xref: /qemu/tests/qtest/libqtest.c (revision 45c3d6cfbbe1336176a719a9487289ecd951fb99)
1 /*
2  * QTest
3  *
4  * Copyright IBM, Corp. 2012
5  * Copyright Red Hat, Inc. 2012
6  * Copyright SUSE LINUX Products GmbH 2013
7  *
8  * Authors:
9  *  Anthony Liguori   <aliguori@us.ibm.com>
10  *  Paolo Bonzini     <pbonzini@redhat.com>
11  *  Andreas Färber    <afaerber@suse.de>
12  *
13  * This work is licensed under the terms of the GNU GPL, version 2 or later.
14  * See the COPYING file in the top-level directory.
15  */
16 
17 #include "qemu/osdep.h"
18 
19 #ifndef _WIN32
20 #include <sys/socket.h>
21 #include <sys/wait.h>
22 #include <sys/un.h>
23 #endif /* _WIN32 */
24 #ifdef __linux__
25 #include <sys/prctl.h>
26 #endif /* __linux__ */
27 #ifdef __FreeBSD__
28 #include <sys/procctl.h>
29 #endif /* __FreeBSD__ */
30 
31 #include "libqtest.h"
32 #include "libqmp.h"
33 #include "qemu/ctype.h"
34 #include "qemu/cutils.h"
35 #include "qemu/sockets.h"
36 #include "qapi/qmp/qdict.h"
37 #include "qapi/qmp/qjson.h"
38 #include "qapi/qmp/qlist.h"
39 #include "qapi/qmp/qstring.h"
40 #include "qapi/qmp/qbool.h"
41 
42 #define MAX_IRQ 256
43 
44 #ifndef _WIN32
45 # define SOCKET_TIMEOUT 50
46 # define CMD_EXEC   "exec "
47 # define DEV_STDERR "/dev/fd/2"
48 # define DEV_NULL   "/dev/null"
49 #else
50 # define SOCKET_TIMEOUT 50000
51 # define CMD_EXEC   ""
52 # define DEV_STDERR "2"
53 # define DEV_NULL   "nul"
54 #endif
55 
56 #define WAITPID_TIMEOUT 30
57 
58 typedef void (*QTestSendFn)(QTestState *s, const char *buf);
59 typedef void (*ExternalSendFn)(void *s, const char *buf);
60 typedef GString* (*QTestRecvFn)(QTestState *);
61 
62 typedef struct QTestClientTransportOps {
63     QTestSendFn     send;      /* for sending qtest commands */
64 
65     /*
66      * use external_send to send qtest command strings through functions which
67      * do not accept a QTestState as the first parameter.
68      */
69     ExternalSendFn  external_send;
70 
71     QTestRecvFn     recv_line; /* for receiving qtest command responses */
72 } QTestTransportOps;
73 
74 struct QTestState
75 {
76     int fd;
77     int qmp_fd;
78     int sock;
79     int qmpsock;
80     pid_t qemu_pid;  /* our child QEMU process */
81     int wstatus;
82 #ifdef _WIN32
83     DWORD exit_code;
84 #endif
85     int expected_status;
86     bool big_endian;
87     bool irq_level[MAX_IRQ];
88     GString *rx;
89     QTestTransportOps ops;
90     GList *pending_events;
91     QTestQMPEventCallback eventCB;
92     void *eventData;
93 };
94 
95 static GHookList abrt_hooks;
96 static void (*sighandler_old)(int);
97 static bool silence_spawn_log;
98 
99 static int qtest_query_target_endianness(QTestState *s);
100 
101 static void qtest_client_socket_send(QTestState*, const char *buf);
102 static void socket_send(int fd, const char *buf, size_t size);
103 
104 static GString *qtest_client_socket_recv_line(QTestState *);
105 
106 static void qtest_client_set_tx_handler(QTestState *s, QTestSendFn send);
107 static void qtest_client_set_rx_handler(QTestState *s, QTestRecvFn recv);
108 
109 static int init_socket(const char *socket_path)
110 {
111     int sock = qtest_socket_server(socket_path);
112     qemu_set_cloexec(sock);
113     return sock;
114 }
115 
116 static int socket_accept(int sock)
117 {
118     struct sockaddr_un addr;
119     socklen_t addrlen;
120     int ret;
121     /*
122      * timeout unit of blocking receive calls is different among platforms.
123      * It's in seconds on non-Windows platforms but milliseconds on Windows.
124      */
125 #ifndef _WIN32
126     struct timeval timeout = { .tv_sec = SOCKET_TIMEOUT,
127                                .tv_usec = 0 };
128 #else
129     DWORD timeout = SOCKET_TIMEOUT;
130 #endif
131 
132     if (setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO,
133                    (void *)&timeout, sizeof(timeout))) {
134         fprintf(stderr, "%s failed to set SO_RCVTIMEO: %s\n",
135                 __func__, strerror(errno));
136         close(sock);
137         return -1;
138     }
139 
140     do {
141         addrlen = sizeof(addr);
142         ret = accept(sock, (struct sockaddr *)&addr, &addrlen);
143     } while (ret == -1 && errno == EINTR);
144     if (ret == -1) {
145         fprintf(stderr, "%s failed: %s\n", __func__, strerror(errno));
146     }
147     close(sock);
148 
149     return ret;
150 }
151 
152 pid_t qtest_pid(QTestState *s)
153 {
154     return s->qemu_pid;
155 }
156 
157 bool qtest_probe_child(QTestState *s)
158 {
159     pid_t pid = s->qemu_pid;
160 
161     if (pid != -1) {
162 #ifndef _WIN32
163         pid = waitpid(pid, &s->wstatus, WNOHANG);
164         if (pid == 0) {
165             return true;
166         }
167 #else
168         GetExitCodeProcess((HANDLE)pid, &s->exit_code);
169         if (s->exit_code == STILL_ACTIVE) {
170             return true;
171         }
172         CloseHandle((HANDLE)pid);
173 #endif
174         s->qemu_pid = -1;
175         qtest_remove_abrt_handler(s);
176     }
177     return false;
178 }
179 
180 void qtest_set_expected_status(QTestState *s, int status)
181 {
182     s->expected_status = status;
183 }
184 
185 static void qtest_check_status(QTestState *s)
186 {
187     assert(s->qemu_pid == -1);
188 
189     /*
190      * Check whether qemu exited with expected exit status; anything else is
191      * fishy and should be logged with as much detail as possible.
192      */
193 #ifndef _WIN32
194     int wstatus = s->wstatus;
195     if (WIFEXITED(wstatus) && WEXITSTATUS(wstatus) != s->expected_status) {
196         fprintf(stderr, "%s:%d: kill_qemu() tried to terminate QEMU "
197                 "process but encountered exit status %d (expected %d)\n",
198                 __FILE__, __LINE__, WEXITSTATUS(wstatus), s->expected_status);
199         abort();
200     } else if (WIFSIGNALED(wstatus)) {
201         int sig = WTERMSIG(wstatus);
202         const char *signame = strsignal(sig) ?: "unknown ???";
203         const char *dump = WCOREDUMP(wstatus) ? " (core dumped)" : "";
204 
205         fprintf(stderr, "%s:%d: kill_qemu() detected QEMU death "
206                 "from signal %d (%s)%s\n",
207                 __FILE__, __LINE__, sig, signame, dump);
208         abort();
209     }
210 #else
211     if (s->exit_code != s->expected_status) {
212         fprintf(stderr, "%s:%d: kill_qemu() tried to terminate QEMU "
213                 "process but encountered exit status %ld (expected %d)\n",
214                 __FILE__, __LINE__, s->exit_code, s->expected_status);
215         abort();
216     }
217 #endif
218 }
219 
220 void qtest_system_reset_nowait(QTestState *s)
221 {
222     /* Request the system reset, but do not wait for it to complete */
223     qtest_qmp_assert_success(s, "{'execute': 'system_reset' }");
224 }
225 
226 void qtest_system_reset(QTestState *s)
227 {
228     qtest_system_reset_nowait(s);
229     /*
230      * Wait for the RESET event, which is sent once the system reset
231      * has actually completed.
