]> git.ipfire.org Git - thirdparty/qemu.git/blame - qemu-char.c
projects / thirdparty / qemu.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
qmp-spec: fix index in doc
[thirdparty/qemu.git] / qemu-char.c
CommitLineData
6f97dba0
AL		 1/*
2 * QEMU System Emulator
3 *
4 * Copyright (c) 2003-2008 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
d38ea87a 24#include "qemu/osdep.h"
6f97dba0 25#include "qemu-common.h"
83c9089e 26#include "monitor/monitor.h"
9c17d615 27#include "sysemu/sysemu.h"
d49b6836 28#include "qemu/error-report.h"
1de7afc9 29#include "qemu/timer.h"
dccfcd0e 30#include "sysemu/char.h"
cf3ebac7 31#include "hw/usb.h"
c5a415a0 32#include "qmp-commands.h"
cfb429cb
CM		 33#include "qapi/qmp-input-visitor.h"
34#include "qapi/qmp-output-visitor.h"
35#include "qapi-visit.h"
e9cf2fe0 36#include "qemu/base64.h"
9894dc0c
DB		 37#include "io/channel-socket.h"
38#include "io/channel-file.h"
a8fb5427 39#include "io/channel-tls.h"
6f97dba0 40
6f97dba0
AL		 41#include <zlib.h>
42
43#ifndef _WIN32
44#include <sys/times.h>
45#include <sys/wait.h>
46#include <termios.h>
47#include <sys/mman.h>
48#include <sys/ioctl.h>
24646c7e 49#include <sys/resource.h>
6f97dba0
AL		 50#include <sys/socket.h>
51#include <netinet/in.h>
24646c7e 52#include <net/if.h>
24646c7e 53#include <arpa/inet.h>
6f97dba0
AL		 54#include <netdb.h>
55#include <sys/select.h>
71e72a19 56#ifdef CONFIG_BSD
3294ce18
MT		 57#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
58#include <dev/ppbus/ppi.h>
59#include <dev/ppbus/ppbconf.h>
c5e97233 60#elif defined(__DragonFly__)
c5e97233
BS		 61#include <dev/misc/ppi/ppi.h>
62#include <bus/ppbus/ppbconf.h>
6f97dba0 63#endif
bbe813a2 64#else
6f97dba0 65#ifdef __linux__
6f97dba0
AL		 66#include <linux/ppdev.h>
67#include <linux/parport.h>
68#endif
69#ifdef __sun__
6f97dba0
AL		 70#include <sys/ethernet.h>
71#include <sys/sockio.h>
72#include <netinet/arp.h>
73#include <netinet/in.h>
74#include <netinet/in_systm.h>
75#include <netinet/ip.h>
76#include <netinet/ip_icmp.h> // must come after ip.h
77#include <netinet/udp.h>
78#include <netinet/tcp.h>
6f97dba0
AL		 79#endif
80#endif
81#endif
82
1de7afc9 83#include "qemu/sockets.h"
cbcc6336 84#include "ui/qemu-spice.h"
6f97dba0 85
9bd7854e 86#define READ_BUF_LEN 4096
7b0bfdf5 87#define READ_RETRIES 10
c4095726 88#define TCP_MAX_FDS 16
9bd7854e 89
cfb429cb
CM		 90/***********************************************************/
91/* Socket address helpers */
cfb429cb 92
0ff0fad2
DB		 93static char *SocketAddress_to_str(const char *prefix, SocketAddress *addr,
94 bool is_listen, bool is_telnet)
16cc4ffe 95{
130257dc 96 switch (addr->type) {
16cc4ffe 97 case SOCKET_ADDRESS_KIND_INET:
0ff0fad2
DB		 98 return g_strdup_printf("%s%s:%s:%s%s", prefix,
99 is_telnet ? "telnet" : "tcp", addr->u.inet->host,
100 addr->u.inet->port, is_listen ? ",server" : "");
16cc4ffe
CM		 101 break;
102 case SOCKET_ADDRESS_KIND_UNIX:
0ff0fad2
DB		 103 return g_strdup_printf("%sunix:%s%s", prefix,
104 addr->u.q_unix->path,
105 is_listen ? ",server" : "");
16cc4ffe
CM		 106 break;
107 case SOCKET_ADDRESS_KIND_FD:
0ff0fad2
DB		 108 return g_strdup_printf("%sfd:%s%s", prefix, addr->u.fd->str,
109 is_listen ? ",server" : "");
16cc4ffe
CM		 110 break;
111 default:
112 abort();
113 }
114}
115
0ff0fad2
DB		 116static char *sockaddr_to_str(struct sockaddr_storage *ss, socklen_t ss_len,
117 struct sockaddr_storage *ps, socklen_t ps_len,
118 bool is_listen, bool is_telnet)
16cc4ffe 119{
01ca519f
CM		 120 char shost[NI_MAXHOST], sserv[NI_MAXSERV];
121 char phost[NI_MAXHOST], pserv[NI_MAXSERV];
16cc4ffe
CM		 122 const char *left = "", *right = "";
123
124 switch (ss->ss_family) {
125#ifndef _WIN32
126 case AF_UNIX:
0ff0fad2
DB		 127 return g_strdup_printf("unix:%s%s",
128 ((struct sockaddr_un *)(ss))->sun_path,
129 is_listen ? ",server" : "");
16cc4ffe
CM		 130#endif
131 case AF_INET6:
132 left = "[";
133 right = "]";
134 /* fall through */
135 case AF_INET:
01ca519f
CM		 136 getnameinfo((struct sockaddr *) ss, ss_len, shost, sizeof(shost),
137 sserv, sizeof(sserv), NI_NUMERICHOST | NI_NUMERICSERV);
138 getnameinfo((struct sockaddr *) ps, ps_len, phost, sizeof(phost),
139 pserv, sizeof(pserv), NI_NUMERICHOST | NI_NUMERICSERV);
0ff0fad2
DB		 140 return g_strdup_printf("%s:%s%s%s:%s%s <-> %s%s%s:%s",
141 is_telnet ? "telnet" : "tcp",
142 left, shost, right, sserv,
143 is_listen ? ",server" : "",
144 left, phost, right, pserv);
16cc4ffe
CM		 145
146 default:
0ff0fad2 147 return g_strdup_printf("unknown");
16cc4ffe
CM		 148 }
149}
150
6f97dba0
AL		 151/***********************************************************/
152/* character device */
153
72cf2d4f
BS		 154static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
155 QTAILQ_HEAD_INITIALIZER(chardevs);
2970a6c9 156
d0d7708b
DB		 157static void qemu_chr_free_common(CharDriverState *chr);
158
159CharDriverState *qemu_chr_alloc(ChardevCommon *backend, Error **errp)
db39fcf1
PB		 160{
161 CharDriverState *chr = g_malloc0(sizeof(CharDriverState));
f3db17b9 162 qemu_mutex_init(&chr->chr_write_lock);
d0d7708b
DB		 163
164 if (backend->has_logfile) {
165 int flags = O_WRONLY | O_CREAT;
166 if (backend->has_logappend &&
167 backend->logappend) {
168 flags |= O_APPEND;
169 } else {
170 flags |= O_TRUNC;
171 }
172 chr->logfd = qemu_open(backend->logfile, flags, 0666);
173 if (chr->logfd < 0) {
174 error_setg_errno(errp, errno,
175 "Unable to open logfile %s",
176 backend->logfile);
177 g_free(chr);
178 return NULL;
179 }
180 } else {
181 chr->logfd = -1;
182 }
183
db39fcf1
PB		 184 return chr;
185}
186
a425d23f 187void qemu_chr_be_event(CharDriverState *s, int event)
6f97dba0 188{
73cdf3f2
AG		 189 /* Keep track if the char device is open */
190 switch (event) {
191 case CHR_EVENT_OPENED:
16665b94 192 s->be_open = 1;
73cdf3f2
AG		 193 break;
194 case CHR_EVENT_CLOSED:
16665b94 195 s->be_open = 0;
73cdf3f2
AG		 196 break;
197 }
198
6f97dba0
AL		 199 if (!s->chr_event)
200 return;
201 s->chr_event(s->handler_opaque, event);
202}
203
fee204fd 204void qemu_chr_be_generic_open(CharDriverState *s)
6f97dba0 205{
bd5c51ee 206 qemu_chr_be_event(s, CHR_EVENT_OPENED);
6f97dba0
AL		 207}
208
d0d7708b
DB		 209
210/* Not reporting errors from writing to logfile, as logs are
211 * defined to be "best effort" only */
212static void qemu_chr_fe_write_log(CharDriverState *s,
213 const uint8_t *buf, size_t len)
214{
215 size_t done = 0;
216 ssize_t ret;
217
218 if (s->logfd < 0) {
219 return;
220 }
221
222 while (done < len) {
223 do {
224 ret = write(s->logfd, buf + done, len - done);
225 if (ret == -1 && errno == EAGAIN) {
226 g_usleep(100);
227 }
228 } while (ret == -1 && errno == EAGAIN);
229
230 if (ret <= 0) {
231 return;
232 }
233 done += ret;
234 }
235}
236
2cc6e0a1 237int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
6f97dba0 238{
9005b2a7
PB		 239 int ret;
240
241 qemu_mutex_lock(&s->chr_write_lock);
242 ret = s->chr_write(s, buf, len);
d0d7708b
DB		 243
244 if (ret > 0) {
245 qemu_chr_fe_write_log(s, buf, ret);
246 }
247
9005b2a7
PB		 248 qemu_mutex_unlock(&s->chr_write_lock);
249 return ret;
6f97dba0
AL		 250}
251
cd18720a
AL		 252int qemu_chr_fe_write_all(CharDriverState *s, const uint8_t *buf, int len)
253{
254 int offset = 0;
09313047 255 int res = 0;
cd18720a 256
9005b2a7 257 qemu_mutex_lock(&s->chr_write_lock);
cd18720a
AL		 258 while (offset < len) {
259 do {
260 res = s->chr_write(s, buf + offset, len - offset);
261 if (res == -1 && errno == EAGAIN) {
262 g_usleep(100);
263 }
264 } while (res == -1 && errno == EAGAIN);
265
9005b2a7 266 if (res <= 0) {
cd18720a
AL		 267 break;
268 }
269
cd18720a
AL		 270 offset += res;
271 }
d0d7708b
DB		 272 if (offset > 0) {
273 qemu_chr_fe_write_log(s, buf, offset);
274 }
275
9005b2a7 276 qemu_mutex_unlock(&s->chr_write_lock);
cd18720a 277
9005b2a7
PB		 278 if (res < 0) {
279 return res;
280 }
cd18720a
AL		 281 return offset;
282}
283
7b0bfdf5
NN		 284int qemu_chr_fe_read_all(CharDriverState *s, uint8_t *buf, int len)
285{
286 int offset = 0, counter = 10;
287 int res;
288
289 if (!s->chr_sync_read) {
290 return 0;
291 }
292
293 while (offset < len) {
294 do {
295 res = s->chr_sync_read(s, buf + offset, len - offset);
296 if (res == -1 && errno == EAGAIN) {
297 g_usleep(100);
298 }
299 } while (res == -1 && errno == EAGAIN);
300
301 if (res == 0) {
302 break;
303 }
304
305 if (res < 0) {
306 return res;
307 }
308
309 offset += res;
310
311 if (!counter--) {
312 break;
313 }
314 }
315
316 return offset;
317}
318
41084f1b 319int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
6f97dba0
AL		 320{
321 if (!s->chr_ioctl)
322 return -ENOTSUP;
323 return s->chr_ioctl(s, cmd, arg);
324}
325
909cda12 326int qemu_chr_be_can_write(CharDriverState *s)
6f97dba0
AL		 327{
328 if (!s->chr_can_read)
329 return 0;
330 return s->chr_can_read(s->handler_opaque);
331}
332
fa5efccb 333void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
6f97dba0 334{
ac310734
SW		 335 if (s->chr_read) {
336 s->chr_read(s->handler_opaque, buf, len);
337 }
6f97dba0
AL		 338}
339
74c0d6f0 340int qemu_chr_fe_get_msgfd(CharDriverState *s)
7d174059 341{
c76bf6bb 342 int fd;
4f858614 343 return (qemu_chr_fe_get_msgfds(s, &fd, 1) == 1) ? fd : -1;
c76bf6bb
NN		 344}
345
346int qemu_chr_fe_get_msgfds(CharDriverState *s, int *fds, int len)
347{
348 return s->get_msgfds ? s->get_msgfds(s, fds, len) : -1;
7d174059
MM		 349}
350
d39aac7a
NN		 351int qemu_chr_fe_set_msgfds(CharDriverState *s, int *fds, int num)
352{
353 return s->set_msgfds ? s->set_msgfds(s, fds, num) : -1;
354}
355
13661089
DB		 356int qemu_chr_add_client(CharDriverState *s, int fd)
357{
358 return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
359}
360
6f97dba0
AL		 361void qemu_chr_accept_input(CharDriverState *s)
362{
363 if (s->chr_accept_input)
364 s->chr_accept_input(s);
98c8ee1d 365 qemu_notify_event();
6f97dba0
AL		 366}
367
e7e71b0e 368void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
6f97dba0 369{
9bd7854e 370 char buf[READ_BUF_LEN];
6f97dba0
AL		 371 va_list ap;
372 va_start(ap, fmt);
373 vsnprintf(buf, sizeof(buf), fmt, ap);
2cc6e0a1 374 qemu_chr_fe_write(s, (uint8_t *)buf, strlen(buf));
6f97dba0
AL		 375 va_end(ap);
376}
377
386a5a1e
AS		 378static void remove_fd_in_watch(CharDriverState *chr);
379
6f97dba0 380void qemu_chr_add_handlers(CharDriverState *s,
7b27a769 381 IOCanReadHandler *fd_can_read,
6f97dba0
AL		 382 IOReadHandler *fd_read,
383 IOEventHandler *fd_event,
384 void *opaque)
385{
19083228
HG		 386 int fe_open;
387
da7d998b 388 if (!opaque && !fd_can_read && !fd_read && !fd_event) {
19083228 389 fe_open = 0;
386a5a1e 390 remove_fd_in_watch(s);
19083228
HG		 391 } else {
392 fe_open = 1;
2d6c1ef4 393 }
6f97dba0
AL		 394 s->chr_can_read = fd_can_read;
395 s->chr_read = fd_read;
396 s->chr_event = fd_event;
397 s->handler_opaque = opaque;
ac1b84dd 398 if (fe_open && s->chr_update_read_handler)
6f97dba0 399 s->chr_update_read_handler(s);
73cdf3f2 400
19083228 401 if (!s->explicit_fe_open) {
8e25daa8 402 qemu_chr_fe_set_open(s, fe_open);
19083228
HG		 403 }
404
73cdf3f2
AG		 405 /* We're connecting to an already opened device, so let's make sure we
406 also get the open event */
a59bcd31 407 if (fe_open && s->be_open) {
fee204fd 408 qemu_chr_be_generic_open(s);
73cdf3f2 409 }
6f97dba0
AL		 410}
411
412static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
413{
414 return len;
415}
416
0d64992b
PB		 417static CharDriverState *qemu_chr_open_null(const char *id,
418 ChardevBackend *backend,
419 ChardevReturn *ret,
420 Error **errp)
6f97dba0
AL		 421{
422 CharDriverState *chr;
d0d7708b 423 ChardevCommon *common = qapi_ChardevDummy_base(backend->u.null);
6f97dba0 424
d0d7708b
DB		 425 chr = qemu_chr_alloc(common, errp);
426 if (!chr) {
427 return NULL;
428 }
6f97dba0 429 chr->chr_write = null_chr_write;
bd5c51ee 430 chr->explicit_be_open = true;
1f51470d 431 return chr;
6f97dba0
AL		 432}
433
434/* MUX driver for serial I/O splitting */
6f97dba0
AL		 435#define MAX_MUX 4
436#define MUX_BUFFER_SIZE 32 /* Must be a power of 2. */
437#define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
438typedef struct {
7b27a769 439 IOCanReadHandler *chr_can_read[MAX_MUX];
6f97dba0
AL		 440 IOReadHandler *chr_read[MAX_MUX];
441 IOEventHandler *chr_event[MAX_MUX];
442 void *ext_opaque[MAX_MUX];
443 CharDriverState *drv;
799f1f23 444 int focus;
6f97dba0
AL		 445 int mux_cnt;
446 int term_got_escape;
447 int max_size;
a80bf99f
AL		 448 /* Intermediate input buffer allows to catch escape sequences even if the
449 currently active device is not accepting any input - but only until it
450 is full as well. */
451 unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
452 int prod[MAX_MUX];
453 int cons[MAX_MUX];
2d22959d 454 int timestamps;
9005b2a7
PB		 455
456 /* Protected by the CharDriverState chr_write_lock. */
4ab312f7 457 int linestart;
2d22959d 458 int64_t timestamps_start;
6f97dba0
AL		 459} MuxDriver;
460
461
9005b2a7 462/* Called with chr_write_lock held. */
6f97dba0
AL		 463static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
464{
465 MuxDriver *d = chr->opaque;
466 int ret;
2d22959d 467 if (!d->timestamps) {
6975b713 468 ret = qemu_chr_fe_write(d->drv, buf, len);
6f97dba0
AL		 469 } else {
470 int i;
471
472 ret = 0;
4ab312f7
JK		 473 for (i = 0; i < len; i++) {
474 if (d->linestart) {
6f97dba0
AL		 475 char buf1[64];
476 int64_t ti;
477 int secs;
478
bc72ad67 479 ti = qemu_clock_get_ms(QEMU_CLOCK_REALTIME);
2d22959d
JK		 480 if (d->timestamps_start == -1)
481 d->timestamps_start = ti;
482 ti -= d->timestamps_start;
a4bb1db8 483 secs = ti / 1000;
6f97dba0
AL		 484 snprintf(buf1, sizeof(buf1),
485 "[%02d:%02d:%02d.%03d] ",
486 secs / 3600,
487 (secs / 60) % 60,
488 secs % 60,
a4bb1db8 489 (int)(ti % 1000));
6975b713 490 qemu_chr_fe_write(d->drv, (uint8_t *)buf1, strlen(buf1));
4ab312f7
JK		 491 d->linestart = 0;
492 }
6975b713 493 ret += qemu_chr_fe_write(d->drv, buf+i, 1);
4ab312f7
JK		 494 if (buf[i] == '\n') {
495 d->linestart = 1;
6f97dba0
AL		 496 }
497 }
498 }
499 return ret;
500}
501
502static const char * const mux_help[] = {
503 "% h print this help\n\r",
504 "% x exit emulator\n\r",
505 "% s save disk data back to file (if -snapshot)\n\r",
86d10328 506 "% t toggle console timestamps\n\r",
6f97dba0
AL		 507 "% b send break (magic sysrq)\n\r",
508 "% c switch between console and monitor\n\r",
509 "% % sends %\n\r",
510 NULL
511};
512
513int term_escape_char = 0x01; /* ctrl-a is used for escape */
514static void mux_print_help(CharDriverState *chr)
515{
516 int i, j;
517 char ebuf[15] = "Escape-Char";
518 char cbuf[50] = "\n\r";
519
520 if (term_escape_char > 0 && term_escape_char < 26) {
521 snprintf(cbuf, sizeof(cbuf), "\n\r");
522 snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
523 } else {
524 snprintf(cbuf, sizeof(cbuf),
525 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
526 term_escape_char);
527 }
6975b713 528 qemu_chr_fe_write(chr, (uint8_t *)cbuf, strlen(cbuf));
6f97dba0
AL		 529 for (i = 0; mux_help[i] != NULL; i++) {
530 for (j=0; mux_help[i][j] != '\0'; j++) {
531 if (mux_help[i][j] == '%')
6975b713 532 qemu_chr_fe_write(chr, (uint8_t *)ebuf, strlen(ebuf));
6f97dba0 533 else
6975b713 534 qemu_chr_fe_write(chr, (uint8_t *)&mux_help[i][j], 1);
6f97dba0
AL		 535 }
536 }
537}
538
2724b180
AL		 539static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
540{
541 if (d->chr_event[mux_nr])
542 d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
543}
544
6f97dba0
AL		 545static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
546{
547 if (d->term_got_escape) {
548 d->term_got_escape = 0;
549 if (ch == term_escape_char)
550 goto send_char;
551 switch(ch) {
552 case '?':
553 case 'h':
554 mux_print_help(chr);
555 break;
556 case 'x':
557 {
558 const char *term = "QEMU: Terminated\n\r";
6975b713 559 qemu_chr_fe_write(chr, (uint8_t *)term, strlen(term));
6f97dba0
AL		 560 exit(0);
561 break;
562 }
563 case 's':
6ab4b5ab 564 bdrv_commit_all();
6f97dba0
AL		 565 break;
566 case 'b':
a425d23f 567 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
6f97dba0
AL		 568 break;
569 case 'c':
570 /* Switch to the next registered device */
799f1f23
GH		 571 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
572 d->focus++;
573 if (d->focus >= d->mux_cnt)
574 d->focus = 0;
575 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
6f97dba0 576 break;
2d22959d
JK		 577 case 't':
578 d->timestamps = !d->timestamps;
579 d->timestamps_start = -1;
4ab312f7 580 d->linestart = 0;
2d22959d 581 break;
6f97dba0
AL		 582 }
583 } else if (ch == term_escape_char) {
584 d->term_got_escape = 1;
585 } else {
586 send_char:
587 return 1;
588 }
589 return 0;
590}
591
592static void mux_chr_accept_input(CharDriverState *chr)
593{
6f97dba0 594 MuxDriver *d = chr->opaque;
799f1f23 595 int m = d->focus;
6f97dba0 596
a80bf99f 597 while (d->prod[m] != d->cons[m] &&
6f97dba0
AL		 598 d->chr_can_read[m] &&
599 d->chr_can_read[m](d->ext_opaque[m])) {
600 d->chr_read[m](d->ext_opaque[m],
a80bf99f 601 &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
6f97dba0
AL		 602 }
603}
604
605static int mux_chr_can_read(void *opaque)
606{
607 CharDriverState *chr = opaque;
608 MuxDriver *d = chr->opaque;
799f1f23 609 int m = d->focus;
6f97dba0 610
a80bf99f 611 if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
6f97dba0 612 return 1;
a80bf99f
AL		 613 if (d->chr_can_read[m])
614 return d->chr_can_read[m](d->ext_opaque[m]);
6f97dba0
AL		 615 return 0;
616}
617
618static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
619{
620 CharDriverState *chr = opaque;
621 MuxDriver *d = chr->opaque;
799f1f23 622 int m = d->focus;
6f97dba0
AL		 623 int i;
624
625 mux_chr_accept_input (opaque);
626
627 for(i = 0; i < size; i++)
628 if (mux_proc_byte(chr, d, buf[i])) {
a80bf99f 629 if (d->prod[m] == d->cons[m] &&
6f97dba0
AL		 630 d->chr_can_read[m] &&
631 d->chr_can_read[m](d->ext_opaque[m]))
632 d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
633 else
a80bf99f 634 d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
6f97dba0
AL		 635 }
636}
637
638static void mux_chr_event(void *opaque, int event)
639{
640 CharDriverState *chr = opaque;
641 MuxDriver *d = chr->opaque;
642 int i;
643
644 /* Send the event to all registered listeners */
645 for (i = 0; i < d->mux_cnt; i++)
2724b180 646 mux_chr_send_event(d, i, event);
6f97dba0
AL		 647}
648
649static void mux_chr_update_read_handler(CharDriverState *chr)
650{
651 MuxDriver *d = chr->opaque;
652
653 if (d->mux_cnt >= MAX_MUX) {
654 fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
655 return;
656 }
657 d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
658 d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
659 d->chr_read[d->mux_cnt] = chr->chr_read;
660 d->chr_event[d->mux_cnt] = chr->chr_event;
661 /* Fix up the real driver with mux routines */
662 if (d->mux_cnt == 0) {
663 qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
664 mux_chr_event, chr);
665 }
799f1f23
GH		 666 if (d->focus != -1) {
667 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
a7aec5da 668 }
799f1f23 669 d->focus = d->mux_cnt;
6f97dba0 670 d->mux_cnt++;
799f1f23 671 mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
6f97dba0
AL		 672}
673
7b7ab18d
MR		 674static bool muxes_realized;
675
676/**
677 * Called after processing of default and command-line-specified
678 * chardevs to deliver CHR_EVENT_OPENED events to any FEs attached
679 * to a mux chardev. This is done here to ensure that
680 * output/prompts/banners are only displayed for the FE that has
681 * focus when initial command-line processing/machine init is
682 * completed.
