Statistics
| Branch: | Revision:

root / qemu-char.c @ 44f3bcd2

History | View | Annotate | Download (88.1 kB)

1
/*
2
 * QEMU System Emulator
3
 *
4
 * Copyright (c) 2003-2008 Fabrice Bellard
5
 *
6
 * Permission is hereby granted, free of charge, to any person obtaining a copy
7
 * of this software and associated documentation files (the "Software"), to deal
8
 * in the Software without restriction, including without limitation the rights
9
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10
 * copies of the Software, and to permit persons to whom the Software is
11
 * furnished to do so, subject to the following conditions:
12
 *
13
 * The above copyright notice and this permission notice shall be included in
14
 * all copies or substantial portions of the Software.
15
 *
16
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22
 * THE SOFTWARE.
23
 */
24
#include "qemu-common.h"
25
#include "monitor/monitor.h"
26
#include "ui/console.h"
27
#include "sysemu/sysemu.h"
28
#include "qemu/timer.h"
29
#include "char/char.h"
30
#include "hw/usb.h"
31
#include "hw/baum.h"
32
#include "hw/msmouse.h"
33
#include "qmp-commands.h"
34

    
35
#include <unistd.h>
36
#include <fcntl.h>
37
#include <time.h>
38
#include <errno.h>
39
#include <sys/time.h>
40
#include <zlib.h>
41

    
42
#ifndef _WIN32
43
#include <sys/times.h>
44
#include <sys/wait.h>
45
#include <termios.h>
46
#include <sys/mman.h>
47
#include <sys/ioctl.h>
48
#include <sys/resource.h>
49
#include <sys/socket.h>
50
#include <netinet/in.h>
51
#include <net/if.h>
52
#include <arpa/inet.h>
53
#include <dirent.h>
54
#include <netdb.h>
55
#include <sys/select.h>
56
#ifdef CONFIG_BSD
57
#include <sys/stat.h>
58
#if defined(__GLIBC__)
59
#include <pty.h>
60
#elif defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
61
#include <libutil.h>
62
#else
63
#include <util.h>
64
#endif
65
#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
66
#include <dev/ppbus/ppi.h>
67
#include <dev/ppbus/ppbconf.h>
68
#elif defined(__DragonFly__)
69
#include <dev/misc/ppi/ppi.h>
70
#include <bus/ppbus/ppbconf.h>
71
#endif
72
#else
73
#ifdef __linux__
74
#include <pty.h>
75

    
76
#include <linux/ppdev.h>
77
#include <linux/parport.h>
78
#endif
79
#ifdef __sun__
80
#include <sys/stat.h>
81
#include <sys/ethernet.h>
82
#include <sys/sockio.h>
83
#include <netinet/arp.h>
84
#include <netinet/in.h>
85
#include <netinet/in_systm.h>
86
#include <netinet/ip.h>
87
#include <netinet/ip_icmp.h> // must come after ip.h
88
#include <netinet/udp.h>
89
#include <netinet/tcp.h>
90
#include <net/if.h>
91
#include <syslog.h>
92
#include <stropts.h>
93
#endif
94
#endif
95
#endif
96

    
97
#include "qemu/sockets.h"
98
#include "ui/qemu-spice.h"
99

    
100
#define READ_BUF_LEN 4096
101
#define CBUFF_SIZE 65536
102

    
103
/***********************************************************/
104
/* character device */
105

    
106
static QTAILQ_HEAD(CharDriverStateHead, CharDriverState) chardevs =
107
    QTAILQ_HEAD_INITIALIZER(chardevs);
108

    
109
void qemu_chr_be_event(CharDriverState *s, int event)
110
{
111
    /* Keep track if the char device is open */
112
    switch (event) {
113
        case CHR_EVENT_OPENED:
114
            s->opened = 1;
115
            break;
116
        case CHR_EVENT_CLOSED:
117
            s->opened = 0;
118
            break;
119
    }
120

    
121
    if (!s->chr_event)
122
        return;
123
    s->chr_event(s->handler_opaque, event);
124
}
125

    
126
static void qemu_chr_fire_open_event(void *opaque)
127
{
128
    CharDriverState *s = opaque;
129
    qemu_chr_be_event(s, CHR_EVENT_OPENED);
130
    qemu_free_timer(s->open_timer);
131
    s->open_timer = NULL;
132
}
133

    
134
void qemu_chr_generic_open(CharDriverState *s)
135
{
136
    if (s->open_timer == NULL) {
137
        s->open_timer = qemu_new_timer_ms(rt_clock,
138
                                          qemu_chr_fire_open_event, s);
139
        qemu_mod_timer(s->open_timer, qemu_get_clock_ms(rt_clock) - 1);
140
    }
141
}
142

    
143
int qemu_chr_fe_write(CharDriverState *s, const uint8_t *buf, int len)
144
{
145
    return s->chr_write(s, buf, len);
146
}
147

    
148
int qemu_chr_fe_ioctl(CharDriverState *s, int cmd, void *arg)
149
{
150
    if (!s->chr_ioctl)
151
        return -ENOTSUP;
152
    return s->chr_ioctl(s, cmd, arg);
153
}
154

    
155
int qemu_chr_be_can_write(CharDriverState *s)
156
{
157
    if (!s->chr_can_read)
158
        return 0;
159
    return s->chr_can_read(s->handler_opaque);
160
}
161

    
162
void qemu_chr_be_write(CharDriverState *s, uint8_t *buf, int len)
163
{
164
    if (s->chr_read) {
165
        s->chr_read(s->handler_opaque, buf, len);
166
    }
167
}
168

    
169
int qemu_chr_fe_get_msgfd(CharDriverState *s)
170
{
171
    return s->get_msgfd ? s->get_msgfd(s) : -1;
172
}
173

    
174
int qemu_chr_add_client(CharDriverState *s, int fd)
175
{
176
    return s->chr_add_client ? s->chr_add_client(s, fd) : -1;
177
}
178

    
179
void qemu_chr_accept_input(CharDriverState *s)
180
{
181
    if (s->chr_accept_input)
182
        s->chr_accept_input(s);
183
    qemu_notify_event();
184
}
185

    
186
void qemu_chr_fe_printf(CharDriverState *s, const char *fmt, ...)
187
{
188
    char buf[READ_BUF_LEN];
189
    va_list ap;
190
    va_start(ap, fmt);
191
    vsnprintf(buf, sizeof(buf), fmt, ap);
192
    qemu_chr_fe_write(s, (uint8_t *)buf, strlen(buf));
193
    va_end(ap);
194
}
195

    
196
void qemu_chr_add_handlers(CharDriverState *s,
197
                           IOCanReadHandler *fd_can_read,
198
                           IOReadHandler *fd_read,
199
                           IOEventHandler *fd_event,
200
                           void *opaque)
201
{
202
    if (!opaque && !fd_can_read && !fd_read && !fd_event) {
203
        /* chr driver being released. */
204
        ++s->avail_connections;
205
    }
206
    s->chr_can_read = fd_can_read;
207
    s->chr_read = fd_read;
208
    s->chr_event = fd_event;
209
    s->handler_opaque = opaque;
210
    if (s->chr_update_read_handler)
211
        s->chr_update_read_handler(s);
212

    
213
    /* We're connecting to an already opened device, so let's make sure we
214
       also get the open event */
215
    if (s->opened) {
216
        qemu_chr_generic_open(s);
217
    }
218
}
219

    
220
static int null_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
221
{
222
    return len;
223
}
224

    
225
static CharDriverState *qemu_chr_open_null(QemuOpts *opts)
226
{
227
    CharDriverState *chr;
228

    
229
    chr = g_malloc0(sizeof(CharDriverState));
230
    chr->chr_write = null_chr_write;
231
    return chr;
232
}
233

    
234
/* MUX driver for serial I/O splitting */
235
#define MAX_MUX 4
236
#define MUX_BUFFER_SIZE 32        /* Must be a power of 2.  */
237
#define MUX_BUFFER_MASK (MUX_BUFFER_SIZE - 1)
238
typedef struct {
239
    IOCanReadHandler *chr_can_read[MAX_MUX];
240
    IOReadHandler *chr_read[MAX_MUX];
241
    IOEventHandler *chr_event[MAX_MUX];
242
    void *ext_opaque[MAX_MUX];
243
    CharDriverState *drv;
244
    int focus;
245
    int mux_cnt;
246
    int term_got_escape;
247
    int max_size;
248
    /* Intermediate input buffer allows to catch escape sequences even if the
249
       currently active device is not accepting any input - but only until it
250
       is full as well. */
251
    unsigned char buffer[MAX_MUX][MUX_BUFFER_SIZE];
252
    int prod[MAX_MUX];
253
    int cons[MAX_MUX];
254
    int timestamps;
255
    int linestart;
256
    int64_t timestamps_start;
257
} MuxDriver;
258

    
259

    
260
static int mux_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
261
{
262
    MuxDriver *d = chr->opaque;
263
    int ret;
264
    if (!d->timestamps) {
265
        ret = d->drv->chr_write(d->drv, buf, len);
266
    } else {
267
        int i;
268

    
269
        ret = 0;
270
        for (i = 0; i < len; i++) {
271
            if (d->linestart) {
272
                char buf1[64];
273
                int64_t ti;
274
                int secs;
275

    
276
                ti = qemu_get_clock_ms(rt_clock);
277
                if (d->timestamps_start == -1)
278
                    d->timestamps_start = ti;
279
                ti -= d->timestamps_start;
280
                secs = ti / 1000;
281
                snprintf(buf1, sizeof(buf1),
282
                         "[%02d:%02d:%02d.%03d] ",
283
                         secs / 3600,
284
                         (secs / 60) % 60,
285
                         secs % 60,
286
                         (int)(ti % 1000));
287
                d->drv->chr_write(d->drv, (uint8_t *)buf1, strlen(buf1));
288
                d->linestart = 0;
289
            }
290
            ret += d->drv->chr_write(d->drv, buf+i, 1);
291
            if (buf[i] == '\n') {
292
                d->linestart = 1;
293
            }
294
        }
295
    }
296
    return ret;
297
}
298

    
299
static const char * const mux_help[] = {
300
    "% h    print this help\n\r",
301
    "% x    exit emulator\n\r",
302
    "% s    save disk data back to file (if -snapshot)\n\r",
303
    "% t    toggle console timestamps\n\r"
304
    "% b    send break (magic sysrq)\n\r",
305
    "% c    switch between console and monitor\n\r",
306
    "% %  sends %\n\r",
307
    NULL
308
};
309

    
310
int term_escape_char = 0x01; /* ctrl-a is used for escape */
311
static void mux_print_help(CharDriverState *chr)
312
{
313
    int i, j;
314
    char ebuf[15] = "Escape-Char";
315
    char cbuf[50] = "\n\r";
316

    
317
    if (term_escape_char > 0 && term_escape_char < 26) {
318
        snprintf(cbuf, sizeof(cbuf), "\n\r");
319
        snprintf(ebuf, sizeof(ebuf), "C-%c", term_escape_char - 1 + 'a');
320
    } else {
321
        snprintf(cbuf, sizeof(cbuf),
322
                 "\n\rEscape-Char set to Ascii: 0x%02x\n\r\n\r",
323
                 term_escape_char);
324
    }
325
    chr->chr_write(chr, (uint8_t *)cbuf, strlen(cbuf));
326
    for (i = 0; mux_help[i] != NULL; i++) {
327
        for (j=0; mux_help[i][j] != '\0'; j++) {
328
            if (mux_help[i][j] == '%')
329
                chr->chr_write(chr, (uint8_t *)ebuf, strlen(ebuf));
330
            else
331
                chr->chr_write(chr, (uint8_t *)&mux_help[i][j], 1);
332
        }
333
    }
334
}
335

    
336
static void mux_chr_send_event(MuxDriver *d, int mux_nr, int event)
337
{
338
    if (d->chr_event[mux_nr])
339
        d->chr_event[mux_nr](d->ext_opaque[mux_nr], event);
340
}
341

    
342
static int mux_proc_byte(CharDriverState *chr, MuxDriver *d, int ch)
343
{
344
    if (d->term_got_escape) {
345
        d->term_got_escape = 0;
346
        if (ch == term_escape_char)
347
            goto send_char;
348
        switch(ch) {
349
        case '?':
350
        case 'h':
351
            mux_print_help(chr);
352
            break;
353
        case 'x':
354
            {
355
                 const char *term =  "QEMU: Terminated\n\r";
356
                 chr->chr_write(chr,(uint8_t *)term,strlen(term));
357
                 exit(0);
358
                 break;
359
            }
360
        case 's':
361
            bdrv_commit_all();
362
            break;
363
        case 'b':
364
            qemu_chr_be_event(chr, CHR_EVENT_BREAK);
365
            break;
366
        case 'c':
367
            /* Switch to the next registered device */
368
            mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
369
            d->focus++;
370
            if (d->focus >= d->mux_cnt)
371
                d->focus = 0;
372
            mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
373
            break;
374
        case 't':
375
            d->timestamps = !d->timestamps;
376
            d->timestamps_start = -1;
377
            d->linestart = 0;
378
            break;
379
        }
380
    } else if (ch == term_escape_char) {
381
        d->term_got_escape = 1;
382
    } else {
383
    send_char:
384
        return 1;
385
    }
386
    return 0;
387
}
388

    
389
static void mux_chr_accept_input(CharDriverState *chr)
390
{
391
    MuxDriver *d = chr->opaque;
392
    int m = d->focus;
393

    
394
    while (d->prod[m] != d->cons[m] &&
395
           d->chr_can_read[m] &&
396
           d->chr_can_read[m](d->ext_opaque[m])) {
397
        d->chr_read[m](d->ext_opaque[m],
398
                       &d->buffer[m][d->cons[m]++ & MUX_BUFFER_MASK], 1);
399
    }
400
}
401

    
402
static int mux_chr_can_read(void *opaque)
403
{
404
    CharDriverState *chr = opaque;
405
    MuxDriver *d = chr->opaque;
406
    int m = d->focus;
407

    
408
    if ((d->prod[m] - d->cons[m]) < MUX_BUFFER_SIZE)
409
        return 1;
410
    if (d->chr_can_read[m])
411
        return d->chr_can_read[m](d->ext_opaque[m]);
412
    return 0;
413
}
414

    
415
static void mux_chr_read(void *opaque, const uint8_t *buf, int size)
416
{
417
    CharDriverState *chr = opaque;
418
    MuxDriver *d = chr->opaque;
419
    int m = d->focus;
420
    int i;
421

    
422
    mux_chr_accept_input (opaque);
423

    
424
    for(i = 0; i < size; i++)
425
        if (mux_proc_byte(chr, d, buf[i])) {
426
            if (d->prod[m] == d->cons[m] &&
427
                d->chr_can_read[m] &&
428
                d->chr_can_read[m](d->ext_opaque[m]))
429
                d->chr_read[m](d->ext_opaque[m], &buf[i], 1);
430
            else
431
                d->buffer[m][d->prod[m]++ & MUX_BUFFER_MASK] = buf[i];
432
        }
433
}
434

    
435
static void mux_chr_event(void *opaque, int event)
436
{
437
    CharDriverState *chr = opaque;
438
    MuxDriver *d = chr->opaque;
439
    int i;
440

    
441
    /* Send the event to all registered listeners */
442
    for (i = 0; i < d->mux_cnt; i++)
443
        mux_chr_send_event(d, i, event);
444
}
445

    
446
static void mux_chr_update_read_handler(CharDriverState *chr)
447
{
448
    MuxDriver *d = chr->opaque;
449

