savevm.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24 #include <unistd.h>
  25 #include <fcntl.h>
  26 #include <signal.h>
  27 #include <time.h>
  28 #include <errno.h>
  29 #include <sys/time.h>
  30 #include <zlib.h>
  31
  32 /* Needed early for CONFIG_BSD etc. */
  33 #include "config-host.h"
  34
  35 #ifndef _WIN32
  36 #include <sys/times.h>
  37 #include <sys/wait.h>
  38 #include <termios.h>
  39 #include <sys/mman.h>
  40 #include <sys/ioctl.h>
  41 #include <sys/resource.h>
  42 #include <sys/socket.h>
  43 #include <netinet/in.h>
  44 #include <net/if.h>
  45 #if defined(__NetBSD__)
  46 #include <net/if_tap.h>
  47 #endif
  48 #ifdef __linux__
  49 #include <linux/if_tun.h>
  50 #endif
  51 #include <arpa/inet.h>
  52 #include <dirent.h>
  53 #include <netdb.h>
  54 #include <sys/select.h>
  55 #ifdef CONFIG_BSD
  56 #include <sys/stat.h>
  57 #if defined(__FreeBSD__) || defined(__DragonFly__)
  58 #include <libutil.h>
  59 #else
  60 #include <util.h>
  61 #endif
  62 #elif defined (__GLIBC__) && defined (__FreeBSD_kernel__)
  63 #include <freebsd/stdlib.h>
  64 #else
  65 #ifdef __linux__
  66 #include <pty.h>
  67 #include <malloc.h>
  68 #include <linux/rtc.h>
  69 #endif
  70 #endif
  71 #endif
  72
  73 #ifdef _WIN32
  74 #include <windows.h>
  75 #include <malloc.h>
  76 #include <sys/timeb.h>
  77 #include <mmsystem.h>
  78 #define getopt_long_only getopt_long
  79 #define memalign(align, size) malloc(size)
  80 #endif
  81
  82 #include "qemu-common.h"
  83 #include "hw/hw.h"
  84 #include "net.h"
  85 #include "monitor.h"
  86 #include "sysemu.h"
  87 #include "qemu-timer.h"
  88 #include "qemu-char.h"
  89 #include "block.h"
  90 #include "audio/audio.h"
  91 #include "migration.h"
  92 #include "qemu_socket.h"
  93
  94 /* point to the block driver where the snapshots are managed */
  95 static BlockDriverState *bs_snapshots;
  96
  97 #define SELF_ANNOUNCE_ROUNDS 5
  98 #define ETH_P_EXPERIMENTAL 0x01F1 /* just a number */
  99 //#define ETH_P_EXPERIMENTAL 0x0012 /* make it the size of the packet */
 100 #define EXPERIMENTAL_MAGIC 0xf1f23f4f
 101
 102 static int announce_self_create(uint8_t *buf,
 103                                 uint8_t *mac_addr)
 104 {
 105     uint32_t magic = EXPERIMENTAL_MAGIC;
 106     uint16_t proto = htons(ETH_P_EXPERIMENTAL);
 107
 108     /* FIXME: should we send a different packet (arp/rarp/ping)? */
 109
 110     memset(buf, 0, 64);
 111     memset(buf, 0xff, 6);         /* h_dst */
 112     memcpy(buf + 6, mac_addr, 6); /* h_src */
 113     memcpy(buf + 12, &proto, 2);  /* h_proto */
 114     memcpy(buf + 14, &magic, 4);  /* magic */
 115
 116     return 64; /* len */
 117 }
 118
 119 static void qemu_announce_self_once(void *opaque)
 120 {
 121     int i, len;
 122     VLANState *vlan;
 123     VLANClientState *vc;
 124     uint8_t buf[256];
 125     static int count = SELF_ANNOUNCE_ROUNDS;
 126     QEMUTimer *timer = *(QEMUTimer **)opaque;
 127
 128     for (i = 0; i < MAX_NICS; i++) {
 129         if (!nd_table[i].used)
 130             continue;
 131         len = announce_self_create(buf, nd_table[i].macaddr);
 132         vlan = nd_table[i].vlan;
 133         for(vc = vlan->first_client; vc != NULL; vc = vc->next) {
 134             vc->receive(vc, buf, len);
 135         }
 136     }
 137     if (count--) {
 138             qemu_mod_timer(timer, qemu_get_clock(rt_clock) + 100);
 139     } else {
 140             qemu_del_timer(timer);
 141             qemu_free_timer(timer);
 142     }
 143 }
 144
 145 void qemu_announce_self(void)
 146 {
 147         static QEMUTimer *timer;
 148         timer = qemu_new_timer(rt_clock, qemu_announce_self_once, &timer);
 149         qemu_announce_self_once(&timer);
 150 }
 151
 152 /***********************************************************/
 153 /* savevm/loadvm support */
 154
 155 #define IO_BUF_SIZE 32768
 156
 157 struct QEMUFile {
 158     QEMUFilePutBufferFunc *put_buffer;
 159     QEMUFileGetBufferFunc *get_buffer;
 160     QEMUFileCloseFunc *close;
 161     QEMUFileRateLimit *rate_limit;
 162     QEMUFileSetRateLimit *set_rate_limit;
 163     void *opaque;
 164     int is_write;
 165
 166     int64_t buf_offset; /* start of buffer when writing, end of buffer
 167                            when reading */
 168     int buf_index;
 169     int buf_size; /* 0 when writing */
 170     uint8_t buf[IO_BUF_SIZE];
 171
 172     int has_error;
 173 };
 174
 175 typedef struct QEMUFileStdio
 176 {
 177     FILE *stdio_file;
 178     QEMUFile *file;
 179 } QEMUFileStdio;
 180
 181 typedef struct QEMUFileSocket
 182 {
 183     int fd;
 184     QEMUFile *file;
 185 } QEMUFileSocket;
 186
 187 static int socket_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 188 {
 189     QEMUFileSocket *s = opaque;
 190     ssize_t len;
 191
 192     do {
 193         len = recv(s->fd, (void *)buf, size, 0);
 194     } while (len == -1 && socket_error() == EINTR);
 195
 196     if (len == -1)
 197         len = -socket_error();
 198
 199     return len;
 200 }
 201
 202 static int socket_close(void *opaque)
 203 {
 204     QEMUFileSocket *s = opaque;
 205     qemu_free(s);
 206     return 0;
 207 }
 208
 209 static int stdio_put_buffer(void *opaque, const uint8_t *buf, int64_t pos, int size)
 210 {
 211     QEMUFileStdio *s = opaque;
 212     return fwrite(buf, 1, size, s->stdio_file);
 213 }
 214
 215 static int stdio_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 216 {