683 *
684 * After this point, any new FE attached to any new or existing
685 * mux will receive CHR_EVENT_OPENED notifications for the BE
686 * immediately.
687 */
688static void muxes_realize_done(Notifier *notifier, void *unused)
689{
690 CharDriverState *chr;
691
692 QTAILQ_FOREACH(chr, &chardevs, next) {
693 if (chr->is_mux) {
694 MuxDriver *d = chr->opaque;
695 int i;
696
697 /* send OPENED to all already-attached FEs */
698 for (i = 0; i < d->mux_cnt; i++) {
699 mux_chr_send_event(d, i, CHR_EVENT_OPENED);
700 }
701 /* mark mux as OPENED so any new FEs will immediately receive
702 * OPENED event
703 */
704 qemu_chr_be_generic_open(chr);
705 }
706 }
707 muxes_realized = true;
708}
709
710static Notifier muxes_realize_notify = {
711 .notify = muxes_realize_done,
712};
713
3f0838ab
KB		 714static GSource *mux_chr_add_watch(CharDriverState *s, GIOCondition cond)
715{
716 MuxDriver *d = s->opaque;
717 return d->drv->chr_add_watch(d->drv, cond);
718}
719
3c0e5a4a
PB		 720static CharDriverState *qemu_chr_open_mux(const char *id,
721 ChardevBackend *backend,
722 ChardevReturn *ret, Error **errp)
6f97dba0 723{
130257dc 724 ChardevMux *mux = backend->u.mux;
3c0e5a4a 725 CharDriverState *chr, *drv;
6f97dba0 726 MuxDriver *d;
d0d7708b 727 ChardevCommon *common = qapi_ChardevMux_base(backend->u.mux);
6f97dba0 728
3c0e5a4a
PB		 729 drv = qemu_chr_find(mux->chardev);
730 if (drv == NULL) {
731 error_setg(errp, "mux: base chardev %s not found", mux->chardev);
732 return NULL;
733 }
734
d0d7708b
DB		 735 chr = qemu_chr_alloc(common, errp);
736 if (!chr) {
737 return NULL;
738 }
2d528d45 739 d = g_new0(MuxDriver, 1);
6f97dba0
AL		 740
741 chr->opaque = d;
742 d->drv = drv;
799f1f23 743 d->focus = -1;
6f97dba0
AL		 744 chr->chr_write = mux_chr_write;
745 chr->chr_update_read_handler = mux_chr_update_read_handler;
746 chr->chr_accept_input = mux_chr_accept_input;
7c32c4fe 747 /* Frontend guest-open / -close notification is not support with muxes */
574b711a 748 chr->chr_set_fe_open = NULL;
3f0838ab
KB		 749 if (drv->chr_add_watch) {
750 chr->chr_add_watch = mux_chr_add_watch;
751 }
7b7ab18d
MR		 752 /* only default to opened state if we've realized the initial
753 * set of muxes
754 */
755 chr->explicit_be_open = muxes_realized ? 0 : 1;
756 chr->is_mux = 1;
73cdf3f2 757
6f97dba0
AL		 758 return chr;
759}
760
761
96c63847
AL		 762typedef struct IOWatchPoll
763{
d185c094
PB		 764 GSource parent;
765
9894dc0c 766 QIOChannel *ioc;
96c63847 767 GSource *src;
96c63847
AL		 768
769 IOCanReadHandler *fd_can_read;
1e885b25 770 GSourceFunc fd_read;
96c63847 771 void *opaque;
96c63847
AL		 772} IOWatchPoll;
773
96c63847
AL		 774static IOWatchPoll *io_watch_poll_from_source(GSource *source)
775{
d185c094 776 return container_of(source, IOWatchPoll, parent);
96c63847
AL		 777}
778
779static gboolean io_watch_poll_prepare(GSource *source, gint *timeout_)
780{
781 IOWatchPoll *iwp = io_watch_poll_from_source(source);
d185c094 782 bool now_active = iwp->fd_can_read(iwp->opaque) > 0;
1e885b25 783 bool was_active = iwp->src != NULL;
d185c094 784 if (was_active == now_active) {
96c63847
AL		 785 return FALSE;
786 }
787
d185c094 788 if (now_active) {
9894dc0c
DB		 789 iwp->src = qio_channel_create_watch(
790 iwp->ioc, G_IO_IN | G_IO_ERR | G_IO_HUP | G_IO_NVAL);
1e885b25 791 g_source_set_callback(iwp->src, iwp->fd_read, iwp->opaque, NULL);
d185c094
PB		 792 g_source_attach(iwp->src, NULL);
793 } else {
1e885b25
PB		 794 g_source_destroy(iwp->src);
795 g_source_unref(iwp->src);
796 iwp->src = NULL;
d185c094
PB		 797 }
798 return FALSE;
96c63847
AL		 799}
800
801static gboolean io_watch_poll_check(GSource *source)
802{
d185c094 803 return FALSE;
96c63847
AL		 804}
805
806static gboolean io_watch_poll_dispatch(GSource *source, GSourceFunc callback,
807 gpointer user_data)
808{
d185c094 809 abort();
96c63847
AL		 810}
811
812static void io_watch_poll_finalize(GSource *source)
813{
2b316774
PB		 814 /* Due to a glib bug, removing the last reference to a source
815 * inside a finalize callback causes recursive locking (and a
816 * deadlock). This is not a problem inside other callbacks,
817 * including dispatch callbacks, so we call io_remove_watch_poll
818 * to remove this source. At this point, iwp->src must
819 * be NULL, or we would leak it.
820 *
821 * This would be solved much more elegantly by child sources,
822 * but we support older glib versions that do not have them.
823 */
96c63847 824 IOWatchPoll *iwp = io_watch_poll_from_source(source);
2b316774 825 assert(iwp->src == NULL);
96c63847
AL		 826}
827
828static GSourceFuncs io_watch_poll_funcs = {
829 .prepare = io_watch_poll_prepare,
830 .check = io_watch_poll_check,
831 .dispatch = io_watch_poll_dispatch,
832 .finalize = io_watch_poll_finalize,
833};
834
835/* Can only be used for read */
9894dc0c 836static guint io_add_watch_poll(QIOChannel *ioc,
96c63847 837 IOCanReadHandler *fd_can_read,
9894dc0c 838 QIOChannelFunc fd_read,
96c63847
AL		 839 gpointer user_data)
840{
841 IOWatchPoll *iwp;
0ca5aa4f 842 int tag;
96c63847 843
d185c094 844 iwp = (IOWatchPoll *) g_source_new(&io_watch_poll_funcs, sizeof(IOWatchPoll));
96c63847
AL		 845 iwp->fd_can_read = fd_can_read;
846 iwp->opaque = user_data;
9894dc0c 847 iwp->ioc = ioc;
1e885b25
PB		 848 iwp->fd_read = (GSourceFunc) fd_read;
849 iwp->src = NULL;
96c63847 850
0ca5aa4f
PB		 851 tag = g_source_attach(&iwp->parent, NULL);
852 g_source_unref(&iwp->parent);
853 return tag;
96c63847
AL		 854}
855
2b316774
PB		 856static void io_remove_watch_poll(guint tag)
857{
858 GSource *source;
859 IOWatchPoll *iwp;
860
861 g_return_if_fail (tag > 0);
862
863 source = g_main_context_find_source_by_id(NULL, tag);
864 g_return_if_fail (source != NULL);
865
866 iwp = io_watch_poll_from_source(source);
867 if (iwp->src) {
868 g_source_destroy(iwp->src);
869 g_source_unref(iwp->src);
870 iwp->src = NULL;
871 }
872 g_source_destroy(&iwp->parent);
873}
874
26da70c7
AS		 875static void remove_fd_in_watch(CharDriverState *chr)
876{
877 if (chr->fd_in_tag) {
878 io_remove_watch_poll(chr->fd_in_tag);
879 chr->fd_in_tag = 0;
880 }
881}
882
96c63847 883
9894dc0c
DB		 884static int io_channel_send_full(QIOChannel *ioc,
885 const void *buf, size_t len,
886 int *fds, size_t nfds)
76a9644b 887{
9894dc0c 888 size_t offset = 0;
76a9644b 889
9894dc0c
DB		 890 while (offset < len) {
891 ssize_t ret = 0;
892 struct iovec iov = { .iov_base = (char *)buf + offset,
893 .iov_len = len - offset };
894
895 ret = qio_channel_writev_full(
896 ioc, &iov, 1,
897 fds, nfds, NULL);
898 if (ret == QIO_CHANNEL_ERR_BLOCK) {
899 errno = EAGAIN;
900 return -1;
901 } else if (ret < 0) {
902 if (offset) {
903 return offset;
904 }
76a9644b 905
9894dc0c
DB		 906 errno = EINVAL;
907 return -1;
908 }
76a9644b 909
9894dc0c
DB		 910 offset += ret;
911 }
76a9644b 912
9894dc0c 913 return offset;
76a9644b
AL		 914}
915
9894dc0c 916
0ff0fad2 917#ifndef _WIN32
9894dc0c 918static int io_channel_send(QIOChannel *ioc, const void *buf, size_t len)
96c63847 919{
9894dc0c 920 return io_channel_send_full(ioc, buf, len, NULL, 0);
96c63847 921}
96c63847 922
44ab9ed4 923
a29753f8
AL		 924typedef struct FDCharDriver {
925 CharDriverState *chr;
9894dc0c 926 QIOChannel *ioc_in, *ioc_out;
6f97dba0
AL		 927 int max_size;
928} FDCharDriver;
929
9005b2a7 930/* Called with chr_write_lock held. */
6f97dba0
AL		 931static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
932{
933 FDCharDriver *s = chr->opaque;
a29753f8 934
9894dc0c 935 return io_channel_send(s->ioc_out, buf, len);
6f97dba0
AL		 936}
937
9894dc0c 938static gboolean fd_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL		 939{
940 CharDriverState *chr = opaque;
941 FDCharDriver *s = chr->opaque;
a29753f8 942 int len;
9bd7854e 943 uint8_t buf[READ_BUF_LEN];
9894dc0c 944 ssize_t ret;
6f97dba0
AL		 945
946 len = sizeof(buf);
a29753f8 947 if (len > s->max_size) {
6f97dba0 948 len = s->max_size;
a29753f8
AL		 949 }
950 if (len == 0) {
cdbf6e16 951 return TRUE;
a29753f8
AL		 952 }
953
9894dc0c
DB		 954 ret = qio_channel_read(
955 chan, (gchar *)buf, len, NULL);
956 if (ret == 0) {
26da70c7 957 remove_fd_in_watch(chr);
a425d23f 958 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
a29753f8 959 return FALSE;
6f97dba0 960 }
9894dc0c
DB		 961 if (ret > 0) {
962 qemu_chr_be_write(chr, buf, ret);
6f97dba0 963 }
a29753f8
AL		 964
965 return TRUE;
966}
967
968static int fd_chr_read_poll(void *opaque)
969{
970 CharDriverState *chr = opaque;
971 FDCharDriver *s = chr->opaque;
972
973 s->max_size = qemu_chr_be_can_write(chr);
974 return s->max_size;
6f97dba0
AL		 975}
976
23673ca7
AL		 977static GSource *fd_chr_add_watch(CharDriverState *chr, GIOCondition cond)
978{
979 FDCharDriver *s = chr->opaque;
9894dc0c 980 return qio_channel_create_watch(s->ioc_out, cond);
23673ca7
AL		 981}
982
6f97dba0
AL		 983static void fd_chr_update_read_handler(CharDriverState *chr)
984{
985 FDCharDriver *s = chr->opaque;
986
26da70c7 987 remove_fd_in_watch(chr);
9894dc0c
DB		 988 if (s->ioc_in) {
989 chr->fd_in_tag = io_add_watch_poll(s->ioc_in,
990 fd_chr_read_poll,
7ba9addc 991 fd_chr_read, chr);
6f97dba0
AL		 992 }
993}
994
995static void fd_chr_close(struct CharDriverState *chr)
996{
997 FDCharDriver *s = chr->opaque;
998
26da70c7 999 remove_fd_in_watch(chr);
9894dc0c
DB		 1000 if (s->ioc_in) {
1001 object_unref(OBJECT(s->ioc_in));
a29753f8 1002 }
9894dc0c
DB		 1003 if (s->ioc_out) {
1004 object_unref(OBJECT(s->ioc_out));
6f97dba0
AL		 1005 }
1006
7267c094 1007 g_free(s);
a425d23f 1008 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 1009}
1010
1011/* open a character device to a unix fd */
d0d7708b
DB		 1012static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out,
1013 ChardevCommon *backend, Error **errp)
6f97dba0
AL		 1014{
1015 CharDriverState *chr;
1016 FDCharDriver *s;
1017
d0d7708b
DB		 1018 chr = qemu_chr_alloc(backend, errp);
1019 if (!chr) {
1020 return NULL;
1021 }
2d528d45 1022 s = g_new0(FDCharDriver, 1);
9894dc0c
DB		 1023 s->ioc_in = QIO_CHANNEL(qio_channel_file_new_fd(fd_in));
1024 s->ioc_out = QIO_CHANNEL(qio_channel_file_new_fd(fd_out));
4ff12bdb 1025 qemu_set_nonblock(fd_out);
a29753f8 1026 s->chr = chr;
6f97dba0 1027 chr->opaque = s;
23673ca7 1028 chr->chr_add_watch = fd_chr_add_watch;
6f97dba0
AL		 1029 chr->chr_write = fd_chr_write;
1030 chr->chr_update_read_handler = fd_chr_update_read_handler;
1031 chr->chr_close = fd_chr_close;
1032
6f97dba0
AL		 1033 return chr;
1034}
1035
20cbe7a2
PB		 1036static CharDriverState *qemu_chr_open_pipe(const char *id,
1037 ChardevBackend *backend,
1038 ChardevReturn *ret,
1039 Error **errp)
6f97dba0 1040{
130257dc 1041 ChardevHostdev *opts = backend->u.pipe;
6f97dba0 1042 int fd_in, fd_out;
0ff0fad2
DB		 1043 char *filename_in;
1044 char *filename_out;
548cbb36 1045 const char *filename = opts->device;
d0d7708b 1046 ChardevCommon *common = qapi_ChardevHostdev_base(backend->u.pipe);
7d31544f 1047
0ff0fad2
DB		 1048
1049 filename_in = g_strdup_printf("%s.in", filename);
1050 filename_out = g_strdup_printf("%s.out", filename);
40ff6d7e
KW		 1051 TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
1052 TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
0ff0fad2
DB		 1053 g_free(filename_in);
1054 g_free(filename_out);
6f97dba0
AL		 1055 if (fd_in < 0 || fd_out < 0) {
1056 if (fd_in >= 0)
1057 close(fd_in);
1058 if (fd_out >= 0)
1059 close(fd_out);
b181e047 1060 TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
a89dd6c3 1061 if (fd_in < 0) {
20cbe7a2 1062 error_setg_file_open(errp, errno, filename);
1f51470d 1063 return NULL;
a89dd6c3 1064 }
6f97dba0 1065 }
d0d7708b 1066 return qemu_chr_open_fd(fd_in, fd_out, common, errp);
6f97dba0
AL		 1067}
1068
6f97dba0
AL		 1069/* init terminal so that we can grab keys */
1070static struct termios oldtty;
1071static int old_fd0_flags;
c88930a6 1072static bool stdio_in_use;
bb002513 1073static bool stdio_allow_signal;
e76d4420
GH		 1074static bool stdio_echo_state;
1075
1076static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo);
6f97dba0
AL		 1077
1078static void term_exit(void)
1079{
1080 tcsetattr (0, TCSANOW, &oldtty);
1081 fcntl(0, F_SETFL, old_fd0_flags);
1082}
1083
e76d4420
GH		 1084static void term_stdio_handler(int sig)
1085{
1086 /* restore echo after resume from suspend. */
1087 qemu_chr_set_echo_stdio(NULL, stdio_echo_state);
1088}
1089
bb002513 1090static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
6f97dba0
AL		 1091{
1092 struct termios tty;
1093
e76d4420 1094 stdio_echo_state = echo;
0369364b 1095 tty = oldtty;
bb002513
PB		 1096 if (!echo) {
1097 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
6f97dba0 1098 |INLCR|IGNCR|ICRNL|IXON);
bb002513
PB		 1099 tty.c_oflag |= OPOST;
1100 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
1101 tty.c_cflag &= ~(CSIZE|PARENB);
1102 tty.c_cflag |= CS8;
1103 tty.c_cc[VMIN] = 1;
1104 tty.c_cc[VTIME] = 0;
1105 }
bb002513 1106 if (!stdio_allow_signal)
6f97dba0 1107 tty.c_lflag &= ~ISIG;
6f97dba0
AL		 1108
1109 tcsetattr (0, TCSANOW, &tty);
6f97dba0
AL		 1110}
1111
1112static void qemu_chr_close_stdio(struct CharDriverState *chr)
1113{
1114 term_exit();
6f97dba0
AL		 1115 fd_chr_close(chr);
1116}
1117
8c84b25d
PB		 1118static CharDriverState *qemu_chr_open_stdio(const char *id,
1119 ChardevBackend *backend,
1120 ChardevReturn *ret,
1121 Error **errp)
6f97dba0 1122{
130257dc 1123 ChardevStdio *opts = backend->u.stdio;
6f97dba0 1124 CharDriverState *chr;
e76d4420 1125 struct sigaction act;
d0d7708b 1126 ChardevCommon *common = qapi_ChardevStdio_base(backend->u.stdio);
6f97dba0 1127
ab51b1d5 1128 if (is_daemonized()) {
8c84b25d 1129 error_setg(errp, "cannot use stdio with -daemonize");
ab51b1d5
MT		 1130 return NULL;
1131 }
c88930a6
LL		 1132
1133 if (stdio_in_use) {
8c84b25d
PB		 1134 error_setg(errp, "cannot use stdio by multiple character devices");
1135 return NULL;
c88930a6
LL		 1136 }
1137
1138 stdio_in_use = true;
ed7a1540 1139 old_fd0_flags = fcntl(0, F_GETFL);
c88930a6 1140 tcgetattr(0, &oldtty);
4ff12bdb 1141 qemu_set_nonblock(0);
ed7a1540 1142 atexit(term_exit);
0369364b 1143
e76d4420
GH		 1144 memset(&act, 0, sizeof(act));
1145 act.sa_handler = term_stdio_handler;
1146 sigaction(SIGCONT, &act, NULL);
1147
d0d7708b 1148 chr = qemu_chr_open_fd(0, 1, common, errp);
6f97dba0 1149 chr->chr_close = qemu_chr_close_stdio;
bb002513 1150 chr->chr_set_echo = qemu_chr_set_echo_stdio;
7c358031
GH		 1151 if (opts->has_signal) {
1152 stdio_allow_signal = opts->signal;
1153 }
15f31519 1154 qemu_chr_fe_set_echo(chr, false);
6f97dba0 1155
1f51470d 1156 return chr;
6f97dba0
AL		 1157}
1158
6f97dba0 1159#if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
a167ba50
AJ		 1160 || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
1161 || defined(__GLIBC__)
6f97dba0 1162
d809ab95
PB		 1163#define HAVE_CHARDEV_SERIAL 1
1164#define HAVE_CHARDEV_PTY 1
e551498e 1165
6f97dba0 1166typedef struct {
9894dc0c 1167 QIOChannel *ioc;
6f97dba0 1168 int read_bytes;
9005b2a7
PB		 1169
1170 /* Protected by the CharDriverState chr_write_lock. */
1171 int connected;
8aa33caf 1172 guint timer_tag;
7b3621f4 1173 guint open_tag;
34689e20 1174 int slave_fd;
6f97dba0
AL		 1175} PtyCharDriver;
1176
9005b2a7 1177static void pty_chr_update_read_handler_locked(CharDriverState *chr);
6f97dba0
AL		 1178static void pty_chr_state(CharDriverState *chr, int connected);
1179
8aa33caf
AL		 1180static gboolean pty_chr_timer(gpointer opaque)
1181{
1182 struct CharDriverState *chr = opaque;
1183 PtyCharDriver *s = chr->opaque;
1184
9005b2a7 1185 qemu_mutex_lock(&chr->chr_write_lock);
79f20075 1186 s->timer_tag = 0;
7b3621f4 1187 s->open_tag = 0;
b0d768c3
GH		 1188 if (!s->connected) {
1189 /* Next poll ... */
9005b2a7 1190 pty_chr_update_read_handler_locked(chr);
b0d768c3 1191 }
9005b2a7 1192 qemu_mutex_unlock(&chr->chr_write_lock);
8aa33caf
AL		 1193 return FALSE;
1194}
1195
9005b2a7 1196/* Called with chr_write_lock held. */
8aa33caf
AL		 1197static void pty_chr_rearm_timer(CharDriverState *chr, int ms)
1198{
1199 PtyCharDriver *s = chr->opaque;
1200
1201 if (s->timer_tag) {
1202 g_source_remove(s->timer_tag);
1203 s->timer_tag = 0;
1204 }
1205
1206 if (ms == 1000) {
1207 s->timer_tag = g_timeout_add_seconds(1, pty_chr_timer, chr);
1208 } else {
1209 s->timer_tag = g_timeout_add(ms, pty_chr_timer, chr);
1210 }
1211}
1212
9005b2a7
PB		 1213/* Called with chr_write_lock held. */
1214static void pty_chr_update_read_handler_locked(CharDriverState *chr)
1bb7fe72
PB		 1215{
1216 PtyCharDriver *s = chr->opaque;
1217 GPollFD pfd;
c1f24489 1218 int rc;
9894dc0c 1219 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc);
1bb7fe72 1220
9894dc0c 1221 pfd.fd = fioc->fd;
1bb7fe72
PB		 1222 pfd.events = G_IO_OUT;
1223 pfd.revents = 0;
c1f24489
PB		 1224 do {
1225 rc = g_poll(&pfd, 1, 0);
1226 } while (rc == -1 && errno == EINTR);
1227 assert(rc >= 0);
1228
1bb7fe72
PB		 1229 if (pfd.revents & G_IO_HUP) {
1230 pty_chr_state(chr, 0);
1231 } else {
1232 pty_chr_state(chr, 1);
1233 }
1234}
1235
9005b2a7
PB		 1236static void pty_chr_update_read_handler(CharDriverState *chr)
1237{
1238 qemu_mutex_lock(&chr->chr_write_lock);
1239 pty_chr_update_read_handler_locked(chr);
1240 qemu_mutex_unlock(&chr->chr_write_lock);
1241}
1242
1243/* Called with chr_write_lock held. */
6f97dba0
AL		 1244static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
1245{
1246 PtyCharDriver *s = chr->opaque;
1247
1248 if (!s->connected) {
1249 /* guest sends data, check for (re-)connect */
9005b2a7 1250 pty_chr_update_read_handler_locked(chr);
cf7330c7
ST		 1251 if (!s->connected) {
1252 return 0;
1253 }
6f97dba0 1254 }
9894dc0c 1255 return io_channel_send(s->ioc, buf, len);
6f97dba0
AL		 1256}
1257
e6a87ed8
AL		 1258static GSource *pty_chr_add_watch(CharDriverState *chr, GIOCondition cond)
1259{
1260 PtyCharDriver *s = chr->opaque;
62c339c5
PB		 1261 if (!s->connected) {
1262 return NULL;
1263 }
9894dc0c 1264 return qio_channel_create_watch(s->ioc, cond);
e6a87ed8
AL		 1265}
1266
6f97dba0
AL		 1267static int pty_chr_read_poll(void *opaque)
1268{
1269 CharDriverState *chr = opaque;
1270 PtyCharDriver *s = chr->opaque;
1271
909cda12 1272 s->read_bytes = qemu_chr_be_can_write(chr);
6f97dba0
AL		 1273 return s->read_bytes;
1274}
1275
9894dc0c 1276static gboolean pty_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL		 1277{
1278 CharDriverState *chr = opaque;
1279 PtyCharDriver *s = chr->opaque;
9894dc0c 1280 gsize len;
9bd7854e 1281 uint8_t buf[READ_BUF_LEN];
9894dc0c 1282 ssize_t ret;
6f97dba0
AL		 1283
1284 len = sizeof(buf);
1285 if (len > s->read_bytes)
1286 len = s->read_bytes;
cdbf6e16
PB		 1287 if (len == 0) {
1288 return TRUE;
1289 }
9894dc0c
DB		 1290 ret = qio_channel_read(s->ioc, (char *)buf, len, NULL);
1291 if (ret <= 0) {
6f97dba0 1292 pty_chr_state(chr, 0);
093d3a20
AL		 1293 return FALSE;
1294 } else {
6f97dba0 1295 pty_chr_state(chr, 1);
9894dc0c 1296 qemu_chr_be_write(chr, buf, ret);
6f97dba0 1297 }
093d3a20 1298 return TRUE;
6f97dba0
AL		 1299}
1300
7b3621f4
PB		 1301static gboolean qemu_chr_be_generic_open_func(gpointer opaque)
1302{
1303 CharDriverState *chr = opaque;
1304 PtyCharDriver *s = chr->opaque;
1305
1306 s->open_tag = 0;
1307 qemu_chr_be_generic_open(chr);
1308 return FALSE;
1309}
1310
9005b2a7 1311/* Called with chr_write_lock held. */
6f97dba0
AL		 1312static void pty_chr_state(CharDriverState *chr, int connected)
1313{
1314 PtyCharDriver *s = chr->opaque;
1315
1316 if (!connected) {
7b3621f4
PB		 1317 if (s->open_tag) {
1318 g_source_remove(s->open_tag);
1319 s->open_tag = 0;
1320 }
26da70c7 1321 remove_fd_in_watch(chr);
6f97dba0 1322 s->connected = 0;
6f97dba0
AL		 1323 /* (re-)connect poll interval for idle guests: once per second.