    
450
    if (d->mux_cnt >= MAX_MUX) {
451
        fprintf(stderr, "Cannot add I/O handlers, MUX array is full\n");
452
        return;
453
    }
454
    d->ext_opaque[d->mux_cnt] = chr->handler_opaque;
455
    d->chr_can_read[d->mux_cnt] = chr->chr_can_read;
456
    d->chr_read[d->mux_cnt] = chr->chr_read;
457
    d->chr_event[d->mux_cnt] = chr->chr_event;
458
    /* Fix up the real driver with mux routines */
459
    if (d->mux_cnt == 0) {
460
        qemu_chr_add_handlers(d->drv, mux_chr_can_read, mux_chr_read,
461
                              mux_chr_event, chr);
462
    }
463
    if (d->focus != -1) {
464
        mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_OUT);
465
    }
466
    d->focus = d->mux_cnt;
467
    d->mux_cnt++;
468
    mux_chr_send_event(d, d->focus, CHR_EVENT_MUX_IN);
469
}
470

    
471
static CharDriverState *qemu_chr_open_mux(CharDriverState *drv)
472
{
473
    CharDriverState *chr;
474
    MuxDriver *d;
475

    
476
    chr = g_malloc0(sizeof(CharDriverState));
477
    d = g_malloc0(sizeof(MuxDriver));
478

    
479
    chr->opaque = d;
480
    d->drv = drv;
481
    d->focus = -1;
482
    chr->chr_write = mux_chr_write;
483
    chr->chr_update_read_handler = mux_chr_update_read_handler;
484
    chr->chr_accept_input = mux_chr_accept_input;
485
    /* Frontend guest-open / -close notification is not support with muxes */
486
    chr->chr_guest_open = NULL;
487
    chr->chr_guest_close = NULL;
488

    
489
    /* Muxes are always open on creation */
490
    qemu_chr_generic_open(chr);
491

    
492
    return chr;
493
}
494

    
495

    
496
#ifdef _WIN32
497
int send_all(int fd, const void *buf, int len1)
498
{
499
    int ret, len;
500

    
501
    len = len1;
502
    while (len > 0) {
503
        ret = send(fd, buf, len, 0);
504
        if (ret < 0) {
505
            errno = WSAGetLastError();
506
            if (errno != WSAEWOULDBLOCK) {
507
                return -1;
508
            }
509
        } else if (ret == 0) {
510
            break;
511
        } else {
512
            buf += ret;
513
            len -= ret;
514
        }
515
    }
516
    return len1 - len;
517
}
518

    
519
#else
520

    
521
int send_all(int fd, const void *_buf, int len1)
522
{
523
    int ret, len;
524
    const uint8_t *buf = _buf;
525

    
526
    len = len1;
527
    while (len > 0) {
528
        ret = write(fd, buf, len);
529
        if (ret < 0) {
530
            if (errno != EINTR && errno != EAGAIN)
531
                return -1;
532
        } else if (ret == 0) {
533
            break;
534
        } else {
535
            buf += ret;
536
            len -= ret;
537
        }
538
    }
539
    return len1 - len;
540
}
541
#endif /* !_WIN32 */
542

    
543
#define STDIO_MAX_CLIENTS 1
544
static int stdio_nb_clients;
545

    
546
#ifndef _WIN32
547

    
548
typedef struct {
549
    int fd_in, fd_out;
550
    int max_size;
551
} FDCharDriver;
552

    
553

    
554
static int fd_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
555
{
556
    FDCharDriver *s = chr->opaque;
557
    return send_all(s->fd_out, buf, len);
558
}
559

    
560
static int fd_chr_read_poll(void *opaque)
561
{
562
    CharDriverState *chr = opaque;
563
    FDCharDriver *s = chr->opaque;
564

    
565
    s->max_size = qemu_chr_be_can_write(chr);
566
    return s->max_size;
567
}
568

    
569
static void fd_chr_read(void *opaque)
570
{
571
    CharDriverState *chr = opaque;
572
    FDCharDriver *s = chr->opaque;
573
    int size, len;
574
    uint8_t buf[READ_BUF_LEN];
575

    
576
    len = sizeof(buf);
577
    if (len > s->max_size)
578
        len = s->max_size;
579
    if (len == 0)
580
        return;
581
    size = read(s->fd_in, buf, len);
582
    if (size == 0) {
583
        /* FD has been closed. Remove it from the active list.  */
584
        qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
585
        qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
586
        return;
587
    }
588
    if (size > 0) {
589
        qemu_chr_be_write(chr, buf, size);
590
    }
591
}
592

    
593
static void fd_chr_update_read_handler(CharDriverState *chr)
594
{
595
    FDCharDriver *s = chr->opaque;
596

    
597
    if (s->fd_in >= 0) {
598
        if (display_type == DT_NOGRAPHIC && s->fd_in == 0) {
599
        } else {
600
            qemu_set_fd_handler2(s->fd_in, fd_chr_read_poll,
601
                                 fd_chr_read, NULL, chr);
602
        }
603
    }
604
}
605

    
606
static void fd_chr_close(struct CharDriverState *chr)
607
{
608
    FDCharDriver *s = chr->opaque;
609

    
610
    if (s->fd_in >= 0) {
611
        if (display_type == DT_NOGRAPHIC && s->fd_in == 0) {
612
        } else {
613
            qemu_set_fd_handler2(s->fd_in, NULL, NULL, NULL, NULL);
614
        }
615
    }
616

    
617
    g_free(s);
618
    qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
619
}
620

    
621
/* open a character device to a unix fd */
622
static CharDriverState *qemu_chr_open_fd(int fd_in, int fd_out)
623
{
624
    CharDriverState *chr;
625
    FDCharDriver *s;
626

    
627
    chr = g_malloc0(sizeof(CharDriverState));
628
    s = g_malloc0(sizeof(FDCharDriver));
629
    s->fd_in = fd_in;
630
    s->fd_out = fd_out;
631
    chr->opaque = s;
632
    chr->chr_write = fd_chr_write;
633
    chr->chr_update_read_handler = fd_chr_update_read_handler;
634
    chr->chr_close = fd_chr_close;
635

    
636
    qemu_chr_generic_open(chr);
637

    
638
    return chr;
639
}
640

    
641
static CharDriverState *qemu_chr_open_file_out(QemuOpts *opts)
642
{
643
    int fd_out;
644

    
645
    TFR(fd_out = qemu_open(qemu_opt_get(opts, "path"),
646
                      O_WRONLY | O_TRUNC | O_CREAT | O_BINARY, 0666));
647
    if (fd_out < 0) {
648
        return NULL;
649
    }
650
    return qemu_chr_open_fd(-1, fd_out);
651
}
652

    
653
static CharDriverState *qemu_chr_open_pipe(QemuOpts *opts)
654
{
655
    int fd_in, fd_out;
656
    char filename_in[256], filename_out[256];
657
    const char *filename = qemu_opt_get(opts, "path");
658

    
659
    if (filename == NULL) {
660
        fprintf(stderr, "chardev: pipe: no filename given\n");
661
        return NULL;
662
    }
663

    
664
    snprintf(filename_in, 256, "%s.in", filename);
665
    snprintf(filename_out, 256, "%s.out", filename);
666
    TFR(fd_in = qemu_open(filename_in, O_RDWR | O_BINARY));
667
    TFR(fd_out = qemu_open(filename_out, O_RDWR | O_BINARY));
668
    if (fd_in < 0 || fd_out < 0) {
669
        if (fd_in >= 0)
670
            close(fd_in);
671
        if (fd_out >= 0)
672
            close(fd_out);
673
        TFR(fd_in = fd_out = qemu_open(filename, O_RDWR | O_BINARY));
674
        if (fd_in < 0) {
675
            return NULL;
676
        }
677
    }
678
    return qemu_chr_open_fd(fd_in, fd_out);
679
}
680

    
681

    
682
/* for STDIO, we handle the case where several clients use it
683
   (nographic mode) */
684

    
685
#define TERM_FIFO_MAX_SIZE 1
686

    
687
static uint8_t term_fifo[TERM_FIFO_MAX_SIZE];
688
static int term_fifo_size;
689

    
690
static int stdio_read_poll(void *opaque)
691
{
692
    CharDriverState *chr = opaque;
693

    
694
    /* try to flush the queue if needed */
695
    if (term_fifo_size != 0 && qemu_chr_be_can_write(chr) > 0) {
696
        qemu_chr_be_write(chr, term_fifo, 1);
697
        term_fifo_size = 0;
698
    }
699
    /* see if we can absorb more chars */
700
    if (term_fifo_size == 0)
701
        return 1;
702
    else
703
        return 0;
704
}
705

    
706
static void stdio_read(void *opaque)
707
{
708
    int size;
709
    uint8_t buf[1];
710
    CharDriverState *chr = opaque;
711

    
712
    size = read(0, buf, 1);
713
    if (size == 0) {
714
        /* stdin has been closed. Remove it from the active list.  */
715
        qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
716
        qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
717
        return;
718
    }
719
    if (size > 0) {
720
        if (qemu_chr_be_can_write(chr) > 0) {
721
            qemu_chr_be_write(chr, buf, 1);
722
        } else if (term_fifo_size == 0) {
723
            term_fifo[term_fifo_size++] = buf[0];
724
        }
725
    }
726
}
727

    
728
/* init terminal so that we can grab keys */
729
static struct termios oldtty;
730
static int old_fd0_flags;
731
static bool stdio_allow_signal;
732

    
733
static void term_exit(void)
734
{
735
    tcsetattr (0, TCSANOW, &oldtty);
736
    fcntl(0, F_SETFL, old_fd0_flags);
737
}
738

    
739
static void qemu_chr_set_echo_stdio(CharDriverState *chr, bool echo)
740
{
741
    struct termios tty;
742

    
743
    tty = oldtty;
744
    if (!echo) {
745
        tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
746
                          |INLCR|IGNCR|ICRNL|IXON);
747
        tty.c_oflag |= OPOST;
748
        tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN);
749
        tty.c_cflag &= ~(CSIZE|PARENB);
750
        tty.c_cflag |= CS8;
751
        tty.c_cc[VMIN] = 1;
752
        tty.c_cc[VTIME] = 0;
753
    }
754
    /* if graphical mode, we allow Ctrl-C handling */
755
    if (!stdio_allow_signal)
756
        tty.c_lflag &= ~ISIG;
757

    
758
    tcsetattr (0, TCSANOW, &tty);
759
}
760

    
761
static void qemu_chr_close_stdio(struct CharDriverState *chr)
762
{
763
    term_exit();
764
    stdio_nb_clients--;
765
    qemu_set_fd_handler2(0, NULL, NULL, NULL, NULL);
766
    fd_chr_close(chr);
767
}
768

    
769
static CharDriverState *qemu_chr_open_stdio(QemuOpts *opts)
770
{
771
    CharDriverState *chr;
772

    
773
    if (stdio_nb_clients >= STDIO_MAX_CLIENTS) {
774
        return NULL;
775
    }
776
    if (is_daemonized()) {
777
        error_report("cannot use stdio with -daemonize");
778
        return NULL;
779
    }
780
    if (stdio_nb_clients == 0) {
781
        old_fd0_flags = fcntl(0, F_GETFL);
782
        tcgetattr (0, &oldtty);
783
        fcntl(0, F_SETFL, O_NONBLOCK);
784
        atexit(term_exit);
785
    }
786

    
787
    chr = qemu_chr_open_fd(0, 1);
788
    chr->chr_close = qemu_chr_close_stdio;
789
    chr->chr_set_echo = qemu_chr_set_echo_stdio;
790
    qemu_set_fd_handler2(0, stdio_read_poll, stdio_read, NULL, chr);
791
    stdio_nb_clients++;
792
    stdio_allow_signal = qemu_opt_get_bool(opts, "signal",
793
                                           display_type != DT_NOGRAPHIC);
794
    qemu_chr_fe_set_echo(chr, false);
795

    
796
    return chr;
797
}
798

    
799
#ifdef __sun__
800
/* Once Solaris has openpty(), this is going to be removed. */
801
static int openpty(int *amaster, int *aslave, char *name,
802
                   struct termios *termp, struct winsize *winp)
803
{
804
        const char *slave;
805
        int mfd = -1, sfd = -1;
806

    
807
        *amaster = *aslave = -1;
808

    
809
        mfd = open("/dev/ptmx", O_RDWR | O_NOCTTY);
810
        if (mfd < 0)
811
                goto err;
812

    
813
        if (grantpt(mfd) == -1 || unlockpt(mfd) == -1)
814
                goto err;
815

    
816
        if ((slave = ptsname(mfd)) == NULL)
817
                goto err;
818

    
819
        if ((sfd = open(slave, O_RDONLY | O_NOCTTY)) == -1)
820
                goto err;
821

    
822
        if (ioctl(sfd, I_PUSH, "ptem") == -1 ||
823
            (termp != NULL && tcgetattr(sfd, termp) < 0))
824
                goto err;
825

    
826
        if (amaster)
827
                *amaster = mfd;
828
        if (aslave)
829
                *aslave = sfd;
830
        if (winp)
831
                ioctl(sfd, TIOCSWINSZ, winp);
832

    
833
        return 0;
834

    
835
err:
836
        if (sfd != -1)
837
                close(sfd);
838
        close(mfd);
839
        return -1;
840
}
841

    
842
static void cfmakeraw (struct termios *termios_p)
843
{
844
        termios_p->c_iflag &=
845
                ~(IGNBRK|BRKINT|PARMRK|ISTRIP|INLCR|IGNCR|ICRNL|IXON);
846
        termios_p->c_oflag &= ~OPOST;
847
        termios_p->c_lflag &= ~(ECHO|ECHONL|ICANON|ISIG|IEXTEN);
848
        termios_p->c_cflag &= ~(CSIZE|PARENB);
849
        termios_p->c_cflag |= CS8;
850

    
851
        termios_p->c_cc[VMIN] = 0;
852
        termios_p->c_cc[VTIME] = 0;
853
}
854
#endif
855

    
856
#if defined(__linux__) || defined(__sun__) || defined(__FreeBSD__) \
857
    || defined(__NetBSD__) || defined(__OpenBSD__) || defined(__DragonFly__) \
858
    || defined(__GLIBC__)
859

    
860
#define HAVE_CHARDEV_TTY 1
861

    
862
typedef struct {
863
    int fd;
864
    int connected;
865
    int polling;
866
    int read_bytes;
867
    QEMUTimer *timer;
868
} PtyCharDriver;
869

    
870
static void pty_chr_update_read_handler(CharDriverState *chr);
871
static void pty_chr_state(CharDriverState *chr, int connected);
872

    
873
static int pty_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
874
{
875
    PtyCharDriver *s = chr->opaque;
876

    
877
    if (!s->connected) {
878
        /* guest sends data, check for (re-)connect */
879
        pty_chr_update_read_handler(chr);
880
        return 0;
881
    }
882
    return send_all(s->fd, buf, len);
883
}
884

    
885
static int pty_chr_read_poll(void *opaque)
886
{
887
    CharDriverState *chr = opaque;
888
    PtyCharDriver *s = chr->opaque;
889

    
890
    s->read_bytes = qemu_chr_be_can_write(chr);
891
    return s->read_bytes;
892
}
893

    
894
static void pty_chr_read(void *opaque)
895
{
896
    CharDriverState *chr = opaque;
897
    PtyCharDriver *s = chr->opaque;
898
    int size, len;
899
    uint8_t buf[READ_BUF_LEN];
900

    
901
    len = sizeof(buf);
902
    if (len > s->read_bytes)
903
        len = s->read_bytes;
904
    if (len == 0)
905
        return;
906
    size = read(s->fd, buf, len);
907
    if ((size == -1 && errno == EIO) ||
908
        (size == 0)) {
909
        pty_chr_state(chr, 0);
910
        return;
911
    }
912
    if (size > 0) {
913
        pty_chr_state(chr, 1);
914
        qemu_chr_be_write(chr, buf, size);
915
    }
916
}
917

    
918
static void pty_chr_update_read_handler(CharDriverState *chr)
919
{
920
    PtyCharDriver *s = chr->opaque;
921