 217     QEMUFileStdio *s = opaque;
 218     FILE *fp = s->stdio_file;
 219     int bytes;
 220
 221     do {
 222         clearerr(fp);
 223         bytes = fread(buf, 1, size, fp);
 224     } while ((bytes == 0) && ferror(fp) && (errno == EINTR));
 225     return bytes;
 226 }
 227
 228 static int stdio_pclose(void *opaque)
 229 {
 230     QEMUFileStdio *s = opaque;
 231     pclose(s->stdio_file);
 232     qemu_free(s);
 233     return 0;
 234 }
 235
 236 static int stdio_fclose(void *opaque)
 237 {
 238     QEMUFileStdio *s = opaque;
 239     fclose(s->stdio_file);
 240     qemu_free(s);
 241     return 0;
 242 }
 243
 244 QEMUFile *qemu_popen(FILE *stdio_file, const char *mode)
 245 {
 246     QEMUFileStdio *s;
 247
 248     if (stdio_file == NULL || mode == NULL || (mode[0] != 'r' && mode[0] != 'w') || mode[1] != 0) {
 249         fprintf(stderr, "qemu_popen: Argument validity check failed\n");
 250         return NULL;
 251     }
 252
 253     s = qemu_mallocz(sizeof(QEMUFileStdio));
 254
 255     s->stdio_file = stdio_file;
 256
 257     if(mode[0] == 'r') {
 258         s->file = qemu_fopen_ops(s, NULL, stdio_get_buffer, stdio_pclose, NULL, NULL);
 259     } else {
 260         s->file = qemu_fopen_ops(s, stdio_put_buffer, NULL, stdio_pclose, NULL, NULL);
 261     }
 262     return s->file;
 263 }
 264
 265 QEMUFile *qemu_popen_cmd(const char *command, const char *mode)
 266 {
 267     FILE *popen_file;
 268
 269     popen_file = popen(command, mode);
 270     if(popen_file == NULL) {
 271         return NULL;
 272     }
 273
 274     return qemu_popen(popen_file, mode);
 275 }
 276
 277 int qemu_stdio_fd(QEMUFile *f)
 278 {
 279     QEMUFileStdio *p;
 280     int fd;
 281
 282     p = (QEMUFileStdio *)f->opaque;
 283     fd = fileno(p->stdio_file);
 284
 285     return fd;
 286 }
 287
 288 QEMUFile *qemu_fdopen(int fd, const char *mode)
 289 {
 290     QEMUFileStdio *s;
 291
 292     if (mode == NULL ||
 293         (mode[0] != 'r' && mode[0] != 'w') ||
 294         mode[1] != 'b' || mode[2] != 0) {
 295         fprintf(stderr, "qemu_fdopen: Argument validity check failed\n");
 296         return NULL;
 297     }
 298
 299     s = qemu_mallocz(sizeof(QEMUFileStdio));
 300     s->stdio_file = fdopen(fd, mode);
 301     if (!s->stdio_file)
 302         goto fail;
 303
 304     if(mode[0] == 'r') {
 305         s->file = qemu_fopen_ops(s, NULL, stdio_get_buffer, stdio_fclose, NULL, NULL);
 306     } else {
 307         s->file = qemu_fopen_ops(s, stdio_put_buffer, NULL, stdio_fclose, NULL, NULL);
 308     }
 309     return s->file;
 310
 311 fail:
 312     qemu_free(s);
 313     return NULL;
 314 }
 315
 316 QEMUFile *qemu_fopen_socket(int fd)
 317 {
 318     QEMUFileSocket *s = qemu_mallocz(sizeof(QEMUFileSocket));
 319
 320     s->fd = fd;
 321     s->file = qemu_fopen_ops(s, NULL, socket_get_buffer, socket_close, NULL, NULL);
 322     return s->file;
 323 }
 324
 325 static int file_put_buffer(void *opaque, const uint8_t *buf,
 326                             int64_t pos, int size)
 327 {
 328     QEMUFileStdio *s = opaque;
 329     fseek(s->stdio_file, pos, SEEK_SET);
 330     fwrite(buf, 1, size, s->stdio_file);
 331     return size;
 332 }
 333
 334 static int file_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 335 {
 336     QEMUFileStdio *s = opaque;
 337     fseek(s->stdio_file, pos, SEEK_SET);
 338     return fread(buf, 1, size, s->stdio_file);
 339 }
 340
 341 QEMUFile *qemu_fopen(const char *filename, const char *mode)
 342 {
 343     QEMUFileStdio *s;
 344
 345     if (mode == NULL ||
 346         (mode[0] != 'r' && mode[0] != 'w') ||
 347         mode[1] != 'b' || mode[2] != 0) {
 348         fprintf(stderr, "qemu_fdopen: Argument validity check failed\n");
 349         return NULL;
 350     }
 351
 352     s = qemu_mallocz(sizeof(QEMUFileStdio));
 353
 354     s->stdio_file = fopen(filename, mode);
 355     if (!s->stdio_file)
 356         goto fail;
 357
 358     if(mode[0] == 'w') {
 359         s->file = qemu_fopen_ops(s, file_put_buffer, NULL, stdio_fclose, NULL, NULL);
 360     } else {
 361         s->file = qemu_fopen_ops(s, NULL, file_get_buffer, stdio_fclose, NULL, NULL);
 362     }
 363     return s->file;
 364 fail:
 365     qemu_free(s);
 366     return NULL;
 367 }
 368
 369 static int block_put_buffer(void *opaque, const uint8_t *buf,
 370                            int64_t pos, int size)
 371 {
 372     bdrv_save_vmstate(opaque, buf, pos, size);
 373     return size;
 374 }
 375
 376 static int block_get_buffer(void *opaque, uint8_t *buf, int64_t pos, int size)
 377 {
 378     return bdrv_load_vmstate(opaque, buf, pos, size);
 379 }
 380
 381 static int bdrv_fclose(void *opaque)
 382 {
 383     return 0;
 384 }
 385
 386 static QEMUFile *qemu_fopen_bdrv(BlockDriverState *bs, int is_writable)
 387 {
 388     if (is_writable)
 389         return qemu_fopen_ops(bs, block_put_buffer, NULL, bdrv_fclose, NULL, NULL);
 390     return qemu_fopen_ops(bs, NULL, block_get_buffer, bdrv_fclose, NULL, NULL);
 391 }
 392
 393 QEMUFile *qemu_fopen_ops(void *opaque, QEMUFilePutBufferFunc *put_buffer,
 394                          QEMUFileGetBufferFunc *get_buffer,
 395                          QEMUFileCloseFunc *close,
 396                          QEMUFileRateLimit *rate_limit,
 397                          QEMUFileSetRateLimit *set_rate_limit)
 398 {
 399     QEMUFile *f;
 400
 401     f = qemu_mallocz(sizeof(QEMUFile));
 402
 403     f->opaque = opaque;
