4 * Copyright (c) 2003-2004 Fabrice Bellard
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
34 #include <sys/times.h>
39 #include <sys/ioctl.h>
40 #include <sys/socket.h>
46 #include <linux/if_tun.h>
49 #include <linux/rtc.h>
53 #if defined(CONFIG_SLIRP)
59 #include <sys/timeb.h>
61 #define getopt_long_only getopt_long
62 #define memalign(align, size) malloc(size)
66 #if defined(__linux__)
67 /* SDL use the pthreads and they modify sigaction. We don't
69 #if (__GLIBC__ > 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ >= 2))
70 extern void __libc_sigaction();
71 #define sigaction(sig, act, oact) __libc_sigaction(sig, act, oact)
73 extern void __sigaction();
74 #define sigaction(sig, act, oact) __sigaction(sig, act, oact)
76 #endif /* __linux__ */
77 #endif /* CONFIG_SDL */
85 #define DEFAULT_NETWORK_SCRIPT "/etc/qemu-ifup"
87 //#define DEBUG_UNUSED_IOPORT
88 //#define DEBUG_IOPORT
90 #if !defined(CONFIG_SOFTMMU)
91 #define PHYS_RAM_MAX_SIZE (256 * 1024 * 1024)
93 #define PHYS_RAM_MAX_SIZE (2047 * 1024 * 1024)
97 #define DEFAULT_RAM_SIZE 144
99 #define DEFAULT_RAM_SIZE 32
102 #define GUI_REFRESH_INTERVAL 30
104 /* XXX: use a two level table to limit memory usage */
105 #define MAX_IOPORTS 65536
107 const char *bios_dir
= CONFIG_QEMU_SHAREDIR
;
108 char phys_ram_file
[1024];
109 CPUState
*global_env
;
110 CPUState
*cpu_single_env
;
111 void *ioport_opaque
[MAX_IOPORTS
];
112 IOPortReadFunc
*ioport_read_table
[3][MAX_IOPORTS
];
113 IOPortWriteFunc
*ioport_write_table
[3][MAX_IOPORTS
];
114 BlockDriverState
*bs_table
[MAX_DISKS
], *fd_table
[MAX_FD
];
117 static DisplayState display_state
;
119 int64_t ticks_per_sec
;
120 int boot_device
= 'c';
122 static char network_script
[1024];
123 int pit_min_timer_count
= 0;
125 NetDriverState nd_table
[MAX_NICS
];
126 SerialState
*serial_console
;
127 QEMUTimer
*gui_timer
;
129 int audio_enabled
= 0;
131 int prep_enabled
= 0;
133 int cirrus_vga_enabled
= 0;
135 /***********************************************************/
136 /* x86 ISA bus support */
138 target_phys_addr_t isa_mem_base
= 0;
140 uint32_t default_ioport_readb(void *opaque
, uint32_t address
)
142 #ifdef DEBUG_UNUSED_IOPORT
143 fprintf(stderr
, "inb: port=0x%04x\n", address
);
148 void default_ioport_writeb(void *opaque
, uint32_t address
, uint32_t data
)
150 #ifdef DEBUG_UNUSED_IOPORT
151 fprintf(stderr
, "outb: port=0x%04x data=0x%02x\n", address
, data
);
155 /* default is to make two byte accesses */
156 uint32_t default_ioport_readw(void *opaque
, uint32_t address
)
159 data
= ioport_read_table
[0][address
](ioport_opaque
[address
], address
);
160 address
= (address
+ 1) & (MAX_IOPORTS
- 1);
161 data
|= ioport_read_table
[0][address
](ioport_opaque
[address
], address
) << 8;
165 void default_ioport_writew(void *opaque
, uint32_t address
, uint32_t data
)
167 ioport_write_table
[0][address
](ioport_opaque
[address
], address
, data
& 0xff);
168 address
= (address
+ 1) & (MAX_IOPORTS
- 1);
169 ioport_write_table
[0][address
](ioport_opaque
[address
], address
, (data
>> 8) & 0xff);
172 uint32_t default_ioport_readl(void *opaque
, uint32_t address
)
174 #ifdef DEBUG_UNUSED_IOPORT
175 fprintf(stderr
, "inl: port=0x%04x\n", address
);
180 void default_ioport_writel(void *opaque
, uint32_t address
, uint32_t data
)
182 #ifdef DEBUG_UNUSED_IOPORT
183 fprintf(stderr
, "outl: port=0x%04x data=0x%02x\n", address
, data
);
187 void init_ioports(void)
191 for(i
= 0; i
< MAX_IOPORTS
; i
++) {
192 ioport_read_table
[0][i
] = default_ioport_readb
;
193 ioport_write_table
[0][i
] = default_ioport_writeb
;
194 ioport_read_table
[1][i
] = default_ioport_readw
;
195 ioport_write_table
[1][i
] = default_ioport_writew
;
196 ioport_read_table
[2][i
] = default_ioport_readl
;
197 ioport_write_table
[2][i
] = default_ioport_writel
;
201 /* size is the word size in byte */
202 int register_ioport_read(int start
, int length
, int size
,
203 IOPortReadFunc
*func
, void *opaque
)
209 } else if (size
== 2) {
211 } else if (size
== 4) {
214 hw_error("register_ioport_read: invalid size");
217 for(i
= start
; i
< start
+ length
; i
+= size
) {
218 ioport_read_table
[bsize
][i
] = func
;
219 if (ioport_opaque
[i
] != NULL
&& ioport_opaque
[i
] != opaque
)
220 hw_error("register_ioport_read: invalid opaque");
221 ioport_opaque
[i
] = opaque
;
226 /* size is the word size in byte */
227 int register_ioport_write(int start
, int length
, int size
,
228 IOPortWriteFunc
*func
, void *opaque
)
234 } else if (size
== 2) {
236 } else if (size
== 4) {
239 hw_error("register_ioport_write: invalid size");
242 for(i
= start
; i
< start
+ length
; i
+= size
) {
243 ioport_write_table
[bsize
][i
] = func
;
244 if (ioport_opaque
[i
] != NULL
&& ioport_opaque
[i
] != opaque
)
245 hw_error("register_ioport_read: invalid opaque");
246 ioport_opaque
[i
] = opaque
;
251 void isa_unassign_ioport(int start
, int length
)
255 for(i
= start
; i
< start
+ length
; i
++) {
256 ioport_read_table
[0][i
] = default_ioport_readb
;
257 ioport_read_table
[1][i
] = default_ioport_readw
;
258 ioport_read_table
[2][i
] = default_ioport_readl
;
260 ioport_write_table
[0][i
] = default_ioport_writeb
;
261 ioport_write_table
[1][i
] = default_ioport_writew
;
262 ioport_write_table
[2][i
] = default_ioport_writel
;
266 void pstrcpy(char *buf
, int buf_size
, const char *str
)
276 if (c
== 0 || q
>= buf
+ buf_size
- 1)
283 /* strcat and truncate. */
284 char *pstrcat(char *buf
, int buf_size
, const char *s
)
289 pstrcpy(buf
+ len
, buf_size
- len
, s
);
293 /* return the size or -1 if error */
294 int get_image_size(const char *filename
)
297 fd
= open(filename
, O_RDONLY
| O_BINARY
);
300 size
= lseek(fd
, 0, SEEK_END
);
305 /* return the size or -1 if error */
306 int load_image(const char *filename
, uint8_t *addr
)
309 fd
= open(filename
, O_RDONLY
| O_BINARY
);
312 size
= lseek(fd
, 0, SEEK_END
);
313 lseek(fd
, 0, SEEK_SET
);
314 if (read(fd
, addr
, size
) != size
) {
322 void cpu_outb(CPUState
*env
, int addr
, int val
)
325 if (loglevel
& CPU_LOG_IOPORT
)
326 fprintf(logfile
, "outb: %04x %02x\n", addr
, val
);
328 ioport_write_table
[0][addr
](ioport_opaque
[addr
], addr
, val
);
331 void cpu_outw(CPUState
*env
, int addr
, int val
)
334 if (loglevel
& CPU_LOG_IOPORT
)
335 fprintf(logfile
, "outw: %04x %04x\n", addr
, val
);
337 ioport_write_table
[1][addr
](ioport_opaque
[addr
], addr
, val
);
340 void cpu_outl(CPUState
*env
, int addr
, int val
)
343 if (loglevel
& CPU_LOG_IOPORT
)
344 fprintf(logfile
, "outl: %04x %08x\n", addr
, val
);
346 ioport_write_table
[2][addr
](ioport_opaque
[addr
], addr
, val
);
349 int cpu_inb(CPUState
*env
, int addr
)
352 val
= ioport_read_table
[0][addr
](ioport_opaque
[addr
], addr
);
354 if (loglevel
& CPU_LOG_IOPORT
)
355 fprintf(logfile
, "inb : %04x %02x\n", addr
, val
);
360 int cpu_inw(CPUState
*env
, int addr
)
363 val
= ioport_read_table
[1][addr
](ioport_opaque
[addr
], addr
);
365 if (loglevel
& CPU_LOG_IOPORT
)
366 fprintf(logfile
, "inw : %04x %04x\n", addr
, val
);
371 int cpu_inl(CPUState
*env
, int addr
)
374 val
= ioport_read_table
[2][addr
](ioport_opaque
[addr
], addr
);
376 if (loglevel
& CPU_LOG_IOPORT
)
377 fprintf(logfile
, "inl : %04x %08x\n", addr
, val
);
382 /***********************************************************/
383 void hw_error(const char *fmt
, ...)
