]> git.proxmox.com Git - qemu.git/commitdiff
Merge remote-tracking branch 'bonzini/hw-dirs' into staging
authorAnthony Liguori <aliguori@us.ibm.com>
Mon, 8 Apr 2013 18:12:32 +0000 (13:12 -0500)
committerAnthony Liguori <aliguori@us.ibm.com>
Mon, 8 Apr 2013 18:12:33 +0000 (13:12 -0500)
# By Paolo Bonzini
# Via Paolo Bonzini
* bonzini/hw-dirs: (35 commits)
  hw: move private headers to hw/ subdirectories.
  MAINTAINERS: update for source code movement
  hw: move last file to hw/arm/
  hw: move hw/kvm/ to hw/i386/kvm
  hw: move ARM CPU cores to hw/cpu/, configure with default-configs/
  hw: move other devices to hw/misc/, configure with default-configs/
  hw: move NVRAM interfaces to hw/nvram/, configure with default-configs/
  hw: move GPIO interfaces to hw/gpio/, configure with default-configs/
  hw: move interrupt controllers to hw/intc/, configure with default-configs/
  hw: move DMA controllers to hw/dma/, configure with default-configs/
  hw: move VFIO and ivshmem to hw/misc/
  hw: move PCI bridges to hw/pci-* or hw/ARCH
  hw: move SD/MMC devices to hw/sd/, configure with default-configs/
  hw: move timer devices to hw/timer/, configure with default-configs/
  hw: move ISA bridges and devices to hw/isa/, configure with default-configs/
  hw: move char devices to hw/char/, configure via default-configs/
  hw: move more files to hw/xen/
  hw: move SCSI controllers to hw/scsi/, configure via default-configs/
  hw: move SSI controllers to hw/ssi/, configure via default-configs/
  hw: move I2C controllers to hw/i2c/, configure via default-configs/
  ...

Message-id: 1365442249-18259-1-git-send-email-pbonzini@redhat.com
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
1  2 
configure
hw/net/vmxnet3.c
hw/net/vmxnet3.h
hw/usb/dev-hid.c
include/hw/usb.h

diff --cc configure
Simple merge
index 0000000000000000000000000000000000000000,5916624371b77dda7237f24604095c66802a8466..5f483e7f1e30aa5b966d34e3fbb5553cc2fc30c2
mode 000000,100644..100644
--- /dev/null
@@@ -1,0 -1,2460 +1,2471 @@@
+ /*
+  * QEMU VMWARE VMXNET3 paravirtual NIC
+  *
+  * Copyright (c) 2012 Ravello Systems LTD (http://ravellosystems.com)
+  *
+  * Developed by Daynix Computing LTD (http://www.daynix.com)
+  *
+  * Authors:
+  * Dmitry Fleytman <dmitry@daynix.com>
+  * Tamir Shomer <tamirs@daynix.com>
+  * Yan Vugenfirer <yan@daynix.com>
+  *
+  * This work is licensed under the terms of the GNU GPL, version 2.
+  * See the COPYING file in the top-level directory.
+  *
+  */
+ #include "hw/hw.h"
+ #include "hw/pci/pci.h"
+ #include "net/net.h"
+ #include "net/tap.h"
+ #include "net/checksum.h"
+ #include "sysemu/sysemu.h"
+ #include "qemu-common.h"
+ #include "qemu/bswap.h"
+ #include "hw/pci/msix.h"
+ #include "hw/pci/msi.h"
+ #include "vmxnet3.h"
+ #include "vmxnet_debug.h"
+ #include "vmware_utils.h"
+ #include "vmxnet_tx_pkt.h"
+ #include "vmxnet_rx_pkt.h"
+ #define PCI_DEVICE_ID_VMWARE_VMXNET3_REVISION 0x1
+ #define VMXNET3_MSIX_BAR_SIZE 0x2000
+ #define VMXNET3_BAR0_IDX      (0)
+ #define VMXNET3_BAR1_IDX      (1)
+ #define VMXNET3_MSIX_BAR_IDX  (2)
+ #define VMXNET3_OFF_MSIX_TABLE (0x000)
+ #define VMXNET3_OFF_MSIX_PBA   (0x800)
+ /* Link speed in Mbps should be shifted by 16 */
+ #define VMXNET3_LINK_SPEED      (1000 << 16)
+ /* Link status: 1 - up, 0 - down. */
+ #define VMXNET3_LINK_STATUS_UP  0x1
+ /* Least significant bit should be set for revision and version */
+ #define VMXNET3_DEVICE_VERSION    0x1
+ #define VMXNET3_DEVICE_REVISION   0x1
+ /* Macros for rings descriptors access */
+ #define VMXNET3_READ_TX_QUEUE_DESCR8(dpa, field) \
+     (vmw_shmem_ld8(dpa + offsetof(struct Vmxnet3_TxQueueDesc, field)))
+ #define VMXNET3_WRITE_TX_QUEUE_DESCR8(dpa, field, value) \
+     (vmw_shmem_st8(dpa + offsetof(struct Vmxnet3_TxQueueDesc, field, value)))
+ #define VMXNET3_READ_TX_QUEUE_DESCR32(dpa, field) \
+     (vmw_shmem_ld32(dpa + offsetof(struct Vmxnet3_TxQueueDesc, field)))
+ #define VMXNET3_WRITE_TX_QUEUE_DESCR32(dpa, field, value) \
+     (vmw_shmem_st32(dpa + offsetof(struct Vmxnet3_TxQueueDesc, field), value))
+ #define VMXNET3_READ_TX_QUEUE_DESCR64(dpa, field) \
+     (vmw_shmem_ld64(dpa + offsetof(struct Vmxnet3_TxQueueDesc, field)))
+ #define VMXNET3_WRITE_TX_QUEUE_DESCR64(dpa, field, value) \
+     (vmw_shmem_st64(dpa + offsetof(struct Vmxnet3_TxQueueDesc, field), value))
+ #define VMXNET3_READ_RX_QUEUE_DESCR64(dpa, field) \
+     (vmw_shmem_ld64(dpa + offsetof(struct Vmxnet3_RxQueueDesc, field)))
+ #define VMXNET3_READ_RX_QUEUE_DESCR32(dpa, field) \
+     (vmw_shmem_ld32(dpa + offsetof(struct Vmxnet3_RxQueueDesc, field)))
+ #define VMXNET3_WRITE_RX_QUEUE_DESCR64(dpa, field, value) \
+     (vmw_shmem_st64(dpa + offsetof(struct Vmxnet3_RxQueueDesc, field), value))
+ #define VMXNET3_WRITE_RX_QUEUE_DESCR8(dpa, field, value) \
+     (vmw_shmem_st8(dpa + offsetof(struct Vmxnet3_RxQueueDesc, field), value))
+ /* Macros for guest driver shared area access */
+ #define VMXNET3_READ_DRV_SHARED64(shpa, field) \
+     (vmw_shmem_ld64(shpa + offsetof(struct Vmxnet3_DriverShared, field)))
+ #define VMXNET3_READ_DRV_SHARED32(shpa, field) \
+     (vmw_shmem_ld32(shpa + offsetof(struct Vmxnet3_DriverShared, field)))
+ #define VMXNET3_WRITE_DRV_SHARED32(shpa, field, val) \
+     (vmw_shmem_st32(shpa + offsetof(struct Vmxnet3_DriverShared, field), val))
+ #define VMXNET3_READ_DRV_SHARED16(shpa, field) \
+     (vmw_shmem_ld16(shpa + offsetof(struct Vmxnet3_DriverShared, field)))
+ #define VMXNET3_READ_DRV_SHARED8(shpa, field) \
+     (vmw_shmem_ld8(shpa + offsetof(struct Vmxnet3_DriverShared, field)))
+ #define VMXNET3_READ_DRV_SHARED(shpa, field, b, l) \
+     (vmw_shmem_read(shpa + offsetof(struct Vmxnet3_DriverShared, field), b, l))
+ #define VMXNET_FLAG_IS_SET(field, flag) (((field) & (flag)) == (flag))
+ #define TYPE_VMXNET3 "vmxnet3"
+ #define VMXNET3(obj) OBJECT_CHECK(VMXNET3State, (obj), TYPE_VMXNET3)
+ /* Cyclic ring abstraction */
+ typedef struct {
+     hwaddr pa;
+     size_t size;
+     size_t cell_size;
+     size_t next;
+     uint8_t gen;
+ } Vmxnet3Ring;
+ static inline void vmxnet3_ring_init(Vmxnet3Ring *ring,
+                                      hwaddr pa,
+                                      size_t size,
+                                      size_t cell_size,
+                                      bool zero_region)
+ {
+     ring->pa = pa;
+     ring->size = size;
+     ring->cell_size = cell_size;
+     ring->gen = VMXNET3_INIT_GEN;
+     ring->next = 0;
+     if (zero_region) {
+         vmw_shmem_set(pa, 0, size * cell_size);
+     }
+ }
+ #define VMXNET3_RING_DUMP(macro, ring_name, ridx, r)                         \
+     macro("%s#%d: base %" PRIx64 " size %lu cell_size %lu gen %d next %lu",  \
+           (ring_name), (ridx),                                               \
+           (r)->pa, (r)->size, (r)->cell_size, (r)->gen, (r)->next)
+ static inline void vmxnet3_ring_inc(Vmxnet3Ring *ring)
+ {
+     if (++ring->next >= ring->size) {
+         ring->next = 0;
+         ring->gen ^= 1;
+     }
+ }
+ static inline void vmxnet3_ring_dec(Vmxnet3Ring *ring)
+ {
+     if (ring->next-- == 0) {
+         ring->next = ring->size - 1;
+         ring->gen ^= 1;
+     }
+ }
+ static inline hwaddr vmxnet3_ring_curr_cell_pa(Vmxnet3Ring *ring)
+ {
+     return ring->pa + ring->next * ring->cell_size;
+ }
+ static inline void vmxnet3_ring_read_curr_cell(Vmxnet3Ring *ring, void *buff)
+ {
+     vmw_shmem_read(vmxnet3_ring_curr_cell_pa(ring), buff, ring->cell_size);
+ }
+ static inline void vmxnet3_ring_write_curr_cell(Vmxnet3Ring *ring, void *buff)
+ {
+     vmw_shmem_write(vmxnet3_ring_curr_cell_pa(ring), buff, ring->cell_size);
+ }
+ static inline size_t vmxnet3_ring_curr_cell_idx(Vmxnet3Ring *ring)
+ {
+     return ring->next;
+ }
+ static inline uint8_t vmxnet3_ring_curr_gen(Vmxnet3Ring *ring)
+ {
+     return ring->gen;
+ }
+ /* Debug trace-related functions */
+ static inline void
+ vmxnet3_dump_tx_descr(struct Vmxnet3_TxDesc *descr)
+ {
+     VMW_PKPRN("TX DESCR: "
+               "addr %" PRIx64 ", len: %d, gen: %d, rsvd: %d, "
+               "dtype: %d, ext1: %d, msscof: %d, hlen: %d, om: %d, "
+               "eop: %d, cq: %d, ext2: %d, ti: %d, tci: %d",
+               le64_to_cpu(descr->addr), descr->len, descr->gen, descr->rsvd,
+               descr->dtype, descr->ext1, descr->msscof, descr->hlen, descr->om,
+               descr->eop, descr->cq, descr->ext2, descr->ti, descr->tci);
+ }
+ static inline void
+ vmxnet3_dump_virt_hdr(struct virtio_net_hdr *vhdr)
+ {
+     VMW_PKPRN("VHDR: flags 0x%x, gso_type: 0x%x, hdr_len: %d, gso_size: %d, "
+               "csum_start: %d, csum_offset: %d",
+               vhdr->flags, vhdr->gso_type, vhdr->hdr_len, vhdr->gso_size,
+               vhdr->csum_start, vhdr->csum_offset);
+ }
+ static inline void
+ vmxnet3_dump_rx_descr(struct Vmxnet3_RxDesc *descr)
+ {
+     VMW_PKPRN("RX DESCR: addr %" PRIx64 ", len: %d, gen: %d, rsvd: %d, "
+               "dtype: %d, ext1: %d, btype: %d",
+               le64_to_cpu(descr->addr), descr->len, descr->gen,
+               descr->rsvd, descr->dtype, descr->ext1, descr->btype);
+ }
+ /* Device state and helper functions */
+ #define VMXNET3_RX_RINGS_PER_QUEUE (2)
+ typedef struct {
+     Vmxnet3Ring tx_ring;
+     Vmxnet3Ring comp_ring;
+     uint8_t intr_idx;
+     hwaddr tx_stats_pa;
+     struct UPT1_TxStats txq_stats;
+ } Vmxnet3TxqDescr;
+ typedef struct {
+     Vmxnet3Ring rx_ring[VMXNET3_RX_RINGS_PER_QUEUE];
+     Vmxnet3Ring comp_ring;
+     uint8_t intr_idx;
+     hwaddr rx_stats_pa;
+     struct UPT1_RxStats rxq_stats;
+ } Vmxnet3RxqDescr;
+ typedef struct {
+     bool is_masked;
+     bool is_pending;
+     bool is_asserted;
+ } Vmxnet3IntState;
+ typedef struct {
+         PCIDevice parent_obj;
+         NICState *nic;
+         NICConf conf;
+         MemoryRegion bar0;
+         MemoryRegion bar1;
+         MemoryRegion msix_bar;
+         Vmxnet3RxqDescr rxq_descr[VMXNET3_DEVICE_MAX_RX_QUEUES];
+         Vmxnet3TxqDescr txq_descr[VMXNET3_DEVICE_MAX_TX_QUEUES];
+         /* Whether MSI-X support was installed successfully */
+         bool msix_used;
+         /* Whether MSI support was installed successfully */
+         bool msi_used;
+         hwaddr drv_shmem;
+         hwaddr temp_shared_guest_driver_memory;
+         uint8_t txq_num;
+         /* This boolean tells whether RX packet being indicated has to */
+         /* be split into head and body chunks from different RX rings  */
+         bool rx_packets_compound;
+         bool rx_vlan_stripping;
+         bool lro_supported;
+         uint8_t rxq_num;
+         /* Network MTU */
+         uint32_t mtu;
+         /* Maximum number of fragments for indicated TX packets */
+         uint32_t max_tx_frags;
+         /* Maximum number of fragments for indicated RX packets */
+         uint16_t max_rx_frags;
+         /* Index for events interrupt */
+         uint8_t event_int_idx;
+         /* Whether automatic interrupts masking enabled */
+         bool auto_int_masking;
+         bool peer_has_vhdr;
+         /* TX packets to QEMU interface */
+         struct VmxnetTxPkt *tx_pkt;
+         uint32_t offload_mode;
+         uint32_t cso_or_gso_size;
+         uint16_t tci;
+         bool needs_vlan;
+         struct VmxnetRxPkt *rx_pkt;
+         bool tx_sop;
+         bool skip_current_tx_pkt;
+         uint32_t device_active;
+         uint32_t last_command;
+         uint32_t link_status_and_speed;
+         Vmxnet3IntState interrupt_states[VMXNET3_MAX_INTRS];
+         uint32_t temp_mac;   /* To store the low part first */
+         MACAddr perm_mac;
+         uint32_t vlan_table[VMXNET3_VFT_SIZE];
+         uint32_t rx_mode;
+         MACAddr *mcast_list;
+         uint32_t mcast_list_len;
+         uint32_t mcast_list_buff_size; /* needed for live migration. */
+ } VMXNET3State;
+ /* Interrupt management */
+ /*
+  *This function returns sign whether interrupt line is in asserted state
+  * This depends on the type of interrupt used. For INTX interrupt line will
+  * be asserted until explicit deassertion, for MSI(X) interrupt line will
+  * be deasserted automatically due to notification semantics of the MSI(X)
+  * interrupts
+  */
+ static bool _vmxnet3_assert_interrupt_line(VMXNET3State *s, uint32_t int_idx)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     if (s->msix_used && msix_enabled(d)) {
+         VMW_IRPRN("Sending MSI-X notification for vector %u", int_idx);
+         msix_notify(d, int_idx);
+         return false;
+     }
+     if (s->msi_used && msi_enabled(d)) {
+         VMW_IRPRN("Sending MSI notification for vector %u", int_idx);
+         msi_notify(d, int_idx);
+         return false;
+     }
+     VMW_IRPRN("Asserting line for interrupt %u", int_idx);
+     qemu_set_irq(d->irq[int_idx], 1);
+     return true;
+ }
+ static void _vmxnet3_deassert_interrupt_line(VMXNET3State *s, int lidx)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     /*
+      * This function should never be called for MSI(X) interrupts
+      * because deassertion never required for message interrupts
+      */
+     assert(!s->msix_used || !msix_enabled(d));
+     /*
+      * This function should never be called for MSI(X) interrupts
+      * because deassertion never required for message interrupts
+      */
+     assert(!s->msi_used || !msi_enabled(d));
+     VMW_IRPRN("Deasserting line for interrupt %u", lidx);
+     qemu_set_irq(d->irq[lidx], 0);
+ }
+ static void vmxnet3_update_interrupt_line_state(VMXNET3State *s, int lidx)
+ {
+     if (!s->interrupt_states[lidx].is_pending &&
+        s->interrupt_states[lidx].is_asserted) {
+         VMW_IRPRN("New interrupt line state for index %d is DOWN", lidx);
+         _vmxnet3_deassert_interrupt_line(s, lidx);
+         s->interrupt_states[lidx].is_asserted = false;
+         return;
+     }
+     if (s->interrupt_states[lidx].is_pending &&
+        !s->interrupt_states[lidx].is_masked &&
+        !s->interrupt_states[lidx].is_asserted) {
+         VMW_IRPRN("New interrupt line state for index %d is UP", lidx);
+         s->interrupt_states[lidx].is_asserted =
+             _vmxnet3_assert_interrupt_line(s, lidx);
+         s->interrupt_states[lidx].is_pending = false;
+         return;
+     }
+ }
+ static void vmxnet3_trigger_interrupt(VMXNET3State *s, int lidx)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     s->interrupt_states[lidx].is_pending = true;
+     vmxnet3_update_interrupt_line_state(s, lidx);
+     if (s->msix_used && msix_enabled(d) && s->auto_int_masking) {
+         goto do_automask;
+     }
+     if (s->msi_used && msi_enabled(d) && s->auto_int_masking) {
+         goto do_automask;
+     }
+     return;
+ do_automask:
+     s->interrupt_states[lidx].is_masked = true;
+     vmxnet3_update_interrupt_line_state(s, lidx);
+ }
+ static bool vmxnet3_interrupt_asserted(VMXNET3State *s, int lidx)
+ {
+     return s->interrupt_states[lidx].is_asserted;
+ }
+ static void vmxnet3_clear_interrupt(VMXNET3State *s, int int_idx)
+ {
+     s->interrupt_states[int_idx].is_pending = false;
+     if (s->auto_int_masking) {
+         s->interrupt_states[int_idx].is_masked = true;
+     }
+     vmxnet3_update_interrupt_line_state(s, int_idx);
+ }
+ static void
+ vmxnet3_on_interrupt_mask_changed(VMXNET3State *s, int lidx, bool is_masked)
+ {
+     s->interrupt_states[lidx].is_masked = is_masked;
+     vmxnet3_update_interrupt_line_state(s, lidx);
+ }
+ static bool vmxnet3_verify_driver_magic(hwaddr dshmem)
+ {
+     return (VMXNET3_READ_DRV_SHARED32(dshmem, magic) == VMXNET3_REV1_MAGIC);
+ }
+ #define VMXNET3_GET_BYTE(x, byte_num) (((x) >> (byte_num)*8) & 0xFF)
+ #define VMXNET3_MAKE_BYTE(byte_num, val) \
+     (((uint32_t)((val) & 0xFF)) << (byte_num)*8)
+ static void vmxnet3_set_variable_mac(VMXNET3State *s, uint32_t h, uint32_t l)
+ {
+     s->conf.macaddr.a[0] = VMXNET3_GET_BYTE(l,  0);
+     s->conf.macaddr.a[1] = VMXNET3_GET_BYTE(l,  1);