 404     f->put_buffer = put_buffer;
 405     f->get_buffer = get_buffer;
 406     f->close = close;
 407     f->rate_limit = rate_limit;
 408     f->set_rate_limit = set_rate_limit;
 409     f->is_write = 0;
 410
 411     return f;
 412 }
 413
 414 int qemu_file_has_error(QEMUFile *f)
 415 {
 416     return f->has_error;
 417 }
 418
 419 void qemu_file_set_error(QEMUFile *f)
 420 {
 421     f->has_error = 1;
 422 }
 423
 424 void qemu_fflush(QEMUFile *f)
 425 {
 426     if (!f->put_buffer)
 427         return;
 428
 429     if (f->is_write && f->buf_index > 0) {
 430         int len;
 431
 432         len = f->put_buffer(f->opaque, f->buf, f->buf_offset, f->buf_index);
 433         if (len > 0)
 434             f->buf_offset += f->buf_index;
 435         else
 436             f->has_error = 1;
 437         f->buf_index = 0;
 438     }
 439 }
 440
 441 static void qemu_fill_buffer(QEMUFile *f)
 442 {
 443     int len;
 444
 445     if (!f->get_buffer)
 446         return;
 447
 448     if (f->is_write)
 449         abort();
 450
 451     len = f->get_buffer(f->opaque, f->buf, f->buf_offset, IO_BUF_SIZE);
 452     if (len > 0) {
 453         f->buf_index = 0;
 454         f->buf_size = len;
 455         f->buf_offset += len;
 456     } else if (len != -EAGAIN)
 457         f->has_error = 1;
 458 }
 459
 460 int qemu_fclose(QEMUFile *f)
 461 {
 462     int ret = 0;
 463     qemu_fflush(f);
 464     if (f->close)
 465         ret = f->close(f->opaque);
 466     qemu_free(f);
 467     return ret;
 468 }
 469
 470 void qemu_file_put_notify(QEMUFile *f)
 471 {
 472     f->put_buffer(f->opaque, NULL, 0, 0);
 473 }
 474
 475 void qemu_put_buffer(QEMUFile *f, const uint8_t *buf, int size)
 476 {
 477     int l;
 478
 479     if (!f->has_error && f->is_write == 0 && f->buf_index > 0) {
 480         fprintf(stderr,
 481                 "Attempted to write to buffer while read buffer is not empty\n");
 482         abort();
 483     }
 484
 485     while (!f->has_error && size > 0) {
 486         l = IO_BUF_SIZE - f->buf_index;
 487         if (l > size)
 488             l = size;
 489         memcpy(f->buf + f->buf_index, buf, l);
 490         f->is_write = 1;
 491         f->buf_index += l;
 492         buf += l;
 493         size -= l;
 494         if (f->buf_index >= IO_BUF_SIZE)
 495             qemu_fflush(f);
 496     }
 497 }
 498
 499 void qemu_put_byte(QEMUFile *f, int v)
 500 {
 501     if (!f->has_error && f->is_write == 0 && f->buf_index > 0) {
 502         fprintf(stderr,
 503                 "Attempted to write to buffer while read buffer is not empty\n");
 504         abort();
 505     }
 506
 507     f->buf[f->buf_index++] = v;
 508     f->is_write = 1;
 509     if (f->buf_index >= IO_BUF_SIZE)
 510         qemu_fflush(f);
 511 }
 512
 513 int qemu_get_buffer(QEMUFile *f, uint8_t *buf, int size1)
 514 {
 515     int size, l;
 516
 517     if (f->is_write)
 518         abort();
 519
 520     size = size1;
 521     while (size > 0) {
 522         l = f->buf_size - f->buf_index;
 523         if (l == 0) {
 524             qemu_fill_buffer(f);
 525             l = f->buf_size - f->buf_index;
 526             if (l == 0)
 527                 break;
 528         }
 529         if (l > size)
 530             l = size;
 531         memcpy(buf, f->buf + f->buf_index, l);
 532         f->buf_index += l;
 533         buf += l;
 534         size -= l;
 535     }
 536     return size1 - size;
 537 }
 538
 539 int qemu_get_byte(QEMUFile *f)
 540 {
 541     if (f->is_write)
 542         abort();
 543
 544     if (f->buf_index >= f->buf_size) {
 545         qemu_fill_buffer(f);
 546         if (f->buf_index >= f->buf_size)
 547             return 0;
 548     }
 549     return f->buf[f->buf_index++];
 550 }
 551
 552 int64_t qemu_ftell(QEMUFile *f)
 553 {
 554     return f->buf_offset - f->buf_size + f->buf_index;
 555 }
 556
 557 int64_t qemu_fseek(QEMUFile *f, int64_t pos, int whence)
 558 {
 559     if (whence == SEEK_SET) {
 560         /* nothing to do */
 561     } else if (whence == SEEK_CUR) {
 562         pos += qemu_ftell(f);
 563     } else {
 564         /* SEEK_END not supported */
 565         return -1;
 566     }
 567     if (f->put_buffer) {
 568         qemu_fflush(f);
 569         f->buf_offset = pos;
 570     } else {
 571         f->buf_offset = pos;
 572         f->buf_index = 0;
 573         f->buf_size = 0;
 574     }
 575     return pos;
 576 }
 577
 578 int qemu_file_rate_limit(QEMUFile *f)
 579 {
 580     if (f->rate_limit)
 581         return f->rate_limit(f->opaque);
 582
 583     return 0;
 584 }
 585
 586 size_t qemu_file_set_rate_limit(QEMUFile *f, size_t new_rate)
 587 {
 588     /* any failed or completed migration keeps its state to allow probing of
 589      * migration data, but has no associated file anymore */
 590     if (f && f->set_rate_limit)
 591         return f->set_rate_limit(f->opaque, new_rate);
 592
 593     return 0;
 594 }
 595
 596 void qemu_put_be16(QEMUFile *f, unsigned int v)
 597 {
 598     qemu_put_byte(f, v >> 8);
 599     qemu_put_byte(f, v);
 600 }
 601
 602 void qemu_put_be32(QEMUFile *f, unsigned int v)
 603 {
 604     qemu_put_byte(f, v >> 24);
 605     qemu_put_byte(f, v >> 16);
 606     qemu_put_byte(f, v >> 8);
 607     qemu_put_byte(f, v);
 608 }
 609
 610 void qemu_put_be64(QEMUFile *f, uint64_t v)
 611 {
 612     qemu_put_be32(f, v >> 32);
 613     qemu_put_be32(f, v);
 614 }
 615
 616 unsigned int qemu_get_be16(QEMUFile *f)
 617 {
 618     unsigned int v;