388 fprintf(stderr
, "qemu: hardware error: ");
389 vfprintf(stderr
, fmt
, ap
);
390 fprintf(stderr
, "\n");
392 cpu_x86_dump_state(global_env
, stderr
, X86_DUMP_FPU
| X86_DUMP_CCOP
);
394 cpu_dump_state(global_env
, stderr
, 0);
400 /***********************************************************/
403 static QEMUPutKBDEvent
*qemu_put_kbd_event
;
404 static void *qemu_put_kbd_event_opaque
;
405 static QEMUPutMouseEvent
*qemu_put_mouse_event
;
406 static void *qemu_put_mouse_event_opaque
;
408 void qemu_add_kbd_event_handler(QEMUPutKBDEvent
*func
, void *opaque
)
410 qemu_put_kbd_event_opaque
= opaque
;
411 qemu_put_kbd_event
= func
;
414 void qemu_add_mouse_event_handler(QEMUPutMouseEvent
*func
, void *opaque
)
416 qemu_put_mouse_event_opaque
= opaque
;
417 qemu_put_mouse_event
= func
;
420 void kbd_put_keycode(int keycode
)
422 if (qemu_put_kbd_event
) {
423 qemu_put_kbd_event(qemu_put_kbd_event_opaque
, keycode
);
427 void kbd_mouse_event(int dx
, int dy
, int dz
, int buttons_state
)
429 if (qemu_put_mouse_event
) {
430 qemu_put_mouse_event(qemu_put_mouse_event_opaque
,
431 dx
, dy
, dz
, buttons_state
);
435 /***********************************************************/
438 #if defined(__powerpc__)
440 static inline uint32_t get_tbl(void)
443 asm volatile("mftb %0" : "=r" (tbl
));
447 static inline uint32_t get_tbu(void)
450 asm volatile("mftbu %0" : "=r" (tbl
));
454 int64_t cpu_get_real_ticks(void)
457 /* NOTE: we test if wrapping has occurred */
463 return ((int64_t)h
<< 32) | l
;
466 #elif defined(__i386__)
468 int64_t cpu_get_real_ticks(void)
471 asm volatile ("rdtsc" : "=A" (val
));
475 #elif defined(__x86_64__)
477 int64_t cpu_get_real_ticks(void)
481 asm volatile("rdtsc" : "=a" (low
), "=d" (high
));
489 #error unsupported CPU
492 static int64_t cpu_ticks_offset
;
493 static int cpu_ticks_enabled
;
495 static inline int64_t cpu_get_ticks(void)
497 if (!cpu_ticks_enabled
) {
498 return cpu_ticks_offset
;
500 return cpu_get_real_ticks() + cpu_ticks_offset
;
504 /* enable cpu_get_ticks() */
505 void cpu_enable_ticks(void)
507 if (!cpu_ticks_enabled
) {
508 cpu_ticks_offset
-= cpu_get_real_ticks();
509 cpu_ticks_enabled
= 1;
513 /* disable cpu_get_ticks() : the clock is stopped. You must not call
514 cpu_get_ticks() after that. */
515 void cpu_disable_ticks(void)
517 if (cpu_ticks_enabled
) {
518 cpu_ticks_offset
= cpu_get_ticks();
519 cpu_ticks_enabled
= 0;
523 static int64_t get_clock(void)
528 return ((int64_t)tb
.time
* 1000 + (int64_t)tb
.millitm
) * 1000;
531 gettimeofday(&tv
, NULL
);
532 return tv
.tv_sec
* 1000000LL + tv
.tv_usec
;
536 void cpu_calibrate_ticks(void)
541 ticks
= cpu_get_real_ticks();
547 usec
= get_clock() - usec
;
548 ticks
= cpu_get_real_ticks() - ticks
;
549 ticks_per_sec
= (ticks
* 1000000LL + (usec
>> 1)) / usec
;
552 /* compute with 96 bit intermediate result: (a*b)/c */
553 uint64_t muldiv64(uint64_t a
, uint32_t b
, uint32_t c
)
558 #ifdef WORDS_BIGENDIAN
568 rl
= (uint64_t)u
.l
.low
* (uint64_t)b
;
569 rh
= (uint64_t)u
.l
.high
* (uint64_t)b
;
572 res
.l
.low
= (((rh
% c
) << 32) + (rl
& 0xffffffff)) / c
;
576 #define QEMU_TIMER_REALTIME 0
577 #define QEMU_TIMER_VIRTUAL 1
581 /* XXX: add frequency */
589 struct QEMUTimer
*next
;
595 static QEMUTimer
*active_timers
[2];
597 static MMRESULT timerID
;
599 /* frequency of the times() clock tick */
600 static int timer_freq
;
603 QEMUClock
*qemu_new_clock(int type
)
606 clock
= qemu_mallocz(sizeof(QEMUClock
));
613 QEMUTimer
*qemu_new_timer(QEMUClock
*clock
, QEMUTimerCB
*cb
, void *opaque
)
617 ts
= qemu_mallocz(sizeof(QEMUTimer
));
624 void qemu_free_timer(QEMUTimer
*ts
)
629 /* stop a timer, but do not dealloc it */
630 void qemu_del_timer(QEMUTimer
*ts
)
634 /* NOTE: this code must be signal safe because
635 qemu_timer_expired() can be called from a signal. */
636 pt
= &active_timers
[ts
->clock
->type
];
649 /* modify the current timer so that it will be fired when current_time
650 >= expire_time. The corresponding callback will be called. */
651 void qemu_mod_timer(QEMUTimer
*ts
, int64_t expire_time
)
657 /* add the timer in the sorted list */
658 /* NOTE: this code must be signal safe because
659 qemu_timer_expired() can be called from a signal. */
660 pt
= &active_timers
[ts
->clock
->type
];
665 if (t
->expire_time
> expire_time
)
669 ts
->expire_time
= expire_time
;
674 int qemu_timer_pending(QEMUTimer
*ts
)
677 for(t
= active_timers
[ts
->clock
->type
]; t
!= NULL
; t
= t
->next
) {
684 static inline int qemu_timer_expired(QEMUTimer
*timer_head
, int64_t current_time
)
688 return (timer_head
->expire_time
<= current_time
);
691 static void qemu_run_timers(QEMUTimer
**ptimer_head
, int64_t current_time
)
697 if (ts
->expire_time
> current_time
)
699 /* remove timer from the list before calling the callback */
700 *ptimer_head
= ts
->next
;
703 /* run the callback (the timer list can be modified) */
708 int64_t qemu_get_clock(QEMUClock
*clock
)
710 switch(clock
->type
) {
711 case QEMU_TIMER_REALTIME
:
713 return GetTickCount();
718 /* Note that using gettimeofday() is not a good solution
719 for timers because its value change when the date is
721 if (timer_freq
== 100) {
722 return times(&tp
) * 10;
724 return ((int64_t)times(&tp
) * 1000) / timer_freq
;
729 case QEMU_TIMER_VIRTUAL
:
730 return cpu_get_ticks();
735 void qemu_put_timer(QEMUFile
*f
, QEMUTimer
*ts
)
737 uint64_t expire_time
;
739 if (qemu_timer_pending(ts
)) {
740 expire_time
= ts
->expire_time
;
744 qemu_put_be64(f
, expire_time
);
747 void qemu_get_timer(QEMUFile
*f
, QEMUTimer
*ts
)
749 uint64_t expire_time
;
751 expire_time
= qemu_get_be64(f
);
752 if (expire_time
!= -1) {
753 qemu_mod_timer(ts
, expire_time
);
759 static void timer_save(QEMUFile
*f
, void *opaque
)
761 if (cpu_ticks_enabled
) {
762 hw_error("cannot save state if virtual timers are running");
764 qemu_put_be64s(f
, &cpu_ticks_offset
);
765 qemu_put_be64s(f
, &ticks_per_sec
);
768 static int timer_load(QEMUFile
*f
, void *opaque
, int version_id
)
772 if (cpu_ticks_enabled
) {
775 qemu_get_be64s(f
, &cpu_ticks_offset
);
776 qemu_get_be64s(f
, &ticks_per_sec
);
781 void CALLBACK
host_alarm_handler(UINT uTimerID