+     s->conf.macaddr.a[2] = VMXNET3_GET_BYTE(l,  2);
+     s->conf.macaddr.a[3] = VMXNET3_GET_BYTE(l,  3);
+     s->conf.macaddr.a[4] = VMXNET3_GET_BYTE(h, 0);
+     s->conf.macaddr.a[5] = VMXNET3_GET_BYTE(h, 1);
+     VMW_CFPRN("Variable MAC: " VMXNET_MF, VMXNET_MA(s->conf.macaddr.a));
+     qemu_format_nic_info_str(qemu_get_queue(s->nic), s->conf.macaddr.a);
+ }
+ static uint64_t vmxnet3_get_mac_low(MACAddr *addr)
+ {
+     return VMXNET3_MAKE_BYTE(0, addr->a[0]) |
+            VMXNET3_MAKE_BYTE(1, addr->a[1]) |
+            VMXNET3_MAKE_BYTE(2, addr->a[2]) |
+            VMXNET3_MAKE_BYTE(3, addr->a[3]);
+ }
+ static uint64_t vmxnet3_get_mac_high(MACAddr *addr)
+ {
+     return VMXNET3_MAKE_BYTE(0, addr->a[4]) |
+            VMXNET3_MAKE_BYTE(1, addr->a[5]);
+ }
+ static void
+ vmxnet3_inc_tx_consumption_counter(VMXNET3State *s, int qidx)
+ {
+     vmxnet3_ring_inc(&s->txq_descr[qidx].tx_ring);
+ }
+ static inline void
+ vmxnet3_inc_rx_consumption_counter(VMXNET3State *s, int qidx, int ridx)
+ {
+     vmxnet3_ring_inc(&s->rxq_descr[qidx].rx_ring[ridx]);
+ }
+ static inline void
+ vmxnet3_inc_tx_completion_counter(VMXNET3State *s, int qidx)
+ {
+     vmxnet3_ring_inc(&s->txq_descr[qidx].comp_ring);
+ }
+ static void
+ vmxnet3_inc_rx_completion_counter(VMXNET3State *s, int qidx)
+ {
+     vmxnet3_ring_inc(&s->rxq_descr[qidx].comp_ring);
+ }
+ static void
+ vmxnet3_dec_rx_completion_counter(VMXNET3State *s, int qidx)
+ {
+     vmxnet3_ring_dec(&s->rxq_descr[qidx].comp_ring);
+ }
+ static void vmxnet3_complete_packet(VMXNET3State *s, int qidx, uint32 tx_ridx)
+ {
+     struct Vmxnet3_TxCompDesc txcq_descr;
+     VMXNET3_RING_DUMP(VMW_RIPRN, "TXC", qidx, &s->txq_descr[qidx].comp_ring);
+     txcq_descr.txdIdx = tx_ridx;
+     txcq_descr.gen = vmxnet3_ring_curr_gen(&s->txq_descr[qidx].comp_ring);
+     vmxnet3_ring_write_curr_cell(&s->txq_descr[qidx].comp_ring, &txcq_descr);
+     /* Flush changes in TX descriptor before changing the counter value */
+     smp_wmb();
+     vmxnet3_inc_tx_completion_counter(s, qidx);
+     vmxnet3_trigger_interrupt(s, s->txq_descr[qidx].intr_idx);
+ }
+ static bool
+ vmxnet3_setup_tx_offloads(VMXNET3State *s)
+ {
+     switch (s->offload_mode) {
+     case VMXNET3_OM_NONE:
+         vmxnet_tx_pkt_build_vheader(s->tx_pkt, false, false, 0);
+         break;
+     case VMXNET3_OM_CSUM:
+         vmxnet_tx_pkt_build_vheader(s->tx_pkt, false, true, 0);
+         VMW_PKPRN("L4 CSO requested\n");
+         break;
+     case VMXNET3_OM_TSO:
+         vmxnet_tx_pkt_build_vheader(s->tx_pkt, true, true,
+             s->cso_or_gso_size);
+         vmxnet_tx_pkt_update_ip_checksums(s->tx_pkt);
+         VMW_PKPRN("GSO offload requested.");
+         break;
+     default:
+         assert(false);
+         return false;
+     }
+     return true;
+ }
+ static void
+ vmxnet3_tx_retrieve_metadata(VMXNET3State *s,
+                              const struct Vmxnet3_TxDesc *txd)
+ {
+     s->offload_mode = txd->om;
+     s->cso_or_gso_size = txd->msscof;
+     s->tci = txd->tci;
+     s->needs_vlan = txd->ti;
+ }
+ typedef enum {
+     VMXNET3_PKT_STATUS_OK,
+     VMXNET3_PKT_STATUS_ERROR,
+     VMXNET3_PKT_STATUS_DISCARD,/* only for tx */
+     VMXNET3_PKT_STATUS_OUT_OF_BUF /* only for rx */
+ } Vmxnet3PktStatus;
+ static void
+ vmxnet3_on_tx_done_update_stats(VMXNET3State *s, int qidx,
+     Vmxnet3PktStatus status)
+ {
+     size_t tot_len = vmxnet_tx_pkt_get_total_len(s->tx_pkt);
+     struct UPT1_TxStats *stats = &s->txq_descr[qidx].txq_stats;
+     switch (status) {
+     case VMXNET3_PKT_STATUS_OK:
+         switch (vmxnet_tx_pkt_get_packet_type(s->tx_pkt)) {
+         case ETH_PKT_BCAST:
+             stats->bcastPktsTxOK++;
+             stats->bcastBytesTxOK += tot_len;
+             break;
+         case ETH_PKT_MCAST:
+             stats->mcastPktsTxOK++;
+             stats->mcastBytesTxOK += tot_len;
+             break;
+         case ETH_PKT_UCAST:
+             stats->ucastPktsTxOK++;
+             stats->ucastBytesTxOK += tot_len;
+             break;
+         default:
+             assert(false);
+         }
+         if (s->offload_mode == VMXNET3_OM_TSO) {
+             /*
+              * According to VMWARE headers this statistic is a number
+              * of packets after segmentation but since we don't have
+              * this information in QEMU model, the best we can do is to
+              * provide number of non-segmented packets
+              */
+             stats->TSOPktsTxOK++;
+             stats->TSOBytesTxOK += tot_len;
+         }
+         break;
+     case VMXNET3_PKT_STATUS_DISCARD:
+         stats->pktsTxDiscard++;
+         break;
+     case VMXNET3_PKT_STATUS_ERROR:
+         stats->pktsTxError++;
+         break;
+     default:
+         assert(false);
+     }
+ }
+ static void
+ vmxnet3_on_rx_done_update_stats(VMXNET3State *s,
+                                 int qidx,
+                                 Vmxnet3PktStatus status)
+ {
+     struct UPT1_RxStats *stats = &s->rxq_descr[qidx].rxq_stats;
+     size_t tot_len = vmxnet_rx_pkt_get_total_len(s->rx_pkt);
+     switch (status) {
+     case VMXNET3_PKT_STATUS_OUT_OF_BUF:
+         stats->pktsRxOutOfBuf++;
+         break;
+     case VMXNET3_PKT_STATUS_ERROR:
+         stats->pktsRxError++;
+         break;
+     case VMXNET3_PKT_STATUS_OK:
+         switch (vmxnet_rx_pkt_get_packet_type(s->rx_pkt)) {
+         case ETH_PKT_BCAST:
+             stats->bcastPktsRxOK++;
+             stats->bcastBytesRxOK += tot_len;
+             break;
+         case ETH_PKT_MCAST:
+             stats->mcastPktsRxOK++;
+             stats->mcastBytesRxOK += tot_len;
+             break;
+         case ETH_PKT_UCAST:
+             stats->ucastPktsRxOK++;
+             stats->ucastBytesRxOK += tot_len;
+             break;
+         default:
+             assert(false);
+         }
+         if (tot_len > s->mtu) {
+             stats->LROPktsRxOK++;
+             stats->LROBytesRxOK += tot_len;
+         }
+         break;
+     default:
+         assert(false);
+     }
+ }
+ static inline bool
+ vmxnet3_pop_next_tx_descr(VMXNET3State *s,
+                           int qidx,
+                           struct Vmxnet3_TxDesc *txd,
+                           uint32_t *descr_idx)
+ {
+     Vmxnet3Ring *ring = &s->txq_descr[qidx].tx_ring;
+     vmxnet3_ring_read_curr_cell(ring, txd);
+     if (txd->gen == vmxnet3_ring_curr_gen(ring)) {
+         /* Only read after generation field verification */
+         smp_rmb();
+         /* Re-read to be sure we got the latest version */
+         vmxnet3_ring_read_curr_cell(ring, txd);
+         VMXNET3_RING_DUMP(VMW_RIPRN, "TX", qidx, ring);
+         *descr_idx = vmxnet3_ring_curr_cell_idx(ring);
+         vmxnet3_inc_tx_consumption_counter(s, qidx);
+         return true;
+     }
+     return false;
+ }
+ static bool
+ vmxnet3_send_packet(VMXNET3State *s, uint32_t qidx)
+ {
+     Vmxnet3PktStatus status = VMXNET3_PKT_STATUS_OK;
+     if (!vmxnet3_setup_tx_offloads(s)) {
+         status = VMXNET3_PKT_STATUS_ERROR;
+         goto func_exit;
+     }
+     /* debug prints */
+     vmxnet3_dump_virt_hdr(vmxnet_tx_pkt_get_vhdr(s->tx_pkt));
+     vmxnet_tx_pkt_dump(s->tx_pkt);
+     if (!vmxnet_tx_pkt_send(s->tx_pkt, qemu_get_queue(s->nic))) {
+         status = VMXNET3_PKT_STATUS_DISCARD;
+         goto func_exit;
+     }
+ func_exit:
+     vmxnet3_on_tx_done_update_stats(s, qidx, status);
+     return (status == VMXNET3_PKT_STATUS_OK);
+ }
+ static void vmxnet3_process_tx_queue(VMXNET3State *s, int qidx)
+ {
+     struct Vmxnet3_TxDesc txd;
+     uint32_t txd_idx;
+     uint32_t data_len;
+     hwaddr data_pa;
+     for (;;) {
+         if (!vmxnet3_pop_next_tx_descr(s, qidx, &txd, &txd_idx)) {
+             break;
+         }
+         vmxnet3_dump_tx_descr(&txd);
+         if (!s->skip_current_tx_pkt) {
+             data_len = (txd.len > 0) ? txd.len : VMXNET3_MAX_TX_BUF_SIZE;
+             data_pa = le64_to_cpu(txd.addr);
+             if (!vmxnet_tx_pkt_add_raw_fragment(s->tx_pkt,
+                                                 data_pa,
+                                                 data_len)) {
+                 s->skip_current_tx_pkt = true;
+             }
+         }
+         if (s->tx_sop) {
+             vmxnet3_tx_retrieve_metadata(s, &txd);
+             s->tx_sop = false;
+         }
+         if (txd.eop) {
+             if (!s->skip_current_tx_pkt) {
+                 vmxnet_tx_pkt_parse(s->tx_pkt);
+                 if (s->needs_vlan) {
+                     vmxnet_tx_pkt_setup_vlan_header(s->tx_pkt, s->tci);
+                 }
+                 vmxnet3_send_packet(s, qidx);
+             } else {
+                 vmxnet3_on_tx_done_update_stats(s, qidx,
+                                                 VMXNET3_PKT_STATUS_ERROR);
+             }
+             vmxnet3_complete_packet(s, qidx, txd_idx);
+             s->tx_sop = true;
+             s->skip_current_tx_pkt = false;
+             vmxnet_tx_pkt_reset(s->tx_pkt);
+         }
+     }
+ }
+ static inline void
+ vmxnet3_read_next_rx_descr(VMXNET3State *s, int qidx, int ridx,
+                            struct Vmxnet3_RxDesc *dbuf, uint32_t *didx)
+ {
+     Vmxnet3Ring *ring = &s->rxq_descr[qidx].rx_ring[ridx];
+     *didx = vmxnet3_ring_curr_cell_idx(ring);
+     vmxnet3_ring_read_curr_cell(ring, dbuf);
+ }
+ static inline uint8_t
+ vmxnet3_get_rx_ring_gen(VMXNET3State *s, int qidx, int ridx)
+ {
+     return s->rxq_descr[qidx].rx_ring[ridx].gen;
+ }
+ static inline hwaddr
+ vmxnet3_pop_rxc_descr(VMXNET3State *s, int qidx, uint32_t *descr_gen)
+ {
+     uint8_t ring_gen;
+     struct Vmxnet3_RxCompDesc rxcd;
+     hwaddr daddr =
+         vmxnet3_ring_curr_cell_pa(&s->rxq_descr[qidx].comp_ring);
+     cpu_physical_memory_read(daddr, &rxcd, sizeof(struct Vmxnet3_RxCompDesc));
+     ring_gen = vmxnet3_ring_curr_gen(&s->rxq_descr[qidx].comp_ring);
+     if (rxcd.gen != ring_gen) {
+         *descr_gen = ring_gen;
+         vmxnet3_inc_rx_completion_counter(s, qidx);
+         return daddr;
+     }
+     return 0;
+ }
+ static inline void
+ vmxnet3_revert_rxc_descr(VMXNET3State *s, int qidx)
+ {
+     vmxnet3_dec_rx_completion_counter(s, qidx);
+ }
+ #define RXQ_IDX      (0)
+ #define RX_HEAD_BODY_RING (0)
+ #define RX_BODY_ONLY_RING (1)
+ static bool
+ vmxnet3_get_next_head_rx_descr(VMXNET3State *s,
+                                struct Vmxnet3_RxDesc *descr_buf,
+                                uint32_t *descr_idx,
+                                uint32_t *ridx)
+ {
+     for (;;) {
+         uint32_t ring_gen;
+         vmxnet3_read_next_rx_descr(s, RXQ_IDX, RX_HEAD_BODY_RING,
+                                    descr_buf, descr_idx);
+         /* If no more free descriptors - return */
+         ring_gen = vmxnet3_get_rx_ring_gen(s, RXQ_IDX, RX_HEAD_BODY_RING);
+         if (descr_buf->gen != ring_gen) {
+             return false;
+         }
+         /* Only read after generation field verification */
+         smp_rmb();
+         /* Re-read to be sure we got the latest version */
+         vmxnet3_read_next_rx_descr(s, RXQ_IDX, RX_HEAD_BODY_RING,
+                                    descr_buf, descr_idx);
+         /* Mark current descriptor as used/skipped */
+         vmxnet3_inc_rx_consumption_counter(s, RXQ_IDX, RX_HEAD_BODY_RING);
+         /* If this is what we are looking for - return */
+         if (descr_buf->btype == VMXNET3_RXD_BTYPE_HEAD) {
+             *ridx = RX_HEAD_BODY_RING;
+             return true;
+         }
+     }
+ }
+ static bool
+ vmxnet3_get_next_body_rx_descr(VMXNET3State *s,
+                                struct Vmxnet3_RxDesc *d,
+                                uint32_t *didx,
+                                uint32_t *ridx)
+ {
+     vmxnet3_read_next_rx_descr(s, RXQ_IDX, RX_HEAD_BODY_RING, d, didx);
+     /* Try to find corresponding descriptor in head/body ring */
+     if (d->gen == vmxnet3_get_rx_ring_gen(s, RXQ_IDX, RX_HEAD_BODY_RING)) {
+         /* Only read after generation field verification */
+         smp_rmb();
+         /* Re-read to be sure we got the latest version */
+         vmxnet3_read_next_rx_descr(s, RXQ_IDX, RX_HEAD_BODY_RING, d, didx);
+         if (d->btype == VMXNET3_RXD_BTYPE_BODY) {
+             vmxnet3_inc_rx_consumption_counter(s, RXQ_IDX, RX_HEAD_BODY_RING);
+             *ridx = RX_HEAD_BODY_RING;
+             return true;
+         }
+     }
+     /*
+      * If there is no free descriptors on head/body ring or next free
+      * descriptor is a head descriptor switch to body only ring
+      */
+     vmxnet3_read_next_rx_descr(s, RXQ_IDX, RX_BODY_ONLY_RING, d, didx);
+     /* If no more free descriptors - return */
+     if (d->gen == vmxnet3_get_rx_ring_gen(s, RXQ_IDX, RX_BODY_ONLY_RING)) {
+         /* Only read after generation field verification */
+         smp_rmb();
+         /* Re-read to be sure we got the latest version */
+         vmxnet3_read_next_rx_descr(s, RXQ_IDX, RX_BODY_ONLY_RING, d, didx);
+         assert(d->btype == VMXNET3_RXD_BTYPE_BODY);
+         *ridx = RX_BODY_ONLY_RING;
+         vmxnet3_inc_rx_consumption_counter(s, RXQ_IDX, RX_BODY_ONLY_RING);
+         return true;
+     }
+     return false;
+ }
+ static inline bool
+ vmxnet3_get_next_rx_descr(VMXNET3State *s, bool is_head,
+                           struct Vmxnet3_RxDesc *descr_buf,
+                           uint32_t *descr_idx,
+                           uint32_t *ridx)
+ {
+     if (is_head || !s->rx_packets_compound) {
+         return vmxnet3_get_next_head_rx_descr(s, descr_buf, descr_idx, ridx);
+     } else {
+         return vmxnet3_get_next_body_rx_descr(s, descr_buf, descr_idx, ridx);
+     }
+ }
+ static void vmxnet3_rx_update_descr(struct VmxnetRxPkt *pkt,
+     struct Vmxnet3_RxCompDesc *rxcd)
+ {
+     int csum_ok, is_gso;
+     bool isip4, isip6, istcp, isudp;
+     struct virtio_net_hdr *vhdr;
+     uint8_t offload_type;
+     if (vmxnet_rx_pkt_is_vlan_stripped(pkt)) {
+         rxcd->ts = 1;
+         rxcd->tci = vmxnet_rx_pkt_get_vlan_tag(pkt);
+     }
+     if (!vmxnet_rx_pkt_has_virt_hdr(pkt)) {
+         goto nocsum;
+     }
+     vhdr = vmxnet_rx_pkt_get_vhdr(pkt);
+     /*
+      * Checksum is valid when lower level tell so or when lower level
+      * requires checksum offload telling that packet produced/bridged
+      * locally and did travel over network after last checksum calculation
+      * or production
+      */
+     csum_ok = VMXNET_FLAG_IS_SET(vhdr->flags, VIRTIO_NET_HDR_F_DATA_VALID) ||
+               VMXNET_FLAG_IS_SET(vhdr->flags, VIRTIO_NET_HDR_F_NEEDS_CSUM);
+     offload_type = vhdr->gso_type & ~VIRTIO_NET_HDR_GSO_ECN;
+     is_gso = (offload_type != VIRTIO_NET_HDR_GSO_NONE) ? 1 : 0;
+     if (!csum_ok && !is_gso) {
+         goto nocsum;
+     }
+     vmxnet_rx_pkt_get_protocols(pkt, &isip4, &isip6, &isudp, &istcp);
+     if ((!istcp && !isudp) || (!isip4 && !isip6)) {
+         goto nocsum;
+     }
+     rxcd->cnc = 0;
+     rxcd->v4 = isip4 ? 1 : 0;
+     rxcd->v6 = isip6 ? 1 : 0;
+     rxcd->tcp = istcp ? 1 : 0;
+     rxcd->udp = isudp ? 1 : 0;
+     rxcd->fcs = rxcd->tuc = rxcd->ipc = 1;
+     return;
+ nocsum:
+     rxcd->cnc = 1;
+     return;
+ }
+ static void
+ vmxnet3_physical_memory_writev(const struct iovec *iov,
+                                size_t start_iov_off,
+                                hwaddr target_addr,
+                                size_t bytes_to_copy)
+ {
+     size_t curr_off = 0;
+     size_t copied = 0;
+     while (bytes_to_copy) {
+         if (start_iov_off < (curr_off + iov->iov_len)) {
+             size_t chunk_len =
+                 MIN((curr_off + iov->iov_len) - start_iov_off, bytes_to_copy);
+             cpu_physical_memory_write(target_addr + copied,
+                                       iov->iov_base + start_iov_off - curr_off,
+                                       chunk_len);
+             copied += chunk_len;
