Statistics
| Branch: | Revision:

root / monitor.c @ 1094fd3a

History | View | Annotate | Download (146.1 kB)

1
/*
2
 * QEMU monitor
3
 *
4
 * Copyright (c) 2003-2004 Fabrice Bellard
5
 *
6
 * Permission is hereby granted, free of charge, to any person obtaining a copy
7
 * of this software and associated documentation files (the "Software"), to deal
8
 * in the Software without restriction, including without limitation the rights
9
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10
 * copies of the Software, and to permit persons to whom the Software is
11
 * furnished to do so, subject to the following conditions:
12
 *
13
 * The above copyright notice and this permission notice shall be included in
14
 * all copies or substantial portions of the Software.
15
 *
16
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22
 * THE SOFTWARE.
23
 */
24
#include <dirent.h>
25
#include "hw/hw.h"
26
#include "monitor/qdev.h"
27
#include "hw/usb.h"
28
#include "hw/pcmcia.h"
29
#include "hw/i386/pc.h"
30
#include "hw/pci/pci.h"
31
#include "sysemu/watchdog.h"
32
#include "hw/loader.h"
33
#include "exec/gdbstub.h"
34
#include "net/net.h"
35
#include "net/slirp.h"
36
#include "sysemu/char.h"
37
#include "ui/qemu-spice.h"
38
#include "sysemu/sysemu.h"
39
#include "monitor/monitor.h"
40
#include "qemu/readline.h"
41
#include "ui/console.h"
42
#include "sysemu/blockdev.h"
43
#include "audio/audio.h"
44
#include "disas/disas.h"
45
#include "sysemu/balloon.h"
46
#include "qemu/timer.h"
47
#include "migration/migration.h"
48
#include "sysemu/kvm.h"
49
#include "qemu/acl.h"
50
#include "sysemu/tpm.h"
51
#include "qapi/qmp/qint.h"
52
#include "qapi/qmp/qfloat.h"
53
#include "qapi/qmp/qlist.h"
54
#include "qapi/qmp/qbool.h"
55
#include "qapi/qmp/qstring.h"
56
#include "qapi/qmp/qjson.h"
57
#include "qapi/qmp/json-streamer.h"
58
#include "qapi/qmp/json-parser.h"
59
#include <qom/object_interfaces.h>
60
#include "qemu/osdep.h"
61
#include "cpu.h"
62
#include "trace.h"
63
#include "trace/control.h"
64
#ifdef CONFIG_TRACE_SIMPLE
65
#include "trace/simple.h"
66
#endif
67
#include "exec/memory.h"
68
#include "qmp-commands.h"
69
#include "hmp.h"
70
#include "qemu/thread.h"
71

    
72
/* for pic/irq_info */
73
#if defined(TARGET_SPARC)
74
#include "hw/sparc/sun4m.h"
75
#endif
76
#include "hw/lm32/lm32_pic.h"
77

    
78
//#define DEBUG
79
//#define DEBUG_COMPLETION
80

    
81
/*
82
 * Supported types:
83
 *
84
 * 'F'          filename
85
 * 'B'          block device name
86
 * 's'          string (accept optional quote)
87
 * 'S'          it just appends the rest of the string (accept optional quote)
88
 * 'O'          option string of the form NAME=VALUE,...
89
 *              parsed according to QemuOptsList given by its name
90
 *              Example: 'device:O' uses qemu_device_opts.
91
 *              Restriction: only lists with empty desc are supported
92
 *              TODO lift the restriction
93
 * 'i'          32 bit integer
94
 * 'l'          target long (32 or 64 bit)
95
 * 'M'          Non-negative target long (32 or 64 bit), in user mode the
96
 *              value is multiplied by 2^20 (think Mebibyte)
97
 * 'o'          octets (aka bytes)
98
 *              user mode accepts an optional E, e, P, p, T, t, G, g, M, m,
99
 *              K, k suffix, which multiplies the value by 2^60 for suffixes E
100
 *              and e, 2^50 for suffixes P and p, 2^40 for suffixes T and t,
101
 *              2^30 for suffixes G and g, 2^20 for M and m, 2^10 for K and k
102
 * 'T'          double
103
 *              user mode accepts an optional ms, us, ns suffix,
104
 *              which divides the value by 1e3, 1e6, 1e9, respectively
105
 * '/'          optional gdb-like print format (like "/10x")
106
 *
107
 * '?'          optional type (for all types, except '/')
108
 * '.'          other form of optional type (for 'i' and 'l')
109
 * 'b'          boolean
110
 *              user mode accepts "on" or "off"
111
 * '-'          optional parameter (eg. '-f')
112
 *
113
 */
114

    
115
typedef struct MonitorCompletionData MonitorCompletionData;
116
struct MonitorCompletionData {
117
    Monitor *mon;
118
    void (*user_print)(Monitor *mon, const QObject *data);
119
};
120

    
121
typedef struct mon_cmd_t {
122
    const char *name;
123
    const char *args_type;
124
    const char *params;
125
    const char *help;
126
    void (*user_print)(Monitor *mon, const QObject *data);
127
    union {
128
        void (*cmd)(Monitor *mon, const QDict *qdict);
129
        int  (*cmd_new)(Monitor *mon, const QDict *params, QObject **ret_data);
130
        int  (*cmd_async)(Monitor *mon, const QDict *params,
131
                          MonitorCompletion *cb, void *opaque);
132
    } mhandler;
133
    int flags;
134
    /* @sub_table is a list of 2nd level of commands. If it do not exist,
135
     * mhandler should be used. If it exist, sub_table[?].mhandler should be
136
     * used, and mhandler of 1st level plays the role of help function.
137
     */
138
    struct mon_cmd_t *sub_table;
139
} mon_cmd_t;
140

    
141
/* file descriptors passed via SCM_RIGHTS */
142
typedef struct mon_fd_t mon_fd_t;
143
struct mon_fd_t {
144
    char *name;
145
    int fd;
146
    QLIST_ENTRY(mon_fd_t) next;
147
};
148

    
149
/* file descriptor associated with a file descriptor set */
150
typedef struct MonFdsetFd MonFdsetFd;
151
struct MonFdsetFd {
152
    int fd;
153
    bool removed;
154
    char *opaque;
155
    QLIST_ENTRY(MonFdsetFd) next;
156
};
157

    
158
/* file descriptor set containing fds passed via SCM_RIGHTS */
159
typedef struct MonFdset MonFdset;
160
struct MonFdset {
161
    int64_t id;
162
    QLIST_HEAD(, MonFdsetFd) fds;
163
    QLIST_HEAD(, MonFdsetFd) dup_fds;
164
    QLIST_ENTRY(MonFdset) next;
165
};
166

    
167
typedef struct MonitorControl {
168
    QObject *id;
169
    JSONMessageParser parser;
170
    int command_mode;
171
} MonitorControl;
172

    
173
/*
174
 * To prevent flooding clients, events can be throttled. The
175
 * throttling is calculated globally, rather than per-Monitor
176
 * instance.
177
 */
178
typedef struct MonitorEventState {
179
    MonitorEvent event; /* Event being tracked */
180
    int64_t rate;       /* Period over which to throttle. 0 to disable */
181
    int64_t last;       /* Time at which event was last emitted */
182
    QEMUTimer *timer;   /* Timer for handling delayed events */
183
    QObject *data;      /* Event pending delayed dispatch */
184
} MonitorEventState;
185

    
186
struct Monitor {
187
    CharDriverState *chr;
188
    int mux_out;
189
    int reset_seen;
190
    int flags;
191
    int suspend_cnt;
192
    bool skip_flush;
193
    QString *outbuf;
194
    guint watch;
195
    ReadLineState *rs;
196
    MonitorControl *mc;
197
    CPUState *mon_cpu;
198
    BlockDriverCompletionFunc *password_completion_cb;
199
    void *password_opaque;
200
    mon_cmd_t *cmd_table;
201
    QError *error;
202
    QLIST_HEAD(,mon_fd_t) fds;
203
    QLIST_ENTRY(Monitor) entry;
204
};
205

    
206
/* QMP checker flags */
207
#define QMP_ACCEPT_UNKNOWNS 1
208

    
209
static QLIST_HEAD(mon_list, Monitor) mon_list;
210
static QLIST_HEAD(mon_fdsets, MonFdset) mon_fdsets;
211
static int mon_refcount;
212

    
213
static mon_cmd_t mon_cmds[];
214
static mon_cmd_t info_cmds[];
215

    
216
static const mon_cmd_t qmp_cmds[];
217

    
218
Monitor *cur_mon;
219
Monitor *default_mon;
220

    
221
static void monitor_command_cb(void *opaque, const char *cmdline,
222
                               void *readline_opaque);
223

    
224
static inline int qmp_cmd_mode(const Monitor *mon)
225
{
226
    return (mon->mc ? mon->mc->command_mode : 0);
227
}
228

    
229
/* Return true if in control mode, false otherwise */
230
static inline int monitor_ctrl_mode(const Monitor *mon)
231
{
232
    return (mon->flags & MONITOR_USE_CONTROL);
233
}
234

    
235
/* Return non-zero iff we have a current monitor, and it is in QMP mode.  */
236
int monitor_cur_is_qmp(void)
237
{
238
    return cur_mon && monitor_ctrl_mode(cur_mon);
239
}
240

    
241
void monitor_read_command(Monitor *mon, int show_prompt)
242
{
243
    if (!mon->rs)
244
        return;
245

    
246
    readline_start(mon->rs, "(qemu) ", 0, monitor_command_cb, NULL);
247
    if (show_prompt)
248
        readline_show_prompt(mon->rs);
249
}
250

    
251
int monitor_read_password(Monitor *mon, ReadLineFunc *readline_func,
252
                          void *opaque)
253
{
254
    if (monitor_ctrl_mode(mon)) {
255
        qerror_report(QERR_MISSING_PARAMETER, "password");
256
        return -EINVAL;
257
    } else if (mon->rs) {
258
        readline_start(mon->rs, "Password: ", 1, readline_func, opaque);
259
        /* prompt is printed on return from the command handler */
260
        return 0;
261
    } else {
262
        monitor_printf(mon, "terminal does not support password prompting\n");
263
        return -ENOTTY;
264
    }
265
}
266

    
267
static gboolean monitor_unblocked(GIOChannel *chan, GIOCondition cond,
268
                                  void *opaque)
269
{
270
    Monitor *mon = opaque;
271

    
272
    mon->watch = 0;
273
    monitor_flush(mon);
274
    return FALSE;
275
}
276

    
277
void monitor_flush(Monitor *mon)
278
{
279
    int rc;
280
    size_t len;
281
    const char *buf;
282

    
283
    if (mon->skip_flush) {
284
        return;
285
    }
286

    
287
    buf = qstring_get_str(mon->outbuf);
288
    len = qstring_get_length(mon->outbuf);
289

    
290
    if (len && !mon->mux_out) {
291
        rc = qemu_chr_fe_write(mon->chr, (const uint8_t *) buf, len);
292
        if ((rc < 0 && errno != EAGAIN) || (rc == len)) {
293
            /* all flushed or error */
294
            QDECREF(mon->outbuf);
295
            mon->outbuf = qstring_new();
296
            return;
297
        }
298
        if (rc > 0) {
299
            /* partinal write */
300
            QString *tmp = qstring_from_str(buf + rc);
301
            QDECREF(mon->outbuf);
302
            mon->outbuf = tmp;
303
        }
304
        if (mon->watch == 0) {
305
            mon->watch = qemu_chr_fe_add_watch(mon->chr, G_IO_OUT,
306
                                               monitor_unblocked, mon);
307
        }
308
    }
309
}
310

    
311
/* flush at every end of line */
312
static void monitor_puts(Monitor *mon, const char *str)
313
{
314
    char c;
315

    
316
    for(;;) {
317
        c = *str++;
318
        if (c == '\0')
319
            break;
320
        if (c == '\n') {
321
            qstring_append_chr(mon->outbuf, '\r');
322
        }
323
        qstring_append_chr(mon->outbuf, c);
324
        if (c == '\n') {
325
            monitor_flush(mon);
326
        }
327
    }
328
}
329

    
330
void monitor_vprintf(Monitor *mon, const char *fmt, va_list ap)
331
{
332
    char *buf;
333

    
334
    if (!mon)
335
        return;
336

    
337
    if (monitor_ctrl_mode(mon)) {
338
        return;
339
    }
340

    
341
    buf = g_strdup_vprintf(fmt, ap);
342
    monitor_puts(mon, buf);
343
    g_free(buf);
344
}
345

    
346
void monitor_printf(Monitor *mon, const char *fmt, ...)
347
{
348
    va_list ap;
349
    va_start(ap, fmt);
350
    monitor_vprintf(mon, fmt, ap);
351
    va_end(ap);
352
}
353

    
354
void monitor_print_filename(Monitor *mon, const char *filename)
355
{
356
    int i;
357

    
358
    for (i = 0; filename[i]; i++) {
359
        switch (filename[i]) {
360
        case ' ':
361
        case '"':
362
        case '\\':
363
            monitor_printf(mon, "\\%c", filename[i]);
364
            break;
365
        case '\t':
366
            monitor_printf(mon, "\\t");
367
            break;
368
        case '\r':
369
            monitor_printf(mon, "\\r");
370
            break;
371
        case '\n':
372
            monitor_printf(mon, "\\n");
373
            break;
374
        default:
375
            monitor_printf(mon, "%c", filename[i]);
376
            break;
377
        }
378
    }
379
}
380

    
381
static int GCC_FMT_ATTR(2, 3) monitor_fprintf(FILE *stream,
382
                                              const char *fmt, ...)
383
{
384
    va_list ap;
385
    va_start(ap, fmt);
386
    monitor_vprintf((Monitor *)stream, fmt, ap);
387
    va_end(ap);
388
    return 0;
389
}
390

    
391
static void monitor_user_noop(Monitor *mon, const QObject *data) { }
392

    
393
static inline int handler_is_qobject(const mon_cmd_t *cmd)
394
{
395
    return cmd->user_print != NULL;
396
}
397

    
398
static inline bool handler_is_async(const mon_cmd_t *cmd)
399
{
400
    return cmd->flags & MONITOR_CMD_ASYNC;
401
}
402

    
403
static inline int monitor_has_error(const Monitor *mon)
404
{
405
    return mon->error != NULL;
406
}
407

    
408
static void monitor_json_emitter(Monitor *mon, const QObject *data)
409
{
410
    QString *json;
411

    
412
    json = mon->flags & MONITOR_USE_PRETTY ? qobject_to_json_pretty(data) :
413
                                             qobject_to_json(data);
414
    assert(json != NULL);
415

    
416
    qstring_append_chr(json, '\n');
417
    monitor_puts(mon, qstring_get_str(json));
418

    
419
    QDECREF(json);
420
}
421

    
422
static QDict *build_qmp_error_dict(const QError *err)
423
{
424
    QObject *obj;
425

    
426
    obj = qobject_from_jsonf("{ 'error': { 'class': %s, 'desc': %p } }",
427
                             ErrorClass_lookup[err->err_class],
428
                             qerror_human(err));
429

    
430
    return qobject_to_qdict(obj);
431
}
432

    
433
static void monitor_protocol_emitter(Monitor *mon, QObject *data)
434
{
435
    QDict *qmp;
436

    
437
    trace_monitor_protocol_emitter(mon);
438

    
439
    if (!monitor_has_error(mon)) {
440
        /* success response */
441
        qmp = qdict_new();
442
        if (data) {
443
            qobject_incref(data);
444
            qdict_put_obj(qmp, "return", data);
445
        } else {
446
            /* return an empty QDict by default */
447
            qdict_put(qmp, "return", qdict_new());
448
        }
449
    } else {
450
        /* error response */
451
        qmp = build_qmp_error_dict(mon->error);
452
        QDECREF(mon->error);
453
        mon->error = NULL;
454
    }
455

    
456
    if (mon->mc->id) {
457
        qdict_put_obj(qmp, "id", mon->mc->id);
458
        mon->mc->id = NULL;
459
    }
460

    
461
    monitor_json_emitter(mon, QOBJECT(qmp));
462
    QDECREF(qmp);
463
}
464

    
465
static void timestamp_put(QDict *qdict)
466
{
467
    int err;
468
    QObject *obj;
469
    qemu_timeval tv;
470

    
471
    err = qemu_gettimeofday(&tv);
472
    if (err < 0)
473
        return;
474

    
475
    obj = qobject_from_jsonf("{ 'seconds': %" PRId64 ", "
476
                                "'microseconds': %" PRId64 " }",
477
                                (int64_t) tv.tv_sec, (int64_t) tv.tv_usec);
478
    qdict_put_obj(qdict, "timestamp", obj);
479
}
480

    
481

    
482
static const char *monitor_event_names[] = {
483
    [QEVENT_SHUTDOWN] = "SHUTDOWN",
484
    [QEVENT_RESET] = "RESET",
485
    [QEVENT_POWERDOWN] = "POWERDOWN",
486
    [QEVENT_STOP] = "STOP",
487
    [QEVENT_RESUME] = "RESUME",
488
    [QEVENT_VNC_CONNECTED] = "VNC_CONNECTED",
489
    [QEVENT_VNC_INITIALIZED] = "VNC_INITIALIZED",
490
    [QEVENT_VNC_DISCONNECTED] = "VNC_DISCONNECTED",
491
    [QEVENT_BLOCK_IO_ERROR] = "BLOCK_IO_ERROR",
492
    [QEVENT_RTC_CHANGE] = "RTC_CHANGE",
493
    [QEVENT_WATCHDOG] = "WATCHDOG",
494
    [QEVENT_SPICE_CONNECTED] = "SPICE_CONNECTED",
495
    [QEVENT_SPICE_INITIALIZED] = "SPICE_INITIALIZED",
496
    [QEVENT_SPICE_DISCONNECTED] = "SPICE_DISCONNECTED",
497
    [QEVENT_BLOCK_JOB_COMPLETED] = "BLOCK_JOB_COMPLETED",
498
    [QEVENT_BLOCK_JOB_CANCELLED] = "BLOCK_JOB_CANCELLED",
499
    [QEVENT_BLOCK_JOB_ERROR] = "BLOCK_JOB_ERROR",
500
    [QEVENT_BLOCK_JOB_READY] = "BLOCK_JOB_READY",
501
    [QEVENT_DEVICE_DELETED] = "DEVICE_DELETED",
502
    [QEVENT_DEVICE_TRAY_MOVED] = "DEVICE_TRAY_MOVED",
503
    [QEVENT_NIC_RX_FILTER_CHANGED] = "NIC_RX_FILTER_CHANGED",
504
    [QEVENT_SUSPEND] = "SUSPEND",
505
    [QEVENT_SUSPEND_DISK] = "SUSPEND_DISK",
506
    [QEVENT_WAKEUP] = "WAKEUP",
507
    [QEVENT_BALLOON_CHANGE] = "BALLOON_CHANGE",
508
    [QEVENT_SPICE_MIGRATE_COMPLETED] = "SPICE_MIGRATE_COMPLETED",
509
    [QEVENT_GUEST_PANICKED] = "GUEST_PANICKED",
510
    [QEVENT_BLOCK_IMAGE_CORRUPTED] = "BLOCK_IMAGE_CORRUPTED",
511
};
512
QEMU_BUILD_BUG_ON(ARRAY_SIZE(monitor_event_names) != QEVENT_MAX)
513

    
514
MonitorEventState monitor_event_state[QEVENT_MAX];
515

    
516
/*
517
 * Emits the event to every monitor instance
518
 */
519
static void
520
monitor_protocol_event_emit(MonitorEvent event,
521
                            QObject *data)
522
{
523
    Monitor *mon;
524

    
525
    trace_monitor_protocol_event_emit(event, data);
526
    QLIST_FOREACH(mon, &mon_list, entry) {
527
        if (monitor_ctrl_mode(mon) && qmp_cmd_mode(mon)) {
528
            monitor_json_emitter(mon, data);
529
        }
530
    }
531
}
532

    
533

    
534
/*
535
 * Queue a new event for emission to Monitor instances,
536
 * applying any rate limiting if required.
537
 */
538
static void
539
monitor_protocol_event_queue(MonitorEvent event,
540
                             QObject *data)
541
{
542
    MonitorEventState *evstate;
543
    int64_t now = qemu_clock_get_ns(QEMU_CLOCK_REALTIME);
544
    assert(event < QEVENT_MAX);
545

    
546
    evstate = &(monitor_event_state[event]);
547
    trace_monitor_protocol_event_queue(event,
548
                                       data,
549
                                       evstate->rate,
550
                                       evstate->last,
551
                                       now);
552

    
553
    /* Rate limit of 0 indicates no throttling */
554
    if (!evstate->rate) {
555
        monitor_protocol_event_emit(event, data);
556
        evstate->last = now;
557
    } else {
558
        int64_t delta = now - evstate->last;
559
        if (evstate->data ||
560
            delta < evstate->rate) {
561
            /* If there's an existing event pending, replace
562
             * it with the new event, otherwise schedule a
563
             * timer for delayed emission
564
             */
565
            if (evstate->data) {
566
                qobject_decref(evstate->data);
567
            } else {
568
                int64_t then = evstate->last + evstate->rate;
569
                timer_mod_ns(evstate->timer, then);
570
            }
571
            evstate->data = data;
572
            qobject_incref(evstate->data);
573
        } else {
574
            monitor_protocol_event_emit(event, data);
575
            evstate->last = now;
576
        }
577
    }
578
}
579

    
580

    
581
/*
582
 * The callback invoked by QemuTimer when a delayed
583
 * event is ready to be emitted
584
 */
585
static void monitor_protocol_event_handler(void *opaque)
586
{
587
    MonitorEventState *evstate = opaque;
588
    int64_t now = qemu_clock_get_ns(QEMU_CLOCK_REALTIME);
589

    
590

    
591
    trace_monitor_protocol_event_handler(evstate->event,
592
                                         evstate->data,
593
                                         evstate->last,
594
                                         now);
595
    if (evstate->data) {
596
        monitor_protocol_event_emit(evstate->event, evstate->data);
597
        qobject_decref(evstate->data);
598
        evstate->data = NULL;
599
    }
600
    evstate->last = now;
601
}
602

    
603

    
604
/*
605
 * @event: the event ID to be limited
606
 * @rate: the rate limit in milliseconds
607
 *
608
 * Sets a rate limit on a particular event, so no
609
 * more than 1 event will be emitted within @rate
610
 * milliseconds
611
 */
612
static void
613
monitor_protocol_event_throttle(MonitorEvent event,
614
                                int64_t rate)
615
{
616
    MonitorEventState *evstate;
617
    assert(event < QEVENT_MAX);
618

    
619
    evstate = &(monitor_event_state[event]);
620

    
621
    trace_monitor_protocol_event_throttle(event, rate);
622
    evstate->event = event;
623
    evstate->rate = rate * SCALE_MS;
624
    evstate->timer = timer_new(QEMU_CLOCK_REALTIME,
625
                                    SCALE_MS,
626
                                    monitor_protocol_event_handler,
627
                                    evstate);
628
    evstate->last = 0;
629
    evstate->data = NULL;
630
}
631

    
632

    
633
/* Global, one-time initializer to configure the rate limiting
634
 * and initialize state */
635
static void monitor_protocol_event_init(void)
636
{
637
    /* Limit RTC & BALLOON events to 1 per second */
638
    monitor_protocol_event_throttle(QEVENT_RTC_CHANGE, 1000);
639
    monitor_protocol_event_throttle(QEVENT_BALLOON_CHANGE, 1000);
640
    monitor_protocol_event_throttle(QEVENT_WATCHDOG, 1000);
641
}
642

    
643
/**
644
 * monitor_protocol_event(): Generate a Monitor event
645
 *
646
 * Event-specific data can be emitted through the (optional) 'data' parameter.
647
 */
648
void monitor_protocol_event(MonitorEvent event, QObject *data)
649
{
650
    QDict *qmp;
651
    const char *event_name;
652

    
653
    assert(event < QEVENT_MAX);
654

    
655
    event_name = monitor_event_names[event];
656
    assert(event_name != NULL);
657

    
658
    qmp = qdict_new();
659
    timestamp_put(qmp);
660
    qdict_put(qmp, "event", qstring_from_str(event_name));
661
    if (data) {
662
        qobject_incref(data);
663
        qdict_put_obj(qmp, "data", data);
664
    }
665

    
666
    trace_monitor_protocol_event(event, event_name, qmp);
667
    monitor_protocol_event_queue(event, QOBJECT(qmp));
668
    QDECREF(qmp);
669
}
670