, UINT uMsg
,
782 DWORD_PTR dwUser
, DWORD_PTR dw1
, DWORD_PTR dw2
)
784 static void host_alarm_handler(int host_signum
)
787 if (qemu_timer_expired(active_timers
[QEMU_TIMER_VIRTUAL
],
788 qemu_get_clock(vm_clock
)) ||
789 qemu_timer_expired(active_timers
[QEMU_TIMER_REALTIME
],
790 qemu_get_clock(rt_clock
))) {
791 /* stop the cpu because a timer occured */
792 cpu_interrupt(global_env
, CPU_INTERRUPT_EXIT
);
798 #if defined(__linux__)
800 #define RTC_FREQ 1024
804 static int start_rtc_timer(void)
806 rtc_fd
= open("/dev/rtc", O_RDONLY
);
809 if (ioctl(rtc_fd
, RTC_IRQP_SET
, RTC_FREQ
) < 0) {
810 fprintf(stderr
, "Could not configure '/dev/rtc' to have a 1024 Hz timer. This is not a fatal\n"
811 "error, but for better emulation accuracy either use a 2.6 host Linux kernel or\n"
812 "type 'echo 1024 > /proc/sys/dev/rtc/max-user-freq' as root.\n");
815 if (ioctl(rtc_fd
, RTC_PIE_ON
, 0) < 0) {
820 pit_min_timer_count
= PIT_FREQ
/ RTC_FREQ
;
826 static int start_rtc_timer(void)
831 #endif /* !defined(__linux__) */
833 #endif /* !defined(_WIN32) */
835 static void init_timers(void)
837 rt_clock
= qemu_new_clock(QEMU_TIMER_REALTIME
);
838 vm_clock
= qemu_new_clock(QEMU_TIMER_VIRTUAL
);
843 timerID
= timeSetEvent(10, // interval (ms)
845 host_alarm_handler
, // function
846 (DWORD
)&count
, // user parameter
847 TIME_PERIODIC
| TIME_CALLBACK_FUNCTION
);
849 perror("failed timer alarm");
853 pit_min_timer_count
= ((uint64_t)10000 * PIT_FREQ
) / 1000000;
856 struct sigaction act
;
857 struct itimerval itv
;
859 /* get times() syscall frequency */
860 timer_freq
= sysconf(_SC_CLK_TCK
);
863 sigfillset(&act
.sa_mask
);
865 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
866 act
.sa_flags
|= SA_ONSTACK
;
868 act
.sa_handler
= host_alarm_handler
;
869 sigaction(SIGALRM
, &act
, NULL
);
871 itv
.it_interval
.tv_sec
= 0;
872 itv
.it_interval
.tv_usec
= 1000;
873 itv
.it_value
.tv_sec
= 0;
874 itv
.it_value
.tv_usec
= 10 * 1000;
875 setitimer(ITIMER_REAL
, &itv
, NULL
);
876 /* we probe the tick duration of the kernel to inform the user if
877 the emulated kernel requested a too high timer frequency */
878 getitimer(ITIMER_REAL
, &itv
);
880 if (itv
.it_interval
.tv_usec
> 1000) {
881 /* try to use /dev/rtc to have a faster timer */
882 if (start_rtc_timer() < 0)
885 itv
.it_interval
.tv_sec
= 0;
886 itv
.it_interval
.tv_usec
= 0;
887 itv
.it_value
.tv_sec
= 0;
888 itv
.it_value
.tv_usec
= 0;
889 setitimer(ITIMER_REAL
, &itv
, NULL
);
892 sigaction(SIGIO
, &act
, NULL
);
893 fcntl(rtc_fd
, F_SETFL
, O_ASYNC
);
894 fcntl(rtc_fd
, F_SETOWN
, getpid());
897 pit_min_timer_count
= ((uint64_t)itv
.it_interval
.tv_usec
*
904 void quit_timers(void)
907 timeKillEvent(timerID
);
911 /***********************************************************/
916 int serial_open_device(void)
923 int serial_open_device(void)
925 char slave_name
[1024];
926 int master_fd
, slave_fd
;
928 if (serial_console
== NULL
&& nographic
) {
929 /* use console for serial port */
934 if (openpty(&master_fd
, &slave_fd
, slave_name
, NULL
, NULL
) < 0) {
935 fprintf(stderr
, "warning: could not create pseudo terminal for serial port\n");
938 fprintf(stderr
, "Serial port redirected to %s\n", slave_name
);
948 /***********************************************************/
949 /* Linux network device redirectors */
951 void hex_dump(FILE *f
, const uint8_t *buf
, int size
)
955 for(i
=0;i
<size
;i
+=16) {
959 fprintf(f
, "%08x ", i
);
962 fprintf(f
, " %02x", buf
[i
+j
]);
969 if (c
< ' ' || c
> '~')
977 void qemu_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
979 nd
->send_packet(nd
, buf
, size
);
982 void qemu_add_read_packet(NetDriverState
*nd
, IOCanRWHandler
*fd_can_read
,
983 IOReadHandler
*fd_read
, void *opaque
)
985 nd
->add_read_packet(nd
, fd_can_read
, fd_read
, opaque
);
988 /* dummy network adapter */
990 static void dummy_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
994 static void dummy_add_read_packet(NetDriverState
*nd
,
995 IOCanRWHandler
*fd_can_read
,
996 IOReadHandler
*fd_read
, void *opaque
)
1000 static int net_dummy_init(NetDriverState
*nd
)
1002 nd
->send_packet
= dummy_send_packet
;
1003 nd
->add_read_packet
= dummy_add_read_packet
;
1004 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "dummy");
1008 #if defined(CONFIG_SLIRP)
1010 /* slirp network adapter */
1012 static void *slirp_fd_opaque
;
1013 static IOCanRWHandler
*slirp_fd_can_read
;
1014 static IOReadHandler
*slirp_fd_read
;
1015 static int slirp_inited
;
1017 int slirp_can_output(void)
1019 return slirp_fd_can_read(slirp_fd_opaque
);
1022 void slirp_output(const uint8_t *pkt
, int pkt_len
)
1025 printf("output:\n");
1026 hex_dump(stdout
, pkt
, pkt_len
);
1028 slirp_fd_read(slirp_fd_opaque
, pkt
, pkt_len
);
1031 static void slirp_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
1035 hex_dump(stdout
, buf
, size
);
1037 slirp_input(buf
, size
);
1040 static void slirp_add_read_packet(NetDriverState
*nd
,
1041 IOCanRWHandler
*fd_can_read
,
1042 IOReadHandler
*fd_read
, void *opaque
)
1044 slirp_fd_opaque
= opaque
;
1045 slirp_fd_can_read
= fd_can_read
;
1046 slirp_fd_read
= fd_read
;
1049 static int net_slirp_init(NetDriverState
*nd
)
1051 if (!slirp_inited
) {
1055 nd
->send_packet
= slirp_send_packet
;
1056 nd
->add_read_packet
= slirp_add_read_packet
;
1057 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "slirp");
1061 #endif /* CONFIG_SLIRP */
1063 #if !defined(_WIN32)
1065 static int tun_open(char *ifname
, int ifname_size
)
1071 fd
= open("/dev/tap", O_RDWR
);
1073 fprintf(stderr
, "warning: could not open /dev/tap: no virtual network emulation\n");
1078 dev
= devname(s
.st_rdev
, S_IFCHR
);
1079 pstrcpy(ifname
, ifname_size
, dev
);
1081 fcntl(fd
, F_SETFL
, O_NONBLOCK
);
1085 static int tun_open(char *ifname
, int ifname_size
)
1090 fd
= open("/dev/net/tun", O_RDWR
);
1092 fprintf(stderr
, "warning: could not open /dev/net/tun: no virtual network emulation\n");
1095 memset(&ifr
, 0, sizeof(ifr
));
1096 ifr
.ifr_flags
= IFF_TAP
| IFF_NO_PI
;
1097 pstrcpy(ifr
.ifr_name
, IFNAMSIZ
, "tun%d");
1098 ret
= ioctl(fd
, TUNSETIFF
, (void *) &ifr
);