+             start_iov_off += chunk_len;
+             curr_off = start_iov_off;
+             bytes_to_copy -= chunk_len;
+         } else {
+             curr_off += iov->iov_len;
+         }
+         iov++;
+     }
+ }
+ static bool
+ vmxnet3_indicate_packet(VMXNET3State *s)
+ {
+     struct Vmxnet3_RxDesc rxd;
+     bool is_head = true;
+     uint32_t rxd_idx;
+     uint32_t rx_ridx = 0;
+     struct Vmxnet3_RxCompDesc rxcd;
+     uint32_t new_rxcd_gen = VMXNET3_INIT_GEN;
+     hwaddr new_rxcd_pa = 0;
+     hwaddr ready_rxcd_pa = 0;
+     struct iovec *data = vmxnet_rx_pkt_get_iovec(s->rx_pkt);
+     size_t bytes_copied = 0;
+     size_t bytes_left = vmxnet_rx_pkt_get_total_len(s->rx_pkt);
+     uint16_t num_frags = 0;
+     size_t chunk_size;
+     vmxnet_rx_pkt_dump(s->rx_pkt);
+     while (bytes_left > 0) {
+         /* cannot add more frags to packet */
+         if (num_frags == s->max_rx_frags) {
+             break;
+         }
+         new_rxcd_pa = vmxnet3_pop_rxc_descr(s, RXQ_IDX, &new_rxcd_gen);
+         if (!new_rxcd_pa) {
+             break;
+         }
+         if (!vmxnet3_get_next_rx_descr(s, is_head, &rxd, &rxd_idx, &rx_ridx)) {
+             break;
+         }
+         chunk_size = MIN(bytes_left, rxd.len);
+         vmxnet3_physical_memory_writev(data, bytes_copied,
+                                        le64_to_cpu(rxd.addr), chunk_size);
+         bytes_copied += chunk_size;
+         bytes_left -= chunk_size;
+         vmxnet3_dump_rx_descr(&rxd);
+         if (0 != ready_rxcd_pa) {
+             cpu_physical_memory_write(ready_rxcd_pa, &rxcd, sizeof(rxcd));
+         }
+         memset(&rxcd, 0, sizeof(struct Vmxnet3_RxCompDesc));
+         rxcd.rxdIdx = rxd_idx;
+         rxcd.len = chunk_size;
+         rxcd.sop = is_head;
+         rxcd.gen = new_rxcd_gen;
+         rxcd.rqID = RXQ_IDX + rx_ridx * s->rxq_num;
+         if (0 == bytes_left) {
+             vmxnet3_rx_update_descr(s->rx_pkt, &rxcd);
+         }
+         VMW_RIPRN("RX Completion descriptor: rxRing: %lu rxIdx %lu len %lu "
+                   "sop %d csum_correct %lu",
+                   (unsigned long) rx_ridx,
+                   (unsigned long) rxcd.rxdIdx,
+                   (unsigned long) rxcd.len,
+                   (int) rxcd.sop,
+                   (unsigned long) rxcd.tuc);
+         is_head = false;
+         ready_rxcd_pa = new_rxcd_pa;
+         new_rxcd_pa = 0;
++        num_frags++;
+     }
+     if (0 != ready_rxcd_pa) {
+         rxcd.eop = 1;
+         rxcd.err = (0 != bytes_left);
+         cpu_physical_memory_write(ready_rxcd_pa, &rxcd, sizeof(rxcd));
+         /* Flush RX descriptor changes */
+         smp_wmb();
+     }
+     if (0 != new_rxcd_pa) {
+         vmxnet3_revert_rxc_descr(s, RXQ_IDX);
+     }
+     vmxnet3_trigger_interrupt(s, s->rxq_descr[RXQ_IDX].intr_idx);
+     if (bytes_left == 0) {
+         vmxnet3_on_rx_done_update_stats(s, RXQ_IDX, VMXNET3_PKT_STATUS_OK);
+         return true;
+     } else if (num_frags == s->max_rx_frags) {
+         vmxnet3_on_rx_done_update_stats(s, RXQ_IDX, VMXNET3_PKT_STATUS_ERROR);
+         return false;
+     } else {
+         vmxnet3_on_rx_done_update_stats(s, RXQ_IDX,
+                                         VMXNET3_PKT_STATUS_OUT_OF_BUF);
+         return false;
+     }
+ }
+ static void
+ vmxnet3_io_bar0_write(void *opaque, hwaddr addr,
+                       uint64_t val, unsigned size)
+ {
+     VMXNET3State *s = opaque;
+     if (VMW_IS_MULTIREG_ADDR(addr, VMXNET3_REG_TXPROD,
+                         VMXNET3_DEVICE_MAX_TX_QUEUES, VMXNET3_REG_ALIGN)) {
+         int tx_queue_idx =
+             VMW_MULTIREG_IDX_BY_ADDR(addr, VMXNET3_REG_TXPROD,
+                                      VMXNET3_REG_ALIGN);
+         assert(tx_queue_idx <= s->txq_num);
+         vmxnet3_process_tx_queue(s, tx_queue_idx);
+         return;
+     }
+     if (VMW_IS_MULTIREG_ADDR(addr, VMXNET3_REG_IMR,
+                         VMXNET3_MAX_INTRS, VMXNET3_REG_ALIGN)) {
+         int l = VMW_MULTIREG_IDX_BY_ADDR(addr, VMXNET3_REG_IMR,
+                                          VMXNET3_REG_ALIGN);
+         VMW_CBPRN("Interrupt mask for line %d written: 0x%" PRIx64, l, val);
+         vmxnet3_on_interrupt_mask_changed(s, l, val);
+         return;
+     }
+     if (VMW_IS_MULTIREG_ADDR(addr, VMXNET3_REG_RXPROD,
+                         VMXNET3_DEVICE_MAX_RX_QUEUES, VMXNET3_REG_ALIGN) ||
+        VMW_IS_MULTIREG_ADDR(addr, VMXNET3_REG_RXPROD2,
+                         VMXNET3_DEVICE_MAX_RX_QUEUES, VMXNET3_REG_ALIGN)) {
+         return;
+     }
+     VMW_WRPRN("BAR0 unknown write [%" PRIx64 "] = %" PRIx64 ", size %d",
+               (uint64_t) addr, val, size);
+ }
+ static uint64_t
+ vmxnet3_io_bar0_read(void *opaque, hwaddr addr, unsigned size)
+ {
+     if (VMW_IS_MULTIREG_ADDR(addr, VMXNET3_REG_IMR,
+                         VMXNET3_MAX_INTRS, VMXNET3_REG_ALIGN)) {
+         assert(false);
+     }
+     VMW_CBPRN("BAR0 unknown read [%" PRIx64 "], size %d", addr, size);
+     return 0;
+ }
+ static void vmxnet3_reset_interrupt_states(VMXNET3State *s)
+ {
+     int i;
+     for (i = 0; i < ARRAY_SIZE(s->interrupt_states); i++) {
+         s->interrupt_states[i].is_asserted = false;
+         s->interrupt_states[i].is_pending = false;
+         s->interrupt_states[i].is_masked = true;
+     }
+ }
+ static void vmxnet3_reset_mac(VMXNET3State *s)
+ {
+     memcpy(&s->conf.macaddr.a, &s->perm_mac.a, sizeof(s->perm_mac.a));
+     VMW_CFPRN("MAC address set to: " VMXNET_MF, VMXNET_MA(s->conf.macaddr.a));
+ }
+ static void vmxnet3_deactivate_device(VMXNET3State *s)
+ {
+     VMW_CBPRN("Deactivating vmxnet3...");
+     s->device_active = false;
+ }
+ static void vmxnet3_reset(VMXNET3State *s)
+ {
+     VMW_CBPRN("Resetting vmxnet3...");
+     vmxnet3_deactivate_device(s);
+     vmxnet3_reset_interrupt_states(s);
+     vmxnet_tx_pkt_reset(s->tx_pkt);
+     s->drv_shmem = 0;
+     s->tx_sop = true;
+     s->skip_current_tx_pkt = false;
+ }
+ static void vmxnet3_update_rx_mode(VMXNET3State *s)
+ {
+     s->rx_mode = VMXNET3_READ_DRV_SHARED32(s->drv_shmem,
+                                            devRead.rxFilterConf.rxMode);
+     VMW_CFPRN("RX mode: 0x%08X", s->rx_mode);
+ }
+ static void vmxnet3_update_vlan_filters(VMXNET3State *s)
+ {
+     int i;
+     /* Copy configuration from shared memory */
+     VMXNET3_READ_DRV_SHARED(s->drv_shmem,
+                             devRead.rxFilterConf.vfTable,
+                             s->vlan_table,
+                             sizeof(s->vlan_table));
+     /* Invert byte order when needed */
+     for (i = 0; i < ARRAY_SIZE(s->vlan_table); i++) {
+         s->vlan_table[i] = le32_to_cpu(s->vlan_table[i]);
+     }
+     /* Dump configuration for debugging purposes */
+     VMW_CFPRN("Configured VLANs:");
+     for (i = 0; i < sizeof(s->vlan_table) * 8; i++) {
+         if (VMXNET3_VFTABLE_ENTRY_IS_SET(s->vlan_table, i)) {
+             VMW_CFPRN("\tVLAN %d is present", i);
+         }
+     }
+ }
+ static void vmxnet3_update_mcast_filters(VMXNET3State *s)
+ {
+     uint16_t list_bytes =
+         VMXNET3_READ_DRV_SHARED16(s->drv_shmem,
+                                   devRead.rxFilterConf.mfTableLen);
+     s->mcast_list_len = list_bytes / sizeof(s->mcast_list[0]);
+     s->mcast_list = g_realloc(s->mcast_list, list_bytes);
+     if (NULL == s->mcast_list) {
+         if (0 == s->mcast_list_len) {
+             VMW_CFPRN("Current multicast list is empty");
+         } else {
+             VMW_ERPRN("Failed to allocate multicast list of %d elements",
+                       s->mcast_list_len);
+         }
+         s->mcast_list_len = 0;
+     } else {
+         int i;
+         hwaddr mcast_list_pa =
+             VMXNET3_READ_DRV_SHARED64(s->drv_shmem,
+                                       devRead.rxFilterConf.mfTablePA);
+         cpu_physical_memory_read(mcast_list_pa, s->mcast_list, list_bytes);
+         VMW_CFPRN("Current multicast list len is %d:", s->mcast_list_len);
+         for (i = 0; i < s->mcast_list_len; i++) {
+             VMW_CFPRN("\t" VMXNET_MF, VMXNET_MA(s->mcast_list[i].a));
+         }
+     }
+ }
+ static void vmxnet3_setup_rx_filtering(VMXNET3State *s)
+ {
+     vmxnet3_update_rx_mode(s);
+     vmxnet3_update_vlan_filters(s);
+     vmxnet3_update_mcast_filters(s);
+ }
+ static uint32_t vmxnet3_get_interrupt_config(VMXNET3State *s)
+ {
+     uint32_t interrupt_mode = VMXNET3_IT_AUTO | (VMXNET3_IMM_AUTO << 2);
+     VMW_CFPRN("Interrupt config is 0x%X", interrupt_mode);
+     return interrupt_mode;
+ }
+ static void vmxnet3_fill_stats(VMXNET3State *s)
+ {
+     int i;
+     for (i = 0; i < s->txq_num; i++) {
+         cpu_physical_memory_write(s->txq_descr[i].tx_stats_pa,
+                                   &s->txq_descr[i].txq_stats,
+                                   sizeof(s->txq_descr[i].txq_stats));
+     }
+     for (i = 0; i < s->rxq_num; i++) {
+         cpu_physical_memory_write(s->rxq_descr[i].rx_stats_pa,
+                                   &s->rxq_descr[i].rxq_stats,
+                                   sizeof(s->rxq_descr[i].rxq_stats));
+     }
+ }
+ static void vmxnet3_adjust_by_guest_type(VMXNET3State *s)
+ {
+     struct Vmxnet3_GOSInfo gos;
+     VMXNET3_READ_DRV_SHARED(s->drv_shmem, devRead.misc.driverInfo.gos,
+                             &gos, sizeof(gos));
+     s->rx_packets_compound =
+         (gos.gosType == VMXNET3_GOS_TYPE_WIN) ? false : true;
+     VMW_CFPRN("Guest type specifics: RXCOMPOUND: %d", s->rx_packets_compound);
+ }
+ static void
+ vmxnet3_dump_conf_descr(const char *name,
+                         struct Vmxnet3_VariableLenConfDesc *pm_descr)
+ {
+     VMW_CFPRN("%s descriptor dump: Version %u, Length %u",
+               name, pm_descr->confVer, pm_descr->confLen);
+ };
+ static void vmxnet3_update_pm_state(VMXNET3State *s)
+ {
+     struct Vmxnet3_VariableLenConfDesc pm_descr;
+     pm_descr.confLen =
+         VMXNET3_READ_DRV_SHARED32(s->drv_shmem, devRead.pmConfDesc.confLen);
+     pm_descr.confVer =
+         VMXNET3_READ_DRV_SHARED32(s->drv_shmem, devRead.pmConfDesc.confVer);
+     pm_descr.confPA =
+         VMXNET3_READ_DRV_SHARED64(s->drv_shmem, devRead.pmConfDesc.confPA);
+     vmxnet3_dump_conf_descr("PM State", &pm_descr);
+ }
+ static void vmxnet3_update_features(VMXNET3State *s)
+ {
+     uint32_t guest_features;
+     int rxcso_supported;
+     guest_features = VMXNET3_READ_DRV_SHARED32(s->drv_shmem,
+                                                devRead.misc.uptFeatures);
+     rxcso_supported = VMXNET_FLAG_IS_SET(guest_features, UPT1_F_RXCSUM);
+     s->rx_vlan_stripping = VMXNET_FLAG_IS_SET(guest_features, UPT1_F_RXVLAN);
+     s->lro_supported = VMXNET_FLAG_IS_SET(guest_features, UPT1_F_LRO);
+     VMW_CFPRN("Features configuration: LRO: %d, RXCSUM: %d, VLANSTRIP: %d",
+               s->lro_supported, rxcso_supported,
+               s->rx_vlan_stripping);
+     if (s->peer_has_vhdr) {
+         tap_set_offload(qemu_get_queue(s->nic)->peer,
+                         rxcso_supported,
+                         s->lro_supported,
+                         s->lro_supported,
+                         0,
+                         0);
+     }
+ }
+ static void vmxnet3_activate_device(VMXNET3State *s)
+ {
+     int i;
+     static const uint32_t VMXNET3_DEF_TX_THRESHOLD = 1;
+     hwaddr qdescr_table_pa;
+     uint64_t pa;
+     uint32_t size;
+     /* Verify configuration consistency */
+     if (!vmxnet3_verify_driver_magic(s->drv_shmem)) {
+         VMW_ERPRN("Device configuration received from driver is invalid");
+         return;
+     }
+     vmxnet3_adjust_by_guest_type(s);
+     vmxnet3_update_features(s);
+     vmxnet3_update_pm_state(s);
+     vmxnet3_setup_rx_filtering(s);
+     /* Cache fields from shared memory */
+     s->mtu = VMXNET3_READ_DRV_SHARED32(s->drv_shmem, devRead.misc.mtu);
+     VMW_CFPRN("MTU is %u", s->mtu);
+     s->max_rx_frags =
+         VMXNET3_READ_DRV_SHARED16(s->drv_shmem, devRead.misc.maxNumRxSG);
++    if (s->max_rx_frags == 0) {
++        s->max_rx_frags = 1;
++    }
++
+     VMW_CFPRN("Max RX fragments is %u", s->max_rx_frags);
+     s->event_int_idx =
+         VMXNET3_READ_DRV_SHARED8(s->drv_shmem, devRead.intrConf.eventIntrIdx);
+     VMW_CFPRN("Events interrupt line is %u", s->event_int_idx);
+     s->auto_int_masking =
+         VMXNET3_READ_DRV_SHARED8(s->drv_shmem, devRead.intrConf.autoMask);
+     VMW_CFPRN("Automatic interrupt masking is %d", (int)s->auto_int_masking);
+     s->txq_num =
+         VMXNET3_READ_DRV_SHARED8(s->drv_shmem, devRead.misc.numTxQueues);
+     s->rxq_num =
+         VMXNET3_READ_DRV_SHARED8(s->drv_shmem, devRead.misc.numRxQueues);
+     VMW_CFPRN("Number of TX/RX queues %u/%u", s->txq_num, s->rxq_num);
+     assert(s->txq_num <= VMXNET3_DEVICE_MAX_TX_QUEUES);
+     qdescr_table_pa =
+         VMXNET3_READ_DRV_SHARED64(s->drv_shmem, devRead.misc.queueDescPA);
+     VMW_CFPRN("TX queues descriptors table is at 0x%" PRIx64, qdescr_table_pa);
+     /*
+      * Worst-case scenario is a packet that holds all TX rings space so
+      * we calculate total size of all TX rings for max TX fragments number
+      */
+     s->max_tx_frags = 0;
+     /* TX queues */
+     for (i = 0; i < s->txq_num; i++) {
+         hwaddr qdescr_pa =
+             qdescr_table_pa + i * sizeof(struct Vmxnet3_TxQueueDesc);
+         /* Read interrupt number for this TX queue */
+         s->txq_descr[i].intr_idx =
+             VMXNET3_READ_TX_QUEUE_DESCR8(qdescr_pa, conf.intrIdx);
+         VMW_CFPRN("TX Queue %d interrupt: %d", i, s->txq_descr[i].intr_idx);
+         /* Read rings memory locations for TX queues */
+         pa = VMXNET3_READ_TX_QUEUE_DESCR64(qdescr_pa, conf.txRingBasePA);
+         size = VMXNET3_READ_TX_QUEUE_DESCR32(qdescr_pa, conf.txRingSize);
+         vmxnet3_ring_init(&s->txq_descr[i].tx_ring, pa, size,
+                           sizeof(struct Vmxnet3_TxDesc), false);
+         VMXNET3_RING_DUMP(VMW_CFPRN, "TX", i, &s->txq_descr[i].tx_ring);
+         s->max_tx_frags += size;
+         /* TXC ring */
+         pa = VMXNET3_READ_TX_QUEUE_DESCR64(qdescr_pa, conf.compRingBasePA);
+         size = VMXNET3_READ_TX_QUEUE_DESCR32(qdescr_pa, conf.compRingSize);
+         vmxnet3_ring_init(&s->txq_descr[i].comp_ring, pa, size,
+                           sizeof(struct Vmxnet3_TxCompDesc), true);
+         VMXNET3_RING_DUMP(VMW_CFPRN, "TXC", i, &s->txq_descr[i].comp_ring);
+         s->txq_descr[i].tx_stats_pa =
+             qdescr_pa + offsetof(struct Vmxnet3_TxQueueDesc, stats);
+         memset(&s->txq_descr[i].txq_stats, 0,
+                sizeof(s->txq_descr[i].txq_stats));
+         /* Fill device-managed parameters for queues */
+         VMXNET3_WRITE_TX_QUEUE_DESCR32(qdescr_pa,
+                                        ctrl.txThreshold,
+                                        VMXNET3_DEF_TX_THRESHOLD);
+     }
+     /* Preallocate TX packet wrapper */
+     VMW_CFPRN("Max TX fragments is %u", s->max_tx_frags);
+     vmxnet_tx_pkt_init(&s->tx_pkt, s->max_tx_frags, s->peer_has_vhdr);
+     vmxnet_rx_pkt_init(&s->rx_pkt, s->peer_has_vhdr);
+     /* Read rings memory locations for RX queues */
+     for (i = 0; i < s->rxq_num; i++) {
+         int j;
+         hwaddr qd_pa =
+             qdescr_table_pa + s->txq_num * sizeof(struct Vmxnet3_TxQueueDesc) +
+             i * sizeof(struct Vmxnet3_RxQueueDesc);
+         /* Read interrupt number for this RX queue */
+         s->rxq_descr[i].intr_idx =
+             VMXNET3_READ_TX_QUEUE_DESCR8(qd_pa, conf.intrIdx);
+         VMW_CFPRN("RX Queue %d interrupt: %d", i, s->rxq_descr[i].intr_idx);
+         /* Read rings memory locations */
+         for (j = 0; j < VMXNET3_RX_RINGS_PER_QUEUE; j++) {
+             /* RX rings */
+             pa = VMXNET3_READ_RX_QUEUE_DESCR64(qd_pa, conf.rxRingBasePA[j]);
+             size = VMXNET3_READ_RX_QUEUE_DESCR32(qd_pa, conf.rxRingSize[j]);