1324 * We check more frequently in case the guests sends data to
1325 * the virtual device linked to our pty. */
8aa33caf 1326 pty_chr_rearm_timer(chr, 1000);
6f97dba0 1327 } else {
85a67692
PB		 1328 if (s->timer_tag) {
1329 g_source_remove(s->timer_tag);
1330 s->timer_tag = 0;
1331 }
1332 if (!s->connected) {
7b3621f4 1333 g_assert(s->open_tag == 0);
85a67692 1334 s->connected = 1;
7b3621f4 1335 s->open_tag = g_idle_add(qemu_chr_be_generic_open_func, chr);
ac1b84dd
GH		 1336 }
1337 if (!chr->fd_in_tag) {
9894dc0c
DB		 1338 chr->fd_in_tag = io_add_watch_poll(s->ioc,
1339 pty_chr_read_poll,
7ba9addc 1340 pty_chr_read, chr);
85a67692 1341 }
6f97dba0
AL		 1342 }
1343}
1344
6f97dba0
AL		 1345static void pty_chr_close(struct CharDriverState *chr)
1346{
1347 PtyCharDriver *s = chr->opaque;
1348
7b3621f4
PB		 1349 qemu_mutex_lock(&chr->chr_write_lock);
1350 pty_chr_state(chr, 0);
34689e20 1351 close(s->slave_fd);
9894dc0c 1352 object_unref(OBJECT(s->ioc));
8aa33caf
AL		 1353 if (s->timer_tag) {
1354 g_source_remove(s->timer_tag);
910b6368 1355 s->timer_tag = 0;
8aa33caf 1356 }
7b3621f4 1357 qemu_mutex_unlock(&chr->chr_write_lock);
7267c094 1358 g_free(s);
a425d23f 1359 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 1360}
1361
e68c5958 1362static CharDriverState *qemu_chr_open_pty(const char *id,
c2e75a43
PB		 1363 ChardevBackend *backend,
1364 ChardevReturn *ret,
1365 Error **errp)
6f97dba0
AL		 1366{
1367 CharDriverState *chr;
1368 PtyCharDriver *s;
e68c5958 1369 int master_fd, slave_fd;
6f97dba0 1370 char pty_name[PATH_MAX];
d0d7708b 1371 ChardevCommon *common = qapi_ChardevDummy_base(backend->u.pty);
6f97dba0 1372
4efeabbb
MT		 1373 master_fd = qemu_openpty_raw(&slave_fd, pty_name);
1374 if (master_fd < 0) {
c2e75a43 1375 error_setg_errno(errp, errno, "Failed to create PTY");
1f51470d 1376 return NULL;
6f97dba0
AL		 1377 }
1378
fac6688a 1379 qemu_set_nonblock(master_fd);
6f97dba0 1380
d0d7708b
DB		 1381 chr = qemu_chr_alloc(common, errp);
1382 if (!chr) {
1383 close(master_fd);
1384 return NULL;
1385 }
a4e26048 1386
4efeabbb
MT		 1387 chr->filename = g_strdup_printf("pty:%s", pty_name);
1388 ret->pty = g_strdup(pty_name);
e68c5958 1389 ret->has_pty = true;
58650218 1390
e68c5958 1391 fprintf(stderr, "char device redirected to %s (label %s)\n",
4efeabbb 1392 pty_name, id);
6f97dba0 1393
2d528d45 1394 s = g_new0(PtyCharDriver, 1);
6f97dba0
AL		 1395 chr->opaque = s;
1396 chr->chr_write = pty_chr_write;
1397 chr->chr_update_read_handler = pty_chr_update_read_handler;
1398 chr->chr_close = pty_chr_close;
e6a87ed8 1399 chr->chr_add_watch = pty_chr_add_watch;
bd5c51ee 1400 chr->explicit_be_open = true;
6f97dba0 1401
9894dc0c 1402 s->ioc = QIO_CHANNEL(qio_channel_file_new_fd(master_fd));
34689e20 1403 s->slave_fd = slave_fd;
8aa33caf 1404 s->timer_tag = 0;
6f97dba0 1405
1f51470d 1406 return chr;
6f97dba0
AL		 1407}
1408
1409static void tty_serial_init(int fd, int speed,
1410 int parity, int data_bits, int stop_bits)
1411{
1412 struct termios tty;
1413 speed_t spd;
1414
1415#if 0
1416 printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1417 speed, parity, data_bits, stop_bits);
1418#endif
1419 tcgetattr (fd, &tty);
1420
45eea13b
SW		 1421#define check_speed(val) if (speed <= val) { spd = B##val; break; }
1422 speed = speed * 10 / 11;
1423 do {
1424 check_speed(50);
1425 check_speed(75);
1426 check_speed(110);
1427 check_speed(134);
1428 check_speed(150);
1429 check_speed(200);
1430 check_speed(300);
1431 check_speed(600);
1432 check_speed(1200);
1433 check_speed(1800);
1434 check_speed(2400);
1435 check_speed(4800);
1436 check_speed(9600);
1437 check_speed(19200);
1438 check_speed(38400);
1439 /* Non-Posix values follow. They may be unsupported on some systems. */
1440 check_speed(57600);
1441 check_speed(115200);
1442#ifdef B230400
1443 check_speed(230400);
1444#endif
1445#ifdef B460800
1446 check_speed(460800);
1447#endif
1448#ifdef B500000
1449 check_speed(500000);
1450#endif
1451#ifdef B576000
1452 check_speed(576000);
1453#endif
1454#ifdef B921600
1455 check_speed(921600);
1456#endif
1457#ifdef B1000000
1458 check_speed(1000000);
1459#endif
1460#ifdef B1152000
1461 check_speed(1152000);
1462#endif
1463#ifdef B1500000
1464 check_speed(1500000);
1465#endif
1466#ifdef B2000000
1467 check_speed(2000000);
1468#endif
1469#ifdef B2500000
1470 check_speed(2500000);
1471#endif
1472#ifdef B3000000
1473 check_speed(3000000);
1474#endif
1475#ifdef B3500000
1476 check_speed(3500000);
1477#endif
1478#ifdef B4000000
1479 check_speed(4000000);
1480#endif
6f97dba0 1481 spd = B115200;
45eea13b 1482 } while (0);
6f97dba0
AL		 1483
1484 cfsetispeed(&tty, spd);
1485 cfsetospeed(&tty, spd);
1486
1487 tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1488 |INLCR|IGNCR|ICRNL|IXON);
1489 tty.c_oflag |= OPOST;
1490 tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1491 tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1492 switch(data_bits) {
1493 default:
1494 case 8:
1495 tty.c_cflag |= CS8;
1496 break;
1497 case 7:
1498 tty.c_cflag |= CS7;
1499 break;
1500 case 6:
1501 tty.c_cflag |= CS6;
1502 break;
1503 case 5:
1504 tty.c_cflag |= CS5;
1505 break;
1506 }
1507 switch(parity) {
1508 default:
1509 case 'N':
1510 break;
1511 case 'E':
1512 tty.c_cflag |= PARENB;
1513 break;
1514 case 'O':
1515 tty.c_cflag |= PARENB | PARODD;
1516 break;
1517 }
1518 if (stop_bits == 2)
1519 tty.c_cflag |= CSTOPB;
1520
1521 tcsetattr (fd, TCSANOW, &tty);
1522}
1523
1524static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1525{
1526 FDCharDriver *s = chr->opaque;
9894dc0c 1527 QIOChannelFile *fioc = QIO_CHANNEL_FILE(s->ioc_in);
6f97dba0
AL		 1528
1529 switch(cmd) {
1530 case CHR_IOCTL_SERIAL_SET_PARAMS:
1531 {
1532 QEMUSerialSetParams *ssp = arg;
9894dc0c 1533 tty_serial_init(fioc->fd,
a29753f8 1534 ssp->speed, ssp->parity,
6f97dba0
AL		 1535 ssp->data_bits, ssp->stop_bits);
1536 }
1537 break;
1538 case CHR_IOCTL_SERIAL_SET_BREAK:
1539 {
1540 int enable = *(int *)arg;
a29753f8 1541 if (enable) {
9894dc0c 1542 tcsendbreak(fioc->fd, 1);
a29753f8 1543 }
6f97dba0
AL		 1544 }
1545 break;
1546 case CHR_IOCTL_SERIAL_GET_TIOCM:
1547 {
1548 int sarg = 0;
1549 int *targ = (int *)arg;
9894dc0c 1550 ioctl(fioc->fd, TIOCMGET, &sarg);
6f97dba0 1551 *targ = 0;
b4abdfa4 1552 if (sarg & TIOCM_CTS)
6f97dba0 1553 *targ |= CHR_TIOCM_CTS;
b4abdfa4 1554 if (sarg & TIOCM_CAR)
6f97dba0 1555 *targ |= CHR_TIOCM_CAR;
b4abdfa4 1556 if (sarg & TIOCM_DSR)
6f97dba0 1557 *targ |= CHR_TIOCM_DSR;
b4abdfa4 1558 if (sarg & TIOCM_RI)
6f97dba0 1559 *targ |= CHR_TIOCM_RI;
b4abdfa4 1560 if (sarg & TIOCM_DTR)
6f97dba0 1561 *targ |= CHR_TIOCM_DTR;
b4abdfa4 1562 if (sarg & TIOCM_RTS)
6f97dba0
AL		 1563 *targ |= CHR_TIOCM_RTS;
1564 }
1565 break;
1566 case CHR_IOCTL_SERIAL_SET_TIOCM:
1567 {
1568 int sarg = *(int *)arg;
1569 int targ = 0;
9894dc0c 1570 ioctl(fioc->fd, TIOCMGET, &targ);
b4abdfa4
AJ		 1571 targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1572 | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1573 if (sarg & CHR_TIOCM_CTS)
1574 targ |= TIOCM_CTS;
1575 if (sarg & CHR_TIOCM_CAR)
1576 targ |= TIOCM_CAR;
1577 if (sarg & CHR_TIOCM_DSR)
1578 targ |= TIOCM_DSR;
1579 if (sarg & CHR_TIOCM_RI)
1580 targ |= TIOCM_RI;
1581 if (sarg & CHR_TIOCM_DTR)
6f97dba0 1582 targ |= TIOCM_DTR;
b4abdfa4 1583 if (sarg & CHR_TIOCM_RTS)
6f97dba0 1584 targ |= TIOCM_RTS;
9894dc0c 1585 ioctl(fioc->fd, TIOCMSET, &targ);
6f97dba0
AL		 1586 }
1587 break;
1588 default:
1589 return -ENOTSUP;
1590 }
1591 return 0;
1592}
1593
4266a134
DA		 1594static void qemu_chr_close_tty(CharDriverState *chr)
1595{
4266a134 1596 fd_chr_close(chr);
4266a134
DA		 1597}
1598
d0d7708b
DB		 1599static CharDriverState *qemu_chr_open_tty_fd(int fd,
1600 ChardevCommon *backend,
1601 Error **errp)
d59044ef
GH		 1602{
1603 CharDriverState *chr;
1604
1605 tty_serial_init(fd, 115200, 'N', 8, 1);
d0d7708b 1606 chr = qemu_chr_open_fd(fd, fd, backend, errp);
d59044ef
GH		 1607 chr->chr_ioctl = tty_serial_ioctl;
1608 chr->chr_close = qemu_chr_close_tty;
1609 return chr;
1610}
6f97dba0
AL		 1611#endif /* __linux__ || __sun__ */
1612
1613#if defined(__linux__)
e551498e
GH		 1614
1615#define HAVE_CHARDEV_PARPORT 1
1616
6f97dba0
AL		 1617typedef struct {
1618 int fd;
1619 int mode;
1620} ParallelCharDriver;
1621
1622static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1623{
1624 if (s->mode != mode) {
1625 int m = mode;
1626 if (ioctl(s->fd, PPSETMODE, &m) < 0)
1627 return 0;
1628 s->mode = mode;
1629 }
1630 return 1;
1631}
1632
1633static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1634{
1635 ParallelCharDriver *drv = chr->opaque;
1636 int fd = drv->fd;
1637 uint8_t b;
1638
1639 switch(cmd) {
1640 case CHR_IOCTL_PP_READ_DATA:
1641 if (ioctl(fd, PPRDATA, &b) < 0)
1642 return -ENOTSUP;
1643 *(uint8_t *)arg = b;
1644 break;
1645 case CHR_IOCTL_PP_WRITE_DATA:
1646 b = *(uint8_t *)arg;
1647 if (ioctl(fd, PPWDATA, &b) < 0)
1648 return -ENOTSUP;
1649 break;
1650 case CHR_IOCTL_PP_READ_CONTROL:
1651 if (ioctl(fd, PPRCONTROL, &b) < 0)
1652 return -ENOTSUP;
1653 /* Linux gives only the lowest bits, and no way to know data
1654 direction! For better compatibility set the fixed upper
1655 bits. */
1656 *(uint8_t *)arg = b | 0xc0;
1657 break;
1658 case CHR_IOCTL_PP_WRITE_CONTROL:
1659 b = *(uint8_t *)arg;
1660 if (ioctl(fd, PPWCONTROL, &b) < 0)
1661 return -ENOTSUP;
1662 break;
1663 case CHR_IOCTL_PP_READ_STATUS:
1664 if (ioctl(fd, PPRSTATUS, &b) < 0)
1665 return -ENOTSUP;
1666 *(uint8_t *)arg = b;
1667 break;
1668 case CHR_IOCTL_PP_DATA_DIR:
1669 if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1670 return -ENOTSUP;
1671 break;
1672 case CHR_IOCTL_PP_EPP_READ_ADDR:
1673 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1674 struct ParallelIOArg *parg = arg;
1675 int n = read(fd, parg->buffer, parg->count);
1676 if (n != parg->count) {
1677 return -EIO;
1678 }
1679 }
1680 break;
1681 case CHR_IOCTL_PP_EPP_READ:
1682 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1683 struct ParallelIOArg *parg = arg;
1684 int n = read(fd, parg->buffer, parg->count);
1685 if (n != parg->count) {
1686 return -EIO;
1687 }
1688 }
1689 break;
1690 case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1691 if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1692 struct ParallelIOArg *parg = arg;
1693 int n = write(fd, parg->buffer, parg->count);
1694 if (n != parg->count) {
1695 return -EIO;
1696 }
1697 }
1698 break;
1699 case CHR_IOCTL_PP_EPP_WRITE:
1700 if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1701 struct ParallelIOArg *parg = arg;
1702 int n = write(fd, parg->buffer, parg->count);
1703 if (n != parg->count) {
1704 return -EIO;
1705 }
1706 }
1707 break;
1708 default:
1709 return -ENOTSUP;
1710 }
1711 return 0;
1712}
1713
1714static void pp_close(CharDriverState *chr)
1715{
1716 ParallelCharDriver *drv = chr->opaque;
1717 int fd = drv->fd;
1718
1719 pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1720 ioctl(fd, PPRELEASE);
1721 close(fd);
7267c094 1722 g_free(drv);
a425d23f 1723 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 1724}
1725
d0d7708b
DB		 1726static CharDriverState *qemu_chr_open_pp_fd(int fd,
1727 ChardevCommon *backend,
1728 Error **errp)
6f97dba0
AL		 1729{
1730 CharDriverState *chr;
1731 ParallelCharDriver *drv;
6f97dba0
AL		 1732
1733 if (ioctl(fd, PPCLAIM) < 0) {
38bfb1a6 1734 error_setg_errno(errp, errno, "not a parallel port");
6f97dba0 1735 close(fd);
1f51470d 1736 return NULL;
6f97dba0
AL		 1737 }
1738
d0d7708b
DB		 1739 chr = qemu_chr_alloc(backend, errp);
1740 if (!chr) {
1741 return NULL;
1742 }
27ef9cb0
PB		 1743
1744 drv = g_new0(ParallelCharDriver, 1);
1745 chr->opaque = drv;
6f97dba0
AL		 1746 chr->chr_write = null_chr_write;
1747 chr->chr_ioctl = pp_ioctl;
1748 chr->chr_close = pp_close;
27ef9cb0
PB		 1749
1750 drv->fd = fd;
1751 drv->mode = IEEE1284_MODE_COMPAT;
6f97dba0 1752
1f51470d 1753 return chr;
6f97dba0
AL		 1754}
1755#endif /* __linux__ */
1756
a167ba50 1757#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
e551498e
GH		 1758
1759#define HAVE_CHARDEV_PARPORT 1
1760
6972f935
BS		 1761static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1762{
e0efb993 1763 int fd = (int)(intptr_t)chr->opaque;
6972f935
BS		 1764 uint8_t b;
1765
1766 switch(cmd) {
1767 case CHR_IOCTL_PP_READ_DATA:
1768 if (ioctl(fd, PPIGDATA, &b) < 0)
1769 return -ENOTSUP;
1770 *(uint8_t *)arg = b;
1771 break;
1772 case CHR_IOCTL_PP_WRITE_DATA:
1773 b = *(uint8_t *)arg;
1774 if (ioctl(fd, PPISDATA, &b) < 0)
1775 return -ENOTSUP;
1776 break;
1777 case CHR_IOCTL_PP_READ_CONTROL:
1778 if (ioctl(fd, PPIGCTRL, &b) < 0)
1779 return -ENOTSUP;
1780 *(uint8_t *)arg = b;
1781 break;
1782 case CHR_IOCTL_PP_WRITE_CONTROL:
1783 b = *(uint8_t *)arg;
1784 if (ioctl(fd, PPISCTRL, &b) < 0)
1785 return -ENOTSUP;
1786 break;
1787 case CHR_IOCTL_PP_READ_STATUS:
1788 if (ioctl(fd, PPIGSTATUS, &b) < 0)
1789 return -ENOTSUP;
1790 *(uint8_t *)arg = b;
1791 break;
1792 default:
1793 return -ENOTSUP;
1794 }
1795 return 0;
1796}
1797
d0d7708b
DB		 1798static CharDriverState *qemu_chr_open_pp_fd(int fd,
1799 ChardevBackend *backend,
1800 Error **errp)
6972f935
BS		 1801{
1802 CharDriverState *chr;
6972f935 1803
d0d7708b
DB		 1804 chr = qemu_chr_alloc(common, errp);
1805 if (!chr) {
1806 return NULL;
1807 }
e0efb993 1808 chr->opaque = (void *)(intptr_t)fd;
6972f935
BS		 1809 chr->chr_write = null_chr_write;
1810 chr->chr_ioctl = pp_ioctl;
bd5c51ee 1811 chr->explicit_be_open = true;
1f51470d 1812 return chr;
6972f935
BS		 1813}
1814#endif
1815
6f97dba0
AL		 1816#else /* _WIN32 */
1817
d809ab95
PB		 1818#define HAVE_CHARDEV_SERIAL 1
1819
6f97dba0
AL		 1820typedef struct {
1821 int max_size;
1822 HANDLE hcom, hrecv, hsend;
9005b2a7 1823 OVERLAPPED orecv;
6f97dba0
AL		 1824 BOOL fpipe;
1825 DWORD len;
9005b2a7
PB		 1826
1827 /* Protected by the CharDriverState chr_write_lock. */
1828 OVERLAPPED osend;
6f97dba0
AL		 1829} WinCharState;
1830
db418a0a
FC		 1831typedef struct {
1832 HANDLE hStdIn;
1833 HANDLE hInputReadyEvent;
1834 HANDLE hInputDoneEvent;
1835 HANDLE hInputThread;
1836 uint8_t win_stdio_buf;
1837} WinStdioCharState;
1838
6f97dba0
AL		 1839#define NSENDBUF 2048
1840#define NRECVBUF 2048
1841#define MAXCONNECT 1
1842#define NTIMEOUT 5000
1843
1844static int win_chr_poll(void *opaque);
1845static int win_chr_pipe_poll(void *opaque);
1846
1847static void win_chr_close(CharDriverState *chr)
1848{
1849 WinCharState *s = chr->opaque;
1850
1851 if (s->hsend) {
1852 CloseHandle(s->hsend);
1853 s->hsend = NULL;
1854 }
