                 switch(ret) {
1754                 case -ENOTSUP:
1755                     monitor_printf(mon,
1756                                    "Snapshots not supported on device '%s'\n",
1757                                    bdrv_get_device_name(bs1));
1758                     break;
1759                 case -ENOENT:
1760                     monitor_printf(mon, "Could not find snapshot '%s' on "
1761                                    "device '%s'\n",
1762                                    name, bdrv_get_device_name(bs1));
1763                     break;
1764                 default:
1765                     monitor_printf(mon, "Error %d while activating snapshot on"
1766                                    " '%s'\n", ret, bdrv_get_device_name(bs1));
1767                     break;
1768                 }
1769                 /* fatal on snapshot block device */
1770                 if (bs == bs1)
1771                     return 0;
1772             }
1773         }
1774     }
1775
1776     /* Don't even try to load empty VM states */
1777     ret = bdrv_snapshot_find(bs, &sn, name);
1778     if ((ret >= 0) && (sn.vm_state_size == 0))
1779         return -EINVAL;
1780
1781     /* restore the VM state */
1782     f = qemu_fopen_bdrv(bs, 0);
1783     if (!f) {
1784         monitor_printf(mon, "Could not open VM state file\n");
1785         return -EINVAL;
1786     }
1787     ret = qemu_loadvm_state(f);
1788     qemu_fclose(f);
1789     if (ret < 0) {
1790         monitor_printf(mon, "Error %d while loading VM state\n", ret);
1791         return ret;
1792     }
1793     return 0;
1794 }
1795
1796 void do_delvm(Monitor *mon, const QDict *qdict)
1797 {
1798     DriveInfo *dinfo;
1799     BlockDriverState *bs, *bs1;
1800     int ret;
1801     const char *name = qdict_get_str(qdict, "name");
1802
1803     bs = get_bs_snapshots();
1804     if (!bs) {
1805         monitor_printf(mon, "No block device supports snapshots\n");
1806         return;
1807     }
1808
1809     QTAILQ_FOREACH(dinfo, &drives, next) {
1810         bs1 = dinfo->bdrv;
1811         if (bdrv_has_snapshot(bs1)) {
1812             ret = bdrv_snapshot_delete(bs1, name);
1813             if (ret < 0) {
1814                 if (ret == -ENOTSUP)
1815                     monitor_printf(mon,
1816                                    "Snapshots not supported on device '%s'\n",
1817                                    bdrv_get_device_name(bs1));
1818                 else
1819                     monitor_printf(mon, "Error %d while deleting snapshot on "
1820                                    "'%s'\n", ret, bdrv_get_device_name(bs1));
1821             }
1822         }
1823     }
1824 }
1825
1826 void do_info_snapshots(Monitor *mon)
1827 {
1828     DriveInfo *dinfo;
1829     BlockDriverState *bs, *bs1;
1830     QEMUSnapshotInfo *sn_tab, *sn;
1831     int nb_sns, i;
1832     char buf[256];
1833
1834     bs = get_bs_snapshots();
1835     if (!bs) {
1836         monitor_printf(mon, "No available block device supports snapshots\n");
1837         return;
1838     }
1839     monitor_printf(mon, "Snapshot devices:");
1840     QTAILQ_FOREACH(dinfo, &drives, next) {
1841         bs1 = dinfo->bdrv;
1842         if (bdrv_has_snapshot(bs1)) {
1843             if (bs == bs1)
1844                 monitor_printf(mon, " %s", bdrv_get_device_name(bs1));
1845         }
1846     }
1847     monitor_printf(mon, "\n");
1848
1849     nb_sns = bdrv_snapshot_list(bs, &sn_tab);
1850     if (nb_sns < 0) {
1851         monitor_printf(mon, "bdrv_snapshot_list: error %d\n", nb_sns);
1852         return;
1853     }
1854     monitor_printf(mon, "Snapshot list (from %s):\n",
1855                    bdrv_get_device_name(bs));
1856     monitor_printf(mon, "%s\n", bdrv_snapshot_dump(buf, sizeof(buf), NULL));
1857     for(i = 0; i < nb_sns; i++) {
1858         sn = &sn_tab[i];
1859         monitor_printf(mon, "%s\n", bdrv_snapshot_dump(buf, sizeof(buf), sn));
1860     }
1861     qemu_free(sn_tab);
1862 }