 619     v = qemu_get_byte(f) << 8;
 620     v |= qemu_get_byte(f);
 621     return v;
 622 }
 623
 624 unsigned int qemu_get_be32(QEMUFile *f)
 625 {
 626     unsigned int v;
 627     v = qemu_get_byte(f) << 24;
 628     v |= qemu_get_byte(f) << 16;
 629     v |= qemu_get_byte(f) << 8;
 630     v |= qemu_get_byte(f);
 631     return v;
 632 }
 633
 634 uint64_t qemu_get_be64(QEMUFile *f)
 635 {
 636     uint64_t v;
 637     v = (uint64_t)qemu_get_be32(f) << 32;
 638     v |= qemu_get_be32(f);
 639     return v;
 640 }
 641
 642 /* 8 bit int */
 643
 644 static int get_int8(QEMUFile *f, void *pv, size_t size)
 645 {
 646     int8_t *v = pv;
 647     qemu_get_s8s(f, v);
 648     return 0;
 649 }
 650
 651 static void put_int8(QEMUFile *f, const void *pv, size_t size)
 652 {
 653     const int8_t *v = pv;
 654     qemu_put_s8s(f, v);
 655 }
 656
 657 const VMStateInfo vmstate_info_int8 = {
 658     .name = "int8",
 659     .get  = get_int8,
 660     .put  = put_int8,
 661 };
 662
 663 /* 16 bit int */
 664
 665 static int get_int16(QEMUFile *f, void *pv, size_t size)
 666 {
 667     int16_t *v = pv;
 668     qemu_get_sbe16s(f, v);
 669     return 0;
 670 }
 671
 672 static void put_int16(QEMUFile *f, const void *pv, size_t size)
 673 {
 674     const int16_t *v = pv;
 675     qemu_put_sbe16s(f, v);
 676 }
 677
 678 const VMStateInfo vmstate_info_int16 = {
 679     .name = "int16",
 680     .get  = get_int16,
 681     .put  = put_int16,
 682 };
 683
 684 /* 32 bit int */
 685
 686 static int get_int32(QEMUFile *f, void *pv, size_t size)
 687 {
 688     int32_t *v = pv;
 689     qemu_get_sbe32s(f, v);
 690     return 0;
 691 }
 692
 693 static void put_int32(QEMUFile *f, const void *pv, size_t size)
 694 {
 695     const int32_t *v = pv;
 696     qemu_put_sbe32s(f, v);
 697 }
 698
 699 const VMStateInfo vmstate_info_int32 = {
 700     .name = "int32",
 701     .get  = get_int32,
 702     .put  = put_int32,
 703 };
 704
 705 /* 64 bit int */
 706
 707 static int get_int64(QEMUFile *f, void *pv, size_t size)
 708 {
 709     int64_t *v = pv;
 710     qemu_get_sbe64s(f, v);
 711     return 0;
 712 }
 713
 714 static void put_int64(QEMUFile *f, const void *pv, size_t size)
 715 {
 716     const int64_t *v = pv;
 717     qemu_put_sbe64s(f, v);
 718 }
 719
 720 const VMStateInfo vmstate_info_int64 = {
 721     .name = "int64",
 722     .get  = get_int64,
 723     .put  = put_int64,
 724 };
 725
 726 /* 8 bit unsigned int */
 727
 728 static int get_uint8(QEMUFile *f, void *pv, size_t size)
 729 {
 730     uint8_t *v = pv;
 731     qemu_get_8s(f, v);
 732     return 0;
 733 }
 734
 735 static void put_uint8(QEMUFile *f, const void *pv, size_t size)
 736 {
 737     const uint8_t *v = pv;
 738     qemu_put_8s(f, v);
 739 }
 740
 741 const VMStateInfo vmstate_info_uint8 = {
 742     .name = "uint8",
 743     .get  = get_uint8,
 744     .put  = put_uint8,
 745 };
 746
 747 /* 16 bit unsigned int */
 748
 749 static int get_uint16(QEMUFile *f, void *pv, size_t size)
 750 {
 751     uint16_t *v = pv;
 752     qemu_get_be16s(f, v);
 753     return 0;
 754 }
 755
 756 static void put_uint16(QEMUFile *f, const void *pv, size_t size)
 757 {
 758     const uint16_t *v = pv;
 759     qemu_put_be16s(f, v);
 760 }
 761
 762 const VMStateInfo vmstate_info_uint16 = {
 763     .name = "uint16",
 764     .get  = get_uint16,
 765     .put  = put_uint16,
 766 };
 767
 768 /* 32 bit unsigned int */
 769
 770 static int get_uint32(QEMUFile *f, void *pv, size_t size)
 771 {
 772     uint32_t *v = pv;
 773     qemu_get_be32s(f, v);
 774     return 0;
 775 }
 776
 777 static void put_uint32(QEMUFile *f, const void *pv, size_t size)
 778 {
 779     const uint32_t *v = pv;
 780     qemu_put_be32s(f, v);
 781 }
 782
 783 const VMStateInfo vmstate_info_uint32 = {
 784     .name = "uint32",
 785     .get  = get_uint32,
 786     .put  = put_uint32,
 787 };
 788
 789 /* 64 bit unsigned int */
 790
 791 static int get_uint64(QEMUFile *f, void *pv, size_t size)
 792 {
 793     uint64_t *v = pv;
 794     qemu_get_be64s(f, v);
 795     return 0;
 796 }
 797
 798 static void put_uint64(QEMUFile *f, const void *pv, size_t size)
 799 {
 800     const uint64_t *v = pv;
 801     qemu_put_be64s(f, v);
 802 }
 803
 804 const VMStateInfo vmstate_info_uint64 = {
 805     .name = "uint64",
 806     .get  = get_uint64,
 807     .put  = put_uint64,
 808 };
 809
 810 /* timers  */
 811
 812 static int get_timer(QEMUFile *f, void *pv, size_t size)
 813 {
 814     QEMUTimer *v = pv;
 815     qemu_get_timer(f, v);
 816     return 0;
 817 }
 818
 819 static void put_timer(QEMUFile *f, const void *pv, size_t size)
 820 {
 821     QEMUTimer *v = (void *)pv;
 822     qemu_put_timer(f, v);
 823 }
 824
 825 const VMStateInfo vmstate_info_timer = {
 826     .name = "timer",
 827     .get  = get_timer,
 828     .put  = put_timer,
 829 };
 830
 831 typedef struct SaveStateEntry {
 832     char idstr[256];
 833     int instance_id;
 834     int version_id;
 835     int section_id;
 836     SaveLiveStateHandler *save_live_state;
 837     SaveStateHandler *save_state;
 838     LoadStateHandler *load_state;
 839     const VMStateDescription *vmsd;
 840     void *opaque;
 841     struct SaveStateEntry *next;
 842 } SaveStateEntry;
 843
 844 static SaveStateEntry *first_se;
 845 static int global_section_id;
 846
 847 /* TODO: Individual devices generally have very little idea about the rest
 848    of the system, so instance_id should be removed/replaced.