232      */
233     qtest_qmp_eventwait(s, "RESET");
234 }
235 
236 void qtest_wait_qemu(QTestState *s)
237 {
238     if (s->qemu_pid != -1) {
239 #ifndef _WIN32
240         pid_t pid;
241         uint64_t end;
242 
243         /* poll for a while until sending SIGKILL */
244         end = g_get_monotonic_time() + WAITPID_TIMEOUT * G_TIME_SPAN_SECOND;
245 
246         do {
247             pid = waitpid(s->qemu_pid, &s->wstatus, WNOHANG);
248             if (pid != 0) {
249                 break;
250             }
251             g_usleep(100 * 1000);
252         } while (g_get_monotonic_time() < end);
253 
254         if (pid == 0) {
255             kill(s->qemu_pid, SIGKILL);
256             pid = RETRY_ON_EINTR(waitpid(s->qemu_pid, &s->wstatus, 0));
257         }
258 
259         assert(pid == s->qemu_pid);
260 #else
261         DWORD ret;
262 
263         ret = WaitForSingleObject((HANDLE)s->qemu_pid, INFINITE);
264         assert(ret == WAIT_OBJECT_0);
265         GetExitCodeProcess((HANDLE)s->qemu_pid, &s->exit_code);
266         CloseHandle((HANDLE)s->qemu_pid);
267 #endif
268 
269         s->qemu_pid = -1;
270         qtest_remove_abrt_handler(s);
271     }
272     qtest_check_status(s);
273 }
274 
275 void qtest_kill_qemu(QTestState *s)
276 {
277     /* Skip wait if qtest_probe_child() already reaped */
278     if (s->qemu_pid != -1) {
279 #ifndef _WIN32
280         kill(s->qemu_pid, SIGTERM);
281 #else
282         TerminateProcess((HANDLE)s->qemu_pid, s->expected_status);
283 #endif
284         qtest_wait_qemu(s);
285         return;
286     }
287 
288     qtest_check_status(s);
289 }
290 
291 static void kill_qemu_hook_func(void *s)
292 {
293     qtest_kill_qemu(s);
294 }
295 
296 static void sigabrt_handler(int signo)
297 {
298     g_hook_list_invoke(&abrt_hooks, FALSE);
299 }
300 
301 static void setup_sigabrt_handler(void)
302 {
303     sighandler_old = signal(SIGABRT, sigabrt_handler);
304 }
305 
306 static void cleanup_sigabrt_handler(void)
307 {
308     signal(SIGABRT, sighandler_old);
309 }
310 
311 static bool hook_list_is_empty(GHookList *hook_list)
312 {
313     GHook *hook = g_hook_first_valid(hook_list, TRUE);
314 
315     if (!hook) {
316         return true;
317     }
318 
319     g_hook_unref(hook_list, hook);
320     return false;
321 }
322 
323 void qtest_add_abrt_handler(GHookFunc fn, const void *data)
324 {
325     GHook *hook;
326 
327     if (!abrt_hooks.is_setup) {
328         g_hook_list_init(&abrt_hooks, sizeof(GHook));
329     }
330 
331     /* Only install SIGABRT handler once */
332     if (hook_list_is_empty(&abrt_hooks)) {
333         setup_sigabrt_handler();
334     }
335 
336     hook = g_hook_alloc(&abrt_hooks);
337     hook->func = fn;
338     hook->data = (void *)data;
339 
340     g_hook_prepend(&abrt_hooks, hook);
341 }
342 
343 void qtest_remove_abrt_handler(void *data)
344 {
345     GHook *hook = g_hook_find_data(&abrt_hooks, TRUE, data);
346 
347     if (!hook) {
348         return;
349     }
350 
351     g_hook_destroy_link(&abrt_hooks, hook);
352 
353     /* Uninstall SIGABRT handler on last instance */
354     if (hook_list_is_empty(&abrt_hooks)) {
355         cleanup_sigabrt_handler();
356     }
357 }
358 
359 static const char *qtest_qemu_binary(const char *var)
360 {
361     const char *qemu_bin;
362 
363     if (var) {
364         qemu_bin = getenv(var);
365         if (qemu_bin) {
366             return qemu_bin;
367         }
368     }
369 
370     qemu_bin = getenv("QTEST_QEMU_BINARY");
371     if (!qemu_bin) {
372         fprintf(stderr, "Environment variable QTEST_QEMU_BINARY required\n");
373         exit(1);
374     }
375 
376     return qemu_bin;
377 }
378 
379 #ifdef _WIN32
380 static pid_t qtest_create_process(char *cmd)
381 {
382     STARTUPINFO si;
383     PROCESS_INFORMATION pi;
384     BOOL ret;
385 
386     ZeroMemory(&si, sizeof(si));
387     si.cb = sizeof(si);
388     ZeroMemory(&pi, sizeof(pi));
389 
390     ret = CreateProcess(NULL,   /* module name */
391                         cmd,    /* command line */
392                         NULL,   /* process handle not inheritable */
393                         NULL,   /* thread handle not inheritable */
394                         FALSE,  /* set handle inheritance to FALSE */
395                         0,      /* No creation flags */
396                         NULL,   /* use parent's environment block */
397                         NULL,   /* use parent's starting directory */
398                         &si,    /* pointer to STARTUPINFO structure */
399                         &pi     /* pointer to PROCESS_INFORMATION structure */
400                         );
401     if (ret == 0) {
402         fprintf(stderr, "%s:%d: unable to create a new process (%s)\n",
403                 __FILE__, __LINE__, strerror(GetLastError()));
404         abort();
405     }
406 
407     return (pid_t)pi.hProcess;
408 }
409 #endif /* _WIN32 */
410 
411 static QTestState *G_GNUC_PRINTF(2, 3) qtest_spawn_qemu(const char *qemu_bin,
412                                                         const char *fmt, ...)
413 {
414     va_list ap;
415     QTestState *s = g_new0(QTestState, 1);
416     const char *trace = g_getenv("QTEST_TRACE");
417     g_autofree char *tracearg = trace ?
418         g_strdup_printf("-trace %s ", trace) : g_strdup("");
419     g_autoptr(GString) command = g_string_new("");
420 
421     va_start(ap, fmt);
422     g_string_append_printf(command, CMD_EXEC "%s %s", qemu_bin, tracearg);
423     g_string_append_vprintf(command, fmt, ap);
424     va_end(ap);
425 
426     qtest_add_abrt_handler(kill_qemu_hook_func, s);
427 
428     if (!silence_spawn_log) {
429         g_test_message("starting QEMU: %s", command->str);
430     }
431 
432 #ifndef _WIN32
433     s->qemu_pid = fork();
434     if (s->qemu_pid == 0) {
435 #ifdef __linux__
436         /*
437          * Although we register a ABRT handler to kill off QEMU
438          * when g_assert() triggers, we want an extra safety
439          * net. The QEMU process might be non-functional and
440          * thus not have responded to SIGTERM. The test script
441          * might also have crashed with SEGV, in which case the
442          * cleanup handlers won't ever run.
443          *
444          * This PR_SET_PDEATHSIG setup will ensure any remaining
445          * QEMU will get terminated with SIGKILL in these cases.