1100 fprintf(stderr
, "warning: could not configure /dev/net/tun: no virtual network emulation\n");
1104 printf("Connected to host network interface: %s\n", ifr
.ifr_name
);
1105 pstrcpy(ifname
, ifname_size
, ifr
.ifr_name
);
1106 fcntl(fd
, F_SETFL
, O_NONBLOCK
);
1111 static void tun_send_packet(NetDriverState
*nd
, const uint8_t *buf
, int size
)
1113 write(nd
->fd
, buf
, size
);
1116 static void tun_add_read_packet(NetDriverState
*nd
,
1117 IOCanRWHandler
*fd_can_read
,
1118 IOReadHandler
*fd_read
, void *opaque
)
1120 qemu_add_fd_read_handler(nd
->fd
, fd_can_read
, fd_read
, opaque
);
1123 static int net_tun_init(NetDriverState
*nd
)
1129 nd
->fd
= tun_open(nd
->ifname
, sizeof(nd
->ifname
));
1133 /* try to launch network init script */
1138 *parg
++ = network_script
;
1139 *parg
++ = nd
->ifname
;
1141 execv(network_script
, args
);
1144 while (waitpid(pid
, &status
, 0) != pid
);
1145 if (!WIFEXITED(status
) ||
1146 WEXITSTATUS(status
) != 0) {
1147 fprintf(stderr
, "%s: could not launch network script\n",
1151 nd
->send_packet
= tun_send_packet
;
1152 nd
->add_read_packet
= tun_add_read_packet
;
1156 static int net_fd_init(NetDriverState
*nd
, int fd
)
1159 nd
->send_packet
= tun_send_packet
;
1160 nd
->add_read_packet
= tun_add_read_packet
;
1161 pstrcpy(nd
->ifname
, sizeof(nd
->ifname
), "tunfd");
1165 #endif /* !_WIN32 */
1167 /***********************************************************/
1172 static void term_exit(void)
1176 static void term_init(void)
1182 /* init terminal so that we can grab keys */
1183 static struct termios oldtty
;
1185 static void term_exit(void)
1187 tcsetattr (0, TCSANOW
, &oldtty
);
1190 static void term_init(void)
1194 tcgetattr (0, &tty
);
1197 tty
.c_iflag
&= ~(IGNBRK
|BRKINT
|PARMRK
|ISTRIP
1198 |INLCR
|IGNCR
|ICRNL
|IXON
);
1199 tty
.c_oflag
|= OPOST
;
1200 tty
.c_lflag
&= ~(ECHO
|ECHONL
|ICANON
|IEXTEN
);
1201 /* if graphical mode, we allow Ctrl-C handling */
1203 tty
.c_lflag
&= ~ISIG
;
1204 tty
.c_cflag
&= ~(CSIZE
|PARENB
);
1207 tty
.c_cc
[VTIME
] = 0;
1209 tcsetattr (0, TCSANOW
, &tty
);
1213 fcntl(0, F_SETFL
, O_NONBLOCK
);
1218 static void dumb_update(DisplayState
*ds
, int x
, int y
, int w
, int h
)
1222 static void dumb_resize(DisplayState
*ds
, int w
, int h
)
1226 static void dumb_refresh(DisplayState
*ds
)
1228 vga_update_display();
1231 void dumb_display_init(DisplayState
*ds
)
1236 ds
->dpy_update
= dumb_update
;
1237 ds
->dpy_resize
= dumb_resize
;
1238 ds
->dpy_refresh
= dumb_refresh
;
1241 #if !defined(CONFIG_SOFTMMU)
1242 /***********************************************************/
1243 /* cpu signal handler */
1244 static void host_segv_handler(int host_signum
, siginfo_t
*info
,
1247 if (cpu_signal_handler(host_signum
, info
, puc
))
1254 /***********************************************************/
1257 #define MAX_IO_HANDLERS 64
1259 typedef struct IOHandlerRecord
{
1261 IOCanRWHandler
*fd_can_read
;
1262 IOReadHandler
*fd_read
;
1264 /* temporary data */
1267 struct IOHandlerRecord
*next
;
1270 static IOHandlerRecord
*first_io_handler
;
1272 int qemu_add_fd_read_handler(int fd
, IOCanRWHandler
*fd_can_read
,
1273 IOReadHandler
*fd_read
, void *opaque
)
1275 IOHandlerRecord
*ioh
;
1277 ioh
= qemu_mallocz(sizeof(IOHandlerRecord
));
1281 ioh
->fd_can_read
= fd_can_read
;
1282 ioh
->fd_read
= fd_read
;
1283 ioh
->opaque
= opaque
;
1284 ioh
->next
= first_io_handler
;
1285 first_io_handler
= ioh
;
1289 void qemu_del_fd_read_handler(int fd
)
1291 IOHandlerRecord
**pioh
, *ioh
;
1293 pioh
= &first_io_handler
;
1298 if (ioh
->fd
== fd
) {
1306 /***********************************************************/
1307 /* savevm/loadvm support */
1309 void qemu_put_buffer(QEMUFile
*f
, const uint8_t *buf
, int size
)
1311 fwrite(buf
, 1, size
, f
);
1314 void qemu_put_byte(QEMUFile
*f
, int v
)
1319 void qemu_put_be16(QEMUFile
*f
, unsigned int v
)
1321 qemu_put_byte(f
, v
>> 8);
1322 qemu_put_byte(f
, v
);
1325 void qemu_put_be32(QEMUFile
*f
, unsigned int v
)
1327 qemu_put_byte(f
, v
>> 24);
1328 qemu_put_byte(f
, v
>> 16);
1329 qemu_put_byte(f
, v
>> 8);
1330 qemu_put_byte(f
, v
);
1333 void qemu_put_be64(QEMUFile
*f
, uint64_t v
)
1335 qemu_put_be32(f
, v
>> 32);
1336 qemu_put_be32(f
, v
);
1339 int qemu_get_buffer(QEMUFile
*f
, uint8_t *buf
, int size
)
1341 return fread(buf
, 1, size
, f
);
1344 int qemu_get_byte(QEMUFile
*f
)
1354 unsigned int qemu_get_be16(QEMUFile
*f
)
1357 v
= qemu_get_byte(f
) << 8;
1358 v
|= qemu_get_byte(f
);
1362 unsigned int qemu_get_be32(QEMUFile
*f
)
1365 v
= qemu_get_byte(f
) << 24;
1366 v
|= qemu_get_byte(f
) << 16;
1367 v
|= qemu_get_byte(f
) << 8;
1368 v
|= qemu_get_byte(f
);
1372 uint64_t qemu_get_be64(QEMUFile
*f
)
1375 v
= (uint64_t)qemu_get_be32(f
) << 32;
1376 v
|= qemu_get_be32(f
);
1380 int64_t qemu_ftell(QEMUFile
*f
)
1385 int64_t qemu_fseek(QEMUFile
*f
, int64_t pos
, int whence
)
1387 if (fseek(f
, pos
, whence
) < 0)
1392 typedef struct SaveStateEntry
{
1396 SaveStateHandler
*save_state
;
1397 LoadStateHandler
*load_state
;
1399 struct SaveStateEntry
*next
;
1402 static SaveStateEntry
*first_se
;
1404 int register_savevm(const char *idstr
,
1407 SaveStateHandler
*save_state
,
1408 LoadStateHandler
*load_state
,
1411 SaveStateEntry
*se
, **pse
;
1413 se
= qemu_malloc(sizeof(SaveStateEntry
));
1416 pstrcpy(se
->idstr
, sizeof(se
->idstr
), idstr
);
1417 se
->instance_id
= instance_id
;
1418 se
->version_id
= version_id
;
1419 se
->save_state
= save_state
;
1420 se
->load_state
= load_state
;
1421 se
->opaque
= opaque
;
1424 /* add at the end of list */
1426 while (*pse
!= NULL
)
1427 pse
= &(*pse
)->next
;
1432 #define QEMU_VM_FILE_MAGIC 0x5145564d
1433 #define QEMU_VM_FILE_VERSION 0x00000001
1435 int qemu_savevm(const char *filename
)
1439 int len
, len_pos
, cur_pos
, saved_vm_running
, ret
;
1441 saved_vm_running
= vm_running
;
1444 f
= fopen(filename
, "wb");
1450 qemu_put_be32(f
, QEMU_VM_FILE_MAGIC
);
1451 qemu_put_be32(f
, QEMU_VM_FILE_VERSION
);
1453 for(se
= first_se
; se
!= NULL
; se
= se
->next
) {
1455 len
= strlen(se
->idstr
);
1456 qemu_put_byte(f
, len
);
1457 qemu_put_buffer(f
, se
->idstr
, len
);
1459 qemu_put_be32(f