1855 if (s->hrecv) {
1856 CloseHandle(s->hrecv);
1857 s->hrecv = NULL;
1858 }
1859 if (s->hcom) {
1860 CloseHandle(s->hcom);
1861 s->hcom = NULL;
1862 }
1863 if (s->fpipe)
1864 qemu_del_polling_cb(win_chr_pipe_poll, chr);
1865 else
1866 qemu_del_polling_cb(win_chr_poll, chr);
793cbfb5 1867
a425d23f 1868 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 1869}
1870
6511d396 1871static int win_chr_init(CharDriverState *chr, const char *filename, Error **errp)
6f97dba0
AL		 1872{
1873 WinCharState *s = chr->opaque;
1874 COMMCONFIG comcfg;
1875 COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
1876 COMSTAT comstat;
1877 DWORD size;
1878 DWORD err;
1879
1880 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1881 if (!s->hsend) {
6511d396 1882 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL		 1883 goto fail;
1884 }
1885 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1886 if (!s->hrecv) {
6511d396 1887 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL		 1888 goto fail;
1889 }
1890
1891 s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
1892 OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
1893 if (s->hcom == INVALID_HANDLE_VALUE) {
6511d396 1894 error_setg(errp, "Failed CreateFile (%lu)", GetLastError());
6f97dba0
AL		 1895 s->hcom = NULL;
1896 goto fail;
1897 }
1898
1899 if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
6511d396 1900 error_setg(errp, "Failed SetupComm");
6f97dba0
AL		 1901 goto fail;
1902 }
1903
1904 ZeroMemory(&comcfg, sizeof(COMMCONFIG));
1905 size = sizeof(COMMCONFIG);
1906 GetDefaultCommConfig(filename, &comcfg, &size);
1907 comcfg.dcb.DCBlength = sizeof(DCB);
1908 CommConfigDialog(filename, NULL, &comcfg);
1909
1910 if (!SetCommState(s->hcom, &comcfg.dcb)) {
6511d396 1911 error_setg(errp, "Failed SetCommState");
6f97dba0
AL		 1912 goto fail;
1913 }
1914
1915 if (!SetCommMask(s->hcom, EV_ERR)) {
6511d396 1916 error_setg(errp, "Failed SetCommMask");
6f97dba0
AL		 1917 goto fail;
1918 }
1919
1920 cto.ReadIntervalTimeout = MAXDWORD;
1921 if (!SetCommTimeouts(s->hcom, &cto)) {
6511d396 1922 error_setg(errp, "Failed SetCommTimeouts");
6f97dba0
AL		 1923 goto fail;
1924 }
1925
1926 if (!ClearCommError(s->hcom, &err, &comstat)) {
6511d396 1927 error_setg(errp, "Failed ClearCommError");
6f97dba0
AL		 1928 goto fail;
1929 }
1930 qemu_add_polling_cb(win_chr_poll, chr);
1931 return 0;
1932
1933 fail:
1934 win_chr_close(chr);
1935 return -1;
1936}
1937
9005b2a7 1938/* Called with chr_write_lock held. */
6f97dba0
AL		 1939static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
1940{
1941 WinCharState *s = chr->opaque;
1942 DWORD len, ret, size, err;
1943
1944 len = len1;
1945 ZeroMemory(&s->osend, sizeof(s->osend));
1946 s->osend.hEvent = s->hsend;
1947 while (len > 0) {
1948 if (s->hsend)
1949 ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
1950 else
1951 ret = WriteFile(s->hcom, buf, len, &size, NULL);
1952 if (!ret) {
1953 err = GetLastError();
1954 if (err == ERROR_IO_PENDING) {
1955 ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
1956 if (ret) {
1957 buf += size;
1958 len -= size;
1959 } else {
1960 break;
1961 }
1962 } else {
1963 break;
1964 }
1965 } else {
1966 buf += size;
1967 len -= size;
1968 }
1969 }
1970 return len1 - len;
1971}
1972
1973static int win_chr_read_poll(CharDriverState *chr)
1974{
1975 WinCharState *s = chr->opaque;
1976
909cda12 1977 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 1978 return s->max_size;
1979}
1980
1981static void win_chr_readfile(CharDriverState *chr)
1982{
1983 WinCharState *s = chr->opaque;
1984 int ret, err;
9bd7854e 1985 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL		 1986 DWORD size;
1987
1988 ZeroMemory(&s->orecv, sizeof(s->orecv));
1989 s->orecv.hEvent = s->hrecv;
1990 ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
1991 if (!ret) {
1992 err = GetLastError();
1993 if (err == ERROR_IO_PENDING) {
1994 ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
1995 }
1996 }
1997
1998 if (size > 0) {
fa5efccb 1999 qemu_chr_be_write(chr, buf, size);
6f97dba0
AL		 2000 }
2001}
2002
2003static void win_chr_read(CharDriverState *chr)
2004{
2005 WinCharState *s = chr->opaque;
2006
2007 if (s->len > s->max_size)
2008 s->len = s->max_size;
2009 if (s->len == 0)
2010 return;
2011
2012 win_chr_readfile(chr);
2013}
2014
2015static int win_chr_poll(void *opaque)
2016{
2017 CharDriverState *chr = opaque;
2018 WinCharState *s = chr->opaque;
2019 COMSTAT status;
2020 DWORD comerr;
2021
2022 ClearCommError(s->hcom, &comerr, &status);
2023 if (status.cbInQue > 0) {
2024 s->len = status.cbInQue;
2025 win_chr_read_poll(chr);
2026 win_chr_read(chr);
2027 return 1;
2028 }
2029 return 0;
2030}
2031
6511d396 2032static CharDriverState *qemu_chr_open_win_path(const char *filename,
d0d7708b 2033 ChardevCommon *backend,
6511d396 2034 Error **errp)
6f97dba0
AL		 2035{
2036 CharDriverState *chr;
2037 WinCharState *s;
2038
d0d7708b
DB		 2039 chr = qemu_chr_alloc(backend, errp);
2040 if (!chr) {
2041 return NULL;
2042 }
2d528d45 2043 s = g_new0(WinCharState, 1);
6f97dba0
AL		 2044 chr->opaque = s;
2045 chr->chr_write = win_chr_write;
2046 chr->chr_close = win_chr_close;
2047
6511d396 2048 if (win_chr_init(chr, filename, errp) < 0) {
2e02e18b 2049 g_free(s);
d0d7708b 2050 qemu_chr_free_common(chr);
1f51470d 2051 return NULL;
6f97dba0 2052 }
1f51470d 2053 return chr;
6f97dba0
AL		 2054}
2055
2056static int win_chr_pipe_poll(void *opaque)
2057{
2058 CharDriverState *chr = opaque;
2059 WinCharState *s = chr->opaque;
2060 DWORD size;
2061
2062 PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
2063 if (size > 0) {
2064 s->len = size;
2065 win_chr_read_poll(chr);
2066 win_chr_read(chr);
2067 return 1;
2068 }
2069 return 0;
2070}
2071
20cbe7a2
PB		 2072static int win_chr_pipe_init(CharDriverState *chr, const char *filename,
2073 Error **errp)
6f97dba0
AL		 2074{
2075 WinCharState *s = chr->opaque;
2076 OVERLAPPED ov;
2077 int ret;
2078 DWORD size;
0ff0fad2 2079 char *openname;
6f97dba0
AL		 2080
2081 s->fpipe = TRUE;
2082
2083 s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
2084 if (!s->hsend) {
20cbe7a2 2085 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL		 2086 goto fail;
2087 }
2088 s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
2089 if (!s->hrecv) {
20cbe7a2 2090 error_setg(errp, "Failed CreateEvent");
6f97dba0
AL		 2091 goto fail;
2092 }
2093
0ff0fad2 2094 openname = g_strdup_printf("\\\\.\\pipe\\%s", filename);
6f97dba0
AL		 2095 s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
2096 PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
2097 PIPE_WAIT,
2098 MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
0ff0fad2 2099 g_free(openname);
6f97dba0 2100 if (s->hcom == INVALID_HANDLE_VALUE) {
20cbe7a2 2101 error_setg(errp, "Failed CreateNamedPipe (%lu)", GetLastError());
6f97dba0
AL		 2102 s->hcom = NULL;
2103 goto fail;
2104 }
2105
2106 ZeroMemory(&ov, sizeof(ov));
2107 ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
2108 ret = ConnectNamedPipe(s->hcom, &ov);
2109 if (ret) {
20cbe7a2 2110 error_setg(errp, "Failed ConnectNamedPipe");
6f97dba0
AL		 2111 goto fail;
2112 }
2113
2114 ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
2115 if (!ret) {
20cbe7a2 2116 error_setg(errp, "Failed GetOverlappedResult");
6f97dba0
AL		 2117 if (ov.hEvent) {
2118 CloseHandle(ov.hEvent);
2119 ov.hEvent = NULL;
2120 }
2121 goto fail;
2122 }
2123
2124 if (ov.hEvent) {
2125 CloseHandle(ov.hEvent);
2126 ov.hEvent = NULL;
2127 }
2128 qemu_add_polling_cb(win_chr_pipe_poll, chr);
2129 return 0;
2130
2131 fail:
2132 win_chr_close(chr);
2133 return -1;
2134}
2135
2136
20cbe7a2
PB		 2137static CharDriverState *qemu_chr_open_pipe(const char *id,
2138 ChardevBackend *backend,
2139 ChardevReturn *ret,
2140 Error **errp)
6f97dba0 2141{
130257dc 2142 ChardevHostdev *opts = backend->u.pipe;
548cbb36 2143 const char *filename = opts->device;
6f97dba0
AL		 2144 CharDriverState *chr;
2145 WinCharState *s;
d0d7708b 2146 ChardevCommon *common = qapi_ChardevHostdev_base(backend->u.pipe);
6f97dba0 2147
d0d7708b
DB		 2148 chr = qemu_chr_alloc(common, errp);
2149 if (!chr) {
2150 return NULL;
2151 }
2d528d45 2152 s = g_new0(WinCharState, 1);
6f97dba0
AL		 2153 chr->opaque = s;
2154 chr->chr_write = win_chr_write;
2155 chr->chr_close = win_chr_close;
2156
20cbe7a2 2157 if (win_chr_pipe_init(chr, filename, errp) < 0) {
2e02e18b 2158 g_free(s);
d0d7708b 2159 qemu_chr_free_common(chr);
1f51470d 2160 return NULL;
6f97dba0 2161 }
1f51470d 2162 return chr;
6f97dba0
AL		 2163}
2164
d0d7708b
DB		 2165static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out,
2166 ChardevCommon *backend,
2167 Error **errp)
6f97dba0
AL		 2168{
2169 CharDriverState *chr;
2170 WinCharState *s;
2171
d0d7708b
DB		 2172 chr = qemu_chr_alloc(backend, errp);
2173 if (!chr) {
2174 return NULL;
2175 }
2d528d45 2176 s = g_new0(WinCharState, 1);
6f97dba0
AL		 2177 s->hcom = fd_out;
2178 chr->opaque = s;
2179 chr->chr_write = win_chr_write;
1f51470d 2180 return chr;
6f97dba0
AL		 2181}
2182
122e5ed4
PB		 2183static CharDriverState *qemu_chr_open_win_con(const char *id,
2184 ChardevBackend *backend,
2185 ChardevReturn *ret,
2186 Error **errp)
6f97dba0 2187{
d0d7708b
DB		 2188 ChardevCommon *common = qapi_ChardevDummy_base(backend->u.console);
2189 return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE),
2190 common, errp);
6f97dba0
AL		 2191}
2192
db418a0a
FC		 2193static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
2194{
2195 HANDLE hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
2196 DWORD dwSize;
2197 int len1;
2198
2199 len1 = len;
2200
2201 while (len1 > 0) {
2202 if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
2203 break;
2204 }
2205 buf += dwSize;
2206 len1 -= dwSize;
2207 }
2208
2209 return len - len1;
2210}
2211
2212static void win_stdio_wait_func(void *opaque)
2213{
2214 CharDriverState *chr = opaque;
2215 WinStdioCharState *stdio = chr->opaque;
2216 INPUT_RECORD buf[4];
2217 int ret;
2218 DWORD dwSize;
2219 int i;
2220
dff7424d 2221 ret = ReadConsoleInput(stdio->hStdIn, buf, ARRAY_SIZE(buf), &dwSize);
db418a0a
FC		 2222
2223 if (!ret) {
2224 /* Avoid error storm */
2225 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2226 return;
2227 }
2228
2229 for (i = 0; i < dwSize; i++) {
2230 KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
2231
2232 if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
2233 int j;
2234 if (kev->uChar.AsciiChar != 0) {
2235 for (j = 0; j < kev->wRepeatCount; j++) {
2236 if (qemu_chr_be_can_write(chr)) {
2237 uint8_t c = kev->uChar.AsciiChar;
2238 qemu_chr_be_write(chr, &c, 1);
2239 }
2240 }
2241 }
2242 }
2243 }
2244}
2245
2246static DWORD WINAPI win_stdio_thread(LPVOID param)
2247{
2248 CharDriverState *chr = param;
2249 WinStdioCharState *stdio = chr->opaque;
2250 int ret;
2251 DWORD dwSize;
2252
2253 while (1) {
2254
2255 /* Wait for one byte */
2256 ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
2257
2258 /* Exit in case of error, continue if nothing read */
2259 if (!ret) {
2260 break;
2261 }
2262 if (!dwSize) {
2263 continue;
2264 }
2265
2266 /* Some terminal emulator returns \r\n for Enter, just pass \n */
2267 if (stdio->win_stdio_buf == '\r') {
2268 continue;
2269 }
2270
2271 /* Signal the main thread and wait until the byte was eaten */
2272 if (!SetEvent(stdio->hInputReadyEvent)) {
2273 break;
2274 }
2275 if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
2276 != WAIT_OBJECT_0) {
2277 break;
2278 }
2279 }
2280
2281 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2282 return 0;
2283}
2284
2285static void win_stdio_thread_wait_func(void *opaque)
2286{
2287 CharDriverState *chr = opaque;
2288 WinStdioCharState *stdio = chr->opaque;
2289
2290 if (qemu_chr_be_can_write(chr)) {
2291 qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
2292 }
2293
2294 SetEvent(stdio->hInputDoneEvent);
2295}
2296
2297static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
2298{
2299 WinStdioCharState *stdio = chr->opaque;
2300 DWORD dwMode = 0;
2301
2302 GetConsoleMode(stdio->hStdIn, &dwMode);
2303
2304 if (echo) {
2305 SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
2306 } else {
2307 SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
2308 }
2309}
2310
2311static void win_stdio_close(CharDriverState *chr)
2312{
2313 WinStdioCharState *stdio = chr->opaque;
2314
2315 if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
2316 CloseHandle(stdio->hInputReadyEvent);
2317 }
2318 if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
2319 CloseHandle(stdio->hInputDoneEvent);
2320 }
2321 if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
2322 TerminateThread(stdio->hInputThread, 0);
2323 }
2324
2325 g_free(chr->opaque);
2326 g_free(chr);
db418a0a
FC		 2327}
2328
8c84b25d
PB		 2329static CharDriverState *qemu_chr_open_stdio(const char *id,
2330 ChardevBackend *backend,
2331 ChardevReturn *ret,
2332 Error **errp)
db418a0a
FC		 2333{
2334 CharDriverState *chr;
2335 WinStdioCharState *stdio;
2336 DWORD dwMode;
2337 int is_console = 0;
d0d7708b 2338 ChardevCommon *common = qapi_ChardevStdio_base(backend->u.stdio);
db418a0a 2339
d0d7708b
DB		 2340 chr = qemu_chr_alloc(common, errp);
2341 if (!chr) {
2342 return NULL;
2343 }
2d528d45 2344 stdio = g_new0(WinStdioCharState, 1);
db418a0a
FC		 2345
2346 stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
2347 if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
8c84b25d
PB		 2348 error_setg(errp, "cannot open stdio: invalid handle");
2349 return NULL;
db418a0a
FC		 2350 }
2351
2352 is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
2353
2354 chr->opaque = stdio;
2355 chr->chr_write = win_stdio_write;
2356 chr->chr_close = win_stdio_close;
2357
ed7a1540
AL		 2358 if (is_console) {
2359 if (qemu_add_wait_object(stdio->hStdIn,
2360 win_stdio_wait_func, chr)) {
8c84b25d
PB		 2361 error_setg(errp, "qemu_add_wait_object: failed");
2362 goto err1;
ed7a1540
AL		 2363 }
2364 } else {
2365 DWORD dwId;
2366
2367 stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
2368 stdio->hInputDoneEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
8c84b25d 2369 if (stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
ed7a1540 2370 || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
8c84b25d
PB		 2371 error_setg(errp, "cannot create event");
2372 goto err2;
ed7a1540
AL		 2373 }
2374 if (qemu_add_wait_object(stdio->hInputReadyEvent,
2375 win_stdio_thread_wait_func, chr)) {
8c84b25d
PB		 2376 error_setg(errp, "qemu_add_wait_object: failed");