    
671
static int do_qmp_capabilities(Monitor *mon, const QDict *params,
672
                               QObject **ret_data)
673
{
674
    /* Will setup QMP capabilities in the future */
675
    if (monitor_ctrl_mode(mon)) {
676
        mon->mc->command_mode = 1;
677
    }
678

    
679
    return 0;
680
}
681

    
682
static void handle_user_command(Monitor *mon, const char *cmdline);
683

    
684
static void monitor_data_init(Monitor *mon)
685
{
686
    memset(mon, 0, sizeof(Monitor));
687
    mon->outbuf = qstring_new();
688
    /* Use *mon_cmds by default. */
689
    mon->cmd_table = mon_cmds;
690
}
691

    
692
static void monitor_data_destroy(Monitor *mon)
693
{
694
    QDECREF(mon->outbuf);
695
}
696

    
697
char *qmp_human_monitor_command(const char *command_line, bool has_cpu_index,
698
                                int64_t cpu_index, Error **errp)
699
{
700
    char *output = NULL;
701
    Monitor *old_mon, hmp;
702

    
703
    monitor_data_init(&hmp);
704
    hmp.skip_flush = true;
705

    
706
    old_mon = cur_mon;
707
    cur_mon = &hmp;
708

    
709
    if (has_cpu_index) {
710
        int ret = monitor_set_cpu(cpu_index);
711
        if (ret < 0) {
712
            cur_mon = old_mon;
713
            error_set(errp, QERR_INVALID_PARAMETER_VALUE, "cpu-index",
714
                      "a CPU number");
715
            goto out;
716
        }
717
    }
718

    
719
    handle_user_command(&hmp, command_line);
720
    cur_mon = old_mon;
721

    
722
    if (qstring_get_length(hmp.outbuf) > 0) {
723
        output = g_strdup(qstring_get_str(hmp.outbuf));
724
    } else {
725
        output = g_strdup("");
726
    }
727

    
728
out:
729
    monitor_data_destroy(&hmp);
730
    return output;
731
}
732

    
733
static int compare_cmd(const char *name, const char *list)
734
{
735
    const char *p, *pstart;
736
    int len;
737
    len = strlen(name);
738
    p = list;
739
    for(;;) {
740
        pstart = p;
741
        p = strchr(p, '|');
742
        if (!p)
743
            p = pstart + strlen(pstart);
744
        if ((p - pstart) == len && !memcmp(pstart, name, len))
745
            return 1;
746
        if (*p == '\0')
747
            break;
748
        p++;
749
    }
750
    return 0;
751
}
752

    
753
static int get_str(char *buf, int buf_size, const char **pp)
754
{
755
    const char *p;
756
    char *q;
757
    int c;
758

    
759
    q = buf;
760
    p = *pp;
761
    while (qemu_isspace(*p)) {
762
        p++;
763
    }
764
    if (*p == '\0') {
765
    fail:
766
        *q = '\0';
767
        *pp = p;
768
        return -1;
769
    }
770
    if (*p == '\"') {
771
        p++;
772
        while (*p != '\0' && *p != '\"') {
773
            if (*p == '\\') {
774
                p++;
775
                c = *p++;
776
                switch (c) {
777
                case 'n':
778
                    c = '\n';
779
                    break;
780
                case 'r':
781
                    c = '\r';
782
                    break;
783
                case '\\':
784
                case '\'':
785
                case '\"':
786
                    break;
787
                default:
788
                    qemu_printf("unsupported escape code: '\\%c'\n", c);
789
                    goto fail;
790
                }
791
                if ((q - buf) < buf_size - 1) {
792
                    *q++ = c;
793
                }
794
            } else {
795
                if ((q - buf) < buf_size - 1) {
796
                    *q++ = *p;
797
                }
798
                p++;
799
            }
800
        }
801
        if (*p != '\"') {
802
            qemu_printf("unterminated string\n");
803
            goto fail;
804
        }
805
        p++;
806
    } else {
807
        while (*p != '\0' && !qemu_isspace(*p)) {
808
            if ((q - buf) < buf_size - 1) {
809
                *q++ = *p;
810
            }
811
            p++;
812
        }
813
    }
814
    *q = '\0';
815
    *pp = p;
816
    return 0;
817
}
818

    
819
#define MAX_ARGS 16
820

    
821
static void free_cmdline_args(char **args, int nb_args)
822
{
823
    int i;
824

    
825
    assert(nb_args <= MAX_ARGS);
826

    
827
    for (i = 0; i < nb_args; i++) {
828
        g_free(args[i]);
829
    }
830

    
831
}
832

    
833
/*
834
 * Parse the command line to get valid args.
835
 * @cmdline: command line to be parsed.
836
 * @pnb_args: location to store the number of args, must NOT be NULL.
837
 * @args: location to store the args, which should be freed by caller, must
838
 *        NOT be NULL.
839
 *
840
 * Returns 0 on success, negative on failure.
841
 *
842
 * NOTE: this parser is an approximate form of the real command parser. Number
843
 *       of args have a limit of MAX_ARGS. If cmdline contains more, it will
844
 *       return with failure.
845
 */
846
static int parse_cmdline(const char *cmdline,
847
                         int *pnb_args, char **args)
848
{
849
    const char *p;
850
    int nb_args, ret;
851
    char buf[1024];
852

    
853
    p = cmdline;
854
    nb_args = 0;
855
    for (;;) {
856
        while (qemu_isspace(*p)) {
857
            p++;
858
        }
859
        if (*p == '\0') {
860
            break;
861
        }
862
        if (nb_args >= MAX_ARGS) {
863
            goto fail;
864
        }
865
        ret = get_str(buf, sizeof(buf), &p);
866
        if (ret < 0) {
867
            goto fail;
868
        }
869
        args[nb_args] = g_strdup(buf);
870
        nb_args++;
871
    }
872
    *pnb_args = nb_args;
873
    return 0;
874

    
875
 fail:
876
    free_cmdline_args(args, nb_args);
877
    return -1;
878
}
879

    
880
static void help_cmd_dump_one(Monitor *mon,
881
                              const mon_cmd_t *cmd,
882
                              char **prefix_args,
883
                              int prefix_args_nb)
884
{
885
    int i;
886

    
887
    for (i = 0; i < prefix_args_nb; i++) {
888
        monitor_printf(mon, "%s ", prefix_args[i]);
889
    }
890
    monitor_printf(mon, "%s %s -- %s\n", cmd->name, cmd->params, cmd->help);
891
}
892

    
893
/* @args[@arg_index] is the valid command need to find in @cmds */
894
static void help_cmd_dump(Monitor *mon, const mon_cmd_t *cmds,
895
                          char **args, int nb_args, int arg_index)
896
{
897
    const mon_cmd_t *cmd;
898

    
899
    /* No valid arg need to compare with, dump all in *cmds */
900
    if (arg_index >= nb_args) {
901
        for (cmd = cmds; cmd->name != NULL; cmd++) {
902
            help_cmd_dump_one(mon, cmd, args, arg_index);
903
        }
904
        return;
905
    }
906

    
907
    /* Find one entry to dump */
908
    for (cmd = cmds; cmd->name != NULL; cmd++) {
909
        if (compare_cmd(args[arg_index], cmd->name)) {
910
            if (cmd->sub_table) {
911
                /* continue with next arg */
912
                help_cmd_dump(mon, cmd->sub_table,
913
                              args, nb_args, arg_index + 1);
914
            } else {
915
                help_cmd_dump_one(mon, cmd, args, arg_index);
916
            }
917
            break;
918
        }
919
    }
920
}
921

    
922
static void help_cmd(Monitor *mon, const char *name)
923
{
924
    char *args[MAX_ARGS];
925
    int nb_args = 0;
926

    
927
    /* 1. parse user input */
928
    if (name) {
929
        /* special case for log, directly dump and return */
930
        if (!strcmp(name, "log")) {
931
            const QEMULogItem *item;
932
            monitor_printf(mon, "Log items (comma separated):\n");
933
            monitor_printf(mon, "%-10s %s\n", "none", "remove all logs");
934
            for (item = qemu_log_items; item->mask != 0; item++) {
935
                monitor_printf(mon, "%-10s %s\n", item->name, item->help);
936
            }
937
            return;
938
        }
939

    
940
        if (parse_cmdline(name, &nb_args, args) < 0) {
941
            return;
942
        }
943
    }
944

    
945
    /* 2. dump the contents according to parsed args */
946
    help_cmd_dump(mon, mon->cmd_table, args, nb_args, 0);
947

    
948
    free_cmdline_args(args, nb_args);
949
}
950

    
951
static void do_help_cmd(Monitor *mon, const QDict *qdict)
952
{
953
    help_cmd(mon, qdict_get_try_str(qdict, "name"));
954
}
955

    
956
static void do_trace_event_set_state(Monitor *mon, const QDict *qdict)
957
{
958
    const char *tp_name = qdict_get_str(qdict, "name");
959
    bool new_state = qdict_get_bool(qdict, "option");
960

    
961
    bool found = false;
962
    TraceEvent *ev = NULL;
963
    while ((ev = trace_event_pattern(tp_name, ev)) != NULL) {
964
        found = true;
965
        if (!trace_event_get_state_static(ev)) {
966
            monitor_printf(mon, "event \"%s\" is not traceable\n", tp_name);
967
        } else {
968
            trace_event_set_state_dynamic(ev, new_state);
969
        }
970
    }
971
    if (!trace_event_is_pattern(tp_name) && !found) {
972
        monitor_printf(mon, "unknown event name \"%s\"\n", tp_name);
973
    }
974
}
975

    
976
#ifdef CONFIG_TRACE_SIMPLE
977
static void do_trace_file(Monitor *mon, const QDict *qdict)
978
{
979
    const char *op = qdict_get_try_str(qdict, "op");
980
    const char *arg = qdict_get_try_str(qdict, "arg");
981

    
982
    if (!op) {
983
        st_print_trace_file_status((FILE *)mon, &monitor_fprintf);
984
    } else if (!strcmp(op, "on")) {
985
        st_set_trace_file_enabled(true);
986
    } else if (!strcmp(op, "off")) {
987
        st_set_trace_file_enabled(false);
988
    } else if (!strcmp(op, "flush")) {
989
        st_flush_trace_buffer();
990
    } else if (!strcmp(op, "set")) {
991
        if (arg) {
992
            st_set_trace_file(arg);
993
        }
994
    } else {
995
        monitor_printf(mon, "unexpected argument \"%s\"\n", op);
996
        help_cmd(mon, "trace-file");
997
    }
998
}
999
#endif
1000

    
1001
static void user_monitor_complete(void *opaque, QObject *ret_data)
1002
{
1003
    MonitorCompletionData *data = (MonitorCompletionData *)opaque; 
1004

    
1005
    if (ret_data) {
1006
        data->user_print(data->mon, ret_data);
1007
    }
1008
    monitor_resume(data->mon);
1009
    g_free(data);
1010
}
1011

    
1012
static void qmp_monitor_complete(void *opaque, QObject *ret_data)
1013
{
1014
    monitor_protocol_emitter(opaque, ret_data);
1015
}
1016

    
1017
static int qmp_async_cmd_handler(Monitor *mon, const mon_cmd_t *cmd,
1018
                                 const QDict *params)
1019
{
1020
    return cmd->mhandler.cmd_async(mon, params, qmp_monitor_complete, mon);
1021
}
1022

    
1023
static void user_async_cmd_handler(Monitor *mon, const mon_cmd_t *cmd,
1024
                                   const QDict *params)
1025
{
1026
    int ret;
1027

    
1028
    MonitorCompletionData *cb_data = g_malloc(sizeof(*cb_data));
1029
    cb_data->mon = mon;
1030
    cb_data->user_print = cmd->user_print;
1031
    monitor_suspend(mon);
1032
    ret = cmd->mhandler.cmd_async(mon, params,
1033
                                  user_monitor_complete, cb_data);
1034
    if (ret < 0) {
1035
        monitor_resume(mon);
1036
        g_free(cb_data);
1037
    }
1038
}
1039

    
1040
static void do_info_help(Monitor *mon, const QDict *qdict)
1041
{
1042
    help_cmd(mon, "info");
1043
}
1044

    
1045
CommandInfoList *qmp_query_commands(Error **errp)
1046
{
1047
    CommandInfoList *info, *cmd_list = NULL;
1048
    const mon_cmd_t *cmd;
1049

    
1050
    for (cmd = qmp_cmds; cmd->name != NULL; cmd++) {
1051
        info = g_malloc0(sizeof(*info));
1052
        info->value = g_malloc0(sizeof(*info->value));
1053
        info->value->name = g_strdup(cmd->name);
1054

    
1055
        info->next = cmd_list;
1056
        cmd_list = info;
1057
    }
1058

    
1059
    return cmd_list;
1060
}
1061

    
1062
EventInfoList *qmp_query_events(Error **errp)
1063
{
1064
    EventInfoList *info, *ev_list = NULL;
1065
    MonitorEvent e;
1066

    
1067
    for (e = 0 ; e < QEVENT_MAX ; e++) {
1068
        const char *event_name = monitor_event_names[e];
1069
        assert(event_name != NULL);
1070
        info = g_malloc0(sizeof(*info));
1071
        info->value = g_malloc0(sizeof(*info->value));
1072
        info->value->name = g_strdup(event_name);
1073

    
1074
        info->next = ev_list;
1075
        ev_list = info;
1076
    }
1077

    
1078
    return ev_list;
1079
}
1080

    
1081
/* set the current CPU defined by the user */
1082
int monitor_set_cpu(int cpu_index)
1083
{
1084
    CPUState *cpu;
1085

    
1086
    cpu = qemu_get_cpu(cpu_index);
1087
    if (cpu == NULL) {
1088
        return -1;
1089
    }
1090
    cur_mon->mon_cpu = cpu;
1091
    return 0;
1092
}
1093

    
1094
static CPUArchState *mon_get_cpu(void)
1095
{
1096
    if (!cur_mon->mon_cpu) {
1097
        monitor_set_cpu(0);
1098
    }
1099
    cpu_synchronize_state(cur_mon->mon_cpu);
1100
    return cur_mon->mon_cpu->env_ptr;
1101
}
1102

    
1103
int monitor_get_cpu_index(void)
1104
{
1105
    CPUState *cpu = ENV_GET_CPU(mon_get_cpu());
1106
    return cpu->cpu_index;
1107
}
1108

    
1109
static void do_info_registers(Monitor *mon, const QDict *qdict)
1110
{
1111
    CPUState *cpu;
1112
    CPUArchState *env;
1113
    env = mon_get_cpu();
1114
    cpu = ENV_GET_CPU(env);
1115
    cpu_dump_state(cpu, (FILE *)mon, monitor_fprintf, CPU_DUMP_FPU);
1116
}
1117

    
1118
static void do_info_jit(Monitor *mon, const QDict *qdict)
1119
{
1120
    dump_exec_info((FILE *)mon, monitor_fprintf);
1121
}
1122

    
1123
static void do_info_history(Monitor *mon, const QDict *qdict)
1124
{
1125
    int i;
1126
    const char *str;
1127

    
1128
    if (!mon->rs)
1129
        return;
1130
    i = 0;
1131
    for(;;) {
1132
        str = readline_get_history(mon->rs, i);
1133
        if (!str)
1134
            break;
1135
        monitor_printf(mon, "%d: '%s'\n", i, str);
1136
        i++;
1137
    }
1138
}
1139

    
1140
static void do_info_cpu_stats(Monitor *mon, const QDict *qdict)
1141
{
1142
    CPUState *cpu;
1143
    CPUArchState *env;
1144

    
1145
    env = mon_get_cpu();
1146
    cpu = ENV_GET_CPU(env);
1147
    cpu_dump_statistics(cpu, (FILE *)mon, &monitor_fprintf, 0);
1148
}
1149

    
1150
static void do_trace_print_events(Monitor *mon, const QDict *qdict)
1151
{
1152
    trace_print_events((FILE *)mon, &monitor_fprintf);
1153
}
1154

    
1155
static int client_migrate_info(Monitor *mon, const QDict *qdict,
1156
                               MonitorCompletion cb, void *opaque)
1157
{
1158
    const char *protocol = qdict_get_str(qdict, "protocol");
1159
    const char *hostname = qdict_get_str(qdict, "hostname");
1160
    const char *subject  = qdict_get_try_str(qdict, "cert-subject");
1161
    int port             = qdict_get_try_int(qdict, "port", -1);
1162
    int tls_port         = qdict_get_try_int(qdict, "tls-port", -1);
1163
    int ret;
1164

    
1165
    if (strcmp(protocol, "spice") == 0) {
1166
        if (!using_spice) {
1167
            qerror_report(QERR_DEVICE_NOT_ACTIVE, "spice");
1168
            return -1;
1169
        }
1170

    
1171
        if (port == -1 && tls_port == -1) {
1172
            qerror_report(QERR_MISSING_PARAMETER, "port/tls-port");
1173
            return -1;
1174
        }
1175

    
1176
        ret = qemu_spice_migrate_info(hostname, port, tls_port, subject,
1177
                                      cb, opaque);
1178
        if (ret != 0) {
1179
            qerror_report(QERR_UNDEFINED_ERROR);
1180
            return -1;
1181
        }
1182
        return 0;
1183
    }
1184

    
1185
    qerror_report(QERR_INVALID_PARAMETER, "protocol");
1186
    return -1;
1187
}
1188

    
1189
static void do_logfile(Monitor *mon, const QDict *qdict)
1190
{
1191
    qemu_set_log_filename(qdict_get_str(qdict, "filename"));
1192
}
1193

    
1194
static void do_log(Monitor *mon, const QDict *qdict)
1195
{
1196
    int mask;
1197
    const char *items = qdict_get_str(qdict, "items");
1198

    
1199
    if (!strcmp(items, "none")) {
1200
        mask = 0;
1201
    } else {
1202
        mask = qemu_str_to_log_mask(items);
1203
        if (!mask) {
1204
            help_cmd(mon, "log");
1205
            return;
1206
        }
1207
    }
1208
    qemu_set_log(mask);
1209
}
1210

    
1211
static void do_singlestep(Monitor *mon, const QDict *qdict)
1212
{
1213
    const char *option = qdict_get_try_str(qdict, "option");
1214
    if (!option || !strcmp(option, "on")) {
1215
        singlestep = 1;
1216
    } else if (!strcmp(option, "off")) {
1217
        singlestep = 0;
1218
    } else {
1219
        monitor_printf(mon, "unexpected option %s\n", option);
1220
    }
1221
}
1222

    
1223
static void do_gdbserver(Monitor *mon, const QDict *qdict)
1224
{
1225
    const char *device = qdict_get_try_str(qdict, "device");
1226
    if (!device)
1227
        device = "tcp::" DEFAULT_GDBSTUB_PORT;
1228
    if (gdbserver_start(device) < 0) {
1229
        monitor_printf(mon, "Could not open gdbserver on device '%s'\n",
1230
                       device);
1231
    } else if (strcmp(device, "none") == 0) {
1232
        monitor_printf(mon, "Disabled gdbserver\n");
1233
    } else {
1234
        monitor_printf(mon, "Waiting for gdb connection on device '%s'\n",
1235
                       device);
1236
    }
1237
}
1238

    
1239
static void do_watchdog_action(Monitor *mon, const QDict *qdict)
1240
{
1241
    const char *action = qdict_get_str(qdict, "action");
1242
    if (select_watchdog_action(action) == -1) {
1243
        monitor_printf(mon, "Unknown watchdog action '%s'\n", action);
1244
    }
1245
}
1246

    
1247
static void monitor_printc(Monitor *mon, int c)
1248
{
1249
    monitor_printf(mon, "'");
1250
    switch(c) {
1251
    case '\'':
1252
        monitor_printf(mon, "\\'");
1253
        break;
1254
    case '\\':
1255
        monitor_printf(mon, "\\\\");
1256
        break;
1257
    case '\n':
1258
        monitor_printf(mon, "\\n");
1259
        break;
1260
    case '\r':
1261
        monitor_printf(mon, "\\r");
1262
        break;
1263
    default:
1264
        if (c >= 32 && c <= 126) {
1265
            monitor_printf(mon, "%c", c);
1266
        } else {
1267
            monitor_printf(mon, "\\x%02x", c);
1268
        }
1269
        break;
1270
    }
1271
    monitor_printf(mon, "'");
1272
}
1273

    
1274
static void memory_dump(Monitor *mon, int count, int format, int wsize,
1275
                        hwaddr addr, int is_physical)
1276
{
1277
    CPUArchState *env;
1278
    int l, line_size, i, max_digits, len;
1279
    uint8_t buf[16];
1280
    uint64_t v;
1281

    
1282
    if (format == 'i') {
1283
        int flags;
1284
        flags = 0;
1285
        env = mon_get_cpu();
1286
#ifdef TARGET_I386
1287
        if (wsize == 2) {
1288
            flags = 1;
1289
        } else if (wsize == 4) {
1290
            flags = 0;
1291
        } else {
1292
            /* as default we use the current CS size */
1293
            flags = 0;
1294
            if (env) {
1295
#ifdef TARGET_X86_64
1296
                if ((env->efer & MSR_EFER_LMA) &&
1297
                    (env->segs[R_CS].flags & DESC_L_MASK))
1298
                    flags = 2;
1299
                else
1300
#endif
1301
                if (!(env->segs[R_CS].flags & DESC_B_MASK))
1302
                    flags = 1;
1303
            }
1304
        }
1305
#endif
1306
        monitor_disas(mon, env, addr, count, is_physical, flags);
1307
        return;
1308
    }
1309

    
1310
    len = wsize * count;
1311
    if (wsize == 1)
1312
        line_size = 8;
1313
    else
1314
        line_size = 16;
1315
    max_digits = 0;
1316

    
1317
    switch(format) {
1318
    case 'o':
1319
        max_digits = (wsize * 8 + 2) / 3;
1320
        break;
1321
    default:
1322
    case 'x':
1323
        max_digits = (wsize * 8) / 4;
1324
        break;
1325
    case 'u':
1326
    case 'd':
1327
        max_digits = (wsize * 8 * 10 + 32) / 33;
1328
        break;
1329
    case 'c':
1330
        wsize = 1;
1331
        break;
1332
    }
1333

    
1334
    while (len > 0) {
1335
        if (is_physical)
1336
            monitor_printf(mon, TARGET_FMT_plx ":", addr);
1337
        else
1338
            monitor_printf(mon, TARGET_FMT_lx ":", (target_ulong)addr);
1339
        l = len;
1340
        if (l > line_size)
1341
            l = line_size;
1342
        if (is_physical) {
1343
            cpu_physical_memory_read(addr, buf, l);
1344
        } else {
1345
            env = mon_get_cpu();
1346
            if (cpu_memory_rw_debug(ENV_GET_CPU(env), addr, buf, l, 0) < 0) {
1347
                monitor_printf(mon, " Cannot access memory\n");
1348
                break;
1349
            }
1350
        }
1351
        i = 0;
1352
        while (i < l) {
1353
            switch(wsize) {
1354
            default:
1355
            case 1:
1356
                v = ldub_raw(buf + i);
1357
                break;
1358
            case 2:
1359
                v = lduw_raw(buf + i);
1360
                break;
1361
            case 4:
1362
                v = (uint32_t)ldl_raw(buf + i);
1363
                break;
1364
            case 8:
1365
                v = ldq_raw(buf + i);
1366
                break;
1367
            }
1368
            monitor_printf(mon, " ");
1369
            switch(format) {
1370
            case 'o':
1371
                monitor_printf(mon, "%#*" PRIo64, max_digits, v);
1372
                break;
1373
            case 'x':
1374
                monitor_printf(mon, "0x%0*" PRIx64, max_digits, v);
1375
                break;
1376
            case 'u':
1377
                monitor_printf(mon, "%*" PRIu64, max_digits, v);
1378
                break;
1379
            case 'd':
1380
                monitor_printf(mon, "%*" PRId64, max_digits, v);
1381
                break;
1382
            case 'c':
1383
                monitor_printc(mon, v);
1384
                break;
1385
            }
1386
            i += wsize;
1387
        }
1388
        monitor_printf(mon, "\n");
1389
        addr += l;
1390
        len -= l;
1391
    }
1392
}
1393

    
1394
static void do_memory_dump(Monitor *mon, const QDict *qdict)
1395
{
1396
    int count = qdict_get_int(qdict, "count");
1397
    int format = qdict_get_int(qdict, "format");
1398
    int size = qdict_get_int(qdict, "size");
1399
    target_long addr = qdict_get_int(qdict, "addr");
1400