446          */
447         prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
448 #endif /* __linux__ */
449 #ifdef __FreeBSD__
450         int sig = SIGKILL;
451         procctl(P_PID, getpid(), PROC_PDEATHSIG_CTL, &sig);
452 #endif /* __FreeBSD__ */
453         execlp("/bin/sh", "sh", "-c", command->str, NULL);
454         exit(1);
455     }
456 #else
457     s->qemu_pid = qtest_create_process(command->str);
458 #endif /* _WIN32 */
459 
460     return s;
461 }
462 
463 static char *qtest_socket_path(const char *suffix)
464 {
465     return g_strdup_printf("%s/qtest-%d.%s", g_get_tmp_dir(), getpid(), suffix);
466 }
467 
468 static QTestState *qtest_init_internal(const char *qemu_bin,
469                                        const char *extra_args,
470                                        bool do_connect)
471 {
472     QTestState *s;
473     int sock, qmpsock, i;
474     g_autofree gchar *socket_path = qtest_socket_path("sock");
475     g_autofree gchar *qmp_socket_path = qtest_socket_path("qmp");
476 
477     /*
478      * It's possible that if an earlier test run crashed it might
479      * have left a stale unix socket lying around. Delete any
480      * stale old socket to avoid spurious test failures with
481      * tests/libqtest.c:70:init_socket: assertion failed (ret != -1): (-1 != -1)
482      */
483     unlink(socket_path);
484     unlink(qmp_socket_path);
485 
486     socket_init();
487     sock = init_socket(socket_path);
488     qmpsock = init_socket(qmp_socket_path);
489 
490     s = qtest_spawn_qemu(qemu_bin,
491                          "-qtest unix:%s "
492                          "-qtest-log %s "
493                          "-chardev socket,path=%s,id=char0 "
494                          "-mon chardev=char0,mode=control "
495                          "-display none "
496                          "-audio none "
497                          "%s"
498                          " -accel qtest",
499                          socket_path,
500                          getenv("QTEST_LOG") ? DEV_STDERR : DEV_NULL,
501                          qmp_socket_path,
502                          extra_args ?: "");
503 
504     qtest_client_set_rx_handler(s, qtest_client_socket_recv_line);
505     qtest_client_set_tx_handler(s, qtest_client_socket_send);
506 
507     s->rx = g_string_new("");
508     for (i = 0; i < MAX_IRQ; i++) {
509         s->irq_level[i] = false;
510     }
511 
512     s->fd = -1;
513     s->qmp_fd = -1;
514     s->sock = sock;
515     s->qmpsock = qmpsock;
516     if (do_connect) {
517         qtest_connect(s);
518     }
519 
520     /*
521      * Stopping QEMU for debugging is not supported on Windows.
522      *
523      * Using DebugActiveProcess() API can suspend the QEMU process,
524      * but gdb cannot attach to the process. Using the undocumented
525      * NtSuspendProcess() can suspend the QEMU process and gdb can
526      * attach to the process, but gdb cannot resume it.
527      */
528 #ifndef _WIN32
529     if (getenv("QTEST_STOP")) {
530         kill(s->qemu_pid, SIGSTOP);
531     }
532 #endif
533 
534    return s;
535 }
536 
537 void qtest_connect(QTestState *s)
538 {
539     g_autofree gchar *socket_path = qtest_socket_path("sock");
540     g_autofree gchar *qmp_socket_path = qtest_socket_path("qmp");
541 
542     g_assert(s->sock >= 0 && s->qmpsock >= 0);
543     s->fd = socket_accept(s->sock);
544     if (s->fd >= 0) {
545         s->qmp_fd = socket_accept(s->qmpsock);
546     }
547     unlink(socket_path);
548     unlink(qmp_socket_path);
549     g_assert(s->fd >= 0 && s->qmp_fd >= 0);
550     s->sock = s->qmpsock = -1;
551     /* ask endianness of the target */
552     s->big_endian = qtest_query_target_endianness(s);
553 }
554 
555 QTestState *qtest_init_without_qmp_handshake(const char *extra_args)
556 {
557     return qtest_init_internal(qtest_qemu_binary(NULL), extra_args, true);
558 }
559 
560 void qtest_qmp_handshake(QTestState *s, QList *capabilities)
561 {
562     /* Read the QMP greeting and then do the handshake */
563     QDict *greeting = qtest_qmp_receive(s);
564     qobject_unref(greeting);
565 
566     if (capabilities) {
567         qtest_qmp_assert_success(s,
568                                  "{ 'execute': 'qmp_capabilities', "
569                                  "'arguments': { 'enable': %p } }",
570                                  qobject_ref(capabilities));
571     } else {
572         qtest_qmp_assert_success(s, "{ 'execute': 'qmp_capabilities' }");
573     }
574 }
575 
576 QTestState *qtest_init_with_env_and_capabilities(const char *var,
577                                                  const char *extra_args,
578                                                  QList *capabilities,
579                                                  bool do_connect)
580 {
581     QTestState *s = qtest_init_internal(qtest_qemu_binary(var), extra_args,
582                                         do_connect);
583 
584     if (do_connect) {
585         qtest_qmp_handshake(s, capabilities);
586     } else {
587         /*
588          * If the connection is delayed, the capabilities must be set
589          * at that moment.
590          */
591         assert(!capabilities);
592     }
593     return s;
594 }
595 
596 QTestState *qtest_init_with_env(const char *var, const char *extra_args,
597                                 bool do_connect)
598 {
599     return qtest_init_with_env_and_capabilities(var, extra_args, NULL, true);
600 }
601 
602 QTestState *qtest_init(const char *extra_args)
603 {
604     return qtest_init_with_env(NULL, extra_args, true);
605 }
606 
607 QTestState *qtest_vinitf(const char *fmt, va_list ap)
608 {
609     char *args = g_strdup_vprintf(fmt, ap);
610     QTestState *s;
611 
612     s = qtest_init(args);
613     g_free(args);
614     return s;
615 }
616 
617 QTestState *qtest_initf(const char *fmt, ...)
618 {
619     va_list ap;
620     QTestState *s;
621 
622     va_start(ap, fmt);
623     s = qtest_vinitf(fmt, ap);
624     va_end(ap);
625     return s;
626 }
627 
628 QTestState *qtest_init_with_serial(const char *extra_args, int *sock_fd)
629 {
630     int sock_fd_init;
631     g_autofree char *sock_dir = NULL;
632     char *sock_path;
633     QTestState *qts;
634 
635     sock_dir = g_dir_make_tmp("qtest-serial-XXXXXX", NULL);
636     g_assert_true(sock_dir != NULL);
637     sock_path = g_strdup_printf("%s/sock", sock_dir);
638 
639     socket_init();
640     sock_fd_init = init_socket(sock_path);
641 
642     qts = qtest_initf("-chardev socket,id=s0,path=%s -serial chardev:s0 %s",
643                       sock_path, extra_args);
644 
645     *sock_fd = socket_accept(sock_fd_init);
646 
647     unlink(sock_path);
648     g_free(sock_path);
649     rmdir(sock_dir);
650 
651     g_assert_true(*sock_fd >= 0);
652 
653     return qts;
654 }
655 
656 void qtest_quit(QTestState *s)
657 {
658     qtest_remove_abrt_handler(s);
659 
660     qtest_kill_qemu(s);
661     close(s->fd);
662     close(s->qmp_fd);
663     g_string_free(s->rx, true);
664 
665     for (GList *it = s->pending_events; it != NULL; it = it->next) {
666         qobject_unref((QDict *)it->data);
667     }
668 
669     g_list_free(s->pending_events);
670 
671     g_free(s);
672 }
673 
674 static void socket_send(int fd, const char *buf, size_t size)
675 {
676     ssize_t res = qemu_send_full(fd, buf, size);
677 
678     assert(res == size);
679 }
680 
681 static void qtest_client_socket_send(QTestState *s, const char *buf)
682 {
683     socket_send(s->fd, buf, strlen(buf));
684 }
685 
686 static void G_GNUC_PRINTF(2, 3) qtest_sendf(QTestState *s, const char *fmt, ...)