, se
->instance_id
);
1460 qemu_put_be32(f
, se
->version_id
);
1462 /* record size: filled later */
1464 qemu_put_be32(f
, 0);
1466 se
->save_state(f
, se
->opaque
);
1468 /* fill record size */
1470 len
= ftell(f
) - len_pos
- 4;
1471 fseek(f
, len_pos
, SEEK_SET
);
1472 qemu_put_be32(f
, len
);
1473 fseek(f
, cur_pos
, SEEK_SET
);
1479 if (saved_vm_running
)
1484 static SaveStateEntry
*find_se(const char *idstr
, int instance_id
)
1488 for(se
= first_se
; se
!= NULL
; se
= se
->next
) {
1489 if (!strcmp(se
->idstr
, idstr
) &&
1490 instance_id
== se
->instance_id
)
1496 int qemu_loadvm(const char *filename
)
1500 int len
, cur_pos
, ret
, instance_id
, record_len
, version_id
;
1501 int saved_vm_running
;
1505 saved_vm_running
= vm_running
;
1508 f
= fopen(filename
, "rb");
1514 v
= qemu_get_be32(f
);
1515 if (v
!= QEMU_VM_FILE_MAGIC
)
1517 v
= qemu_get_be32(f
);
1518 if (v
!= QEMU_VM_FILE_VERSION
) {
1525 #if defined (DO_TB_FLUSH)
1526 tb_flush(global_env
);
1528 len
= qemu_get_byte(f
);
1531 qemu_get_buffer(f
, idstr
, len
);
1533 instance_id
= qemu_get_be32(f
);
1534 version_id
= qemu_get_be32(f
);
1535 record_len
= qemu_get_be32(f
);
1537 printf("idstr=%s instance=0x%x version=%d len=%d\n",
1538 idstr
, instance_id
, version_id
, record_len
);
1541 se
= find_se(idstr
, instance_id
);
1543 fprintf(stderr
, "qemu: warning: instance 0x%x of device '%s' not present in current VM\n",
1544 instance_id
, idstr
);
1546 ret
= se
->load_state(f
, se
->opaque
, version_id
);
1548 fprintf(stderr
, "qemu: warning: error while loading state for instance 0x%x of device '%s'\n",
1549 instance_id
, idstr
);
1552 /* always seek to exact end of record */
1553 qemu_fseek(f
, cur_pos
+ record_len
, SEEK_SET
);
1558 if (saved_vm_running
)
1563 /***********************************************************/
1564 /* cpu save/restore */
1566 #if defined(TARGET_I386)
1568 static void cpu_put_seg(QEMUFile
*f
, SegmentCache
*dt
)
1570 qemu_put_be32(f
, (uint32_t)dt
->base
);
1571 qemu_put_be32(f
, dt
->limit
);
1572 qemu_put_be32(f
, dt
->flags
);
1575 static void cpu_get_seg(QEMUFile
*f
, SegmentCache
*dt
)
1577 dt
->base
= (uint8_t *)qemu_get_be32(f
);
1578 dt
->limit
= qemu_get_be32(f
);
1579 dt
->flags
= qemu_get_be32(f
);
1582 void cpu_save(QEMUFile
*f
, void *opaque
)
1584 CPUState
*env
= opaque
;
1585 uint16_t fptag
, fpus
, fpuc
;
1589 for(i
= 0; i
< 8; i
++)
1590 qemu_put_be32s(f
, &env
->regs
[i
]);
1591 qemu_put_be32s(f
, &env
->eip
);
1592 qemu_put_be32s(f
, &env
->eflags
);
1593 qemu_put_be32s(f
, &env
->eflags
);
1594 hflags
= env
->hflags
; /* XXX: suppress most of the redundant hflags */
1595 qemu_put_be32s(f
, &hflags
);
1599 fpus
= (env
->fpus
& ~0x3800) | (env
->fpstt
& 0x7) << 11;
1601 for (i
=7; i
>=0; i
--) {
1603 if (env
->fptags
[i
]) {
1608 qemu_put_be16s(f
, &fpuc
);
1609 qemu_put_be16s(f
, &fpus
);
1610 qemu_put_be16s(f
, &fptag
);
1612 for(i
= 0; i
< 8; i
++) {
1615 cpu_get_fp80(&mant
, &exp
, env
->fpregs
[i
]);
1616 qemu_put_be64(f
, mant
);
1617 qemu_put_be16(f
, exp
);
1620 for(i
= 0; i
< 6; i
++)
1621 cpu_put_seg(f
, &env
->segs
[i
]);
1622 cpu_put_seg(f
, &env
->ldt
);
1623 cpu_put_seg(f
, &env
->tr
);
1624 cpu_put_seg(f
, &env
->gdt
);
1625 cpu_put_seg(f
, &env
->idt
);
1627 qemu_put_be32s(f
, &env
->sysenter_cs
);
1628 qemu_put_be32s(f
, &env
->sysenter_esp
);
1629 qemu_put_be32s(f
, &env
->sysenter_eip
);
1631 qemu_put_be32s(f
, &env
->cr
[0]);
1632 qemu_put_be32s(f
, &env
->cr
[2]);
1633 qemu_put_be32s(f
, &env
->cr
[3]);
1634 qemu_put_be32s(f
, &env
->cr
[4]);
1636 for(i
= 0; i
< 8; i
++)
1637 qemu_put_be32s(f
, &env
->dr
[i
]);
1640 qemu_put_be32s(f
, &env
->a20_mask
);
1643 int cpu_load(QEMUFile
*f
, void *opaque
, int version_id
)
1645 CPUState
*env
= opaque
;
1648 uint16_t fpus
, fpuc
, fptag
;
1650 if (version_id
!= 1)
1652 for(i
= 0; i
< 8; i
++)
1653 qemu_get_be32s(f
, &env
->regs
[i
]);
1654 qemu_get_be32s(f
, &env
->eip
);
1655 qemu_get_be32s(f
, &env
->eflags
);
1656 qemu_get_be32s(f
, &env
->eflags
);
1657 qemu_get_be32s(f
, &hflags
);
1659 qemu_get_be16s(f
, &fpuc
);
1660 qemu_get_be16s(f
, &fpus
);
1661 qemu_get_be16s(f
, &fptag
);
1663 for(i
= 0; i
< 8; i
++) {
1666 mant
= qemu_get_be64(f
);
1667 exp
= qemu_get_be16(f
);
1668 env
->fpregs
[i
] = cpu_set_fp80(mant
, exp
);
1672 env
->fpstt
= (fpus
>> 11) & 7;
1673 env
->fpus
= fpus
& ~0x3800;
1674 for(i
= 0; i
< 8; i
++) {
1675 env
->fptags
[i
] = ((fptag
& 3) == 3);
1679 for(i
= 0; i
< 6; i
++)
1680 cpu_get_seg(f
, &env
->segs
[i
]);
1681 cpu_get_seg(f
, &env
->ldt
);
1682 cpu_get_seg(f
, &env
->tr
);
1683 cpu_get_seg(f
, &env
->gdt
);
1684 cpu_get_seg(f
, &env
->idt
);
1686 qemu_get_be32s(f
, &env
->sysenter_cs
);
1687 qemu_get_be32s(f
, &env
->sysenter_esp
);
1688 qemu_get_be32s(f
, &env
->sysenter_eip
);
1690 qemu_get_be32s(f
, &env
->cr
[0]);
1691 qemu_get_be32s(f
, &env
->cr
[2]);
1692 qemu_get_be32s(f
, &env
->cr
[3]);
1693 qemu_get_be32s(f
, &env
->cr
[4]);
1695 for(i
= 0; i
< 8; i
++)
1696 qemu_get_be32s(f
, &env
->dr
[i
]);
1699 qemu_get_be32s(f
, &env
->a20_mask
);
1701 /* XXX: compute hflags from scratch, except for CPL and IIF */
1702 env
->hflags
= hflags
;
1707 #elif defined(TARGET_PPC)
1708 void cpu_save(QEMUFile
*f
, void *opaque
)
1712 int cpu_load(QEMUFile
*f
, void *opaque
, int version_id
)
1718 #warning No CPU save/restore functions
1722 /***********************************************************/
1723 /* ram save/restore */
1725 /* we just avoid storing empty pages */
1726 static void ram_put_page(QEMUFile
*f
, const uint8_t *buf
, int len
)
1731 for(i
= 1; i
< len
; i
++) {
1735 qemu_put_byte(f
, 1);
1736 qemu_put_byte(f
, v
);
1739 qemu_put_byte(f
, 0);
1740 qemu_put_buffer(f
, buf
, len
);
1743 static int ram_get_page(QEMUFile
*f
, uint8_t *buf
, int len
)
1747 v
= qemu_get_byte(f
);
1750 if (qemu_get_buffer(f
, buf
, len
) != len
)
1754 v
= qemu_get_byte(f
);
1755 memset(buf
, v
, len
);
1763 static void ram_save(QEMUFile
*f
, void *opaque
)
1766 qemu_put_be32(f
, phys_ram_size
);
1767 for(i
= 0; i
< phys_ram_size
; i
+= TARGET_PAGE_SIZE
) {
1768 ram_put_page(f
, phys_ram_base
+ i
, TARGET_PAGE_SIZE
);