 849    Meanwhile pass -1 as instance_id if you do not already have a clearly
 850    distinguishing id for all instances of your device class. */
 851 int register_savevm_live(const char *idstr,
 852                          int instance_id,
 853                          int version_id,
 854                          SaveLiveStateHandler *save_live_state,
 855                          SaveStateHandler *save_state,
 856                          LoadStateHandler *load_state,
 857                          void *opaque)
 858 {
 859     SaveStateEntry *se, **pse;
 860
 861     se = qemu_malloc(sizeof(SaveStateEntry));
 862     pstrcpy(se->idstr, sizeof(se->idstr), idstr);
 863     se->instance_id = (instance_id == -1) ? 0 : instance_id;
 864     se->version_id = version_id;
 865     se->section_id = global_section_id++;
 866     se->save_live_state = save_live_state;
 867     se->save_state = save_state;
 868     se->load_state = load_state;
 869     se->opaque = opaque;
 870     se->vmsd = NULL;
 871     se->next = NULL;
 872
 873     /* add at the end of list */
 874     pse = &first_se;
 875     while (*pse != NULL) {
 876         if (instance_id == -1
 877                 && strcmp(se->idstr, (*pse)->idstr) == 0
 878                 && se->instance_id <= (*pse)->instance_id)
 879             se->instance_id = (*pse)->instance_id + 1;
 880         pse = &(*pse)->next;
 881     }
 882     *pse = se;
 883     return 0;
 884 }
 885
 886 int register_savevm(const char *idstr,
 887                     int instance_id,
 888                     int version_id,
 889                     SaveStateHandler *save_state,
 890                     LoadStateHandler *load_state,
 891                     void *opaque)
 892 {
 893     return register_savevm_live(idstr, instance_id, version_id,
 894                                 NULL, save_state, load_state, opaque);
 895 }
 896
 897 void unregister_savevm(const char *idstr, void *opaque)
 898 {
 899     SaveStateEntry **pse;
 900
 901     pse = &first_se;
 902     while (*pse != NULL) {
 903         if (strcmp((*pse)->idstr, idstr) == 0 && (*pse)->opaque == opaque) {
 904             SaveStateEntry *next = (*pse)->next;
 905             qemu_free(*pse);
 906             *pse = next;
 907             continue;
 908         }
 909         pse = &(*pse)->next;
 910     }
 911 }
 912
 913 int vmstate_register(int instance_id, const VMStateDescription *vmsd,
 914                      void *opaque)
 915 {
 916     SaveStateEntry *se, **pse;
 917
 918     se = qemu_malloc(sizeof(SaveStateEntry));
 919     pstrcpy(se->idstr, sizeof(se->idstr), vmsd->name);
 920     se->instance_id = (instance_id == -1) ? 0 : instance_id;
 921     se->version_id = vmsd->version_id;
 922     se->section_id = global_section_id++;
 923     se->save_live_state = NULL;
 924     se->save_state = NULL;
 925     se->load_state = NULL;
 926     se->opaque = opaque;
 927     se->vmsd = vmsd;
 928     se->next = NULL;
 929
 930     /* add at the end of list */
 931     pse = &first_se;
 932     while (*pse != NULL) {
 933         if (instance_id == -1
 934                 && strcmp(se->idstr, (*pse)->idstr) == 0
 935                 && se->instance_id <= (*pse)->instance_id)
 936             se->instance_id = (*pse)->instance_id + 1;
 937         pse = &(*pse)->next;
 938     }
 939     *pse = se;
 940     return 0;
 941 }
 942
 943 void vmstate_unregister(const char *idstr,  void *opaque)
 944 {
 945     SaveStateEntry **pse;
 946
 947     pse = &first_se;
 948     while (*pse != NULL) {
 949         if (strcmp((*pse)->idstr, idstr) == 0 && (*pse)->opaque == opaque) {
 950             SaveStateEntry *next = (*pse)->next;
 951             qemu_free(*pse);
 952             *pse = next;
 953             continue;
 954         }
 955         pse = &(*pse)->next;
 956     }
 957 }
 958
 959 int vmstate_load_state(QEMUFile *f, const VMStateDescription *vmsd,
 960                        void *opaque, int version_id)
 961 {
 962     VMStateField *field = vmsd->fields;
 963
 964     if (version_id > vmsd->version_id) {
 965         return -EINVAL;
 966     }
 967     if (version_id < vmsd->minimum_version_id_old) {
 968         return -EINVAL;
 969     }
 970     if  (version_id < vmsd->minimum_version_id) {
 971         return vmsd->load_state_old(f, opaque, version_id);
 972     }
 973     while(field->name) {
 974         if (field->version_id <= version_id) {
 975             void *base_addr = opaque + field->offset;
 976             int ret, i, n_elems = 1;
 977
 978             if (field->flags & VMS_ARRAY) {
 979                 n_elems = field->num;
 980             }
 981             if (field->flags & VMS_POINTER) {
 982                 base_addr = *(void **)base_addr;
 983             }
 984             for (i = 0; i < n_elems; i++) {
 985                 void *addr = base_addr + field->size * i;
 986
 987                 if (field->flags & VMS_STRUCT) {
 988                     ret = vmstate_load_state(f, field->vmsd, addr, version_id);
 989                 } else {
 990                     ret = field->info->get(f, addr, field->size);
 991
 992                 }
 993                 if (ret < 0) {
 994                     return ret;
 995                 }
 996             }
 997         }
 998         field++;
 999     }
1000     return 0;
1001 }
1002
1003 void vmstate_save_state(QEMUFile *f, const VMStateDescription *vmsd,
1004                         const void *opaque)
1005 {
1006     VMStateField *field = vmsd->fields;
1007
1008     while(field->name) {
1009         const void *base_addr = opaque + field->offset;
1010         int i, n_elems = 1;
1011
1012         if (field->flags & VMS_ARRAY) {
1013             n_elems = field->num;
1014         }
1015         if (field->flags & VMS_POINTER) {
1016             base_addr = *(void **)base_addr;
1017         }
1018         for (i = 0; i < n_elems; i++) {
1019             const void *addr = base_addr + field->size * i;
1020
1021             if (field->flags & VMS_STRUCT) {
1022                 vmstate_save_state(f, field->vmsd, addr);
1023             } else {
1024                 field->info->put(f, addr, field->size);
1025             }
1026         }
1027         field++;
1028     }
1029 }
1030
1031 static int vmstate_load(QEMUFile *f, SaveStateEntry *se, int version_id)
1032 {
1033     if (!se->vmsd) {         /* Old style */