2377 goto err2;
2378 }
2379 stdio->hInputThread = CreateThread(NULL, 0, win_stdio_thread,
2380 chr, 0, &dwId);
2381
2382 if (stdio->hInputThread == INVALID_HANDLE_VALUE) {
2383 error_setg(errp, "cannot create stdio thread");
2384 goto err3;
db418a0a
FC		 2385 }
2386 }
2387
2388 dwMode |= ENABLE_LINE_INPUT;
2389
ed7a1540 2390 if (is_console) {
db418a0a
FC		 2391 /* set the terminal in raw mode */
2392 /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2393 dwMode |= ENABLE_PROCESSED_INPUT;
2394 }
2395
2396 SetConsoleMode(stdio->hStdIn, dwMode);
2397
2398 chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2399 qemu_chr_fe_set_echo(chr, false);
2400
1f51470d 2401 return chr;
8c84b25d
PB		 2402
2403err3:
2404 qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
2405err2:
2406 CloseHandle(stdio->hInputReadyEvent);
2407 CloseHandle(stdio->hInputDoneEvent);
2408err1:
2409 qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
2410 return NULL;
db418a0a 2411}
6f97dba0
AL		 2412#endif /* !_WIN32 */
2413
5ab8211b 2414
6f97dba0
AL		 2415/***********************************************************/
2416/* UDP Net console */
2417
2418typedef struct {
9894dc0c 2419 QIOChannel *ioc;
9bd7854e 2420 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL		 2421 int bufcnt;
2422 int bufptr;
2423 int max_size;
2424} NetCharDriver;
2425
9005b2a7 2426/* Called with chr_write_lock held. */
6f97dba0
AL		 2427static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2428{
2429 NetCharDriver *s = chr->opaque;
76a9644b 2430
9894dc0c
DB		 2431 return qio_channel_write(
2432 s->ioc, (const char *)buf, len, NULL);
6f97dba0
AL		 2433}
2434
2435static int udp_chr_read_poll(void *opaque)
2436{
2437 CharDriverState *chr = opaque;
2438 NetCharDriver *s = chr->opaque;
2439
909cda12 2440 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 2441
2442 /* If there were any stray characters in the queue process them
2443 * first
2444 */
2445 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
fa5efccb 2446 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
6f97dba0 2447 s->bufptr++;
909cda12 2448 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 2449 }
2450 return s->max_size;
2451}
2452
9894dc0c 2453static gboolean udp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL		 2454{
2455 CharDriverState *chr = opaque;
2456 NetCharDriver *s = chr->opaque;
9894dc0c 2457 ssize_t ret;
6f97dba0 2458
cdbf6e16
PB		 2459 if (s->max_size == 0) {
2460 return TRUE;
2461 }
9894dc0c
DB		 2462 ret = qio_channel_read(
2463 s->ioc, (char *)s->buf, sizeof(s->buf), NULL);
2464 if (ret <= 0) {
26da70c7 2465 remove_fd_in_watch(chr);
76a9644b
AL		 2466 return FALSE;
2467 }
9894dc0c 2468 s->bufcnt = ret;
6f97dba0
AL		 2469
2470 s->bufptr = 0;
2471 while (s->max_size > 0 && s->bufptr < s->bufcnt) {
fa5efccb 2472 qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
6f97dba0 2473 s->bufptr++;
909cda12 2474 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0 2475 }
76a9644b
AL		 2476
2477 return TRUE;
6f97dba0
AL		 2478}
2479
2480static void udp_chr_update_read_handler(CharDriverState *chr)
2481{
2482 NetCharDriver *s = chr->opaque;
2483
26da70c7 2484 remove_fd_in_watch(chr);
9894dc0c
DB		 2485 if (s->ioc) {
2486 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2487 udp_chr_read_poll,
7ba9addc 2488 udp_chr_read, chr);
6f97dba0
AL		 2489 }
2490}
2491
819f56b7
AL		 2492static void udp_chr_close(CharDriverState *chr)
2493{
2494 NetCharDriver *s = chr->opaque;
26da70c7
AS		 2495
2496 remove_fd_in_watch(chr);
9894dc0c
DB		 2497 if (s->ioc) {
2498 object_unref(OBJECT(s->ioc));
819f56b7 2499 }
7267c094 2500 g_free(s);
a425d23f 2501 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
819f56b7
AL		 2502}
2503
9894dc0c
DB		 2504static CharDriverState *qemu_chr_open_udp(QIOChannelSocket *sioc,
2505 ChardevCommon *backend,
2506 Error **errp)
6f97dba0
AL		 2507{
2508 CharDriverState *chr = NULL;
2509 NetCharDriver *s = NULL;
6f97dba0 2510
d0d7708b
DB		 2511 chr = qemu_chr_alloc(backend, errp);
2512 if (!chr) {
2513 return NULL;
2514 }
2d528d45 2515 s = g_new0(NetCharDriver, 1);
6f97dba0 2516
9894dc0c 2517 s->ioc = QIO_CHANNEL(sioc);
6f97dba0
AL		 2518 s->bufcnt = 0;
2519 s->bufptr = 0;
2520 chr->opaque = s;
2521 chr->chr_write = udp_chr_write;
2522 chr->chr_update_read_handler = udp_chr_update_read_handler;
819f56b7 2523 chr->chr_close = udp_chr_close;
bd5c51ee
MR		 2524 /* be isn't opened until we get a connection */
2525 chr->explicit_be_open = true;
1f51470d 2526 return chr;
3ecc059d 2527}
6f97dba0 2528
6f97dba0
AL		 2529/***********************************************************/
2530/* TCP Net console */
2531
2532typedef struct {
a8fb5427
DB		 2533 QIOChannel *ioc; /* Client I/O channel */
2534 QIOChannelSocket *sioc; /* Client master channel */
9894dc0c 2535 QIOChannelSocket *listen_ioc;
7ba9addc 2536 guint listen_tag;
a8fb5427 2537 QCryptoTLSCreds *tls_creds;
6f97dba0
AL		 2538 int connected;
2539 int max_size;
2540 int do_telnetopt;
2541 int do_nodelay;
2542 int is_unix;
c76bf6bb 2543 int *read_msgfds;
9894dc0c 2544 size_t read_msgfds_num;
d39aac7a 2545 int *write_msgfds;
9894dc0c 2546 size_t write_msgfds_num;
cfb429cb
CM		 2547
2548 SocketAddress *addr;
2549 bool is_listen;
2550 bool is_telnet;
5dd1f02b
CM		 2551
2552 guint reconnect_timer;
2553 int64_t reconnect_time;
5008e5b7 2554 bool connect_err_reported;
6f97dba0
AL		 2555} TCPCharDriver;
2556
5dd1f02b
CM		 2557static gboolean socket_reconnect_timeout(gpointer opaque);
2558
2559static void qemu_chr_socket_restart_timer(CharDriverState *chr)
2560{
2561 TCPCharDriver *s = chr->opaque;
2562 assert(s->connected == 0);
2563 s->reconnect_timer = g_timeout_add_seconds(s->reconnect_time,
2564 socket_reconnect_timeout, chr);
2565}
2566
5008e5b7
CM		 2567static void check_report_connect_error(CharDriverState *chr,
2568 Error *err)
2569{
2570 TCPCharDriver *s = chr->opaque;
2571
2572 if (!s->connect_err_reported) {
2573 error_report("Unable to connect character device %s: %s",
2574 chr->label, error_get_pretty(err));
2575 s->connect_err_reported = true;
2576 }
2577 qemu_chr_socket_restart_timer(chr);
2578}
2579
9894dc0c
DB		 2580static gboolean tcp_chr_accept(QIOChannel *chan,
2581 GIOCondition cond,
2582 void *opaque);
d39aac7a 2583
9005b2a7 2584/* Called with chr_write_lock held. */
6f97dba0
AL		 2585static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2586{
2587 TCPCharDriver *s = chr->opaque;
2588 if (s->connected) {
9894dc0c
DB		 2589 int ret = io_channel_send_full(s->ioc, buf, len,
2590 s->write_msgfds,
2591 s->write_msgfds_num);
2592
2593 /* free the written msgfds, no matter what */
2594 if (s->write_msgfds_num) {
2595 g_free(s->write_msgfds);
2596 s->write_msgfds = 0;
2597 s->write_msgfds_num = 0;
d39aac7a 2598 }
9894dc0c
DB		 2599
2600 return ret;
455aa1e0 2601 } else {
6db0fdce 2602 /* XXX: indicate an error ? */
455aa1e0 2603 return len;
6f97dba0
AL		 2604 }
2605}
2606
2607static int tcp_chr_read_poll(void *opaque)
2608{
2609 CharDriverState *chr = opaque;
2610 TCPCharDriver *s = chr->opaque;
2611 if (!s->connected)
2612 return 0;
909cda12 2613 s->max_size = qemu_chr_be_can_write(chr);
6f97dba0
AL		 2614 return s->max_size;
2615}
2616
2617#define IAC 255
2618#define IAC_BREAK 243
2619static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2620 TCPCharDriver *s,
2621 uint8_t *buf, int *size)
2622{
2623 /* Handle any telnet client's basic IAC options to satisfy char by
2624 * char mode with no echo. All IAC options will be removed from
2625 * the buf and the do_telnetopt variable will be used to track the
2626 * state of the width of the IAC information.
2627 *
2628 * IAC commands come in sets of 3 bytes with the exception of the
2629 * "IAC BREAK" command and the double IAC.
2630 */
2631
2632 int i;
2633 int j = 0;
2634
2635 for (i = 0; i < *size; i++) {
2636 if (s->do_telnetopt > 1) {
2637 if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2638 /* Double IAC means send an IAC */
2639 if (j != i)
2640 buf[j] = buf[i];
2641 j++;
2642 s->do_telnetopt = 1;
2643 } else {
2644 if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2645 /* Handle IAC break commands by sending a serial break */
a425d23f 2646 qemu_chr_be_event(chr, CHR_EVENT_BREAK);
6f97dba0
AL		 2647 s->do_telnetopt++;
2648 }
2649 s->do_telnetopt++;
2650 }
2651 if (s->do_telnetopt >= 4) {
2652 s->do_telnetopt = 1;
2653 }
2654 } else {
2655 if ((unsigned char)buf[i] == IAC) {
2656 s->do_telnetopt = 2;
2657 } else {
2658 if (j != i)
2659 buf[j] = buf[i];
2660 j++;
2661 }
2662 }
2663 }
2664 *size = j;
2665}
2666
c76bf6bb 2667static int tcp_get_msgfds(CharDriverState *chr, int *fds, int num)
7d174059
MM		 2668{
2669 TCPCharDriver *s = chr->opaque;
c76bf6bb
NN		 2670 int to_copy = (s->read_msgfds_num < num) ? s->read_msgfds_num : num;
2671
c4095726
MT		 2672 assert(num <= TCP_MAX_FDS);
2673
c76bf6bb 2674 if (to_copy) {
d2fc39b4
SH		 2675 int i;
2676
c76bf6bb
NN		 2677 memcpy(fds, s->read_msgfds, to_copy * sizeof(int));
2678
d2fc39b4
SH		 2679 /* Close unused fds */
2680 for (i = to_copy; i < s->read_msgfds_num; i++) {
2681 close(s->read_msgfds[i]);
2682 }
2683
c76bf6bb
NN		 2684 g_free(s->read_msgfds);
2685 s->read_msgfds = 0;
2686 s->read_msgfds_num = 0;
2687 }
2688
2689 return to_copy;
7d174059
MM		 2690}
2691
d39aac7a
NN		 2692static int tcp_set_msgfds(CharDriverState *chr, int *fds, int num)
2693{
2694 TCPCharDriver *s = chr->opaque;
2695
9894dc0c
DB		 2696 if (!qio_channel_has_feature(s->ioc,
2697 QIO_CHANNEL_FEATURE_FD_PASS)) {
2698 return -1;
2699 }
d39aac7a 2700 /* clear old pending fd array */
ef1e1e07 2701 g_free(s->write_msgfds);
d39aac7a
NN		 2702
2703 if (num) {
2d528d45 2704 s->write_msgfds = g_new(int, num);
d39aac7a
NN		 2705 memcpy(s->write_msgfds, fds, num * sizeof(int));
2706 }
2707
2708 s->write_msgfds_num = num;
2709
2710 return 0;
2711}
2712
9894dc0c 2713static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
7d174059
MM		 2714{
2715 TCPCharDriver *s = chr->opaque;
9894dc0c
DB		 2716 struct iovec iov = { .iov_base = buf, .iov_len = len };
2717 int ret;
2718 size_t i;
2719 int *msgfds = NULL;
2720 size_t msgfds_num = 0;
2721
2722 if (qio_channel_has_feature(s->ioc, QIO_CHANNEL_FEATURE_FD_PASS)) {
2723 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2724 &msgfds, &msgfds_num,
2725 NULL);
2726 } else {
2727 ret = qio_channel_readv_full(s->ioc, &iov, 1,
2728 NULL, NULL,
2729 NULL);
2730 }
7d174059 2731
9894dc0c 2732 if (msgfds_num) {
c76bf6bb
NN		 2733 /* close and clean read_msgfds */
2734 for (i = 0; i < s->read_msgfds_num; i++) {
2735 close(s->read_msgfds[i]);
2736 }
9b938c72 2737
c76bf6bb
NN		 2738 if (s->read_msgfds_num) {
2739 g_free(s->read_msgfds);
2740 }
2741
9894dc0c
DB		 2742 s->read_msgfds = msgfds;
2743 s->read_msgfds_num = msgfds_num;
7d174059 2744 }
7d174059 2745
9894dc0c
DB		 2746 for (i = 0; i < s->read_msgfds_num; i++) {
2747 int fd = s->read_msgfds[i];
2748 if (fd < 0) {
2749 continue;
2750 }
9977c894 2751
9894dc0c
DB		 2752 /* O_NONBLOCK is preserved across SCM_RIGHTS so reset it */
2753 qemu_set_block(fd);
7d174059 2754
9894dc0c
DB		 2755#ifndef MSG_CMSG_CLOEXEC
2756 qemu_set_cloexec(fd);
06138651 2757#endif
06138651 2758 }
9977c894 2759
7d174059 2760 return ret;
9977c894 2761}
9977c894 2762
d3cc5bc4
AS		 2763static GSource *tcp_chr_add_watch(CharDriverState *chr, GIOCondition cond)
2764{
2765 TCPCharDriver *s = chr->opaque;
9894dc0c 2766 return qio_channel_create_watch(s->ioc, cond);
d3cc5bc4
AS		 2767}
2768
7b0bfdf5
NN		 2769static void tcp_chr_disconnect(CharDriverState *chr)
2770{
2771 TCPCharDriver *s = chr->opaque;
2772
2773 s->connected = 0;
9894dc0c
DB		 2774 if (s->listen_ioc) {
2775 s->listen_tag = qio_channel_add_watch(
2776 QIO_CHANNEL(s->listen_ioc), G_IO_IN, tcp_chr_accept, chr, NULL);
7b0bfdf5
NN		 2777 }
2778 remove_fd_in_watch(chr);
a8fb5427
DB		 2779 object_unref(OBJECT(s->sioc));
2780 s->sioc = NULL;
9894dc0c
DB		 2781 object_unref(OBJECT(s->ioc));
2782 s->ioc = NULL;
0ff0fad2
DB		 2783 g_free(chr->filename);
2784 chr->filename = SocketAddress_to_str("disconnected:", s->addr,
2785 s->is_listen, s->is_telnet);
7b0bfdf5 2786 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
5dd1f02b
CM		 2787 if (s->reconnect_time) {
2788 qemu_chr_socket_restart_timer(chr);
2789 }
7b0bfdf5
NN		 2790}
2791
9894dc0c 2792static gboolean tcp_chr_read(QIOChannel *chan, GIOCondition cond, void *opaque)
6f97dba0
AL		 2793{
2794 CharDriverState *chr = opaque;
2795 TCPCharDriver *s = chr->opaque;
9bd7854e 2796 uint8_t buf[READ_BUF_LEN];
6f97dba0
AL		 2797 int len, size;
2798
2ea5a7af 2799 if (!s->connected || s->max_size <= 0) {
cdbf6e16 2800 return TRUE;
2ea5a7af 2801 }
6f97dba0
AL		 2802 len = sizeof(buf);
2803 if (len > s->max_size)
2804 len = s->max_size;
9977c894 2805 size = tcp_chr_recv(chr, (void *)buf, len);
9894dc0c 2806 if (size == 0 || size == -1) {
6f97dba0 2807 /* connection closed */
7b0bfdf5 2808 tcp_chr_disconnect(chr);
6f97dba0
AL		 2809 } else if (size > 0) {
2810 if (s->do_telnetopt)
2811 tcp_chr_process_IAC_bytes(chr, s, buf, &size);
2812 if (size > 0)
fa5efccb 2813 qemu_chr_be_write(chr, buf, size);
6f97dba0 2814 }
2ea5a7af
AL		 2815
2816 return TRUE;
6f97dba0
AL		 2817}
2818
7b0bfdf5
NN		 2819static int tcp_chr_sync_read(CharDriverState *chr, const uint8_t *buf, int len)
2820{
2821 TCPCharDriver *s = chr->opaque;
2822 int size;
2823
2824 if (!s->connected) {
2825 return 0;
2826 }
2827
2828 size = tcp_chr_recv(chr, (void *) buf, len);
2829 if (size == 0) {
2830 /* connection closed */
2831 tcp_chr_disconnect(chr);
2832 }
2833
2834 return size;
2835}
2836
6f97dba0
AL		 2837static void tcp_chr_connect(void *opaque)
2838{
2839 CharDriverState *chr = opaque;
2840 TCPCharDriver *s = chr->opaque;
16cc4ffe 2841
0ff0fad2 2842 g_free(chr->filename);
a8fb5427
DB		 2843 chr->filename = sockaddr_to_str(
2844 &s->sioc->localAddr, s->sioc->localAddrLen,
2845 &s->sioc->remoteAddr, s->sioc->remoteAddrLen,
2846 s->is_listen, s->is_telnet);
6f97dba0
AL		 2847
2848 s->connected = 1;
9894dc0c
DB		 2849 if (s->ioc) {
2850 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2851 tcp_chr_read_poll,
7ba9addc 2852 tcp_chr_read, chr);
bbdd2ad0 2853 }
fee204fd 2854 qemu_chr_be_generic_open(chr);
6f97dba0
AL		 2855}
2856
ac1b84dd
GH		 2857static void tcp_chr_update_read_handler(CharDriverState *chr)
2858{
2859 TCPCharDriver *s = chr->opaque;
2860
1e94f23d
DB		 2861 if (!s->connected) {
2862 return;
2863 }
2864
ac1b84dd 2865 remove_fd_in_watch(chr);
9894dc0c
DB		 2866 if (s->ioc) {