1772 static int ram_load(QEMUFile
*f
, void *opaque
, int version_id
)
1776 if (version_id
!= 1)
1778 if (qemu_get_be32(f
) != phys_ram_size
)
1780 for(i
= 0; i
< phys_ram_size
; i
+= TARGET_PAGE_SIZE
) {
1781 ret
= ram_get_page(f
, phys_ram_base
+ i
, TARGET_PAGE_SIZE
);
1788 /***********************************************************/
1789 /* main execution loop */
1791 void gui_update(void *opaque
)
1793 display_state
.dpy_refresh(&display_state
);
1794 qemu_mod_timer(gui_timer
, GUI_REFRESH_INTERVAL
+ qemu_get_clock(rt_clock
));
1797 /* XXX: support several handlers */
1798 VMStopHandler
*vm_stop_cb
;
1799 VMStopHandler
*vm_stop_opaque
;
1801 int qemu_add_vm_stop_handler(VMStopHandler
*cb
, void *opaque
)
1804 vm_stop_opaque
= opaque
;
1808 void qemu_del_vm_stop_handler(VMStopHandler
*cb
, void *opaque
)
1821 void vm_stop(int reason
)
1824 cpu_disable_ticks();
1828 vm_stop_cb(vm_stop_opaque
, reason
);
1834 /* reset/shutdown handler */
1836 typedef struct QEMUResetEntry
{
1837 QEMUResetHandler
*func
;
1839 struct QEMUResetEntry
*next
;
1842 static QEMUResetEntry
*first_reset_entry
;
1843 static int reset_requested
;
1844 static int shutdown_requested
;
1846 void qemu_register_reset(QEMUResetHandler
*func
, void *opaque
)
1848 QEMUResetEntry
**pre
, *re
;
1850 pre
= &first_reset_entry
;
1851 while (*pre
!= NULL
)
1852 pre
= &(*pre
)->next
;
1853 re
= qemu_mallocz(sizeof(QEMUResetEntry
));
1855 re
->opaque
= opaque
;
1860 void qemu_system_reset(void)
1864 /* reset all devices */
1865 for(re
= first_reset_entry
; re
!= NULL
; re
= re
->next
) {
1866 re
->func(re
->opaque
);
1870 void qemu_system_reset_request(void)
1872 reset_requested
= 1;
1873 cpu_interrupt(cpu_single_env
, CPU_INTERRUPT_EXIT
);
1876 void qemu_system_shutdown_request(void)
1878 shutdown_requested
= 1;
1879 cpu_interrupt(cpu_single_env
, CPU_INTERRUPT_EXIT
);
1882 static void main_cpu_reset(void *opaque
)
1885 CPUState
*env
= opaque
;
1893 struct pollfd ufds
[MAX_IO_HANDLERS
+ 1], *pf
;
1894 IOHandlerRecord
*ioh
, *ioh_next
;
1899 CPUState
*env
= global_env
;
1903 ret
= cpu_exec(env
);
1904 if (shutdown_requested
) {
1905 ret
= EXCP_INTERRUPT
;
1908 if (reset_requested
) {
1909 reset_requested
= 0;
1910 qemu_system_reset();
1911 ret
= EXCP_INTERRUPT
;
1913 if (ret
== EXCP_DEBUG
) {
1914 vm_stop(EXCP_DEBUG
);
1916 /* if hlt instruction, we wait until the next IRQ */
1917 /* XXX: use timeout computed from timers */
1918 if (ret
== EXCP_HLT
)
1931 /* poll any events */
1932 /* XXX: separate device handlers from system ones */
1934 for(ioh
= first_io_handler
; ioh
!= NULL
; ioh
= ioh
->next
) {
1935 if (!ioh
->fd_can_read
) {
1938 pf
->events
= POLLIN
;
1942 max_size
= ioh
->fd_can_read(ioh
->opaque
);
1944 if (max_size
> sizeof(buf
))
1945 max_size
= sizeof(buf
);
1947 pf
->events
= POLLIN
;
1954 ioh
->max_size
= max_size
;
1957 ret
= poll(ufds
, pf
- ufds
, timeout
);
1959 /* XXX: better handling of removal */
1960 for(ioh
= first_io_handler
; ioh
!= NULL
; ioh
= ioh_next
) {
1961 ioh_next
= ioh
->next
;
1964 if (pf
->revents
& POLLIN
) {
1965 if (ioh
->max_size
== 0) {
1966 /* just a read event */
1967 ioh
->fd_read(ioh
->opaque
, NULL
, 0);
1969 n
= read(ioh
->fd
, buf
, ioh
->max_size
);
1971 ioh
->fd_read(ioh
->opaque
, buf
, n
);
1972 } else if (errno
!= EAGAIN
) {
1973 ioh
->fd_read(ioh
->opaque
, NULL
, -errno
);
1981 #if defined(CONFIG_SLIRP)
1982 /* XXX: merge with poll() */
1984 fd_set rfds
, wfds
, xfds
;
1992 slirp_select_fill(&nfds
, &rfds
, &wfds
, &xfds
);
1995 ret
= select(nfds
+ 1, &rfds
, &wfds
, &xfds
, &tv
);
1997 slirp_select_poll(&rfds
, &wfds
, &xfds
);
2005 qemu_run_timers(&active_timers
[QEMU_TIMER_VIRTUAL
],
2006 qemu_get_clock(vm_clock
));
2008 if (audio_enabled
) {
2009 /* XXX: add explicit timer */
2013 /* run dma transfers, if any */
2017 /* real time timers */
2018 qemu_run_timers(&active_timers
[QEMU_TIMER_REALTIME
],
2019 qemu_get_clock(rt_clock
));
2021 cpu_disable_ticks();
2027 printf("QEMU PC emulator version " QEMU_VERSION
", Copyright (c) 2003-2004 Fabrice Bellard\n"
2028 "usage: %s [options] [disk_image]\n"
2030 "'disk_image' is a raw hard image image for IDE hard disk 0\n"
2032 "Standard options:\n"
2033 "-fda/-fdb file use 'file' as floppy disk 0/1 image\n"
2034 "-hda/-hdb file use 'file' as IDE hard disk 0/1 image\n"
2035 "-hdc/-hdd file use 'file' as IDE hard disk 2/3 image\n"
2036 "-cdrom file use 'file' as IDE cdrom image (cdrom is ide1 master)\n"
2037 "-boot [a|b|c|d] boot on floppy (a, b), hard disk (c) or CD-ROM (d)\n"
2038 "-snapshot write to temporary files instead of disk image files\n"
2039 "-m megs set virtual RAM size to megs MB [default=%d]\n"
2040 "-nographic disable graphical output and redirect serial I/Os to console\n"
2041 "-enable-audio enable audio support\n"
2042 "-localtime set the real time clock to local time [default=utc]\n"
2044 "-prep Simulate a PREP system (default is PowerMAC)\n"
2047 "Network options:\n"
2048 "-nics n simulate 'n' network cards [default=1]\n"
2049 "-macaddr addr set the mac address of the first interface\n"
2050 "-n script set tap/tun network init script [default=%s]\n"
2051 "-tun-fd fd use this fd as already opened tap/tun interface\n"
2053 "-user-net use user mode network stack [default if no tap/tun script]\n"
2055 "-dummy-net use dummy network stack\n"
2057 "Linux boot specific:\n"
2058 "-kernel bzImage use 'bzImage' as kernel image\n"
2059 "-append cmdline use 'cmdline' as kernel command line\n"
2060 "-initrd file use 'file' as initial ram disk\n"
2062 "Debug/Expert options:\n"
2063 "-S freeze CPU at startup (use 'c' to start execution)\n"
2064 "-s wait gdb connection to port %d\n"
2065 "-p port change gdb connection port\n"
2066 "-d item1,... output log to %s (use -d ? for a list of log items)\n"
2067 "-hdachs c,h,s force hard disk 0 geometry (usually qemu can guess it)\n"
2068 "-L path set the directory for the BIOS and VGA BIOS\n"
2069 #ifdef USE_CODE_COPY
2070 "-no-code-copy disable code copy acceleration\n"
2073 "-isa simulate an ISA-only system (default is PCI system)\n"
2076 "During emulation, use C-a h to get terminal commands:\n",
2077 #ifdef CONFIG_SOFTMMU