687 {
688     va_list ap;
689 
690     va_start(ap, fmt);
691     gchar *str = g_strdup_vprintf(fmt, ap);
692     va_end(ap);
693 
694     s->ops.send(s, str);
695     g_free(str);
696 }
697 
698 static GString *qtest_client_socket_recv_line(QTestState *s)
699 {
700     GString *line;
701     size_t offset;
702     char *eol;
703 
704     while ((eol = strchr(s->rx->str, '\n')) == NULL) {
705         ssize_t len;
706         char buffer[1024];
707 
708         len = recv(s->fd, buffer, sizeof(buffer), 0);
709         if (len == -1 && errno == EINTR) {
710             continue;
711         }
712 
713         if (len == -1 || len == 0) {
714             fprintf(stderr, "Broken pipe\n");
715             abort();
716         }
717 
718         g_string_append_len(s->rx, buffer, len);
719     }
720 
721     offset = eol - s->rx->str;
722     line = g_string_new_len(s->rx->str, offset);
723     g_string_erase(s->rx, 0, offset + 1);
724 
725     return line;
726 }
727 
728 static gchar **qtest_rsp_args(QTestState *s, int expected_args)
729 {
730     GString *line;
731     gchar **words;
732     int i;
733 
734 redo:
735     line = s->ops.recv_line(s);
736     words = g_strsplit(line->str, " ", 0);
737     g_string_free(line, TRUE);
738 
739     if (strcmp(words[0], "IRQ") == 0) {
740         long irq;
741         int ret;
742 
743         g_assert(words[1] != NULL);
744         g_assert(words[2] != NULL);
745 
746         ret = qemu_strtol(words[2], NULL, 0, &irq);
747         g_assert(!ret);
748         g_assert_cmpint(irq, >=, 0);
749         g_assert_cmpint(irq, <, MAX_IRQ);
750 
751         if (strcmp(words[1], "raise") == 0) {
752             s->irq_level[irq] = true;
753         } else {
754             s->irq_level[irq] = false;
755         }
756 
757         g_strfreev(words);
758         goto redo;
759     }
760 
761     g_assert(words[0] != NULL);
762     g_assert_cmpstr(words[0], ==, "OK");
763 
764     for (i = 0; i < expected_args; i++) {
765         g_assert(words[i] != NULL);
766     }
767 
768     return words;
769 }
770 
771 static void qtest_rsp(QTestState *s)
772 {
773     gchar **words = qtest_rsp_args(s, 0);
774 
775     g_strfreev(words);
776 }
777 
778 static int qtest_query_target_endianness(QTestState *s)
779 {
780     gchar **args;
781     int big_endian;
782 
783     qtest_sendf(s, "endianness\n");
784     args = qtest_rsp_args(s, 1);
785     g_assert(strcmp(args[1], "big") == 0 || strcmp(args[1], "little") == 0);
786     big_endian = strcmp(args[1], "big") == 0;
787     g_strfreev(args);
788 
789     return big_endian;
790 }
791 
792 QDict *qtest_qmp_receive(QTestState *s)
793 {
794     while (true) {
795         QDict *response = qtest_qmp_receive_dict(s);
796 
797         if (!qdict_get_try_str(response, "event")) {
798             return response;
799         }
800 
801         if (!s->eventCB ||
802             !s->eventCB(s, qdict_get_str(response, "event"),
803                         response, s->eventData)) {
804             /* Stash the event for a later consumption */
805             s->pending_events = g_list_append(s->pending_events, response);
806         } else {
807             qobject_unref(response);
808         }
809     }
810 }
811 
812 QDict *qtest_qmp_receive_dict(QTestState *s)
813 {
814     g_assert(s->qmp_fd >= 0);
815     return qmp_fd_receive(s->qmp_fd);
816 }
817 
818 int qtest_socket_server(const char *socket_path)
819 {
820     struct sockaddr_un addr;
821     int sock;
822     int ret;
823 
824     sock = socket(PF_UNIX, SOCK_STREAM, 0);
825     g_assert_cmpint(sock, !=, -1);
826 
827     addr.sun_family = AF_UNIX;
828     snprintf(addr.sun_path, sizeof(addr.sun_path), "%s", socket_path);
829 
830     ret = RETRY_ON_EINTR(bind(sock, (struct sockaddr *)&addr, sizeof(addr)));
831     g_assert_cmpint(ret, !=, -1);
832     ret = listen(sock, 1);
833     g_assert_cmpint(ret, !=, -1);
834 
835     return sock;
836 }
837 
838 #ifndef _WIN32
839 void qtest_qmp_vsend_fds(QTestState *s, int *fds, size_t fds_num,
840                          const char *fmt, va_list ap)
841 {
842     g_assert(s->qmp_fd >= 0);
843     qmp_fd_vsend_fds(s->qmp_fd, fds, fds_num, fmt, ap);
844 }
845 #endif
846 
847 void qtest_qmp_vsend(QTestState *s, const char *fmt, va_list ap)
848 {
849     g_assert(s->qmp_fd >= 0);
850     qmp_fd_vsend(s->qmp_fd, fmt, ap);
851 }
852 
853 #ifndef _WIN32
854 QDict *qtest_vqmp_fds(QTestState *s, int *fds, size_t fds_num,
855                       const char *fmt, va_list ap)
856 {
857     qtest_qmp_vsend_fds(s, fds, fds_num, fmt, ap);
858 
859     /* Receive reply */
860     return qtest_qmp_receive(s);
861 }
862 #endif
863 
864 QDict *qtest_vqmp(QTestState *s, const char *fmt, va_list ap)
865 {
866     qtest_qmp_vsend(s, fmt, ap);
867 
868     /* Receive reply */
869     return qtest_qmp_receive(s);
870 }
871 
872 #ifndef _WIN32
873 QDict *qtest_qmp_fds(QTestState *s, int *fds, size_t fds_num,
874                      const char *fmt, ...)
875 {
876     va_list ap;
877     QDict *response;
878 
879     va_start(ap, fmt);
880     response = qtest_vqmp_fds(s, fds, fds_num, fmt, ap);
881     va_end(ap);
882     return response;
883 }
884 #endif
885 
886 QDict *qtest_qmp(QTestState *s, const char *fmt, ...)
887 {
888     va_list ap;
889     QDict *response;
890 
891     va_start(ap, fmt);
892     response = qtest_vqmp(s, fmt, ap);
893     va_end(ap);
894     return response;
895 }
896 
897 void qtest_qmp_send(QTestState *s, const char *fmt, ...)
898 {
899     va_list ap;
900 
901     va_start(ap, fmt);
902     qtest_qmp_vsend(s, fmt, ap);
903     va_end(ap);
904 }
905 
906 void qtest_qmp_send_raw(QTestState *s, const char *fmt, ...)
907 {
908     va_list ap;
909 
910     g_assert(s->qmp_fd >= 0);
911     va_start(ap, fmt);
912     qmp_fd_vsend_raw(s->qmp_fd, fmt, ap);
913     va_end(ap);
914 }
915 
916 void qtest_qmp_set_event_callback(QTestState *s,
917                                   QTestQMPEventCallback cb, void *opaque)
918 {
919     s->eventCB = cb;
920     s->eventData = opaque;
921 }
922 
923 QDict *qtest_qmp_event_ref(QTestState *s, const char *event)
924 {
925     while (s->pending_events) {
926 
927         GList *first = s->pending_events;
928         QDict *response = (QDict *)first->data;
929 
930         s->pending_events = g_list_delete_link(s->pending_events, first);
931 
932         if (!strcmp(qdict_get_str(response, "event"), event)) {
933             return response;
934         }
935         qobject_unref(response);
936     }
937     return NULL;
938 }
939 
940 QDict *qtest_qmp_eventwait_ref(QTestState *s, const char *event)
941 {
942     QDict *response = qtest_qmp_event_ref(s, event);
943 
944     if (response) {
945         return response;
946     }
947 
948     for (;;) {
949         response = qtest_qmp_receive_dict(s);
950         if ((qdict_haskey(response, "event")) &&
951             (strcmp(qdict_get_str(response, "event"), event) == 0)) {
952             return response;
953         }
954         qobject_unref(response);
955     }
956 }
957 
958 void qtest_qmp_eventwait(QTestState *s, const char *event)
959 {
960     QDict *response;
961 
962     response = qtest_qmp_eventwait_ref(s, event);
963     qobject_unref(response);
964 }
965 
966 char *qtest_vhmp(QTestState *s, const char *fmt, va_list ap)
967 {
968     char *cmd;
969     QDict *resp;
970     char *ret;
971 
972     cmd = g_strdup_vprintf(fmt, ap);
973     resp = qtest_qmp(s, "{'execute': 'human-monitor-command',"
974                      " 'arguments': {'command-line': %s}}",
975                      cmd);
976     ret = g_strdup(qdict_get_try_str(resp, "return"));
977     g_assert(ret);
978     qobject_unref(resp);
979     g_free(cmd);
980     return ret;
981 }
982 
983 char *qtest_hmp(QTestState *s, const char *fmt, ...)