    
922
    qemu_set_fd_handler2(s->fd, pty_chr_read_poll,
923
                         pty_chr_read, NULL, chr);
924
    s->polling = 1;
925
    /*
926
     * Short timeout here: just need wait long enougth that qemu makes
927
     * it through the poll loop once.  When reconnected we want a
928
     * short timeout so we notice it almost instantly.  Otherwise
929
     * read() gives us -EIO instantly, making pty_chr_state() reset the
930
     * timeout to the normal (much longer) poll interval before the
931
     * timer triggers.
932
     */
933
    qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 10);
934
}
935

    
936
static void pty_chr_state(CharDriverState *chr, int connected)
937
{
938
    PtyCharDriver *s = chr->opaque;
939

    
940
    if (!connected) {
941
        qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
942
        s->connected = 0;
943
        s->polling = 0;
944
        /* (re-)connect poll interval for idle guests: once per second.
945
         * We check more frequently in case the guests sends data to
946
         * the virtual device linked to our pty. */
947
        qemu_mod_timer(s->timer, qemu_get_clock_ms(rt_clock) + 1000);
948
    } else {
949
        if (!s->connected)
950
            qemu_chr_generic_open(chr);
951
        s->connected = 1;
952
    }
953
}
954

    
955
static void pty_chr_timer(void *opaque)
956
{
957
    struct CharDriverState *chr = opaque;
958
    PtyCharDriver *s = chr->opaque;
959

    
960
    if (s->connected)
961
        return;
962
    if (s->polling) {
963
        /* If we arrive here without polling being cleared due
964
         * read returning -EIO, then we are (re-)connected */
965
        pty_chr_state(chr, 1);
966
        return;
967
    }
968

    
969
    /* Next poll ... */
970
    pty_chr_update_read_handler(chr);
971
}
972

    
973
static void pty_chr_close(struct CharDriverState *chr)
974
{
975
    PtyCharDriver *s = chr->opaque;
976

    
977
    qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
978
    close(s->fd);
979
    qemu_del_timer(s->timer);
980
    qemu_free_timer(s->timer);
981
    g_free(s);
982
    qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
983
}
984

    
985
static CharDriverState *qemu_chr_open_pty(QemuOpts *opts)
986
{
987
    CharDriverState *chr;
988
    PtyCharDriver *s;
989
    struct termios tty;
990
    const char *label;
991
    int master_fd, slave_fd, len;
992
#if defined(__OpenBSD__) || defined(__DragonFly__)
993
    char pty_name[PATH_MAX];
994
#define q_ptsname(x) pty_name
995
#else
996
    char *pty_name = NULL;
997
#define q_ptsname(x) ptsname(x)
998
#endif
999

    
1000
    if (openpty(&master_fd, &slave_fd, pty_name, NULL, NULL) < 0) {
1001
        return NULL;
1002
    }
1003

    
1004
    /* Set raw attributes on the pty. */
1005
    tcgetattr(slave_fd, &tty);
1006
    cfmakeraw(&tty);
1007
    tcsetattr(slave_fd, TCSAFLUSH, &tty);
1008
    close(slave_fd);
1009

    
1010
    chr = g_malloc0(sizeof(CharDriverState));
1011

    
1012
    len = strlen(q_ptsname(master_fd)) + 5;
1013
    chr->filename = g_malloc(len);
1014
    snprintf(chr->filename, len, "pty:%s", q_ptsname(master_fd));
1015
    qemu_opt_set(opts, "path", q_ptsname(master_fd));
1016

    
1017
    label = qemu_opts_id(opts);
1018
    fprintf(stderr, "char device redirected to %s%s%s%s\n",
1019
            q_ptsname(master_fd),
1020
            label ? " (label " : "",
1021
            label ? label      : "",
1022
            label ? ")"        : "");
1023

    
1024
    s = g_malloc0(sizeof(PtyCharDriver));
1025
    chr->opaque = s;
1026
    chr->chr_write = pty_chr_write;
1027
    chr->chr_update_read_handler = pty_chr_update_read_handler;
1028
    chr->chr_close = pty_chr_close;
1029

    
1030
    s->fd = master_fd;
1031
    s->timer = qemu_new_timer_ms(rt_clock, pty_chr_timer, chr);
1032

    
1033
    return chr;
1034
}
1035

    
1036
static void tty_serial_init(int fd, int speed,
1037
                            int parity, int data_bits, int stop_bits)
1038
{
1039
    struct termios tty;
1040
    speed_t spd;
1041

    
1042
#if 0
1043
    printf("tty_serial_init: speed=%d parity=%c data=%d stop=%d\n",
1044
           speed, parity, data_bits, stop_bits);
1045
#endif
1046
    tcgetattr (fd, &tty);
1047

    
1048
#define check_speed(val) if (speed <= val) { spd = B##val; break; }
1049
    speed = speed * 10 / 11;
1050
    do {
1051
        check_speed(50);
1052
        check_speed(75);
1053
        check_speed(110);
1054
        check_speed(134);
1055
        check_speed(150);
1056
        check_speed(200);
1057
        check_speed(300);
1058
        check_speed(600);
1059
        check_speed(1200);
1060
        check_speed(1800);
1061
        check_speed(2400);
1062
        check_speed(4800);
1063
        check_speed(9600);
1064
        check_speed(19200);
1065
        check_speed(38400);
1066
        /* Non-Posix values follow. They may be unsupported on some systems. */
1067
        check_speed(57600);
1068
        check_speed(115200);
1069
#ifdef B230400
1070
        check_speed(230400);
1071
#endif
1072
#ifdef B460800
1073
        check_speed(460800);
1074
#endif
1075
#ifdef B500000
1076
        check_speed(500000);
1077
#endif
1078
#ifdef B576000
1079
        check_speed(576000);
1080
#endif
1081
#ifdef B921600
1082
        check_speed(921600);
1083
#endif
1084
#ifdef B1000000
1085
        check_speed(1000000);
1086
#endif
1087
#ifdef B1152000
1088
        check_speed(1152000);
1089
#endif
1090
#ifdef B1500000
1091
        check_speed(1500000);
1092
#endif
1093
#ifdef B2000000
1094
        check_speed(2000000);
1095
#endif
1096
#ifdef B2500000
1097
        check_speed(2500000);
1098
#endif
1099
#ifdef B3000000
1100
        check_speed(3000000);
1101
#endif
1102
#ifdef B3500000
1103
        check_speed(3500000);
1104
#endif
1105
#ifdef B4000000
1106
        check_speed(4000000);
1107
#endif
1108
        spd = B115200;
1109
    } while (0);
1110

    
1111
    cfsetispeed(&tty, spd);
1112
    cfsetospeed(&tty, spd);
1113

    
1114
    tty.c_iflag &= ~(IGNBRK|BRKINT|PARMRK|ISTRIP
1115
                          |INLCR|IGNCR|ICRNL|IXON);
1116
    tty.c_oflag |= OPOST;
1117
    tty.c_lflag &= ~(ECHO|ECHONL|ICANON|IEXTEN|ISIG);
1118
    tty.c_cflag &= ~(CSIZE|PARENB|PARODD|CRTSCTS|CSTOPB);
1119
    switch(data_bits) {
1120
    default:
1121
    case 8:
1122
        tty.c_cflag |= CS8;
1123
        break;
1124
    case 7:
1125
        tty.c_cflag |= CS7;
1126
        break;
1127
    case 6:
1128
        tty.c_cflag |= CS6;
1129
        break;
1130
    case 5:
1131
        tty.c_cflag |= CS5;
1132
        break;
1133
    }
1134
    switch(parity) {
1135
    default:
1136
    case 'N':
1137
        break;
1138
    case 'E':
1139
        tty.c_cflag |= PARENB;
1140
        break;
1141
    case 'O':
1142
        tty.c_cflag |= PARENB | PARODD;
1143
        break;
1144
    }
1145
    if (stop_bits == 2)
1146
        tty.c_cflag |= CSTOPB;
1147

    
1148
    tcsetattr (fd, TCSANOW, &tty);
1149
}
1150

    
1151
static int tty_serial_ioctl(CharDriverState *chr, int cmd, void *arg)
1152
{
1153
    FDCharDriver *s = chr->opaque;
1154

    
1155
    switch(cmd) {
1156
    case CHR_IOCTL_SERIAL_SET_PARAMS:
1157
        {
1158
            QEMUSerialSetParams *ssp = arg;
1159
            tty_serial_init(s->fd_in, ssp->speed, ssp->parity,
1160
                            ssp->data_bits, ssp->stop_bits);
1161
        }
1162
        break;
1163
    case CHR_IOCTL_SERIAL_SET_BREAK:
1164
        {
1165
            int enable = *(int *)arg;
1166
            if (enable)
1167
                tcsendbreak(s->fd_in, 1);
1168
        }
1169
        break;
1170
    case CHR_IOCTL_SERIAL_GET_TIOCM:
1171
        {
1172
            int sarg = 0;
1173
            int *targ = (int *)arg;
1174
            ioctl(s->fd_in, TIOCMGET, &sarg);
1175
            *targ = 0;
1176
            if (sarg & TIOCM_CTS)
1177
                *targ |= CHR_TIOCM_CTS;
1178
            if (sarg & TIOCM_CAR)
1179
                *targ |= CHR_TIOCM_CAR;
1180
            if (sarg & TIOCM_DSR)
1181
                *targ |= CHR_TIOCM_DSR;
1182
            if (sarg & TIOCM_RI)
1183
                *targ |= CHR_TIOCM_RI;
1184
            if (sarg & TIOCM_DTR)
1185
                *targ |= CHR_TIOCM_DTR;
1186
            if (sarg & TIOCM_RTS)
1187
                *targ |= CHR_TIOCM_RTS;
1188
        }
1189
        break;
1190
    case CHR_IOCTL_SERIAL_SET_TIOCM:
1191
        {
1192
            int sarg = *(int *)arg;
1193
            int targ = 0;
1194
            ioctl(s->fd_in, TIOCMGET, &targ);
1195
            targ &= ~(CHR_TIOCM_CTS | CHR_TIOCM_CAR | CHR_TIOCM_DSR
1196
                     | CHR_TIOCM_RI | CHR_TIOCM_DTR | CHR_TIOCM_RTS);
1197
            if (sarg & CHR_TIOCM_CTS)
1198
                targ |= TIOCM_CTS;
1199
            if (sarg & CHR_TIOCM_CAR)
1200
                targ |= TIOCM_CAR;
1201
            if (sarg & CHR_TIOCM_DSR)
1202
                targ |= TIOCM_DSR;
1203
            if (sarg & CHR_TIOCM_RI)
1204
                targ |= TIOCM_RI;
1205
            if (sarg & CHR_TIOCM_DTR)
1206
                targ |= TIOCM_DTR;
1207
            if (sarg & CHR_TIOCM_RTS)
1208
                targ |= TIOCM_RTS;
1209
            ioctl(s->fd_in, TIOCMSET, &targ);
1210
        }
1211
        break;
1212
    default:
1213
        return -ENOTSUP;
1214
    }
1215
    return 0;
1216
}
1217

    
1218
static void qemu_chr_close_tty(CharDriverState *chr)
1219
{
1220
    FDCharDriver *s = chr->opaque;
1221
    int fd = -1;
1222

    
1223
    if (s) {
1224
        fd = s->fd_in;
1225
    }
1226

    
1227
    fd_chr_close(chr);
1228

    
1229
    if (fd >= 0) {
1230
        close(fd);
1231
    }
1232
}
1233

    
1234
static CharDriverState *qemu_chr_open_tty_fd(int fd)
1235
{
1236
    CharDriverState *chr;
1237

    
1238
    tty_serial_init(fd, 115200, 'N', 8, 1);
1239
    chr = qemu_chr_open_fd(fd, fd);
1240
    chr->chr_ioctl = tty_serial_ioctl;
1241
    chr->chr_close = qemu_chr_close_tty;
1242
    return chr;
1243
}
1244

    
1245
static CharDriverState *qemu_chr_open_tty(QemuOpts *opts)
1246
{
1247
    const char *filename = qemu_opt_get(opts, "path");
1248
    int fd;
1249

    
1250
    TFR(fd = qemu_open(filename, O_RDWR | O_NONBLOCK));
1251
    if (fd < 0) {
1252
        return NULL;
1253
    }
1254
    return qemu_chr_open_tty_fd(fd);
1255
}
1256
#endif /* __linux__ || __sun__ */
1257

    
1258
#if defined(__linux__)
1259

    
1260
#define HAVE_CHARDEV_PARPORT 1
1261

    
1262
typedef struct {
1263
    int fd;
1264
    int mode;
1265
} ParallelCharDriver;
1266

    
1267
static int pp_hw_mode(ParallelCharDriver *s, uint16_t mode)
1268
{
1269
    if (s->mode != mode) {
1270
        int m = mode;
1271
        if (ioctl(s->fd, PPSETMODE, &m) < 0)
1272
            return 0;
1273
        s->mode = mode;
1274
    }
1275
    return 1;
1276
}
1277

    
1278
static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1279
{
1280
    ParallelCharDriver *drv = chr->opaque;
1281
    int fd = drv->fd;
1282
    uint8_t b;
1283

    
1284
    switch(cmd) {
1285
    case CHR_IOCTL_PP_READ_DATA:
1286
        if (ioctl(fd, PPRDATA, &b) < 0)
1287
            return -ENOTSUP;
1288
        *(uint8_t *)arg = b;
1289
        break;
1290
    case CHR_IOCTL_PP_WRITE_DATA:
1291
        b = *(uint8_t *)arg;
1292
        if (ioctl(fd, PPWDATA, &b) < 0)
1293
            return -ENOTSUP;
1294
        break;
1295
    case CHR_IOCTL_PP_READ_CONTROL:
1296
        if (ioctl(fd, PPRCONTROL, &b) < 0)
1297
            return -ENOTSUP;
1298
        /* Linux gives only the lowest bits, and no way to know data
1299
           direction! For better compatibility set the fixed upper
1300
           bits. */
1301
        *(uint8_t *)arg = b | 0xc0;
1302
        break;
1303
    case CHR_IOCTL_PP_WRITE_CONTROL:
1304
        b = *(uint8_t *)arg;
1305
        if (ioctl(fd, PPWCONTROL, &b) < 0)
1306
            return -ENOTSUP;
1307
        break;
1308
    case CHR_IOCTL_PP_READ_STATUS:
1309
        if (ioctl(fd, PPRSTATUS, &b) < 0)
1310
            return -ENOTSUP;
1311
        *(uint8_t *)arg = b;
1312
        break;
1313
    case CHR_IOCTL_PP_DATA_DIR:
1314
        if (ioctl(fd, PPDATADIR, (int *)arg) < 0)
1315
            return -ENOTSUP;
1316
        break;
1317
    case CHR_IOCTL_PP_EPP_READ_ADDR:
1318
        if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1319
            struct ParallelIOArg *parg = arg;
1320
            int n = read(fd, parg->buffer, parg->count);
1321
            if (n != parg->count) {
1322
                return -EIO;
1323
            }
1324
        }
1325
        break;
1326
    case CHR_IOCTL_PP_EPP_READ:
1327
        if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1328
            struct ParallelIOArg *parg = arg;
1329
            int n = read(fd, parg->buffer, parg->count);
1330
            if (n != parg->count) {
1331
                return -EIO;
1332
            }
1333
        }
1334
        break;
1335
    case CHR_IOCTL_PP_EPP_WRITE_ADDR:
1336
        if (pp_hw_mode(drv, IEEE1284_MODE_EPP|IEEE1284_ADDR)) {
1337
            struct ParallelIOArg *parg = arg;
1338
            int n = write(fd, parg->buffer, parg->count);
1339
            if (n != parg->count) {
1340
                return -EIO;
1341
            }
1342
        }
1343
        break;
1344
    case CHR_IOCTL_PP_EPP_WRITE:
1345
        if (pp_hw_mode(drv, IEEE1284_MODE_EPP)) {
1346
            struct ParallelIOArg *parg = arg;
1347
            int n = write(fd, parg->buffer, parg->count);
1348
            if (n != parg->count) {
1349
                return -EIO;
1350
            }
1351
        }
1352
        break;
1353
    default:
1354
        return -ENOTSUP;
1355
    }
1356
    return 0;
1357
}
1358