    
1401
    memory_dump(mon, count, format, size, addr, 0);
1402
}
1403

    
1404
static void do_physical_memory_dump(Monitor *mon, const QDict *qdict)
1405
{
1406
    int count = qdict_get_int(qdict, "count");
1407
    int format = qdict_get_int(qdict, "format");
1408
    int size = qdict_get_int(qdict, "size");
1409
    hwaddr addr = qdict_get_int(qdict, "addr");
1410

    
1411
    memory_dump(mon, count, format, size, addr, 1);
1412
}
1413

    
1414
static void do_print(Monitor *mon, const QDict *qdict)
1415
{
1416
    int format = qdict_get_int(qdict, "format");
1417
    hwaddr val = qdict_get_int(qdict, "val");
1418

    
1419
    switch(format) {
1420
    case 'o':
1421
        monitor_printf(mon, "%#" HWADDR_PRIo, val);
1422
        break;
1423
    case 'x':
1424
        monitor_printf(mon, "%#" HWADDR_PRIx, val);
1425
        break;
1426
    case 'u':
1427
        monitor_printf(mon, "%" HWADDR_PRIu, val);
1428
        break;
1429
    default:
1430
    case 'd':
1431
        monitor_printf(mon, "%" HWADDR_PRId, val);
1432
        break;
1433
    case 'c':
1434
        monitor_printc(mon, val);
1435
        break;
1436
    }
1437
    monitor_printf(mon, "\n");
1438
}
1439

    
1440
static void do_sum(Monitor *mon, const QDict *qdict)
1441
{
1442
    uint32_t addr;
1443
    uint16_t sum;
1444
    uint32_t start = qdict_get_int(qdict, "start");
1445
    uint32_t size = qdict_get_int(qdict, "size");
1446

    
1447
    sum = 0;
1448
    for(addr = start; addr < (start + size); addr++) {
1449
        uint8_t val = ldub_phys(&address_space_memory, addr);
1450
        /* BSD sum algorithm ('sum' Unix command) */
1451
        sum = (sum >> 1) | (sum << 15);
1452
        sum += val;
1453
    }
1454
    monitor_printf(mon, "%05d\n", sum);
1455
}
1456

    
1457
static int mouse_button_state;
1458

    
1459
static void do_mouse_move(Monitor *mon, const QDict *qdict)
1460
{
1461
    int dx, dy, dz;
1462
    const char *dx_str = qdict_get_str(qdict, "dx_str");
1463
    const char *dy_str = qdict_get_str(qdict, "dy_str");
1464
    const char *dz_str = qdict_get_try_str(qdict, "dz_str");
1465
    dx = strtol(dx_str, NULL, 0);
1466
    dy = strtol(dy_str, NULL, 0);
1467
    dz = 0;
1468
    if (dz_str)
1469
        dz = strtol(dz_str, NULL, 0);
1470
    kbd_mouse_event(dx, dy, dz, mouse_button_state);
1471
}
1472

    
1473
static void do_mouse_button(Monitor *mon, const QDict *qdict)
1474
{
1475
    int button_state = qdict_get_int(qdict, "button_state");
1476
    mouse_button_state = button_state;
1477
    kbd_mouse_event(0, 0, 0, mouse_button_state);
1478
}
1479

    
1480
static void do_ioport_read(Monitor *mon, const QDict *qdict)
1481
{
1482
    int size = qdict_get_int(qdict, "size");
1483
    int addr = qdict_get_int(qdict, "addr");
1484
    int has_index = qdict_haskey(qdict, "index");
1485
    uint32_t val;
1486
    int suffix;
1487

    
1488
    if (has_index) {
1489
        int index = qdict_get_int(qdict, "index");
1490
        cpu_outb(addr & IOPORTS_MASK, index & 0xff);
1491
        addr++;
1492
    }
1493
    addr &= 0xffff;
1494

    
1495
    switch(size) {
1496
    default:
1497
    case 1:
1498
        val = cpu_inb(addr);
1499
        suffix = 'b';
1500
        break;
1501
    case 2:
1502
        val = cpu_inw(addr);
1503
        suffix = 'w';
1504
        break;
1505
    case 4:
1506
        val = cpu_inl(addr);
1507
        suffix = 'l';
1508
        break;
1509
    }
1510
    monitor_printf(mon, "port%c[0x%04x] = %#0*x\n",
1511
                   suffix, addr, size * 2, val);
1512
}
1513

    
1514
static void do_ioport_write(Monitor *mon, const QDict *qdict)
1515
{
1516
    int size = qdict_get_int(qdict, "size");
1517
    int addr = qdict_get_int(qdict, "addr");
1518
    int val = qdict_get_int(qdict, "val");
1519

    
1520
    addr &= IOPORTS_MASK;
1521

    
1522
    switch (size) {
1523
    default:
1524
    case 1:
1525
        cpu_outb(addr, val);
1526
        break;
1527
    case 2:
1528
        cpu_outw(addr, val);
1529
        break;
1530
    case 4:
1531
        cpu_outl(addr, val);
1532
        break;
1533
    }
1534
}
1535

    
1536
static void do_boot_set(Monitor *mon, const QDict *qdict)
1537
{
1538
    int res;
1539
    const char *bootdevice = qdict_get_str(qdict, "bootdevice");
1540

    
1541
    res = qemu_boot_set(bootdevice);
1542
    if (res == 0) {
1543
        monitor_printf(mon, "boot device list now set to %s\n", bootdevice);
1544
    } else if (res > 0) {
1545
        monitor_printf(mon, "setting boot device list failed\n");
1546
    } else {
1547
        monitor_printf(mon, "no function defined to set boot device list for "
1548
                       "this architecture\n");
1549
    }
1550
}
1551

    
1552
#if defined(TARGET_I386)
1553
static void print_pte(Monitor *mon, hwaddr addr,
1554
                      hwaddr pte,
1555
                      hwaddr mask)
1556
{
1557
#ifdef TARGET_X86_64
1558
    if (addr & (1ULL << 47)) {
1559
        addr |= -1LL << 48;
1560
    }
1561
#endif
1562
    monitor_printf(mon, TARGET_FMT_plx ": " TARGET_FMT_plx
1563
                   " %c%c%c%c%c%c%c%c%c\n",
1564
                   addr,
1565
                   pte & mask,
1566
                   pte & PG_NX_MASK ? 'X' : '-',
1567
                   pte & PG_GLOBAL_MASK ? 'G' : '-',
1568
                   pte & PG_PSE_MASK ? 'P' : '-',
1569
                   pte & PG_DIRTY_MASK ? 'D' : '-',
1570
                   pte & PG_ACCESSED_MASK ? 'A' : '-',
1571
                   pte & PG_PCD_MASK ? 'C' : '-',
1572
                   pte & PG_PWT_MASK ? 'T' : '-',
1573
                   pte & PG_USER_MASK ? 'U' : '-',
1574
                   pte & PG_RW_MASK ? 'W' : '-');
1575
}
1576

    
1577
static void tlb_info_32(Monitor *mon, CPUArchState *env)
1578
{
1579
    unsigned int l1, l2;
1580
    uint32_t pgd, pde, pte;
1581

    
1582
    pgd = env->cr[3] & ~0xfff;
1583
    for(l1 = 0; l1 < 1024; l1++) {
1584
        cpu_physical_memory_read(pgd + l1 * 4, &pde, 4);
1585
        pde = le32_to_cpu(pde);
1586
        if (pde & PG_PRESENT_MASK) {
1587
            if ((pde & PG_PSE_MASK) && (env->cr[4] & CR4_PSE_MASK)) {
1588
                /* 4M pages */
1589
                print_pte(mon, (l1 << 22), pde, ~((1 << 21) - 1));
1590
            } else {
1591
                for(l2 = 0; l2 < 1024; l2++) {
1592
                    cpu_physical_memory_read((pde & ~0xfff) + l2 * 4, &pte, 4);
1593
                    pte = le32_to_cpu(pte);
1594
                    if (pte & PG_PRESENT_MASK) {
1595
                        print_pte(mon, (l1 << 22) + (l2 << 12),
1596
                                  pte & ~PG_PSE_MASK,
1597
                                  ~0xfff);
1598
                    }
1599
                }
1600
            }
1601
        }
1602
    }
1603
}
1604

    
1605
static void tlb_info_pae32(Monitor *mon, CPUArchState *env)
1606
{
1607
    unsigned int l1, l2, l3;
1608
    uint64_t pdpe, pde, pte;
1609
    uint64_t pdp_addr, pd_addr, pt_addr;
1610

    
1611
    pdp_addr = env->cr[3] & ~0x1f;
1612
    for (l1 = 0; l1 < 4; l1++) {
1613
        cpu_physical_memory_read(pdp_addr + l1 * 8, &pdpe, 8);
1614
        pdpe = le64_to_cpu(pdpe);
1615
        if (pdpe & PG_PRESENT_MASK) {
1616
            pd_addr = pdpe & 0x3fffffffff000ULL;
1617
            for (l2 = 0; l2 < 512; l2++) {
1618
                cpu_physical_memory_read(pd_addr + l2 * 8, &pde, 8);
1619
                pde = le64_to_cpu(pde);
1620
                if (pde & PG_PRESENT_MASK) {
1621
                    if (pde & PG_PSE_MASK) {
1622
                        /* 2M pages with PAE, CR4.PSE is ignored */
1623
                        print_pte(mon, (l1 << 30 ) + (l2 << 21), pde,
1624
                                  ~((hwaddr)(1 << 20) - 1));
1625
                    } else {
1626
                        pt_addr = pde & 0x3fffffffff000ULL;
1627
                        for (l3 = 0; l3 < 512; l3++) {
1628
                            cpu_physical_memory_read(pt_addr + l3 * 8, &pte, 8);
1629
                            pte = le64_to_cpu(pte);
1630
                            if (pte & PG_PRESENT_MASK) {
1631
                                print_pte(mon, (l1 << 30 ) + (l2 << 21)
1632
                                          + (l3 << 12),
1633
                                          pte & ~PG_PSE_MASK,
1634
                                          ~(hwaddr)0xfff);
1635
                            }
1636
                        }
1637
                    }
1638
                }
1639
            }
1640
        }
1641
    }
1642
}
1643

    
1644
#ifdef TARGET_X86_64
1645
static void tlb_info_64(Monitor *mon, CPUArchState *env)
1646
{
1647
    uint64_t l1, l2, l3, l4;
1648
    uint64_t pml4e, pdpe, pde, pte;
1649
    uint64_t pml4_addr, pdp_addr, pd_addr, pt_addr;
1650

    
1651
    pml4_addr = env->cr[3] & 0x3fffffffff000ULL;
1652
    for (l1 = 0; l1 < 512; l1++) {
1653
        cpu_physical_memory_read(pml4_addr + l1 * 8, &pml4e, 8);
1654
        pml4e = le64_to_cpu(pml4e);
1655
        if (pml4e & PG_PRESENT_MASK) {
1656
            pdp_addr = pml4e & 0x3fffffffff000ULL;
1657
            for (l2 = 0; l2 < 512; l2++) {
1658
                cpu_physical_memory_read(pdp_addr + l2 * 8, &pdpe, 8);
1659
                pdpe = le64_to_cpu(pdpe);
1660
                if (pdpe & PG_PRESENT_MASK) {
1661
                    if (pdpe & PG_PSE_MASK) {
1662
                        /* 1G pages, CR4.PSE is ignored */
1663
                        print_pte(mon, (l1 << 39) + (l2 << 30), pdpe,
1664
                                  0x3ffffc0000000ULL);
1665
                    } else {
1666
                        pd_addr = pdpe & 0x3fffffffff000ULL;
1667
                        for (l3 = 0; l3 < 512; l3++) {
1668
                            cpu_physical_memory_read(pd_addr + l3 * 8, &pde, 8);
1669
                            pde = le64_to_cpu(pde);
1670
                            if (pde & PG_PRESENT_MASK) {
1671
                                if (pde & PG_PSE_MASK) {
1672
                                    /* 2M pages, CR4.PSE is ignored */
1673
                                    print_pte(mon, (l1 << 39) + (l2 << 30) +
1674
                                              (l3 << 21), pde,
1675
                                              0x3ffffffe00000ULL);
1676
                                } else {
1677
                                    pt_addr = pde & 0x3fffffffff000ULL;
1678
                                    for (l4 = 0; l4 < 512; l4++) {
1679
                                        cpu_physical_memory_read(pt_addr
1680
                                                                 + l4 * 8,
1681
                                                                 &pte, 8);
1682
                                        pte = le64_to_cpu(pte);
1683
                                        if (pte & PG_PRESENT_MASK) {
1684
                                            print_pte(mon, (l1 << 39) +
1685
                                                      (l2 << 30) +
1686
                                                      (l3 << 21) + (l4 << 12),
1687
                                                      pte & ~PG_PSE_MASK,
1688
                                                      0x3fffffffff000ULL);
1689
                                        }
1690
                                    }
1691
                                }
1692
                            }
1693
                        }
1694
                    }
1695
                }
1696
            }
1697
        }
1698
    }
1699
}
1700
#endif
1701

    
1702
static void tlb_info(Monitor *mon, const QDict *qdict)
1703
{
1704
    CPUArchState *env;
1705

    
1706
    env = mon_get_cpu();
1707

    
1708
    if (!(env->cr[0] & CR0_PG_MASK)) {
1709
        monitor_printf(mon, "PG disabled\n");
1710
        return;
1711
    }
1712
    if (env->cr[4] & CR4_PAE_MASK) {
1713
#ifdef TARGET_X86_64
1714
        if (env->hflags & HF_LMA_MASK) {
1715
            tlb_info_64(mon, env);
1716
        } else
1717
#endif
1718
        {
1719
            tlb_info_pae32(mon, env);
1720
        }
1721
    } else {
1722
        tlb_info_32(mon, env);
1723
    }
1724
}
1725

    
1726
static void mem_print(Monitor *mon, hwaddr *pstart,
1727
                      int *plast_prot,
1728
                      hwaddr end, int prot)
1729
{
1730
    int prot1;
1731
    prot1 = *plast_prot;
1732
    if (prot != prot1) {
1733
        if (*pstart != -1) {
1734
            monitor_printf(mon, TARGET_FMT_plx "-" TARGET_FMT_plx " "
1735
                           TARGET_FMT_plx " %c%c%c\n",
1736
                           *pstart, end, end - *pstart,
1737
                           prot1 & PG_USER_MASK ? 'u' : '-',
1738
                           'r',
1739
                           prot1 & PG_RW_MASK ? 'w' : '-');
1740
        }
1741
        if (prot != 0)
1742
            *pstart = end;
1743
        else
1744
            *pstart = -1;
1745
        *plast_prot = prot;
1746
    }
1747
}
1748

    
1749
static void mem_info_32(Monitor *mon, CPUArchState *env)
1750
{
1751
    unsigned int l1, l2;
1752
    int prot, last_prot;
1753
    uint32_t pgd, pde, pte;
1754
    hwaddr start, end;
1755

    
1756
    pgd = env->cr[3] & ~0xfff;
1757
    last_prot = 0;
1758
    start = -1;
1759
    for(l1 = 0; l1 < 1024; l1++) {
1760
        cpu_physical_memory_read(pgd + l1 * 4, &pde, 4);
1761
        pde = le32_to_cpu(pde);
1762
        end = l1 << 22;
1763
        if (pde & PG_PRESENT_MASK) {
1764
            if ((pde & PG_PSE_MASK) && (env->cr[4] & CR4_PSE_MASK)) {
1765
                prot = pde & (PG_USER_MASK | PG_RW_MASK | PG_PRESENT_MASK);
1766
                mem_print(mon, &start, &last_prot, end, prot);
1767
            } else {
1768
                for(l2 = 0; l2 < 1024; l2++) {
1769
                    cpu_physical_memory_read((pde & ~0xfff) + l2 * 4, &pte, 4);
1770
                    pte = le32_to_cpu(pte);
1771
                    end = (l1 << 22) + (l2 << 12);
1772
                    if (pte & PG_PRESENT_MASK) {
1773
                        prot = pte & pde &
1774
                            (PG_USER_MASK | PG_RW_MASK | PG_PRESENT_MASK);
1775
                    } else {
1776
                        prot = 0;
1777
                    }
1778
                    mem_print(mon, &start, &last_prot, end, prot);
1779
                }
1780
            }
1781
        } else {
1782
            prot = 0;
1783
            mem_print(mon, &start, &last_prot, end, prot);
1784
        }
1785
    }
1786
    /* Flush last range */
1787
    mem_print(mon, &start, &last_prot, (hwaddr)1 << 32, 0);
1788
}
1789

    
1790
static void mem_info_pae32(Monitor *mon, CPUArchState *env)
1791
{
1792
    unsigned int l1, l2, l3;
1793
    int prot, last_prot;
1794
    uint64_t pdpe, pde, pte;
1795
    uint64_t pdp_addr, pd_addr, pt_addr;
1796
    hwaddr start, end;
1797

    
1798
    pdp_addr = env->cr[3] & ~0x1f;
1799
    last_prot = 0;
1800
    start = -1;
1801
    for (l1 = 0; l1 < 4; l1++) {
1802
        cpu_physical_memory_read(pdp_addr + l1 * 8, &pdpe, 8);
1803
        pdpe = le64_to_cpu(pdpe);
1804
        end = l1 << 30;
1805
        if (pdpe & PG_PRESENT_MASK) {
1806
            pd_addr = pdpe & 0x3fffffffff000ULL;
1807
            for (l2 = 0; l2 < 512; l2++) {
1808
                cpu_physical_memory_read(pd_addr + l2 * 8, &pde, 8);
1809
                pde = le64_to_cpu(pde);
1810
                end = (l1 << 30) + (l2 << 21);
1811
                if (pde & PG_PRESENT_MASK) {
1812
                    if (pde & PG_PSE_MASK) {
1813
                        prot = pde & (PG_USER_MASK | PG_RW_MASK |
1814
                                      PG_PRESENT_MASK);
1815
                        mem_print(mon, &start, &last_prot, end, prot);
1816
                    } else {
1817
                        pt_addr = pde & 0x3fffffffff000ULL;
1818
                        for (l3 = 0; l3 < 512; l3++) {
1819
                            cpu_physical_memory_read(pt_addr + l3 * 8, &pte, 8);
1820
                            pte = le64_to_cpu(pte);
1821
                            end = (l1 << 30) + (l2 << 21) + (l3 << 12);
1822
                            if (pte & PG_PRESENT_MASK) {
1823
                                prot = pte & pde & (PG_USER_MASK | PG_RW_MASK |
1824
                                                    PG_PRESENT_MASK);
1825
                            } else {
1826
                                prot = 0;
1827
                            }
1828
                            mem_print(mon, &start, &last_prot, end, prot);
1829
                        }
1830
                    }
1831
                } else {
1832
                    prot = 0;
1833
                    mem_print(mon, &start, &last_prot, end, prot);
1834
                }
1835
            }
1836
        } else {
1837
            prot = 0;
1838
            mem_print(mon, &start, &last_prot, end, prot);
1839
        }
1840
    }
1841
    /* Flush last range */
1842
    mem_print(mon, &start, &last_prot, (hwaddr)1 << 32, 0);
1843
}
1844

    
1845

    
1846
#ifdef TARGET_X86_64
1847
static void mem_info_64(Monitor *mon, CPUArchState *env)
1848
{
1849
    int prot, last_prot;
1850
    uint64_t l1, l2, l3, l4;
1851
    uint64_t pml4e, pdpe, pde, pte;
1852
    uint64_t pml4_addr, pdp_addr, pd_addr, pt_addr, start, end;
1853

    
1854
    pml4_addr = env->cr[3] & 0x3fffffffff000ULL;
1855
    last_prot = 0;
1856
    start = -1;
1857
    for (l1 = 0; l1 < 512; l1++) {
1858
        cpu_physical_memory_read(pml4_addr + l1 * 8, &pml4e, 8);
1859
        pml4e = le64_to_cpu(pml4e);
1860
        end = l1 << 39;
1861
        if (pml4e & PG_PRESENT_MASK) {
1862
            pdp_addr = pml4e & 0x3fffffffff000ULL;
1863
            for (l2 = 0; l2 < 512; l2++) {
1864
                cpu_physical_memory_read(pdp_addr + l2 * 8, &pdpe, 8);
1865
                pdpe = le64_to_cpu(pdpe);
1866
                end = (l1 << 39) + (l2 << 30);
1867
                if (pdpe & PG_PRESENT_MASK) {
1868
                    if (pdpe & PG_PSE_MASK) {
1869
                        prot = pdpe & (PG_USER_MASK | PG_RW_MASK |
1870
                                       PG_PRESENT_MASK);
1871
                        prot &= pml4e;
1872
                        mem_print(mon, &start, &last_prot, end, prot);
1873
                    } else {
1874
                        pd_addr = pdpe & 0x3fffffffff000ULL;
1875
                        for (l3 = 0; l3 < 512; l3++) {
1876
                            cpu_physical_memory_read(pd_addr + l3 * 8, &pde, 8);
1877
                            pde = le64_to_cpu(pde);
1878
                            end = (l1 << 39) + (l2 << 30) + (l3 << 21);
1879
                            if (pde & PG_PRESENT_MASK) {
1880
                                if (pde & PG_PSE_MASK) {
1881
                                    prot = pde & (PG_USER_MASK | PG_RW_MASK |
1882
                                                  PG_PRESENT_MASK);
1883
                                    prot &= pml4e & pdpe;
1884
                                    mem_print(mon, &start, &last_prot, end, prot);
1885
                                } else {
1886
                                    pt_addr = pde & 0x3fffffffff000ULL;
1887
                                    for (l4 = 0; l4 < 512; l4++) {
1888
                                        cpu_physical_memory_read(pt_addr
1889
                                                                 + l4 * 8,
1890
                                                                 &pte, 8);
1891
                                        pte = le64_to_cpu(pte);
1892
                                        end = (l1 << 39) + (l2 << 30) +
1893
                                            (l3 << 21) + (l4 << 12);
1894
                                        if (pte & PG_PRESENT_MASK) {
1895
                                            prot = pte & (PG_USER_MASK | PG_RW_MASK |
1896
                                                          PG_PRESENT_MASK);
1897
                                            prot &= pml4e & pdpe & pde;
1898
                                        } else {
1899
                                            prot = 0;
1900
                                        }
1901
                                        mem_print(mon, &start, &last_prot, end, prot);
1902
                                    }
1903
                                }
1904
                            } else {
1905
                                prot = 0;
1906
                                mem_print(mon, &start, &last_prot, end, prot);
1907
                            }
1908
                        }
1909
                    }
1910
                } else {
1911
                    prot = 0;
1912
                    mem_print(mon, &start, &last_prot, end, prot);
1913
                }
1914
            }
1915
        } else {
1916
            prot = 0;
1917
            mem_print(mon, &start, &last_prot, end, prot);
1918
        }
1919
    }
1920
    /* Flush last range */
1921
    mem_print(mon, &start, &last_prot, (hwaddr)1 << 48, 0);
1922
}
1923
#endif
1924

    
1925
static void mem_info(Monitor *mon, const QDict *qdict)
1926
{
1927
    CPUArchState *env;
1928

    
1929
    env = mon_get_cpu();
1930

    
1931
    if (!(env->cr[0] & CR0_PG_MASK)) {
1932
        monitor_printf(mon, "PG disabled\n");
1933
        return;
1934
    }
1935
    if (env->cr[4] & CR4_PAE_MASK) {
1936
#ifdef TARGET_X86_64
1937
        if (env->hflags & HF_LMA_MASK) {
1938
            mem_info_64(mon, env);
1939
        } else
1940
#endif
1941
        {
1942
            mem_info_pae32(mon, env);
1943
        }
1944
    } else {
1945
        mem_info_32(mon, env);
1946
    }
1947
}
1948
#endif
1949

    
1950
#if defined(TARGET_SH4)
1951

    
1952
static void print_tlb(Monitor *mon, int idx, tlb_t *tlb)
1953
{
1954
    monitor_printf(mon, " tlb%i:\t"
1955
                   "asid=%hhu vpn=%x\tppn=%x\tsz=%hhu size=%u\t"
1956
                   "v=%hhu shared=%hhu cached=%hhu prot=%hhu "
1957
                   "dirty=%hhu writethrough=%hhu\n",
1958
                   idx,
1959
                   tlb->asid, tlb->vpn, tlb->ppn, tlb->sz, tlb->size,
1960
                   tlb->v, tlb->sh, tlb->c, tlb->pr,
1961
                   tlb->d, tlb->wt);
1962
}
1963