984 {
985     va_list ap;
986     char *ret;
987 
988     va_start(ap, fmt);
989     ret = qtest_vhmp(s, fmt, ap);
990     va_end(ap);
991     return ret;
992 }
993 
994 const char *qtest_get_arch(void)
995 {
996     const char *qemu = qtest_qemu_binary(NULL);
997     const char *end = strrchr(qemu, '-');
998 
999     if (!end) {
1000         fprintf(stderr, "Can't determine architecture from binary name.\n");
1001         exit(1);
1002     }
1003 
1004     if (!strstr(qemu, "-system-")) {
1005         fprintf(stderr, "QTEST_QEMU_BINARY must end with *-system-<arch> "
1006                 "where 'arch' is the target\narchitecture (x86_64, aarch64, "
1007                 "etc).\n");
1008         exit(1);
1009     }
1010 
1011     return end + 1;
1012 }
1013 
1014 bool qtest_has_accel(const char *accel_name)
1015 {
1016     if (g_str_equal(accel_name, "tcg")) {
1017 #if defined(CONFIG_TCG)
1018         return true;
1019 #else
1020         return false;
1021 #endif
1022     } else if (g_str_equal(accel_name, "kvm")) {
1023         int i;
1024         const char *arch = qtest_get_arch();
1025         const char *targets[] = { CONFIG_KVM_TARGETS };
1026 
1027         for (i = 0; i < ARRAY_SIZE(targets); i++) {
1028             if (!strncmp(targets[i], arch, strlen(arch))) {
1029                 if (!access("/dev/kvm", R_OK | W_OK)) {
1030                     return true;
1031                 }
1032             }
1033         }
1034     } else {
1035         /* not implemented */
1036         g_assert_not_reached();
1037     }
1038     return false;
1039 }
1040 
1041 bool qtest_get_irq(QTestState *s, int num)
1042 {
1043     /* dummy operation in order to make sure irq is up to date */
1044     qtest_inb(s, 0);
1045 
1046     return s->irq_level[num];
1047 }
1048 
1049 void qtest_module_load(QTestState *s, const char *prefix, const char *libname)
1050 {
1051     qtest_sendf(s, "module_load %s %s\n", prefix, libname);
1052     qtest_rsp(s);
1053 }
1054 
1055 static int64_t qtest_clock_rsp(QTestState *s)
1056 {
1057     gchar **words;
1058     int64_t clock;
1059     words = qtest_rsp_args(s, 2);
1060     clock = g_ascii_strtoll(words[1], NULL, 0);
1061     g_strfreev(words);
1062     return clock;
1063 }
1064 
1065 int64_t qtest_clock_step_next(QTestState *s)
1066 {
1067     qtest_sendf(s, "clock_step\n");
1068     return qtest_clock_rsp(s);
1069 }
1070 
1071 int64_t qtest_clock_step(QTestState *s, int64_t step)
1072 {
1073     qtest_sendf(s, "clock_step %"PRIi64"\n", step);
1074     return qtest_clock_rsp(s);
1075 }
1076 
1077 int64_t qtest_clock_set(QTestState *s, int64_t val)
1078 {
1079     qtest_sendf(s, "clock_set %"PRIi64"\n", val);
1080     return qtest_clock_rsp(s);
1081 }
1082 
1083 void qtest_irq_intercept_out(QTestState *s, const char *qom_path)
1084 {
1085     qtest_sendf(s, "irq_intercept_out %s\n", qom_path);
1086     qtest_rsp(s);
1087 }
1088 
1089 void qtest_irq_intercept_out_named(QTestState *s, const char *qom_path, const char *name)
1090 {
1091     qtest_sendf(s, "irq_intercept_out %s %s\n", qom_path, name);
1092     qtest_rsp(s);
1093 }
1094 
1095 void qtest_irq_intercept_in(QTestState *s, const char *qom_path)
1096 {
1097     qtest_sendf(s, "irq_intercept_in %s\n", qom_path);
1098     qtest_rsp(s);
1099 }
1100 
1101 void qtest_set_irq_in(QTestState *s, const char *qom_path, const char *name,
1102                       int num, int level)
1103 {
1104     if (!name) {
1105         name = "unnamed-gpio-in";
1106     }
1107     qtest_sendf(s, "set_irq_in %s %s %d %d\n", qom_path, name, num, level);
1108     qtest_rsp(s);
1109 }
1110 
1111 static void qtest_out(QTestState *s, const char *cmd, uint16_t addr, uint32_t value)
1112 {
1113     qtest_sendf(s, "%s 0x%x 0x%x\n", cmd, addr, value);
1114     qtest_rsp(s);
1115 }
1116 
1117 void qtest_outb(QTestState *s, uint16_t addr, uint8_t value)
1118 {
1119     qtest_out(s, "outb", addr, value);
1120 }
1121 
1122 void qtest_outw(QTestState *s, uint16_t addr, uint16_t value)
1123 {
1124     qtest_out(s, "outw", addr, value);
1125 }
1126 
1127 void qtest_outl(QTestState *s, uint16_t addr, uint32_t value)
1128 {
1129     qtest_out(s, "outl", addr, value);
1130 }
1131 
1132 static uint32_t qtest_in(QTestState *s, const char *cmd, uint16_t addr)
1133 {
1134     gchar **args;
1135     int ret;
1136     unsigned long value;
1137 
1138     qtest_sendf(s, "%s 0x%x\n", cmd, addr);
1139     args = qtest_rsp_args(s, 2);
1140     ret = qemu_strtoul(args[1], NULL, 0, &value);
1141     g_assert(!ret && value <= UINT32_MAX);
1142     g_strfreev(args);
1143 
1144     return value;
1145 }
1146 
1147 uint8_t qtest_inb(QTestState *s, uint16_t addr)
1148 {
1149     return qtest_in(s, "inb", addr);
1150 }
1151 
1152 uint16_t qtest_inw(QTestState *s, uint16_t addr)
1153 {
1154     return qtest_in(s, "inw", addr);
1155 }
1156 
1157 uint32_t qtest_inl(QTestState *s, uint16_t addr)
1158 {
1159     return qtest_in(s, "inl", addr);
1160 }
1161 
1162 static void qtest_write(QTestState *s, const char *cmd, uint64_t addr,
1163                         uint64_t value)
1164 {
1165     qtest_sendf(s, "%s 0x%" PRIx64 " 0x%" PRIx64 "\n", cmd, addr, value);
1166     qtest_rsp(s);
1167 }
1168 
1169 void qtest_writeb(QTestState *s, uint64_t addr, uint8_t value)
1170 {
1171     qtest_write(s, "writeb", addr, value);
1172 }
1173 
1174 void qtest_writew(QTestState *s, uint64_t addr, uint16_t value)
1175 {
1176     qtest_write(s, "writew", addr, value);
1177 }
1178 
1179 void qtest_writel(QTestState *s, uint64_t addr, uint32_t value)
1180 {
1181     qtest_write(s, "writel", addr, value);
1182 }
1183 
1184 void qtest_writeq(QTestState *s, uint64_t addr, uint64_t value)
1185 {
1186     qtest_write(s, "writeq", addr, value);
1187 }
1188 
1189 static uint64_t qtest_read(QTestState *s, const char *cmd, uint64_t addr)
1190 {
1191     gchar **args;
1192     int ret;
1193     uint64_t value;
1194 
1195     qtest_sendf(s, "%s 0x%" PRIx64 "\n", cmd, addr);
1196     args = qtest_rsp_args(s, 2);
1197     ret = qemu_strtou64(args[1], NULL, 0, &value);
1198     g_assert(!ret);
1199     g_strfreev(args);
1200 
1201     return value;
1202 }
1203 
1204 uint8_t qtest_readb(QTestState *s, uint64_t addr)
1205 {
1206     return qtest_read(s, "readb", addr);
1207 }
1208 
1209 uint16_t qtest_readw(QTestState *s, uint64_t addr)
1210 {
1211     return qtest_read(s, "readw", addr);
1212 }
1213 
1214 uint32_t qtest_readl(QTestState *s, uint64_t addr)
1215 {
1216     return qtest_read(s, "readl", addr);
1217 }
1218 
1219 uint64_t qtest_readq(QTestState *s, uint64_t addr)
1220 {
1221     return qtest_read(s, "readq", addr);
1222 }
1223 
1224 static int hex2nib(char ch)
1225 {
1226     if (ch >= '0' && ch <= '9') {
1227         return ch - '0';
1228     } else if (ch >= 'a' && ch <= 'f') {
1229         return 10 + (ch - 'a');
1230     } else if (ch >= 'A' && ch <= 'F') {
1231         return 10 + (ch - 'a');
1232     } else {
1233         return -1;
1234     }
1235 }
1236 
1237 void qtest_memread(QTestState *s, uint64_t addr, void *data, size_t size)
1238 {
1239     uint8_t *ptr = data;
1240     gchar **args;
1241     size_t i;
1242 
1243     if (!size) {
1244         return;
1245     }
1246 
1247     qtest_sendf(s, "read 0x%" PRIx64 " 0x%zx\n", addr, size);