    
1359
static void pp_close(CharDriverState *chr)
1360
{
1361
    ParallelCharDriver *drv = chr->opaque;
1362
    int fd = drv->fd;
1363

    
1364
    pp_hw_mode(drv, IEEE1284_MODE_COMPAT);
1365
    ioctl(fd, PPRELEASE);
1366
    close(fd);
1367
    g_free(drv);
1368
    qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1369
}
1370

    
1371
static CharDriverState *qemu_chr_open_pp_fd(int fd)
1372
{
1373
    CharDriverState *chr;
1374
    ParallelCharDriver *drv;
1375

    
1376
    if (ioctl(fd, PPCLAIM) < 0) {
1377
        close(fd);
1378
        return NULL;
1379
    }
1380

    
1381
    drv = g_malloc0(sizeof(ParallelCharDriver));
1382
    drv->fd = fd;
1383
    drv->mode = IEEE1284_MODE_COMPAT;
1384

    
1385
    chr = g_malloc0(sizeof(CharDriverState));
1386
    chr->chr_write = null_chr_write;
1387
    chr->chr_ioctl = pp_ioctl;
1388
    chr->chr_close = pp_close;
1389
    chr->opaque = drv;
1390

    
1391
    qemu_chr_generic_open(chr);
1392

    
1393
    return chr;
1394
}
1395
#endif /* __linux__ */
1396

    
1397
#if defined(__FreeBSD__) || defined(__FreeBSD_kernel__) || defined(__DragonFly__)
1398

    
1399
#define HAVE_CHARDEV_PARPORT 1
1400

    
1401
static int pp_ioctl(CharDriverState *chr, int cmd, void *arg)
1402
{
1403
    int fd = (int)(intptr_t)chr->opaque;
1404
    uint8_t b;
1405

    
1406
    switch(cmd) {
1407
    case CHR_IOCTL_PP_READ_DATA:
1408
        if (ioctl(fd, PPIGDATA, &b) < 0)
1409
            return -ENOTSUP;
1410
        *(uint8_t *)arg = b;
1411
        break;
1412
    case CHR_IOCTL_PP_WRITE_DATA:
1413
        b = *(uint8_t *)arg;
1414
        if (ioctl(fd, PPISDATA, &b) < 0)
1415
            return -ENOTSUP;
1416
        break;
1417
    case CHR_IOCTL_PP_READ_CONTROL:
1418
        if (ioctl(fd, PPIGCTRL, &b) < 0)
1419
            return -ENOTSUP;
1420
        *(uint8_t *)arg = b;
1421
        break;
1422
    case CHR_IOCTL_PP_WRITE_CONTROL:
1423
        b = *(uint8_t *)arg;
1424
        if (ioctl(fd, PPISCTRL, &b) < 0)
1425
            return -ENOTSUP;
1426
        break;
1427
    case CHR_IOCTL_PP_READ_STATUS:
1428
        if (ioctl(fd, PPIGSTATUS, &b) < 0)
1429
            return -ENOTSUP;
1430
        *(uint8_t *)arg = b;
1431
        break;
1432
    default:
1433
        return -ENOTSUP;
1434
    }
1435
    return 0;
1436
}
1437

    
1438
static CharDriverState *qemu_chr_open_pp_fd(int fd)
1439
{
1440
    CharDriverState *chr;
1441

    
1442
    chr = g_malloc0(sizeof(CharDriverState));
1443
    chr->opaque = (void *)(intptr_t)fd;
1444
    chr->chr_write = null_chr_write;
1445
    chr->chr_ioctl = pp_ioctl;
1446
    return chr;
1447
}
1448
#endif
1449

    
1450
#else /* _WIN32 */
1451

    
1452
static CharDriverState *stdio_clients[STDIO_MAX_CLIENTS];
1453

    
1454
typedef struct {
1455
    int max_size;
1456
    HANDLE hcom, hrecv, hsend;
1457
    OVERLAPPED orecv, osend;
1458
    BOOL fpipe;
1459
    DWORD len;
1460
} WinCharState;
1461

    
1462
typedef struct {
1463
    HANDLE  hStdIn;
1464
    HANDLE  hInputReadyEvent;
1465
    HANDLE  hInputDoneEvent;
1466
    HANDLE  hInputThread;
1467
    uint8_t win_stdio_buf;
1468
} WinStdioCharState;
1469

    
1470
#define NSENDBUF 2048
1471
#define NRECVBUF 2048
1472
#define MAXCONNECT 1
1473
#define NTIMEOUT 5000
1474

    
1475
static int win_chr_poll(void *opaque);
1476
static int win_chr_pipe_poll(void *opaque);
1477

    
1478
static void win_chr_close(CharDriverState *chr)
1479
{
1480
    WinCharState *s = chr->opaque;
1481

    
1482
    if (s->hsend) {
1483
        CloseHandle(s->hsend);
1484
        s->hsend = NULL;
1485
    }
1486
    if (s->hrecv) {
1487
        CloseHandle(s->hrecv);
1488
        s->hrecv = NULL;
1489
    }
1490
    if (s->hcom) {
1491
        CloseHandle(s->hcom);
1492
        s->hcom = NULL;
1493
    }
1494
    if (s->fpipe)
1495
        qemu_del_polling_cb(win_chr_pipe_poll, chr);
1496
    else
1497
        qemu_del_polling_cb(win_chr_poll, chr);
1498

    
1499
    qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
1500
}
1501

    
1502
static int win_chr_init(CharDriverState *chr, const char *filename)
1503
{
1504
    WinCharState *s = chr->opaque;
1505
    COMMCONFIG comcfg;
1506
    COMMTIMEOUTS cto = { 0, 0, 0, 0, 0};
1507
    COMSTAT comstat;
1508
    DWORD size;
1509
    DWORD err;
1510

    
1511
    s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1512
    if (!s->hsend) {
1513
        fprintf(stderr, "Failed CreateEvent\n");
1514
        goto fail;
1515
    }
1516
    s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1517
    if (!s->hrecv) {
1518
        fprintf(stderr, "Failed CreateEvent\n");
1519
        goto fail;
1520
    }
1521

    
1522
    s->hcom = CreateFile(filename, GENERIC_READ|GENERIC_WRITE, 0, NULL,
1523
                      OPEN_EXISTING, FILE_FLAG_OVERLAPPED, 0);
1524
    if (s->hcom == INVALID_HANDLE_VALUE) {
1525
        fprintf(stderr, "Failed CreateFile (%lu)\n", GetLastError());
1526
        s->hcom = NULL;
1527
        goto fail;
1528
    }
1529

    
1530
    if (!SetupComm(s->hcom, NRECVBUF, NSENDBUF)) {
1531
        fprintf(stderr, "Failed SetupComm\n");
1532
        goto fail;
1533
    }
1534

    
1535
    ZeroMemory(&comcfg, sizeof(COMMCONFIG));
1536
    size = sizeof(COMMCONFIG);
1537
    GetDefaultCommConfig(filename, &comcfg, &size);
1538
    comcfg.dcb.DCBlength = sizeof(DCB);
1539
    CommConfigDialog(filename, NULL, &comcfg);
1540

    
1541
    if (!SetCommState(s->hcom, &comcfg.dcb)) {
1542
        fprintf(stderr, "Failed SetCommState\n");
1543
        goto fail;
1544
    }
1545

    
1546
    if (!SetCommMask(s->hcom, EV_ERR)) {
1547
        fprintf(stderr, "Failed SetCommMask\n");
1548
        goto fail;
1549
    }
1550

    
1551
    cto.ReadIntervalTimeout = MAXDWORD;
1552
    if (!SetCommTimeouts(s->hcom, &cto)) {
1553
        fprintf(stderr, "Failed SetCommTimeouts\n");
1554
        goto fail;
1555
    }
1556

    
1557
    if (!ClearCommError(s->hcom, &err, &comstat)) {
1558
        fprintf(stderr, "Failed ClearCommError\n");
1559
        goto fail;
1560
    }
1561
    qemu_add_polling_cb(win_chr_poll, chr);
1562
    return 0;
1563

    
1564
 fail:
1565
    win_chr_close(chr);
1566
    return -1;
1567
}
1568

    
1569
static int win_chr_write(CharDriverState *chr, const uint8_t *buf, int len1)
1570
{
1571
    WinCharState *s = chr->opaque;
1572
    DWORD len, ret, size, err;
1573

    
1574
    len = len1;
1575
    ZeroMemory(&s->osend, sizeof(s->osend));
1576
    s->osend.hEvent = s->hsend;
1577
    while (len > 0) {
1578
        if (s->hsend)
1579
            ret = WriteFile(s->hcom, buf, len, &size, &s->osend);
1580
        else
1581
            ret = WriteFile(s->hcom, buf, len, &size, NULL);
1582
        if (!ret) {
1583
            err = GetLastError();
1584
            if (err == ERROR_IO_PENDING) {
1585
                ret = GetOverlappedResult(s->hcom, &s->osend, &size, TRUE);
1586
                if (ret) {
1587
                    buf += size;
1588
                    len -= size;
1589
                } else {
1590
                    break;
1591
                }
1592
            } else {
1593
                break;
1594
            }
1595
        } else {
1596
            buf += size;
1597
            len -= size;
1598
        }
1599
    }
1600
    return len1 - len;
1601
}
1602

    
1603
static int win_chr_read_poll(CharDriverState *chr)
1604
{
1605
    WinCharState *s = chr->opaque;
1606

    
1607
    s->max_size = qemu_chr_be_can_write(chr);
1608
    return s->max_size;
1609
}
1610

    
1611
static void win_chr_readfile(CharDriverState *chr)
1612
{
1613
    WinCharState *s = chr->opaque;
1614
    int ret, err;
1615
    uint8_t buf[READ_BUF_LEN];
1616
    DWORD size;
1617

    
1618
    ZeroMemory(&s->orecv, sizeof(s->orecv));
1619
    s->orecv.hEvent = s->hrecv;
1620
    ret = ReadFile(s->hcom, buf, s->len, &size, &s->orecv);
1621
    if (!ret) {
1622
        err = GetLastError();
1623
        if (err == ERROR_IO_PENDING) {
1624
            ret = GetOverlappedResult(s->hcom, &s->orecv, &size, TRUE);
1625
        }
1626
    }
1627

    
1628
    if (size > 0) {
1629
        qemu_chr_be_write(chr, buf, size);
1630
    }
1631
}
1632

    
1633
static void win_chr_read(CharDriverState *chr)
1634
{
1635
    WinCharState *s = chr->opaque;
1636

    
1637
    if (s->len > s->max_size)
1638
        s->len = s->max_size;
1639
    if (s->len == 0)
1640
        return;
1641

    
1642
    win_chr_readfile(chr);
1643
}
1644

    
1645
static int win_chr_poll(void *opaque)
1646
{
1647
    CharDriverState *chr = opaque;
1648
    WinCharState *s = chr->opaque;
1649
    COMSTAT status;
1650
    DWORD comerr;
1651

    
1652
    ClearCommError(s->hcom, &comerr, &status);
1653
    if (status.cbInQue > 0) {
1654
        s->len = status.cbInQue;
1655
        win_chr_read_poll(chr);
1656
        win_chr_read(chr);
1657
        return 1;
1658
    }
1659
    return 0;
1660
}
1661

    
1662
static CharDriverState *qemu_chr_open_win_path(const char *filename)
1663
{
1664
    CharDriverState *chr;
1665
    WinCharState *s;
1666

    
1667
    chr = g_malloc0(sizeof(CharDriverState));
1668
    s = g_malloc0(sizeof(WinCharState));
1669
    chr->opaque = s;
1670
    chr->chr_write = win_chr_write;
1671
    chr->chr_close = win_chr_close;
1672

    
1673
    if (win_chr_init(chr, filename) < 0) {
1674
        g_free(s);
1675
        g_free(chr);
1676
        return NULL;
1677
    }
1678
    qemu_chr_generic_open(chr);
1679
    return chr;
1680
}
1681

    
1682
static CharDriverState *qemu_chr_open_win(QemuOpts *opts)
1683
{
1684
    return qemu_chr_open_win_path(qemu_opt_get(opts, "path"));
1685
}
1686

    
1687
static int win_chr_pipe_poll(void *opaque)
1688
{
1689
    CharDriverState *chr = opaque;
1690
    WinCharState *s = chr->opaque;
1691
    DWORD size;
1692

    
1693
    PeekNamedPipe(s->hcom, NULL, 0, NULL, &size, NULL);
1694
    if (size > 0) {
1695
        s->len = size;
1696
        win_chr_read_poll(chr);
1697
        win_chr_read(chr);
1698
        return 1;
1699
    }
1700
    return 0;
1701
}
1702

    
1703
static int win_chr_pipe_init(CharDriverState *chr, const char *filename)
1704
{
1705
    WinCharState *s = chr->opaque;
1706
    OVERLAPPED ov;
1707
    int ret;
1708
    DWORD size;
1709
    char openname[256];
1710

    
1711
    s->fpipe = TRUE;
1712

    
1713
    s->hsend = CreateEvent(NULL, TRUE, FALSE, NULL);
1714
    if (!s->hsend) {
1715
        fprintf(stderr, "Failed CreateEvent\n");
1716
        goto fail;
1717
    }
1718
    s->hrecv = CreateEvent(NULL, TRUE, FALSE, NULL);
1719
    if (!s->hrecv) {
1720
        fprintf(stderr, "Failed CreateEvent\n");
1721
        goto fail;
1722
    }
1723

    
1724
    snprintf(openname, sizeof(openname), "\\\\.\\pipe\\%s", filename);
1725
    s->hcom = CreateNamedPipe(openname, PIPE_ACCESS_DUPLEX | FILE_FLAG_OVERLAPPED,
1726
                              PIPE_TYPE_BYTE | PIPE_READMODE_BYTE |
1727
                              PIPE_WAIT,
1728
                              MAXCONNECT, NSENDBUF, NRECVBUF, NTIMEOUT, NULL);
1729
    if (s->hcom == INVALID_HANDLE_VALUE) {
1730
        fprintf(stderr, "Failed CreateNamedPipe (%lu)\n", GetLastError());
1731
        s->hcom = NULL;
1732
        goto fail;
1733
    }
1734

    
1735
    ZeroMemory(&ov, sizeof(ov));
1736
    ov.hEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
1737
    ret = ConnectNamedPipe(s->hcom, &ov);
1738
    if (ret) {
1739
        fprintf(stderr, "Failed ConnectNamedPipe\n");
1740
        goto fail;
1741
    }
1742

    
1743
    ret = GetOverlappedResult(s->hcom, &ov, &size, TRUE);
1744
    if (!ret) {
1745
        fprintf(stderr, "Failed GetOverlappedResult\n");
1746
        if (ov.hEvent) {
1747
            CloseHandle(ov.hEvent);
1748
            ov.hEvent = NULL;
1749
        }
1750
        goto fail;
1751
    }
1752

    
1753
    if (ov.hEvent) {
1754
        CloseHandle(ov.hEvent);
1755
        ov.hEvent = NULL;
1756
    }
1757
    qemu_add_polling_cb(win_chr_pipe_poll, chr);
1758
    return 0;
1759

    
1760
 fail:
1761
    win_chr_close(chr);
1762
    return -1;
1763
}
1764

    
1765

    
1766
static CharDriverState *qemu_chr_open_win_pipe(QemuOpts *opts)
1767
{
1768
    const char *filename = qemu_opt_get(opts, "path");
1769
    CharDriverState *chr;
1770
    WinCharState *s;
1771