2867 chr->fd_in_tag = io_add_watch_poll(s->ioc,
2868 tcp_chr_read_poll,
ac1b84dd
GH		 2869 tcp_chr_read, chr);
2870 }
2871}
2872
f2001a7e
DB		 2873typedef struct {
2874 CharDriverState *chr;
2875 char buf[12];
2876 size_t buflen;
2877} TCPCharDriverTelnetInit;
2878
2879static gboolean tcp_chr_telnet_init_io(QIOChannel *ioc,
2880 GIOCondition cond G_GNUC_UNUSED,
2881 gpointer user_data)
6f97dba0 2882{
f2001a7e
DB		 2883 TCPCharDriverTelnetInit *init = user_data;
2884 ssize_t ret;
2885
2886 ret = qio_channel_write(ioc, init->buf, init->buflen, NULL);
2887 if (ret < 0) {
2888 if (ret == QIO_CHANNEL_ERR_BLOCK) {
2889 ret = 0;
2890 } else {
2891 tcp_chr_disconnect(init->chr);
2892 return FALSE;
2893 }
2894 }
2895 init->buflen -= ret;
2896
2897 if (init->buflen == 0) {
2898 tcp_chr_connect(init->chr);
2899 return FALSE;
2900 }
2901
2902 memmove(init->buf, init->buf + ret, init->buflen);
2903
2904 return TRUE;
2905}
2906
2907static void tcp_chr_telnet_init(CharDriverState *chr)
2908{
2909 TCPCharDriver *s = chr->opaque;
2910 TCPCharDriverTelnetInit *init =
2911 g_new0(TCPCharDriverTelnetInit, 1);
2912 size_t n = 0;
2913
2914 init->chr = chr;
2915 init->buflen = 12;
2916
2917#define IACSET(x, a, b, c) \
2918 do { \
2919 x[n++] = a; \
2920 x[n++] = b; \
2921 x[n++] = c; \
2922 } while (0)
2923
2924 /* Prep the telnet negotion to put telnet in binary,
2925 * no echo, single char mode */
2926 IACSET(init->buf, 0xff, 0xfb, 0x01); /* IAC WILL ECHO */
2927 IACSET(init->buf, 0xff, 0xfb, 0x03); /* IAC WILL Suppress go ahead */
2928 IACSET(init->buf, 0xff, 0xfb, 0x00); /* IAC WILL Binary */
2929 IACSET(init->buf, 0xff, 0xfd, 0x00); /* IAC DO Binary */
2930
2931#undef IACSET
2932
2933 qio_channel_add_watch(
2934 s->ioc, G_IO_OUT,
2935 tcp_chr_telnet_init_io,
2936 init, NULL);
6f97dba0
AL		 2937}
2938
a8fb5427
DB		 2939
2940static void tcp_chr_tls_handshake(Object *source,
2941 Error *err,
2942 gpointer user_data)
2943{
2944 CharDriverState *chr = user_data;
2945 TCPCharDriver *s = chr->opaque;
2946
2947 if (err) {
2948 tcp_chr_disconnect(chr);
2949 } else {
2950 if (s->do_telnetopt) {
2951 tcp_chr_telnet_init(chr);
2952 } else {
2953 tcp_chr_connect(chr);
2954 }
2955 }
2956}
2957
2958
2959static void tcp_chr_tls_init(CharDriverState *chr)
2960{
2961 TCPCharDriver *s = chr->opaque;
2962 QIOChannelTLS *tioc;
2963 Error *err = NULL;
2964
2965 if (s->is_listen) {
2966 tioc = qio_channel_tls_new_server(
2967 s->ioc, s->tls_creds,
2968 NULL, /* XXX Use an ACL */
2969 &err);
2970 } else {
2971 tioc = qio_channel_tls_new_client(
2972 s->ioc, s->tls_creds,
2973 s->addr->u.inet->host,
2974 &err);
2975 }
2976 if (tioc == NULL) {
2977 error_free(err);
2978 tcp_chr_disconnect(chr);
2979 }
2980 object_unref(OBJECT(s->ioc));
2981 s->ioc = QIO_CHANNEL(tioc);
2982
2983 qio_channel_tls_handshake(tioc,
2984 tcp_chr_tls_handshake,
2985 chr,
2986 NULL);
2987}
2988
2989
9894dc0c 2990static int tcp_chr_new_client(CharDriverState *chr, QIOChannelSocket *sioc)
13661089
DB		 2991{
2992 TCPCharDriver *s = chr->opaque;
9894dc0c 2993 if (s->ioc != NULL) {
13661089 2994 return -1;
9894dc0c 2995 }
13661089 2996
9894dc0c
DB		 2997 s->ioc = QIO_CHANNEL(sioc);
2998 object_ref(OBJECT(sioc));
a8fb5427
DB		 2999 s->sioc = sioc;
3000 object_ref(OBJECT(sioc));
9894dc0c
DB		 3001
3002 if (s->do_nodelay) {
3003 qio_channel_set_delay(s->ioc, false);
3004 }
910b6368
PB		 3005 if (s->listen_tag) {
3006 g_source_remove(s->listen_tag);
3007 s->listen_tag = 0;
3008 }
f2001a7e 3009
a8fb5427
DB		 3010 if (s->tls_creds) {
3011 tcp_chr_tls_init(chr);
f2001a7e 3012 } else {
a8fb5427
DB		 3013 if (s->do_telnetopt) {
3014 tcp_chr_telnet_init(chr);
3015 } else {
3016 tcp_chr_connect(chr);
3017 }
f2001a7e 3018 }
13661089
DB		 3019
3020 return 0;
3021}
3022
9894dc0c
DB		 3023
3024static int tcp_chr_add_client(CharDriverState *chr, int fd)
3025{
3026 int ret;
3027 QIOChannelSocket *sioc;
3028
3029 sioc = qio_channel_socket_new_fd(fd, NULL);
3030 if (!sioc) {
3031 return -1;
3032 }
3033 qio_channel_set_blocking(QIO_CHANNEL(sioc), false, NULL);
3034 ret = tcp_chr_new_client(chr, sioc);
3035 object_unref(OBJECT(sioc));
3036 return ret;
3037}
3038
3039static gboolean tcp_chr_accept(QIOChannel *channel,
3040 GIOCondition cond,
3041 void *opaque)
6f97dba0
AL		 3042{
3043 CharDriverState *chr = opaque;
9894dc0c 3044 QIOChannelSocket *sioc;
6f97dba0 3045
9894dc0c
DB		 3046 sioc = qio_channel_socket_accept(QIO_CHANNEL_SOCKET(channel),
3047 NULL);
3048 if (!sioc) {
3049 return TRUE;
6f97dba0 3050 }
9894dc0c 3051
9894dc0c
DB		 3052 tcp_chr_new_client(chr, sioc);
3053
3054 object_unref(OBJECT(sioc));
2ea5a7af
AL		 3055
3056 return TRUE;
6f97dba0
AL		 3057}
3058
3059static void tcp_chr_close(CharDriverState *chr)
3060{
3061 TCPCharDriver *s = chr->opaque;
c76bf6bb 3062 int i;
cfb429cb 3063
5dd1f02b
CM		 3064 if (s->reconnect_timer) {
3065 g_source_remove(s->reconnect_timer);
3066 s->reconnect_timer = 0;
3067 }
cfb429cb 3068 qapi_free_SocketAddress(s->addr);
9894dc0c
DB		 3069 remove_fd_in_watch(chr);
3070 if (s->ioc) {
3071 object_unref(OBJECT(s->ioc));
819f56b7 3072 }
9894dc0c
DB		 3073 if (s->listen_tag) {
3074 g_source_remove(s->listen_tag);
3075 s->listen_tag = 0;
3076 }
3077 if (s->listen_ioc) {
3078 object_unref(OBJECT(s->listen_ioc));
819f56b7 3079 }
c76bf6bb
NN		 3080 if (s->read_msgfds_num) {
3081 for (i = 0; i < s->read_msgfds_num; i++) {
3082 close(s->read_msgfds[i]);
3083 }
3084 g_free(s->read_msgfds);
3085 }
a8fb5427
DB		 3086 if (s->tls_creds) {
3087 object_unref(OBJECT(s->tls_creds));
3088 }
d39aac7a
NN		 3089 if (s->write_msgfds_num) {
3090 g_free(s->write_msgfds);
3091 }
7267c094 3092 g_free(s);
a425d23f 3093 qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
6f97dba0
AL		 3094}
3095
9894dc0c
DB		 3096static void qemu_chr_finish_socket_connection(CharDriverState *chr,
3097 QIOChannelSocket *sioc)
6f97dba0 3098{
43ded1a0 3099 TCPCharDriver *s = chr->opaque;
f6bd5d6e 3100
cfb429cb 3101 if (s->is_listen) {
9894dc0c
DB		 3102 s->listen_ioc = sioc;
3103 s->listen_tag = qio_channel_add_watch(
3104 QIO_CHANNEL(s->listen_ioc), G_IO_IN, tcp_chr_accept, chr, NULL);
f6bd5d6e 3105 } else {
9894dc0c
DB		 3106 tcp_chr_new_client(chr, sioc);
3107 object_unref(OBJECT(sioc));
f6bd5d6e 3108 }
43ded1a0
CM		 3109}
3110
9894dc0c 3111static void qemu_chr_socket_connected(Object *src, Error *err, void *opaque)
5dd1f02b 3112{
9894dc0c 3113 QIOChannelSocket *sioc = QIO_CHANNEL_SOCKET(src);
5dd1f02b 3114 CharDriverState *chr = opaque;
5008e5b7 3115 TCPCharDriver *s = chr->opaque;
5dd1f02b 3116
9894dc0c 3117 if (err) {
5008e5b7 3118 check_report_connect_error(chr, err);
9894dc0c 3119 object_unref(src);
5dd1f02b
CM		 3120 return;
3121 }
3122
5008e5b7 3123 s->connect_err_reported = false;
9894dc0c 3124 qemu_chr_finish_socket_connection(chr, sioc);
5dd1f02b
CM		 3125}
3126
cfb429cb 3127static bool qemu_chr_open_socket_fd(CharDriverState *chr, Error **errp)
43ded1a0 3128{
cfb429cb 3129 TCPCharDriver *s = chr->opaque;
9894dc0c 3130 QIOChannelSocket *sioc = qio_channel_socket_new();
43ded1a0 3131
cfb429cb 3132 if (s->is_listen) {
9894dc0c
DB		 3133 if (qio_channel_socket_listen_sync(sioc, s->addr, errp) < 0) {
3134 goto fail;
3135 }
3136 qemu_chr_finish_socket_connection(chr, sioc);
5dd1f02b 3137 } else if (s->reconnect_time) {
9894dc0c
DB		 3138 qio_channel_socket_connect_async(sioc, s->addr,
3139 qemu_chr_socket_connected,
3140 chr, NULL);
5dd1f02b 3141 } else {
9894dc0c
DB		 3142 if (qio_channel_socket_connect_sync(sioc, s->addr, errp) < 0) {
3143 goto fail;
3144 }
3145 qemu_chr_finish_socket_connection(chr, sioc);
43ded1a0
CM		 3146 }
3147
16cc4ffe 3148 return true;
9894dc0c
DB		 3149
3150 fail:
3151 object_unref(OBJECT(sioc));
3152 return false;
f6bd5d6e
GH		 3153}
3154
51767e7c 3155/*********************************************************/
3949e594 3156/* Ring buffer chardev */
51767e7c
LL		 3157
3158typedef struct {
3159 size_t size;
3160 size_t prod;
3161 size_t cons;
3162 uint8_t *cbuf;
3949e594 3163} RingBufCharDriver;
51767e7c 3164
3949e594 3165static size_t ringbuf_count(const CharDriverState *chr)
51767e7c 3166{
3949e594 3167 const RingBufCharDriver *d = chr->opaque;
51767e7c 3168
5c230105 3169 return d->prod - d->cons;
51767e7c
LL		 3170}
3171
9005b2a7 3172/* Called with chr_write_lock held. */
3949e594 3173static int ringbuf_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
51767e7c 3174{
3949e594 3175 RingBufCharDriver *d = chr->opaque;
51767e7c
LL		 3176 int i;
3177
3178 if (!buf || (len < 0)) {
3179 return -1;
3180 }
3181
3182 for (i = 0; i < len; i++ ) {
5c230105
MA		 3183 d->cbuf[d->prod++ & (d->size - 1)] = buf[i];
3184 if (d->prod - d->cons > d->size) {
51767e7c
LL		 3185 d->cons = d->prod - d->size;
3186 }
3187 }
3188
3189 return 0;
3190}
3191
3949e594 3192static int ringbuf_chr_read(CharDriverState *chr, uint8_t *buf, int len)
51767e7c 3193{
3949e594 3194 RingBufCharDriver *d = chr->opaque;
51767e7c
LL		 3195 int i;
3196
9005b2a7 3197 qemu_mutex_lock(&chr->chr_write_lock);
5c230105
MA		 3198 for (i = 0; i < len && d->cons != d->prod; i++) {
3199 buf[i] = d->cbuf[d->cons++ & (d->size - 1)];
51767e7c 3200 }
9005b2a7 3201 qemu_mutex_unlock(&chr->chr_write_lock);
51767e7c
LL		 3202
3203 return i;
3204}
3205
3949e594 3206static void ringbuf_chr_close(struct CharDriverState *chr)
51767e7c 3207{
3949e594 3208 RingBufCharDriver *d = chr->opaque;
51767e7c
LL		 3209
3210 g_free(d->cbuf);
3211 g_free(d);
3212 chr->opaque = NULL;
3213}
3214
479f09a1
PB		 3215static CharDriverState *qemu_chr_open_ringbuf(const char *id,
3216 ChardevBackend *backend,
3217 ChardevReturn *ret,
4f57378f 3218 Error **errp)
51767e7c 3219{
130257dc 3220 ChardevRingbuf *opts = backend->u.ringbuf;
d0d7708b 3221 ChardevCommon *common = qapi_ChardevRingbuf_base(backend->u.ringbuf);
51767e7c 3222 CharDriverState *chr;
3949e594 3223 RingBufCharDriver *d;
51767e7c 3224
d0d7708b
DB		 3225 chr = qemu_chr_alloc(common, errp);
3226 if (!chr) {
3227 return NULL;
3228 }
51767e7c
LL		 3229 d = g_malloc(sizeof(*d));
3230
1da48c65 3231 d->size = opts->has_size ? opts->size : 65536;
51767e7c
LL		 3232
3233 /* The size must be power of 2 */
3234 if (d->size & (d->size - 1)) {
4f57378f 3235 error_setg(errp, "size of ringbuf chardev must be power of two");
51767e7c
LL		 3236 goto fail;
3237 }
3238
3239 d->prod = 0;
3240 d->cons = 0;
3241 d->cbuf = g_malloc0(d->size);
3242
3243 chr->opaque = d;
3949e594
MA		 3244 chr->chr_write = ringbuf_chr_write;
3245 chr->chr_close = ringbuf_chr_close;
51767e7c
LL		 3246
3247 return chr;
3248
3249fail:
3250 g_free(d);
d0d7708b 3251 qemu_chr_free_common(chr);
51767e7c
LL		 3252 return NULL;
3253}
3254
8e597779 3255bool chr_is_ringbuf(const CharDriverState *chr)
1f590cf9 3256{
3949e594 3257 return chr->chr_write == ringbuf_chr_write;
1f590cf9
LL		 3258}
3259
3949e594 3260void qmp_ringbuf_write(const char *device, const char *data,
82e59a67 3261 bool has_format, enum DataFormat format,
1f590cf9
LL		 3262 Error **errp)
3263{
3264 CharDriverState *chr;
c4f331b6 3265 const uint8_t *write_data;
1f590cf9 3266 int ret;
3d1bba20 3267 gsize write_count;
1f590cf9
LL		 3268
3269 chr = qemu_chr_find(device);
3270 if (!chr) {
1a69278e 3271 error_setg(errp, "Device '%s' not found", device);
1f590cf9
LL		 3272 return;
3273 }
3274
3949e594
MA		 3275 if (!chr_is_ringbuf(chr)) {
3276 error_setg(errp,"%s is not a ringbuf device", device);
1f590cf9
LL		 3277 return;
3278 }
3279
1f590cf9 3280 if (has_format && (format == DATA_FORMAT_BASE64)) {
e9cf2fe0
DB		 3281 write_data = qbase64_decode(data, -1,
3282 &write_count,
3283 errp);
3284 if (!write_data) {
3285 return;
3286 }
1f590cf9
LL		 3287 } else {
3288 write_data = (uint8_t *)data;
82e59a67 3289 write_count = strlen(data);
1f590cf9
LL		 3290 }
3291
3949e594 3292 ret = ringbuf_chr_write(chr, write_data, write_count);
1f590cf9 3293
13289fb5
MA		 3294 if (write_data != (uint8_t *)data) {
3295 g_free((void *)write_data);
3296 }
3297
1f590cf9
LL		 3298 if (ret < 0) {
3299 error_setg(errp, "Failed to write to device %s", device);
3300 return;
3301 }
3302}
3303
3949e594 3304char *qmp_ringbuf_read(const char *device, int64_t size,
3ab651fc
MA		 3305 bool has_format, enum DataFormat format,
3306 Error **errp)
49b6d722
LL		 3307{
3308 CharDriverState *chr;
c4f331b6 3309 uint8_t *read_data;
49b6d722 3310 size_t count;
3ab651fc 3311 char *data;
49b6d722
LL		 3312
3313 chr = qemu_chr_find(device);
3314 if (!chr) {
1a69278e 3315 error_setg(errp, "Device '%s' not found", device);
49b6d722
LL		 3316 return NULL;
3317 }
3318
3949e594
MA		 3319 if (!chr_is_ringbuf(chr)) {
3320 error_setg(errp,"%s is not a ringbuf device", device);
49b6d722
LL		 3321 return NULL;
3322 }
3323
3324 if (size <= 0) {
3325 error_setg(errp, "size must be greater than zero");
3326 return NULL;
3327 }
3328
3949e594 3329 count = ringbuf_count(chr);
49b6d722 3330 size = size > count ? count : size;
44f3bcd2 3331 read_data = g_malloc(size + 1);
49b6d722 3332
3949e594 3333 ringbuf_chr_read(chr, read_data, size);
49b6d722
LL		 3334
3335 if (has_format && (format == DATA_FORMAT_BASE64)) {
3ab651fc 3336 data = g_base64_encode(read_data, size);
13289fb5 3337 g_free(read_data);
49b6d722 3338 } else {
3949e594
MA		 3339 /*
3340 * FIXME should read only complete, valid UTF-8 characters up
3341 * to @size bytes. Invalid sequences should be replaced by a
3342 * suitable replacement character. Except when (and only
3343 * when) ring buffer lost characters since last read, initial
3344 * continuation characters should be dropped.
3345 */
44f3bcd2 3346 read_data[size] = 0;
3ab651fc 3347 data = (char *)read_data;
49b6d722
LL		 3348 }
3349
3ab651fc 3350 return data;
49b6d722
LL		 3351}
3352
33521634 3353QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
191bc01b 3354{
6ea314d9 3355 char host[65], port[33], width[8], height[8];
aeb2c47a 3356 int pos;
7d31544f 3357 const char *p;
191bc01b 3358 QemuOpts *opts;
8be7e7e4 3359 Error *local_err = NULL;
191bc01b 3360
8be7e7e4 3361 opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
84d18f06 3362 if (local_err) {
33394884 3363 error_report_err(local_err);
191bc01b 3364 return NULL;
8be7e7e4 3365 }
191bc01b 3366
7591c5c1
GH		 3367 if (strstart(filename, "mon:", &p)) {
3368 filename = p;
f43e47db 3369 qemu_opt_set(opts, "mux", "on", &error_abort);
02c4bdf1
PB		 3370 if (strcmp(filename, "stdio") == 0) {
3371 /* Monitor is muxed to stdio: do not exit on Ctrl+C by default
3372 * but pass it to the guest. Handle this only for compat syntax,
3373 * for -chardev syntax we have special option for this.