2083 DEFAULT_NETWORK_SCRIPT
,
2084 DEFAULT_GDBSTUB_PORT
,
2087 #ifndef CONFIG_SOFTMMU
2089 "NOTE: this version of QEMU is faster but it needs slightly patched OSes to\n"
2090 "work. Please use the 'qemu' executable to have a more accurate (but slower)\n"
2096 #define HAS_ARG 0x0001
2109 QEMU_OPTION_snapshot
,
2111 QEMU_OPTION_nographic
,
2112 QEMU_OPTION_enable_audio
,
2115 QEMU_OPTION_macaddr
,
2118 QEMU_OPTION_user_net
,
2119 QEMU_OPTION_dummy_net
,
2131 QEMU_OPTION_no_code_copy
,
2135 QEMU_OPTION_localtime
,
2136 QEMU_OPTION_cirrusvga
,
2139 typedef struct QEMUOption
{
2145 const QEMUOption qemu_options
[] = {
2146 { "h", 0, QEMU_OPTION_h
},
2148 { "fda", HAS_ARG
, QEMU_OPTION_fda
},
2149 { "fdb", HAS_ARG
, QEMU_OPTION_fdb
},
2150 { "hda", HAS_ARG
, QEMU_OPTION_hda
},
2151 { "hdb", HAS_ARG
, QEMU_OPTION_hdb
},
2152 { "hdc", HAS_ARG
, QEMU_OPTION_hdc
},
2153 { "hdd", HAS_ARG
, QEMU_OPTION_hdd
},
2154 { "cdrom", HAS_ARG
, QEMU_OPTION_cdrom
},
2155 { "boot", HAS_ARG
, QEMU_OPTION_boot
},
2156 { "snapshot", 0, QEMU_OPTION_snapshot
},
2157 { "m", HAS_ARG
, QEMU_OPTION_m
},
2158 { "nographic", 0, QEMU_OPTION_nographic
},
2159 { "enable-audio", 0, QEMU_OPTION_enable_audio
},
2161 { "nics", HAS_ARG
, QEMU_OPTION_nics
},
2162 { "macaddr", HAS_ARG
, QEMU_OPTION_macaddr
},
2163 { "n", HAS_ARG
, QEMU_OPTION_n
},
2164 { "tun-fd", HAS_ARG
, QEMU_OPTION_tun_fd
},
2166 { "user-net", 0, QEMU_OPTION_user_net
},
2168 { "dummy-net", 0, QEMU_OPTION_dummy_net
},
2170 { "kernel", HAS_ARG
, QEMU_OPTION_kernel
},
2171 { "append", HAS_ARG
, QEMU_OPTION_append
},
2172 { "initrd", HAS_ARG
, QEMU_OPTION_initrd
},
2174 { "S", 0, QEMU_OPTION_S
},
2175 { "s", 0, QEMU_OPTION_s
},
2176 { "p", HAS_ARG
, QEMU_OPTION_p
},
2177 { "d", HAS_ARG
, QEMU_OPTION_d
},
2178 { "hdachs", HAS_ARG
, QEMU_OPTION_hdachs
},
2179 { "L", HAS_ARG
, QEMU_OPTION_L
},
2180 { "no-code-copy", 0, QEMU_OPTION_no_code_copy
},
2182 { "prep", 0, QEMU_OPTION_prep
},
2184 { "localtime", 0, QEMU_OPTION_localtime
},
2185 { "isa", 0, QEMU_OPTION_isa
},
2187 /* temporary options */
2188 { "pci", 0, QEMU_OPTION_pci
},
2189 { "cirrusvga", 0, QEMU_OPTION_cirrusvga
},
2193 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2195 /* this stack is only used during signal handling */
2196 #define SIGNAL_STACK_SIZE 32768
2198 static uint8_t *signal_stack
;
2202 #define NET_IF_TUN 0
2203 #define NET_IF_USER 1
2204 #define NET_IF_DUMMY 2
2206 int main(int argc
, char **argv
)
2208 #ifdef CONFIG_GDBSTUB
2209 int use_gdbstub
, gdbstub_port
;
2212 int snapshot
, linux_boot
;
2214 const char *initrd_filename
;
2215 const char *hd_filename
[MAX_DISKS
], *fd_filename
[MAX_FD
];
2216 const char *kernel_filename
, *kernel_cmdline
;
2217 DisplayState
*ds
= &display_state
;
2218 int cyls
, heads
, secs
;
2219 int start_emulation
= 1;
2221 int net_if_type
, nb_tun_fds
, tun_fds
[MAX_NICS
];
2223 const char *r
, *optarg
;
2225 #if !defined(CONFIG_SOFTMMU)
2226 /* we never want that malloc() uses mmap() */
2227 mallopt(M_MMAP_THRESHOLD
, 4096 * 1024);
2229 initrd_filename
= NULL
;
2230 for(i
= 0; i
< MAX_FD
; i
++)
2231 fd_filename
[i
] = NULL
;
2232 for(i
= 0; i
< MAX_DISKS
; i
++)
2233 hd_filename
[i
] = NULL
;
2234 ram_size
= DEFAULT_RAM_SIZE
* 1024 * 1024;
2235 vga_ram_size
= VGA_RAM_SIZE
;
2236 bios_size
= BIOS_SIZE
;
2237 pstrcpy(network_script
, sizeof(network_script
), DEFAULT_NETWORK_SCRIPT
);
2238 #ifdef CONFIG_GDBSTUB
2240 gdbstub_port
= DEFAULT_GDBSTUB_PORT
;
2244 kernel_filename
= NULL
;
2245 kernel_cmdline
= "";
2247 cyls
= heads
= secs
= 0;
2252 /* default mac address of the first network interface */
2266 hd_filename
[0] = argv
[optind
++];
2268 const QEMUOption
*popt
;
2271 popt
= qemu_options
;
2274 fprintf(stderr
, "%s: invalid option -- '%s'\n",
2278 if (!strcmp(popt
->name
, r
+ 1))
2282 if (popt
->flags
& HAS_ARG
) {
2283 if (optind
>= argc
) {
2284 fprintf(stderr
, "%s: option '%s' requires an argument\n",
2288 optarg
= argv
[optind
++];
2293 switch(popt
->index
) {
2294 case QEMU_OPTION_initrd
:
2295 initrd_filename
= optarg
;
2297 case QEMU_OPTION_hda
:
2298 hd_filename
[0] = optarg
;
2300 case QEMU_OPTION_hdb
:
2301 hd_filename
[1] = optarg
;
2303 case QEMU_OPTION_snapshot
:
2306 case QEMU_OPTION_hdachs
:
2310 cyls
= strtol(p
, (char **)&p
, 0);
2314 heads
= strtol(p
, (char **)&p
, 0);
2318 secs
= strtol(p
, (char **)&p
, 0);
2325 case QEMU_OPTION_nographic
:
2328 case QEMU_OPTION_kernel
:
2329 kernel_filename
= optarg
;
2331 case QEMU_OPTION_append
:
2332 kernel_cmdline
= optarg
;
2334 case QEMU_OPTION_tun_fd
:
2338 net_if_type
= NET_IF_TUN
;
2339 if (nb_tun_fds
< MAX_NICS
) {
2340 fd
= strtol(optarg
, (char **)&p
, 0);
2342 fprintf(stderr
, "qemu: invalid fd for network interface %d\n", nb_tun_fds
);
2345 tun_fds
[nb_tun_fds
++] = fd
;
2349 case QEMU_OPTION_hdc
:
2350 hd_filename
[2] = optarg
;
2353 case QEMU_OPTION_hdd
:
2354 hd_filename
[3] = optarg
;
2356 case QEMU_OPTION_cdrom
:
2357 hd_filename
[2] = optarg
;
2360 case QEMU_OPTION_boot
:
2361 boot_device
= optarg
[0];
2362 if (boot_device
!= 'a' && boot_device
!= 'b' &&
2363 boot_device
!= 'c' && boot_device
!= 'd') {
2364 fprintf(stderr
, "qemu: invalid boot device '%c'\n", boot_device
);
2368 case QEMU_OPTION_fda
:
2369 fd_filename
[0] = optarg
;
2371 case QEMU_OPTION_fdb
:
2372 fd_filename
[1] = optarg
;
2374 case QEMU_OPTION_no_code_copy
:
2375 code_copy_enabled
= 0;
2377 case QEMU_OPTION_nics
:
2378 nb_nics
= atoi(optarg
);
2379 if (nb_nics
< 0 || nb_nics
> MAX_NICS
) {
2380 fprintf(stderr
, "qemu: invalid number of network interfaces\n");
2384 case QEMU_OPTION_macaddr
:
2389 for(i
= 0; i
< 6; i
++) {
2390 macaddr
[i
] = strtol(p
, (char **)&p
, 16);
2397 fprintf(stderr
, "qemu: invalid syntax for ethernet address\n");
2405 case QEMU_OPTION_user_net
:
2406 net_if_type
= NET_IF_USER
;
2408 case QEMU_OPTION_dummy_net
:
2409 net_if_type
= NET_IF_DUMMY
;
2411 case QEMU_OPTION_enable_audio
:
2418 ram_size
= atoi(optarg
) * 1024 * 1024;
2421 if (ram_size
> PHYS_RAM_MAX_SIZE
) {
2422 fprintf(stderr
, "qemu: at most %d MB RAM can be simulated\n",
2423 PHYS_RAM_MAX_SIZE
/ (1024 * 1024));
2432 mask
= cpu_str_to_log_mask(optarg
);