1248     args = qtest_rsp_args(s, 2);
1249 
1250     for (i = 0; i < size; i++) {
1251         ptr[i] = hex2nib(args[1][2 + (i * 2)]) << 4;
1252         ptr[i] |= hex2nib(args[1][2 + (i * 2) + 1]);
1253     }
1254 
1255     g_strfreev(args);
1256 }
1257 
1258 uint64_t qtest_rtas_call(QTestState *s, const char *name,
1259                          uint32_t nargs, uint64_t args,
1260                          uint32_t nret, uint64_t ret)
1261 {
1262     qtest_sendf(s, "rtas %s %u 0x%"PRIx64" %u 0x%"PRIx64"\n",
1263                 name, nargs, args, nret, ret);
1264     qtest_rsp(s);
1265     return 0;
1266 }
1267 
1268 static void qtest_rsp_csr(QTestState *s, uint64_t *val)
1269 {
1270     gchar **args;
1271     uint64_t ret;
1272     int rc;
1273 
1274     args = qtest_rsp_args(s, 3);
1275 
1276     rc = qemu_strtou64(args[1], NULL, 16, &ret);
1277     g_assert(rc == 0);
1278     rc = qemu_strtou64(args[2], NULL, 16, val);
1279     g_assert(rc == 0);
1280 
1281     g_strfreev(args);
1282 }
1283 
1284 uint64_t qtest_csr_call(QTestState *s, const char *name,
1285                          uint64_t cpu, int csr,
1286                          uint64_t *val)
1287 {
1288     qtest_sendf(s, "csr %s 0x%"PRIx64" %d 0x%"PRIx64"\n",
1289                     name, cpu, csr, *val);
1290 
1291     qtest_rsp_csr(s, val);
1292     return 0;
1293 }
1294 
1295 void qtest_add_func(const char *str, void (*fn)(void))
1296 {
1297     gchar *path = g_strdup_printf("/%s/%s", qtest_get_arch(), str);
1298     g_test_add_func(path, fn);
1299     g_free(path);
1300 }
1301 
1302 void qtest_add_data_func_full(const char *str, void *data,
1303                               void (*fn)(const void *),
1304                               GDestroyNotify data_free_func)
1305 {
1306     gchar *path = g_strdup_printf("/%s/%s", qtest_get_arch(), str);
1307     g_test_add_data_func_full(path, data, fn, data_free_func);
1308     g_free(path);
1309 }
1310 
1311 void qtest_add_data_func(const char *str, const void *data,
1312                          void (*fn)(const void *))
1313 {
1314     gchar *path = g_strdup_printf("/%s/%s", qtest_get_arch(), str);
1315     g_test_add_data_func(path, data, fn);
1316     g_free(path);
1317 }
1318 
1319 void qtest_bufwrite(QTestState *s, uint64_t addr, const void *data, size_t size)
1320 {
1321     gchar *bdata;
1322 
1323     bdata = g_base64_encode(data, size);
1324     qtest_sendf(s, "b64write 0x%" PRIx64 " 0x%zx ", addr, size);
1325     s->ops.send(s, bdata);
1326     s->ops.send(s, "\n");
1327     qtest_rsp(s);
1328     g_free(bdata);
1329 }
1330 
1331 void qtest_bufread(QTestState *s, uint64_t addr, void *data, size_t size)
1332 {
1333     gchar **args;
1334     size_t len;
1335 
1336     qtest_sendf(s, "b64read 0x%" PRIx64 " 0x%zx\n", addr, size);
1337     args = qtest_rsp_args(s, 2);
1338 
1339     g_base64_decode_inplace(args[1], &len);
1340     if (size != len) {
1341         fprintf(stderr, "bufread: asked for %zu bytes but decoded %zu\n",
1342                 size, len);
1343         len = MIN(len, size);
1344     }
1345 
1346     memcpy(data, args[1], len);
1347     g_strfreev(args);
1348 }
1349 
1350 void qtest_memwrite(QTestState *s, uint64_t addr, const void *data, size_t size)
1351 {
1352     const uint8_t *ptr = data;
1353     size_t i;
1354     char *enc;
1355 
1356     if (!size) {
1357         return;
1358     }
1359 
1360     enc = g_malloc(2 * size + 1);
1361 
1362     for (i = 0; i < size; i++) {
1363         sprintf(&enc[i * 2], "%02x", ptr[i]);
1364     }
1365 
1366     qtest_sendf(s, "write 0x%" PRIx64 " 0x%zx 0x%s\n", addr, size, enc);
1367     qtest_rsp(s);
1368     g_free(enc);
1369 }
1370 
1371 void qtest_memset(QTestState *s, uint64_t addr, uint8_t pattern, size_t size)
1372 {
1373     qtest_sendf(s, "memset 0x%" PRIx64 " 0x%zx 0x%02x\n", addr, size, pattern);
1374     qtest_rsp(s);
1375 }
1376 
1377 QDict *qtest_vqmp_assert_failure_ref(QTestState *qts,
1378                                      const char *fmt, va_list args)
1379 {
1380     QDict *response;
1381     QDict *ret;
1382 
1383     response = qtest_vqmp(qts, fmt, args);
1384 
1385     g_assert(response);
1386     if (!qdict_haskey(response, "error")) {
1387         g_autoptr(GString) s = qobject_to_json_pretty(QOBJECT(response), true);
1388         g_test_message("%s", s->str);
1389     }
1390     g_assert(qdict_haskey(response, "error"));
1391     g_assert(!qdict_haskey(response, "return"));
1392     ret = qdict_get_qdict(response, "error");
1393     qobject_ref(ret);
1394     qobject_unref(response);
1395 
1396     return ret;
1397 }
1398 
1399 QDict *qtest_vqmp_assert_success_ref(QTestState *qts,
1400                                      const char *fmt, va_list args)
1401 {
1402     QDict *response;
1403     QDict *ret;
1404 
1405     response = qtest_vqmp(qts, fmt, args);
1406 
1407     g_assert(response);
1408     if (!qdict_haskey(response, "return")) {
1409         g_autoptr(GString) s = qobject_to_json_pretty(QOBJECT(response), true);
1410         g_test_message("%s", s->str);
1411     }
1412     g_assert(qdict_haskey(response, "return"));
1413     ret = qdict_get_qdict(response, "return");
1414     qobject_ref(ret);
1415     qobject_unref(response);
1416 
1417     return ret;
1418 }
1419 
1420 void qtest_vqmp_assert_success(QTestState *qts,
1421                                const char *fmt, va_list args)
1422 {
1423     QDict *response;
1424 
1425     response = qtest_vqmp_assert_success_ref(qts, fmt, args);
1426 
1427     qobject_unref(response);
1428 }
1429 
1430 #ifndef _WIN32
1431 QDict *qtest_vqmp_fds_assert_success_ref(QTestState *qts, int *fds, size_t nfds,
1432                                          const char *fmt, va_list args)
1433 {
1434     QDict *response;
1435     QDict *ret;
1436 
1437     response = qtest_vqmp_fds(qts, fds, nfds, fmt, args);
1438 
1439     g_assert(response);
1440     if (!qdict_haskey(response, "return")) {
1441         g_autoptr(GString) s = qobject_to_json_pretty(QOBJECT(response), true);
1442         g_test_message("%s", s->str);
1443     }
1444     g_assert(qdict_haskey(response, "return"));
1445     ret = qdict_get_qdict(response, "return");
1446     qobject_ref(ret);
1447     qobject_unref(response);
1448 
1449     return ret;
1450 }
1451 
1452 void qtest_vqmp_fds_assert_success(QTestState *qts, int *fds, size_t nfds,
1453                                    const char *fmt, va_list args)
1454 {
1455     QDict *response;
1456     response = qtest_vqmp_fds_assert_success_ref(qts, fds, nfds, fmt, args);
1457     qobject_unref(response);
1458 }
1459 #endif /* !_WIN32 */
1460 
1461 QDict *qtest_qmp_assert_failure_ref(QTestState *qts, const char *fmt, ...)
1462 {
1463     QDict *response;
1464     va_list ap;
1465 
1466     va_start(ap, fmt);
1467     response = qtest_vqmp_assert_failure_ref(qts, fmt, ap);
1468     va_end(ap);
1469     return response;
1470 }
1471 
1472 QDict *qtest_qmp_assert_success_ref(QTestState *qts, const char *fmt, ...)
1473 {
1474     QDict *response;
1475     va_list ap;
1476     va_start(ap, fmt);
1477     response = qtest_vqmp_assert_success_ref(qts, fmt, ap);
1478     va_end(ap);
1479     return response;
1480 }
1481 
1482 void qtest_qmp_assert_success(QTestState *qts, const char *fmt, ...)