3374 * This is what -nographic did, redirecting+muxing serial+monitor
3375 * to stdio causing Ctrl+C to be passed to guest. */
f43e47db 3376 qemu_opt_set(opts, "signal", "off", &error_abort);
02c4bdf1 3377 }
7591c5c1
GH		 3378 }
3379
f0457e8d
GH		 3380 if (strcmp(filename, "null") == 0 ||
3381 strcmp(filename, "pty") == 0 ||
3382 strcmp(filename, "msmouse") == 0 ||
dc1c21e6 3383 strcmp(filename, "braille") == 0 ||
5692399f 3384 strcmp(filename, "testdev") == 0 ||
f0457e8d 3385 strcmp(filename, "stdio") == 0) {
f43e47db 3386 qemu_opt_set(opts, "backend", filename, &error_abort);
191bc01b
GH		 3387 return opts;
3388 }
6ea314d9 3389 if (strstart(filename, "vc", &p)) {
f43e47db 3390 qemu_opt_set(opts, "backend", "vc", &error_abort);
6ea314d9 3391 if (*p == ':') {
49aa4058 3392 if (sscanf(p+1, "%7[0-9]x%7[0-9]", width, height) == 2) {
6ea314d9 3393 /* pixels */
f43e47db
MA		 3394 qemu_opt_set(opts, "width", width, &error_abort);
3395 qemu_opt_set(opts, "height", height, &error_abort);
49aa4058 3396 } else if (sscanf(p+1, "%7[0-9]Cx%7[0-9]C", width, height) == 2) {
6ea314d9 3397 /* chars */
f43e47db
MA		 3398 qemu_opt_set(opts, "cols", width, &error_abort);
3399 qemu_opt_set(opts, "rows", height, &error_abort);
6ea314d9
GH		 3400 } else {
3401 goto fail;
3402 }
3403 }
3404 return opts;
3405 }
d6c983cd 3406 if (strcmp(filename, "con:") == 0) {
f43e47db 3407 qemu_opt_set(opts, "backend", "console", &error_abort);
d6c983cd
GH		 3408 return opts;
3409 }
48b76496 3410 if (strstart(filename, "COM", NULL)) {
f43e47db
MA		 3411 qemu_opt_set(opts, "backend", "serial", &error_abort);
3412 qemu_opt_set(opts, "path", filename, &error_abort);
48b76496
GH		 3413 return opts;
3414 }
7d31544f 3415 if (strstart(filename, "file:", &p)) {
f43e47db
MA		 3416 qemu_opt_set(opts, "backend", "file", &error_abort);
3417 qemu_opt_set(opts, "path", p, &error_abort);
7d31544f
GH		 3418 return opts;
3419 }
3420 if (strstart(filename, "pipe:", &p)) {
f43e47db
MA		 3421 qemu_opt_set(opts, "backend", "pipe", &error_abort);
3422 qemu_opt_set(opts, "path", p, &error_abort);
7d31544f
GH		 3423 return opts;
3424 }
aeb2c47a
GH		 3425 if (strstart(filename, "tcp:", &p) ||
3426 strstart(filename, "telnet:", &p)) {
3427 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3428 host[0] = 0;
3429 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
3430 goto fail;
3431 }
f43e47db
MA		 3432 qemu_opt_set(opts, "backend", "socket", &error_abort);
3433 qemu_opt_set(opts, "host", host, &error_abort);
3434 qemu_opt_set(opts, "port", port, &error_abort);
aeb2c47a 3435 if (p[pos] == ',') {
dc523cd3
MA		 3436 qemu_opts_do_parse(opts, p+pos+1, NULL, &local_err);
3437 if (local_err) {
3438 error_report_err(local_err);
aeb2c47a 3439 goto fail;
dc523cd3 3440 }
aeb2c47a
GH		 3441 }
3442 if (strstart(filename, "telnet:", &p))
f43e47db 3443 qemu_opt_set(opts, "telnet", "on", &error_abort);
aeb2c47a
GH		 3444 return opts;
3445 }
7e1b35b4 3446 if (strstart(filename, "udp:", &p)) {
f43e47db 3447 qemu_opt_set(opts, "backend", "udp", &error_abort);
7e1b35b4
GH		 3448 if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
3449 host[0] = 0;
39324ca4 3450 if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
7e1b35b4
GH		 3451 goto fail;
3452 }
3453 }
f43e47db
MA		 3454 qemu_opt_set(opts, "host", host, &error_abort);
3455 qemu_opt_set(opts, "port", port, &error_abort);
7e1b35b4
GH		 3456 if (p[pos] == '@') {
3457 p += pos + 1;
3458 if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
3459 host[0] = 0;
3460 if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
7e1b35b4
GH		 3461 goto fail;
3462 }
3463 }
f43e47db
MA		 3464 qemu_opt_set(opts, "localaddr", host, &error_abort);
3465 qemu_opt_set(opts, "localport", port, &error_abort);
7e1b35b4
GH		 3466 }
3467 return opts;
3468 }
aeb2c47a 3469 if (strstart(filename, "unix:", &p)) {
f43e47db 3470 qemu_opt_set(opts, "backend", "socket", &error_abort);
dc523cd3
MA		 3471 qemu_opts_do_parse(opts, p, "path", &local_err);
3472 if (local_err) {
3473 error_report_err(local_err);
aeb2c47a 3474 goto fail;
dc523cd3 3475 }
aeb2c47a
GH		 3476 return opts;
3477 }
48b76496
GH		 3478 if (strstart(filename, "/dev/parport", NULL) ||
3479 strstart(filename, "/dev/ppi", NULL)) {
f43e47db
MA		 3480 qemu_opt_set(opts, "backend", "parport", &error_abort);
3481 qemu_opt_set(opts, "path", filename, &error_abort);
48b76496
GH		 3482 return opts;
3483 }
3484 if (strstart(filename, "/dev/", NULL)) {
f43e47db
MA		 3485 qemu_opt_set(opts, "backend", "tty", &error_abort);
3486 qemu_opt_set(opts, "path", filename, &error_abort);
48b76496
GH		 3487 return opts;
3488 }
191bc01b 3489
aeb2c47a 3490fail:
191bc01b
GH		 3491 qemu_opts_del(opts);
3492 return NULL;
3493}
3494
d0d7708b
DB		 3495static void qemu_chr_parse_common(QemuOpts *opts, ChardevCommon *backend)
3496{
3497 const char *logfile = qemu_opt_get(opts, "logfile");
3498
3499 backend->has_logfile = logfile != NULL;
3500 backend->logfile = logfile ? g_strdup(logfile) : NULL;
3501
3502 backend->has_logappend = true;
3503 backend->logappend = qemu_opt_get_bool(opts, "logappend", false);
3504}
3505
3506
846e2e49
GH		 3507static void qemu_chr_parse_file_out(QemuOpts *opts, ChardevBackend *backend,
3508 Error **errp)
3509{
3510 const char *path = qemu_opt_get(opts, "path");
3511
3512 if (path == NULL) {
3513 error_setg(errp, "chardev: file: no filename given");
3514 return;
3515 }
130257dc 3516 backend->u.file = g_new0(ChardevFile, 1);
d0d7708b 3517 qemu_chr_parse_common(opts, qapi_ChardevFile_base(backend->u.file));
130257dc 3518 backend->u.file->out = g_strdup(path);
31e38a22
OK		 3519
3520 backend->u.file->has_append = true;
3521 backend->u.file->append = qemu_opt_get_bool(opts, "append", false);
846e2e49
GH		 3522}
3523
7c358031
GH		 3524static void qemu_chr_parse_stdio(QemuOpts *opts, ChardevBackend *backend,
3525 Error **errp)
3526{
130257dc 3527 backend->u.stdio = g_new0(ChardevStdio, 1);
d0d7708b 3528 qemu_chr_parse_common(opts, qapi_ChardevStdio_base(backend->u.stdio));
130257dc
EB		 3529 backend->u.stdio->has_signal = true;
3530 backend->u.stdio->signal = qemu_opt_get_bool(opts, "signal", true);
7c358031
GH		 3531}
3532
6511d396 3533#ifdef HAVE_CHARDEV_SERIAL
0f1cb51d
GH		 3534static void qemu_chr_parse_serial(QemuOpts *opts, ChardevBackend *backend,
3535 Error **errp)
3536{
3537 const char *device = qemu_opt_get(opts, "path");
3538
3539 if (device == NULL) {
3540 error_setg(errp, "chardev: serial/tty: no device path given");
3541 return;
3542 }
130257dc 3543 backend->u.serial = g_new0(ChardevHostdev, 1);
d0d7708b 3544 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(backend->u.serial));
130257dc 3545 backend->u.serial->device = g_strdup(device);
0f1cb51d 3546}
6511d396 3547#endif
0f1cb51d 3548
38bfb1a6 3549#ifdef HAVE_CHARDEV_PARPORT
dc375097
GH		 3550static void qemu_chr_parse_parallel(QemuOpts *opts, ChardevBackend *backend,
3551 Error **errp)
3552{
3553 const char *device = qemu_opt_get(opts, "path");
3554
3555 if (device == NULL) {
3556 error_setg(errp, "chardev: parallel: no device path given");
3557 return;
3558 }
130257dc 3559 backend->u.parallel = g_new0(ChardevHostdev, 1);
d0d7708b 3560 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(backend->u.parallel));
130257dc 3561 backend->u.parallel->device = g_strdup(device);
dc375097 3562}
38bfb1a6 3563#endif
dc375097 3564
548cbb36
GH		 3565static void qemu_chr_parse_pipe(QemuOpts *opts, ChardevBackend *backend,
3566 Error **errp)
3567{
3568 const char *device = qemu_opt_get(opts, "path");
3569
3570 if (device == NULL) {
3571 error_setg(errp, "chardev: pipe: no device path given");
3572 return;
3573 }
130257dc 3574 backend->u.pipe = g_new0(ChardevHostdev, 1);
d0d7708b 3575 qemu_chr_parse_common(opts, qapi_ChardevHostdev_base(backend->u.pipe));
130257dc 3576 backend->u.pipe->device = g_strdup(device);
548cbb36
GH		 3577}
3578
4f57378f
MA		 3579static void qemu_chr_parse_ringbuf(QemuOpts *opts, ChardevBackend *backend,
3580 Error **errp)
1da48c65
GH		 3581{
3582 int val;
3583
130257dc 3584 backend->u.ringbuf = g_new0(ChardevRingbuf, 1);
d0d7708b 3585 qemu_chr_parse_common(opts, qapi_ChardevRingbuf_base(backend->u.ringbuf));
1da48c65 3586
0f953051 3587 val = qemu_opt_get_size(opts, "size", 0);
1da48c65 3588 if (val != 0) {
130257dc
EB		 3589 backend->u.ringbuf->has_size = true;
3590 backend->u.ringbuf->size = val;
1da48c65
GH		 3591 }
3592}
3593
bb6fb7c0
GH		 3594static void qemu_chr_parse_mux(QemuOpts *opts, ChardevBackend *backend,
3595 Error **errp)
3596{
3597 const char *chardev = qemu_opt_get(opts, "chardev");
3598
3599 if (chardev == NULL) {
3600 error_setg(errp, "chardev: mux: no chardev given");
3601 return;
3602 }
130257dc 3603 backend->u.mux = g_new0(ChardevMux, 1);
d0d7708b 3604 qemu_chr_parse_common(opts, qapi_ChardevMux_base(backend->u.mux));
130257dc 3605 backend->u.mux->chardev = g_strdup(chardev);
bb6fb7c0
GH		 3606}
3607
dafd325d
PM		 3608static void qemu_chr_parse_socket(QemuOpts *opts, ChardevBackend *backend,
3609 Error **errp)
3610{
3611 bool is_listen = qemu_opt_get_bool(opts, "server", false);
3612 bool is_waitconnect = is_listen && qemu_opt_get_bool(opts, "wait", true);
3613 bool is_telnet = qemu_opt_get_bool(opts, "telnet", false);
3614 bool do_nodelay = !qemu_opt_get_bool(opts, "delay", true);
5dd1f02b 3615 int64_t reconnect = qemu_opt_get_number(opts, "reconnect", 0);
dafd325d
PM		 3616 const char *path = qemu_opt_get(opts, "path");
3617 const char *host = qemu_opt_get(opts, "host");
3618 const char *port = qemu_opt_get(opts, "port");
a8fb5427 3619 const char *tls_creds = qemu_opt_get(opts, "tls-creds");
dafd325d
PM		 3620 SocketAddress *addr;
3621
3622 if (!path) {
3623 if (!host) {
3624 error_setg(errp, "chardev: socket: no host given");
3625 return;
3626 }
3627 if (!port) {
3628 error_setg(errp, "chardev: socket: no port given");
3629 return;
3630 }
a8fb5427
DB		 3631 } else {
3632 if (tls_creds) {
3633 error_setg(errp, "TLS can only be used over TCP socket");
3634 return;
3635 }
dafd325d
PM		 3636 }
3637
130257dc 3638 backend->u.socket = g_new0(ChardevSocket, 1);
d0d7708b 3639 qemu_chr_parse_common(opts, qapi_ChardevSocket_base(backend->u.socket));
dafd325d 3640
130257dc
EB		 3641 backend->u.socket->has_nodelay = true;
3642 backend->u.socket->nodelay = do_nodelay;
3643 backend->u.socket->has_server = true;
3644 backend->u.socket->server = is_listen;
3645 backend->u.socket->has_telnet = true;
3646 backend->u.socket->telnet = is_telnet;
3647 backend->u.socket->has_wait = true;
3648 backend->u.socket->wait = is_waitconnect;
3649 backend->u.socket->has_reconnect = true;
3650 backend->u.socket->reconnect = reconnect;
a8fb5427 3651 backend->u.socket->tls_creds = g_strdup(tls_creds);
dafd325d
PM		 3652
3653 addr = g_new0(SocketAddress, 1);
3654 if (path) {
130257dc
EB		 3655 addr->type = SOCKET_ADDRESS_KIND_UNIX;
3656 addr->u.q_unix = g_new0(UnixSocketAddress, 1);
3657 addr->u.q_unix->path = g_strdup(path);
dafd325d 3658 } else {
130257dc
EB		 3659 addr->type = SOCKET_ADDRESS_KIND_INET;
3660 addr->u.inet = g_new0(InetSocketAddress, 1);
3661 addr->u.inet->host = g_strdup(host);
3662 addr->u.inet->port = g_strdup(port);
3663 addr->u.inet->has_to = qemu_opt_get(opts, "to");
3664 addr->u.inet->to = qemu_opt_get_number(opts, "to", 0);
3665 addr->u.inet->has_ipv4 = qemu_opt_get(opts, "ipv4");
3666 addr->u.inet->ipv4 = qemu_opt_get_bool(opts, "ipv4", 0);
3667 addr->u.inet->has_ipv6 = qemu_opt_get(opts, "ipv6");
3668 addr->u.inet->ipv6 = qemu_opt_get_bool(opts, "ipv6", 0);
dafd325d 3669 }
130257dc 3670 backend->u.socket->addr = addr;
dafd325d
PM		 3671}
3672
90a14bfe
PM		 3673static void qemu_chr_parse_udp(QemuOpts *opts, ChardevBackend *backend,
3674 Error **errp)
3675{
3676 const char *host = qemu_opt_get(opts, "host");
3677 const char *port = qemu_opt_get(opts, "port");
3678 const char *localaddr = qemu_opt_get(opts, "localaddr");
3679 const char *localport = qemu_opt_get(opts, "localport");
3680 bool has_local = false;
3681 SocketAddress *addr;
3682
3683 if (host == NULL || strlen(host) == 0) {
3684 host = "localhost";
3685 }
3686 if (port == NULL || strlen(port) == 0) {
3687 error_setg(errp, "chardev: udp: remote port not specified");
3688 return;
3689 }
3690 if (localport == NULL || strlen(localport) == 0) {
3691 localport = "0";
3692 } else {
3693 has_local = true;
3694 }
3695 if (localaddr == NULL || strlen(localaddr) == 0) {
3696 localaddr = "";
3697 } else {
3698 has_local = true;
3699 }
3700
130257dc 3701 backend->u.udp = g_new0(ChardevUdp, 1);
d0d7708b 3702 qemu_chr_parse_common(opts, qapi_ChardevUdp_base(backend->u.udp));
90a14bfe
PM		 3703
3704 addr = g_new0(SocketAddress, 1);
130257dc
EB		 3705 addr->type = SOCKET_ADDRESS_KIND_INET;
3706 addr->u.inet = g_new0(InetSocketAddress, 1);
3707 addr->u.inet->host = g_strdup(host);
3708 addr->u.inet->port = g_strdup(port);
3709 addr->u.inet->has_ipv4 = qemu_opt_get(opts, "ipv4");
3710 addr->u.inet->ipv4 = qemu_opt_get_bool(opts, "ipv4", 0);
3711 addr->u.inet->has_ipv6 = qemu_opt_get(opts, "ipv6");
3712 addr->u.inet->ipv6 = qemu_opt_get_bool(opts, "ipv6", 0);
3713 backend->u.udp->remote = addr;
90a14bfe
PM		 3714
3715 if (has_local) {
130257dc 3716 backend->u.udp->has_local = true;
90a14bfe 3717 addr = g_new0(SocketAddress, 1);
130257dc
EB		 3718 addr->type = SOCKET_ADDRESS_KIND_INET;
3719 addr->u.inet = g_new0(InetSocketAddress, 1);
3720 addr->u.inet->host = g_strdup(localaddr);
3721 addr->u.inet->port = g_strdup(localport);
3722 backend->u.udp->local = addr;
90a14bfe
PM		 3723 }
3724}
3725
d654f34e 3726typedef struct CharDriver {
191bc01b 3727 const char *name;
99aec012 3728 ChardevBackendKind kind;
2c5f4882 3729 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp);
4ca17281
PB		 3730 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
3731 ChardevReturn *ret, Error **errp);
d654f34e
AL		 3732} CharDriver;
3733
3734static GSList *backends;
3735
e4d50d47 3736void register_char_driver(const char *name, ChardevBackendKind kind,
4ca17281
PB		 3737 void (*parse)(QemuOpts *opts, ChardevBackend *backend, Error **errp),
3738 CharDriverState *(*create)(const char *id, ChardevBackend *backend,
3739 ChardevReturn *ret, Error **errp))
2c5f4882
GH		 3740{
3741 CharDriver *s;
3742
3743 s = g_malloc0(sizeof(*s));
3744 s->name = g_strdup(name);
3745 s->kind = kind;
3746 s->parse = parse;
4ca17281 3747 s->create = create;
2c5f4882
GH		 3748
3749 backends = g_slist_append(backends, s);
3750}
3751
f69554b9 3752CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
bd2d80b2
GH		 3753 void (*init)(struct CharDriverState *s),
3754 Error **errp)
191bc01b 3755{
0aff637e 3756 Error *local_err = NULL;
d654f34e 3757 CharDriver *cd;
191bc01b 3758 CharDriverState *chr;
d654f34e 3759 GSList *i;
a61ae7f8
PM		 3760 ChardevReturn *ret = NULL;
3761 ChardevBackend *backend;
3762 const char *id = qemu_opts_id(opts);
3763 char *bid = NULL;
191bc01b 3764
a61ae7f8 3765 if (id == NULL) {
312fd5f2 3766 error_setg(errp, "chardev: no id specified");
2274ae9d 3767 goto err;
191bc01b
GH		 3768 }
3769
1bbd185f 3770 if (qemu_opt_get(opts, "backend") == NULL) {
312fd5f2 3771 error_setg(errp, "chardev: \"%s\" missing backend",
bd2d80b2 3772 qemu_opts_id(opts));
2274ae9d 3773 goto err;
1bbd185f 3774 }
d654f34e
AL		 3775 for (i = backends; i; i = i->next) {
3776 cd = i->data;
3777
3778 if (strcmp(cd->name, qemu_opt_get(opts, "backend")) == 0) {
191bc01b 3779 break;
d654f34e 3780 }
191bc01b 3781 }
d654f34e 3782 if (i == NULL) {
312fd5f2 3783 error_setg(errp, "chardev: backend \"%s\" not found",
bd2d80b2 3784 qemu_opt_get(opts, "backend"));
e668287d 3785 goto err;
191bc01b
GH		 3786 }
3787
a61ae7f8 3788 backend = g_new0(ChardevBackend, 1);
edb2fb3c 3789
a61ae7f8
PM		 3790 if (qemu_opt_get_bool(opts, "mux", 0)) {
3791 bid = g_strdup_printf("%s-base", id);
3792 }
2c5f4882 3793
a61ae7f8 3794 chr = NULL;
130257dc 3795 backend->type = cd->kind;
a61ae7f8
PM		 3796 if (cd->parse) {
3797 cd->parse(opts, backend, &local_err);
3798 if (local_err) {
3799 error_propagate(errp, local_err);
2c5f4882
GH		 3800 goto qapi_out;
3801 }
d0d7708b
DB		 3802 } else {
3803 ChardevCommon *cc = g_new0(ChardevCommon, 1);
3804 qemu_chr_parse_common(opts, cc);
3805 backend->u.data = cc;
2c5f4882 3806 }
d0d7708b 3807
a61ae7f8
PM		 3808 ret = qmp_chardev_add(bid ? bid : id, backend, errp);
3809 if (!ret) {
3810 goto qapi_out;
191bc01b
GH		 3811 }
3812
a61ae7f8
PM		 3813 if (bid) {
3814 qapi_free_ChardevBackend(backend);
3815 qapi_free_ChardevReturn(ret);
3816 backend = g_new0(ChardevBackend, 1);
130257dc
EB		 3817 backend->u.mux = g_new0(ChardevMux, 1);
3818 backend->type = CHARDEV_BACKEND_KIND_MUX;
3819 backend->u.mux->chardev = g_strdup(bid);
a61ae7f8
PM		 3820 ret = qmp_chardev_add(id, backend, errp);
3821 if (!ret) {
3822 chr = qemu_chr_find(bid);
3823 qemu_chr_delete(chr);
3824 chr = NULL;
3825 goto qapi_out;
3826 }
bd5c51ee 3827 }
7591c5c1 3828
a61ae7f8 3829 chr = qemu_chr_find(id);
2274ae9d 3830 chr->opts = opts;
a61ae7f8
PM		 3831
3832qapi_out:
3833 qapi_free_ChardevBackend(backend);
3834 qapi_free_ChardevReturn(ret);
3835 g_free(bid);
191bc01b 3836 return chr;
2274ae9d
GH		 3837
3838err:
3839 qemu_opts_del(opts);
3840 return NULL;
191bc01b
GH		 3841}
3842
27143a44 3843CharDriverState *qemu_chr_new(const char *label, const char *filename, void (*init)(struct CharDriverState *s))
6f97dba0
AL		 3844{
3845 const char *p;
3846 CharDriverState *chr;
191bc01b 3847 QemuOpts *opts;
bd2d80b2 3848 Error *err = NULL;
191bc01b 3849
c845f401
GH		 3850 if (strstart(filename, "chardev:", &p)) {
3851 return qemu_chr_find(p);
3852 }
3853
191bc01b 3854 opts = qemu_chr_parse_compat(label, filename);
7e1b35b4
GH		 3855 if (!opts)
3856 return NULL;
6f97dba0 3857
bd2d80b2 3858 chr = qemu_chr_new_from_opts(opts, init, &err);
84d18f06 3859 if (err) {
565f65d2 3860 error_report_err(err);
bd2d80b2 3861 }
7e1b35b4 3862 if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
456d6069 3863 qemu_chr_fe_claim_no_fail(chr);
7e1b35b4 3864 monitor_init(chr, MONITOR_USE_READLINE);
6f97dba0
AL		 3865 }
3866 return chr;
3867}
3868
15f31519 3869void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
c48855e1
PB		 3870{
3871 if (chr->chr_set_echo) {
3872 chr->chr_set_echo(chr, echo);
3873 }
3874}
3875
8e25daa8 3876void qemu_chr_fe_set_open(struct CharDriverState *chr, int fe_open)
7c32c4fe 3877{
8e25daa8 3878 if (chr->fe_open == fe_open) {
c0c4bd2c
HG		 3879 return;
3880 }
8e25daa8 3881 chr->fe_open = fe_open;
574b711a
HG		 3882 if (chr->chr_set_fe_open) {
3883 chr->chr_set_fe_open(chr, fe_open);
7c32c4fe
HG		 3884 }
3885}
3886
d61b0c9a
MAL		 3887void qemu_chr_fe_event(struct CharDriverState *chr, int event)
3888{
3889 if (chr->chr_fe_event) {
3890 chr->chr_fe_event(chr, event);
3891 }
3892}
3893
2c8a5942
KW		 3894int qemu_chr_fe_add_watch(CharDriverState *s, GIOCondition cond,
3895 GIOFunc func, void *user_data)
23673ca7
AL		 3896{
3897 GSource *src;
3898 guint tag;
3899
3900 if (s->chr_add_watch == NULL) {
3901 return -ENOSYS;