    
1772
    chr = g_malloc0(sizeof(CharDriverState));
1773
    s = g_malloc0(sizeof(WinCharState));
1774
    chr->opaque = s;
1775
    chr->chr_write = win_chr_write;
1776
    chr->chr_close = win_chr_close;
1777

    
1778
    if (win_chr_pipe_init(chr, filename) < 0) {
1779
        g_free(s);
1780
        g_free(chr);
1781
        return NULL;
1782
    }
1783
    qemu_chr_generic_open(chr);
1784
    return chr;
1785
}
1786

    
1787
static CharDriverState *qemu_chr_open_win_file(HANDLE fd_out)
1788
{
1789
    CharDriverState *chr;
1790
    WinCharState *s;
1791

    
1792
    chr = g_malloc0(sizeof(CharDriverState));
1793
    s = g_malloc0(sizeof(WinCharState));
1794
    s->hcom = fd_out;
1795
    chr->opaque = s;
1796
    chr->chr_write = win_chr_write;
1797
    qemu_chr_generic_open(chr);
1798
    return chr;
1799
}
1800

    
1801
static CharDriverState *qemu_chr_open_win_con(QemuOpts *opts)
1802
{
1803
    return qemu_chr_open_win_file(GetStdHandle(STD_OUTPUT_HANDLE));
1804
}
1805

    
1806
static CharDriverState *qemu_chr_open_win_file_out(QemuOpts *opts)
1807
{
1808
    const char *file_out = qemu_opt_get(opts, "path");
1809
    HANDLE fd_out;
1810

    
1811
    fd_out = CreateFile(file_out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
1812
                        OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
1813
    if (fd_out == INVALID_HANDLE_VALUE) {
1814
        return NULL;
1815
    }
1816

    
1817
    return qemu_chr_open_win_file(fd_out);
1818
}
1819

    
1820
static int win_stdio_write(CharDriverState *chr, const uint8_t *buf, int len)
1821
{
1822
    HANDLE  hStdOut = GetStdHandle(STD_OUTPUT_HANDLE);
1823
    DWORD   dwSize;
1824
    int     len1;
1825

    
1826
    len1 = len;
1827

    
1828
    while (len1 > 0) {
1829
        if (!WriteFile(hStdOut, buf, len1, &dwSize, NULL)) {
1830
            break;
1831
        }
1832
        buf  += dwSize;
1833
        len1 -= dwSize;
1834
    }
1835

    
1836
    return len - len1;
1837
}
1838

    
1839
static void win_stdio_wait_func(void *opaque)
1840
{
1841
    CharDriverState   *chr   = opaque;
1842
    WinStdioCharState *stdio = chr->opaque;
1843
    INPUT_RECORD       buf[4];
1844
    int                ret;
1845
    DWORD              dwSize;
1846
    int                i;
1847

    
1848
    ret = ReadConsoleInput(stdio->hStdIn, buf, sizeof(buf) / sizeof(*buf),
1849
                           &dwSize);
1850

    
1851
    if (!ret) {
1852
        /* Avoid error storm */
1853
        qemu_del_wait_object(stdio->hStdIn, NULL, NULL);
1854
        return;
1855
    }
1856

    
1857
    for (i = 0; i < dwSize; i++) {
1858
        KEY_EVENT_RECORD *kev = &buf[i].Event.KeyEvent;
1859

    
1860
        if (buf[i].EventType == KEY_EVENT && kev->bKeyDown) {
1861
            int j;
1862
            if (kev->uChar.AsciiChar != 0) {
1863
                for (j = 0; j < kev->wRepeatCount; j++) {
1864
                    if (qemu_chr_be_can_write(chr)) {
1865
                        uint8_t c = kev->uChar.AsciiChar;
1866
                        qemu_chr_be_write(chr, &c, 1);
1867
                    }
1868
                }
1869
            }
1870
        }
1871
    }
1872
}
1873

    
1874
static DWORD WINAPI win_stdio_thread(LPVOID param)
1875
{
1876
    CharDriverState   *chr   = param;
1877
    WinStdioCharState *stdio = chr->opaque;
1878
    int                ret;
1879
    DWORD              dwSize;
1880

    
1881
    while (1) {
1882

    
1883
        /* Wait for one byte */
1884
        ret = ReadFile(stdio->hStdIn, &stdio->win_stdio_buf, 1, &dwSize, NULL);
1885

    
1886
        /* Exit in case of error, continue if nothing read */
1887
        if (!ret) {
1888
            break;
1889
        }
1890
        if (!dwSize) {
1891
            continue;
1892
        }
1893

    
1894
        /* Some terminal emulator returns \r\n for Enter, just pass \n */
1895
        if (stdio->win_stdio_buf == '\r') {
1896
            continue;
1897
        }
1898

    
1899
        /* Signal the main thread and wait until the byte was eaten */
1900
        if (!SetEvent(stdio->hInputReadyEvent)) {
1901
            break;
1902
        }
1903
        if (WaitForSingleObject(stdio->hInputDoneEvent, INFINITE)
1904
            != WAIT_OBJECT_0) {
1905
            break;
1906
        }
1907
    }
1908

    
1909
    qemu_del_wait_object(stdio->hInputReadyEvent, NULL, NULL);
1910
    return 0;
1911
}
1912

    
1913
static void win_stdio_thread_wait_func(void *opaque)
1914
{
1915
    CharDriverState   *chr   = opaque;
1916
    WinStdioCharState *stdio = chr->opaque;
1917

    
1918
    if (qemu_chr_be_can_write(chr)) {
1919
        qemu_chr_be_write(chr, &stdio->win_stdio_buf, 1);
1920
    }
1921

    
1922
    SetEvent(stdio->hInputDoneEvent);
1923
}
1924

    
1925
static void qemu_chr_set_echo_win_stdio(CharDriverState *chr, bool echo)
1926
{
1927
    WinStdioCharState *stdio  = chr->opaque;
1928
    DWORD              dwMode = 0;
1929

    
1930
    GetConsoleMode(stdio->hStdIn, &dwMode);
1931

    
1932
    if (echo) {
1933
        SetConsoleMode(stdio->hStdIn, dwMode | ENABLE_ECHO_INPUT);
1934
    } else {
1935
        SetConsoleMode(stdio->hStdIn, dwMode & ~ENABLE_ECHO_INPUT);
1936
    }
1937
}
1938

    
1939
static void win_stdio_close(CharDriverState *chr)
1940
{
1941
    WinStdioCharState *stdio = chr->opaque;
1942

    
1943
    if (stdio->hInputReadyEvent != INVALID_HANDLE_VALUE) {
1944
        CloseHandle(stdio->hInputReadyEvent);
1945
    }
1946
    if (stdio->hInputDoneEvent != INVALID_HANDLE_VALUE) {
1947
        CloseHandle(stdio->hInputDoneEvent);
1948
    }
1949
    if (stdio->hInputThread != INVALID_HANDLE_VALUE) {
1950
        TerminateThread(stdio->hInputThread, 0);
1951
    }
1952

    
1953
    g_free(chr->opaque);
1954
    g_free(chr);
1955
    stdio_nb_clients--;
1956
}
1957

    
1958
static CharDriverState *qemu_chr_open_win_stdio(QemuOpts *opts)
1959
{
1960
    CharDriverState   *chr;
1961
    WinStdioCharState *stdio;
1962
    DWORD              dwMode;
1963
    int                is_console = 0;
1964

    
1965
    if (stdio_nb_clients >= STDIO_MAX_CLIENTS
1966
        || ((display_type != DT_NOGRAPHIC) && (stdio_nb_clients != 0))) {
1967
        return NULL;
1968
    }
1969

    
1970
    chr   = g_malloc0(sizeof(CharDriverState));
1971
    stdio = g_malloc0(sizeof(WinStdioCharState));
1972

    
1973
    stdio->hStdIn = GetStdHandle(STD_INPUT_HANDLE);
1974
    if (stdio->hStdIn == INVALID_HANDLE_VALUE) {
1975
        fprintf(stderr, "cannot open stdio: invalid handle\n");
1976
        exit(1);
1977
    }
1978

    
1979
    is_console = GetConsoleMode(stdio->hStdIn, &dwMode) != 0;
1980

    
1981
    chr->opaque    = stdio;
1982
    chr->chr_write = win_stdio_write;
1983
    chr->chr_close = win_stdio_close;
1984

    
1985
    if (stdio_nb_clients == 0) {
1986
        if (is_console) {
1987
            if (qemu_add_wait_object(stdio->hStdIn,
1988
                                     win_stdio_wait_func, chr)) {
1989
                fprintf(stderr, "qemu_add_wait_object: failed\n");
1990
            }
1991
        } else {
1992
            DWORD   dwId;
1993

    
1994
            stdio->hInputReadyEvent = CreateEvent(NULL, FALSE, FALSE, NULL);
1995
            stdio->hInputDoneEvent  = CreateEvent(NULL, FALSE, FALSE, NULL);
1996
            stdio->hInputThread     = CreateThread(NULL, 0, win_stdio_thread,
1997
                                            chr, 0, &dwId);
1998

    
1999
            if (stdio->hInputThread == INVALID_HANDLE_VALUE
2000
                || stdio->hInputReadyEvent == INVALID_HANDLE_VALUE
2001
                || stdio->hInputDoneEvent == INVALID_HANDLE_VALUE) {
2002
                fprintf(stderr, "cannot create stdio thread or event\n");
2003
                exit(1);
2004
            }
2005
            if (qemu_add_wait_object(stdio->hInputReadyEvent,
2006
                                     win_stdio_thread_wait_func, chr)) {
2007
                fprintf(stderr, "qemu_add_wait_object: failed\n");
2008
            }
2009
        }
2010
    }
2011

    
2012
    dwMode |= ENABLE_LINE_INPUT;
2013

    
2014
    stdio_clients[stdio_nb_clients++] = chr;
2015
    if (stdio_nb_clients == 1 && is_console) {
2016
        /* set the terminal in raw mode */
2017
        /* ENABLE_QUICK_EDIT_MODE | ENABLE_EXTENDED_FLAGS */
2018
        dwMode |= ENABLE_PROCESSED_INPUT;
2019
    }
2020

    
2021
    SetConsoleMode(stdio->hStdIn, dwMode);
2022

    
2023
    chr->chr_set_echo = qemu_chr_set_echo_win_stdio;
2024
    qemu_chr_fe_set_echo(chr, false);
2025

    
2026
    return chr;
2027
}
2028
#endif /* !_WIN32 */
2029

    
2030
/***********************************************************/
2031
/* UDP Net console */
2032

    
2033
typedef struct {
2034
    int fd;
2035
    uint8_t buf[READ_BUF_LEN];
2036
    int bufcnt;
2037
    int bufptr;
2038
    int max_size;
2039
} NetCharDriver;
2040

    
2041
static int udp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2042
{
2043
    NetCharDriver *s = chr->opaque;
2044

    
2045
    return send(s->fd, (const void *)buf, len, 0);
2046
}
2047

    
2048
static int udp_chr_read_poll(void *opaque)
2049
{
2050
    CharDriverState *chr = opaque;
2051
    NetCharDriver *s = chr->opaque;
2052

    
2053
    s->max_size = qemu_chr_be_can_write(chr);
2054

    
2055
    /* If there were any stray characters in the queue process them
2056
     * first
2057
     */
2058
    while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2059
        qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2060
        s->bufptr++;
2061
        s->max_size = qemu_chr_be_can_write(chr);
2062
    }
2063
    return s->max_size;
2064
}
2065

    
2066
static void udp_chr_read(void *opaque)
2067
{
2068
    CharDriverState *chr = opaque;
2069
    NetCharDriver *s = chr->opaque;
2070

    
2071
    if (s->max_size == 0)
2072
        return;
2073
    s->bufcnt = qemu_recv(s->fd, s->buf, sizeof(s->buf), 0);
2074
    s->bufptr = s->bufcnt;
2075
    if (s->bufcnt <= 0)
2076
        return;
2077

    
2078
    s->bufptr = 0;
2079
    while (s->max_size > 0 && s->bufptr < s->bufcnt) {
2080
        qemu_chr_be_write(chr, &s->buf[s->bufptr], 1);
2081
        s->bufptr++;
2082
        s->max_size = qemu_chr_be_can_write(chr);
2083
    }
2084
}
2085

    
2086
static void udp_chr_update_read_handler(CharDriverState *chr)
2087
{
2088
    NetCharDriver *s = chr->opaque;
2089

    
2090
    if (s->fd >= 0) {
2091
        qemu_set_fd_handler2(s->fd, udp_chr_read_poll,
2092
                             udp_chr_read, NULL, chr);
2093
    }
2094
}
2095

    
2096
static void udp_chr_close(CharDriverState *chr)
2097
{
2098
    NetCharDriver *s = chr->opaque;
2099
    if (s->fd >= 0) {
2100
        qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2101
        closesocket(s->fd);
2102
    }
2103
    g_free(s);
2104
    qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2105
}
2106

    
2107
static CharDriverState *qemu_chr_open_udp(QemuOpts *opts)
2108
{
2109
    CharDriverState *chr = NULL;
2110
    NetCharDriver *s = NULL;
2111
    Error *local_err = NULL;
2112
    int fd = -1;
2113

    
2114
    chr = g_malloc0(sizeof(CharDriverState));
2115
    s = g_malloc0(sizeof(NetCharDriver));
2116

    
2117
    fd = inet_dgram_opts(opts, &local_err);
2118
    if (fd < 0) {
2119
        goto return_err;
2120
    }
2121

    
2122
    s->fd = fd;
2123
    s->bufcnt = 0;
2124
    s->bufptr = 0;
2125
    chr->opaque = s;
2126
    chr->chr_write = udp_chr_write;
2127
    chr->chr_update_read_handler = udp_chr_update_read_handler;
2128
    chr->chr_close = udp_chr_close;
2129
    return chr;
2130

    
2131
return_err:
2132
    if (local_err) {
2133
        qerror_report_err(local_err);
2134
        error_free(local_err);
2135
    }
2136
    g_free(chr);
2137
    g_free(s);
2138
    if (fd >= 0) {
2139
        closesocket(fd);
2140
    }
2141
    return NULL;
2142
}
2143

    
2144
/***********************************************************/
2145
/* TCP Net console */
2146

    
2147
typedef struct {
2148
    int fd, listen_fd;
2149
    int connected;
2150
    int max_size;
2151
    int do_telnetopt;
2152
    int do_nodelay;
2153
    int is_unix;
2154
    int msgfd;
2155
} TCPCharDriver;
2156

    
2157
static void tcp_chr_accept(void *opaque);
2158

    
2159
static int tcp_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2160
{
2161
    TCPCharDriver *s = chr->opaque;
2162
    if (s->connected) {
2163
        return send_all(s->fd, buf, len);
2164
    } else {
2165
        /* XXX: indicate an error ? */
2166
        return len;
2167
    }
2168
}
2169

    
2170
static int tcp_chr_read_poll(void *opaque)
2171
{
2172
    CharDriverState *chr = opaque;
2173
    TCPCharDriver *s = chr->opaque;
2174
    if (!s->connected)
2175
        return 0;
2176
    s->max_size = qemu_chr_be_can_write(chr);
2177
    return s->max_size;
2178
}
2179

    
2180
#define IAC 255
2181
#define IAC_BREAK 243
2182
static void tcp_chr_process_IAC_bytes(CharDriverState *chr,
2183
                                      TCPCharDriver *s,
2184
                                      uint8_t *buf, int *size)
2185
{
2186
    /* Handle any telnet client's basic IAC options to satisfy char by
2187
     * char mode with no echo.  All IAC options will be removed from
2188
     * the buf and the do_telnetopt variable will be used to track the
2189
     * state of the width of the IAC information.
2190
     *
2191
     * IAC commands come in sets of 3 bytes with the exception of the
2192
     * "IAC BREAK" command and the double IAC.
2193
     */
2194