    
1964
static void tlb_info(Monitor *mon, const QDict *qdict)
1965
{
1966
    CPUArchState *env = mon_get_cpu();
1967
    int i;
1968

    
1969
    monitor_printf (mon, "ITLB:\n");
1970
    for (i = 0 ; i < ITLB_SIZE ; i++)
1971
        print_tlb (mon, i, &env->itlb[i]);
1972
    monitor_printf (mon, "UTLB:\n");
1973
    for (i = 0 ; i < UTLB_SIZE ; i++)
1974
        print_tlb (mon, i, &env->utlb[i]);
1975
}
1976

    
1977
#endif
1978

    
1979
#if defined(TARGET_SPARC) || defined(TARGET_PPC) || defined(TARGET_XTENSA)
1980
static void tlb_info(Monitor *mon, const QDict *qdict)
1981
{
1982
    CPUArchState *env1 = mon_get_cpu();
1983

    
1984
    dump_mmu((FILE*)mon, (fprintf_function)monitor_printf, env1);
1985
}
1986
#endif
1987

    
1988
static void do_info_mtree(Monitor *mon, const QDict *qdict)
1989
{
1990
    mtree_info((fprintf_function)monitor_printf, mon);
1991
}
1992

    
1993
static void do_info_numa(Monitor *mon, const QDict *qdict)
1994
{
1995
    int i;
1996
    CPUState *cpu;
1997

    
1998
    monitor_printf(mon, "%d nodes\n", nb_numa_nodes);
1999
    for (i = 0; i < nb_numa_nodes; i++) {
2000
        monitor_printf(mon, "node %d cpus:", i);
2001
        CPU_FOREACH(cpu) {
2002
            if (cpu->numa_node == i) {
2003
                monitor_printf(mon, " %d", cpu->cpu_index);
2004
            }
2005
        }
2006
        monitor_printf(mon, "\n");
2007
        monitor_printf(mon, "node %d size: %" PRId64 " MB\n", i,
2008
            node_mem[i] >> 20);
2009
    }
2010
}
2011

    
2012
#ifdef CONFIG_PROFILER
2013

    
2014
int64_t qemu_time;
2015
int64_t dev_time;
2016

    
2017
static void do_info_profile(Monitor *mon, const QDict *qdict)
2018
{
2019
    int64_t total;
2020
    total = qemu_time;
2021
    if (total == 0)
2022
        total = 1;
2023
    monitor_printf(mon, "async time  %" PRId64 " (%0.3f)\n",
2024
                   dev_time, dev_time / (double)get_ticks_per_sec());
2025
    monitor_printf(mon, "qemu time   %" PRId64 " (%0.3f)\n",
2026
                   qemu_time, qemu_time / (double)get_ticks_per_sec());
2027
    qemu_time = 0;
2028
    dev_time = 0;
2029
}
2030
#else
2031
static void do_info_profile(Monitor *mon, const QDict *qdict)
2032
{
2033
    monitor_printf(mon, "Internal profiler not compiled\n");
2034
}
2035
#endif
2036

    
2037
/* Capture support */
2038
static QLIST_HEAD (capture_list_head, CaptureState) capture_head;
2039

    
2040
static void do_info_capture(Monitor *mon, const QDict *qdict)
2041
{
2042
    int i;
2043
    CaptureState *s;
2044

    
2045
    for (s = capture_head.lh_first, i = 0; s; s = s->entries.le_next, ++i) {
2046
        monitor_printf(mon, "[%d]: ", i);
2047
        s->ops.info (s->opaque);
2048
    }
2049
}
2050

    
2051
static void do_stop_capture(Monitor *mon, const QDict *qdict)
2052
{
2053
    int i;
2054
    int n = qdict_get_int(qdict, "n");
2055
    CaptureState *s;
2056

    
2057
    for (s = capture_head.lh_first, i = 0; s; s = s->entries.le_next, ++i) {
2058
        if (i == n) {
2059
            s->ops.destroy (s->opaque);
2060
            QLIST_REMOVE (s, entries);
2061
            g_free (s);
2062
            return;
2063
        }
2064
    }
2065
}
2066

    
2067
static void do_wav_capture(Monitor *mon, const QDict *qdict)
2068
{
2069
    const char *path = qdict_get_str(qdict, "path");
2070
    int has_freq = qdict_haskey(qdict, "freq");
2071
    int freq = qdict_get_try_int(qdict, "freq", -1);
2072
    int has_bits = qdict_haskey(qdict, "bits");
2073
    int bits = qdict_get_try_int(qdict, "bits", -1);
2074
    int has_channels = qdict_haskey(qdict, "nchannels");
2075
    int nchannels = qdict_get_try_int(qdict, "nchannels", -1);
2076
    CaptureState *s;
2077

    
2078
    s = g_malloc0 (sizeof (*s));
2079

    
2080
    freq = has_freq ? freq : 44100;
2081
    bits = has_bits ? bits : 16;
2082
    nchannels = has_channels ? nchannels : 2;
2083

    
2084
    if (wav_start_capture (s, path, freq, bits, nchannels)) {
2085
        monitor_printf(mon, "Failed to add wave capture\n");
2086
        g_free (s);
2087
        return;
2088
    }
2089
    QLIST_INSERT_HEAD (&capture_head, s, entries);
2090
}
2091

    
2092
static qemu_acl *find_acl(Monitor *mon, const char *name)
2093
{
2094
    qemu_acl *acl = qemu_acl_find(name);
2095

    
2096
    if (!acl) {
2097
        monitor_printf(mon, "acl: unknown list '%s'\n", name);
2098
    }
2099
    return acl;
2100
}
2101

    
2102
static void do_acl_show(Monitor *mon, const QDict *qdict)
2103
{
2104
    const char *aclname = qdict_get_str(qdict, "aclname");
2105
    qemu_acl *acl = find_acl(mon, aclname);
2106
    qemu_acl_entry *entry;
2107
    int i = 0;
2108

    
2109
    if (acl) {
2110
        monitor_printf(mon, "policy: %s\n",
2111
                       acl->defaultDeny ? "deny" : "allow");
2112
        QTAILQ_FOREACH(entry, &acl->entries, next) {
2113
            i++;
2114
            monitor_printf(mon, "%d: %s %s\n", i,
2115
                           entry->deny ? "deny" : "allow", entry->match);
2116
        }
2117
    }
2118
}
2119

    
2120
static void do_acl_reset(Monitor *mon, const QDict *qdict)
2121
{
2122
    const char *aclname = qdict_get_str(qdict, "aclname");
2123
    qemu_acl *acl = find_acl(mon, aclname);
2124

    
2125
    if (acl) {
2126
        qemu_acl_reset(acl);
2127
        monitor_printf(mon, "acl: removed all rules\n");
2128
    }
2129
}
2130

    
2131
static void do_acl_policy(Monitor *mon, const QDict *qdict)
2132
{
2133
    const char *aclname = qdict_get_str(qdict, "aclname");
2134
    const char *policy = qdict_get_str(qdict, "policy");
2135
    qemu_acl *acl = find_acl(mon, aclname);
2136

    
2137
    if (acl) {
2138
        if (strcmp(policy, "allow") == 0) {
2139
            acl->defaultDeny = 0;
2140
            monitor_printf(mon, "acl: policy set to 'allow'\n");
2141
        } else if (strcmp(policy, "deny") == 0) {
2142
            acl->defaultDeny = 1;
2143
            monitor_printf(mon, "acl: policy set to 'deny'\n");
2144
        } else {
2145
            monitor_printf(mon, "acl: unknown policy '%s', "
2146
                           "expected 'deny' or 'allow'\n", policy);
2147
        }
2148
    }
2149
}
2150

    
2151
static void do_acl_add(Monitor *mon, const QDict *qdict)
2152
{
2153
    const char *aclname = qdict_get_str(qdict, "aclname");
2154
    const char *match = qdict_get_str(qdict, "match");
2155
    const char *policy = qdict_get_str(qdict, "policy");
2156
    int has_index = qdict_haskey(qdict, "index");
2157
    int index = qdict_get_try_int(qdict, "index", -1);
2158
    qemu_acl *acl = find_acl(mon, aclname);
2159
    int deny, ret;
2160

    
2161
    if (acl) {
2162
        if (strcmp(policy, "allow") == 0) {
2163
            deny = 0;
2164
        } else if (strcmp(policy, "deny") == 0) {
2165
            deny = 1;
2166
        } else {
2167
            monitor_printf(mon, "acl: unknown policy '%s', "
2168
                           "expected 'deny' or 'allow'\n", policy);
2169
            return;
2170
        }
2171
        if (has_index)
2172
            ret = qemu_acl_insert(acl, deny, match, index);
2173
        else
2174
            ret = qemu_acl_append(acl, deny, match);
2175
        if (ret < 0)
2176
            monitor_printf(mon, "acl: unable to add acl entry\n");
2177
        else
2178
            monitor_printf(mon, "acl: added rule at position %d\n", ret);
2179
    }
2180
}
2181

    
2182
static void do_acl_remove(Monitor *mon, const QDict *qdict)
2183
{
2184
    const char *aclname = qdict_get_str(qdict, "aclname");
2185
    const char *match = qdict_get_str(qdict, "match");
2186
    qemu_acl *acl = find_acl(mon, aclname);
2187
    int ret;
2188

    
2189
    if (acl) {
2190
        ret = qemu_acl_remove(acl, match);
2191
        if (ret < 0)
2192
            monitor_printf(mon, "acl: no matching acl entry\n");
2193
        else
2194
            monitor_printf(mon, "acl: removed rule at position %d\n", ret);
2195
    }
2196
}
2197

    
2198
#if defined(TARGET_I386)
2199
static void do_inject_mce(Monitor *mon, const QDict *qdict)
2200
{
2201
    X86CPU *cpu;
2202
    CPUState *cs;
2203
    int cpu_index = qdict_get_int(qdict, "cpu_index");
2204
    int bank = qdict_get_int(qdict, "bank");
2205
    uint64_t status = qdict_get_int(qdict, "status");
2206
    uint64_t mcg_status = qdict_get_int(qdict, "mcg_status");
2207
    uint64_t addr = qdict_get_int(qdict, "addr");
2208
    uint64_t misc = qdict_get_int(qdict, "misc");
2209
    int flags = MCE_INJECT_UNCOND_AO;
2210

    
2211
    if (qdict_get_try_bool(qdict, "broadcast", 0)) {
2212
        flags |= MCE_INJECT_BROADCAST;
2213
    }
2214
    cs = qemu_get_cpu(cpu_index);
2215
    if (cs != NULL) {
2216
        cpu = X86_CPU(cs);
2217
        cpu_x86_inject_mce(mon, cpu, bank, status, mcg_status, addr, misc,
2218
                           flags);
2219
    }
2220
}
2221
#endif
2222

    
2223
void qmp_getfd(const char *fdname, Error **errp)
2224
{
2225
    mon_fd_t *monfd;
2226
    int fd;
2227

    
2228
    fd = qemu_chr_fe_get_msgfd(cur_mon->chr);
2229
    if (fd == -1) {
2230
        error_set(errp, QERR_FD_NOT_SUPPLIED);
2231
        return;
2232
    }
2233

    
2234
    if (qemu_isdigit(fdname[0])) {
2235
        error_set(errp, QERR_INVALID_PARAMETER_VALUE, "fdname",
2236
                  "a name not starting with a digit");
2237
        return;
2238
    }
2239

    
2240
    QLIST_FOREACH(monfd, &cur_mon->fds, next) {
2241
        if (strcmp(monfd->name, fdname) != 0) {
2242
            continue;
2243
        }
2244

    
2245
        close(monfd->fd);
2246
        monfd->fd = fd;
2247
        return;
2248
    }
2249

    
2250
    monfd = g_malloc0(sizeof(mon_fd_t));
2251
    monfd->name = g_strdup(fdname);
2252
    monfd->fd = fd;
2253

    
2254
    QLIST_INSERT_HEAD(&cur_mon->fds, monfd, next);
2255
}
2256

    
2257
void qmp_closefd(const char *fdname, Error **errp)
2258
{
2259
    mon_fd_t *monfd;
2260

    
2261
    QLIST_FOREACH(monfd, &cur_mon->fds, next) {
2262
        if (strcmp(monfd->name, fdname) != 0) {
2263
            continue;
2264
        }
2265

    
2266
        QLIST_REMOVE(monfd, next);
2267
        close(monfd->fd);
2268
        g_free(monfd->name);
2269
        g_free(monfd);
2270
        return;
2271
    }
2272

    
2273
    error_set(errp, QERR_FD_NOT_FOUND, fdname);
2274
}
2275

    
2276
static void do_loadvm(Monitor *mon, const QDict *qdict)
2277
{
2278
    int saved_vm_running  = runstate_is_running();
2279
    const char *name = qdict_get_str(qdict, "name");
2280

    
2281
    vm_stop(RUN_STATE_RESTORE_VM);
2282

    
2283
    if (load_vmstate(name) == 0 && saved_vm_running) {
2284
        vm_start();
2285
    }
2286
}
2287

    
2288
int monitor_get_fd(Monitor *mon, const char *fdname, Error **errp)
2289
{
2290
    mon_fd_t *monfd;
2291

    
2292
    QLIST_FOREACH(monfd, &mon->fds, next) {
2293
        int fd;
2294

    
2295
        if (strcmp(monfd->name, fdname) != 0) {
2296
            continue;
2297
        }
2298

    
2299
        fd = monfd->fd;
2300

    
2301
        /* caller takes ownership of fd */
2302
        QLIST_REMOVE(monfd, next);
2303
        g_free(monfd->name);
2304
        g_free(monfd);
2305

    
2306
        return fd;
2307
    }
2308

    
2309
    error_setg(errp, "File descriptor named '%s' has not been found", fdname);
2310
    return -1;
2311
}
2312

    
2313
static void monitor_fdset_cleanup(MonFdset *mon_fdset)
2314
{
2315
    MonFdsetFd *mon_fdset_fd;
2316
    MonFdsetFd *mon_fdset_fd_next;
2317

    
2318
    QLIST_FOREACH_SAFE(mon_fdset_fd, &mon_fdset->fds, next, mon_fdset_fd_next) {
2319
        if ((mon_fdset_fd->removed ||
2320
                (QLIST_EMPTY(&mon_fdset->dup_fds) && mon_refcount == 0)) &&
2321
                runstate_is_running()) {
2322
            close(mon_fdset_fd->fd);
2323
            g_free(mon_fdset_fd->opaque);
2324
            QLIST_REMOVE(mon_fdset_fd, next);
2325
            g_free(mon_fdset_fd);
2326
        }
2327
    }
2328

    
2329
    if (QLIST_EMPTY(&mon_fdset->fds) && QLIST_EMPTY(&mon_fdset->dup_fds)) {
2330
        QLIST_REMOVE(mon_fdset, next);
2331
        g_free(mon_fdset);
2332
    }
2333
}
2334

    
2335
static void monitor_fdsets_cleanup(void)
2336
{
2337
    MonFdset *mon_fdset;
2338
    MonFdset *mon_fdset_next;
2339

    
2340
    QLIST_FOREACH_SAFE(mon_fdset, &mon_fdsets, next, mon_fdset_next) {
2341
        monitor_fdset_cleanup(mon_fdset);
2342
    }
2343
}
2344

    
2345
AddfdInfo *qmp_add_fd(bool has_fdset_id, int64_t fdset_id, bool has_opaque,
2346
                      const char *opaque, Error **errp)
2347
{
2348
    int fd;
2349
    Monitor *mon = cur_mon;
2350
    AddfdInfo *fdinfo;
2351

    
2352
    fd = qemu_chr_fe_get_msgfd(mon->chr);
2353
    if (fd == -1) {
2354
        error_set(errp, QERR_FD_NOT_SUPPLIED);
2355
        goto error;
2356
    }
2357

    
2358
    fdinfo = monitor_fdset_add_fd(fd, has_fdset_id, fdset_id,
2359
                                  has_opaque, opaque, errp);
2360
    if (fdinfo) {
2361
        return fdinfo;
2362
    }
2363

    
2364
error:
2365
    if (fd != -1) {
2366
        close(fd);
2367
    }
2368
    return NULL;
2369
}
2370

    
2371
void qmp_remove_fd(int64_t fdset_id, bool has_fd, int64_t fd, Error **errp)
2372
{
2373
    MonFdset *mon_fdset;
2374
    MonFdsetFd *mon_fdset_fd;
2375
    char fd_str[60];
2376

    
2377
    QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2378
        if (mon_fdset->id != fdset_id) {
2379
            continue;
2380
        }
2381
        QLIST_FOREACH(mon_fdset_fd, &mon_fdset->fds, next) {
2382
            if (has_fd) {
2383
                if (mon_fdset_fd->fd != fd) {
2384
                    continue;
2385
                }
2386
                mon_fdset_fd->removed = true;
2387
                break;
2388
            } else {
2389
                mon_fdset_fd->removed = true;
2390
            }
2391
        }
2392
        if (has_fd && !mon_fdset_fd) {
2393
            goto error;
2394
        }
2395
        monitor_fdset_cleanup(mon_fdset);
2396
        return;
2397
    }
2398

    
2399
error:
2400
    if (has_fd) {
2401
        snprintf(fd_str, sizeof(fd_str), "fdset-id:%" PRId64 ", fd:%" PRId64,
2402
                 fdset_id, fd);
2403
    } else {
2404
        snprintf(fd_str, sizeof(fd_str), "fdset-id:%" PRId64, fdset_id);
2405
    }
2406
    error_set(errp, QERR_FD_NOT_FOUND, fd_str);
2407
}
2408

    
2409
FdsetInfoList *qmp_query_fdsets(Error **errp)
2410
{
2411
    MonFdset *mon_fdset;
2412
    MonFdsetFd *mon_fdset_fd;
2413
    FdsetInfoList *fdset_list = NULL;
2414

    
2415
    QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2416
        FdsetInfoList *fdset_info = g_malloc0(sizeof(*fdset_info));
2417
        FdsetFdInfoList *fdsetfd_list = NULL;
2418

    
2419
        fdset_info->value = g_malloc0(sizeof(*fdset_info->value));
2420
        fdset_info->value->fdset_id = mon_fdset->id;
2421

    
2422
        QLIST_FOREACH(mon_fdset_fd, &mon_fdset->fds, next) {
2423
            FdsetFdInfoList *fdsetfd_info;
2424

    
2425
            fdsetfd_info = g_malloc0(sizeof(*fdsetfd_info));
2426
            fdsetfd_info->value = g_malloc0(sizeof(*fdsetfd_info->value));
2427
            fdsetfd_info->value->fd = mon_fdset_fd->fd;
2428
            if (mon_fdset_fd->opaque) {
2429
                fdsetfd_info->value->has_opaque = true;
2430
                fdsetfd_info->value->opaque = g_strdup(mon_fdset_fd->opaque);
2431
            } else {
2432
                fdsetfd_info->value->has_opaque = false;
2433
            }
2434

    
2435
            fdsetfd_info->next = fdsetfd_list;
2436
            fdsetfd_list = fdsetfd_info;
2437
        }
2438

    
2439
        fdset_info->value->fds = fdsetfd_list;
2440

    
2441
        fdset_info->next = fdset_list;
2442
        fdset_list = fdset_info;
2443
    }
2444

    
2445
    return fdset_list;
2446
}
2447

    
2448
AddfdInfo *monitor_fdset_add_fd(int fd, bool has_fdset_id, int64_t fdset_id,
2449
                                bool has_opaque, const char *opaque,
2450
                                Error **errp)
2451
{
2452
    MonFdset *mon_fdset = NULL;
2453
    MonFdsetFd *mon_fdset_fd;
2454
    AddfdInfo *fdinfo;
2455

    
2456
    if (has_fdset_id) {
2457
        QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2458
            /* Break if match found or match impossible due to ordering by ID */
2459
            if (fdset_id <= mon_fdset->id) {
2460
                if (fdset_id < mon_fdset->id) {
2461
                    mon_fdset = NULL;
2462
                }
2463
                break;
2464
            }
2465
        }
2466
    }
2467

    
2468
    if (mon_fdset == NULL) {
2469
        int64_t fdset_id_prev = -1;
2470
        MonFdset *mon_fdset_cur = QLIST_FIRST(&mon_fdsets);
2471

    
2472
        if (has_fdset_id) {
2473
            if (fdset_id < 0) {
2474
                error_set(errp, QERR_INVALID_PARAMETER_VALUE, "fdset-id",
2475
                          "a non-negative value");
2476
                return NULL;
2477
            }
2478
            /* Use specified fdset ID */
2479
            QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2480
                mon_fdset_cur = mon_fdset;
2481
                if (fdset_id < mon_fdset_cur->id) {
2482
                    break;
2483
                }
2484
            }
2485
        } else {
2486
            /* Use first available fdset ID */
2487
            QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2488
                mon_fdset_cur = mon_fdset;
2489
                if (fdset_id_prev == mon_fdset_cur->id - 1) {
2490
                    fdset_id_prev = mon_fdset_cur->id;
2491
                    continue;
2492
                }
2493
                break;
2494
            }
2495
        }
2496

    
2497
        mon_fdset = g_malloc0(sizeof(*mon_fdset));
2498
        if (has_fdset_id) {
2499
            mon_fdset->id = fdset_id;
2500
        } else {
2501
            mon_fdset->id = fdset_id_prev + 1;
2502
        }
2503

    
2504
        /* The fdset list is ordered by fdset ID */
2505
        if (!mon_fdset_cur) {
2506
            QLIST_INSERT_HEAD(&mon_fdsets, mon_fdset, next);
2507
        } else if (mon_fdset->id < mon_fdset_cur->id) {
2508
            QLIST_INSERT_BEFORE(mon_fdset_cur, mon_fdset, next);
2509
        } else {
2510
            QLIST_INSERT_AFTER(mon_fdset_cur, mon_fdset, next);
2511
        }
2512
    }
2513

    
2514
    mon_fdset_fd = g_malloc0(sizeof(*mon_fdset_fd));
2515
    mon_fdset_fd->fd = fd;
2516
    mon_fdset_fd->removed = false;
2517
    if (has_opaque) {
2518
        mon_fdset_fd->opaque = g_strdup(opaque);
2519
    }
2520
    QLIST_INSERT_HEAD(&mon_fdset->fds, mon_fdset_fd, next);
2521

    
2522
    fdinfo = g_malloc0(sizeof(*fdinfo));
2523
    fdinfo->fdset_id = mon_fdset->id;
2524
    fdinfo->fd = mon_fdset_fd->fd;
2525

    
2526
    return fdinfo;
2527
}
2528

    
2529
int monitor_fdset_get_fd(int64_t fdset_id, int flags)
2530
{
2531
#ifndef _WIN32
2532
    MonFdset *mon_fdset;
2533
    MonFdsetFd *mon_fdset_fd;
2534
    int mon_fd_flags;
2535

    
2536
    QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2537
        if (mon_fdset->id != fdset_id) {
2538
            continue;
2539
        }
2540
        QLIST_FOREACH(mon_fdset_fd, &mon_fdset->fds, next) {
2541
            mon_fd_flags = fcntl(mon_fdset_fd->fd, F_GETFL);
2542
            if (mon_fd_flags == -1) {
2543
                return -1;
2544
            }
2545

    
2546
            if ((flags & O_ACCMODE) == (mon_fd_flags & O_ACCMODE)) {
2547
                return mon_fdset_fd->fd;
2548
            }
2549
        }
2550
        errno = EACCES;
2551
        return -1;
2552
    }
2553
#endif
2554

    
2555
    errno = ENOENT;
2556
    return -1;
2557
}
2558

    
2559
int monitor_fdset_dup_fd_add(int64_t fdset_id, int dup_fd)
2560
{
2561
    MonFdset *mon_fdset;
2562
    MonFdsetFd *mon_fdset_fd_dup;
2563

    
2564
    QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2565
        if (mon_fdset->id != fdset_id) {
2566
            continue;
2567
        }
2568
        QLIST_FOREACH(mon_fdset_fd_dup, &mon_fdset->dup_fds, next) {
2569
            if (mon_fdset_fd_dup->fd == dup_fd) {
2570
                return -1;
2571
            }
2572
        }
2573
        mon_fdset_fd_dup = g_malloc0(sizeof(*mon_fdset_fd_dup));
2574
        mon_fdset_fd_dup->fd = dup_fd;
2575
        QLIST_INSERT_HEAD(&mon_fdset->dup_fds, mon_fdset_fd_dup, next);
2576
        return 0;
2577
    }
2578
    return -1;
2579
}
2580