+             vmxnet3_ring_init(&s->rxq_descr[i].rx_ring[j], pa, size,
+                               sizeof(struct Vmxnet3_RxDesc), false);
+             VMW_CFPRN("RX queue %d:%d: Base: %" PRIx64 ", Size: %d",
+                       i, j, pa, size);
+         }
+         /* RXC ring */
+         pa = VMXNET3_READ_RX_QUEUE_DESCR64(qd_pa, conf.compRingBasePA);
+         size = VMXNET3_READ_RX_QUEUE_DESCR32(qd_pa, conf.compRingSize);
+         vmxnet3_ring_init(&s->rxq_descr[i].comp_ring, pa, size,
+                           sizeof(struct Vmxnet3_RxCompDesc), true);
+         VMW_CFPRN("RXC queue %d: Base: %" PRIx64 ", Size: %d", i, pa, size);
+         s->rxq_descr[i].rx_stats_pa =
+             qd_pa + offsetof(struct Vmxnet3_RxQueueDesc, stats);
+         memset(&s->rxq_descr[i].rxq_stats, 0,
+                sizeof(s->rxq_descr[i].rxq_stats));
+     }
+     /* Make sure everything is in place before device activation */
+     smp_wmb();
+     vmxnet3_reset_mac(s);
+     s->device_active = true;
+ }
+ static void vmxnet3_handle_command(VMXNET3State *s, uint64_t cmd)
+ {
+     s->last_command = cmd;
+     switch (cmd) {
+     case VMXNET3_CMD_GET_PERM_MAC_HI:
+         VMW_CBPRN("Set: Get upper part of permanent MAC");
+         break;
+     case VMXNET3_CMD_GET_PERM_MAC_LO:
+         VMW_CBPRN("Set: Get lower part of permanent MAC");
+         break;
+     case VMXNET3_CMD_GET_STATS:
+         VMW_CBPRN("Set: Get device statistics");
+         vmxnet3_fill_stats(s);
+         break;
+     case VMXNET3_CMD_ACTIVATE_DEV:
+         VMW_CBPRN("Set: Activating vmxnet3 device");
+         vmxnet3_activate_device(s);
+         break;
+     case VMXNET3_CMD_UPDATE_RX_MODE:
+         VMW_CBPRN("Set: Update rx mode");
+         vmxnet3_update_rx_mode(s);
+         break;
+     case VMXNET3_CMD_UPDATE_VLAN_FILTERS:
+         VMW_CBPRN("Set: Update VLAN filters");
+         vmxnet3_update_vlan_filters(s);
+         break;
+     case VMXNET3_CMD_UPDATE_MAC_FILTERS:
+         VMW_CBPRN("Set: Update MAC filters");
+         vmxnet3_update_mcast_filters(s);
+         break;
+     case VMXNET3_CMD_UPDATE_FEATURE:
+         VMW_CBPRN("Set: Update features");
+         vmxnet3_update_features(s);
+         break;
+     case VMXNET3_CMD_UPDATE_PMCFG:
+         VMW_CBPRN("Set: Update power management config");
+         vmxnet3_update_pm_state(s);
+         break;
+     case VMXNET3_CMD_GET_LINK:
+         VMW_CBPRN("Set: Get link");
+         break;
+     case VMXNET3_CMD_RESET_DEV:
+         VMW_CBPRN("Set: Reset device");
+         vmxnet3_reset(s);
+         break;
+     case VMXNET3_CMD_QUIESCE_DEV:
+         VMW_CBPRN("Set: VMXNET3_CMD_QUIESCE_DEV - pause the device");
+         vmxnet3_deactivate_device(s);
+         break;
+     case VMXNET3_CMD_GET_CONF_INTR:
+         VMW_CBPRN("Set: VMXNET3_CMD_GET_CONF_INTR - interrupt configuration");
+         break;
+     default:
+         VMW_CBPRN("Received unknown command: %" PRIx64, cmd);
+         break;
+     }
+ }
+ static uint64_t vmxnet3_get_command_status(VMXNET3State *s)
+ {
+     uint64_t ret;
+     switch (s->last_command) {
+     case VMXNET3_CMD_ACTIVATE_DEV:
+         ret = (s->device_active) ? 0 : -1;
+         VMW_CFPRN("Device active: %" PRIx64, ret);
+         break;
++    case VMXNET3_CMD_RESET_DEV:
++    case VMXNET3_CMD_QUIESCE_DEV:
++    case VMXNET3_CMD_GET_QUEUE_STATUS:
++        ret = 0;
++        break;
++
+     case VMXNET3_CMD_GET_LINK:
+         ret = s->link_status_and_speed;
+         VMW_CFPRN("Link and speed: %" PRIx64, ret);
+         break;
+     case VMXNET3_CMD_GET_PERM_MAC_LO:
+         ret = vmxnet3_get_mac_low(&s->perm_mac);
+         break;
+     case VMXNET3_CMD_GET_PERM_MAC_HI:
+         ret = vmxnet3_get_mac_high(&s->perm_mac);
+         break;
+     case VMXNET3_CMD_GET_CONF_INTR:
+         ret = vmxnet3_get_interrupt_config(s);
+         break;
+     default:
+         VMW_WRPRN("Received request for unknown command: %x", s->last_command);
+         ret = -1;
+         break;
+     }
+     return ret;
+ }
+ static void vmxnet3_set_events(VMXNET3State *s, uint32_t val)
+ {
+     uint32_t events;
+     VMW_CBPRN("Setting events: 0x%x", val);
+     events = VMXNET3_READ_DRV_SHARED32(s->drv_shmem, ecr) | val;
+     VMXNET3_WRITE_DRV_SHARED32(s->drv_shmem, ecr, events);
+ }
+ static void vmxnet3_ack_events(VMXNET3State *s, uint32_t val)
+ {
+     uint32_t events;
+     VMW_CBPRN("Clearing events: 0x%x", val);
+     events = VMXNET3_READ_DRV_SHARED32(s->drv_shmem, ecr) & ~val;
+     VMXNET3_WRITE_DRV_SHARED32(s->drv_shmem, ecr, events);
+ }
+ static void
+ vmxnet3_io_bar1_write(void *opaque,
+                       hwaddr addr,
+                       uint64_t val,
+                       unsigned size)
+ {
+     VMXNET3State *s = opaque;
+     switch (addr) {
+     /* Vmxnet3 Revision Report Selection */
+     case VMXNET3_REG_VRRS:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_VRRS] = %" PRIx64 ", size %d",
+                   val, size);
+         break;
+     /* UPT Version Report Selection */
+     case VMXNET3_REG_UVRS:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_UVRS] = %" PRIx64 ", size %d",
+                   val, size);
+         break;
+     /* Driver Shared Address Low */
+     case VMXNET3_REG_DSAL:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_DSAL] = %" PRIx64 ", size %d",
+                   val, size);
+         /*
+          * Guest driver will first write the low part of the shared
+          * memory address. We save it to temp variable and set the
+          * shared address only after we get the high part
+          */
+         if (0 == val) {
+             s->device_active = false;
+         }
+         s->temp_shared_guest_driver_memory = val;
+         s->drv_shmem = 0;
+         break;
+     /* Driver Shared Address High */
+     case VMXNET3_REG_DSAH:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_DSAH] = %" PRIx64 ", size %d",
+                   val, size);
+         /*
+          * Set the shared memory between guest driver and device.
+          * We already should have low address part.
+          */
+         s->drv_shmem = s->temp_shared_guest_driver_memory | (val << 32);
+         break;
+     /* Command */
+     case VMXNET3_REG_CMD:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_CMD] = %" PRIx64 ", size %d",
+                   val, size);
+         vmxnet3_handle_command(s, val);
+         break;
+     /* MAC Address Low */
+     case VMXNET3_REG_MACL:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_MACL] = %" PRIx64 ", size %d",
+                   val, size);
+         s->temp_mac = val;
+         break;
+     /* MAC Address High */
+     case VMXNET3_REG_MACH:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_MACH] = %" PRIx64 ", size %d",
+                   val, size);
+         vmxnet3_set_variable_mac(s, val, s->temp_mac);
+         break;
+     /* Interrupt Cause Register */
+     case VMXNET3_REG_ICR:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_ICR] = %" PRIx64 ", size %d",
+                   val, size);
+         assert(false);
+         break;
+     /* Event Cause Register */
+     case VMXNET3_REG_ECR:
+         VMW_CBPRN("Write BAR1 [VMXNET3_REG_ECR] = %" PRIx64 ", size %d",
+                   val, size);
+         vmxnet3_ack_events(s, val);
+         break;
+     default:
+         VMW_CBPRN("Unknown Write to BAR1 [%" PRIx64 "] = %" PRIx64 ", size %d",
+                   addr, val, size);
+         break;
+     }
+ }
+ static uint64_t
+ vmxnet3_io_bar1_read(void *opaque, hwaddr addr, unsigned size)
+ {
+         VMXNET3State *s = opaque;
+         uint64_t ret = 0;
+         switch (addr) {
+         /* Vmxnet3 Revision Report Selection */
+         case VMXNET3_REG_VRRS:
+             VMW_CBPRN("Read BAR1 [VMXNET3_REG_VRRS], size %d", size);
+             ret = VMXNET3_DEVICE_REVISION;
+             break;
+         /* UPT Version Report Selection */
+         case VMXNET3_REG_UVRS:
+             VMW_CBPRN("Read BAR1 [VMXNET3_REG_UVRS], size %d", size);
+             ret = VMXNET3_DEVICE_VERSION;
+             break;
+         /* Command */
+         case VMXNET3_REG_CMD:
+             VMW_CBPRN("Read BAR1 [VMXNET3_REG_CMD], size %d", size);
+             ret = vmxnet3_get_command_status(s);
+             break;
+         /* MAC Address Low */
+         case VMXNET3_REG_MACL:
+             VMW_CBPRN("Read BAR1 [VMXNET3_REG_MACL], size %d", size);
+             ret = vmxnet3_get_mac_low(&s->conf.macaddr);
+             break;
+         /* MAC Address High */
+         case VMXNET3_REG_MACH:
+             VMW_CBPRN("Read BAR1 [VMXNET3_REG_MACH], size %d", size);
+             ret = vmxnet3_get_mac_high(&s->conf.macaddr);
+             break;
+         /*
+          * Interrupt Cause Register
+          * Used for legacy interrupts only so interrupt index always 0
+          */
+         case VMXNET3_REG_ICR:
+             VMW_CBPRN("Read BAR1 [VMXNET3_REG_ICR], size %d", size);
+             if (vmxnet3_interrupt_asserted(s, 0)) {
+                 vmxnet3_clear_interrupt(s, 0);
+                 ret = true;
+             } else {
+                 ret = false;
+             }
+             break;
+         default:
+             VMW_CBPRN("Unknow read BAR1[%" PRIx64 "], %d bytes", addr, size);
+             break;
+         }
+         return ret;
+ }
+ static int
+ vmxnet3_can_receive(NetClientState *nc)
+ {
+     VMXNET3State *s = qemu_get_nic_opaque(nc);
+     return s->device_active &&
+            VMXNET_FLAG_IS_SET(s->link_status_and_speed, VMXNET3_LINK_STATUS_UP);
+ }
+ static inline bool
+ vmxnet3_is_registered_vlan(VMXNET3State *s, const void *data)
+ {
+     uint16_t vlan_tag = eth_get_pkt_tci(data) & VLAN_VID_MASK;
+     if (IS_SPECIAL_VLAN_ID(vlan_tag)) {
+         return true;
+     }
+     return VMXNET3_VFTABLE_ENTRY_IS_SET(s->vlan_table, vlan_tag);
+ }
+ static bool
+ vmxnet3_is_allowed_mcast_group(VMXNET3State *s, const uint8_t *group_mac)
+ {
+     int i;
+     for (i = 0; i < s->mcast_list_len; i++) {
+         if (!memcmp(group_mac, s->mcast_list[i].a, sizeof(s->mcast_list[i]))) {
+             return true;
+         }
+     }
+     return false;
+ }
+ static bool
+ vmxnet3_rx_filter_may_indicate(VMXNET3State *s, const void *data,
+     size_t size)
+ {
+     struct eth_header *ehdr = PKT_GET_ETH_HDR(data);
+     if (VMXNET_FLAG_IS_SET(s->rx_mode, VMXNET3_RXM_PROMISC)) {
+         return true;
+     }
+     if (!vmxnet3_is_registered_vlan(s, data)) {
+         return false;
+     }
+     switch (vmxnet_rx_pkt_get_packet_type(s->rx_pkt)) {
+     case ETH_PKT_UCAST:
+         if (!VMXNET_FLAG_IS_SET(s->rx_mode, VMXNET3_RXM_UCAST)) {
+             return false;
+         }
+         if (memcmp(s->conf.macaddr.a, ehdr->h_dest, ETH_ALEN)) {
+             return false;
+         }
+         break;
+     case ETH_PKT_BCAST:
+         if (!VMXNET_FLAG_IS_SET(s->rx_mode, VMXNET3_RXM_BCAST)) {
+             return false;
+         }
+         break;
+     case ETH_PKT_MCAST:
+         if (VMXNET_FLAG_IS_SET(s->rx_mode, VMXNET3_RXM_ALL_MULTI)) {
+             return true;
+         }
+         if (!VMXNET_FLAG_IS_SET(s->rx_mode, VMXNET3_RXM_MCAST)) {
+             return false;
+         }
+         if (!vmxnet3_is_allowed_mcast_group(s, ehdr->h_dest)) {
+             return false;
+         }
+         break;
+     default:
+         assert(false);
+     }
+     return true;
+ }
+ static ssize_t
+ vmxnet3_receive(NetClientState *nc, const uint8_t *buf, size_t size)
+ {
+     VMXNET3State *s = qemu_get_nic_opaque(nc);
+     size_t bytes_indicated;
+     if (!vmxnet3_can_receive(nc)) {
+         VMW_PKPRN("Cannot receive now");
+         return -1;
+     }
+     if (s->peer_has_vhdr) {
+         vmxnet_rx_pkt_set_vhdr(s->rx_pkt, (struct virtio_net_hdr *)buf);
+         buf += sizeof(struct virtio_net_hdr);
+         size -= sizeof(struct virtio_net_hdr);
+     }
+     vmxnet_rx_pkt_set_packet_type(s->rx_pkt,
+         get_eth_packet_type(PKT_GET_ETH_HDR(buf)));
+     if (vmxnet3_rx_filter_may_indicate(s, buf, size)) {
+         vmxnet_rx_pkt_attach_data(s->rx_pkt, buf, size, s->rx_vlan_stripping);
+         bytes_indicated = vmxnet3_indicate_packet(s) ? size : -1;
+         if (bytes_indicated < size) {
+             VMW_PKPRN("RX: %lu of %lu bytes indicated", bytes_indicated, size);
+         }
+     } else {
+         VMW_PKPRN("Packet dropped by RX filter");
+         bytes_indicated = size;
+     }
+     assert(size > 0);
+     assert(bytes_indicated != 0);
+     return bytes_indicated;
+ }
+ static void vmxnet3_cleanup(NetClientState *nc)
+ {
+     VMXNET3State *s = qemu_get_nic_opaque(nc);
+     s->nic = NULL;
+ }
+ static void vmxnet3_set_link_status(NetClientState *nc)
+ {
+     VMXNET3State *s = qemu_get_nic_opaque(nc);
+     if (nc->link_down) {
+         s->link_status_and_speed &= ~VMXNET3_LINK_STATUS_UP;
+     } else {
+         s->link_status_and_speed |= VMXNET3_LINK_STATUS_UP;
+     }
+     vmxnet3_set_events(s, VMXNET3_ECR_LINK);
+     vmxnet3_trigger_interrupt(s, s->event_int_idx);
+ }
+ static NetClientInfo net_vmxnet3_info = {
+         .type = NET_CLIENT_OPTIONS_KIND_NIC,
+         .size = sizeof(NICState),
+         .can_receive = vmxnet3_can_receive,
+         .receive = vmxnet3_receive,
+         .cleanup = vmxnet3_cleanup,
+         .link_status_changed = vmxnet3_set_link_status,
+ };
+ static bool vmxnet3_peer_has_vnet_hdr(VMXNET3State *s)
+ {
+     NetClientState *peer = qemu_get_queue(s->nic)->peer;
+     if ((NULL != peer)                              &&
+         (peer->info->type == NET_CLIENT_OPTIONS_KIND_TAP)   &&
+         tap_has_vnet_hdr(peer)) {
+         return true;
+     }
+     VMW_WRPRN("Peer has no virtio extension. Task offloads will be emulated.");
+     return false;
+ }
+ static void vmxnet3_net_uninit(VMXNET3State *s)
+ {
+     g_free(s->mcast_list);
+     vmxnet_tx_pkt_reset(s->tx_pkt);
+     vmxnet_tx_pkt_uninit(s->tx_pkt);
+     vmxnet_rx_pkt_uninit(s->rx_pkt);
+     qemu_del_net_client(qemu_get_queue(s->nic));
+ }
+ static void vmxnet3_net_init(VMXNET3State *s)
+ {
+     DeviceState *d = DEVICE(s);
+     VMW_CBPRN("vmxnet3_net_init called...");
+     qemu_macaddr_default_if_unset(&s->conf.macaddr);
+     /* Windows guest will query the address that was set on init */
+     memcpy(&s->perm_mac.a, &s->conf.macaddr.a, sizeof(s->perm_mac.a));
+     s->mcast_list = NULL;
+     s->mcast_list_len = 0;
+     s->link_status_and_speed = VMXNET3_LINK_SPEED | VMXNET3_LINK_STATUS_UP;
+     VMW_CFPRN("Permanent MAC: " MAC_FMT, MAC_ARG(s->perm_mac.a));
+     s->nic = qemu_new_nic(&net_vmxnet3_info, &s->conf,
+                           object_get_typename(OBJECT(s)),
+                           d->id, s);
+     s->peer_has_vhdr = vmxnet3_peer_has_vnet_hdr(s);
+     s->tx_sop = true;
+     s->skip_current_tx_pkt = false;
+     s->tx_pkt = NULL;
+     s->rx_pkt = NULL;
+     s->rx_vlan_stripping = false;
+     s->lro_supported = false;
+     if (s->peer_has_vhdr) {
+         tap_set_vnet_hdr_len(qemu_get_queue(s->nic)->peer,
+             sizeof(struct virtio_net_hdr));
+         tap_using_vnet_hdr(qemu_get_queue(s->nic)->peer, 1);
+     }
+     qemu_format_nic_info_str(qemu_get_queue(s->nic), s->conf.macaddr.a);
+ }
+ static void
+ vmxnet3_unuse_msix_vectors(VMXNET3State *s, int num_vectors)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     int i;
+     for (i = 0; i < num_vectors; i++) {
+         msix_vector_unuse(d, i);
+     }
+ }
+ static bool
+ vmxnet3_use_msix_vectors(VMXNET3State *s, int num_vectors)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     int i;
+     for (i = 0; i < num_vectors; i++) {
+         int res = msix_vector_use(d, i);
+         if (0 > res) {
+             VMW_WRPRN("Failed to use MSI-X vector %d, error %d", i, res);
+             vmxnet3_unuse_msix_vectors(s, i);
+             return false;
+         }
+     }
+     return true;
+ }