    
2195
    int i;
2196
    int j = 0;
2197

    
2198
    for (i = 0; i < *size; i++) {
2199
        if (s->do_telnetopt > 1) {
2200
            if ((unsigned char)buf[i] == IAC && s->do_telnetopt == 2) {
2201
                /* Double IAC means send an IAC */
2202
                if (j != i)
2203
                    buf[j] = buf[i];
2204
                j++;
2205
                s->do_telnetopt = 1;
2206
            } else {
2207
                if ((unsigned char)buf[i] == IAC_BREAK && s->do_telnetopt == 2) {
2208
                    /* Handle IAC break commands by sending a serial break */
2209
                    qemu_chr_be_event(chr, CHR_EVENT_BREAK);
2210
                    s->do_telnetopt++;
2211
                }
2212
                s->do_telnetopt++;
2213
            }
2214
            if (s->do_telnetopt >= 4) {
2215
                s->do_telnetopt = 1;
2216
            }
2217
        } else {
2218
            if ((unsigned char)buf[i] == IAC) {
2219
                s->do_telnetopt = 2;
2220
            } else {
2221
                if (j != i)
2222
                    buf[j] = buf[i];
2223
                j++;
2224
            }
2225
        }
2226
    }
2227
    *size = j;
2228
}
2229

    
2230
static int tcp_get_msgfd(CharDriverState *chr)
2231
{
2232
    TCPCharDriver *s = chr->opaque;
2233
    int fd = s->msgfd;
2234
    s->msgfd = -1;
2235
    return fd;
2236
}
2237

    
2238
#ifndef _WIN32
2239
static void unix_process_msgfd(CharDriverState *chr, struct msghdr *msg)
2240
{
2241
    TCPCharDriver *s = chr->opaque;
2242
    struct cmsghdr *cmsg;
2243

    
2244
    for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) {
2245
        int fd;
2246

    
2247
        if (cmsg->cmsg_len != CMSG_LEN(sizeof(int)) ||
2248
            cmsg->cmsg_level != SOL_SOCKET ||
2249
            cmsg->cmsg_type != SCM_RIGHTS)
2250
            continue;
2251

    
2252
        fd = *((int *)CMSG_DATA(cmsg));
2253
        if (fd < 0)
2254
            continue;
2255

    
2256
#ifndef MSG_CMSG_CLOEXEC
2257
        qemu_set_cloexec(fd);
2258
#endif
2259
        if (s->msgfd != -1)
2260
            close(s->msgfd);
2261
        s->msgfd = fd;
2262
    }
2263
}
2264

    
2265
static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2266
{
2267
    TCPCharDriver *s = chr->opaque;
2268
    struct msghdr msg = { NULL, };
2269
    struct iovec iov[1];
2270
    union {
2271
        struct cmsghdr cmsg;
2272
        char control[CMSG_SPACE(sizeof(int))];
2273
    } msg_control;
2274
    int flags = 0;
2275
    ssize_t ret;
2276

    
2277
    iov[0].iov_base = buf;
2278
    iov[0].iov_len = len;
2279

    
2280
    msg.msg_iov = iov;
2281
    msg.msg_iovlen = 1;
2282
    msg.msg_control = &msg_control;
2283
    msg.msg_controllen = sizeof(msg_control);
2284

    
2285
#ifdef MSG_CMSG_CLOEXEC
2286
    flags |= MSG_CMSG_CLOEXEC;
2287
#endif
2288
    ret = recvmsg(s->fd, &msg, flags);
2289
    if (ret > 0 && s->is_unix) {
2290
        unix_process_msgfd(chr, &msg);
2291
    }
2292

    
2293
    return ret;
2294
}
2295
#else
2296
static ssize_t tcp_chr_recv(CharDriverState *chr, char *buf, size_t len)
2297
{
2298
    TCPCharDriver *s = chr->opaque;
2299
    return qemu_recv(s->fd, buf, len, 0);
2300
}
2301
#endif
2302

    
2303
static void tcp_chr_read(void *opaque)
2304
{
2305
    CharDriverState *chr = opaque;
2306
    TCPCharDriver *s = chr->opaque;
2307
    uint8_t buf[READ_BUF_LEN];
2308
    int len, size;
2309

    
2310
    if (!s->connected || s->max_size <= 0)
2311
        return;
2312
    len = sizeof(buf);
2313
    if (len > s->max_size)
2314
        len = s->max_size;
2315
    size = tcp_chr_recv(chr, (void *)buf, len);
2316
    if (size == 0) {
2317
        /* connection closed */
2318
        s->connected = 0;
2319
        if (s->listen_fd >= 0) {
2320
            qemu_set_fd_handler2(s->listen_fd, NULL, tcp_chr_accept, NULL, chr);
2321
        }
2322
        qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2323
        closesocket(s->fd);
2324
        s->fd = -1;
2325
        qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2326
    } else if (size > 0) {
2327
        if (s->do_telnetopt)
2328
            tcp_chr_process_IAC_bytes(chr, s, buf, &size);
2329
        if (size > 0)
2330
            qemu_chr_be_write(chr, buf, size);
2331
    }
2332
}
2333

    
2334
#ifndef _WIN32
2335
CharDriverState *qemu_chr_open_eventfd(int eventfd)
2336
{
2337
    return qemu_chr_open_fd(eventfd, eventfd);
2338
}
2339
#endif
2340

    
2341
static void tcp_chr_connect(void *opaque)
2342
{
2343
    CharDriverState *chr = opaque;
2344
    TCPCharDriver *s = chr->opaque;
2345

    
2346
    s->connected = 1;
2347
    if (s->fd >= 0) {
2348
        qemu_set_fd_handler2(s->fd, tcp_chr_read_poll,
2349
                             tcp_chr_read, NULL, chr);
2350
    }
2351
    qemu_chr_generic_open(chr);
2352
}
2353

    
2354
#define IACSET(x,a,b,c) x[0] = a; x[1] = b; x[2] = c;
2355
static void tcp_chr_telnet_init(int fd)
2356
{
2357
    char buf[3];
2358
    /* Send the telnet negotion to put telnet in binary, no echo, single char mode */
2359
    IACSET(buf, 0xff, 0xfb, 0x01);  /* IAC WILL ECHO */
2360
    send(fd, (char *)buf, 3, 0);
2361
    IACSET(buf, 0xff, 0xfb, 0x03);  /* IAC WILL Suppress go ahead */
2362
    send(fd, (char *)buf, 3, 0);
2363
    IACSET(buf, 0xff, 0xfb, 0x00);  /* IAC WILL Binary */
2364
    send(fd, (char *)buf, 3, 0);
2365
    IACSET(buf, 0xff, 0xfd, 0x00);  /* IAC DO Binary */
2366
    send(fd, (char *)buf, 3, 0);
2367
}
2368

    
2369
static void socket_set_nodelay(int fd)
2370
{
2371
    int val = 1;
2372
    setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, (char *)&val, sizeof(val));
2373
}
2374

    
2375
static int tcp_chr_add_client(CharDriverState *chr, int fd)
2376
{
2377
    TCPCharDriver *s = chr->opaque;
2378
    if (s->fd != -1)
2379
        return -1;
2380

    
2381
    socket_set_nonblock(fd);
2382
    if (s->do_nodelay)
2383
        socket_set_nodelay(fd);
2384
    s->fd = fd;
2385
    qemu_set_fd_handler2(s->listen_fd, NULL, NULL, NULL, NULL);
2386
    tcp_chr_connect(chr);
2387

    
2388
    return 0;
2389
}
2390

    
2391
static void tcp_chr_accept(void *opaque)
2392
{
2393
    CharDriverState *chr = opaque;
2394
    TCPCharDriver *s = chr->opaque;
2395
    struct sockaddr_in saddr;
2396
#ifndef _WIN32
2397
    struct sockaddr_un uaddr;
2398
#endif
2399
    struct sockaddr *addr;
2400
    socklen_t len;
2401
    int fd;
2402

    
2403
    for(;;) {
2404
#ifndef _WIN32
2405
        if (s->is_unix) {
2406
            len = sizeof(uaddr);
2407
            addr = (struct sockaddr *)&uaddr;
2408
        } else
2409
#endif
2410
        {
2411
            len = sizeof(saddr);
2412
            addr = (struct sockaddr *)&saddr;
2413
        }
2414
        fd = qemu_accept(s->listen_fd, addr, &len);
2415
        if (fd < 0 && errno != EINTR) {
2416
            return;
2417
        } else if (fd >= 0) {
2418
            if (s->do_telnetopt)
2419
                tcp_chr_telnet_init(fd);
2420
            break;
2421
        }
2422
    }
2423
    if (tcp_chr_add_client(chr, fd) < 0)
2424
        close(fd);
2425
}
2426

    
2427
static void tcp_chr_close(CharDriverState *chr)
2428
{
2429
    TCPCharDriver *s = chr->opaque;
2430
    if (s->fd >= 0) {
2431
        qemu_set_fd_handler2(s->fd, NULL, NULL, NULL, NULL);
2432
        closesocket(s->fd);
2433
    }
2434
    if (s->listen_fd >= 0) {
2435
        qemu_set_fd_handler2(s->listen_fd, NULL, NULL, NULL, NULL);
2436
        closesocket(s->listen_fd);
2437
    }
2438
    g_free(s);
2439
    qemu_chr_be_event(chr, CHR_EVENT_CLOSED);
2440
}
2441

    
2442
static CharDriverState *qemu_chr_open_socket_fd(int fd, bool do_nodelay,
2443
                                                bool is_listen, bool is_telnet,
2444
                                                bool is_waitconnect,
2445
                                                Error **errp)
2446
{
2447
    CharDriverState *chr = NULL;
2448
    TCPCharDriver *s = NULL;
2449
    char host[NI_MAXHOST], serv[NI_MAXSERV];
2450
    const char *left = "", *right = "";
2451
    struct sockaddr_storage ss;
2452
    socklen_t ss_len = sizeof(ss);
2453

    
2454
    memset(&ss, 0, ss_len);
2455
    if (getsockname(fd, (struct sockaddr *) &ss, &ss_len) != 0) {
2456
        error_setg(errp, "getsockname: %s", strerror(errno));
2457
        return NULL;
2458
    }
2459

    
2460
    chr = g_malloc0(sizeof(CharDriverState));
2461
    s = g_malloc0(sizeof(TCPCharDriver));
2462

    
2463
    s->connected = 0;
2464
    s->fd = -1;
2465
    s->listen_fd = -1;
2466
    s->msgfd = -1;
2467

    
2468
    chr->filename = g_malloc(256);
2469
    switch (ss.ss_family) {
2470
#ifndef _WIN32
2471
    case AF_UNIX:
2472
        s->is_unix = 1;
2473
        snprintf(chr->filename, 256, "unix:%s%s",
2474
                 ((struct sockaddr_un *)(&ss))->sun_path,
2475
                 is_listen ? ",server" : "");
2476
        break;
2477
#endif
2478
    case AF_INET6:
2479
        left  = "[";
2480
        right = "]";
2481
        /* fall through */
2482
    case AF_INET:
2483
        s->do_nodelay = do_nodelay;
2484
        getnameinfo((struct sockaddr *) &ss, ss_len, host, sizeof(host),
2485
                    serv, sizeof(serv), NI_NUMERICHOST | NI_NUMERICSERV);
2486
        snprintf(chr->filename, 256, "%s:%s:%s%s%s%s",
2487
                 is_telnet ? "telnet" : "tcp",
2488
                 left, host, right, serv,
2489
                 is_listen ? ",server" : "");
2490
        break;
2491
    }
2492

    
2493
    chr->opaque = s;
2494
    chr->chr_write = tcp_chr_write;
2495
    chr->chr_close = tcp_chr_close;
2496
    chr->get_msgfd = tcp_get_msgfd;
2497
    chr->chr_add_client = tcp_chr_add_client;
2498

    
2499
    if (is_listen) {
2500
        s->listen_fd = fd;
2501
        qemu_set_fd_handler2(s->listen_fd, NULL, tcp_chr_accept, NULL, chr);
2502
        if (is_telnet) {
2503
            s->do_telnetopt = 1;
2504
        }
2505
    } else {
2506
        s->connected = 1;
2507
        s->fd = fd;
2508
        socket_set_nodelay(fd);
2509
        tcp_chr_connect(chr);
2510
    }
2511

    
2512
    if (is_listen && is_waitconnect) {
2513
        printf("QEMU waiting for connection on: %s\n",
2514
               chr->filename);
2515
        tcp_chr_accept(chr);
2516
        socket_set_nonblock(s->listen_fd);
2517
    }
2518
    return chr;
2519
}
2520

    
2521
static CharDriverState *qemu_chr_open_socket(QemuOpts *opts)
2522
{
2523
    CharDriverState *chr = NULL;
2524
    Error *local_err = NULL;
2525
    int fd = -1;
2526
    int is_listen;
2527
    int is_waitconnect;
2528
    int do_nodelay;
2529
    int is_unix;
2530
    int is_telnet;
2531

    
2532
    is_listen      = qemu_opt_get_bool(opts, "server", 0);
2533
    is_waitconnect = qemu_opt_get_bool(opts, "wait", 1);
2534
    is_telnet      = qemu_opt_get_bool(opts, "telnet", 0);
2535
    do_nodelay     = !qemu_opt_get_bool(opts, "delay", 1);
2536
    is_unix        = qemu_opt_get(opts, "path") != NULL;
2537
    if (!is_listen)
2538
        is_waitconnect = 0;
2539

    
2540
    if (is_unix) {
2541
        if (is_listen) {
2542
            fd = unix_listen_opts(opts, &local_err);
2543
        } else {
2544
            fd = unix_connect_opts(opts, &local_err, NULL, NULL);
2545
        }
2546
    } else {
2547
        if (is_listen) {
2548
            fd = inet_listen_opts(opts, 0, &local_err);
2549
        } else {
2550
            fd = inet_connect_opts(opts, &local_err, NULL, NULL);
2551
        }
2552
    }
2553
    if (fd < 0) {
2554
        goto fail;
2555
    }
2556

    
2557
    if (!is_waitconnect)
2558
        socket_set_nonblock(fd);
2559

    
2560
    chr = qemu_chr_open_socket_fd(fd, do_nodelay, is_listen, is_telnet,
2561
                                  is_waitconnect, &local_err);
2562
    if (error_is_set(&local_err)) {
2563
        goto fail;
2564
    }
2565
    return chr;
2566

    
2567

    
2568
 fail:
2569
    if (local_err) {
2570
        qerror_report_err(local_err);
2571
        error_free(local_err);
2572
    }
2573
    if (fd >= 0) {
2574
        closesocket(fd);
2575
    }
2576
    if (chr) {
2577
        g_free(chr->opaque);
2578
        g_free(chr);
2579
    }
2580
    return NULL;
2581
}
2582

    
2583
/***********************************************************/
2584
/* Memory chardev */
2585
typedef struct {
2586
    size_t outbuf_size;
2587
    size_t outbuf_capacity;
2588
    uint8_t *outbuf;
2589
} MemoryDriver;
2590

    
2591
static int mem_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2592
{
2593
    MemoryDriver *d = chr->opaque;
2594

    
2595
    /* TODO: the QString implementation has the same code, we should
2596
     * introduce a generic way to do this in cutils.c */
2597
    if (d->outbuf_capacity < d->outbuf_size + len) {
2598
        /* grow outbuf */
2599
        d->outbuf_capacity += len;
2600
        d->outbuf_capacity *= 2;
2601
        d->outbuf = g_realloc(d->outbuf, d->outbuf_capacity);
2602
    }
2603

    
2604
    memcpy(d->outbuf + d->outbuf_size, buf, len);
2605
    d->outbuf_size += len;
2606

    
2607
    return len;
2608
}
2609

    
2610
void qemu_chr_init_mem(CharDriverState *chr)
2611
{
2612
    MemoryDriver *d;
2613