    
2581
static int monitor_fdset_dup_fd_find_remove(int dup_fd, bool remove)
2582
{
2583
    MonFdset *mon_fdset;
2584
    MonFdsetFd *mon_fdset_fd_dup;
2585

    
2586
    QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
2587
        QLIST_FOREACH(mon_fdset_fd_dup, &mon_fdset->dup_fds, next) {
2588
            if (mon_fdset_fd_dup->fd == dup_fd) {
2589
                if (remove) {
2590
                    QLIST_REMOVE(mon_fdset_fd_dup, next);
2591
                    if (QLIST_EMPTY(&mon_fdset->dup_fds)) {
2592
                        monitor_fdset_cleanup(mon_fdset);
2593
                    }
2594
                }
2595
                return mon_fdset->id;
2596
            }
2597
        }
2598
    }
2599
    return -1;
2600
}
2601

    
2602
int monitor_fdset_dup_fd_find(int dup_fd)
2603
{
2604
    return monitor_fdset_dup_fd_find_remove(dup_fd, false);
2605
}
2606

    
2607
int monitor_fdset_dup_fd_remove(int dup_fd)
2608
{
2609
    return monitor_fdset_dup_fd_find_remove(dup_fd, true);
2610
}
2611

    
2612
int monitor_handle_fd_param(Monitor *mon, const char *fdname)
2613
{
2614
    int fd;
2615
    Error *local_err = NULL;
2616

    
2617
    if (!qemu_isdigit(fdname[0]) && mon) {
2618

    
2619
        fd = monitor_get_fd(mon, fdname, &local_err);
2620
        if (fd == -1) {
2621
            qerror_report_err(local_err);
2622
            error_free(local_err);
2623
            return -1;
2624
        }
2625
    } else {
2626
        fd = qemu_parse_fd(fdname);
2627
    }
2628

    
2629
    return fd;
2630
}
2631

    
2632
/* Please update hmp-commands.hx when adding or changing commands */
2633
static mon_cmd_t info_cmds[] = {
2634
    {
2635
        .name       = "version",
2636
        .args_type  = "",
2637
        .params     = "",
2638
        .help       = "show the version of QEMU",
2639
        .mhandler.cmd = hmp_info_version,
2640
    },
2641
    {
2642
        .name       = "network",
2643
        .args_type  = "",
2644
        .params     = "",
2645
        .help       = "show the network state",
2646
        .mhandler.cmd = do_info_network,
2647
    },
2648
    {
2649
        .name       = "chardev",
2650
        .args_type  = "",
2651
        .params     = "",
2652
        .help       = "show the character devices",
2653
        .mhandler.cmd = hmp_info_chardev,
2654
    },
2655
    {
2656
        .name       = "block",
2657
        .args_type  = "verbose:-v,device:B?",
2658
        .params     = "[-v] [device]",
2659
        .help       = "show info of one block device or all block devices "
2660
                      "(and details of images with -v option)",
2661
        .mhandler.cmd = hmp_info_block,
2662
    },
2663
    {
2664
        .name       = "blockstats",
2665
        .args_type  = "",
2666
        .params     = "",
2667
        .help       = "show block device statistics",
2668
        .mhandler.cmd = hmp_info_blockstats,
2669
    },
2670
    {
2671
        .name       = "block-jobs",
2672
        .args_type  = "",
2673
        .params     = "",
2674
        .help       = "show progress of ongoing block device operations",
2675
        .mhandler.cmd = hmp_info_block_jobs,
2676
    },
2677
    {
2678
        .name       = "registers",
2679
        .args_type  = "",
2680
        .params     = "",
2681
        .help       = "show the cpu registers",
2682
        .mhandler.cmd = do_info_registers,
2683
    },
2684
    {
2685
        .name       = "cpus",
2686
        .args_type  = "",
2687
        .params     = "",
2688
        .help       = "show infos for each CPU",
2689
        .mhandler.cmd = hmp_info_cpus,
2690
    },
2691
    {
2692
        .name       = "history",
2693
        .args_type  = "",
2694
        .params     = "",
2695
        .help       = "show the command line history",
2696
        .mhandler.cmd = do_info_history,
2697
    },
2698
#if defined(TARGET_I386) || defined(TARGET_PPC) || defined(TARGET_MIPS) || \
2699
    defined(TARGET_LM32) || (defined(TARGET_SPARC) && !defined(TARGET_SPARC64))
2700
    {
2701
        .name       = "irq",
2702
        .args_type  = "",
2703
        .params     = "",
2704
        .help       = "show the interrupts statistics (if available)",
2705
#ifdef TARGET_SPARC
2706
        .mhandler.cmd = sun4m_irq_info,
2707
#elif defined(TARGET_LM32)
2708
        .mhandler.cmd = lm32_irq_info,
2709
#else
2710
        .mhandler.cmd = irq_info,
2711
#endif
2712
    },
2713
    {
2714
        .name       = "pic",
2715
        .args_type  = "",
2716
        .params     = "",
2717
        .help       = "show i8259 (PIC) state",
2718
#ifdef TARGET_SPARC
2719
        .mhandler.cmd = sun4m_pic_info,
2720
#elif defined(TARGET_LM32)
2721
        .mhandler.cmd = lm32_do_pic_info,
2722
#else
2723
        .mhandler.cmd = pic_info,
2724
#endif
2725
    },
2726
#endif
2727
    {
2728
        .name       = "pci",
2729
        .args_type  = "",
2730
        .params     = "",
2731
        .help       = "show PCI info",
2732
        .mhandler.cmd = hmp_info_pci,
2733
    },
2734
#if defined(TARGET_I386) || defined(TARGET_SH4) || defined(TARGET_SPARC) || \
2735
    defined(TARGET_PPC) || defined(TARGET_XTENSA)
2736
    {
2737
        .name       = "tlb",
2738
        .args_type  = "",
2739
        .params     = "",
2740
        .help       = "show virtual to physical memory mappings",
2741
        .mhandler.cmd = tlb_info,
2742
    },
2743
#endif
2744
#if defined(TARGET_I386)
2745
    {
2746
        .name       = "mem",
2747
        .args_type  = "",
2748
        .params     = "",
2749
        .help       = "show the active virtual memory mappings",
2750
        .mhandler.cmd = mem_info,
2751
    },
2752
#endif
2753
    {
2754
        .name       = "mtree",
2755
        .args_type  = "",
2756
        .params     = "",
2757
        .help       = "show memory tree",
2758
        .mhandler.cmd = do_info_mtree,
2759
    },
2760
    {
2761
        .name       = "jit",
2762
        .args_type  = "",
2763
        .params     = "",
2764
        .help       = "show dynamic compiler info",
2765
        .mhandler.cmd = do_info_jit,
2766
    },
2767
    {
2768
        .name       = "kvm",
2769
        .args_type  = "",
2770
        .params     = "",
2771
        .help       = "show KVM information",
2772
        .mhandler.cmd = hmp_info_kvm,
2773
    },
2774
    {
2775
        .name       = "numa",
2776
        .args_type  = "",
2777
        .params     = "",
2778
        .help       = "show NUMA information",
2779
        .mhandler.cmd = do_info_numa,
2780
    },
2781
    {
2782
        .name       = "usb",
2783
        .args_type  = "",
2784
        .params     = "",
2785
        .help       = "show guest USB devices",
2786
        .mhandler.cmd = usb_info,
2787
    },
2788
    {
2789
        .name       = "usbhost",
2790
        .args_type  = "",
2791
        .params     = "",
2792
        .help       = "show host USB devices",
2793
        .mhandler.cmd = usb_host_info,
2794
    },
2795
    {
2796
        .name       = "profile",
2797
        .args_type  = "",
2798
        .params     = "",
2799
        .help       = "show profiling information",
2800
        .mhandler.cmd = do_info_profile,
2801
    },
2802
    {
2803
        .name       = "capture",
2804
        .args_type  = "",
2805
        .params     = "",
2806
        .help       = "show capture information",
2807
        .mhandler.cmd = do_info_capture,
2808
    },
2809
    {
2810
        .name       = "snapshots",
2811
        .args_type  = "",
2812
        .params     = "",
2813
        .help       = "show the currently saved VM snapshots",
2814
        .mhandler.cmd = do_info_snapshots,
2815
    },
2816
    {
2817
        .name       = "status",
2818
        .args_type  = "",
2819
        .params     = "",
2820
        .help       = "show the current VM status (running|paused)",
2821
        .mhandler.cmd = hmp_info_status,
2822
    },
2823
    {
2824
        .name       = "pcmcia",
2825
        .args_type  = "",
2826
        .params     = "",
2827
        .help       = "show guest PCMCIA status",
2828
        .mhandler.cmd = pcmcia_info,
2829
    },
2830
    {
2831
        .name       = "mice",
2832
        .args_type  = "",
2833
        .params     = "",
2834
        .help       = "show which guest mouse is receiving events",
2835
        .mhandler.cmd = hmp_info_mice,
2836
    },
2837
    {
2838
        .name       = "vnc",
2839
        .args_type  = "",
2840
        .params     = "",
2841
        .help       = "show the vnc server status",
2842
        .mhandler.cmd = hmp_info_vnc,
2843
    },
2844
#if defined(CONFIG_SPICE)
2845
    {
2846
        .name       = "spice",
2847
        .args_type  = "",
2848
        .params     = "",
2849
        .help       = "show the spice server status",
2850
        .mhandler.cmd = hmp_info_spice,
2851
    },
2852
#endif
2853
    {
2854
        .name       = "name",
2855
        .args_type  = "",
2856
        .params     = "",
2857
        .help       = "show the current VM name",
2858
        .mhandler.cmd = hmp_info_name,
2859
    },
2860
    {
2861
        .name       = "uuid",
2862
        .args_type  = "",
2863
        .params     = "",
2864
        .help       = "show the current VM UUID",
2865
        .mhandler.cmd = hmp_info_uuid,
2866
    },
2867
    {
2868
        .name       = "cpustats",
2869
        .args_type  = "",
2870
        .params     = "",
2871
        .help       = "show CPU statistics",
2872
        .mhandler.cmd = do_info_cpu_stats,
2873
    },
2874
#if defined(CONFIG_SLIRP)
2875
    {
2876
        .name       = "usernet",
2877
        .args_type  = "",
2878
        .params     = "",
2879
        .help       = "show user network stack connection states",
2880
        .mhandler.cmd = do_info_usernet,
2881
    },
2882
#endif
2883
    {
2884
        .name       = "migrate",
2885
        .args_type  = "",
2886
        .params     = "",
2887
        .help       = "show migration status",
2888
        .mhandler.cmd = hmp_info_migrate,
2889
    },
2890
    {
2891
        .name       = "migrate_capabilities",
2892
        .args_type  = "",
2893
        .params     = "",
2894
        .help       = "show current migration capabilities",
2895
        .mhandler.cmd = hmp_info_migrate_capabilities,
2896
    },
2897
    {
2898
        .name       = "migrate_cache_size",
2899
        .args_type  = "",
2900
        .params     = "",
2901
        .help       = "show current migration xbzrle cache size",
2902
        .mhandler.cmd = hmp_info_migrate_cache_size,
2903
    },
2904
    {
2905
        .name       = "balloon",
2906
        .args_type  = "",
2907
        .params     = "",
2908
        .help       = "show balloon information",
2909
        .mhandler.cmd = hmp_info_balloon,
2910
    },
2911
    {
2912
        .name       = "qtree",
2913
        .args_type  = "",
2914
        .params     = "",
2915
        .help       = "show device tree",
2916
        .mhandler.cmd = do_info_qtree,
2917
    },
2918
    {
2919
        .name       = "qdm",
2920
        .args_type  = "",
2921
        .params     = "",
2922
        .help       = "show qdev device model list",
2923
        .mhandler.cmd = do_info_qdm,
2924
    },
2925
    {
2926
        .name       = "roms",
2927
        .args_type  = "",
2928
        .params     = "",
2929
        .help       = "show roms",
2930
        .mhandler.cmd = do_info_roms,
2931
    },
2932
    {
2933
        .name       = "trace-events",
2934
        .args_type  = "",
2935
        .params     = "",
2936
        .help       = "show available trace-events & their state",
2937
        .mhandler.cmd = do_trace_print_events,
2938
    },
2939
    {
2940
        .name       = "tpm",
2941
        .args_type  = "",
2942
        .params     = "",
2943
        .help       = "show the TPM device",
2944
        .mhandler.cmd = hmp_info_tpm,
2945
    },
2946
    {
2947
        .name       = NULL,
2948
    },
2949
};
2950

    
2951
/* mon_cmds and info_cmds would be sorted at runtime */
2952
static mon_cmd_t mon_cmds[] = {
2953
#include "hmp-commands.h"
2954
    { NULL, NULL, },
2955
};
2956

    
2957
static const mon_cmd_t qmp_cmds[] = {
2958
#include "qmp-commands-old.h"
2959
    { /* NULL */ },
2960
};
2961

    
2962
/*******************************************************************/
2963

    
2964
static const char *pch;
2965
static sigjmp_buf expr_env;
2966

    
2967
#define MD_TLONG 0
2968
#define MD_I32   1
2969

    
2970
typedef struct MonitorDef {
2971
    const char *name;
2972
    int offset;
2973
    target_long (*get_value)(const struct MonitorDef *md, int val);
2974
    int type;
2975
} MonitorDef;
2976

    
2977
#if defined(TARGET_I386)
2978
static target_long monitor_get_pc (const struct MonitorDef *md, int val)
2979
{
2980
    CPUArchState *env = mon_get_cpu();
2981
    return env->eip + env->segs[R_CS].base;
2982
}
2983
#endif
2984

    
2985
#if defined(TARGET_PPC)
2986
static target_long monitor_get_ccr (const struct MonitorDef *md, int val)
2987
{
2988
    CPUArchState *env = mon_get_cpu();
2989
    unsigned int u;
2990
    int i;
2991

    
2992
    u = 0;
2993
    for (i = 0; i < 8; i++)
2994
        u |= env->crf[i] << (32 - (4 * i));
2995

    
2996
    return u;
2997
}
2998

    
2999
static target_long monitor_get_msr (const struct MonitorDef *md, int val)
3000
{
3001
    CPUArchState *env = mon_get_cpu();
3002
    return env->msr;
3003
}
3004

    
3005
static target_long monitor_get_xer (const struct MonitorDef *md, int val)
3006
{
3007
    CPUArchState *env = mon_get_cpu();
3008
    return env->xer;
3009
}
3010

    
3011
static target_long monitor_get_decr (const struct MonitorDef *md, int val)
3012
{
3013
    CPUArchState *env = mon_get_cpu();
3014
    return cpu_ppc_load_decr(env);
3015
}
3016

    
3017
static target_long monitor_get_tbu (const struct MonitorDef *md, int val)
3018
{
3019
    CPUArchState *env = mon_get_cpu();
3020
    return cpu_ppc_load_tbu(env);
3021
}
3022

    
3023
static target_long monitor_get_tbl (const struct MonitorDef *md, int val)
3024
{
3025
    CPUArchState *env = mon_get_cpu();
3026
    return cpu_ppc_load_tbl(env);
3027
}
3028
#endif
3029

    
3030
#if defined(TARGET_SPARC)
3031
#ifndef TARGET_SPARC64
3032
static target_long monitor_get_psr (const struct MonitorDef *md, int val)
3033
{
3034
    CPUArchState *env = mon_get_cpu();
3035

    
3036
    return cpu_get_psr(env);
3037
}
3038
#endif
3039

    
3040
static target_long monitor_get_reg(const struct MonitorDef *md, int val)
3041
{
3042
    CPUArchState *env = mon_get_cpu();
3043
    return env->regwptr[val];
3044
}
3045
#endif
3046

    
3047
static const MonitorDef monitor_defs[] = {
3048
#ifdef TARGET_I386
3049

    
3050
#define SEG(name, seg) \
3051
    { name, offsetof(CPUX86State, segs[seg].selector), NULL, MD_I32 },\
3052
    { name ".base", offsetof(CPUX86State, segs[seg].base) },\
3053
    { name ".limit", offsetof(CPUX86State, segs[seg].limit), NULL, MD_I32 },
3054

    
3055
    { "eax", offsetof(CPUX86State, regs[0]) },
3056
    { "ecx", offsetof(CPUX86State, regs[1]) },
3057
    { "edx", offsetof(CPUX86State, regs[2]) },
3058
    { "ebx", offsetof(CPUX86State, regs[3]) },
3059
    { "esp|sp", offsetof(CPUX86State, regs[4]) },
3060
    { "ebp|fp", offsetof(CPUX86State, regs[5]) },
3061
    { "esi", offsetof(CPUX86State, regs[6]) },
3062
    { "edi", offsetof(CPUX86State, regs[7]) },
3063
#ifdef TARGET_X86_64
3064
    { "r8", offsetof(CPUX86State, regs[8]) },
3065
    { "r9", offsetof(CPUX86State, regs[9]) },
3066
    { "r10", offsetof(CPUX86State, regs[10]) },
3067
    { "r11", offsetof(CPUX86State, regs[11]) },
3068
    { "r12", offsetof(CPUX86State, regs[12]) },
3069
    { "r13", offsetof(CPUX86State, regs[13]) },
3070
    { "r14", offsetof(CPUX86State, regs[14]) },
3071
    { "r15", offsetof(CPUX86State, regs[15]) },
3072
#endif
3073
    { "eflags", offsetof(CPUX86State, eflags) },
3074
    { "eip", offsetof(CPUX86State, eip) },
3075
    SEG("cs", R_CS)
3076
    SEG("ds", R_DS)
3077
    SEG("es", R_ES)
3078
    SEG("ss", R_SS)
3079
    SEG("fs", R_FS)
3080
    SEG("gs", R_GS)
3081
    { "pc", 0, monitor_get_pc, },
3082
#elif defined(TARGET_PPC)
3083
    /* General purpose registers */
3084
    { "r0", offsetof(CPUPPCState, gpr[0]) },
3085
    { "r1", offsetof(CPUPPCState, gpr[1]) },
3086
    { "r2", offsetof(CPUPPCState, gpr[2]) },
3087
    { "r3", offsetof(CPUPPCState, gpr[3]) },
3088
    { "r4", offsetof(CPUPPCState, gpr[4]) },
3089
    { "r5", offsetof(CPUPPCState, gpr[5]) },
3090
    { "r6", offsetof(CPUPPCState, gpr[6]) },
3091
    { "r7", offsetof(CPUPPCState, gpr[7]) },
3092
    { "r8", offsetof(CPUPPCState, gpr[8]) },
3093
    { "r9", offsetof(CPUPPCState, gpr[9]) },
3094
    { "r10", offsetof(CPUPPCState, gpr[10]) },
3095
    { "r11", offsetof(CPUPPCState, gpr[11]) },
3096
    { "r12", offsetof(CPUPPCState, gpr[12]) },
3097
    { "r13", offsetof(CPUPPCState, gpr[13]) },
3098
    { "r14", offsetof(CPUPPCState, gpr[14]) },
3099
    { "r15", offsetof(CPUPPCState, gpr[15]) },
3100
    { "r16", offsetof(CPUPPCState, gpr[16]) },
3101
    { "r17", offsetof(CPUPPCState, gpr[17]) },
3102
    { "r18", offsetof(CPUPPCState, gpr[18]) },
3103
    { "r19", offsetof(CPUPPCState, gpr[19]) },
3104
    { "r20", offsetof(CPUPPCState, gpr[20]) },
3105
    { "r21", offsetof(CPUPPCState, gpr[21]) },
3106
    { "r22", offsetof(CPUPPCState, gpr[22]) },
3107
    { "r23", offsetof(CPUPPCState, gpr[23]) },
3108
    { "r24", offsetof(CPUPPCState, gpr[24]) },
3109
    { "r25", offsetof(CPUPPCState, gpr[25]) },
3110
    { "r26", offsetof(CPUPPCState, gpr[26]) },
3111
    { "r27", offsetof(CPUPPCState, gpr[27]) },
3112
    { "r28", offsetof(CPUPPCState, gpr[28]) },
3113
    { "r29", offsetof(CPUPPCState, gpr[29]) },
3114
    { "r30", offsetof(CPUPPCState, gpr[30]) },
3115
    { "r31", offsetof(CPUPPCState, gpr[31]) },
3116
    /* Floating point registers */
3117
    { "f0", offsetof(CPUPPCState, fpr[0]) },
3118
    { "f1", offsetof(CPUPPCState, fpr[1]) },
3119
    { "f2", offsetof(CPUPPCState, fpr[2]) },
3120
    { "f3", offsetof(CPUPPCState, fpr[3]) },
3121
    { "f4", offsetof(CPUPPCState, fpr[4]) },
3122
    { "f5", offsetof(CPUPPCState, fpr[5]) },
3123
    { "f6", offsetof(CPUPPCState, fpr[6]) },
3124
    { "f7", offsetof(CPUPPCState, fpr[7]) },
3125
    { "f8", offsetof(CPUPPCState, fpr[8]) },
3126
    { "f9", offsetof(CPUPPCState, fpr[9]) },
3127
    { "f10", offsetof(CPUPPCState, fpr[10]) },
3128
    { "f11", offsetof(CPUPPCState, fpr[11]) },
3129
    { "f12", offsetof(CPUPPCState, fpr[12]) },
3130
    { "f13", offsetof(CPUPPCState, fpr[13]) },
3131
    { "f14", offsetof(CPUPPCState, fpr[14]) },
3132
    { "f15", offsetof(CPUPPCState, fpr[15]) },
3133
    { "f16", offsetof(CPUPPCState, fpr[16]) },
3134
    { "f17", offsetof(CPUPPCState, fpr[17]) },
3135
    { "f18", offsetof(CPUPPCState, fpr[18]) },
3136
    { "f19", offsetof(CPUPPCState, fpr[19]) },
3137
    { "f20", offsetof(CPUPPCState, fpr[20]) },
3138
    { "f21", offsetof(CPUPPCState, fpr[21]) },
3139
    { "f22", offsetof(CPUPPCState, fpr[22]) },
3140
    { "f23", offsetof(CPUPPCState, fpr[23]) },
3141
    { "f24", offsetof(CPUPPCState, fpr[24]) },
3142
    { "f25", offsetof(CPUPPCState, fpr[25]) },
3143
    { "f26", offsetof(CPUPPCState, fpr[26]) },
3144
    { "f27", offsetof(CPUPPCState, fpr[27]) },
3145
    { "f28", offsetof(CPUPPCState, fpr[28]) },
3146
    { "f29", offsetof(CPUPPCState, fpr[29]) },
3147
    { "f30", offsetof(CPUPPCState, fpr[30]) },
3148
    { "f31", offsetof(CPUPPCState, fpr[31]) },
3149
    { "fpscr", offsetof(CPUPPCState, fpscr) },
3150
    /* Next instruction pointer */
3151
    { "nip|pc", offsetof(CPUPPCState, nip) },
3152
    { "lr", offsetof(CPUPPCState, lr) },
3153
    { "ctr", offsetof(CPUPPCState, ctr) },
3154
    { "decr", 0, &monitor_get_decr, },
3155
    { "ccr", 0, &monitor_get_ccr, },
3156
    /* Machine state register */
3157
    { "msr", 0, &monitor_get_msr, },
3158
    { "xer", 0, &monitor_get_xer, },
3159
    { "tbu", 0, &monitor_get_tbu, },
3160
    { "tbl", 0, &monitor_get_tbl, },
3161
    /* Segment registers */
3162
    { "sdr1", offsetof(CPUPPCState, spr[SPR_SDR1]) },
3163
    { "sr0", offsetof(CPUPPCState, sr[0]) },
3164
    { "sr1", offsetof(CPUPPCState, sr[1]) },
3165
    { "sr2", offsetof(CPUPPCState, sr[2]) },
3166
    { "sr3", offsetof(CPUPPCState, sr[3]) },
3167
    { "sr4", offsetof(CPUPPCState, sr[4]) },
3168
    { "sr5", offsetof(CPUPPCState, sr[5]) },
3169
    { "sr6", offsetof(CPUPPCState, sr[6]) },
3170
    { "sr7", offsetof(CPUPPCState, sr[7]) },
3171
    { "sr8", offsetof(CPUPPCState, sr[8]) },
3172
    { "sr9", offsetof(CPUPPCState, sr[9]) },
3173
    { "sr10", offsetof(CPUPPCState, sr[10]) },
3174
    { "sr11", offsetof(CPUPPCState, sr[11]) },
3175
    { "sr12", offsetof(CPUPPCState, sr[12]) },
3176
    { "sr13", offsetof(CPUPPCState, sr[13]) },
3177
    { "sr14", offsetof(CPUPPCState, sr[14]) },
3178
    { "sr15", offsetof(CPUPPCState, sr[15]) },
3179
    /* Too lazy to put BATs... */
3180
    { "pvr", offsetof(CPUPPCState, spr[SPR_PVR]) },
3181