3902 }
3903
3904 src = s->chr_add_watch(s, cond);
62c339c5
PB		 3905 if (!src) {
3906 return -EINVAL;
3907 }
3908
23673ca7
AL		 3909 g_source_set_callback(src, (GSourceFunc)func, user_data, NULL);
3910 tag = g_source_attach(src, NULL);
3911 g_source_unref(src);
3912
3913 return tag;
3914}
3915
44c473de
HG		 3916int qemu_chr_fe_claim(CharDriverState *s)
3917{
3918 if (s->avail_connections < 1) {
3919 return -1;
3920 }
3921 s->avail_connections--;
3922 return 0;
3923}
3924
3925void qemu_chr_fe_claim_no_fail(CharDriverState *s)
3926{
3927 if (qemu_chr_fe_claim(s) != 0) {
3928 fprintf(stderr, "%s: error chardev \"%s\" already used\n",
3929 __func__, s->label);
3930 exit(1);
3931 }
3932}
3933
3934void qemu_chr_fe_release(CharDriverState *s)
3935{
3936 s->avail_connections++;
3937}
3938
d0d7708b 3939static void qemu_chr_free_common(CharDriverState *chr)
6f97dba0 3940{
7267c094
AL		 3941 g_free(chr->filename);
3942 g_free(chr->label);
4ad60880 3943 qemu_opts_del(chr->opts);
d0d7708b
DB		 3944 if (chr->logfd != -1) {
3945 close(chr->logfd);
3946 }
fefd749c 3947 qemu_mutex_destroy(&chr->chr_write_lock);
7267c094 3948 g_free(chr);
6f97dba0
AL		 3949}
3950
d0d7708b
DB		 3951void qemu_chr_free(CharDriverState *chr)
3952{
3953 if (chr->chr_close) {
3954 chr->chr_close(chr);
3955 }
3956 qemu_chr_free_common(chr);
3957}
3958
1ad78ea5
MAL		 3959void qemu_chr_delete(CharDriverState *chr)
3960{
3961 QTAILQ_REMOVE(&chardevs, chr, next);
3962 qemu_chr_free(chr);
3963}
3964
c5a415a0 3965ChardevInfoList *qmp_query_chardev(Error **errp)
6f97dba0 3966{
c5a415a0 3967 ChardevInfoList *chr_list = NULL;
6f97dba0
AL		 3968 CharDriverState *chr;
3969
72cf2d4f 3970 QTAILQ_FOREACH(chr, &chardevs, next) {
c5a415a0
LC		 3971 ChardevInfoList *info = g_malloc0(sizeof(*info));
3972 info->value = g_malloc0(sizeof(*info->value));
3973 info->value->label = g_strdup(chr->label);
3974 info->value->filename = g_strdup(chr->filename);
32a97ea1 3975 info->value->frontend_open = chr->fe_open;
c5a415a0
LC		 3976
3977 info->next = chr_list;
3978 chr_list = info;
6f97dba0 3979 }
588b3832 3980
c5a415a0 3981 return chr_list;
6f97dba0 3982}
c845f401 3983
77d1c3c6
MK		 3984ChardevBackendInfoList *qmp_query_chardev_backends(Error **errp)
3985{
3986 ChardevBackendInfoList *backend_list = NULL;
3987 CharDriver *c = NULL;
3988 GSList *i = NULL;
3989
3990 for (i = backends; i; i = i->next) {
3991 ChardevBackendInfoList *info = g_malloc0(sizeof(*info));
3992 c = i->data;
3993 info->value = g_malloc0(sizeof(*info->value));
3994 info->value->name = g_strdup(c->name);
3995
3996 info->next = backend_list;
3997 backend_list = info;
3998 }
3999
4000 return backend_list;
4001}
4002
c845f401
GH		 4003CharDriverState *qemu_chr_find(const char *name)
4004{
4005 CharDriverState *chr;
4006
72cf2d4f 4007 QTAILQ_FOREACH(chr, &chardevs, next) {
c845f401
GH		 4008 if (strcmp(chr->label, name) != 0)
4009 continue;
4010 return chr;
4011 }
4012 return NULL;
4013}
0beb4942
AL		 4014
4015/* Get a character (serial) device interface. */
4016CharDriverState *qemu_char_get_next_serial(void)
4017{
4018 static int next_serial;
456d6069 4019 CharDriverState *chr;
0beb4942
AL		 4020
4021 /* FIXME: This function needs to go away: use chardev properties! */
456d6069
HG		 4022
4023 while (next_serial < MAX_SERIAL_PORTS && serial_hds[next_serial]) {
4024 chr = serial_hds[next_serial++];
4025 qemu_chr_fe_claim_no_fail(chr);
4026 return chr;
4027 }
4028 return NULL;
0beb4942
AL		 4029}
4030
4d454574
PB		 4031QemuOptsList qemu_chardev_opts = {
4032 .name = "chardev",
4033 .implied_opt_name = "backend",
4034 .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
4035 .desc = {
4036 {
4037 .name = "backend",
4038 .type = QEMU_OPT_STRING,
4039 },{
4040 .name = "path",
4041 .type = QEMU_OPT_STRING,
4042 },{
4043 .name = "host",
4044 .type = QEMU_OPT_STRING,
4045 },{
4046 .name = "port",
4047 .type = QEMU_OPT_STRING,
4048 },{
4049 .name = "localaddr",
4050 .type = QEMU_OPT_STRING,
4051 },{
4052 .name = "localport",
4053 .type = QEMU_OPT_STRING,
4054 },{
4055 .name = "to",
4056 .type = QEMU_OPT_NUMBER,
4057 },{
4058 .name = "ipv4",
4059 .type = QEMU_OPT_BOOL,
4060 },{
4061 .name = "ipv6",
4062 .type = QEMU_OPT_BOOL,
4063 },{
4064 .name = "wait",
4065 .type = QEMU_OPT_BOOL,
4066 },{
4067 .name = "server",
4068 .type = QEMU_OPT_BOOL,
4069 },{
4070 .name = "delay",
4071 .type = QEMU_OPT_BOOL,
5dd1f02b
CM		 4072 },{
4073 .name = "reconnect",
4074 .type = QEMU_OPT_NUMBER,
4d454574
PB		 4075 },{
4076 .name = "telnet",
4077 .type = QEMU_OPT_BOOL,
a8fb5427
DB		 4078 },{
4079 .name = "tls-creds",
4080 .type = QEMU_OPT_STRING,
4d454574
PB		 4081 },{
4082 .name = "width",
4083 .type = QEMU_OPT_NUMBER,
4084 },{
4085 .name = "height",
4086 .type = QEMU_OPT_NUMBER,
4087 },{
4088 .name = "cols",
4089 .type = QEMU_OPT_NUMBER,
4090 },{
4091 .name = "rows",
4092 .type = QEMU_OPT_NUMBER,
4093 },{
4094 .name = "mux",
4095 .type = QEMU_OPT_BOOL,
4096 },{
4097 .name = "signal",
4098 .type = QEMU_OPT_BOOL,
4099 },{
4100 .name = "name",
4101 .type = QEMU_OPT_STRING,
4102 },{
4103 .name = "debug",
4104 .type = QEMU_OPT_NUMBER,
51767e7c 4105 },{
3949e594 4106 .name = "size",
de1cc36e 4107 .type = QEMU_OPT_SIZE,
bb6fb7c0
GH		 4108 },{
4109 .name = "chardev",
4110 .type = QEMU_OPT_STRING,
31e38a22
OK		 4111 },{
4112 .name = "append",
4113 .type = QEMU_OPT_BOOL,
d0d7708b
DB		 4114 },{
4115 .name = "logfile",
4116 .type = QEMU_OPT_STRING,
4117 },{
4118 .name = "logappend",
4119 .type = QEMU_OPT_BOOL,
4d454574
PB		 4120 },
4121 { /* end of list */ }
4122 },
4123};
f1a1a356 4124
ffbdbe59
GH		 4125#ifdef _WIN32
4126
fd5b036c
PB		 4127static CharDriverState *qmp_chardev_open_file(const char *id,
4128 ChardevBackend *backend,
4129 ChardevReturn *ret,
4130 Error **errp)
ffbdbe59 4131{
130257dc 4132 ChardevFile *file = backend->u.file;
d0d7708b 4133 ChardevCommon *common = qapi_ChardevFile_base(backend->u.file);
ffbdbe59
GH		 4134 HANDLE out;
4135
e859eda5 4136 if (file->has_in) {
ffbdbe59
GH		 4137 error_setg(errp, "input file not supported");
4138 return NULL;
4139 }
4140
4141 out = CreateFile(file->out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
4142 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
4143 if (out == INVALID_HANDLE_VALUE) {
4144 error_setg(errp, "open %s failed", file->out);
4145 return NULL;
4146 }
d0d7708b 4147 return qemu_chr_open_win_file(out, common, errp);
ffbdbe59
GH		 4148}
4149
6511d396
PB		 4150static CharDriverState *qmp_chardev_open_serial(const char *id,
4151 ChardevBackend *backend,
4152 ChardevReturn *ret,
d36b2b90 4153 Error **errp)
d59044ef 4154{
130257dc 4155 ChardevHostdev *serial = backend->u.serial;
d0d7708b
DB		 4156 ChardevCommon *common = qapi_ChardevHostdev_base(backend->u.serial);
4157 return qemu_chr_open_win_path(serial->device, common, errp);
d36b2b90
MA		 4158}
4159
ffbdbe59
GH		 4160#else /* WIN32 */
4161
4162static int qmp_chardev_open_file_source(char *src, int flags,
4163 Error **errp)
4164{
4165 int fd = -1;
4166
4167 TFR(fd = qemu_open(src, flags, 0666));
4168 if (fd == -1) {
20c39760 4169 error_setg_file_open(errp, errno, src);
ffbdbe59
GH		 4170 }
4171 return fd;
4172}
4173
fd5b036c
PB		 4174static CharDriverState *qmp_chardev_open_file(const char *id,
4175 ChardevBackend *backend,
4176 ChardevReturn *ret,
4177 Error **errp)
ffbdbe59 4178{
130257dc 4179 ChardevFile *file = backend->u.file;
d0d7708b 4180 ChardevCommon *common = qapi_ChardevFile_base(backend->u.file);
5f758366 4181 int flags, in = -1, out;
ffbdbe59 4182
31e38a22
OK		 4183 flags = O_WRONLY | O_CREAT | O_BINARY;
4184 if (file->has_append && file->append) {
4185 flags |= O_APPEND;
4186 } else {
4187 flags |= O_TRUNC;
4188 }
4189
ffbdbe59 4190 out = qmp_chardev_open_file_source(file->out, flags, errp);
5f758366 4191 if (out < 0) {
ffbdbe59
GH		 4192 return NULL;
4193 }
4194
e859eda5 4195 if (file->has_in) {
ffbdbe59
GH		 4196 flags = O_RDONLY;
4197 in = qmp_chardev_open_file_source(file->in, flags, errp);
5f758366 4198 if (in < 0) {
ffbdbe59
GH		 4199 qemu_close(out);
4200 return NULL;
4201 }
4202 }
4203
d0d7708b 4204 return qemu_chr_open_fd(in, out, common, errp);
ffbdbe59
GH		 4205}
4206
d809ab95 4207#ifdef HAVE_CHARDEV_SERIAL
6511d396
PB		 4208static CharDriverState *qmp_chardev_open_serial(const char *id,
4209 ChardevBackend *backend,
4210 ChardevReturn *ret,
d36b2b90 4211 Error **errp)
d59044ef 4212{
130257dc 4213 ChardevHostdev *serial = backend->u.serial;
d0d7708b 4214 ChardevCommon *common = qapi_ChardevHostdev_base(backend->u.serial);
d36b2b90
MA		 4215 int fd;
4216
4217 fd = qmp_chardev_open_file_source(serial->device, O_RDWR, errp);
5f758366 4218 if (fd < 0) {
d36b2b90 4219 return NULL;
39099991 4220 }
f9e8cacc 4221 qemu_set_nonblock(fd);
d0d7708b 4222 return qemu_chr_open_tty_fd(fd, common, errp);
d36b2b90 4223}
6511d396 4224#endif
d36b2b90 4225
d809ab95 4226#ifdef HAVE_CHARDEV_PARPORT
38bfb1a6
PB		 4227static CharDriverState *qmp_chardev_open_parallel(const char *id,
4228 ChardevBackend *backend,
4229 ChardevReturn *ret,
d36b2b90
MA		 4230 Error **errp)
4231{
130257dc 4232 ChardevHostdev *parallel = backend->u.parallel;
d0d7708b 4233 ChardevCommon *common = qapi_ChardevHostdev_base(backend->u.parallel);
d36b2b90
MA		 4234 int fd;
4235
4236 fd = qmp_chardev_open_file_source(parallel->device, O_RDWR, errp);
5f758366 4237 if (fd < 0) {
d59044ef
GH		 4238 return NULL;
4239 }
d0d7708b 4240 return qemu_chr_open_pp_fd(fd, common, errp);
d59044ef 4241}
d809ab95 4242#endif
d59044ef 4243
ffbdbe59
GH		 4244#endif /* WIN32 */
4245
5008e5b7
CM		 4246static void socket_try_connect(CharDriverState *chr)
4247{
4248 Error *err = NULL;
4249
4250 if (!qemu_chr_open_socket_fd(chr, &err)) {
4251 check_report_connect_error(chr, err);
4252 }
4253}
4254
5dd1f02b
CM		 4255static gboolean socket_reconnect_timeout(gpointer opaque)
4256{
4257 CharDriverState *chr = opaque;
4258 TCPCharDriver *s = chr->opaque;
5dd1f02b
CM		 4259
4260 s->reconnect_timer = 0;
4261
4262 if (chr->be_open) {
4263 return false;
4264 }
4265
5008e5b7 4266 socket_try_connect(chr);
5dd1f02b
CM		 4267
4268 return false;
4269}
4270
dbba8d1b
PB		 4271static CharDriverState *qmp_chardev_open_socket(const char *id,
4272 ChardevBackend *backend,
4273 ChardevReturn *ret,
f6bd5d6e
GH		 4274 Error **errp)
4275{
43ded1a0
CM		 4276 CharDriverState *chr;
4277 TCPCharDriver *s;
130257dc 4278 ChardevSocket *sock = backend->u.socket;
f6bd5d6e
GH		 4279 SocketAddress *addr = sock->addr;
4280 bool do_nodelay = sock->has_nodelay ? sock->nodelay : false;
4281 bool is_listen = sock->has_server ? sock->server : true;
4282 bool is_telnet = sock->has_telnet ? sock->telnet : false;
4283 bool is_waitconnect = sock->has_wait ? sock->wait : false;
5dd1f02b 4284 int64_t reconnect = sock->has_reconnect ? sock->reconnect : 0;
d0d7708b 4285 ChardevCommon *common = qapi_ChardevSocket_base(backend->u.socket);
43ded1a0 4286
d0d7708b
DB		 4287 chr = qemu_chr_alloc(common, errp);
4288 if (!chr) {
4289 return NULL;
4290 }
2d528d45 4291 s = g_new0(TCPCharDriver, 1);
43ded1a0 4292
130257dc 4293 s->is_unix = addr->type == SOCKET_ADDRESS_KIND_UNIX;
cfb429cb
CM		 4294 s->is_listen = is_listen;
4295 s->is_telnet = is_telnet;
43ded1a0 4296 s->do_nodelay = do_nodelay;
a8fb5427
DB		 4297 if (sock->tls_creds) {
4298 Object *creds;
4299 creds = object_resolve_path_component(
4300 object_get_objects_root(), sock->tls_creds);
4301 if (!creds) {
4302 error_setg(errp, "No TLS credentials with id '%s'",
4303 sock->tls_creds);
4304 goto error;
4305 }
4306 s->tls_creds = (QCryptoTLSCreds *)
4307 object_dynamic_cast(creds,
4308 TYPE_QCRYPTO_TLS_CREDS);
4309 if (!s->tls_creds) {
4310 error_setg(errp, "Object with id '%s' is not TLS credentials",
4311 sock->tls_creds);
4312 goto error;
4313 }
4314 object_ref(OBJECT(s->tls_creds));
4315 if (is_listen) {
4316 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_SERVER) {
4317 error_setg(errp, "%s",
4318 "Expected TLS credentials for server endpoint");
4319 goto error;
4320 }
4321 } else {
4322 if (s->tls_creds->endpoint != QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT) {
4323 error_setg(errp, "%s",
4324 "Expected TLS credentials for client endpoint");
4325 goto error;
4326 }
4327 }
4328 }
4329
cfb429cb 4330 qapi_copy_SocketAddress(&s->addr, sock->addr);
43ded1a0
CM		 4331
4332 chr->opaque = s;
4333 chr->chr_write = tcp_chr_write;
4334 chr->chr_sync_read = tcp_chr_sync_read;
4335 chr->chr_close = tcp_chr_close;
4336 chr->get_msgfds = tcp_get_msgfds;
4337 chr->set_msgfds = tcp_set_msgfds;
4338 chr->chr_add_client = tcp_chr_add_client;
4339 chr->chr_add_watch = tcp_chr_add_watch;
4340 chr->chr_update_read_handler = tcp_chr_update_read_handler;
4341 /* be isn't opened until we get a connection */
4342 chr->explicit_be_open = true;
4343
0ff0fad2
DB		 4344 chr->filename = SocketAddress_to_str("disconnected:",
4345 addr, is_listen, is_telnet);
f6bd5d6e
GH		 4346
4347 if (is_listen) {
43ded1a0
CM		 4348 if (is_telnet) {
4349 s->do_telnetopt = 1;
4350 }
5dd1f02b
CM		 4351 } else if (reconnect > 0) {
4352 s->reconnect_time = reconnect;
f6bd5d6e 4353 }
43ded1a0 4354
5008e5b7
CM		 4355 if (s->reconnect_time) {
4356 socket_try_connect(chr);
4357 } else if (!qemu_chr_open_socket_fd(chr, errp)) {
a8fb5427 4358 goto error;
f6bd5d6e 4359 }
43ded1a0
CM		 4360
4361 if (is_listen && is_waitconnect) {
4362 fprintf(stderr, "QEMU waiting for connection on: %s\n",
4363 chr->filename);
9894dc0c
DB		 4364 tcp_chr_accept(QIO_CHANNEL(s->listen_ioc), G_IO_IN, chr);
4365 qio_channel_set_blocking(QIO_CHANNEL(s->listen_ioc), false, NULL);
43ded1a0
CM		 4366 }
4367
4368 return chr;
a8fb5427
DB		 4369
4370 error:
4371 if (s->tls_creds) {
4372 object_unref(OBJECT(s->tls_creds));
4373 }
4374 g_free(s);
4375 qemu_chr_free_common(chr);
4376 return NULL;
f6bd5d6e
GH		 4377}
4378
e79b80da
PB		 4379static CharDriverState *qmp_chardev_open_udp(const char *id,
4380 ChardevBackend *backend,
4381 ChardevReturn *ret,
08d0ab3f 4382 Error **errp)
3ecc059d 4383{
130257dc 4384 ChardevUdp *udp = backend->u.udp;
d0d7708b 4385 ChardevCommon *common = qapi_ChardevUdp_base(backend->u.udp);
9894dc0c 4386 QIOChannelSocket *sioc = qio_channel_socket_new();
3ecc059d 4387
9894dc0c 4388 if (qio_channel_socket_dgram_sync(sioc,
150dcd1a 4389 udp->local, udp->remote,
9894dc0c
DB		 4390 errp) < 0) {
4391 object_unref(OBJECT(sioc));
3ecc059d
GH		 4392 return NULL;
4393 }
9894dc0c 4394 return qemu_chr_open_udp(sioc, common, errp);
3ecc059d
GH		 4395}
4396
f1a1a356
GH		 4397ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
4398 Error **errp)
4399{
4400 ChardevReturn *ret = g_new0(ChardevReturn, 1);
3c0e5a4a 4401 CharDriverState *chr = NULL;
eaeba653 4402 Error *local_err = NULL;
4ca17281
PB		 4403 GSList *i;
4404 CharDriver *cd;
f1a1a356
GH		 4405
4406 chr = qemu_chr_find(id);
4407 if (chr) {
4408 error_setg(errp, "Chardev '%s' already exists", id);
4409 g_free(ret);
4410 return NULL;
4411 }
4412
4ca17281
PB		 4413 for (i = backends; i; i = i->next) {
4414 cd = i->data;
4415
130257dc 4416 if (cd->kind == backend->type) {
4ca17281
PB		 4417 chr = cd->create(id, backend, ret, &local_err);
4418 if (local_err) {
4419 error_propagate(errp, local_err);
4420 goto out_error;
4421 }
4422 break;
4423 }
4424 }
4425
4426 if (chr == NULL) {
1c3af0f4
PB		 4427 assert(!i);
4428 error_setg(errp, "chardev backend not available");
4429 goto out_error;
eaeba653
PB		 4430 }
4431
4432 chr->label = g_strdup(id);
4433 chr->avail_connections =
130257dc 4434 (backend->type == CHARDEV_BACKEND_KIND_MUX) ? MAX_MUX : 1;
eaeba653 4435 if (!chr->filename) {
130257dc 4436 chr->filename = g_strdup(ChardevBackendKind_lookup[backend->type]);
f1a1a356 4437 }
eaeba653
PB		 4438 if (!chr->explicit_be_open) {
4439 qemu_chr_be_event(chr, CHR_EVENT_OPENED);
4440 }
4441 QTAILQ_INSERT_TAIL(&chardevs, chr, next);
4442 return ret;
4443
4444out_error:
4445 g_free(ret);
4446 return NULL;
f1a1a356
GH		 4447}
4448
4449void qmp_chardev_remove(const char *id, Error **errp)
4450{
4451 CharDriverState *chr;
4452
4453 chr = qemu_chr_find(id);
8108fd3e 4454 if (chr == NULL) {
f1a1a356
GH		 4455 error_setg(errp, "Chardev '%s' not found", id);
4456 return;
4457 }
4458 if (chr->chr_can_read || chr->chr_read ||
4459 chr->chr_event || chr->handler_opaque) {
4460 error_setg(errp, "Chardev '%s' is busy", id);
4461 return;
4462 }
4463 qemu_chr_delete(chr);
4464}
d654f34e
AL		 4465
4466static void register_types(void)
4467{
4ca17281 4468 register_char_driver("null", CHARDEV_BACKEND_KIND_NULL, NULL,
0d64992b 4469 qemu_chr_open_null);
e4d50d47 4470 register_char_driver("socket", CHARDEV_BACKEND_KIND_SOCKET,
dbba8d1b 4471 qemu_chr_parse_socket, qmp_chardev_open_socket);
4ca17281 4472 register_char_driver("udp", CHARDEV_BACKEND_KIND_UDP, qemu_chr_parse_udp,
e79b80da 4473 qmp_chardev_open_udp);
e4d50d47 4474 register_char_driver("ringbuf", CHARDEV_BACKEND_KIND_RINGBUF,
479f09a1 4475 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
e4d50d47 4476 register_char_driver("file", CHARDEV_BACKEND_KIND_FILE,
fd5b036c 4477 qemu_chr_parse_file_out, qmp_chardev_open_file);
e4d50d47 4478 register_char_driver("stdio", CHARDEV_BACKEND_KIND_STDIO,
8c84b25d 4479 qemu_chr_parse_stdio, qemu_chr_open_stdio);
6511d396 4480#if defined HAVE_CHARDEV_SERIAL
e4d50d47 4481 register_char_driver("serial", CHARDEV_BACKEND_KIND_SERIAL,
6511d396 4482 qemu_chr_parse_serial, qmp_chardev_open_serial);
e4d50d47 4483 register_char_driver("tty", CHARDEV_BACKEND_KIND_SERIAL,
6511d396
PB		 4484 qemu_chr_parse_serial, qmp_chardev_open_serial);
4485#endif
38bfb1a6 4486#ifdef HAVE_CHARDEV_PARPORT
e4d50d47 4487 register_char_driver("parallel", CHARDEV_BACKEND_KIND_PARALLEL,
38bfb1a6 4488 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
e4d50d47 4489 register_char_driver("parport", CHARDEV_BACKEND_KIND_PARALLEL,
38bfb1a6
PB		 4490 qemu_chr_parse_parallel, qmp_chardev_open_parallel);
4491#endif
c2e75a43 4492#ifdef HAVE_CHARDEV_PTY
4ca17281 4493 register_char_driver("pty", CHARDEV_BACKEND_KIND_PTY, NULL,
c2e75a43
PB		 4494 qemu_chr_open_pty);
4495#endif
122e5ed4 4496#ifdef _WIN32
4ca17281 4497 register_char_driver("console", CHARDEV_BACKEND_KIND_CONSOLE, NULL,
122e5ed4
PB		 4498 qemu_chr_open_win_con);
4499#endif
e4d50d47 4500 register_char_driver("pipe", CHARDEV_BACKEND_KIND_PIPE,
20cbe7a2 4501 qemu_chr_parse_pipe, qemu_chr_open_pipe);
4ca17281 4502 register_char_driver("mux", CHARDEV_BACKEND_KIND_MUX, qemu_chr_parse_mux,
3c0e5a4a 4503 qemu_chr_open_mux);
c11ed966 4504 /* Bug-compatibility: */
e4d50d47 4505 register_char_driver("memory", CHARDEV_BACKEND_KIND_MEMORY,
479f09a1 4506 qemu_chr_parse_ringbuf, qemu_chr_open_ringbuf);
7b7ab18d
MR		 4507 /* this must be done after machine init, since we register FEs with muxes
4508 * as part of realize functions like serial_isa_realizefn when -nographic
4509 * is specified
4510 */
4511 qemu_add_machine_init_done_notifier(&muxes_realize_notify);
d654f34e
AL		 4512}
4513
4514type_init(register_types);
Mirror of https://git.qemu.org/git/qemu.git