+ static bool
+ vmxnet3_init_msix(VMXNET3State *s)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     int res = msix_init(d, VMXNET3_MAX_INTRS,
+                         &s->msix_bar,
+                         VMXNET3_MSIX_BAR_IDX, VMXNET3_OFF_MSIX_TABLE,
+                         &s->msix_bar,
+                         VMXNET3_MSIX_BAR_IDX, VMXNET3_OFF_MSIX_PBA,
+                         0);
+     if (0 > res) {
+         VMW_WRPRN("Failed to initialize MSI-X, error %d", res);
+         s->msix_used = false;
+     } else {
+         if (!vmxnet3_use_msix_vectors(s, VMXNET3_MAX_INTRS)) {
+             VMW_WRPRN("Failed to use MSI-X vectors, error %d", res);
+             msix_uninit(d, &s->msix_bar, &s->msix_bar);
+             s->msix_used = false;
+         } else {
+             s->msix_used = true;
+         }
+     }
+     return s->msix_used;
+ }
+ static void
+ vmxnet3_cleanup_msix(VMXNET3State *s)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     if (s->msix_used) {
+         msix_vector_unuse(d, VMXNET3_MAX_INTRS);
+         msix_uninit(d, &s->msix_bar, &s->msix_bar);
+     }
+ }
+ #define VMXNET3_MSI_NUM_VECTORS   (1)
+ #define VMXNET3_MSI_OFFSET        (0x50)
+ #define VMXNET3_USE_64BIT         (true)
+ #define VMXNET3_PER_VECTOR_MASK   (false)
+ static bool
+ vmxnet3_init_msi(VMXNET3State *s)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     int res;
+     res = msi_init(d, VMXNET3_MSI_OFFSET, VMXNET3_MSI_NUM_VECTORS,
+                    VMXNET3_USE_64BIT, VMXNET3_PER_VECTOR_MASK);
+     if (0 > res) {
+         VMW_WRPRN("Failed to initialize MSI, error %d", res);
+         s->msi_used = false;
+     } else {
+         s->msi_used = true;
+     }
+     return s->msi_used;
+ }
+ static void
+ vmxnet3_cleanup_msi(VMXNET3State *s)
+ {
+     PCIDevice *d = PCI_DEVICE(s);
+     if (s->msi_used) {
+         msi_uninit(d);
+     }
+ }
+ static void
+ vmxnet3_msix_save(QEMUFile *f, void *opaque)
+ {
+     PCIDevice *d = PCI_DEVICE(opaque);
+     msix_save(d, f);
+ }
+ static int
+ vmxnet3_msix_load(QEMUFile *f, void *opaque, int version_id)
+ {
+     PCIDevice *d = PCI_DEVICE(opaque);
+     msix_load(d, f);
+     return 0;
+ }
+ static const MemoryRegionOps b0_ops = {
+     .read = vmxnet3_io_bar0_read,
+     .write = vmxnet3_io_bar0_write,
+     .endianness = DEVICE_LITTLE_ENDIAN,
+     .impl = {
+             .min_access_size = 4,
+             .max_access_size = 4,
+     },
+ };
+ static const MemoryRegionOps b1_ops = {
+     .read = vmxnet3_io_bar1_read,
+     .write = vmxnet3_io_bar1_write,
+     .endianness = DEVICE_LITTLE_ENDIAN,
+     .impl = {
+             .min_access_size = 4,
+             .max_access_size = 4,
+     },
+ };
+ static int vmxnet3_pci_init(PCIDevice *pci_dev)
+ {
+     DeviceState *dev = DEVICE(pci_dev);
+     VMXNET3State *s = VMXNET3(pci_dev);
+     VMW_CBPRN("Starting init...");
+     memory_region_init_io(&s->bar0, &b0_ops, s,
+                           "vmxnet3-b0", VMXNET3_PT_REG_SIZE);
+     pci_register_bar(pci_dev, VMXNET3_BAR0_IDX,
+                      PCI_BASE_ADDRESS_SPACE_MEMORY, &s->bar0);
+     memory_region_init_io(&s->bar1, &b1_ops, s,
+                           "vmxnet3-b1", VMXNET3_VD_REG_SIZE);
+     pci_register_bar(pci_dev, VMXNET3_BAR1_IDX,
+                      PCI_BASE_ADDRESS_SPACE_MEMORY, &s->bar1);
+     memory_region_init(&s->msix_bar, "vmxnet3-msix-bar",
+                        VMXNET3_MSIX_BAR_SIZE);
+     pci_register_bar(pci_dev, VMXNET3_MSIX_BAR_IDX,
+                      PCI_BASE_ADDRESS_SPACE_MEMORY, &s->msix_bar);
+     vmxnet3_reset_interrupt_states(s);
+     /* Interrupt pin A */
+     pci_dev->config[PCI_INTERRUPT_PIN] = 0x01;
+     if (!vmxnet3_init_msix(s)) {
+         VMW_WRPRN("Failed to initialize MSI-X, configuration is inconsistent.");
+     }
+     if (!vmxnet3_init_msi(s)) {
+         VMW_WRPRN("Failed to initialize MSI, configuration is inconsistent.");
+     }
+     vmxnet3_net_init(s);
+     register_savevm(dev, "vmxnet3-msix", -1, 1,
+                     vmxnet3_msix_save, vmxnet3_msix_load, s);
+     add_boot_device_path(s->conf.bootindex, dev, "/ethernet-phy@0");
+     return 0;
+ }
+ static void vmxnet3_pci_uninit(PCIDevice *pci_dev)
+ {
+     DeviceState *dev = DEVICE(pci_dev);
+     VMXNET3State *s = VMXNET3(pci_dev);
+     VMW_CBPRN("Starting uninit...");
+     unregister_savevm(dev, "vmxnet3-msix", s);
+     vmxnet3_net_uninit(s);
+     vmxnet3_cleanup_msix(s);
+     vmxnet3_cleanup_msi(s);
+     memory_region_destroy(&s->bar0);
+     memory_region_destroy(&s->bar1);
+     memory_region_destroy(&s->msix_bar);
+ }
+ static void vmxnet3_qdev_reset(DeviceState *dev)
+ {
+     PCIDevice *d = PCI_DEVICE(dev);
+     VMXNET3State *s = VMXNET3(d);
+     VMW_CBPRN("Starting QDEV reset...");
+     vmxnet3_reset(s);
+ }
+ static bool vmxnet3_mc_list_needed(void *opaque)
+ {
+     return true;
+ }
+ static int vmxnet3_mcast_list_pre_load(void *opaque)
+ {
+     VMXNET3State *s = opaque;
+     s->mcast_list = g_malloc(s->mcast_list_buff_size);
+     return 0;
+ }
+ static void vmxnet3_pre_save(void *opaque)
+ {
+     VMXNET3State *s = opaque;
+     s->mcast_list_buff_size = s->mcast_list_len * sizeof(MACAddr);
+ }
+ static const VMStateDescription vmxstate_vmxnet3_mcast_list = {
+     .name = "vmxnet3/mcast_list",
+     .version_id = 1,
+     .minimum_version_id = 1,
+     .minimum_version_id_old = 1,
+     .pre_load = vmxnet3_mcast_list_pre_load,
+     .fields = (VMStateField[]) {
+         VMSTATE_VBUFFER_UINT32(mcast_list, VMXNET3State, 0, NULL, 0,
+             mcast_list_buff_size),
+         VMSTATE_END_OF_LIST()
+     }
+ };
+ static void vmxnet3_get_ring_from_file(QEMUFile *f, Vmxnet3Ring *r)
+ {
+     r->pa = qemu_get_be64(f);
+     r->size = qemu_get_be32(f);
+     r->cell_size = qemu_get_be32(f);
+     r->next = qemu_get_be32(f);
+     r->gen = qemu_get_byte(f);
+ }
+ static void vmxnet3_put_ring_to_file(QEMUFile *f, Vmxnet3Ring *r)
+ {
+     qemu_put_be64(f, r->pa);
+     qemu_put_be32(f, r->size);
+     qemu_put_be32(f, r->cell_size);
+     qemu_put_be32(f, r->next);
+     qemu_put_byte(f, r->gen);
+ }
+ static void vmxnet3_get_tx_stats_from_file(QEMUFile *f,
+     struct UPT1_TxStats *tx_stat)
+ {
+     tx_stat->TSOPktsTxOK = qemu_get_be64(f);
+     tx_stat->TSOBytesTxOK = qemu_get_be64(f);
+     tx_stat->ucastPktsTxOK = qemu_get_be64(f);
+     tx_stat->ucastBytesTxOK = qemu_get_be64(f);
+     tx_stat->mcastPktsTxOK = qemu_get_be64(f);
+     tx_stat->mcastBytesTxOK = qemu_get_be64(f);
+     tx_stat->bcastPktsTxOK = qemu_get_be64(f);
+     tx_stat->bcastBytesTxOK = qemu_get_be64(f);
+     tx_stat->pktsTxError = qemu_get_be64(f);
+     tx_stat->pktsTxDiscard = qemu_get_be64(f);
+ }
+ static void vmxnet3_put_tx_stats_to_file(QEMUFile *f,
+     struct UPT1_TxStats *tx_stat)
+ {
+     qemu_put_be64(f, tx_stat->TSOPktsTxOK);
+     qemu_put_be64(f, tx_stat->TSOBytesTxOK);
+     qemu_put_be64(f, tx_stat->ucastPktsTxOK);
+     qemu_put_be64(f, tx_stat->ucastBytesTxOK);
+     qemu_put_be64(f, tx_stat->mcastPktsTxOK);
+     qemu_put_be64(f, tx_stat->mcastBytesTxOK);
+     qemu_put_be64(f, tx_stat->bcastPktsTxOK);
+     qemu_put_be64(f, tx_stat->bcastBytesTxOK);
+     qemu_put_be64(f, tx_stat->pktsTxError);
+     qemu_put_be64(f, tx_stat->pktsTxDiscard);
+ }
+ static int vmxnet3_get_txq_descr(QEMUFile *f, void *pv, size_t size)
+ {
+     Vmxnet3TxqDescr *r = pv;
+     vmxnet3_get_ring_from_file(f, &r->tx_ring);
+     vmxnet3_get_ring_from_file(f, &r->comp_ring);
+     r->intr_idx = qemu_get_byte(f);
+     r->tx_stats_pa = qemu_get_be64(f);
+     vmxnet3_get_tx_stats_from_file(f, &r->txq_stats);
+     return 0;
+ }
+ static void vmxnet3_put_txq_descr(QEMUFile *f, void *pv, size_t size)
+ {
+     Vmxnet3TxqDescr *r = pv;
+     vmxnet3_put_ring_to_file(f, &r->tx_ring);
+     vmxnet3_put_ring_to_file(f, &r->comp_ring);
+     qemu_put_byte(f, r->intr_idx);
+     qemu_put_be64(f, r->tx_stats_pa);
+     vmxnet3_put_tx_stats_to_file(f, &r->txq_stats);
+ }
+ const VMStateInfo txq_descr_info = {
+     .name = "txq_descr",
+     .get = vmxnet3_get_txq_descr,
+     .put = vmxnet3_put_txq_descr
+ };
+ static void vmxnet3_get_rx_stats_from_file(QEMUFile *f,
+     struct UPT1_RxStats *rx_stat)
+ {
+     rx_stat->LROPktsRxOK = qemu_get_be64(f);
+     rx_stat->LROBytesRxOK = qemu_get_be64(f);
+     rx_stat->ucastPktsRxOK = qemu_get_be64(f);
+     rx_stat->ucastBytesRxOK = qemu_get_be64(f);
+     rx_stat->mcastPktsRxOK = qemu_get_be64(f);
+     rx_stat->mcastBytesRxOK = qemu_get_be64(f);
+     rx_stat->bcastPktsRxOK = qemu_get_be64(f);
+     rx_stat->bcastBytesRxOK = qemu_get_be64(f);
+     rx_stat->pktsRxOutOfBuf = qemu_get_be64(f);
+     rx_stat->pktsRxError = qemu_get_be64(f);
+ }
+ static void vmxnet3_put_rx_stats_to_file(QEMUFile *f,
+     struct UPT1_RxStats *rx_stat)
+ {
+     qemu_put_be64(f, rx_stat->LROPktsRxOK);
+     qemu_put_be64(f, rx_stat->LROBytesRxOK);
+     qemu_put_be64(f, rx_stat->ucastPktsRxOK);
+     qemu_put_be64(f, rx_stat->ucastBytesRxOK);
+     qemu_put_be64(f, rx_stat->mcastPktsRxOK);
+     qemu_put_be64(f, rx_stat->mcastBytesRxOK);
+     qemu_put_be64(f, rx_stat->bcastPktsRxOK);
+     qemu_put_be64(f, rx_stat->bcastBytesRxOK);
+     qemu_put_be64(f, rx_stat->pktsRxOutOfBuf);
+     qemu_put_be64(f, rx_stat->pktsRxError);
+ }
+ static int vmxnet3_get_rxq_descr(QEMUFile *f, void *pv, size_t size)
+ {
+     Vmxnet3RxqDescr *r = pv;
+     int i;
+     for (i = 0; i < VMXNET3_RX_RINGS_PER_QUEUE; i++) {
+         vmxnet3_get_ring_from_file(f, &r->rx_ring[i]);
+     }
+     vmxnet3_get_ring_from_file(f, &r->comp_ring);
+     r->intr_idx = qemu_get_byte(f);
+     r->rx_stats_pa = qemu_get_be64(f);
+     vmxnet3_get_rx_stats_from_file(f, &r->rxq_stats);
+     return 0;
+ }
+ static void vmxnet3_put_rxq_descr(QEMUFile *f, void *pv, size_t size)
+ {
+     Vmxnet3RxqDescr *r = pv;
+     int i;
+     for (i = 0; i < VMXNET3_RX_RINGS_PER_QUEUE; i++) {
+         vmxnet3_put_ring_to_file(f, &r->rx_ring[i]);
+     }
+     vmxnet3_put_ring_to_file(f, &r->comp_ring);
+     qemu_put_byte(f, r->intr_idx);
+     qemu_put_be64(f, r->rx_stats_pa);
+     vmxnet3_put_rx_stats_to_file(f, &r->rxq_stats);
+ }
+ static int vmxnet3_post_load(void *opaque, int version_id)
+ {
+     VMXNET3State *s = opaque;
+     PCIDevice *d = PCI_DEVICE(s);
+     vmxnet_tx_pkt_init(&s->tx_pkt, s->max_tx_frags, s->peer_has_vhdr);
+     vmxnet_rx_pkt_init(&s->rx_pkt, s->peer_has_vhdr);
+     if (s->msix_used) {
+         if  (!vmxnet3_use_msix_vectors(s, VMXNET3_MAX_INTRS)) {
+             VMW_WRPRN("Failed to re-use MSI-X vectors");
+             msix_uninit(d, &s->msix_bar, &s->msix_bar);
+             s->msix_used = false;
+             return -1;
+         }
+     }
+     return 0;
+ }
+ const VMStateInfo rxq_descr_info = {
+     .name = "rxq_descr",
+     .get = vmxnet3_get_rxq_descr,
+     .put = vmxnet3_put_rxq_descr
+ };
+ static int vmxnet3_get_int_state(QEMUFile *f, void *pv, size_t size)
+ {
+     Vmxnet3IntState *r = pv;
+     r->is_masked = qemu_get_byte(f);
+     r->is_pending = qemu_get_byte(f);
+     r->is_asserted = qemu_get_byte(f);
+     return 0;
+ }
+ static void vmxnet3_put_int_state(QEMUFile *f, void *pv, size_t size)
+ {
+     Vmxnet3IntState *r = pv;
+     qemu_put_byte(f, r->is_masked);
+     qemu_put_byte(f, r->is_pending);
+     qemu_put_byte(f, r->is_asserted);
+ }
+ const VMStateInfo int_state_info = {
+     .name = "int_state",
+     .get = vmxnet3_get_int_state,
+     .put = vmxnet3_put_int_state
+ };
+ static const VMStateDescription vmstate_vmxnet3 = {
+     .name = "vmxnet3",
+     .version_id = 1,
+     .minimum_version_id = 1,
+     .minimum_version_id_old = 1,
+     .pre_save = vmxnet3_pre_save,
+     .post_load = vmxnet3_post_load,
+     .fields      = (VMStateField[]) {
+             VMSTATE_PCI_DEVICE(parent_obj, VMXNET3State),
+             VMSTATE_BOOL(rx_packets_compound, VMXNET3State),
+             VMSTATE_BOOL(rx_vlan_stripping, VMXNET3State),
+             VMSTATE_BOOL(lro_supported, VMXNET3State),
+             VMSTATE_UINT32(rx_mode, VMXNET3State),
+             VMSTATE_UINT32(mcast_list_len, VMXNET3State),
+             VMSTATE_UINT32(mcast_list_buff_size, VMXNET3State),
+             VMSTATE_UINT32_ARRAY(vlan_table, VMXNET3State, VMXNET3_VFT_SIZE),
+             VMSTATE_UINT32(mtu, VMXNET3State),
+             VMSTATE_UINT16(max_rx_frags, VMXNET3State),
+             VMSTATE_UINT32(max_tx_frags, VMXNET3State),
+             VMSTATE_UINT8(event_int_idx, VMXNET3State),
+             VMSTATE_BOOL(auto_int_masking, VMXNET3State),
+             VMSTATE_UINT8(txq_num, VMXNET3State),
+             VMSTATE_UINT8(rxq_num, VMXNET3State),
+             VMSTATE_UINT32(device_active, VMXNET3State),
+             VMSTATE_UINT32(last_command, VMXNET3State),
+             VMSTATE_UINT32(link_status_and_speed, VMXNET3State),
+             VMSTATE_UINT32(temp_mac, VMXNET3State),
+             VMSTATE_UINT64(drv_shmem, VMXNET3State),
+             VMSTATE_UINT64(temp_shared_guest_driver_memory, VMXNET3State),
+             VMSTATE_ARRAY(txq_descr, VMXNET3State,
+                 VMXNET3_DEVICE_MAX_TX_QUEUES, 0, txq_descr_info,
+                 Vmxnet3TxqDescr),
+             VMSTATE_ARRAY(rxq_descr, VMXNET3State,
+                 VMXNET3_DEVICE_MAX_RX_QUEUES, 0, rxq_descr_info,
+                 Vmxnet3RxqDescr),
+             VMSTATE_ARRAY(interrupt_states, VMXNET3State, VMXNET3_MAX_INTRS,
+                 0, int_state_info, Vmxnet3IntState),
+             VMSTATE_END_OF_LIST()
+     },
+     .subsections = (VMStateSubsection[]) {
+         {
+             .vmsd = &vmxstate_vmxnet3_mcast_list,
+             .needed = vmxnet3_mc_list_needed
+         },
+         {
+             /* empty element. */
+         }
+     }
+ };
+ static void
+ vmxnet3_write_config(PCIDevice *pci_dev, uint32_t addr, uint32_t val, int len)
+ {
+     pci_default_write_config(pci_dev, addr, val, len);
+     msix_write_config(pci_dev, addr, val, len);
+     msi_write_config(pci_dev, addr, val, len);
+ }
+ static Property vmxnet3_properties[] = {
+     DEFINE_NIC_PROPERTIES(VMXNET3State, conf),
+     DEFINE_PROP_END_OF_LIST(),
+ };
+ static void vmxnet3_class_init(ObjectClass *class, void *data)
+ {
+     DeviceClass *dc = DEVICE_CLASS(class);
+     PCIDeviceClass *c = PCI_DEVICE_CLASS(class);
+     c->init = vmxnet3_pci_init;
+     c->exit = vmxnet3_pci_uninit;
+     c->vendor_id = PCI_VENDOR_ID_VMWARE;
+     c->device_id = PCI_DEVICE_ID_VMWARE_VMXNET3;
+     c->revision = PCI_DEVICE_ID_VMWARE_VMXNET3_REVISION;
+     c->class_id = PCI_CLASS_NETWORK_ETHERNET;
+     c->subsystem_vendor_id = PCI_VENDOR_ID_VMWARE;
+     c->subsystem_id = PCI_DEVICE_ID_VMWARE_VMXNET3;
+     c->config_write = vmxnet3_write_config,
+     dc->desc = "VMWare Paravirtualized Ethernet v3";
+     dc->reset = vmxnet3_qdev_reset;
+     dc->vmsd = &vmstate_vmxnet3;
+     dc->props = vmxnet3_properties;
+ }
+ static const TypeInfo vmxnet3_info = {
+     .name          = TYPE_VMXNET3,
+     .parent        = TYPE_PCI_DEVICE,
+     .instance_size = sizeof(VMXNET3State),
+     .class_init    = vmxnet3_class_init,
+ };
+ static void vmxnet3_register_types(void)
+ {
+     VMW_CBPRN("vmxnet3_register_types called...");
+     type_register_static(&vmxnet3_info);
+ }
+ type_init(vmxnet3_register_types)
index 0000000000000000000000000000000000000000,7db0c8f5e0471e70cff3d9ef68949fc45976d595..4eae7c76be90dab79738d12dc4bdc08c776e6302
mode 000000,100644..100644
--- /dev/null
@@@ -1,0 -1,760 +1,757 @@@
 -#define const_cpu_to_le64(x) bswap_64(x)
+ /*
+  * QEMU VMWARE VMXNET3 paravirtual NIC interface definitions
+  *
+  * Copyright (c) 2012 Ravello Systems LTD (http://ravellosystems.com)
+  *
+  * Developed by Daynix Computing LTD (http://www.daynix.com)
+  *
+  * Authors:
+  * Dmitry Fleytman <dmitry@daynix.com>
+  * Tamir Shomer <tamirs@daynix.com>
+  * Yan Vugenfirer <yan@daynix.com>
+  *
+  * This work is licensed under the terms of the GNU GPL, version 2.