1034         return se->load_state(f, se->opaque, version_id);
1035     }
1036     return vmstate_load_state(f, se->vmsd, se->opaque, version_id);
1037 }
1038
1039 static void vmstate_save(QEMUFile *f, SaveStateEntry *se)
1040 {
1041     if (!se->vmsd) {         /* Old style */
1042         se->save_state(f, se->opaque);
1043         return;
1044     }
1045     vmstate_save_state(f,se->vmsd, se->opaque);
1046 }
1047
1048 #define QEMU_VM_FILE_MAGIC           0x5145564d
1049 #define QEMU_VM_FILE_VERSION_COMPAT  0x00000002
1050 #define QEMU_VM_FILE_VERSION         0x00000003
1051
1052 #define QEMU_VM_EOF                  0x00
1053 #define QEMU_VM_SECTION_START        0x01
1054 #define QEMU_VM_SECTION_PART         0x02
1055 #define QEMU_VM_SECTION_END          0x03
1056 #define QEMU_VM_SECTION_FULL         0x04
1057
1058 int qemu_savevm_state_begin(QEMUFile *f)
1059 {
1060     SaveStateEntry *se;
1061
1062     qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
1063     qemu_put_be32(f, QEMU_VM_FILE_VERSION);
1064
1065     for (se = first_se; se != NULL; se = se->next) {
1066         int len;
1067
1068         if (se->save_live_state == NULL)
1069             continue;
1070
1071         /* Section type */
1072         qemu_put_byte(f, QEMU_VM_SECTION_START);
1073         qemu_put_be32(f, se->section_id);
1074
1075         /* ID string */
1076         len = strlen(se->idstr);
1077         qemu_put_byte(f, len);
1078         qemu_put_buffer(f, (uint8_t *)se->idstr, len);
1079
1080         qemu_put_be32(f, se->instance_id);
1081         qemu_put_be32(f, se->version_id);
1082
1083         se->save_live_state(f, QEMU_VM_SECTION_START, se->opaque);
1084     }
1085
1086     if (qemu_file_has_error(f))
1087         return -EIO;
1088
1089     return 0;
1090 }
1091
1092 int qemu_savevm_state_iterate(QEMUFile *f)
1093 {
1094     SaveStateEntry *se;
1095     int ret = 1;
1096
1097     for (se = first_se; se != NULL; se = se->next) {
1098         if (se->save_live_state == NULL)
1099             continue;
1100
1101         /* Section type */
1102         qemu_put_byte(f, QEMU_VM_SECTION_PART);
1103         qemu_put_be32(f, se->section_id);
1104
1105         ret &= !!se->save_live_state(f, QEMU_VM_SECTION_PART, se->opaque);
1106     }
1107
1108     if (ret)
1109         return 1;
1110
1111     if (qemu_file_has_error(f))
1112         return -EIO;
1113
1114     return 0;
1115 }
1116
1117 int qemu_savevm_state_complete(QEMUFile *f)
1118 {
1119     SaveStateEntry *se;
1120
1121     for (se = first_se; se != NULL; se = se->next) {
1122         if (se->save_live_state == NULL)
1123             continue;
1124
1125         /* Section type */
1126         qemu_put_byte(f, QEMU_VM_SECTION_END);
1127         qemu_put_be32(f, se->section_id);
1128
1129         se->save_live_state(f, QEMU_VM_SECTION_END, se->opaque);
1130     }
1131
1132     for(se = first_se; se != NULL; se = se->next) {
1133         int len;
1134
1135         if (se->save_state == NULL && se->vmsd == NULL)
1136             continue;
1137
1138         /* Section type */
1139         qemu_put_byte(f, QEMU_VM_SECTION_FULL);
1140         qemu_put_be32(f, se->section_id);
1141
1142         /* ID string */
1143         len = strlen(se->idstr);
1144         qemu_put_byte(f, len);
1145         qemu_put_buffer(f, (uint8_t *)se->idstr, len);
1146
1147         qemu_put_be32(f, se->instance_id);
1148         qemu_put_be32(f, se->version_id);
1149
1150         vmstate_save(f, se);
1151     }
1152
1153     qemu_put_byte(f, QEMU_VM_EOF);
1154
1155     if (qemu_file_has_error(f))
1156         return -EIO;
1157
1158     return 0;
1159 }
1160
1161 int qemu_savevm_state(QEMUFile *f)
1162 {
1163     int saved_vm_running;
1164     int ret;
1165
1166     saved_vm_running = vm_running;
1167     vm_stop(0);
1168
1169     bdrv_flush_all();
1170
1171     ret = qemu_savevm_state_begin(f);
1172     if (ret < 0)
1173         goto out;
1174
1175     do {
1176         ret = qemu_savevm_state_iterate(f);
1177         if (ret < 0)
1178             goto out;
1179     } while (ret == 0);
1180
1181     ret = qemu_savevm_state_complete(f);
1182
1183 out:
1184     if (qemu_file_has_error(f))
1185         ret = -EIO;
1186
1187     if (!ret && saved_vm_running)
1188         vm_start();
1189
1190     return ret;
1191 }
1192
1193 static SaveStateEntry *find_se(const char *idstr, int instance_id)
1194 {
1195     SaveStateEntry *se;
1196
1197     for(se = first_se; se != NULL; se = se->next) {
1198         if (!strcmp(se->idstr, idstr) &&
1199             instance_id == se->instance_id)
1200             return se;
1201     }
1202     return NULL;
1203 }
1204
1205 typedef struct LoadStateEntry {
1206     SaveStateEntry *se;
1207     int section_id;
1208     int version_id;
1209     struct LoadStateEntry *next;
1210 } LoadStateEntry;
1211
1212 static int qemu_loadvm_state_v2(QEMUFile *f)
1213 {
1214     SaveStateEntry *se;
1215     int len, ret, instance_id, record_len, version_id;
1216     int64_t total_len, end_pos, cur_pos;
1217     char idstr[256];
1218
1219     total_len = qemu_get_be64(f);
1220     end_pos = total_len + qemu_ftell(f);
1221     for(;;) {
1222         if (qemu_ftell(f) >= end_pos)
1223             break;
1224         len = qemu_get_byte(f);
1225         qemu_get_buffer(f, (uint8_t *)idstr, len);
1226         idstr[len] = '\0';
1227         instance_id = qemu_get_be32(f);
1228         version_id = qemu_get_be32(f);
1229         record_len = qemu_get_be32(f);
1230         cur_pos = qemu_ftell(f);
1231         se = find_se(idstr, instance_id);
1232         if (!se) {
1233             fprintf(stderr, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
1234                     instance_id, idstr);
1235         } else {
1236             ret = vmstate_load(f, se, version_id);
1237             if (ret < 0) {
1238                 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1239                         instance_id, idstr);
1240                 return ret;
1241             }
1242         }
1243         /* always seek to exact end of record */
1244         qemu_fseek(f, cur_pos + record_len, SEEK_SET);
1245     }
1246
1247     if (qemu_file_has_error(f))
1248         return -EIO;
1249
1250     return 0;
1251 }
1252
1253 int qemu_loadvm_state(QEMUFile *f)
1254 {
1255     LoadStateEntry *first_le = NULL;
1256     uint8_t section_type;
1257     unsigned int v;
1258     int ret;
1259
1260     v = qemu_get_be32(f);