    
3182
    { "srr0", offsetof(CPUPPCState, spr[SPR_SRR0]) },
3183
    { "srr1", offsetof(CPUPPCState, spr[SPR_SRR1]) },
3184
    { "dar", offsetof(CPUPPCState, spr[SPR_DAR]) },
3185
    { "dsisr", offsetof(CPUPPCState, spr[SPR_DSISR]) },
3186
    { "cfar", offsetof(CPUPPCState, spr[SPR_CFAR]) },
3187
    { "sprg0", offsetof(CPUPPCState, spr[SPR_SPRG0]) },
3188
    { "sprg1", offsetof(CPUPPCState, spr[SPR_SPRG1]) },
3189
    { "sprg2", offsetof(CPUPPCState, spr[SPR_SPRG2]) },
3190
    { "sprg3", offsetof(CPUPPCState, spr[SPR_SPRG3]) },
3191
    { "sprg4", offsetof(CPUPPCState, spr[SPR_SPRG4]) },
3192
    { "sprg5", offsetof(CPUPPCState, spr[SPR_SPRG5]) },
3193
    { "sprg6", offsetof(CPUPPCState, spr[SPR_SPRG6]) },
3194
    { "sprg7", offsetof(CPUPPCState, spr[SPR_SPRG7]) },
3195
    { "pid", offsetof(CPUPPCState, spr[SPR_BOOKE_PID]) },
3196
    { "csrr0", offsetof(CPUPPCState, spr[SPR_BOOKE_CSRR0]) },
3197
    { "csrr1", offsetof(CPUPPCState, spr[SPR_BOOKE_CSRR1]) },
3198
    { "esr", offsetof(CPUPPCState, spr[SPR_BOOKE_ESR]) },
3199
    { "dear", offsetof(CPUPPCState, spr[SPR_BOOKE_DEAR]) },
3200
    { "mcsr", offsetof(CPUPPCState, spr[SPR_BOOKE_MCSR]) },
3201
    { "tsr", offsetof(CPUPPCState, spr[SPR_BOOKE_TSR]) },
3202
    { "tcr", offsetof(CPUPPCState, spr[SPR_BOOKE_TCR]) },
3203
    { "vrsave", offsetof(CPUPPCState, spr[SPR_VRSAVE]) },
3204
    { "pir", offsetof(CPUPPCState, spr[SPR_BOOKE_PIR]) },
3205
    { "mcsrr0", offsetof(CPUPPCState, spr[SPR_BOOKE_MCSRR0]) },
3206
    { "mcsrr1", offsetof(CPUPPCState, spr[SPR_BOOKE_MCSRR1]) },
3207
    { "decar", offsetof(CPUPPCState, spr[SPR_BOOKE_DECAR]) },
3208
    { "ivpr", offsetof(CPUPPCState, spr[SPR_BOOKE_IVPR]) },
3209
    { "epcr", offsetof(CPUPPCState, spr[SPR_BOOKE_EPCR]) },
3210
    { "sprg8", offsetof(CPUPPCState, spr[SPR_BOOKE_SPRG8]) },
3211
    { "ivor0", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR0]) },
3212
    { "ivor1", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR1]) },
3213
    { "ivor2", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR2]) },
3214
    { "ivor3", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR3]) },
3215
    { "ivor4", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR4]) },
3216
    { "ivor5", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR5]) },
3217
    { "ivor6", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR6]) },
3218
    { "ivor7", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR7]) },
3219
    { "ivor8", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR8]) },
3220
    { "ivor9", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR9]) },
3221
    { "ivor10", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR10]) },
3222
    { "ivor11", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR11]) },
3223
    { "ivor12", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR12]) },
3224
    { "ivor13", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR13]) },
3225
    { "ivor14", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR14]) },
3226
    { "ivor15", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR15]) },
3227
    { "ivor32", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR32]) },
3228
    { "ivor33", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR33]) },
3229
    { "ivor34", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR34]) },
3230
    { "ivor35", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR35]) },
3231
    { "ivor36", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR36]) },
3232
    { "ivor37", offsetof(CPUPPCState, spr[SPR_BOOKE_IVOR37]) },
3233
    { "mas0", offsetof(CPUPPCState, spr[SPR_BOOKE_MAS0]) },
3234
    { "mas1", offsetof(CPUPPCState, spr[SPR_BOOKE_MAS1]) },
3235
    { "mas2", offsetof(CPUPPCState, spr[SPR_BOOKE_MAS2]) },
3236
    { "mas3", offsetof(CPUPPCState, spr[SPR_BOOKE_MAS3]) },
3237
    { "mas4", offsetof(CPUPPCState, spr[SPR_BOOKE_MAS4]) },
3238
    { "mas6", offsetof(CPUPPCState, spr[SPR_BOOKE_MAS6]) },
3239
    { "mas7", offsetof(CPUPPCState, spr[SPR_BOOKE_MAS7]) },
3240
    { "mmucfg", offsetof(CPUPPCState, spr[SPR_MMUCFG]) },
3241
    { "tlb0cfg", offsetof(CPUPPCState, spr[SPR_BOOKE_TLB0CFG]) },
3242
    { "tlb1cfg", offsetof(CPUPPCState, spr[SPR_BOOKE_TLB1CFG]) },
3243
    { "epr", offsetof(CPUPPCState, spr[SPR_BOOKE_EPR]) },
3244
    { "eplc", offsetof(CPUPPCState, spr[SPR_BOOKE_EPLC]) },
3245
    { "epsc", offsetof(CPUPPCState, spr[SPR_BOOKE_EPSC]) },
3246
    { "svr", offsetof(CPUPPCState, spr[SPR_E500_SVR]) },
3247
    { "mcar", offsetof(CPUPPCState, spr[SPR_Exxx_MCAR]) },
3248
    { "pid1", offsetof(CPUPPCState, spr[SPR_BOOKE_PID1]) },
3249
    { "pid2", offsetof(CPUPPCState, spr[SPR_BOOKE_PID2]) },
3250
    { "hid0", offsetof(CPUPPCState, spr[SPR_HID0]) },
3251

    
3252
#elif defined(TARGET_SPARC)
3253
    { "g0", offsetof(CPUSPARCState, gregs[0]) },
3254
    { "g1", offsetof(CPUSPARCState, gregs[1]) },
3255
    { "g2", offsetof(CPUSPARCState, gregs[2]) },
3256
    { "g3", offsetof(CPUSPARCState, gregs[3]) },
3257
    { "g4", offsetof(CPUSPARCState, gregs[4]) },
3258
    { "g5", offsetof(CPUSPARCState, gregs[5]) },
3259
    { "g6", offsetof(CPUSPARCState, gregs[6]) },
3260
    { "g7", offsetof(CPUSPARCState, gregs[7]) },
3261
    { "o0", 0, monitor_get_reg },
3262
    { "o1", 1, monitor_get_reg },
3263
    { "o2", 2, monitor_get_reg },
3264
    { "o3", 3, monitor_get_reg },
3265
    { "o4", 4, monitor_get_reg },
3266
    { "o5", 5, monitor_get_reg },
3267
    { "o6", 6, monitor_get_reg },
3268
    { "o7", 7, monitor_get_reg },
3269
    { "l0", 8, monitor_get_reg },
3270
    { "l1", 9, monitor_get_reg },
3271
    { "l2", 10, monitor_get_reg },
3272
    { "l3", 11, monitor_get_reg },
3273
    { "l4", 12, monitor_get_reg },
3274
    { "l5", 13, monitor_get_reg },
3275
    { "l6", 14, monitor_get_reg },
3276
    { "l7", 15, monitor_get_reg },
3277
    { "i0", 16, monitor_get_reg },
3278
    { "i1", 17, monitor_get_reg },
3279
    { "i2", 18, monitor_get_reg },
3280
    { "i3", 19, monitor_get_reg },
3281
    { "i4", 20, monitor_get_reg },
3282
    { "i5", 21, monitor_get_reg },
3283
    { "i6", 22, monitor_get_reg },
3284
    { "i7", 23, monitor_get_reg },
3285
    { "pc", offsetof(CPUSPARCState, pc) },
3286
    { "npc", offsetof(CPUSPARCState, npc) },
3287
    { "y", offsetof(CPUSPARCState, y) },
3288
#ifndef TARGET_SPARC64
3289
    { "psr", 0, &monitor_get_psr, },
3290
    { "wim", offsetof(CPUSPARCState, wim) },
3291
#endif
3292
    { "tbr", offsetof(CPUSPARCState, tbr) },
3293
    { "fsr", offsetof(CPUSPARCState, fsr) },
3294
    { "f0", offsetof(CPUSPARCState, fpr[0].l.upper) },
3295
    { "f1", offsetof(CPUSPARCState, fpr[0].l.lower) },
3296
    { "f2", offsetof(CPUSPARCState, fpr[1].l.upper) },
3297
    { "f3", offsetof(CPUSPARCState, fpr[1].l.lower) },
3298
    { "f4", offsetof(CPUSPARCState, fpr[2].l.upper) },
3299
    { "f5", offsetof(CPUSPARCState, fpr[2].l.lower) },
3300
    { "f6", offsetof(CPUSPARCState, fpr[3].l.upper) },
3301
    { "f7", offsetof(CPUSPARCState, fpr[3].l.lower) },
3302
    { "f8", offsetof(CPUSPARCState, fpr[4].l.upper) },
3303
    { "f9", offsetof(CPUSPARCState, fpr[4].l.lower) },
3304
    { "f10", offsetof(CPUSPARCState, fpr[5].l.upper) },
3305
    { "f11", offsetof(CPUSPARCState, fpr[5].l.lower) },
3306
    { "f12", offsetof(CPUSPARCState, fpr[6].l.upper) },
3307
    { "f13", offsetof(CPUSPARCState, fpr[6].l.lower) },
3308
    { "f14", offsetof(CPUSPARCState, fpr[7].l.upper) },
3309
    { "f15", offsetof(CPUSPARCState, fpr[7].l.lower) },
3310
    { "f16", offsetof(CPUSPARCState, fpr[8].l.upper) },
3311
    { "f17", offsetof(CPUSPARCState, fpr[8].l.lower) },
3312
    { "f18", offsetof(CPUSPARCState, fpr[9].l.upper) },
3313
    { "f19", offsetof(CPUSPARCState, fpr[9].l.lower) },
3314
    { "f20", offsetof(CPUSPARCState, fpr[10].l.upper) },
3315
    { "f21", offsetof(CPUSPARCState, fpr[10].l.lower) },
3316
    { "f22", offsetof(CPUSPARCState, fpr[11].l.upper) },
3317
    { "f23", offsetof(CPUSPARCState, fpr[11].l.lower) },
3318
    { "f24", offsetof(CPUSPARCState, fpr[12].l.upper) },
3319
    { "f25", offsetof(CPUSPARCState, fpr[12].l.lower) },
3320
    { "f26", offsetof(CPUSPARCState, fpr[13].l.upper) },
3321
    { "f27", offsetof(CPUSPARCState, fpr[13].l.lower) },
3322
    { "f28", offsetof(CPUSPARCState, fpr[14].l.upper) },
3323
    { "f29", offsetof(CPUSPARCState, fpr[14].l.lower) },
3324
    { "f30", offsetof(CPUSPARCState, fpr[15].l.upper) },
3325
    { "f31", offsetof(CPUSPARCState, fpr[15].l.lower) },
3326
#ifdef TARGET_SPARC64
3327
    { "f32", offsetof(CPUSPARCState, fpr[16]) },
3328
    { "f34", offsetof(CPUSPARCState, fpr[17]) },
3329
    { "f36", offsetof(CPUSPARCState, fpr[18]) },
3330
    { "f38", offsetof(CPUSPARCState, fpr[19]) },
3331
    { "f40", offsetof(CPUSPARCState, fpr[20]) },
3332
    { "f42", offsetof(CPUSPARCState, fpr[21]) },
3333
    { "f44", offsetof(CPUSPARCState, fpr[22]) },
3334
    { "f46", offsetof(CPUSPARCState, fpr[23]) },
3335
    { "f48", offsetof(CPUSPARCState, fpr[24]) },
3336
    { "f50", offsetof(CPUSPARCState, fpr[25]) },
3337
    { "f52", offsetof(CPUSPARCState, fpr[26]) },
3338
    { "f54", offsetof(CPUSPARCState, fpr[27]) },
3339
    { "f56", offsetof(CPUSPARCState, fpr[28]) },
3340
    { "f58", offsetof(CPUSPARCState, fpr[29]) },
3341
    { "f60", offsetof(CPUSPARCState, fpr[30]) },
3342
    { "f62", offsetof(CPUSPARCState, fpr[31]) },
3343
    { "asi", offsetof(CPUSPARCState, asi) },
3344
    { "pstate", offsetof(CPUSPARCState, pstate) },
3345
    { "cansave", offsetof(CPUSPARCState, cansave) },
3346
    { "canrestore", offsetof(CPUSPARCState, canrestore) },
3347
    { "otherwin", offsetof(CPUSPARCState, otherwin) },
3348
    { "wstate", offsetof(CPUSPARCState, wstate) },
3349
    { "cleanwin", offsetof(CPUSPARCState, cleanwin) },
3350
    { "fprs", offsetof(CPUSPARCState, fprs) },
3351
#endif
3352
#endif
3353
    { NULL },
3354
};
3355

    
3356
static void GCC_FMT_ATTR(2, 3) QEMU_NORETURN
3357
expr_error(Monitor *mon, const char *fmt, ...)
3358
{
3359
    va_list ap;
3360
    va_start(ap, fmt);
3361
    monitor_vprintf(mon, fmt, ap);
3362
    monitor_printf(mon, "\n");
3363
    va_end(ap);
3364
    siglongjmp(expr_env, 1);
3365
}
3366

    
3367
/* return 0 if OK, -1 if not found */
3368
static int get_monitor_def(target_long *pval, const char *name)
3369
{
3370
    const MonitorDef *md;
3371
    void *ptr;
3372

    
3373
    for(md = monitor_defs; md->name != NULL; md++) {
3374
        if (compare_cmd(name, md->name)) {
3375
            if (md->get_value) {
3376
                *pval = md->get_value(md, md->offset);
3377
            } else {
3378
                CPUArchState *env = mon_get_cpu();
3379
                ptr = (uint8_t *)env + md->offset;
3380
                switch(md->type) {
3381
                case MD_I32:
3382
                    *pval = *(int32_t *)ptr;
3383
                    break;
3384
                case MD_TLONG:
3385
                    *pval = *(target_long *)ptr;
3386
                    break;
3387
                default:
3388
                    *pval = 0;
3389
                    break;
3390
                }
3391
            }
3392
            return 0;
3393
        }
3394
    }
3395
    return -1;
3396
}
3397

    
3398
static void next(void)
3399
{
3400
    if (*pch != '\0') {
3401
        pch++;
3402
        while (qemu_isspace(*pch))
3403
            pch++;
3404
    }
3405
}
3406

    
3407
static int64_t expr_sum(Monitor *mon);
3408

    
3409
static int64_t expr_unary(Monitor *mon)
3410
{
3411
    int64_t n;
3412
    char *p;
3413
    int ret;
3414

    
3415
    switch(*pch) {
3416
    case '+':
3417
        next();
3418
        n = expr_unary(mon);
3419
        break;
3420
    case '-':
3421
        next();
3422
        n = -expr_unary(mon);
3423
        break;
3424
    case '~':
3425
        next();
3426
        n = ~expr_unary(mon);
3427
        break;
3428
    case '(':
3429
        next();
3430
        n = expr_sum(mon);
3431
        if (*pch != ')') {
3432
            expr_error(mon, "')' expected");
3433
        }
3434
        next();
3435
        break;
3436
    case '\'':
3437
        pch++;
3438
        if (*pch == '\0')
3439
            expr_error(mon, "character constant expected");
3440
        n = *pch;
3441
        pch++;
3442
        if (*pch != '\'')
3443
            expr_error(mon, "missing terminating \' character");
3444
        next();
3445
        break;
3446
    case '$':
3447
        {
3448
            char buf[128], *q;
3449
            target_long reg=0;
3450

    
3451
            pch++;
3452
            q = buf;
3453
            while ((*pch >= 'a' && *pch <= 'z') ||
3454
                   (*pch >= 'A' && *pch <= 'Z') ||
3455
                   (*pch >= '0' && *pch <= '9') ||
3456
                   *pch == '_' || *pch == '.') {
3457
                if ((q - buf) < sizeof(buf) - 1)
3458
                    *q++ = *pch;
3459
                pch++;
3460
            }
3461
            while (qemu_isspace(*pch))
3462
                pch++;
3463
            *q = 0;
3464
            ret = get_monitor_def(&reg, buf);
3465
            if (ret < 0)
3466
                expr_error(mon, "unknown register");
3467
            n = reg;
3468
        }
3469
        break;
3470
    case '\0':
3471
        expr_error(mon, "unexpected end of expression");
3472
        n = 0;
3473
        break;
3474
    default:
3475
        errno = 0;
3476
        n = strtoull(pch, &p, 0);
3477
        if (errno == ERANGE) {
3478
            expr_error(mon, "number too large");
3479
        }
3480
        if (pch == p) {
3481
            expr_error(mon, "invalid char '%c' in expression", *p);
3482
        }
3483
        pch = p;
3484
        while (qemu_isspace(*pch))
3485
            pch++;
3486
        break;
3487
    }
3488
    return n;
3489
}
3490

    
3491

    
3492
static int64_t expr_prod(Monitor *mon)
3493
{
3494
    int64_t val, val2;
3495
    int op;
3496

    
3497
    val = expr_unary(mon);
3498
    for(;;) {
3499
        op = *pch;
3500
        if (op != '*' && op != '/' && op != '%')
3501
            break;
3502
        next();
3503
        val2 = expr_unary(mon);
3504
        switch(op) {
3505
        default:
3506
        case '*':
3507
            val *= val2;
3508
            break;
3509
        case '/':
3510
        case '%':
3511
            if (val2 == 0)
3512
                expr_error(mon, "division by zero");
3513
            if (op == '/')
3514
                val /= val2;
3515
            else
3516
                val %= val2;
3517
            break;
3518
        }
3519
    }
3520
    return val;
3521
}
3522

    
3523
static int64_t expr_logic(Monitor *mon)
3524
{
3525
    int64_t val, val2;
3526
    int op;
3527

    
3528
    val = expr_prod(mon);
3529
    for(;;) {
3530
        op = *pch;
3531
        if (op != '&' && op != '|' && op != '^')
3532
            break;
3533
        next();
3534
        val2 = expr_prod(mon);
3535
        switch(op) {
3536
        default:
3537
        case '&':
3538
            val &= val2;
3539
            break;
3540
        case '|':
3541
            val |= val2;
3542
            break;
3543
        case '^':
3544
            val ^= val2;
3545
            break;
3546
        }
3547
    }
3548
    return val;
3549
}
3550

    
3551
static int64_t expr_sum(Monitor *mon)
3552
{
3553
    int64_t val, val2;
3554
    int op;
3555

    
3556
    val = expr_logic(mon);
3557
    for(;;) {
3558
        op = *pch;
3559
        if (op != '+' && op != '-')
3560
            break;
3561
        next();
3562
        val2 = expr_logic(mon);
3563
        if (op == '+')
3564
            val += val2;
3565
        else
3566
            val -= val2;
3567
    }
3568
    return val;
3569
}
3570

    
3571
static int get_expr(Monitor *mon, int64_t *pval, const char **pp)
3572
{
3573
    pch = *pp;
3574
    if (sigsetjmp(expr_env, 0)) {
3575
        *pp = pch;
3576
        return -1;
3577
    }
3578
    while (qemu_isspace(*pch))
3579
        pch++;
3580
    *pval = expr_sum(mon);
3581
    *pp = pch;
3582
    return 0;
3583
}
3584

    
3585
static int get_double(Monitor *mon, double *pval, const char **pp)
3586
{
3587
    const char *p = *pp;
3588
    char *tailp;
3589
    double d;
3590

    
3591
    d = strtod(p, &tailp);
3592
    if (tailp == p) {
3593
        monitor_printf(mon, "Number expected\n");
3594
        return -1;
3595
    }
3596
    if (d != d || d - d != 0) {
3597
        /* NaN or infinity */
3598
        monitor_printf(mon, "Bad number\n");
3599
        return -1;
3600
    }
3601
    *pval = d;
3602
    *pp = tailp;
3603
    return 0;
3604
}
3605

    
3606
/*
3607
 * Store the command-name in cmdname, and return a pointer to
3608
 * the remaining of the command string.
3609
 */
3610
static const char *get_command_name(const char *cmdline,
3611
                                    char *cmdname, size_t nlen)
3612
{
3613
    size_t len;
3614
    const char *p, *pstart;
3615

    
3616
    p = cmdline;
3617
    while (qemu_isspace(*p))
3618
        p++;
3619
    if (*p == '\0')
3620
        return NULL;
3621
    pstart = p;
3622
    while (*p != '\0' && *p != '/' && !qemu_isspace(*p))
3623
        p++;
3624
    len = p - pstart;
3625
    if (len > nlen - 1)
3626
        len = nlen - 1;
3627
    memcpy(cmdname, pstart, len);
3628
    cmdname[len] = '\0';
3629
    return p;
3630
}
3631

    
3632
/**
3633
 * Read key of 'type' into 'key' and return the current
3634
 * 'type' pointer.
3635
 */
3636
static char *key_get_info(const char *type, char **key)
3637
{
3638
    size_t len;
3639
    char *p, *str;
3640

    
3641
    if (*type == ',')
3642
        type++;
3643

    
3644
    p = strchr(type, ':');
3645
    if (!p) {
3646
        *key = NULL;
3647
        return NULL;
3648
    }
3649
    len = p - type;
3650

    
3651
    str = g_malloc(len + 1);
3652
    memcpy(str, type, len);
3653
    str[len] = '\0';
3654

    
3655
    *key = str;
3656
    return ++p;
3657
}
3658

    
3659
static int default_fmt_format = 'x';
3660
static int default_fmt_size = 4;
3661

    
3662
static int is_valid_option(const char *c, const char *typestr)
3663
{
3664
    char option[3];
3665
  
3666
    option[0] = '-';
3667
    option[1] = *c;
3668
    option[2] = '\0';
3669
  
3670
    typestr = strstr(typestr, option);
3671
    return (typestr != NULL);
3672
}
3673

    
3674
static const mon_cmd_t *search_dispatch_table(const mon_cmd_t *disp_table,
3675
                                              const char *cmdname)
3676
{
3677
    const mon_cmd_t *cmd;
3678

    
3679
    for (cmd = disp_table; cmd->name != NULL; cmd++) {
3680
        if (compare_cmd(cmdname, cmd->name)) {
3681
            return cmd;
3682
        }
3683
    }
3684

    
3685
    return NULL;
3686
}
3687

    
3688
static const mon_cmd_t *qmp_find_cmd(const char *cmdname)
3689
{
3690
    return search_dispatch_table(qmp_cmds, cmdname);
3691
}
3692

    
3693
/*
3694
 * Parse @cmdline according to command table @table.
3695
 * If @cmdline is blank, return NULL.
3696
 * If it can't be parsed, report to @mon, and return NULL.
3697
 * Else, insert command arguments into @qdict, and return the command.
3698
 * If a sub-command table exists, and if @cmdline contains an additional string
3699
 * for a sub-command, this function will try to search the sub-command table.
3700
 * If no additional string for a sub-command is present, this function will
3701
 * return the command found in @table.
3702
 * Do not assume the returned command points into @table!  It doesn't
3703
 * when the command is a sub-command.
3704
 */
3705
static const mon_cmd_t *monitor_parse_command(Monitor *mon,
3706
                                              const char *cmdline,
3707
                                              int start,
3708
                                              mon_cmd_t *table,
3709
                                              QDict *qdict)
3710
{
3711
    const char *p, *typestr;
3712
    int c;
3713
    const mon_cmd_t *cmd;
3714
    char cmdname[256];
3715
    char buf[1024];
3716
    char *key;
3717