+  * See the COPYING file in the top-level directory.
+  *
+  */
+ #ifndef _QEMU_VMXNET3_H
+ #define _QEMU_VMXNET3_H
+ #define VMXNET3_DEVICE_MAX_TX_QUEUES 8
+ #define VMXNET3_DEVICE_MAX_RX_QUEUES 8   /* Keep this value as a power of 2 */
+ /*
+  * VMWARE headers we got from Linux kernel do not fully comply QEMU coding
+  * standards in sense of types and defines used.
+  * Since we didn't want to change VMWARE code, following set of typedefs
+  * and defines needed to compile these headers with QEMU introduced.
+  */
+ #define u64     uint64_t
+ #define u32     uint32_t
+ #define u16     uint16_t
+ #define u8      uint8_t
+ #define __le16  uint16_t
+ #define __le32  uint32_t
+ #define __le64  uint64_t
+ #define __packed QEMU_PACKED
+ #if defined(HOST_WORDS_BIGENDIAN)
 -#define const_cpu_to_le64(x) (x)
+ #define __BIG_ENDIAN_BITFIELD
+ #else
 -    UPT1_F_RXCSUM        = const_cpu_to_le64(0x0001), /* rx csum verification */
 -    UPT1_F_RSS        = const_cpu_to_le64(0x0002),
 -    UPT1_F_RXVLAN        = const_cpu_to_le64(0x0004), /* VLAN tag stripping */
 -    UPT1_F_LRO        = const_cpu_to_le64(0x0008),
+ #endif
+ /*
+  * Following is an interface definition for
+  * VMXNET3 device as provided by VMWARE
+  * See original copyright from Linux kernel v3.2.8
+  * header file drivers/net/vmxnet3/vmxnet3_defs.h below.
+  */
+ /*
+  * Linux driver for VMware's vmxnet3 ethernet NIC.
+  *
+  * Copyright (C) 2008-2009, VMware, Inc. All Rights Reserved.
+  *
+  * This program is free software; you can redistribute it and/or modify it
+  * under the terms of the GNU General Public License as published by the
+  * Free Software Foundation; version 2 of the License and no later version.
+  *
+  * This program is distributed in the hope that it will be useful, but
+  * WITHOUT ANY WARRANTY; without even the implied warranty of
+  * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, GOOD TITLE or
+  * NON INFRINGEMENT.  See the GNU General Public License for more
+  * details.
+  *
+  * You should have received a copy of the GNU General Public License
+  * along with this program; if not, write to the Free Software
+  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
+  *
+  * The full GNU General Public License is included in this distribution in
+  * the file called "COPYING".
+  *
+  * Maintained by: Shreyas Bhatewara <pv-drivers@vmware.com>
+  *
+  */
+ struct UPT1_TxStats {
+     u64            TSOPktsTxOK;  /* TSO pkts post-segmentation */
+     u64            TSOBytesTxOK;
+     u64            ucastPktsTxOK;
+     u64            ucastBytesTxOK;
+     u64            mcastPktsTxOK;
+     u64            mcastBytesTxOK;
+     u64            bcastPktsTxOK;
+     u64            bcastBytesTxOK;
+     u64            pktsTxError;
+     u64            pktsTxDiscard;
+ };
+ struct UPT1_RxStats {
+     u64            LROPktsRxOK;    /* LRO pkts */
+     u64            LROBytesRxOK;   /* bytes from LRO pkts */
+     /* the following counters are for pkts from the wire, i.e., pre-LRO */
+     u64            ucastPktsRxOK;
+     u64            ucastBytesRxOK;
+     u64            mcastPktsRxOK;
+     u64            mcastBytesRxOK;
+     u64            bcastPktsRxOK;
+     u64            bcastBytesRxOK;
+     u64            pktsRxOutOfBuf;
+     u64            pktsRxError;
+ };
+ /* interrupt moderation level */
+ enum {
+     UPT1_IML_NONE        = 0, /* no interrupt moderation */
+     UPT1_IML_HIGHEST    = 7, /* least intr generated */
+     UPT1_IML_ADAPTIVE    = 8, /* adpative intr moderation */
+ };
+ /* values for UPT1_RSSConf.hashFunc */
+ enum {
+     UPT1_RSS_HASH_TYPE_NONE      = 0x0,
+     UPT1_RSS_HASH_TYPE_IPV4      = 0x01,
+     UPT1_RSS_HASH_TYPE_TCP_IPV4  = 0x02,
+     UPT1_RSS_HASH_TYPE_IPV6      = 0x04,
+     UPT1_RSS_HASH_TYPE_TCP_IPV6  = 0x08,
+ };
+ enum {
+     UPT1_RSS_HASH_FUNC_NONE      = 0x0,
+     UPT1_RSS_HASH_FUNC_TOEPLITZ  = 0x01,
+ };
+ #define UPT1_RSS_MAX_KEY_SIZE        40
+ #define UPT1_RSS_MAX_IND_TABLE_SIZE  128
+ struct UPT1_RSSConf {
+     u16            hashType;
+     u16            hashFunc;
+     u16            hashKeySize;
+     u16            indTableSize;
+     u8            hashKey[UPT1_RSS_MAX_KEY_SIZE];
+     u8            indTable[UPT1_RSS_MAX_IND_TABLE_SIZE];
+ };
+ /* features */
+ enum {
 -#undef const_cpu_to_le64
++    UPT1_F_RXCSUM        = 0x0001, /* rx csum verification */
++    UPT1_F_RSS           = 0x0002,
++    UPT1_F_RXVLAN        = 0x0004, /* VLAN tag stripping */
++    UPT1_F_LRO           = 0x0008,
+ };
+ /* all registers are 32 bit wide */
+ /* BAR 1 */
+ enum {
+     VMXNET3_REG_VRRS    = 0x0,    /* Vmxnet3 Revision Report Selection */
+     VMXNET3_REG_UVRS    = 0x8,    /* UPT Version Report Selection */
+     VMXNET3_REG_DSAL    = 0x10,    /* Driver Shared Address Low */
+     VMXNET3_REG_DSAH    = 0x18,    /* Driver Shared Address High */
+     VMXNET3_REG_CMD        = 0x20,    /* Command */
+     VMXNET3_REG_MACL    = 0x28,    /* MAC Address Low */
+     VMXNET3_REG_MACH    = 0x30,    /* MAC Address High */
+     VMXNET3_REG_ICR        = 0x38,    /* Interrupt Cause Register */
+     VMXNET3_REG_ECR        = 0x40    /* Event Cause Register */
+ };
+ /* BAR 0 */
+ enum {
+     VMXNET3_REG_IMR        = 0x0,     /* Interrupt Mask Register */
+     VMXNET3_REG_TXPROD    = 0x600, /* Tx Producer Index */
+     VMXNET3_REG_RXPROD    = 0x800, /* Rx Producer Index for ring 1 */
+     VMXNET3_REG_RXPROD2    = 0xA00     /* Rx Producer Index for ring 2 */
+ };
+ #define VMXNET3_PT_REG_SIZE     4096    /* BAR 0 */
+ #define VMXNET3_VD_REG_SIZE     4096    /* BAR 1 */
+ #define VMXNET3_REG_ALIGN       8    /* All registers are 8-byte aligned. */
+ #define VMXNET3_REG_ALIGN_MASK  0x7
+ /* I/O Mapped access to registers */
+ #define VMXNET3_IO_TYPE_PT              0
+ #define VMXNET3_IO_TYPE_VD              1
+ #define VMXNET3_IO_ADDR(type, reg)      (((type) << 24) | ((reg) & 0xFFFFFF))
+ #define VMXNET3_IO_TYPE(addr)           ((addr) >> 24)
+ #define VMXNET3_IO_REG(addr)            ((addr) & 0xFFFFFF)
+ enum {
+     VMXNET3_CMD_FIRST_SET = 0xCAFE0000,
+     VMXNET3_CMD_ACTIVATE_DEV = VMXNET3_CMD_FIRST_SET, /* 0xCAFE0000 */
+     VMXNET3_CMD_QUIESCE_DEV,                          /* 0xCAFE0001 */
+     VMXNET3_CMD_RESET_DEV,                            /* 0xCAFE0002 */
+     VMXNET3_CMD_UPDATE_RX_MODE,                       /* 0xCAFE0003 */
+     VMXNET3_CMD_UPDATE_MAC_FILTERS,                   /* 0xCAFE0004 */
+     VMXNET3_CMD_UPDATE_VLAN_FILTERS,                  /* 0xCAFE0005 */
+     VMXNET3_CMD_UPDATE_RSSIDT,                        /* 0xCAFE0006 */
+     VMXNET3_CMD_UPDATE_IML,                           /* 0xCAFE0007 */
+     VMXNET3_CMD_UPDATE_PMCFG,                         /* 0xCAFE0008 */
+     VMXNET3_CMD_UPDATE_FEATURE,                       /* 0xCAFE0009 */
+     VMXNET3_CMD_LOAD_PLUGIN,                          /* 0xCAFE000A */
+     VMXNET3_CMD_FIRST_GET = 0xF00D0000,
+     VMXNET3_CMD_GET_QUEUE_STATUS = VMXNET3_CMD_FIRST_GET, /* 0xF00D0000 */
+     VMXNET3_CMD_GET_STATS,                                /* 0xF00D0001 */
+     VMXNET3_CMD_GET_LINK,                                 /* 0xF00D0002 */
+     VMXNET3_CMD_GET_PERM_MAC_LO,                          /* 0xF00D0003 */
+     VMXNET3_CMD_GET_PERM_MAC_HI,                          /* 0xF00D0004 */
+     VMXNET3_CMD_GET_DID_LO,                               /* 0xF00D0005 */
+     VMXNET3_CMD_GET_DID_HI,                               /* 0xF00D0006 */
+     VMXNET3_CMD_GET_DEV_EXTRA_INFO,                       /* 0xF00D0007 */
+     VMXNET3_CMD_GET_CONF_INTR                             /* 0xF00D0008 */
+ };
+ /*
+  *    Little Endian layout of bitfields -
+  *    Byte 0 :    7.....len.....0
+  *    Byte 1 :    rsvd gen 13.len.8
+  *    Byte 2 :     5.msscof.0 ext1  dtype
+  *    Byte 3 :     13...msscof...6
+  *
+  *    Big Endian layout of bitfields -
+  *    Byte 0:        13...msscof...6
+  *    Byte 1 :     5.msscof.0 ext1  dtype
+  *    Byte 2 :    rsvd gen 13.len.8
+  *    Byte 3 :    7.....len.....0
+  *
+  *    Thus, le32_to_cpu on the dword will allow the big endian driver to read
+  *    the bit fields correctly. And cpu_to_le32 will convert bitfields
+  *    bit fields written by big endian driver to format required by device.
+  */
+ struct Vmxnet3_TxDesc {
+     __le64 addr;
+ #ifdef __BIG_ENDIAN_BITFIELD
+     u32 msscof:14;  /* MSS, checksum offset, flags */
+     u32 ext1:1;
+     u32 dtype:1;    /* descriptor type */
+     u32 rsvd:1;
+     u32 gen:1;      /* generation bit */
+     u32 len:14;
+ #else
+     u32 len:14;
+     u32 gen:1;      /* generation bit */
+     u32 rsvd:1;
+     u32 dtype:1;    /* descriptor type */
+     u32 ext1:1;
+     u32 msscof:14;  /* MSS, checksum offset, flags */
+ #endif  /* __BIG_ENDIAN_BITFIELD */
+ #ifdef __BIG_ENDIAN_BITFIELD
+     u32 tci:16;     /* Tag to Insert */
+     u32 ti:1;       /* VLAN Tag Insertion */
+     u32 ext2:1;
+     u32 cq:1;       /* completion request */
+     u32 eop:1;      /* End Of Packet */
+     u32 om:2;       /* offload mode */
+     u32 hlen:10;    /* header len */
+ #else
+     u32 hlen:10;    /* header len */
+     u32 om:2;       /* offload mode */
+     u32 eop:1;      /* End Of Packet */
+     u32 cq:1;       /* completion request */
+     u32 ext2:1;
+     u32 ti:1;       /* VLAN Tag Insertion */
+     u32 tci:16;     /* Tag to Insert */
+ #endif  /* __BIG_ENDIAN_BITFIELD */
+ };
+ /* TxDesc.OM values */
+ #define VMXNET3_OM_NONE        0
+ #define VMXNET3_OM_CSUM        2
+ #define VMXNET3_OM_TSO        3
+ /* fields in TxDesc we access w/o using bit fields */
+ #define VMXNET3_TXD_EOP_SHIFT    12
+ #define VMXNET3_TXD_CQ_SHIFT    13
+ #define VMXNET3_TXD_GEN_SHIFT    14
+ #define VMXNET3_TXD_EOP_DWORD_SHIFT 3
+ #define VMXNET3_TXD_GEN_DWORD_SHIFT 2
+ #define VMXNET3_TXD_CQ        (1 << VMXNET3_TXD_CQ_SHIFT)
+ #define VMXNET3_TXD_EOP        (1 << VMXNET3_TXD_EOP_SHIFT)
+ #define VMXNET3_TXD_GEN        (1 << VMXNET3_TXD_GEN_SHIFT)
+ #define VMXNET3_HDR_COPY_SIZE   128
+ struct Vmxnet3_TxDataDesc {
+     u8        data[VMXNET3_HDR_COPY_SIZE];
+ };
+ #define VMXNET3_TCD_GEN_SHIFT    31
+ #define VMXNET3_TCD_GEN_SIZE    1
+ #define VMXNET3_TCD_TXIDX_SHIFT    0
+ #define VMXNET3_TCD_TXIDX_SIZE    12
+ #define VMXNET3_TCD_GEN_DWORD_SHIFT    3
+ struct Vmxnet3_TxCompDesc {
+     u32        txdIdx:12;    /* Index of the EOP TxDesc */
+     u32        ext1:20;
+     __le32        ext2;
+     __le32        ext3;
+     u32        rsvd:24;
+     u32        type:7;       /* completion type */
+     u32        gen:1;        /* generation bit */
+ };
+ struct Vmxnet3_RxDesc {
+     __le64        addr;
+ #ifdef __BIG_ENDIAN_BITFIELD
+     u32        gen:1;        /* Generation bit */
+     u32        rsvd:15;
+     u32        dtype:1;      /* Descriptor type */
+     u32        btype:1;      /* Buffer Type */
+     u32        len:14;
+ #else
+     u32        len:14;
+     u32        btype:1;      /* Buffer Type */
+     u32        dtype:1;      /* Descriptor type */
+     u32        rsvd:15;
+     u32        gen:1;        /* Generation bit */
+ #endif
+     u32        ext1;
+ };
+ /* values of RXD.BTYPE */
+ #define VMXNET3_RXD_BTYPE_HEAD   0    /* head only */
+ #define VMXNET3_RXD_BTYPE_BODY   1    /* body only */
+ /* fields in RxDesc we access w/o using bit fields */
+ #define VMXNET3_RXD_BTYPE_SHIFT  14
+ #define VMXNET3_RXD_GEN_SHIFT    31
+ struct Vmxnet3_RxCompDesc {
+ #ifdef __BIG_ENDIAN_BITFIELD
+     u32        ext2:1;
+     u32        cnc:1;        /* Checksum Not Calculated */
+     u32        rssType:4;    /* RSS hash type used */
+     u32        rqID:10;      /* rx queue/ring ID */
+     u32        sop:1;        /* Start of Packet */
+     u32        eop:1;        /* End of Packet */
+     u32        ext1:2;
+     u32        rxdIdx:12;    /* Index of the RxDesc */
+ #else
+     u32        rxdIdx:12;    /* Index of the RxDesc */
+     u32        ext1:2;
+     u32        eop:1;        /* End of Packet */
+     u32        sop:1;        /* Start of Packet */
+     u32        rqID:10;      /* rx queue/ring ID */
+     u32        rssType:4;    /* RSS hash type used */
+     u32        cnc:1;        /* Checksum Not Calculated */
+     u32        ext2:1;
+ #endif  /* __BIG_ENDIAN_BITFIELD */
+     __le32        rssHash;      /* RSS hash value */
+ #ifdef __BIG_ENDIAN_BITFIELD
+     u32        tci:16;       /* Tag stripped */
+     u32        ts:1;         /* Tag is stripped */
+     u32        err:1;        /* Error */
+     u32        len:14;       /* data length */
+ #else
+     u32        len:14;       /* data length */
+     u32        err:1;        /* Error */
+     u32        ts:1;         /* Tag is stripped */
+     u32        tci:16;       /* Tag stripped */
+ #endif  /* __BIG_ENDIAN_BITFIELD */
+ #ifdef __BIG_ENDIAN_BITFIELD
+     u32        gen:1;        /* generation bit */
+     u32        type:7;       /* completion type */
+     u32        fcs:1;        /* Frame CRC correct */
+     u32        frg:1;        /* IP Fragment */
+     u32        v4:1;         /* IPv4 */
+     u32        v6:1;         /* IPv6 */
+     u32        ipc:1;        /* IP Checksum Correct */
+     u32        tcp:1;        /* TCP packet */