2434 printf("Log items (comma separated):\n");
2435 for(item
= cpu_log_items
; item
->mask
!= 0; item
++) {
2436 printf("%-10s %s\n", item
->name
, item
->help
);
2444 pstrcpy(network_script
, sizeof(network_script
), optarg
);
2446 #ifdef CONFIG_GDBSTUB
2451 gdbstub_port
= atoi(optarg
);
2458 start_emulation
= 0;
2460 case QEMU_OPTION_pci
:
2463 case QEMU_OPTION_isa
:
2466 case QEMU_OPTION_prep
:
2469 case QEMU_OPTION_localtime
:
2472 case QEMU_OPTION_cirrusvga
:
2473 cirrus_vga_enabled
= 1;
2479 linux_boot
= (kernel_filename
!= NULL
);
2481 if (!linux_boot
&& hd_filename
[0] == '\0' && hd_filename
[2] == '\0' &&
2482 fd_filename
[0] == '\0')
2485 /* boot to cd by default if no hard disk */
2486 if (hd_filename
[0] == '\0' && boot_device
== 'c') {
2487 if (fd_filename
[0] != '\0')
2493 #if !defined(CONFIG_SOFTMMU)
2494 /* must avoid mmap() usage of glibc by setting a buffer "by hand" */
2496 static uint8_t stdout_buf
[4096];
2497 setvbuf(stdout
, stdout_buf
, _IOLBF
, sizeof(stdout_buf
));
2500 setvbuf(stdout
, NULL
, _IOLBF
, 0);
2503 /* init host network redirectors */
2504 if (net_if_type
== -1) {
2505 net_if_type
= NET_IF_TUN
;
2506 #if defined(CONFIG_SLIRP)
2507 if (access(network_script
, R_OK
) < 0) {
2508 net_if_type
= NET_IF_USER
;
2513 for(i
= 0; i
< nb_nics
; i
++) {
2514 NetDriverState
*nd
= &nd_table
[i
];
2516 /* init virtual mac address */
2517 nd
->macaddr
[0] = macaddr
[0];
2518 nd
->macaddr
[1] = macaddr
[1];
2519 nd
->macaddr
[2] = macaddr
[2];
2520 nd
->macaddr
[3] = macaddr
[3];
2521 nd
->macaddr
[4] = macaddr
[4];
2522 nd
->macaddr
[5] = macaddr
[5] + i
;
2523 switch(net_if_type
) {
2524 #if defined(CONFIG_SLIRP)
2529 #if !defined(_WIN32)
2531 if (i
< nb_tun_fds
) {
2532 net_fd_init(nd
, tun_fds
[i
]);
2534 if (net_tun_init(nd
) < 0)
2546 /* init the memory */
2547 phys_ram_size
= ram_size
+ vga_ram_size
+ bios_size
;
2549 #ifdef CONFIG_SOFTMMU
2551 /* mallocs are always aligned on BSD. */
2552 phys_ram_base
= malloc(phys_ram_size
);
2554 phys_ram_base
= memalign(TARGET_PAGE_SIZE
, phys_ram_size
);
2556 if (!phys_ram_base
) {
2557 fprintf(stderr
, "Could not allocate physical memory\n");
2561 /* as we must map the same page at several addresses, we must use
2566 tmpdir
= getenv("QEMU_TMPDIR");
2569 snprintf(phys_ram_file
, sizeof(phys_ram_file
), "%s/vlXXXXXX", tmpdir
);
2570 if (mkstemp(phys_ram_file
) < 0) {
2571 fprintf(stderr
, "Could not create temporary memory file '%s'\n",
2575 phys_ram_fd
= open(phys_ram_file
, O_CREAT
| O_TRUNC
| O_RDWR
, 0600);
2576 if (phys_ram_fd
< 0) {
2577 fprintf(stderr
, "Could not open temporary memory file '%s'\n",
2581 ftruncate(phys_ram_fd
, phys_ram_size
);
2582 unlink(phys_ram_file
);
2583 phys_ram_base
= mmap(get_mmap_addr(phys_ram_size
),
2585 PROT_WRITE
| PROT_READ
, MAP_SHARED
| MAP_FIXED
,
2587 if (phys_ram_base
== MAP_FAILED
) {
2588 fprintf(stderr
, "Could not map physical memory\n");
2594 /* we always create the cdrom drive, even if no disk is there */
2596 bs_table
[2] = bdrv_new("cdrom");
2597 bdrv_set_type_hint(bs_table
[2], BDRV_TYPE_CDROM
);
2600 /* open the virtual block devices */
2601 for(i
= 0; i
< MAX_DISKS
; i
++) {
2602 if (hd_filename
[i
]) {
2605 snprintf(buf
, sizeof(buf
), "hd%c", i
+ 'a');
2606 bs_table
[i
] = bdrv_new(buf
);
2608 if (bdrv_open(bs_table
[i
], hd_filename
[i
], snapshot
) < 0) {
2609 fprintf(stderr
, "qemu: could not open hard disk image '%s\n",
2613 if (i
== 0 && cyls
!= 0)
2614 bdrv_set_geometry_hint(bs_table
[i
], cyls
, heads
, secs
);
2618 /* we always create at least one floppy disk */
2619 fd_table
[0] = bdrv_new("fda");
2620 bdrv_set_type_hint(fd_table
[0], BDRV_TYPE_FLOPPY
);
2622 for(i
= 0; i
< MAX_FD
; i
++) {
2623 if (fd_filename
[i
]) {
2626 snprintf(buf
, sizeof(buf
), "fd%c", i
+ 'a');
2627 fd_table
[i
] = bdrv_new(buf
);
2628 bdrv_set_type_hint(fd_table
[i
], BDRV_TYPE_FLOPPY
);
2630 if (fd_filename
[i
] != '\0') {
2631 if (bdrv_open(fd_table
[i
], fd_filename
[i
], snapshot
) < 0) {
2632 fprintf(stderr
, "qemu: could not open floppy disk image '%s'\n",
2640 /* init CPU state */
2643 cpu_single_env
= env
;
2645 register_savevm("timer", 0, 1, timer_save
, timer_load
, env
);
2646 register_savevm("cpu", 0, 1, cpu_save
, cpu_load
, env
);
2647 register_savevm("ram", 0, 1, ram_save
, ram_load
, NULL
);
2648 qemu_register_reset(main_cpu_reset
, global_env
);
2651 cpu_calibrate_ticks();
2655 dumb_display_init(ds
);
2658 sdl_display_init(ds
);
2660 dumb_display_init(ds
);
2664 /* setup cpu signal handlers for MMU / self modifying code handling */
2665 #if !defined(CONFIG_SOFTMMU)
2667 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2670 signal_stack
= memalign(16, SIGNAL_STACK_SIZE
);
2671 stk
.ss_sp
= signal_stack
;
2672 stk
.ss_size
= SIGNAL_STACK_SIZE
;
2675 if (sigaltstack(&stk
, NULL
) < 0) {
2676 perror("sigaltstack");
2682 struct sigaction act
;
2684 sigfillset(&act
.sa_mask
);
2685 act
.sa_flags
= SA_SIGINFO
;
2686 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2687 act
.sa_flags
|= SA_ONSTACK
;
2689 act
.sa_sigaction
= host_segv_handler
;
2690 sigaction(SIGSEGV
, &act
, NULL
);
2691 sigaction(SIGBUS
, &act
, NULL
);
2692 #if defined (TARGET_I386) && defined(USE_CODE_COPY)
2693 sigaction(SIGFPE
, &act
, NULL
);
2700 struct sigaction act
;
2701 sigfillset(&act
.sa_mask
);
2703 act
.sa_handler
= SIG_IGN
;
2704 sigaction(SIGPIPE
, &act
, NULL
);
2709 #if defined(TARGET_I386)
2710 pc_init(ram_size
, vga_ram_size
, boot_device
,
2711 ds
, fd_filename
, snapshot
,
2712 kernel_filename
, kernel_cmdline
, initrd_filename
);
2713 #elif defined(TARGET_PPC)
2714 ppc_init(ram_size
, vga_ram_size
, boot_device
,
2715 ds
, fd_filename
, snapshot
,
2716 kernel_filename
, kernel_cmdline
, initrd_filename
);
2719 /* launched after the device init so that it can display or not a
2723 gui_timer
= qemu_new_timer(rt_clock
, gui_update
, NULL
);
2724 qemu_mod_timer(gui_timer
, qemu_get_clock(rt_clock
));
2726 #ifdef CONFIG_GDBSTUB
2728 if (gdbserver_start(gdbstub_port
) < 0) {
2729 fprintf(stderr
, "Could not open gdbserver socket on port %d\n",
2733 printf("Waiting gdb connection on port %d\n", gdbstub_port
);
2737 if (start_emulation
)