    
2614
    d = g_malloc(sizeof(*d));
2615
    d->outbuf_size = 0;
2616
    d->outbuf_capacity = 4096;
2617
    d->outbuf = g_malloc0(d->outbuf_capacity);
2618

    
2619
    memset(chr, 0, sizeof(*chr));
2620
    chr->opaque = d;
2621
    chr->chr_write = mem_chr_write;
2622
}
2623

    
2624
QString *qemu_chr_mem_to_qs(CharDriverState *chr)
2625
{
2626
    MemoryDriver *d = chr->opaque;
2627
    return qstring_from_substr((char *) d->outbuf, 0, d->outbuf_size - 1);
2628
}
2629

    
2630
/* NOTE: this driver can not be closed with qemu_chr_delete()! */
2631
void qemu_chr_close_mem(CharDriverState *chr)
2632
{
2633
    MemoryDriver *d = chr->opaque;
2634

    
2635
    g_free(d->outbuf);
2636
    g_free(chr->opaque);
2637
    chr->opaque = NULL;
2638
    chr->chr_write = NULL;
2639
}
2640

    
2641
size_t qemu_chr_mem_osize(const CharDriverState *chr)
2642
{
2643
    const MemoryDriver *d = chr->opaque;
2644
    return d->outbuf_size;
2645
}
2646

    
2647
/*********************************************************/
2648
/*CircularMemory chardev*/
2649

    
2650
typedef struct {
2651
    size_t size;
2652
    size_t prod;
2653
    size_t cons;
2654
    uint8_t *cbuf;
2655
} CirMemCharDriver;
2656

    
2657
static bool cirmem_chr_is_empty(const CharDriverState *chr)
2658
{
2659
    const CirMemCharDriver *d = chr->opaque;
2660

    
2661
    return d->cons == d->prod;
2662
}
2663

    
2664
static size_t qemu_chr_cirmem_count(const CharDriverState *chr)
2665
{
2666
    const CirMemCharDriver *d = chr->opaque;
2667

    
2668
    return (d->prod - d->cons);
2669
}
2670

    
2671
static int cirmem_chr_write(CharDriverState *chr, const uint8_t *buf, int len)
2672
{
2673
    CirMemCharDriver *d = chr->opaque;
2674
    int i;
2675

    
2676
    if (!buf || (len < 0)) {
2677
        return -1;
2678
    }
2679

    
2680
    for (i = 0; i < len; i++ ) {
2681
        /* Avoid writing the IAC information to the queue. */
2682
        if ((unsigned char)buf[i] == IAC) {
2683
            continue;
2684
        }
2685

    
2686
        d->cbuf[d->prod++ % d->size] = buf[i];
2687
        if ((d->prod - d->cons) > d->size) {
2688
            d->cons = d->prod - d->size;
2689
        }
2690
    }
2691

    
2692
    return 0;
2693
}
2694

    
2695
static int cirmem_chr_read(CharDriverState *chr, uint8_t *buf, int len)
2696
{
2697
    CirMemCharDriver *d = chr->opaque;
2698
    int i;
2699

    
2700
    for (i = 0; i < len && !cirmem_chr_is_empty(chr); i++) {
2701
        buf[i] = d->cbuf[d->cons++ % d->size];
2702
    }
2703

    
2704
    return i;
2705
}
2706

    
2707
static void cirmem_chr_close(struct CharDriverState *chr)
2708
{
2709
    CirMemCharDriver *d = chr->opaque;
2710

    
2711
    g_free(d->cbuf);
2712
    g_free(d);
2713
    chr->opaque = NULL;
2714
}
2715

    
2716
static CharDriverState *qemu_chr_open_cirmemchr(QemuOpts *opts)
2717
{
2718
    CharDriverState *chr;
2719
    CirMemCharDriver *d;
2720

    
2721
    chr = g_malloc0(sizeof(CharDriverState));
2722
    d = g_malloc(sizeof(*d));
2723

    
2724
    d->size = qemu_opt_get_number(opts, "maxcapacity", 0);
2725
    if (d->size == 0) {
2726
        d->size = CBUFF_SIZE;
2727
    }
2728

    
2729
    /* The size must be power of 2 */
2730
    if (d->size & (d->size - 1)) {
2731
        fprintf(stderr, "chardev: size of memory device must be power of 2\n");
2732
        goto fail;
2733
    }
2734

    
2735
    d->prod = 0;
2736
    d->cons = 0;
2737
    d->cbuf = g_malloc0(d->size);
2738

    
2739
    chr->opaque = d;
2740
    chr->chr_write = cirmem_chr_write;
2741
    chr->chr_close = cirmem_chr_close;
2742

    
2743
    return chr;
2744

    
2745
fail:
2746
    g_free(d);
2747
    g_free(chr);
2748
    return NULL;
2749
}
2750

    
2751
static bool qemu_is_chr(const CharDriverState *chr, const char *filename)
2752
{
2753
    return strcmp(chr->filename, filename);
2754
}
2755

    
2756
void qmp_memchar_write(const char *device, const char *data,
2757
                       bool has_format, enum DataFormat format,
2758
                       Error **errp)
2759
{
2760
    CharDriverState *chr;
2761
    const uint8_t *write_data;
2762
    int ret;
2763
    size_t write_count;
2764

    
2765
    chr = qemu_chr_find(device);
2766
    if (!chr) {
2767
        error_setg(errp, "Device '%s' not found", device);
2768
        return;
2769
    }
2770

    
2771
    if (qemu_is_chr(chr, "memory")) {
2772
        error_setg(errp,"%s is not memory char device", device);
2773
        return;
2774
    }
2775

    
2776
    if (has_format && (format == DATA_FORMAT_BASE64)) {
2777
        write_data = g_base64_decode(data, &write_count);
2778
    } else {
2779
        write_data = (uint8_t *)data;
2780
        write_count = strlen(data);
2781
    }
2782

    
2783
    ret = cirmem_chr_write(chr, write_data, write_count);
2784

    
2785
    if (write_data != (uint8_t *)data) {
2786
        g_free((void *)write_data);
2787
    }
2788

    
2789
    if (ret < 0) {
2790
        error_setg(errp, "Failed to write to device %s", device);
2791
        return;
2792
    }
2793
}
2794

    
2795
char *qmp_memchar_read(const char *device, int64_t size,
2796
                       bool has_format, enum DataFormat format,
2797
                       Error **errp)
2798
{
2799
    CharDriverState *chr;
2800
    uint8_t *read_data;
2801
    size_t count;
2802
    char *data;
2803

    
2804
    chr = qemu_chr_find(device);
2805
    if (!chr) {
2806
        error_setg(errp, "Device '%s' not found", device);
2807
        return NULL;
2808
    }
2809

    
2810
    if (qemu_is_chr(chr, "memory")) {
2811
        error_setg(errp,"%s is not memory char device", device);
2812
        return NULL;
2813
    }
2814

    
2815
    if (size <= 0) {
2816
        error_setg(errp, "size must be greater than zero");
2817
        return NULL;
2818
    }
2819

    
2820
    count = qemu_chr_cirmem_count(chr);
2821
    size = size > count ? count : size;
2822
    read_data = g_malloc(size + 1);
2823

    
2824
    cirmem_chr_read(chr, read_data, size);
2825

    
2826
    if (has_format && (format == DATA_FORMAT_BASE64)) {
2827
        data = g_base64_encode(read_data, size);
2828
        g_free(read_data);
2829
    } else {
2830
        read_data[size] = 0;
2831
        data = (char *)read_data;
2832
    }
2833

    
2834
    return data;
2835
}
2836

    
2837
QemuOpts *qemu_chr_parse_compat(const char *label, const char *filename)
2838
{
2839
    char host[65], port[33], width[8], height[8];
2840
    int pos;
2841
    const char *p;
2842
    QemuOpts *opts;
2843
    Error *local_err = NULL;
2844

    
2845
    opts = qemu_opts_create(qemu_find_opts("chardev"), label, 1, &local_err);
2846
    if (error_is_set(&local_err)) {
2847
        qerror_report_err(local_err);
2848
        error_free(local_err);
2849
        return NULL;
2850
    }
2851

    
2852
    if (strstart(filename, "mon:", &p)) {
2853
        filename = p;
2854
        qemu_opt_set(opts, "mux", "on");
2855
    }
2856

    
2857
    if (strcmp(filename, "null")    == 0 ||
2858
        strcmp(filename, "pty")     == 0 ||
2859
        strcmp(filename, "msmouse") == 0 ||
2860
        strcmp(filename, "braille") == 0 ||
2861
        strcmp(filename, "stdio")   == 0) {
2862
        qemu_opt_set(opts, "backend", filename);
2863
        return opts;
2864
    }
2865
    if (strstart(filename, "vc", &p)) {
2866
        qemu_opt_set(opts, "backend", "vc");
2867
        if (*p == ':') {
2868
            if (sscanf(p+1, "%8[0-9]x%8[0-9]", width, height) == 2) {
2869
                /* pixels */
2870
                qemu_opt_set(opts, "width", width);
2871
                qemu_opt_set(opts, "height", height);
2872
            } else if (sscanf(p+1, "%8[0-9]Cx%8[0-9]C", width, height) == 2) {
2873
                /* chars */
2874
                qemu_opt_set(opts, "cols", width);
2875
                qemu_opt_set(opts, "rows", height);
2876
            } else {
2877
                goto fail;
2878
            }
2879
        }
2880
        return opts;
2881
    }
2882
    if (strcmp(filename, "con:") == 0) {
2883
        qemu_opt_set(opts, "backend", "console");
2884
        return opts;
2885
    }
2886
    if (strstart(filename, "COM", NULL)) {
2887
        qemu_opt_set(opts, "backend", "serial");
2888
        qemu_opt_set(opts, "path", filename);
2889
        return opts;
2890
    }
2891
    if (strstart(filename, "memory", &p)) {
2892
        qemu_opt_set(opts, "backend", "memory");
2893
        qemu_opt_set(opts, "maxcapacity", p);
2894
        return opts;
2895
    }
2896
    if (strstart(filename, "file:", &p)) {
2897
        qemu_opt_set(opts, "backend", "file");
2898
        qemu_opt_set(opts, "path", p);
2899
        return opts;
2900
    }
2901
    if (strstart(filename, "pipe:", &p)) {
2902
        qemu_opt_set(opts, "backend", "pipe");
2903
        qemu_opt_set(opts, "path", p);
2904
        return opts;
2905
    }
2906
    if (strstart(filename, "tcp:", &p) ||
2907
        strstart(filename, "telnet:", &p)) {
2908
        if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
2909
            host[0] = 0;
2910
            if (sscanf(p, ":%32[^,]%n", port, &pos) < 1)
2911
                goto fail;
2912
        }
2913
        qemu_opt_set(opts, "backend", "socket");
2914
        qemu_opt_set(opts, "host", host);
2915
        qemu_opt_set(opts, "port", port);
2916
        if (p[pos] == ',') {
2917
            if (qemu_opts_do_parse(opts, p+pos+1, NULL) != 0)
2918
                goto fail;
2919
        }
2920
        if (strstart(filename, "telnet:", &p))
2921
            qemu_opt_set(opts, "telnet", "on");
2922
        return opts;
2923
    }
2924
    if (strstart(filename, "udp:", &p)) {
2925
        qemu_opt_set(opts, "backend", "udp");
2926
        if (sscanf(p, "%64[^:]:%32[^@,]%n", host, port, &pos) < 2) {
2927
            host[0] = 0;
2928
            if (sscanf(p, ":%32[^@,]%n", port, &pos) < 1) {
2929
                goto fail;
2930
            }
2931
        }
2932
        qemu_opt_set(opts, "host", host);
2933
        qemu_opt_set(opts, "port", port);
2934
        if (p[pos] == '@') {
2935
            p += pos + 1;
2936
            if (sscanf(p, "%64[^:]:%32[^,]%n", host, port, &pos) < 2) {
2937
                host[0] = 0;
2938
                if (sscanf(p, ":%32[^,]%n", port, &pos) < 1) {
2939
                    goto fail;
2940
                }
2941
            }
2942
            qemu_opt_set(opts, "localaddr", host);
2943
            qemu_opt_set(opts, "localport", port);
2944
        }
2945
        return opts;
2946
    }
2947
    if (strstart(filename, "unix:", &p)) {
2948
        qemu_opt_set(opts, "backend", "socket");
2949
        if (qemu_opts_do_parse(opts, p, "path") != 0)
2950
            goto fail;
2951
        return opts;
2952
    }
2953
    if (strstart(filename, "/dev/parport", NULL) ||
2954
        strstart(filename, "/dev/ppi", NULL)) {
2955
        qemu_opt_set(opts, "backend", "parport");
2956
        qemu_opt_set(opts, "path", filename);
2957
        return opts;
2958
    }
2959
    if (strstart(filename, "/dev/", NULL)) {
2960
        qemu_opt_set(opts, "backend", "tty");
2961
        qemu_opt_set(opts, "path", filename);
2962
        return opts;
2963
    }
2964

    
2965
fail:
2966
    qemu_opts_del(opts);
2967
    return NULL;
2968
}
2969

    
2970
#ifdef HAVE_CHARDEV_PARPORT
2971

    
2972
static CharDriverState *qemu_chr_open_pp(QemuOpts *opts)
2973
{
2974
    const char *filename = qemu_opt_get(opts, "path");
2975
    int fd;
2976

    
2977
    fd = qemu_open(filename, O_RDWR);
2978
    if (fd < 0) {
2979
        return NULL;
2980
    }
2981
    return qemu_chr_open_pp_fd(fd);
2982
}
2983

    
2984
#endif
2985

    
2986
static const struct {
2987
    const char *name;
2988
    CharDriverState *(*open)(QemuOpts *opts);
2989
} backend_table[] = {
2990
    { .name = "null",      .open = qemu_chr_open_null },
2991
    { .name = "socket",    .open = qemu_chr_open_socket },
2992
    { .name = "udp",       .open = qemu_chr_open_udp },
2993
    { .name = "msmouse",   .open = qemu_chr_open_msmouse },
2994
    { .name = "vc",        .open = text_console_init },
2995
    { .name = "memory",    .open = qemu_chr_open_cirmemchr },
2996
#ifdef _WIN32
2997
    { .name = "file",      .open = qemu_chr_open_win_file_out },
2998
    { .name = "pipe",      .open = qemu_chr_open_win_pipe },
2999
    { .name = "console",   .open = qemu_chr_open_win_con },
3000
    { .name = "serial",    .open = qemu_chr_open_win },
3001
    { .name = "stdio",     .open = qemu_chr_open_win_stdio },
3002
#else
3003
    { .name = "file",      .open = qemu_chr_open_file_out },
3004
    { .name = "pipe",      .open = qemu_chr_open_pipe },
3005
    { .name = "stdio",     .open = qemu_chr_open_stdio },
3006
#endif
3007
#ifdef CONFIG_BRLAPI
3008
    { .name = "braille",   .open = chr_baum_init },
3009
#endif
3010
#ifdef HAVE_CHARDEV_TTY
3011
    { .name = "tty",       .open = qemu_chr_open_tty },
3012
    { .name = "serial",    .open = qemu_chr_open_tty },
3013
    { .name = "pty",       .open = qemu_chr_open_pty },
3014
#endif
3015
#ifdef HAVE_CHARDEV_PARPORT
3016
    { .name = "parallel",  .open = qemu_chr_open_pp },
3017
    { .name = "parport",   .open = qemu_chr_open_pp },
3018
#endif
3019
#ifdef CONFIG_SPICE
3020
    { .name = "spicevmc",     .open = qemu_chr_open_spice },
3021
#if SPICE_SERVER_VERSION >= 0x000c02
3022
    { .name = "spiceport",    .open = qemu_chr_open_spice_port },
3023
#endif
3024
#endif
3025
};
3026

    
3027
CharDriverState *qemu_chr_new_from_opts(QemuOpts *opts,
3028
                                    void (*init)(struct CharDriverState *s),
3029
                                    Error **errp)
3030
{
3031
    CharDriverState *chr;
3032
    int i;
3033