+     u32        udp:1;        /* UDP packet */
+     u32        tuc:1;        /* TCP/UDP Checksum Correct */
+     u32        csum:16;
+ #else
+     u32        csum:16;
+     u32        tuc:1;        /* TCP/UDP Checksum Correct */
+     u32        udp:1;        /* UDP packet */
+     u32        tcp:1;        /* TCP packet */
+     u32        ipc:1;        /* IP Checksum Correct */
+     u32        v6:1;         /* IPv6 */
+     u32        v4:1;         /* IPv4 */
+     u32        frg:1;        /* IP Fragment */
+     u32        fcs:1;        /* Frame CRC correct */
+     u32        type:7;       /* completion type */
+     u32        gen:1;        /* generation bit */
+ #endif  /* __BIG_ENDIAN_BITFIELD */
+ };
+ /* fields in RxCompDesc we access via Vmxnet3_GenericDesc.dword[3] */
+ #define VMXNET3_RCD_TUC_SHIFT    16
+ #define VMXNET3_RCD_IPC_SHIFT    19
+ /* fields in RxCompDesc we access via Vmxnet3_GenericDesc.qword[1] */
+ #define VMXNET3_RCD_TYPE_SHIFT    56
+ #define VMXNET3_RCD_GEN_SHIFT    63
+ /* csum OK for TCP/UDP pkts over IP */
+ #define VMXNET3_RCD_CSUM_OK (1 << VMXNET3_RCD_TUC_SHIFT | \
+                      1 << VMXNET3_RCD_IPC_SHIFT)
+ #define VMXNET3_TXD_GEN_SIZE 1
+ #define VMXNET3_TXD_EOP_SIZE 1
+ /* value of RxCompDesc.rssType */
+ enum {
+     VMXNET3_RCD_RSS_TYPE_NONE     = 0,
+     VMXNET3_RCD_RSS_TYPE_IPV4     = 1,
+     VMXNET3_RCD_RSS_TYPE_TCPIPV4  = 2,
+     VMXNET3_RCD_RSS_TYPE_IPV6     = 3,
+     VMXNET3_RCD_RSS_TYPE_TCPIPV6  = 4,
+ };
+ /* a union for accessing all cmd/completion descriptors */
+ union Vmxnet3_GenericDesc {
+     __le64                qword[2];
+     __le32                dword[4];
+     __le16                word[8];
+     struct Vmxnet3_TxDesc        txd;
+     struct Vmxnet3_RxDesc        rxd;
+     struct Vmxnet3_TxCompDesc    tcd;
+     struct Vmxnet3_RxCompDesc    rcd;
+ };
+ #define VMXNET3_INIT_GEN       1
+ /* Max size of a single tx buffer */
+ #define VMXNET3_MAX_TX_BUF_SIZE  (1 << 14)
+ /* # of tx desc needed for a tx buffer size */
+ #define VMXNET3_TXD_NEEDED(size) (((size) + VMXNET3_MAX_TX_BUF_SIZE - 1) / \
+                     VMXNET3_MAX_TX_BUF_SIZE)
+ /* max # of tx descs for a non-tso pkt */
+ #define VMXNET3_MAX_TXD_PER_PKT 16
+ /* Max size of a single rx buffer */
+ #define VMXNET3_MAX_RX_BUF_SIZE  ((1 << 14) - 1)
+ /* Minimum size of a type 0 buffer */
+ #define VMXNET3_MIN_T0_BUF_SIZE  128
+ #define VMXNET3_MAX_CSUM_OFFSET  1024
+ /* Ring base address alignment */
+ #define VMXNET3_RING_BA_ALIGN   512
+ #define VMXNET3_RING_BA_MASK    (VMXNET3_RING_BA_ALIGN - 1)
+ /* Ring size must be a multiple of 32 */
+ #define VMXNET3_RING_SIZE_ALIGN 32
+ #define VMXNET3_RING_SIZE_MASK  (VMXNET3_RING_SIZE_ALIGN - 1)
+ /* Max ring size */
+ #define VMXNET3_TX_RING_MAX_SIZE   4096
+ #define VMXNET3_TC_RING_MAX_SIZE   4096
+ #define VMXNET3_RX_RING_MAX_SIZE   4096
+ #define VMXNET3_RC_RING_MAX_SIZE   8192
+ /* a list of reasons for queue stop */
+ enum {
+  VMXNET3_ERR_NOEOP        = 0x80000000, /* cannot find the EOP desc of a pkt */
+  VMXNET3_ERR_TXD_REUSE    = 0x80000001, /* reuse TxDesc before tx completion */
+  VMXNET3_ERR_BIG_PKT      = 0x80000002, /* too many TxDesc for a pkt */
+  VMXNET3_ERR_DESC_NOT_SPT = 0x80000003, /* descriptor type not supported */
+  VMXNET3_ERR_SMALL_BUF    = 0x80000004, /* type 0 buffer too small */
+  VMXNET3_ERR_STRESS       = 0x80000005, /* stress option firing in vmkernel */
+  VMXNET3_ERR_SWITCH       = 0x80000006, /* mode switch failure */
+  VMXNET3_ERR_TXD_INVALID  = 0x80000007, /* invalid TxDesc */
+ };
+ /* completion descriptor types */
+ #define VMXNET3_CDTYPE_TXCOMP      0    /* Tx Completion Descriptor */
+ #define VMXNET3_CDTYPE_RXCOMP      3    /* Rx Completion Descriptor */
+ enum {
+     VMXNET3_GOS_BITS_UNK    = 0,   /* unknown */
+     VMXNET3_GOS_BITS_32     = 1,
+     VMXNET3_GOS_BITS_64     = 2,
+ };
+ #define VMXNET3_GOS_TYPE_UNK        0 /* unknown */
+ #define VMXNET3_GOS_TYPE_LINUX      1
+ #define VMXNET3_GOS_TYPE_WIN        2
+ #define VMXNET3_GOS_TYPE_SOLARIS    3
+ #define VMXNET3_GOS_TYPE_FREEBSD    4
+ #define VMXNET3_GOS_TYPE_PXE        5
+ struct Vmxnet3_GOSInfo {
+ #ifdef __BIG_ENDIAN_BITFIELD
+     u32        gosMisc:10;    /* other info about gos */
+     u32        gosVer:16;     /* gos version */
+     u32        gosType:4;     /* which guest */
+     u32        gosBits:2;    /* 32-bit or 64-bit? */
+ #else
+     u32        gosBits:2;     /* 32-bit or 64-bit? */
+     u32        gosType:4;     /* which guest */
+     u32        gosVer:16;     /* gos version */
+     u32        gosMisc:10;    /* other info about gos */
+ #endif  /* __BIG_ENDIAN_BITFIELD */
+ };
+ struct Vmxnet3_DriverInfo {
+     __le32                version;
+     struct Vmxnet3_GOSInfo        gos;
+     __le32                vmxnet3RevSpt;
+     __le32                uptVerSpt;
+ };
+ #define VMXNET3_REV1_MAGIC  0xbabefee1
+ /*
+  * QueueDescPA must be 128 bytes aligned. It points to an array of
+  * Vmxnet3_TxQueueDesc followed by an array of Vmxnet3_RxQueueDesc.
+  * The number of Vmxnet3_TxQueueDesc/Vmxnet3_RxQueueDesc are specified by
+  * Vmxnet3_MiscConf.numTxQueues/numRxQueues, respectively.
+  */
+ #define VMXNET3_QUEUE_DESC_ALIGN  128
+ struct Vmxnet3_MiscConf {
+     struct Vmxnet3_DriverInfo driverInfo;
+     __le64        uptFeatures;
+     __le64        ddPA;         /* driver data PA */
+     __le64        queueDescPA;  /* queue descriptor table PA */
+     __le32        ddLen;        /* driver data len */
+     __le32        queueDescLen; /* queue desc. table len in bytes */
+     __le32        mtu;
+     __le16        maxNumRxSG;
+     u8        numTxQueues;
+     u8        numRxQueues;
+     __le32        reserved[4];
+ };
+ struct Vmxnet3_TxQueueConf {
+     __le64        txRingBasePA;
+     __le64        dataRingBasePA;
+     __le64        compRingBasePA;
+     __le64        ddPA;         /* driver data */
+     __le64        reserved;
+     __le32        txRingSize;   /* # of tx desc */
+     __le32        dataRingSize; /* # of data desc */
+     __le32        compRingSize; /* # of comp desc */
+     __le32        ddLen;        /* size of driver data */
+     u8        intrIdx;
+     u8        _pad[7];
+ };
+ struct Vmxnet3_RxQueueConf {
+     __le64        rxRingBasePA[2];
+     __le64        compRingBasePA;
+     __le64        ddPA;            /* driver data */
+     __le64        reserved;
+     __le32        rxRingSize[2];   /* # of rx desc */
+     __le32        compRingSize;    /* # of rx comp desc */
+     __le32        ddLen;           /* size of driver data */
+     u8        intrIdx;
+     u8        _pad[7];
+ };
+ enum vmxnet3_intr_mask_mode {
+     VMXNET3_IMM_AUTO   = 0,
+     VMXNET3_IMM_ACTIVE = 1,
+     VMXNET3_IMM_LAZY   = 2
+ };
+ enum vmxnet3_intr_type {
+     VMXNET3_IT_AUTO = 0,
+     VMXNET3_IT_INTX = 1,
+     VMXNET3_IT_MSI  = 2,
+     VMXNET3_IT_MSIX = 3
+ };
+ #define VMXNET3_MAX_TX_QUEUES  8
+ #define VMXNET3_MAX_RX_QUEUES  16
+ /* addition 1 for events */
+ #define VMXNET3_MAX_INTRS      25
+ /* value of intrCtrl */
+ #define VMXNET3_IC_DISABLE_ALL  0x1   /* bit 0 */
+ struct Vmxnet3_IntrConf {
+     bool        autoMask;
+     u8        numIntrs;      /* # of interrupts */
+     u8        eventIntrIdx;
+     u8        modLevels[VMXNET3_MAX_INTRS];    /* moderation level for
+                              * each intr */
+     __le32        intrCtrl;
+     __le32        reserved[2];
+ };
+ /* one bit per VLAN ID, the size is in the units of u32 */
+ #define VMXNET3_VFT_SIZE  (4096/(sizeof(uint32_t)*8))
+ struct Vmxnet3_QueueStatus {
+     bool        stopped;
+     u8        _pad[3];
+     __le32        error;
+ };
+ struct Vmxnet3_TxQueueCtrl {
+     __le32        txNumDeferred;
+     __le32        txThreshold;
+     __le64        reserved;
+ };
+ struct Vmxnet3_RxQueueCtrl {
+     bool        updateRxProd;
+     u8        _pad[7];
+     __le64        reserved;
+ };
+ enum {
+     VMXNET3_RXM_UCAST     = 0x01,  /* unicast only */
+     VMXNET3_RXM_MCAST     = 0x02,  /* multicast passing the filters */
+     VMXNET3_RXM_BCAST     = 0x04,  /* broadcast only */
+     VMXNET3_RXM_ALL_MULTI = 0x08,  /* all multicast */
+     VMXNET3_RXM_PROMISC   = 0x10  /* promiscuous */
+ };
+ struct Vmxnet3_RxFilterConf {
+     __le32        rxMode;       /* VMXNET3_RXM_xxx */
+     __le16        mfTableLen;   /* size of the multicast filter table */
+     __le16        _pad1;
+     __le64        mfTablePA;    /* PA of the multicast filters table */
+     __le32        vfTable[VMXNET3_VFT_SIZE]; /* vlan filter */
+ };
+ #define VMXNET3_PM_MAX_FILTERS        6
+ #define VMXNET3_PM_MAX_PATTERN_SIZE   128
+ #define VMXNET3_PM_MAX_MASK_SIZE      (VMXNET3_PM_MAX_PATTERN_SIZE / 8)
+ #define VMXNET3_PM_WAKEUP_MAGIC  cpu_to_le16(0x01)  /* wake up on magic pkts */
+ #define VMXNET3_PM_WAKEUP_FILTER cpu_to_le16(0x02)  /* wake up on pkts matching
+                                                      * filters */
+ struct Vmxnet3_PM_PktFilter {
+     u8        maskSize;
+     u8        patternSize;
+     u8        mask[VMXNET3_PM_MAX_MASK_SIZE];
+     u8        pattern[VMXNET3_PM_MAX_PATTERN_SIZE];
+     u8        pad[6];
+ };
+ struct Vmxnet3_PMConf {
+     __le16        wakeUpEvents;  /* VMXNET3_PM_WAKEUP_xxx */
+     u8        numFilters;
+     u8        pad[5];
+     struct Vmxnet3_PM_PktFilter filters[VMXNET3_PM_MAX_FILTERS];
+ };
+ struct Vmxnet3_VariableLenConfDesc {
+     __le32        confVer;
+     __le32        confLen;
+     __le64        confPA;
+ };
+ struct Vmxnet3_TxQueueDesc {
+     struct Vmxnet3_TxQueueCtrl        ctrl;
+     struct Vmxnet3_TxQueueConf        conf;
+     /* Driver read after a GET command */
+     struct Vmxnet3_QueueStatus        status;
+     struct UPT1_TxStats            stats;
+     u8                    _pad[88]; /* 128 aligned */
+ };
+ struct Vmxnet3_RxQueueDesc {
+     struct Vmxnet3_RxQueueCtrl        ctrl;
+     struct Vmxnet3_RxQueueConf        conf;
+     /* Driver read after a GET commad */
+     struct Vmxnet3_QueueStatus        status;
+     struct UPT1_RxStats            stats;
+     u8                      __pad[88]; /* 128 aligned */
+ };
+ struct Vmxnet3_DSDevRead {
+     /* read-only region for device, read by dev in response to a SET cmd */
+     struct Vmxnet3_MiscConf            misc;
+     struct Vmxnet3_IntrConf            intrConf;
+     struct Vmxnet3_RxFilterConf        rxFilterConf;
+     struct Vmxnet3_VariableLenConfDesc    rssConfDesc;
+     struct Vmxnet3_VariableLenConfDesc    pmConfDesc;
+     struct Vmxnet3_VariableLenConfDesc    pluginConfDesc;
+ };
+ /* All structures in DriverShared are padded to multiples of 8 bytes */
+ struct Vmxnet3_DriverShared {
+     __le32              magic;
+     /* make devRead start at 64bit boundaries */
+     __le32              pad;
+     struct Vmxnet3_DSDevRead    devRead;
+     __le32              ecr;
+     __le32              reserved[5];
+ };
+ #define VMXNET3_ECR_RQERR       (1 << 0)
+ #define VMXNET3_ECR_TQERR       (1 << 1)
+ #define VMXNET3_ECR_LINK        (1 << 2)
+ #define VMXNET3_ECR_DIC         (1 << 3)
+ #define VMXNET3_ECR_DEBUG       (1 << 4)
+ /* flip the gen bit of a ring */
+ #define VMXNET3_FLIP_RING_GEN(gen) ((gen) = (gen) ^ 0x1)
+ /* only use this if moving the idx won't affect the gen bit */
+ #define VMXNET3_INC_RING_IDX_ONLY(idx, ring_size) \
+     do {\
+         (idx)++;\
+         if (unlikely((idx) == (ring_size))) {\
+             (idx) = 0;\
+         } \
+     } while (0)
+ #define VMXNET3_SET_VFTABLE_ENTRY(vfTable, vid) \
+     (vfTable[vid >> 5] |= (1 << (vid & 31)))
+ #define VMXNET3_CLEAR_VFTABLE_ENTRY(vfTable, vid) \
+     (vfTable[vid >> 5] &= ~(1 << (vid & 31)))
+ #define VMXNET3_VFTABLE_ENTRY_IS_SET(vfTable, vid) \
+     ((vfTable[vid >> 5] & (1 << (vid & 31))) != 0)
+ #define VMXNET3_MAX_MTU     9000
+ #define VMXNET3_MIN_MTU     60
+ #define VMXNET3_LINK_UP         (10000 << 16 | 1)    /* 10 Gbps, up */
+ #define VMXNET3_LINK_DOWN       0
+ #undef u64
+ #undef u32
+ #undef u16
+ #undef u8
+ #undef __le16
+ #undef __le32
+ #undef __le64
+ #undef __packed
+ #if defined(HOST_WORDS_BIGENDIAN)
+ #undef __BIG_ENDIAN_BITFIELD
+ #endif
+ #endif
Simple merge
index 0000000000000000000000000000000000000000,1b10684ddea942180902cdefd9686b8e3face9cf..4d9d05e9bcf79ffc2fc61b2545b76ad51ddf4751
mode 000000,100644..100644
--- /dev/null
@@@ -1,0 -1,570 +1,571 @@@
+ #ifndef QEMU_USB_H
+ #define QEMU_USB_H
+ /*
+  * QEMU USB API
+  *
+  * Copyright (c) 2005 Fabrice Bellard
+  *
+  * Permission is hereby granted, free of charge, to any person obtaining a copy
+  * of this software and associated documentation files (the "Software"), to deal
+  * in the Software without restriction, including without limitation the rights
+  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+  * copies of the Software, and to permit persons to whom the Software is
+  * furnished to do so, subject to the following conditions:
+  *
+  * The above copyright notice and this permission notice shall be included in
+  * all copies or substantial portions of the Software.
+  *
+  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+  * THE SOFTWARE.