    
3718
#ifdef DEBUG
3719
    monitor_printf(mon, "command='%s', start='%d'\n", cmdline, start);
3720
#endif
3721

    
3722
    /* extract the command name */
3723
    p = get_command_name(cmdline + start, cmdname, sizeof(cmdname));
3724
    if (!p)
3725
        return NULL;
3726

    
3727
    cmd = search_dispatch_table(table, cmdname);
3728
    if (!cmd) {
3729
        monitor_printf(mon, "unknown command: '%.*s'\n",
3730
                       (int)(p - cmdline), cmdline);
3731
        return NULL;
3732
    }
3733

    
3734
    /* filter out following useless space */
3735
    while (qemu_isspace(*p)) {
3736
        p++;
3737
    }
3738
    /* search sub command */
3739
    if (cmd->sub_table != NULL) {
3740
        /* check if user set additional command */
3741
        if (*p == '\0') {
3742
            return cmd;
3743
        }
3744
        return monitor_parse_command(mon, cmdline, p - cmdline,
3745
                                     cmd->sub_table, qdict);
3746
    }
3747

    
3748
    /* parse the parameters */
3749
    typestr = cmd->args_type;
3750
    for(;;) {
3751
        typestr = key_get_info(typestr, &key);
3752
        if (!typestr)
3753
            break;
3754
        c = *typestr;
3755
        typestr++;
3756
        switch(c) {
3757
        case 'F':
3758
        case 'B':
3759
        case 's':
3760
            {
3761
                int ret;
3762

    
3763
                while (qemu_isspace(*p))
3764
                    p++;
3765
                if (*typestr == '?') {
3766
                    typestr++;
3767
                    if (*p == '\0') {
3768
                        /* no optional string: NULL argument */
3769
                        break;
3770
                    }
3771
                }
3772
                ret = get_str(buf, sizeof(buf), &p);
3773
                if (ret < 0) {
3774
                    switch(c) {
3775
                    case 'F':
3776
                        monitor_printf(mon, "%s: filename expected\n",
3777
                                       cmdname);
3778
                        break;
3779
                    case 'B':
3780
                        monitor_printf(mon, "%s: block device name expected\n",
3781
                                       cmdname);
3782
                        break;
3783
                    default:
3784
                        monitor_printf(mon, "%s: string expected\n", cmdname);
3785
                        break;
3786
                    }
3787
                    goto fail;
3788
                }
3789
                qdict_put(qdict, key, qstring_from_str(buf));
3790
            }
3791
            break;
3792
        case 'O':
3793
            {
3794
                QemuOptsList *opts_list;
3795
                QemuOpts *opts;
3796

    
3797
                opts_list = qemu_find_opts(key);
3798
                if (!opts_list || opts_list->desc->name) {
3799
                    goto bad_type;
3800
                }
3801
                while (qemu_isspace(*p)) {
3802
                    p++;
3803
                }
3804
                if (!*p)
3805
                    break;
3806
                if (get_str(buf, sizeof(buf), &p) < 0) {
3807
                    goto fail;
3808
                }
3809
                opts = qemu_opts_parse(opts_list, buf, 1);
3810
                if (!opts) {
3811
                    goto fail;
3812
                }
3813
                qemu_opts_to_qdict(opts, qdict);
3814
                qemu_opts_del(opts);
3815
            }
3816
            break;
3817
        case '/':
3818
            {
3819
                int count, format, size;
3820

    
3821
                while (qemu_isspace(*p))
3822
                    p++;
3823
                if (*p == '/') {
3824
                    /* format found */
3825
                    p++;
3826
                    count = 1;
3827
                    if (qemu_isdigit(*p)) {
3828
                        count = 0;
3829
                        while (qemu_isdigit(*p)) {
3830
                            count = count * 10 + (*p - '0');
3831
                            p++;
3832
                        }
3833
                    }
3834
                    size = -1;
3835
                    format = -1;
3836
                    for(;;) {
3837
                        switch(*p) {
3838
                        case 'o':
3839
                        case 'd':
3840
                        case 'u':
3841
                        case 'x':
3842
                        case 'i':
3843
                        case 'c':
3844
                            format = *p++;
3845
                            break;
3846
                        case 'b':
3847
                            size = 1;
3848
                            p++;
3849
                            break;
3850
                        case 'h':
3851
                            size = 2;
3852
                            p++;
3853
                            break;
3854
                        case 'w':
3855
                            size = 4;
3856
                            p++;
3857
                            break;
3858
                        case 'g':
3859
                        case 'L':
3860
                            size = 8;
3861
                            p++;
3862
                            break;
3863
                        default:
3864
                            goto next;
3865
                        }
3866
                    }
3867
                next:
3868
                    if (*p != '\0' && !qemu_isspace(*p)) {
3869
                        monitor_printf(mon, "invalid char in format: '%c'\n",
3870
                                       *p);
3871
                        goto fail;
3872
                    }
3873
                    if (format < 0)
3874
                        format = default_fmt_format;
3875
                    if (format != 'i') {
3876
                        /* for 'i', not specifying a size gives -1 as size */
3877
                        if (size < 0)
3878
                            size = default_fmt_size;
3879
                        default_fmt_size = size;
3880
                    }
3881
                    default_fmt_format = format;
3882
                } else {
3883
                    count = 1;
3884
                    format = default_fmt_format;
3885
                    if (format != 'i') {
3886
                        size = default_fmt_size;
3887
                    } else {
3888
                        size = -1;
3889
                    }
3890
                }
3891
                qdict_put(qdict, "count", qint_from_int(count));
3892
                qdict_put(qdict, "format", qint_from_int(format));
3893
                qdict_put(qdict, "size", qint_from_int(size));
3894
            }
3895
            break;
3896
        case 'i':
3897
        case 'l':
3898
        case 'M':
3899
            {
3900
                int64_t val;
3901

    
3902
                while (qemu_isspace(*p))
3903
                    p++;
3904
                if (*typestr == '?' || *typestr == '.') {
3905
                    if (*typestr == '?') {
3906
                        if (*p == '\0') {
3907
                            typestr++;
3908
                            break;
3909
                        }
3910
                    } else {
3911
                        if (*p == '.') {
3912
                            p++;
3913
                            while (qemu_isspace(*p))
3914
                                p++;
3915
                        } else {
3916
                            typestr++;
3917
                            break;
3918
                        }
3919
                    }
3920
                    typestr++;
3921
                }
3922
                if (get_expr(mon, &val, &p))
3923
                    goto fail;
3924
                /* Check if 'i' is greater than 32-bit */
3925
                if ((c == 'i') && ((val >> 32) & 0xffffffff)) {
3926
                    monitor_printf(mon, "\'%s\' has failed: ", cmdname);
3927
                    monitor_printf(mon, "integer is for 32-bit values\n");
3928
                    goto fail;
3929
                } else if (c == 'M') {
3930
                    if (val < 0) {
3931
                        monitor_printf(mon, "enter a positive value\n");
3932
                        goto fail;
3933
                    }
3934
                    val <<= 20;
3935
                }
3936
                qdict_put(qdict, key, qint_from_int(val));
3937
            }
3938
            break;
3939
        case 'o':
3940
            {
3941
                int64_t val;
3942
                char *end;
3943

    
3944
                while (qemu_isspace(*p)) {
3945
                    p++;
3946
                }
3947
                if (*typestr == '?') {
3948
                    typestr++;
3949
                    if (*p == '\0') {
3950
                        break;
3951
                    }
3952
                }
3953
                val = strtosz(p, &end);
3954
                if (val < 0) {
3955
                    monitor_printf(mon, "invalid size\n");
3956
                    goto fail;
3957
                }
3958
                qdict_put(qdict, key, qint_from_int(val));
3959
                p = end;
3960
            }
3961
            break;
3962
        case 'T':
3963
            {
3964
                double val;
3965

    
3966
                while (qemu_isspace(*p))
3967
                    p++;
3968
                if (*typestr == '?') {
3969
                    typestr++;
3970
                    if (*p == '\0') {
3971
                        break;
3972
                    }
3973
                }
3974
                if (get_double(mon, &val, &p) < 0) {
3975
                    goto fail;
3976
                }
3977
                if (p[0] && p[1] == 's') {
3978
                    switch (*p) {
3979
                    case 'm':
3980
                        val /= 1e3; p += 2; break;
3981
                    case 'u':
3982
                        val /= 1e6; p += 2; break;
3983
                    case 'n':
3984
                        val /= 1e9; p += 2; break;
3985
                    }
3986
                }
3987
                if (*p && !qemu_isspace(*p)) {
3988
                    monitor_printf(mon, "Unknown unit suffix\n");
3989
                    goto fail;
3990
                }
3991
                qdict_put(qdict, key, qfloat_from_double(val));
3992
            }
3993
            break;
3994
        case 'b':
3995
            {
3996
                const char *beg;
3997
                int val;
3998

    
3999
                while (qemu_isspace(*p)) {
4000
                    p++;
4001
                }
4002
                beg = p;
4003
                while (qemu_isgraph(*p)) {
4004
                    p++;
4005
                }
4006
                if (p - beg == 2 && !memcmp(beg, "on", p - beg)) {
4007
                    val = 1;
4008
                } else if (p - beg == 3 && !memcmp(beg, "off", p - beg)) {
4009
                    val = 0;
4010
                } else {
4011
                    monitor_printf(mon, "Expected 'on' or 'off'\n");
4012
                    goto fail;
4013
                }
4014
                qdict_put(qdict, key, qbool_from_int(val));
4015
            }
4016
            break;
4017
        case '-':
4018
            {
4019
                const char *tmp = p;
4020
                int skip_key = 0;
4021
                /* option */
4022

    
4023
                c = *typestr++;
4024
                if (c == '\0')
4025
                    goto bad_type;
4026
                while (qemu_isspace(*p))
4027
                    p++;
4028
                if (*p == '-') {
4029
                    p++;
4030
                    if(c != *p) {
4031
                        if(!is_valid_option(p, typestr)) {
4032
                  
4033
                            monitor_printf(mon, "%s: unsupported option -%c\n",
4034
                                           cmdname, *p);
4035
                            goto fail;
4036
                        } else {
4037
                            skip_key = 1;
4038
                        }
4039
                    }
4040
                    if(skip_key) {
4041
                        p = tmp;
4042
                    } else {
4043
                        /* has option */
4044
                        p++;
4045
                        qdict_put(qdict, key, qbool_from_int(1));
4046
                    }
4047
                }
4048
            }
4049
            break;
4050
        case 'S':
4051
            {
4052
                /* package all remaining string */
4053
                int len;
4054

    
4055
                while (qemu_isspace(*p)) {
4056
                    p++;
4057
                }
4058
                if (*typestr == '?') {
4059
                    typestr++;
4060
                    if (*p == '\0') {
4061
                        /* no remaining string: NULL argument */
4062
                        break;
4063
                    }
4064
                }
4065
                len = strlen(p);
4066
                if (len <= 0) {
4067
                    monitor_printf(mon, "%s: string expected\n",
4068
                                   cmdname);
4069
                    break;
4070
                }
4071
                qdict_put(qdict, key, qstring_from_str(p));
4072
                p += len;
4073
            }
4074
            break;
4075
        default:
4076
        bad_type:
4077
            monitor_printf(mon, "%s: unknown type '%c'\n", cmdname, c);
4078
            goto fail;
4079
        }
4080
        g_free(key);
4081
        key = NULL;
4082
    }
4083
    /* check that all arguments were parsed */
4084
    while (qemu_isspace(*p))
4085
        p++;
4086
    if (*p != '\0') {
4087
        monitor_printf(mon, "%s: extraneous characters at the end of line\n",
4088
                       cmdname);
4089
        goto fail;
4090
    }
4091

    
4092
    return cmd;
4093

    
4094
fail:
4095
    g_free(key);
4096
    return NULL;
4097
}
4098

    
4099
void monitor_set_error(Monitor *mon, QError *qerror)
4100
{
4101
    /* report only the first error */
4102
    if (!mon->error) {
4103
        mon->error = qerror;
4104
    } else {
4105
        QDECREF(qerror);
4106
    }
4107
}
4108

    
4109
static void handler_audit(Monitor *mon, const mon_cmd_t *cmd, int ret)
4110
{
4111
    if (ret && !monitor_has_error(mon)) {
4112
        /*
4113
         * If it returns failure, it must have passed on error.
4114
         *
4115
         * Action: Report an internal error to the client if in QMP.
4116
         */
4117
        qerror_report(QERR_UNDEFINED_ERROR);
4118
    }
4119
}
4120

    
4121
static void handle_user_command(Monitor *mon, const char *cmdline)
4122
{
4123
    QDict *qdict;
4124
    const mon_cmd_t *cmd;
4125

    
4126
    qdict = qdict_new();
4127

    
4128
    cmd = monitor_parse_command(mon, cmdline, 0, mon->cmd_table, qdict);
4129
    if (!cmd)
4130
        goto out;
4131

    
4132
    if (handler_is_async(cmd)) {
4133
        user_async_cmd_handler(mon, cmd, qdict);
4134
    } else if (handler_is_qobject(cmd)) {
4135
        QObject *data = NULL;
4136

    
4137
        /* XXX: ignores the error code */
4138
        cmd->mhandler.cmd_new(mon, qdict, &data);
4139
        assert(!monitor_has_error(mon));
4140
        if (data) {
4141
            cmd->user_print(mon, data);
4142
            qobject_decref(data);
4143
        }
4144
    } else {
4145
        cmd->mhandler.cmd(mon, qdict);
4146
    }
4147

    
4148
out:
4149
    QDECREF(qdict);
4150
}
4151

    
4152
static void cmd_completion(Monitor *mon, const char *name, const char *list)
4153
{
4154
    const char *p, *pstart;
4155
    char cmd[128];
4156
    int len;
4157

    
4158
    p = list;
4159
    for(;;) {
4160
        pstart = p;
4161
        p = strchr(p, '|');
4162
        if (!p)
4163
            p = pstart + strlen(pstart);
4164
        len = p - pstart;
4165
        if (len > sizeof(cmd) - 2)
4166
            len = sizeof(cmd) - 2;
4167
        memcpy(cmd, pstart, len);
4168
        cmd[len] = '\0';
4169
        if (name[0] == '\0' || !strncmp(name, cmd, strlen(name))) {
4170
            readline_add_completion(mon->rs, cmd);
4171
        }
4172
        if (*p == '\0')
4173
            break;
4174
        p++;
4175
    }
4176
}
4177

    
4178
static void file_completion(Monitor *mon, const char *input)
4179
{
4180
    DIR *ffs;
4181
    struct dirent *d;
4182
    char path[1024];
4183
    char file[1024], file_prefix[1024];
4184
    int input_path_len;
4185
    const char *p;
4186

    
4187
    p = strrchr(input, '/');
4188
    if (!p) {
4189
        input_path_len = 0;
4190
        pstrcpy(file_prefix, sizeof(file_prefix), input);
4191
        pstrcpy(path, sizeof(path), ".");
4192
    } else {
4193
        input_path_len = p - input + 1;
4194
        memcpy(path, input, input_path_len);
4195
        if (input_path_len > sizeof(path) - 1)
4196
            input_path_len = sizeof(path) - 1;
4197
        path[input_path_len] = '\0';
4198
        pstrcpy(file_prefix, sizeof(file_prefix), p + 1);
4199
    }
4200
#ifdef DEBUG_COMPLETION
4201
    monitor_printf(mon, "input='%s' path='%s' prefix='%s'\n",
4202
                   input, path, file_prefix);
4203
#endif
4204
    ffs = opendir(path);
4205
    if (!ffs)
4206
        return;
4207
    for(;;) {
4208
        struct stat sb;
4209
        d = readdir(ffs);
4210
        if (!d)
4211
            break;
4212

    
4213
        if (strcmp(d->d_name, ".") == 0 || strcmp(d->d_name, "..") == 0) {
4214
            continue;
4215
        }
4216

    
4217
        if (strstart(d->d_name, file_prefix, NULL)) {
4218
            memcpy(file, input, input_path_len);
4219
            if (input_path_len < sizeof(file))
4220
                pstrcpy(file + input_path_len, sizeof(file) - input_path_len,
4221
                        d->d_name);
4222
            /* stat the file to find out if it's a directory.
4223
             * In that case add a slash to speed up typing long paths
4224
             */
4225
            if (stat(file, &sb) == 0 && S_ISDIR(sb.st_mode)) {
4226
                pstrcat(file, sizeof(file), "/");
4227
            }
4228
            readline_add_completion(mon->rs, file);
4229
        }
4230
    }
4231
    closedir(ffs);
4232
}
4233

    
4234
typedef struct MonitorBlockComplete {
4235
    Monitor *mon;
4236
    const char *input;
4237
} MonitorBlockComplete;
4238

    
4239
static void block_completion_it(void *opaque, BlockDriverState *bs)
4240
{
4241
    const char *name = bdrv_get_device_name(bs);
4242
    MonitorBlockComplete *mbc = opaque;
4243
    Monitor *mon = mbc->mon;
4244
    const char *input = mbc->input;
4245

    
4246
    if (input[0] == '\0' ||
4247
        !strncmp(name, (char *)input, strlen(input))) {
4248
        readline_add_completion(mon->rs, name);
4249
    }
4250
}
4251

    
4252
static const char *next_arg_type(const char *typestr)
4253
{
4254
    const char *p = strchr(typestr, ':');
4255
    return (p != NULL ? ++p : typestr);
4256
}
4257

    
4258
static void device_add_completion(ReadLineState *rs, const char *str)
4259
{
4260
    GSList *list, *elt;
4261
    size_t len;
4262

    
4263
    len = strlen(str);
4264
    readline_set_completion_index(rs, len);
4265
    list = elt = object_class_get_list(TYPE_DEVICE, false);
4266
    while (elt) {
4267
        const char *name;
4268
        DeviceClass *dc = OBJECT_CLASS_CHECK(DeviceClass, elt->data,
4269
                                             TYPE_DEVICE);
4270
        name = object_class_get_name(OBJECT_CLASS(dc));
4271
        if (!strncmp(name, str, len)) {
4272
            readline_add_completion(rs, name);
4273
        }
4274
        elt = elt->next;
4275
    }
4276
    g_slist_free(list);
4277
}
4278

    
4279
static void object_add_completion(ReadLineState *rs, const char *str)
4280
{
4281
    GSList *list, *elt;
4282
    size_t len;
4283

    
4284
    len = strlen(str);
4285
    readline_set_completion_index(rs, len);
4286
    list = elt = object_class_get_list(TYPE_USER_CREATABLE, false);
4287
    while (elt) {
4288
        const char *name;
4289

    
4290
        name = object_class_get_name(OBJECT_CLASS(elt->data));
4291
        if (!strncmp(name, str, len) && strcmp(name, TYPE_USER_CREATABLE)) {
4292
            readline_add_completion(rs, name);
4293
        }
4294
        elt = elt->next;
4295
    }
4296
    g_slist_free(list);
4297
}
4298

    
4299
static void device_del_completion(ReadLineState *rs, BusState *bus,
4300
                                  const char *str, size_t len)
4301
{
4302
    BusChild *kid;
4303

    
4304
    QTAILQ_FOREACH(kid, &bus->children, sibling) {
4305
        DeviceState *dev = kid->child;
4306
        BusState *dev_child;
4307

    
4308
        if (dev->id && !strncmp(str, dev->id, len)) {
4309
            readline_add_completion(rs, dev->id);
4310
        }
4311

    
4312
        QLIST_FOREACH(dev_child, &dev->child_bus, sibling) {
4313
            device_del_completion(rs, dev_child, str, len);
4314
        }
4315
    }
4316
}
4317

    
4318
static void object_del_completion(ReadLineState *rs, const char *str)
4319
{
4320
    ObjectPropertyInfoList *list, *start;
4321
    size_t len;
4322

    
4323
    len = strlen(str);
4324
    readline_set_completion_index(rs, len);
4325

    
4326
    start = list = qmp_qom_list("/objects", NULL);
4327
    while (list) {
4328
        ObjectPropertyInfo *info = list->value;
4329

    
4330
        if (!strncmp(info->type, "child<", 5)
4331
            && !strncmp(info->name, str, len)) {
4332
            readline_add_completion(rs, info->name);
4333
        }
4334
        list = list->next;
4335
    }
4336
    qapi_free_ObjectPropertyInfoList(start);
4337
}
4338

    
4339
static void monitor_find_completion_by_table(Monitor *mon,
4340
                                             const mon_cmd_t *cmd_table,
4341
                                             char **args,
4342
                                             int nb_args)
4343
{
4344
    const char *cmdname;
4345
    int i;
4346
    const char *ptype, *str;
4347
    const mon_cmd_t *cmd;
4348
    MonitorBlockComplete mbs;
4349

    
4350
    if (nb_args <= 1) {
4351
        /* command completion */
4352
        if (nb_args == 0)
4353
            cmdname = "";
4354
        else
4355
            cmdname = args[0];
4356
        readline_set_completion_index(mon->rs, strlen(cmdname));
4357
        for (cmd = cmd_table; cmd->name != NULL; cmd++) {
4358
            cmd_completion(mon, cmdname, cmd->name);
4359
        }
4360
    } else {
4361
        /* find the command */
4362
        for (cmd = cmd_table; cmd->name != NULL; cmd++) {
4363
            if (compare_cmd(args[0], cmd->name)) {
4364
                break;
4365
            }
4366
        }
4367
        if (!cmd->name) {
4368
            return;
4369
        }
4370

    
4371
        if (cmd->sub_table) {
4372
            /* do the job again */
4373
            return monitor_find_completion_by_table(mon, cmd->sub_table,
4374
                                                    &args[1], nb_args - 1);
4375
        }
4376

    
4377
        ptype = next_arg_type(cmd->args_type);
4378
        for(i = 0; i < nb_args - 2; i++) {
4379
            if (*ptype != '\0') {
4380
                ptype = next_arg_type(ptype);
4381
                while (*ptype == '?')
4382
                    ptype = next_arg_type(ptype);
4383
            }
4384
        }
4385
        str = args[nb_args - 1];
4386
        if (*ptype == '-' && ptype[1] != '\0') {
4387
            ptype = next_arg_type(ptype);
4388
        }
4389
        switch(*ptype) {
4390
        case 'F':
4391
            /* file completion */
4392
            readline_set_completion_index(mon->rs, strlen(str));
4393
            file_completion(mon, str);
4394
            break;
4395
        case 'B':
4396
            /* block device name completion */
4397
            mbs.mon = mon;
4398
            mbs.input = str;
4399
            readline_set_completion_index(mon->rs, strlen(str));
4400
            bdrv_iterate(block_completion_it, &mbs);
4401
            break;
4402
        case 'O':
4403
            if (!strcmp(cmd->name, "device_add") && nb_args == 2) {
4404
                device_add_completion(mon->rs, str);
4405
            } else if (!strcmp(cmd->name, "object_add") && nb_args == 2) {
4406
                object_add_completion(mon->rs, str);
4407
            }
4408
            break;
4409
        case 's':
4410
        case 'S':
4411
            if (!strcmp(cmd->name, "sendkey")) {
4412
                char *sep = strrchr(str, '-');
4413
                if (sep)
4414
                    str = sep + 1;
4415
                readline_set_completion_index(mon->rs, strlen(str));
4416
                for (i = 0; i < Q_KEY_CODE_MAX; i++) {
4417
                    cmd_completion(mon, str, QKeyCode_lookup[i]);
4418
                }
4419
            } else if (!strcmp(cmd->name, "help|?")) {
4420
                monitor_find_completion_by_table(mon, cmd_table,
4421
                                                 &args[1], nb_args - 1);
4422
            } else if (!strcmp(cmd->name, "device_del") && nb_args == 2) {
4423
                size_t len = strlen(str);
4424
                readline_set_completion_index(mon->rs, len);
4425
                device_del_completion(mon->rs, sysbus_get_default(), str, len);
4426
            } else if (!strcmp(cmd->name, "object_del") && nb_args == 2) {
4427
                object_del_completion(mon->rs, str);
4428
            }
4429
            break;
4430
        default:
4431
            break;
4432
        }
4433
    }
4434
}
4435

    
4436
static void monitor_find_completion(void *opaque,
4437
                                    const char *cmdline)
4438
{
4439
    Monitor *mon = opaque;
4440
    char *args[MAX_ARGS];
4441
    int nb_args, len;
4442