1483 {
1484     va_list ap;
1485     va_start(ap, fmt);
1486     qtest_vqmp_assert_success(qts, fmt, ap);
1487     va_end(ap);
1488 }
1489 
1490 #ifndef _WIN32
1491 QDict *qtest_qmp_fds_assert_success_ref(QTestState *qts, int *fds, size_t nfds,
1492                                         const char *fmt, ...)
1493 {
1494     QDict *response;
1495     va_list ap;
1496     va_start(ap, fmt);
1497     response = qtest_vqmp_fds_assert_success_ref(qts, fds, nfds, fmt, ap);
1498     va_end(ap);
1499     return response;
1500 }
1501 
1502 void qtest_qmp_fds_assert_success(QTestState *qts, int *fds, size_t nfds,
1503                                   const char *fmt, ...)
1504 {
1505     va_list ap;
1506     va_start(ap, fmt);
1507     qtest_vqmp_fds_assert_success(qts, fds, nfds, fmt, ap);
1508     va_end(ap);
1509 }
1510 #endif /* !_WIN32 */
1511 
1512 bool qtest_big_endian(QTestState *s)
1513 {
1514     return s->big_endian;
1515 }
1516 
1517 static bool qtest_check_machine_version(const char *mname, const char *basename,
1518                                         int major, int minor)
1519 {
1520     char *newname;
1521     bool is_equal;
1522 
1523     newname = g_strdup_printf("%s-%i.%i", basename, major, minor);
1524     is_equal = g_str_equal(mname, newname);
1525     g_free(newname);
1526 
1527     return is_equal;
1528 }
1529 
1530 static bool qtest_is_old_versioned_machine(const char *mname)
1531 {
1532     const char *dash = strrchr(mname, '-');
1533     const char *dot = strrchr(mname, '.');
1534     const char *chr;
1535     char *bname;
1536     const int major = QEMU_VERSION_MAJOR;
1537     const int minor = QEMU_VERSION_MINOR;
1538     bool res = false;
1539 
1540     if (dash && dot && dot > dash) {
1541         for (chr = dash + 1; *chr; chr++) {
1542             if (!qemu_isdigit(*chr) && *chr != '.') {
1543                 return false;
1544             }
1545         }
1546         /*
1547          * Now check if it is one of the latest versions. Check major + 1
1548          * and minor + 1 versions as well, since they might already exist
1549          * in the development branch.
1550          */
1551         bname = g_strdup(mname);
1552         bname[dash - mname] = 0;
1553         res = !qtest_check_machine_version(mname, bname, major + 1, 0) &&
1554               !qtest_check_machine_version(mname, bname, major, minor + 1) &&
1555               !qtest_check_machine_version(mname, bname, major, minor);
1556         g_free(bname);
1557     }
1558 
1559     return res;
1560 }
1561 
1562 struct MachInfo {
1563     char *name;
1564     char *alias;
1565 };
1566 
1567 struct CpuModel {
1568     char *name;
1569     char *alias_of;
1570     bool deprecated;
1571 };
1572 
1573 static void qtest_free_machine_list(struct MachInfo *machines)
1574 {
1575     if (machines) {
1576         for (int i = 0; machines[i].name != NULL; i++) {
1577             g_free(machines[i].name);
1578             g_free(machines[i].alias);
1579         }
1580 
1581         g_free(machines);
1582     }
1583 }
1584 
1585 /*
1586  * Returns an array with pointers to the available machine names.
1587  * The terminating entry has the name set to NULL.
1588  */
1589 static struct MachInfo *qtest_get_machines(const char *var)
1590 {
1591     static struct MachInfo *machines;
1592     static char *qemu_var;
1593     QDict *response, *minfo;
1594     QList *list;
1595     const QListEntry *p;
1596     QObject *qobj;
1597     QString *qstr;
1598     QTestState *qts;
1599     int idx;
1600 
1601     if (g_strcmp0(qemu_var, var)) {
1602         g_free(qemu_var);
1603         qemu_var = g_strdup(var);
1604 
1605         /* new qemu, clear the cache */
1606         qtest_free_machine_list(machines);
1607         machines = NULL;
1608     }
1609 
1610     if (machines) {
1611         return machines;
1612     }
1613 
1614     silence_spawn_log = !g_test_verbose();
1615 
1616     qts = qtest_init_with_env(qemu_var, "-machine none", true);
1617     response = qtest_qmp(qts, "{ 'execute': 'query-machines' }");
1618     g_assert(response);
1619     list = qdict_get_qlist(response, "return");
1620     g_assert(list);
1621 
1622     machines = g_new(struct MachInfo, qlist_size(list) + 1);
1623 
1624     for (p = qlist_first(list), idx = 0; p; p = qlist_next(p), idx++) {
1625         minfo = qobject_to(QDict, qlist_entry_obj(p));
1626         g_assert(minfo);
1627 
1628         qobj = qdict_get(minfo, "name");
1629         g_assert(qobj);
1630         qstr = qobject_to(QString, qobj);
1631         g_assert(qstr);
1632         machines[idx].name = g_strdup(qstring_get_str(qstr));
1633 
1634         qobj = qdict_get(minfo, "alias");
1635         if (qobj) {                               /* The alias is optional */
1636             qstr = qobject_to(QString, qobj);
1637             g_assert(qstr);
1638             machines[idx].alias = g_strdup(qstring_get_str(qstr));
1639         } else {
1640             machines[idx].alias = NULL;
1641         }
1642     }
1643 
1644     qtest_quit(qts);
1645     qobject_unref(response);
1646 
1647     silence_spawn_log = false;
1648 
1649     memset(&machines[idx], 0, sizeof(struct MachInfo)); /* Terminating entry */
1650     return machines;
1651 }
1652 
1653 static struct CpuModel *qtest_get_cpu_models(void)
1654 {
1655     static struct CpuModel *cpus;
1656     QDict *response, *minfo;
1657     QList *list;
1658     const QListEntry *p;
1659     QObject *qobj;
1660     QString *qstr;
1661     QBool *qbool;
1662     QTestState *qts;
1663     int idx;
1664 
1665     if (cpus) {
1666         return cpus;
1667     }
1668 
1669     silence_spawn_log = !g_test_verbose();
1670 
1671     qts = qtest_init_with_env(NULL, "-machine none", true);
1672     response = qtest_qmp(qts, "{ 'execute': 'query-cpu-definitions' }");
1673     g_assert(response);
1674     list = qdict_get_qlist(response, "return");
1675     g_assert(list);
1676 
1677     cpus = g_new0(struct CpuModel, qlist_size(list) + 1);
1678 
1679     for (p = qlist_first(list), idx = 0; p; p = qlist_next(p), idx++) {
1680         minfo = qobject_to(QDict, qlist_entry_obj(p));
1681         g_assert(minfo);
1682 
1683         qobj = qdict_get(minfo, "name");
1684         g_assert(qobj);
1685         qstr = qobject_to(QString, qobj);
1686         g_assert(qstr);
1687         cpus[idx].name = g_strdup(qstring_get_str(qstr));
1688 
1689         qobj = qdict_get(minfo, "alias_of");
1690         if (qobj) { /* old machines do not report aliases */
1691             qstr = qobject_to(QString, qobj);
1692             g_assert(qstr);
1693             cpus[idx].alias_of = g_strdup(qstring_get_str(qstr));
1694         } else {
1695             cpus[idx].alias_of = NULL;
1696         }
1697 
1698         qobj = qdict_get(minfo, "deprecated");
1699         qbool = qobject_to(QBool, qobj);
1700         g_assert(qbool);
1701         cpus[idx].deprecated = qbool_get_bool(qbool);
1702     }
1703 
1704     qtest_quit(qts);
1705     qobject_unref(response);
1706 
1707     silence_spawn_log = false;
1708 
1709     return cpus;
1710 }
1711 
1712 bool qtest_has_cpu_model(const char *cpu)
1713 {