+  */
+ #include "hw/qdev.h"
+ #include "qemu/queue.h"
+ /* Constants related to the USB / PCI interaction */
+ #define USB_SBRN    0x60 /* Serial Bus Release Number Register */
+ #define USB_RELEASE_1  0x10 /* USB 1.0 */
+ #define USB_RELEASE_2  0x20 /* USB 2.0 */
+ #define USB_RELEASE_3  0x30 /* USB 3.0 */
+ #define USB_TOKEN_SETUP 0x2d
+ #define USB_TOKEN_IN    0x69 /* device -> host */
+ #define USB_TOKEN_OUT   0xe1 /* host -> device */
+ #define USB_RET_SUCCESS           (0)
+ #define USB_RET_NODEV             (-1)
+ #define USB_RET_NAK               (-2)
+ #define USB_RET_STALL             (-3)
+ #define USB_RET_BABBLE            (-4)
+ #define USB_RET_IOERROR           (-5)
+ #define USB_RET_ASYNC             (-6)
+ #define USB_RET_ADD_TO_QUEUE      (-7)
+ #define USB_RET_REMOVE_FROM_QUEUE (-8)
+ #define USB_SPEED_LOW   0
+ #define USB_SPEED_FULL  1
+ #define USB_SPEED_HIGH  2
+ #define USB_SPEED_SUPER 3
+ #define USB_SPEED_MASK_LOW   (1 << USB_SPEED_LOW)
+ #define USB_SPEED_MASK_FULL  (1 << USB_SPEED_FULL)
+ #define USB_SPEED_MASK_HIGH  (1 << USB_SPEED_HIGH)
+ #define USB_SPEED_MASK_SUPER (1 << USB_SPEED_SUPER)
+ #define USB_STATE_NOTATTACHED 0
+ #define USB_STATE_ATTACHED    1
+ //#define USB_STATE_POWERED     2
+ #define USB_STATE_DEFAULT     3
+ //#define USB_STATE_ADDRESS     4
+ //#define     USB_STATE_CONFIGURED  5
+ #define USB_STATE_SUSPENDED   6
+ #define USB_CLASS_AUDIO                       1
+ #define USB_CLASS_COMM                        2
+ #define USB_CLASS_HID                 3
+ #define USB_CLASS_PHYSICAL            5
+ #define USB_CLASS_STILL_IMAGE         6
+ #define USB_CLASS_PRINTER             7
+ #define USB_CLASS_MASS_STORAGE                8
+ #define USB_CLASS_HUB                 9
+ #define USB_CLASS_CDC_DATA            0x0a
+ #define USB_CLASS_CSCID                       0x0b
+ #define USB_CLASS_CONTENT_SEC         0x0d
+ #define USB_CLASS_APP_SPEC            0xfe
+ #define USB_CLASS_VENDOR_SPEC         0xff
+ #define USB_SUBCLASS_UNDEFINED          0
+ #define USB_SUBCLASS_AUDIO_CONTROL      1
+ #define USB_SUBCLASS_AUDIO_STREAMING    2
+ #define USB_SUBCLASS_AUDIO_MIDISTREAMING 3
+ #define USB_DIR_OUT                   0
+ #define USB_DIR_IN                    0x80
+ #define USB_TYPE_MASK                 (0x03 << 5)
+ #define USB_TYPE_STANDARD             (0x00 << 5)
+ #define USB_TYPE_CLASS                        (0x01 << 5)
+ #define USB_TYPE_VENDOR                       (0x02 << 5)
+ #define USB_TYPE_RESERVED             (0x03 << 5)
+ #define USB_RECIP_MASK                        0x1f
+ #define USB_RECIP_DEVICE              0x00
+ #define USB_RECIP_INTERFACE           0x01
+ #define USB_RECIP_ENDPOINT            0x02
+ #define USB_RECIP_OTHER                       0x03
+ #define DeviceRequest ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_DEVICE)<<8)
+ #define DeviceOutRequest ((USB_DIR_OUT|USB_TYPE_STANDARD|USB_RECIP_DEVICE)<<8)
+ #define InterfaceRequest \
+         ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_INTERFACE)<<8)
+ #define InterfaceOutRequest \
+         ((USB_DIR_OUT|USB_TYPE_STANDARD|USB_RECIP_INTERFACE)<<8)
+ #define EndpointRequest ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_ENDPOINT)<<8)
+ #define EndpointOutRequest \
+         ((USB_DIR_OUT|USB_TYPE_STANDARD|USB_RECIP_ENDPOINT)<<8)
+ #define ClassInterfaceRequest \
+         ((USB_DIR_IN|USB_TYPE_CLASS|USB_RECIP_INTERFACE)<<8)
+ #define ClassInterfaceOutRequest \
+         ((USB_DIR_OUT|USB_TYPE_CLASS|USB_RECIP_INTERFACE)<<8)
+ #define USB_REQ_GET_STATUS            0x00
+ #define USB_REQ_CLEAR_FEATURE         0x01
+ #define USB_REQ_SET_FEATURE           0x03
+ #define USB_REQ_SET_ADDRESS           0x05
+ #define USB_REQ_GET_DESCRIPTOR                0x06
+ #define USB_REQ_SET_DESCRIPTOR                0x07
+ #define USB_REQ_GET_CONFIGURATION     0x08
+ #define USB_REQ_SET_CONFIGURATION     0x09
+ #define USB_REQ_GET_INTERFACE         0x0A
+ #define USB_REQ_SET_INTERFACE         0x0B
+ #define USB_REQ_SYNCH_FRAME           0x0C
+ #define USB_DEVICE_SELF_POWERED               0
+ #define USB_DEVICE_REMOTE_WAKEUP      1
+ #define USB_DT_DEVICE                 0x01
+ #define USB_DT_CONFIG                 0x02
+ #define USB_DT_STRING                 0x03
+ #define USB_DT_INTERFACE              0x04
+ #define USB_DT_ENDPOINT                       0x05
+ #define USB_DT_DEVICE_QUALIFIER         0x06
+ #define USB_DT_OTHER_SPEED_CONFIG       0x07
+ #define USB_DT_DEBUG                    0x0A
+ #define USB_DT_INTERFACE_ASSOC          0x0B
+ #define USB_DT_BOS                      0x0F
+ #define USB_DT_DEVICE_CAPABILITY        0x10
+ #define USB_DT_CS_INTERFACE             0x24
+ #define USB_DT_CS_ENDPOINT              0x25
+ #define USB_DT_ENDPOINT_COMPANION       0x30
+ #define USB_DEV_CAP_WIRELESS            0x01
+ #define USB_DEV_CAP_USB2_EXT            0x02
+ #define USB_DEV_CAP_SUPERSPEED          0x03
+ #define USB_ENDPOINT_XFER_CONTROL     0
+ #define USB_ENDPOINT_XFER_ISOC                1
+ #define USB_ENDPOINT_XFER_BULK                2
+ #define USB_ENDPOINT_XFER_INT         3
+ #define USB_ENDPOINT_XFER_INVALID     255
+ #define USB_INTERFACE_INVALID         255
+ typedef struct USBBus USBBus;
+ typedef struct USBBusOps USBBusOps;
+ typedef struct USBPort USBPort;
+ typedef struct USBDevice USBDevice;
+ typedef struct USBPacket USBPacket;
+ typedef struct USBCombinedPacket USBCombinedPacket;
+ typedef struct USBEndpoint USBEndpoint;
+ typedef struct USBDesc USBDesc;
+ typedef struct USBDescID USBDescID;
+ typedef struct USBDescDevice USBDescDevice;
+ typedef struct USBDescConfig USBDescConfig;
+ typedef struct USBDescIfaceAssoc USBDescIfaceAssoc;
+ typedef struct USBDescIface USBDescIface;
+ typedef struct USBDescEndpoint USBDescEndpoint;
+ typedef struct USBDescOther USBDescOther;
+ typedef struct USBDescString USBDescString;
+ struct USBDescString {
+     uint8_t index;
+     char *str;
+     QLIST_ENTRY(USBDescString) next;
+ };
+ #define USB_MAX_ENDPOINTS  15
+ #define USB_MAX_INTERFACES 16
+ struct USBEndpoint {
+     uint8_t nr;
+     uint8_t pid;
+     uint8_t type;
+     uint8_t ifnum;
+     int max_packet_size;
+     bool pipeline;
+     bool halted;
+     USBDevice *dev;
+     QTAILQ_HEAD(, USBPacket) queue;
+ };
+ enum USBDeviceFlags {
+     USB_DEV_FLAG_FULL_PATH,
+     USB_DEV_FLAG_IS_HOST,
+ };
+ /* definition of a USB device */
+ struct USBDevice {
+     DeviceState qdev;
+     USBPort *port;
+     char *port_path;
+     void *opaque;
+     uint32_t flags;
+     /* Actual connected speed */
+     int speed;
+     /* Supported speeds, not in info because it may be variable (hostdevs) */
+     int speedmask;
+     uint8_t addr;
+     char product_desc[32];
+     int auto_attach;
+     int attached;
+     int32_t state;
+     uint8_t setup_buf[8];
+     uint8_t data_buf[4096];
+     int32_t remote_wakeup;
+     int32_t setup_state;
+     int32_t setup_len;
+     int32_t setup_index;
+     USBEndpoint ep_ctl;
+     USBEndpoint ep_in[USB_MAX_ENDPOINTS];
+     USBEndpoint ep_out[USB_MAX_ENDPOINTS];
+     QLIST_HEAD(, USBDescString) strings;
+     const USBDesc *usb_desc; /* Overrides class usb_desc if not NULL */
+     const USBDescDevice *device;
+     int configuration;
+     int ninterfaces;
+     int altsetting[USB_MAX_INTERFACES];
+     const USBDescConfig *config;
+     const USBDescIface  *ifaces[USB_MAX_INTERFACES];
+ };
+ #define TYPE_USB_DEVICE "usb-device"
+ #define USB_DEVICE(obj) \
+      OBJECT_CHECK(USBDevice, (obj), TYPE_USB_DEVICE)
+ #define USB_DEVICE_CLASS(klass) \
+      OBJECT_CLASS_CHECK(USBDeviceClass, (klass), TYPE_USB_DEVICE)
+ #define USB_DEVICE_GET_CLASS(obj) \
+      OBJECT_GET_CLASS(USBDeviceClass, (obj), TYPE_USB_DEVICE)
+ typedef struct USBDeviceClass {
+     DeviceClass parent_class;
+     int (*init)(USBDevice *dev);
+     /*
+      * Walk (enabled) downstream ports, check for a matching device.
+      * Only hubs implement this.
+      */
+     USBDevice *(*find_device)(USBDevice *dev, uint8_t addr);
+     /*
+      * Called when a packet is canceled.
+      */
+     void (*cancel_packet)(USBDevice *dev, USBPacket *p);
+     /*
+      * Called when device is destroyed.
+      */
+     void (*handle_destroy)(USBDevice *dev);
+     /*
+      * Attach the device
+      */
+     void (*handle_attach)(USBDevice *dev);
+     /*
+      * Reset the device
+      */
+     void (*handle_reset)(USBDevice *dev);
+     /*
+      * Process control request.
+      * Called from handle_packet().
+      *
+      * Status gets stored in p->status, and if p->status == USB_RET_SUCCESS
+      * then the number of bytes transferred is stored in p->actual_length
+      */
+     void (*handle_control)(USBDevice *dev, USBPacket *p, int request, int value,
+                            int index, int length, uint8_t *data);
+     /*
+      * Process data transfers (both BULK and ISOC).
+      * Called from handle_packet().
+      *
+      * Status gets stored in p->status, and if p->status == USB_RET_SUCCESS
+      * then the number of bytes transferred is stored in p->actual_length
+      */
+     void (*handle_data)(USBDevice *dev, USBPacket *p);
+     void (*set_interface)(USBDevice *dev, int interface,
+                           int alt_old, int alt_new);
+     /*
+      * Called when the hcd is done queuing packets for an endpoint, only
+      * necessary for devices which can return USB_RET_ADD_TO_QUEUE.
+      */
+     void (*flush_ep_queue)(USBDevice *dev, USBEndpoint *ep);
+     /*
+      * Called by the hcd to let the device know the queue for an endpoint
+      * has been unlinked / stopped. Optional may be NULL.
+      */
+     void (*ep_stopped)(USBDevice *dev, USBEndpoint *ep);
+     const char *product_desc;
+     const USBDesc *usb_desc;
+ } USBDeviceClass;
+ typedef struct USBPortOps {
+     void (*attach)(USBPort *port);
+     void (*detach)(USBPort *port);
+     /*
+      * This gets called when a device downstream from the device attached to
+      * the port (iow attached through a hub) gets detached.
+      */
+     void (*child_detach)(USBPort *port, USBDevice *child);
+     void (*wakeup)(USBPort *port);
+     /*
+      * Note that port->dev will be different then the device from which
+      * the packet originated when a hub is involved.
+      */
+     void (*complete)(USBPort *port, USBPacket *p);
+ } USBPortOps;
+ /* USB port on which a device can be connected */
+ struct USBPort {
+     USBDevice *dev;
+     int speedmask;
++    int hubcount;
+     char path[16];
+     USBPortOps *ops;
+     void *opaque;
+     int index; /* internal port index, may be used with the opaque */
+     QTAILQ_ENTRY(USBPort) next;
+ };
+ typedef void USBCallback(USBPacket * packet, void *opaque);
+ typedef enum USBPacketState {
+     USB_PACKET_UNDEFINED = 0,
+     USB_PACKET_SETUP,
+     USB_PACKET_QUEUED,
+     USB_PACKET_ASYNC,
+     USB_PACKET_COMPLETE,
+     USB_PACKET_CANCELED,
+ } USBPacketState;
+ /* Structure used to hold information about an active USB packet.  */
+ struct USBPacket {
+     /* Data fields for use by the driver.  */
+     int pid;
+     uint64_t id;
+     USBEndpoint *ep;
+     unsigned int stream;
+     QEMUIOVector iov;
+     uint64_t parameter; /* control transfers */
+     bool short_not_ok;
+     bool int_req;
+     int status; /* USB_RET_* status code */
+     int actual_length; /* Number of bytes actually transferred */
+     /* Internal use by the USB layer.  */
+     USBPacketState state;
+     USBCombinedPacket *combined;
+     QTAILQ_ENTRY(USBPacket) queue;
+     QTAILQ_ENTRY(USBPacket) combined_entry;
+ };
+ struct USBCombinedPacket {
+     USBPacket *first;
+     QTAILQ_HEAD(packets_head, USBPacket) packets;
+     QEMUIOVector iov;
+ };
+ void usb_packet_init(USBPacket *p);
+ void usb_packet_set_state(USBPacket *p, USBPacketState state);
+ void usb_packet_check_state(USBPacket *p, USBPacketState expected);
+ void usb_packet_setup(USBPacket *p, int pid,
+                       USBEndpoint *ep, unsigned int stream,
+                       uint64_t id, bool short_not_ok, bool int_req);
+ void usb_packet_addbuf(USBPacket *p, void *ptr, size_t len);
+ int usb_packet_map(USBPacket *p, QEMUSGList *sgl);
+ void usb_packet_unmap(USBPacket *p, QEMUSGList *sgl);
+ void usb_packet_copy(USBPacket *p, void *ptr, size_t bytes);
+ void usb_packet_skip(USBPacket *p, size_t bytes);
+ size_t usb_packet_size(USBPacket *p);
+ void usb_packet_cleanup(USBPacket *p);
+ static inline bool usb_packet_is_inflight(USBPacket *p)
+ {
+     return (p->state == USB_PACKET_QUEUED ||
+             p->state == USB_PACKET_ASYNC);
+ }
+ USBDevice *usb_find_device(USBPort *port, uint8_t addr);
+ void usb_handle_packet(USBDevice *dev, USBPacket *p);
+ void usb_packet_complete(USBDevice *dev, USBPacket *p);
+ void usb_packet_complete_one(USBDevice *dev, USBPacket *p);
+ void usb_cancel_packet(USBPacket * p);
+ void usb_ep_init(USBDevice *dev);
+ void usb_ep_reset(USBDevice *dev);
+ void usb_ep_dump(USBDevice *dev);
+ struct USBEndpoint *usb_ep_get(USBDevice *dev, int pid, int ep);
+ uint8_t usb_ep_get_type(USBDevice *dev, int pid, int ep);
+ uint8_t usb_ep_get_ifnum(USBDevice *dev, int pid, int ep);
+ void usb_ep_set_type(USBDevice *dev, int pid, int ep, uint8_t type);
+ void usb_ep_set_ifnum(USBDevice *dev, int pid, int ep, uint8_t ifnum);
+ void usb_ep_set_max_packet_size(USBDevice *dev, int pid, int ep,
+                                 uint16_t raw);
+ int usb_ep_get_max_packet_size(USBDevice *dev, int pid, int ep);
+ void usb_ep_set_pipeline(USBDevice *dev, int pid, int ep, bool enabled);
+ void usb_ep_set_halted(USBDevice *dev, int pid, int ep, bool halted);
+ USBPacket *usb_ep_find_packet_by_id(USBDevice *dev, int pid, int ep,
+                                     uint64_t id);
+ void usb_ep_combine_input_packets(USBEndpoint *ep);
+ void usb_combined_input_packet_complete(USBDevice *dev, USBPacket *p);
+ void usb_combined_packet_cancel(USBDevice *dev, USBPacket *p);
+ void usb_attach(USBPort *port);
+ void usb_detach(USBPort *port);
+ void usb_port_reset(USBPort *port);
+ void usb_device_reset(USBDevice *dev);
+ void usb_wakeup(USBEndpoint *ep, unsigned int stream);
+ void usb_generic_async_ctrl_complete(USBDevice *s, USBPacket *p);
+ int set_usb_string(uint8_t *buf, const char *str);
+ /* usb-linux.c */
+ USBDevice *usb_host_device_open(USBBus *bus, const char *devname);
+ void usb_host_info(Monitor *mon, const QDict *qdict);
+ /* usb-bt.c */
+ USBDevice *usb_bt_init(USBBus *bus, HCIInfo *hci);
+ /* usb ports of the VM */
+ #define VM_USB_HUB_SIZE 8
+ /* usb-musb.c */
+ enum musb_irq_source_e {
+     musb_irq_suspend = 0,
+     musb_irq_resume,
+     musb_irq_rst_babble,
+     musb_irq_sof,
+     musb_irq_connect,
+     musb_irq_disconnect,
+     musb_irq_vbus_request,
+     musb_irq_vbus_error,
+     musb_irq_rx,
+     musb_irq_tx,
+     musb_set_vbus,
+     musb_set_session,
+     /* Add new interrupts here */
+     musb_irq_max, /* total number of interrupts defined */
+ };
+ typedef struct MUSBState MUSBState;
+ MUSBState *musb_init(DeviceState *parent_device, int gpio_base);
+ void musb_reset(MUSBState *s);
+ uint32_t musb_core_intr_get(MUSBState *s);
+ void musb_core_intr_clear(MUSBState *s, uint32_t mask);
+ void musb_set_size(MUSBState *s, int epnum, int size, int is_tx);
+ /* usb-bus.c */
+ #define TYPE_USB_BUS "usb-bus"
+ #define USB_BUS(obj) OBJECT_CHECK(USBBus, (obj), TYPE_USB_BUS)
+ struct USBBus {
+     BusState qbus;
+     USBBusOps *ops;
+     int busnr;
+     int nfree;
+     int nused;
+     QTAILQ_HEAD(, USBPort) free;
+     QTAILQ_HEAD(, USBPort) used;
+     QTAILQ_ENTRY(USBBus) next;
+ };
+ struct USBBusOps {
+     int (*register_companion)(USBBus *bus, USBPort *ports[],
+                               uint32_t portcount, uint32_t firstport);
+     void (*wakeup_endpoint)(USBBus *bus, USBEndpoint *ep, unsigned int stream);
+ };
+ void usb_bus_new(USBBus *bus, USBBusOps *ops, DeviceState *host);
+ USBBus *usb_bus_find(int busnr);
+ void usb_legacy_register(const char *typename, const char *usbdevice_name,
+                          USBDevice *(*usbdevice_init)(USBBus *bus,
+                                                       const char *params));
+ USBDevice *usb_create(USBBus *bus, const char *name);
+ USBDevice *usb_create_simple(USBBus *bus, const char *name);
+ USBDevice *usbdevice_create(const char *cmdline);
+ void usb_register_port(USBBus *bus, USBPort *port, void *opaque, int index,
+                        USBPortOps *ops, int speedmask);
+ int usb_register_companion(const char *masterbus, USBPort *ports[],
+                            uint32_t portcount, uint32_t firstport,
+                            void *opaque, USBPortOps *ops, int speedmask);
+ void usb_port_location(USBPort *downstream, USBPort *upstream, int portnr);
+ void usb_unregister_port(USBBus *bus, USBPort *port);
+ int usb_claim_port(USBDevice *dev);
+ void usb_release_port(USBDevice *dev);
+ int usb_device_attach(USBDevice *dev);
+ int usb_device_detach(USBDevice *dev);
+ int usb_device_delete_addr(int busnr, int addr);
+ static inline USBBus *usb_bus_from_device(USBDevice *d)
+ {
+     return DO_UPCAST(USBBus, qbus, d->qdev.parent_bus);
+ }
+ extern const VMStateDescription vmstate_usb_device;
+ #define VMSTATE_USB_DEVICE(_field, _state) {                         \
+     .name       = (stringify(_field)),                               \
+     .size       = sizeof(USBDevice),                                 \
+     .vmsd       = &vmstate_usb_device,                               \
+     .flags      = VMS_STRUCT,                                        \
+     .offset     = vmstate_offset_value(_state, _field, USBDevice),   \
+ }
+ USBDevice *usb_device_find_device(USBDevice *dev, uint8_t addr);
+ void usb_device_cancel_packet(USBDevice *dev, USBPacket *p);
+ void usb_device_handle_attach(USBDevice *dev);
+ void usb_device_handle_reset(USBDevice *dev);
+ void usb_device_handle_control(USBDevice *dev, USBPacket *p, int request,
+                                int val, int index, int length, uint8_t *data);
+ void usb_device_handle_data(USBDevice *dev, USBPacket *p);
+ void usb_device_set_interface(USBDevice *dev, int interface,
+                               int alt_old, int alt_new);
+ void usb_device_flush_ep_queue(USBDevice *dev, USBEndpoint *ep);
+ void usb_device_ep_stopped(USBDevice *dev, USBEndpoint *ep);
+ const char *usb_device_get_product_desc(USBDevice *dev);
+ const USBDesc *usb_device_get_usb_desc(USBDevice *dev);
+ int ehci_create_ich9_with_companions(PCIBus *bus, int slot);
+ /* quirks.c */
+ /* In bulk endpoints are streaming data sources (iow behave like isoc eps) */
+ #define USB_QUIRK_BUFFER_BULK_IN      0x01
+ /* Bulk pkts in FTDI format, need special handling when combining packets */
+ #define USB_QUIRK_IS_FTDI             0x02
+ int usb_get_quirks(uint16_t vendor_id, uint16_t product_id,
+                    uint8_t interface_class, uint8_t interface_subclass,
+                    uint8_t interface_protocol);
+ #endif