    
4443
    /* 1. parse the cmdline */
4444
    if (parse_cmdline(cmdline, &nb_args, args) < 0) {
4445
        return;
4446
    }
4447
#ifdef DEBUG_COMPLETION
4448
    for (i = 0; i < nb_args; i++) {
4449
        monitor_printf(mon, "arg%d = '%s'\n", i, args[i]);
4450
    }
4451
#endif
4452

    
4453
    /* if the line ends with a space, it means we want to complete the
4454
       next arg */
4455
    len = strlen(cmdline);
4456
    if (len > 0 && qemu_isspace(cmdline[len - 1])) {
4457
        if (nb_args >= MAX_ARGS) {
4458
            goto cleanup;
4459
        }
4460
        args[nb_args++] = g_strdup("");
4461
    }
4462

    
4463
    /* 2. auto complete according to args */
4464
    monitor_find_completion_by_table(mon, mon->cmd_table, args, nb_args);
4465

    
4466
cleanup:
4467
    free_cmdline_args(args, nb_args);
4468
}
4469

    
4470
static int monitor_can_read(void *opaque)
4471
{
4472
    Monitor *mon = opaque;
4473

    
4474
    return (mon->suspend_cnt == 0) ? 1 : 0;
4475
}
4476

    
4477
static int invalid_qmp_mode(const Monitor *mon, const char *cmd_name)
4478
{
4479
    int is_cap = compare_cmd(cmd_name, "qmp_capabilities");
4480
    return (qmp_cmd_mode(mon) ? is_cap : !is_cap);
4481
}
4482

    
4483
/*
4484
 * Argument validation rules:
4485
 *
4486
 * 1. The argument must exist in cmd_args qdict
4487
 * 2. The argument type must be the expected one
4488
 *
4489
 * Special case: If the argument doesn't exist in cmd_args and
4490
 *               the QMP_ACCEPT_UNKNOWNS flag is set, then the
4491
 *               checking is skipped for it.
4492
 */
4493
static int check_client_args_type(const QDict *client_args,
4494
                                  const QDict *cmd_args, int flags)
4495
{
4496
    const QDictEntry *ent;
4497

    
4498
    for (ent = qdict_first(client_args); ent;ent = qdict_next(client_args,ent)){
4499
        QObject *obj;
4500
        QString *arg_type;
4501
        const QObject *client_arg = qdict_entry_value(ent);
4502
        const char *client_arg_name = qdict_entry_key(ent);
4503

    
4504
        obj = qdict_get(cmd_args, client_arg_name);
4505
        if (!obj) {
4506
            if (flags & QMP_ACCEPT_UNKNOWNS) {
4507
                /* handler accepts unknowns */
4508
                continue;
4509
            }
4510
            /* client arg doesn't exist */
4511
            qerror_report(QERR_INVALID_PARAMETER, client_arg_name);
4512
            return -1;
4513
        }
4514

    
4515
        arg_type = qobject_to_qstring(obj);
4516
        assert(arg_type != NULL);
4517

    
4518
        /* check if argument's type is correct */
4519
        switch (qstring_get_str(arg_type)[0]) {
4520
        case 'F':
4521
        case 'B':
4522
        case 's':
4523
            if (qobject_type(client_arg) != QTYPE_QSTRING) {
4524
                qerror_report(QERR_INVALID_PARAMETER_TYPE, client_arg_name,
4525
                              "string");
4526
                return -1;
4527
            }
4528
        break;
4529
        case 'i':
4530
        case 'l':
4531
        case 'M':
4532
        case 'o':
4533
            if (qobject_type(client_arg) != QTYPE_QINT) {
4534
                qerror_report(QERR_INVALID_PARAMETER_TYPE, client_arg_name,
4535
                              "int");
4536
                return -1; 
4537
            }
4538
            break;
4539
        case 'T':
4540
            if (qobject_type(client_arg) != QTYPE_QINT &&
4541
                qobject_type(client_arg) != QTYPE_QFLOAT) {
4542
                qerror_report(QERR_INVALID_PARAMETER_TYPE, client_arg_name,
4543
                              "number");
4544
               return -1; 
4545
            }
4546
            break;
4547
        case 'b':
4548
        case '-':
4549
            if (qobject_type(client_arg) != QTYPE_QBOOL) {
4550
                qerror_report(QERR_INVALID_PARAMETER_TYPE, client_arg_name,
4551
                              "bool");
4552
               return -1; 
4553
            }
4554
            break;
4555
        case 'O':
4556
            assert(flags & QMP_ACCEPT_UNKNOWNS);
4557
            break;
4558
        case 'q':
4559
            /* Any QObject can be passed.  */
4560
            break;
4561
        case '/':
4562
        case '.':
4563
            /*
4564
             * These types are not supported by QMP and thus are not
4565
             * handled here. Fall through.
4566
             */
4567
        default:
4568
            abort();
4569
        }
4570
    }
4571

    
4572
    return 0;
4573
}
4574

    
4575
/*
4576
 * - Check if the client has passed all mandatory args
4577
 * - Set special flags for argument validation
4578
 */
4579
static int check_mandatory_args(const QDict *cmd_args,
4580
                                const QDict *client_args, int *flags)
4581
{
4582
    const QDictEntry *ent;
4583

    
4584
    for (ent = qdict_first(cmd_args); ent; ent = qdict_next(cmd_args, ent)) {
4585
        const char *cmd_arg_name = qdict_entry_key(ent);
4586
        QString *type = qobject_to_qstring(qdict_entry_value(ent));
4587
        assert(type != NULL);
4588

    
4589
        if (qstring_get_str(type)[0] == 'O') {
4590
            assert((*flags & QMP_ACCEPT_UNKNOWNS) == 0);
4591
            *flags |= QMP_ACCEPT_UNKNOWNS;
4592
        } else if (qstring_get_str(type)[0] != '-' &&
4593
                   qstring_get_str(type)[1] != '?' &&
4594
                   !qdict_haskey(client_args, cmd_arg_name)) {
4595
            qerror_report(QERR_MISSING_PARAMETER, cmd_arg_name);
4596
            return -1;
4597
        }
4598
    }
4599

    
4600
    return 0;
4601
}
4602

    
4603
static QDict *qdict_from_args_type(const char *args_type)
4604
{
4605
    int i;
4606
    QDict *qdict;
4607
    QString *key, *type, *cur_qs;
4608

    
4609
    assert(args_type != NULL);
4610

    
4611
    qdict = qdict_new();
4612

    
4613
    if (args_type == NULL || args_type[0] == '\0') {
4614
        /* no args, empty qdict */
4615
        goto out;
4616
    }
4617

    
4618
    key = qstring_new();
4619
    type = qstring_new();
4620

    
4621
    cur_qs = key;
4622

    
4623
    for (i = 0;; i++) {
4624
        switch (args_type[i]) {
4625
            case ',':
4626
            case '\0':
4627
                qdict_put(qdict, qstring_get_str(key), type);
4628
                QDECREF(key);
4629
                if (args_type[i] == '\0') {
4630
                    goto out;
4631
                }
4632
                type = qstring_new(); /* qdict has ref */
4633
                cur_qs = key = qstring_new();
4634
                break;
4635
            case ':':
4636
                cur_qs = type;
4637
                break;
4638
            default:
4639
                qstring_append_chr(cur_qs, args_type[i]);
4640
                break;
4641
        }
4642
    }
4643

    
4644
out:
4645
    return qdict;
4646
}
4647

    
4648
/*
4649
 * Client argument checking rules:
4650
 *
4651
 * 1. Client must provide all mandatory arguments
4652
 * 2. Each argument provided by the client must be expected
4653
 * 3. Each argument provided by the client must have the type expected
4654
 *    by the command
4655
 */
4656
static int qmp_check_client_args(const mon_cmd_t *cmd, QDict *client_args)
4657
{
4658
    int flags, err;
4659
    QDict *cmd_args;
4660

    
4661
    cmd_args = qdict_from_args_type(cmd->args_type);
4662

    
4663
    flags = 0;
4664
    err = check_mandatory_args(cmd_args, client_args, &flags);
4665
    if (err) {
4666
        goto out;
4667
    }
4668

    
4669
    err = check_client_args_type(client_args, cmd_args, flags);
4670

    
4671
out:
4672
    QDECREF(cmd_args);
4673
    return err;
4674
}
4675

    
4676
/*
4677
 * Input object checking rules
4678
 *
4679
 * 1. Input object must be a dict
4680
 * 2. The "execute" key must exist
4681
 * 3. The "execute" key must be a string
4682
 * 4. If the "arguments" key exists, it must be a dict
4683
 * 5. If the "id" key exists, it can be anything (ie. json-value)
4684
 * 6. Any argument not listed above is considered invalid
4685
 */
4686
static QDict *qmp_check_input_obj(QObject *input_obj)
4687
{
4688
    const QDictEntry *ent;
4689
    int has_exec_key = 0;
4690
    QDict *input_dict;
4691

    
4692
    if (qobject_type(input_obj) != QTYPE_QDICT) {
4693
        qerror_report(QERR_QMP_BAD_INPUT_OBJECT, "object");
4694
        return NULL;
4695
    }
4696

    
4697
    input_dict = qobject_to_qdict(input_obj);
4698

    
4699
    for (ent = qdict_first(input_dict); ent; ent = qdict_next(input_dict, ent)){
4700
        const char *arg_name = qdict_entry_key(ent);
4701
        const QObject *arg_obj = qdict_entry_value(ent);
4702

    
4703
        if (!strcmp(arg_name, "execute")) {
4704
            if (qobject_type(arg_obj) != QTYPE_QSTRING) {
4705
                qerror_report(QERR_QMP_BAD_INPUT_OBJECT_MEMBER, "execute",
4706
                              "string");
4707
                return NULL;
4708
            }
4709
            has_exec_key = 1;
4710
        } else if (!strcmp(arg_name, "arguments")) {
4711
            if (qobject_type(arg_obj) != QTYPE_QDICT) {
4712
                qerror_report(QERR_QMP_BAD_INPUT_OBJECT_MEMBER, "arguments",
4713
                              "object");
4714
                return NULL;
4715
            }
4716
        } else if (!strcmp(arg_name, "id")) {
4717
            /* FIXME: check duplicated IDs for async commands */
4718
        } else {
4719
            qerror_report(QERR_QMP_EXTRA_MEMBER, arg_name);
4720
            return NULL;
4721
        }
4722
    }
4723

    
4724
    if (!has_exec_key) {
4725
        qerror_report(QERR_QMP_BAD_INPUT_OBJECT, "execute");
4726
        return NULL;
4727
    }
4728

    
4729
    return input_dict;
4730
}
4731

    
4732
static void qmp_call_cmd(Monitor *mon, const mon_cmd_t *cmd,
4733
                         const QDict *params)
4734
{
4735
    int ret;
4736
    QObject *data = NULL;
4737

    
4738
    ret = cmd->mhandler.cmd_new(mon, params, &data);
4739
    handler_audit(mon, cmd, ret);
4740
    monitor_protocol_emitter(mon, data);
4741
    qobject_decref(data);
4742
}
4743

    
4744
static void handle_qmp_command(JSONMessageParser *parser, QList *tokens)
4745
{
4746
    int err;
4747
    QObject *obj;
4748
    QDict *input, *args;
4749
    const mon_cmd_t *cmd;
4750
    const char *cmd_name;
4751
    Monitor *mon = cur_mon;
4752

    
4753
    args = input = NULL;
4754

    
4755
    obj = json_parser_parse(tokens, NULL);
4756
    if (!obj) {
4757
        // FIXME: should be triggered in json_parser_parse()
4758
        qerror_report(QERR_JSON_PARSING);
4759
        goto err_out;
4760
    }
4761

    
4762
    input = qmp_check_input_obj(obj);
4763
    if (!input) {
4764
        qobject_decref(obj);
4765
        goto err_out;
4766
    }
4767

    
4768
    mon->mc->id = qdict_get(input, "id");
4769
    qobject_incref(mon->mc->id);
4770

    
4771
    cmd_name = qdict_get_str(input, "execute");
4772
    trace_handle_qmp_command(mon, cmd_name);
4773
    if (invalid_qmp_mode(mon, cmd_name)) {
4774
        qerror_report(QERR_COMMAND_NOT_FOUND, cmd_name);
4775
        goto err_out;
4776
    }
4777

    
4778
    cmd = qmp_find_cmd(cmd_name);
4779
    if (!cmd) {
4780
        qerror_report(QERR_COMMAND_NOT_FOUND, cmd_name);
4781
        goto err_out;
4782
    }
4783

    
4784
    obj = qdict_get(input, "arguments");
4785
    if (!obj) {
4786
        args = qdict_new();
4787
    } else {
4788
        args = qobject_to_qdict(obj);
4789
        QINCREF(args);
4790
    }
4791

    
4792
    err = qmp_check_client_args(cmd, args);
4793
    if (err < 0) {
4794
        goto err_out;
4795
    }
4796

    
4797
    if (handler_is_async(cmd)) {
4798
        err = qmp_async_cmd_handler(mon, cmd, args);
4799
        if (err) {
4800
            /* emit the error response */
4801
            goto err_out;
4802
        }
4803
    } else {
4804
        qmp_call_cmd(mon, cmd, args);
4805
    }
4806

    
4807
    goto out;
4808

    
4809
err_out:
4810
    monitor_protocol_emitter(mon, NULL);
4811
out:
4812
    QDECREF(input);
4813
    QDECREF(args);
4814
}
4815

    
4816
/**
4817
 * monitor_control_read(): Read and handle QMP input
4818
 */
4819
static void monitor_control_read(void *opaque, const uint8_t *buf, int size)
4820
{
4821
    Monitor *old_mon = cur_mon;
4822

    
4823
    cur_mon = opaque;
4824

    
4825
    json_message_parser_feed(&cur_mon->mc->parser, (const char *) buf, size);
4826

    
4827
    cur_mon = old_mon;
4828
}
4829

    
4830
static void monitor_read(void *opaque, const uint8_t *buf, int size)
4831
{
4832
    Monitor *old_mon = cur_mon;
4833
    int i;
4834

    
4835
    cur_mon = opaque;
4836

    
4837
    if (cur_mon->rs) {
4838
        for (i = 0; i < size; i++)
4839
            readline_handle_byte(cur_mon->rs, buf[i]);
4840
    } else {
4841
        if (size == 0 || buf[size - 1] != 0)
4842
            monitor_printf(cur_mon, "corrupted command\n");
4843
        else
4844
            handle_user_command(cur_mon, (char *)buf);
4845
    }
4846

    
4847
    cur_mon = old_mon;
4848
}
4849

    
4850
static void monitor_command_cb(void *opaque, const char *cmdline,
4851
                               void *readline_opaque)
4852
{
4853
    Monitor *mon = opaque;
4854

    
4855
    monitor_suspend(mon);
4856
    handle_user_command(mon, cmdline);
4857
    monitor_resume(mon);
4858
}
4859

    
4860
int monitor_suspend(Monitor *mon)
4861
{
4862
    if (!mon->rs)
4863
        return -ENOTTY;
4864
    mon->suspend_cnt++;
4865
    return 0;
4866
}
4867

    
4868
void monitor_resume(Monitor *mon)
4869
{
4870
    if (!mon->rs)
4871
        return;
4872
    if (--mon->suspend_cnt == 0)
4873
        readline_show_prompt(mon->rs);
4874
}
4875

    
4876
static QObject *get_qmp_greeting(void)
4877
{
4878
    QObject *ver = NULL;
4879

    
4880
    qmp_marshal_input_query_version(NULL, NULL, &ver);
4881
    return qobject_from_jsonf("{'QMP':{'version': %p,'capabilities': []}}",ver);
4882
}
4883

    
4884
/**
4885
 * monitor_control_event(): Print QMP gretting
4886
 */
4887
static void monitor_control_event(void *opaque, int event)
4888
{
4889
    QObject *data;
4890
    Monitor *mon = opaque;
4891

    
4892
    switch (event) {
4893
    case CHR_EVENT_OPENED:
4894
        mon->mc->command_mode = 0;
4895
        data = get_qmp_greeting();
4896
        monitor_json_emitter(mon, data);
4897
        qobject_decref(data);
4898
        mon_refcount++;
4899
        break;
4900
    case CHR_EVENT_CLOSED:
4901
        json_message_parser_destroy(&mon->mc->parser);
4902
        json_message_parser_init(&mon->mc->parser, handle_qmp_command);
4903
        mon_refcount--;
4904
        monitor_fdsets_cleanup();
4905
        break;
4906
    }
4907
}
4908

    
4909
static void monitor_event(void *opaque, int event)
4910
{
4911
    Monitor *mon = opaque;
4912

    
4913
    switch (event) {
4914
    case CHR_EVENT_MUX_IN:
4915
        mon->mux_out = 0;
4916
        if (mon->reset_seen) {
4917
            readline_restart(mon->rs);
4918
            monitor_resume(mon);
4919
            monitor_flush(mon);
4920
        } else {
4921
            mon->suspend_cnt = 0;
4922
        }
4923
        break;
4924

    
4925
    case CHR_EVENT_MUX_OUT:
4926
        if (mon->reset_seen) {
4927
            if (mon->suspend_cnt == 0) {
4928
                monitor_printf(mon, "\n");
4929
            }
4930
            monitor_flush(mon);
4931
            monitor_suspend(mon);
4932
        } else {
4933
            mon->suspend_cnt++;
4934
        }
4935
        mon->mux_out = 1;
4936
        break;
4937

    
4938
    case CHR_EVENT_OPENED:
4939
        monitor_printf(mon, "QEMU %s monitor - type 'help' for more "
4940
                       "information\n", QEMU_VERSION);
4941
        if (!mon->mux_out) {
4942
            readline_show_prompt(mon->rs);
4943
        }
4944
        mon->reset_seen = 1;
4945
        mon_refcount++;
4946
        break;
4947

    
4948
    case CHR_EVENT_CLOSED:
4949
        mon_refcount--;
4950
        monitor_fdsets_cleanup();
4951
        break;
4952
    }
4953
}
4954

    
4955
static int
4956
compare_mon_cmd(const void *a, const void *b)
4957
{
4958
    return strcmp(((const mon_cmd_t *)a)->name,
4959
            ((const mon_cmd_t *)b)->name);
4960
}
4961

    
4962
static void sortcmdlist(void)
4963
{
4964
    int array_num;
4965
    int elem_size = sizeof(mon_cmd_t);
4966

    
4967
    array_num = sizeof(mon_cmds)/elem_size-1;
4968
    qsort((void *)mon_cmds, array_num, elem_size, compare_mon_cmd);
4969

    
4970
    array_num = sizeof(info_cmds)/elem_size-1;
4971
    qsort((void *)info_cmds, array_num, elem_size, compare_mon_cmd);
4972
}
4973

    
4974

    
4975
/*
4976
 * Local variables:
4977
 *  c-indent-level: 4
4978
 *  c-basic-offset: 4
4979
 *  tab-width: 8
4980
 * End:
4981
 */
4982

    
4983
/* These functions just adapt the readline interface in a typesafe way.  We
4984
 * could cast function pointers but that discards compiler checks.
4985
 */
4986
static void GCC_FMT_ATTR(2, 3) monitor_readline_printf(void *opaque,
4987
                                                       const char *fmt, ...)
4988
{
4989
    va_list ap;
4990
    va_start(ap, fmt);
4991
    monitor_vprintf(opaque, fmt, ap);
4992
    va_end(ap);
4993
}
4994

    
4995
static void monitor_readline_flush(void *opaque)
4996
{
4997
    monitor_flush(opaque);
4998
}
4999

    
5000
void monitor_init(CharDriverState *chr, int flags)
5001
{
5002
    static int is_first_init = 1;
5003
    Monitor *mon;
5004

    
5005
    if (is_first_init) {
5006
        monitor_protocol_event_init();
5007
        sortcmdlist();
5008
        is_first_init = 0;
5009
    }
5010

    
5011
    mon = g_malloc(sizeof(*mon));
5012
    monitor_data_init(mon);
5013

    
5014
    mon->chr = chr;
5015
    mon->flags = flags;
5016
    if (flags & MONITOR_USE_READLINE) {
5017
        mon->rs = readline_init(monitor_readline_printf,
5018
                                monitor_readline_flush,
5019
                                mon,
5020
                                monitor_find_completion);
5021
        monitor_read_command(mon, 0);
5022
    }
5023

    
5024
    if (monitor_ctrl_mode(mon)) {
5025
        mon->mc = g_malloc0(sizeof(MonitorControl));
5026
        /* Control mode requires special handlers */
5027
        qemu_chr_add_handlers(chr, monitor_can_read, monitor_control_read,
5028
                              monitor_control_event, mon);
5029
        qemu_chr_fe_set_echo(chr, true);
5030

    
5031
        json_message_parser_init(&mon->mc->parser, handle_qmp_command);
5032
    } else {
5033
        qemu_chr_add_handlers(chr, monitor_can_read, monitor_read,
5034
                              monitor_event, mon);
5035
    }
5036

    
5037
    QLIST_INSERT_HEAD(&mon_list, mon, entry);
5038
    if (!default_mon || (flags & MONITOR_IS_DEFAULT))
5039
        default_mon = mon;
5040
}
5041

    
5042
static void bdrv_password_cb(void *opaque, const char *password,
5043
                             void *readline_opaque)
5044
{
5045
    Monitor *mon = opaque;
5046
    BlockDriverState *bs = readline_opaque;
5047
    int ret = 0;
5048

    
5049
    if (bdrv_set_key(bs, password) != 0) {
5050
        monitor_printf(mon, "invalid password\n");
5051
        ret = -EPERM;
5052
    }
5053
    if (mon->password_completion_cb)
5054
        mon->password_completion_cb(mon->password_opaque, ret);
5055

    
5056
    monitor_read_command(mon, 1);
5057
}
5058

    
5059
ReadLineState *monitor_get_rs(Monitor *mon)
5060
{
5061
    return mon->rs;
5062
}
5063

    
5064
int monitor_read_bdrv_key_start(Monitor *mon, BlockDriverState *bs,
5065
                                BlockDriverCompletionFunc *completion_cb,
5066
                                void *opaque)
5067
{
5068
    int err;
5069

    
5070
    if (!bdrv_key_required(bs)) {
5071
        if (completion_cb)
5072
            completion_cb(opaque, 0);
5073
        return 0;
5074
    }
5075

    
5076
    if (monitor_ctrl_mode(mon)) {
5077
        qerror_report(QERR_DEVICE_ENCRYPTED, bdrv_get_device_name(bs),
5078
                      bdrv_get_encrypted_filename(bs));
5079
        return -1;
5080
    }
5081

    
5082
    monitor_printf(mon, "%s (%s) is encrypted.\n", bdrv_get_device_name(bs),
5083
                   bdrv_get_encrypted_filename(bs));
5084

    
5085
    mon->password_completion_cb = completion_cb;
5086
    mon->password_opaque = opaque;
5087

    
5088
    err = monitor_read_password(mon, bdrv_password_cb, bs);
5089

    
5090
    if (err && completion_cb)
5091
        completion_cb(opaque, err);
5092

    
5093
    return err;
5094
}
5095

    
5096
int monitor_read_block_device_key(Monitor *mon, const char *device,
5097
                                  BlockDriverCompletionFunc *completion_cb,
5098
                                  void *opaque)
5099
{
5100
    BlockDriverState *bs;
5101

    
5102
    bs = bdrv_find(device);
5103
    if (!bs) {
5104
        monitor_printf(mon, "Device not found %s\n", device);
5105
        return -1;
5106
    }
5107

    
5108
    return monitor_read_bdrv_key_start(mon, bs, completion_cb, opaque);
5109
}
5110

    
5111
QemuOptsList qemu_mon_opts = {
5112
    .name = "mon",
5113
    .implied_opt_name = "chardev",
5114
    .head = QTAILQ_HEAD_INITIALIZER(qemu_mon_opts.head),
5115
    .desc = {
5116
        {
5117
            .name = "mode",
5118
            .type = QEMU_OPT_STRING,
5119
        },{
5120
            .name = "chardev",
5121
            .type = QEMU_OPT_STRING,
5122
        },{
5123
            .name = "default",
5124
            .type = QEMU_OPT_BOOL,
5125
        },{
5126
            .name = "pretty",
5127
            .type = QEMU_OPT_BOOL,
5128
        },
5129
        { /* end of list */ }
5130
    },
5131
};