1261     if (v != QEMU_VM_FILE_MAGIC)
1262         return -EINVAL;
1263
1264     v = qemu_get_be32(f);
1265     if (v == QEMU_VM_FILE_VERSION_COMPAT)
1266         return qemu_loadvm_state_v2(f);
1267     if (v != QEMU_VM_FILE_VERSION)
1268         return -ENOTSUP;
1269
1270     while ((section_type = qemu_get_byte(f)) != QEMU_VM_EOF) {
1271         uint32_t instance_id, version_id, section_id;
1272         LoadStateEntry *le;
1273         SaveStateEntry *se;
1274         char idstr[257];
1275         int len;
1276
1277         switch (section_type) {
1278         case QEMU_VM_SECTION_START:
1279         case QEMU_VM_SECTION_FULL:
1280             /* Read section start */
1281             section_id = qemu_get_be32(f);
1282             len = qemu_get_byte(f);
1283             qemu_get_buffer(f, (uint8_t *)idstr, len);
1284             idstr[len] = 0;
1285             instance_id = qemu_get_be32(f);
1286             version_id = qemu_get_be32(f);
1287
1288             /* Find savevm section */
1289             se = find_se(idstr, instance_id);
1290             if (se == NULL) {
1291                 fprintf(stderr, "Unknown savevm section or instance '%s' %d\n", idstr, instance_id);
1292                 ret = -EINVAL;
1293                 goto out;
1294             }
1295
1296             /* Validate version */
1297             if (version_id > se->version_id) {
1298                 fprintf(stderr, "savevm: unsupported version %d for '%s' v%d\n",
1299                         version_id, idstr, se->version_id);
1300                 ret = -EINVAL;
1301                 goto out;
1302             }
1303
1304             /* Add entry */
1305             le = qemu_mallocz(sizeof(*le));
1306
1307             le->se = se;
1308             le->section_id = section_id;
1309             le->version_id = version_id;
1310             le->next = first_le;
1311             first_le = le;
1312
1313             ret = vmstate_load(f, le->se, le->version_id);
1314             if (ret < 0) {
1315                 fprintf(stderr, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1316                         instance_id, idstr);
1317                 goto out;
1318             }
1319             break;
1320         case QEMU_VM_SECTION_PART:
1321         case QEMU_VM_SECTION_END:
1322             section_id = qemu_get_be32(f);
1323
1324             for (le = first_le; le && le->section_id != section_id; le = le->next);
1325             if (le == NULL) {
1326                 fprintf(stderr, "Unknown savevm section %d\n", section_id);
1327                 ret = -EINVAL;
1328                 goto out;
1329             }
1330
1331             ret = vmstate_load(f, le->se, le->version_id);
1332             if (ret < 0) {
1333                 fprintf(stderr, "qemu: warning: error while loading state section id %d\n",
1334                         section_id);
1335                 goto out;
1336             }
1337             break;
1338         default:
1339             fprintf(stderr, "Unknown savevm section type %d\n", section_type);
1340             ret = -EINVAL;
1341             goto out;
1342         }
1343     }
1344
1345     ret = 0;
1346
1347 out:
1348     while (first_le) {
1349         LoadStateEntry *le = first_le;
1350         first_le = first_le->next;
1351         qemu_free(le);
1352     }
1353
1354     if (qemu_file_has_error(f))
1355         ret = -EIO;
1356
1357     return ret;
1358 }
1359
1360 /* device can contain snapshots */
1361 static int bdrv_can_snapshot(BlockDriverState *bs)
1362 {
1363     return (bs &&
1364             !bdrv_is_removable(bs) &&
1365             !bdrv_is_read_only(bs));
1366 }
1367
1368 /* device must be snapshots in order to have a reliable snapshot */
1369 static int bdrv_has_snapshot(BlockDriverState *bs)
1370 {
1371     return (bs &&
1372             !bdrv_is_removable(bs) &&
1373             !bdrv_is_read_only(bs));
1374 }
1375
1376 static BlockDriverState *get_bs_snapshots(void)
1377 {
1378     BlockDriverState *bs;
1379     DriveInfo *dinfo;
1380
1381     if (bs_snapshots)
1382         return bs_snapshots;
1383     TAILQ_FOREACH(dinfo, &drives, next) {
1384         bs = dinfo->bdrv;
1385         if (bdrv_can_snapshot(bs))
1386             goto ok;
1387     }
1388     return NULL;
1389  ok:
1390     bs_snapshots = bs;
1391     return bs;
1392 }
1393
1394 static int bdrv_snapshot_find(BlockDriverState *bs, QEMUSnapshotInfo *sn_info,
1395                               const char *name)
1396 {
1397     QEMUSnapshotInfo *sn_tab, *sn;
1398     int nb_sns, i, ret;
1399
1400     ret = -ENOENT;
1401     nb_sns = bdrv_snapshot_list(bs, &sn_tab);
1402     if (nb_sns < 0)
1403         return ret;
1404     for(i = 0; i < nb_sns; i++) {
1405         sn = &sn_tab[i];
1406         if (!strcmp(sn->id_str, name) || !strcmp(sn->name, name)) {
1407             *sn_info = *sn;
1408             ret = 0;
1409             break;
1410         }
1411     }
1412     qemu_free(sn_tab);
1413     return ret;
1414 }
1415
1416 void do_savevm(Monitor *mon, const char *name)
1417 {
1418     DriveInfo *dinfo;
1419     BlockDriverState *bs, *bs1;
1420     QEMUSnapshotInfo sn1, *sn = &sn1, old_sn1, *old_sn = &old_sn1;
1421     int must_delete, ret;
1422     QEMUFile *f;
1423     int saved_vm_running;
1424     uint32_t vm_state_size;
1425 #ifdef _WIN32
1426     struct _timeb tb;
1427 #else
1428     struct timeval tv;
1429 #endif
1430
1431     bs = get_bs_snapshots();
1432     if (!bs) {
1433         monitor_printf(mon, "No block device can accept snapshots\n");
1434         return;
1435     }
1436
1437     /* ??? Should this occur after vm_stop?  */
1438     qemu_aio_flush();
1439
1440     saved_vm_running = vm_running;
1441     vm_stop(0);
1442
1443     must_delete = 0;
1444     if (name) {
1445         ret = bdrv_snapshot_find(bs, old_sn, name);
1446         if (ret >= 0) {
1447             must_delete = 1;
1448         }
1449     }
1450     memset(sn, 0, sizeof(*sn));
1451     if (must_delete) {
1452         pstrcpy(sn->name, sizeof(sn->name), old_sn->name);
1453         pstrcpy(sn->id_str, sizeof(sn->id_str), old_sn->id_str);
1454     } else {
1455         if (name)
1456             pstrcpy(sn->name, sizeof(sn->name), name);
1457     }
1458
1459     /* fill auxiliary fields */
1460 #ifdef _WIN32
1461     _ftime(&tb);
1462     sn->date_sec = tb.time;
1463     sn->date_nsec = tb.millitm * 1000000;