    
3034
    if (qemu_opts_id(opts) == NULL) {
3035
        error_setg(errp, "chardev: no id specified\n");
3036
        goto err;
3037
    }
3038

    
3039
    if (qemu_opt_get(opts, "backend") == NULL) {
3040
        error_setg(errp, "chardev: \"%s\" missing backend\n",
3041
                   qemu_opts_id(opts));
3042
        goto err;
3043
    }
3044
    for (i = 0; i < ARRAY_SIZE(backend_table); i++) {
3045
        if (strcmp(backend_table[i].name, qemu_opt_get(opts, "backend")) == 0)
3046
            break;
3047
    }
3048
    if (i == ARRAY_SIZE(backend_table)) {
3049
        error_setg(errp, "chardev: backend \"%s\" not found\n",
3050
                   qemu_opt_get(opts, "backend"));
3051
        goto err;
3052
    }
3053

    
3054
    chr = backend_table[i].open(opts);
3055
    if (!chr) {
3056
        error_setg(errp, "chardev: opening backend \"%s\" failed\n",
3057
                   qemu_opt_get(opts, "backend"));
3058
        goto err;
3059
    }
3060

    
3061
    if (!chr->filename)
3062
        chr->filename = g_strdup(qemu_opt_get(opts, "backend"));
3063
    chr->init = init;
3064
    QTAILQ_INSERT_TAIL(&chardevs, chr, next);
3065

    
3066
    if (qemu_opt_get_bool(opts, "mux", 0)) {
3067
        CharDriverState *base = chr;
3068
        int len = strlen(qemu_opts_id(opts)) + 6;
3069
        base->label = g_malloc(len);
3070
        snprintf(base->label, len, "%s-base", qemu_opts_id(opts));
3071
        chr = qemu_chr_open_mux(base);
3072
        chr->filename = base->filename;
3073
        chr->avail_connections = MAX_MUX;
3074
        QTAILQ_INSERT_TAIL(&chardevs, chr, next);
3075
    } else {
3076
        chr->avail_connections = 1;
3077
    }
3078
    chr->label = g_strdup(qemu_opts_id(opts));
3079
    chr->opts = opts;
3080
    return chr;
3081

    
3082
err:
3083
    qemu_opts_del(opts);
3084
    return NULL;
3085
}
3086

    
3087
CharDriverState *qemu_chr_new(const char *label, const char *filename, void (*init)(struct CharDriverState *s))
3088
{
3089
    const char *p;
3090
    CharDriverState *chr;
3091
    QemuOpts *opts;
3092
    Error *err = NULL;
3093

    
3094
    if (strstart(filename, "chardev:", &p)) {
3095
        return qemu_chr_find(p);
3096
    }
3097

    
3098
    opts = qemu_chr_parse_compat(label, filename);
3099
    if (!opts)
3100
        return NULL;
3101

    
3102
    chr = qemu_chr_new_from_opts(opts, init, &err);
3103
    if (error_is_set(&err)) {
3104
        fprintf(stderr, "%s\n", error_get_pretty(err));
3105
        error_free(err);
3106
    }
3107
    if (chr && qemu_opt_get_bool(opts, "mux", 0)) {
3108
        monitor_init(chr, MONITOR_USE_READLINE);
3109
    }
3110
    return chr;
3111
}
3112

    
3113
void qemu_chr_fe_set_echo(struct CharDriverState *chr, bool echo)
3114
{
3115
    if (chr->chr_set_echo) {
3116
        chr->chr_set_echo(chr, echo);
3117
    }
3118
}
3119

    
3120
void qemu_chr_fe_open(struct CharDriverState *chr)
3121
{
3122
    if (chr->chr_guest_open) {
3123
        chr->chr_guest_open(chr);
3124
    }
3125
}
3126

    
3127
void qemu_chr_fe_close(struct CharDriverState *chr)
3128
{
3129
    if (chr->chr_guest_close) {
3130
        chr->chr_guest_close(chr);
3131
    }
3132
}
3133

    
3134
void qemu_chr_delete(CharDriverState *chr)
3135
{
3136
    QTAILQ_REMOVE(&chardevs, chr, next);
3137
    if (chr->chr_close) {
3138
        chr->chr_close(chr);
3139
    }
3140
    g_free(chr->filename);
3141
    g_free(chr->label);
3142
    if (chr->opts) {
3143
        qemu_opts_del(chr->opts);
3144
    }
3145
    g_free(chr);
3146
}
3147

    
3148
ChardevInfoList *qmp_query_chardev(Error **errp)
3149
{
3150
    ChardevInfoList *chr_list = NULL;
3151
    CharDriverState *chr;
3152

    
3153
    QTAILQ_FOREACH(chr, &chardevs, next) {
3154
        ChardevInfoList *info = g_malloc0(sizeof(*info));
3155
        info->value = g_malloc0(sizeof(*info->value));
3156
        info->value->label = g_strdup(chr->label);
3157
        info->value->filename = g_strdup(chr->filename);
3158

    
3159
        info->next = chr_list;
3160
        chr_list = info;
3161
    }
3162

    
3163
    return chr_list;
3164
}
3165

    
3166
CharDriverState *qemu_chr_find(const char *name)
3167
{
3168
    CharDriverState *chr;
3169

    
3170
    QTAILQ_FOREACH(chr, &chardevs, next) {
3171
        if (strcmp(chr->label, name) != 0)
3172
            continue;
3173
        return chr;
3174
    }
3175
    return NULL;
3176
}
3177

    
3178
/* Get a character (serial) device interface.  */
3179
CharDriverState *qemu_char_get_next_serial(void)
3180
{
3181
    static int next_serial;
3182

    
3183
    /* FIXME: This function needs to go away: use chardev properties!  */
3184
    return serial_hds[next_serial++];
3185
}
3186

    
3187
QemuOptsList qemu_chardev_opts = {
3188
    .name = "chardev",
3189
    .implied_opt_name = "backend",
3190
    .head = QTAILQ_HEAD_INITIALIZER(qemu_chardev_opts.head),
3191
    .desc = {
3192
        {
3193
            .name = "backend",
3194
            .type = QEMU_OPT_STRING,
3195
        },{
3196
            .name = "path",
3197
            .type = QEMU_OPT_STRING,
3198
        },{
3199
            .name = "host",
3200
            .type = QEMU_OPT_STRING,
3201
        },{
3202
            .name = "port",
3203
            .type = QEMU_OPT_STRING,
3204
        },{
3205
            .name = "localaddr",
3206
            .type = QEMU_OPT_STRING,
3207
        },{
3208
            .name = "localport",
3209
            .type = QEMU_OPT_STRING,
3210
        },{
3211
            .name = "to",
3212
            .type = QEMU_OPT_NUMBER,
3213
        },{
3214
            .name = "ipv4",
3215
            .type = QEMU_OPT_BOOL,
3216
        },{
3217
            .name = "ipv6",
3218
            .type = QEMU_OPT_BOOL,
3219
        },{
3220
            .name = "wait",
3221
            .type = QEMU_OPT_BOOL,
3222
        },{
3223
            .name = "server",
3224
            .type = QEMU_OPT_BOOL,
3225
        },{
3226
            .name = "delay",
3227
            .type = QEMU_OPT_BOOL,
3228
        },{
3229
            .name = "telnet",
3230
            .type = QEMU_OPT_BOOL,
3231
        },{
3232
            .name = "width",
3233
            .type = QEMU_OPT_NUMBER,
3234
        },{
3235
            .name = "height",
3236
            .type = QEMU_OPT_NUMBER,
3237
        },{
3238
            .name = "cols",
3239
            .type = QEMU_OPT_NUMBER,
3240
        },{
3241
            .name = "rows",
3242
            .type = QEMU_OPT_NUMBER,
3243
        },{
3244
            .name = "mux",
3245
            .type = QEMU_OPT_BOOL,
3246
        },{
3247
            .name = "signal",
3248
            .type = QEMU_OPT_BOOL,
3249
        },{
3250
            .name = "name",
3251
            .type = QEMU_OPT_STRING,
3252
        },{
3253
            .name = "debug",
3254
            .type = QEMU_OPT_NUMBER,
3255
        },{
3256
            .name = "maxcapacity",
3257
            .type = QEMU_OPT_NUMBER,
3258
        },
3259
        { /* end of list */ }
3260
    },
3261
};
3262

    
3263
#ifdef _WIN32
3264

    
3265
static CharDriverState *qmp_chardev_open_file(ChardevFile *file, Error **errp)
3266
{
3267
    HANDLE out;
3268

    
3269
    if (file->in) {
3270
        error_setg(errp, "input file not supported");
3271
        return NULL;
3272
    }
3273

    
3274
    out = CreateFile(file->out, GENERIC_WRITE, FILE_SHARE_READ, NULL,
3275
                     OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
3276
    if (out == INVALID_HANDLE_VALUE) {
3277
        error_setg(errp, "open %s failed", file->out);
3278
        return NULL;
3279
    }
3280
    return qemu_chr_open_win_file(out);
3281
}
3282

    
3283
static CharDriverState *qmp_chardev_open_port(ChardevPort *port, Error **errp)
3284
{
3285
    switch (port->type) {
3286
    case CHARDEV_PORT_KIND_SERIAL:
3287
        return qemu_chr_open_win_path(port->device);
3288
    default:
3289
        error_setg(errp, "unknown chardev port (%d)", port->type);
3290
        return NULL;
3291
    }
3292
}
3293

    
3294
#else /* WIN32 */
3295

    
3296
static int qmp_chardev_open_file_source(char *src, int flags,
3297
                                        Error **errp)
3298
{
3299
    int fd = -1;
3300

    
3301
    TFR(fd = qemu_open(src, flags, 0666));
3302
    if (fd == -1) {
3303
        error_setg(errp, "open %s: %s", src, strerror(errno));
3304
    }
3305
    return fd;
3306
}
3307

    
3308
static CharDriverState *qmp_chardev_open_file(ChardevFile *file, Error **errp)
3309
{
3310
    int flags, in = -1, out = -1;
3311

    
3312
    flags = O_WRONLY | O_TRUNC | O_CREAT | O_BINARY;
3313
    out = qmp_chardev_open_file_source(file->out, flags, errp);
3314
    if (error_is_set(errp)) {
3315
        return NULL;
3316
    }
3317

    
3318
    if (file->in) {
3319
        flags = O_RDONLY;
3320
        in = qmp_chardev_open_file_source(file->in, flags, errp);
3321
        if (error_is_set(errp)) {
3322
            qemu_close(out);
3323
            return NULL;
3324
        }
3325
    }
3326

    
3327
    return qemu_chr_open_fd(in, out);
3328
}
3329

    
3330
static CharDriverState *qmp_chardev_open_port(ChardevPort *port, Error **errp)
3331
{
3332
    switch (port->type) {
3333
#ifdef HAVE_CHARDEV_TTY
3334
    case CHARDEV_PORT_KIND_SERIAL:
3335
    {
3336
        int flags, fd;
3337
        flags = O_RDWR;
3338
        fd = qmp_chardev_open_file_source(port->device, flags, errp);
3339
        if (error_is_set(errp)) {
3340
            return NULL;
3341
        }
3342
        socket_set_nonblock(fd);
3343
        return qemu_chr_open_tty_fd(fd);
3344
    }
3345
#endif
3346
#ifdef HAVE_CHARDEV_PARPORT
3347
    case CHARDEV_PORT_KIND_PARALLEL:
3348
    {
3349
        int flags, fd;
3350
        flags = O_RDWR;
3351
        fd = qmp_chardev_open_file_source(port->device, flags, errp);
3352
        if (error_is_set(errp)) {
3353
            return NULL;
3354
        }
3355
        return qemu_chr_open_pp_fd(fd);
3356
    }
3357
#endif
3358
    default:
3359
        error_setg(errp, "unknown chardev port (%d)", port->type);
3360
        return NULL;
3361
    }
3362
}
3363

    
3364
#endif /* WIN32 */
3365

    
3366
static CharDriverState *qmp_chardev_open_socket(ChardevSocket *sock,
3367
                                                Error **errp)
3368
{
3369
    SocketAddress *addr = sock->addr;
3370
    bool do_nodelay     = sock->has_nodelay ? sock->nodelay : false;
3371
    bool is_listen      = sock->has_server  ? sock->server  : true;
3372
    bool is_telnet      = sock->has_telnet  ? sock->telnet  : false;
3373
    bool is_waitconnect = sock->has_wait    ? sock->wait    : false;
3374
    int fd;
3375

    
3376
    if (is_listen) {
3377
        fd = socket_listen(addr, errp);
3378
    } else {
3379
        fd = socket_connect(addr, errp, NULL, NULL);
3380
    }
3381
    if (error_is_set(errp)) {
3382
        return NULL;
3383
    }
3384
    return qemu_chr_open_socket_fd(fd, do_nodelay, is_listen,
3385
                                   is_telnet, is_waitconnect, errp);
3386
}
3387

    
3388
ChardevReturn *qmp_chardev_add(const char *id, ChardevBackend *backend,
3389
                               Error **errp)
3390
{
3391
    ChardevReturn *ret = g_new0(ChardevReturn, 1);
3392
    CharDriverState *chr = NULL;
3393

    
3394
    chr = qemu_chr_find(id);
3395
    if (chr) {
3396
        error_setg(errp, "Chardev '%s' already exists", id);
3397
        g_free(ret);
3398
        return NULL;
3399
    }
3400

    
3401
    switch (backend->kind) {
3402
    case CHARDEV_BACKEND_KIND_FILE:
3403
        chr = qmp_chardev_open_file(backend->file, errp);
3404
        break;
3405
    case CHARDEV_BACKEND_KIND_PORT:
3406
        chr = qmp_chardev_open_port(backend->port, errp);
3407
        break;
3408
    case CHARDEV_BACKEND_KIND_SOCKET:
3409
        chr = qmp_chardev_open_socket(backend->socket, errp);
3410
        break;
3411
#ifdef HAVE_CHARDEV_TTY
3412
    case CHARDEV_BACKEND_KIND_PTY:
3413
    {
3414
        /* qemu_chr_open_pty sets "path" in opts */
3415
        QemuOpts *opts;
3416
        opts = qemu_opts_create_nofail(qemu_find_opts("chardev"));
3417
        chr = qemu_chr_open_pty(opts);
3418
        ret->pty = g_strdup(qemu_opt_get(opts, "path"));
3419
        ret->has_pty = true;
3420
        qemu_opts_del(opts);
3421
        break;
3422
    }
3423
#endif
3424
    case CHARDEV_BACKEND_KIND_NULL:
3425
        chr = qemu_chr_open_null(NULL);
3426
        break;
3427
    default:
3428
        error_setg(errp, "unknown chardev backend (%d)", backend->kind);
3429
        break;
3430
    }
3431

    
3432
    if (chr == NULL && !error_is_set(errp)) {
3433
        error_setg(errp, "Failed to create chardev");
3434
    }
3435
    if (chr) {
3436
        chr->label = g_strdup(id);
3437
        chr->avail_connections = 1;
3438
        QTAILQ_INSERT_TAIL(&chardevs, chr, next);
3439
        return ret;
3440
    } else {
3441
        g_free(ret);
3442
        return NULL;
3443
    }
3444
}
3445

    
3446
void qmp_chardev_remove(const char *id, Error **errp)
3447
{
3448
    CharDriverState *chr;
3449

    
3450
    chr = qemu_chr_find(id);
3451
    if (NULL == chr) {
3452
        error_setg(errp, "Chardev '%s' not found", id);
3453
        return;
3454
    }
3455
    if (chr->chr_can_read || chr->chr_read ||
3456
        chr->chr_event || chr->handler_opaque) {
3457
        error_setg(errp, "Chardev '%s' is busy", id);
3458
        return;
3459
    }
3460
    qemu_chr_delete(chr);
3461
}