1464 #else
1465     gettimeofday(&tv, NULL);
1466     sn->date_sec = tv.tv_sec;
1467     sn->date_nsec = tv.tv_usec * 1000;
1468 #endif
1469     sn->vm_clock_nsec = qemu_get_clock(vm_clock);
1470
1471     /* save the VM state */
1472     f = qemu_fopen_bdrv(bs, 1);
1473     if (!f) {
1474         monitor_printf(mon, "Could not open VM state file\n");
1475         goto the_end;
1476     }
1477     ret = qemu_savevm_state(f);
1478     vm_state_size = qemu_ftell(f);
1479     qemu_fclose(f);
1480     if (ret < 0) {
1481         monitor_printf(mon, "Error %d while writing VM\n", ret);
1482         goto the_end;
1483     }
1484
1485     /* create the snapshots */
1486
1487     TAILQ_FOREACH(dinfo, &drives, next) {
1488         bs1 = dinfo->bdrv;
1489         if (bdrv_has_snapshot(bs1)) {
1490             if (must_delete) {
1491                 ret = bdrv_snapshot_delete(bs1, old_sn->id_str);
1492                 if (ret < 0) {
1493                     monitor_printf(mon,
1494                                    "Error while deleting snapshot on '%s'\n",
1495                                    bdrv_get_device_name(bs1));
1496                 }
1497             }
1498             /* Write VM state size only to the image that contains the state */
1499             sn->vm_state_size = (bs == bs1 ? vm_state_size : 0);
1500             ret = bdrv_snapshot_create(bs1, sn);
1501             if (ret < 0) {
1502                 monitor_printf(mon, "Error while creating snapshot on '%s'\n",
1503                                bdrv_get_device_name(bs1));
1504             }
1505         }
1506     }
1507
1508  the_end:
1509     if (saved_vm_running)
1510         vm_start();
1511 }
1512
1513 int load_vmstate(Monitor *mon, const char *name)
1514 {
1515     DriveInfo *dinfo;
1516     BlockDriverState *bs, *bs1;
1517     QEMUSnapshotInfo sn;
1518     QEMUFile *f;
1519     int ret;
1520
1521     bs = get_bs_snapshots();
1522     if (!bs) {
1523         monitor_printf(mon, "No block device supports snapshots\n");
1524         return -EINVAL;
1525     }
1526
1527     /* Flush all IO requests so they don't interfere with the new state.  */
1528     qemu_aio_flush();
1529
1530     TAILQ_FOREACH(dinfo, &drives, next) {
1531         bs1 = dinfo->bdrv;
1532         if (bdrv_has_snapshot(bs1)) {
1533             ret = bdrv_snapshot_goto(bs1, name);
1534             if (ret < 0) {
1535                 if (bs != bs1)
1536                     monitor_printf(mon, "Warning: ");
1537                 switch(ret) {
1538                 case -ENOTSUP:
1539                     monitor_printf(mon,
1540                                    "Snapshots not supported on device '%s'\n",
1541                                    bdrv_get_device_name(bs1));
1542                     break;
1543                 case -ENOENT:
1544                     monitor_printf(mon, "Could not find snapshot '%s' on "
1545                                    "device '%s'\n",
1546                                    name, bdrv_get_device_name(bs1));
1547                     break;
1548                 default:
1549                     monitor_printf(mon, "Error %d while activating snapshot on"
1550                                    " '%s'\n", ret, bdrv_get_device_name(bs1));
1551                     break;
1552                 }
1553                 /* fatal on snapshot block device */
1554                 if (bs == bs1)
1555                     return 0;
1556             }
1557         }
1558     }
1559
1560     /* Don't even try to load empty VM states */
1561     ret = bdrv_snapshot_find(bs, &sn, name);
1562     if ((ret >= 0) && (sn.vm_state_size == 0))
1563         return -EINVAL;
1564
1565     /* restore the VM state */
1566     f = qemu_fopen_bdrv(bs, 0);
1567     if (!f) {
1568         monitor_printf(mon, "Could not open VM state file\n");
1569         return -EINVAL;
1570     }
1571     ret = qemu_loadvm_state(f);
1572     qemu_fclose(f);
1573     if (ret < 0) {
1574         monitor_printf(mon, "Error %d while loading VM state\n", ret);
1575         return ret;
1576     }
1577     return 0;
1578 }
1579
1580 void do_delvm(Monitor *mon, const char *name)
1581 {
1582     DriveInfo *dinfo;
1583     BlockDriverState *bs, *bs1;
1584     int ret;
1585
1586     bs = get_bs_snapshots();
1587     if (!bs) {
1588         monitor_printf(mon, "No block device supports snapshots\n");
1589         return;
1590     }
1591
1592     TAILQ_FOREACH(dinfo, &drives, next) {
1593         bs1 = dinfo->bdrv;
1594         if (bdrv_has_snapshot(bs1)) {
1595             ret = bdrv_snapshot_delete(bs1, name);
1596             if (ret < 0) {
1597                 if (ret == -ENOTSUP)
1598                     monitor_printf(mon,
1599                                    "Snapshots not supported on device '%s'\n",
1600                                    bdrv_get_device_name(bs1));
1601                 else
1602                     monitor_printf(mon, "Error %d while deleting snapshot on "
1603                                    "'%s'\n", ret, bdrv_get_device_name(bs1));
1604             }
1605         }
1606     }
1607 }
1608
1609 void do_info_snapshots(Monitor *mon)
1610 {
1611     DriveInfo *dinfo;
1612     BlockDriverState *bs, *bs1;
1613     QEMUSnapshotInfo *sn_tab, *sn;
1614     int nb_sns, i;
1615     char buf[256];
1616
1617     bs = get_bs_snapshots();
1618     if (!bs) {
1619         monitor_printf(mon, "No available block device supports snapshots\n");
1620         return;
1621     }
1622     monitor_printf(mon, "Snapshot devices:");
1623     TAILQ_FOREACH(dinfo, &drives, next) {
1624         bs1 = dinfo->bdrv;
1625         if (bdrv_has_snapshot(bs1)) {
1626             if (bs == bs1)
1627                 monitor_printf(mon, " %s", bdrv_get_device_name(bs1));
1628         }
1629     }
1630     monitor_printf(mon, "\n");
1631
1632     nb_sns = bdrv_snapshot_list(bs, &sn_tab);
1633     if (nb_sns < 0) {
1634         monitor_printf(mon, "bdrv_snapshot_list: error %d\n", nb_sns);
1635         return;
1636     }
1637     monitor_printf(mon, "Snapshot list (from %s):\n",
1638                    bdrv_get_device_name(bs));
1639     monitor_printf(mon, "%s\n", bdrv_snapshot_dump(buf, sizeof(buf), NULL));
1640     for(i = 0; i < nb_sns; i++) {
1641         sn = &sn_tab[i];
1642         monitor_printf(mon, "%s\n", bdrv_snapshot_dump(buf, sizeof(buf), sn));
1643     }
1644     qemu_free(sn_tab);
1645 }