1714     struct CpuModel *cpus;
1715     int i;
1716 
1717     cpus = qtest_get_cpu_models();
1718 
1719     for (i = 0; cpus[i].name != NULL; i++) {
1720         if (g_str_equal(cpu, cpus[i].name) ||
1721             (cpus[i].alias_of && g_str_equal(cpu, cpus[i].alias_of))) {
1722             return true;
1723         }
1724     }
1725 
1726     return false;
1727 }
1728 
1729 void qtest_cb_for_every_machine(void (*cb)(const char *machine),
1730                                 bool skip_old_versioned)
1731 {
1732     struct MachInfo *machines;
1733     int i;
1734 
1735     machines = qtest_get_machines(NULL);
1736 
1737     for (i = 0; machines[i].name != NULL; i++) {
1738         /* Ignore machines that cannot be used for qtests */
1739         if (!strncmp("xenfv", machines[i].name, 5) ||
1740             g_str_equal("xenpv", machines[i].name) ||
1741             g_str_equal("xenpvh", machines[i].name) ||
1742             g_str_equal("nitro-enclave", machines[i].name)) {
1743             continue;
1744         }
1745         if (!skip_old_versioned ||
1746             !qtest_is_old_versioned_machine(machines[i].name)) {
1747             cb(machines[i].name);
1748         }
1749     }
1750 }
1751 
1752 char *qtest_resolve_machine_alias(const char *var, const char *alias)
1753 {
1754     struct MachInfo *machines;
1755     int i;
1756 
1757     machines = qtest_get_machines(var);
1758 
1759     for (i = 0; machines[i].name != NULL; i++) {
1760         if (machines[i].alias && g_str_equal(alias, machines[i].alias)) {
1761             return g_strdup(machines[i].name);
1762         }
1763     }
1764 
1765     return NULL;
1766 }
1767 
1768 bool qtest_has_machine_with_env(const char *var, const char *machine)
1769 {
1770     struct MachInfo *machines;
1771     int i;
1772 
1773     machines = qtest_get_machines(var);
1774 
1775     for (i = 0; machines[i].name != NULL; i++) {
1776         if (g_str_equal(machine, machines[i].name) ||
1777             (machines[i].alias && g_str_equal(machine, machines[i].alias))) {
1778             return true;
1779         }
1780     }
1781 
1782     return false;
1783 }
1784 
1785 bool qtest_has_machine(const char *machine)
1786 {
1787     return qtest_has_machine_with_env(NULL, machine);
1788 }
1789 
1790 bool qtest_has_device(const char *device)
1791 {
1792     static QList *list;
1793     const QListEntry *p;
1794     QObject *qobj;
1795     QString *qstr;
1796     QDict *devinfo;
1797     int idx;
1798 
1799     if (!list) {
1800         QDict *resp;
1801         QDict *args;
1802         QTestState *qts = qtest_init("-machine none");
1803 
1804         args = qdict_new();
1805         qdict_put_bool(args, "abstract", false);
1806         qdict_put_str(args, "implements", "device");
1807 
1808         resp = qtest_qmp(qts, "{'execute': 'qom-list-types', 'arguments': %p }",
1809                          args);
1810         g_assert(qdict_haskey(resp, "return"));
1811         list = qdict_get_qlist(resp, "return");
1812         qobject_ref(list);
1813         qobject_unref(resp);
1814 
1815         qtest_quit(qts);
1816     }
1817 
1818     for (p = qlist_first(list), idx = 0; p; p = qlist_next(p), idx++) {
1819         devinfo = qobject_to(QDict, qlist_entry_obj(p));
1820         g_assert(devinfo);
1821 
1822         qobj = qdict_get(devinfo, "name");
1823         g_assert(qobj);
1824         qstr = qobject_to(QString, qobj);
1825         g_assert(qstr);
1826         if (g_str_equal(qstring_get_str(qstr), device)) {
1827             return true;
1828         }
1829     }
1830 
1831     return false;
1832 }
1833 
1834 /*
1835  * Generic hot-plugging test via the device_add QMP commands.
1836  */
1837 void qtest_qmp_device_add_qdict(QTestState *qts, const char *drv,
1838                                 const QDict *arguments)
1839 {
1840     QDict *resp;
1841     QDict *args = arguments ? qdict_clone_shallow(arguments) : qdict_new();
1842 
1843     g_assert(!qdict_haskey(args, "driver"));
1844     qdict_put_str(args, "driver", drv);
1845     resp = qtest_qmp(qts, "{'execute': 'device_add', 'arguments': %p}", args);
1846     g_assert(resp);
1847     g_assert(!qdict_haskey(resp, "event")); /* We don't expect any events */
1848     if (qdict_haskey(resp, "error")) {
1849         fprintf(stderr, "error: %s\n",
1850             qdict_get_str(qdict_get_qdict(resp, "error"), "desc"));
1851     }
1852     g_assert(!qdict_haskey(resp, "error"));
1853     qobject_unref(resp);
1854 }
1855 
1856 void qtest_qmp_device_add(QTestState *qts, const char *driver, const char *id,
1857                           const char *fmt, ...)
1858 {
1859     QDict *args;
1860     va_list ap;
1861 
1862     va_start(ap, fmt);
1863     args = qdict_from_vjsonf_nofail(fmt, ap);
1864     va_end(ap);
1865 
1866     g_assert(!qdict_haskey(args, "id"));
1867     qdict_put_str(args, "id", id);
1868 
1869     qtest_qmp_device_add_qdict(qts, driver, args);
1870     qobject_unref(args);
1871 }
1872 
1873 void qtest_qmp_add_client(QTestState *qts, const char *protocol, int fd)
1874 {
1875     QDict *resp;
1876 
1877 #ifdef WIN32
1878     WSAPROTOCOL_INFOW info;
1879     g_autofree char *info64  = NULL;
1880     SOCKET s;
1881 
1882     assert(fd_is_socket(fd));
1883     s = _get_osfhandle(fd);
1884     if (WSADuplicateSocketW(s, GetProcessId((HANDLE)qts->qemu_pid), &info) == SOCKET_ERROR) {
1885         g_autofree char *emsg = g_win32_error_message(WSAGetLastError());
1886         g_error("WSADuplicateSocketW failed: %s", emsg);
1887     }
1888     info64 = g_base64_encode((guchar *)&info, sizeof(info));
1889     resp = qtest_qmp(qts, "{'execute': 'get-win32-socket',"
1890                      "'arguments': {'fdname': 'fdname', 'info': %s}}", info64);
1891 #else
1892     resp = qtest_qmp_fds(qts, &fd, 1, "{'execute': 'getfd',"
1893                          "'arguments': {'fdname': 'fdname'}}");
1894 #endif
1895     g_assert(resp);
1896     g_assert(!qdict_haskey(resp, "event")); /* We don't expect any events */
1897     g_assert(!qdict_haskey(resp, "error"));
1898     qobject_unref(resp);
1899 
1900     resp = qtest_qmp(
1901         qts, "{'execute': 'add_client',"
1902         "'arguments': {'protocol': %s, 'fdname': 'fdname'}}", protocol);
1903     g_assert(resp);
1904     g_assert(!qdict_haskey(resp, "event")); /* We don't expect any events */
1905     g_assert(!qdict_haskey(resp, "error"));
1906     qobject_unref(resp);
1907 }
1908 
1909 /*
1910  * Generic hot-unplugging test via the device_del QMP command.
1911  * Device deletion will get one response and one event. For example:
1912  *
1913  * {'execute': 'device_del','arguments': { 'id': 'scsi-hd'}}
1914  *
1915  * will get this one:
1916  *
1917  * {"timestamp": {"seconds": 1505289667, "microseconds": 569862},
1918  *  "event": "DEVICE_DELETED", "data": {"device": "scsi-hd",
1919  *  "path": "/machine/peripheral/scsi-hd"}}
1920  *
1921  * and this one:
1922  *
1923  * {"return": {}}
1924  */
1925 void qtest_qmp_device_del_send(QTestState *qts, const char *id)
1926 {
1927     QDict *rsp = qtest_qmp(qts, "{'execute': 'device_del', "
1928                                 "'arguments': {'id': %s}}", id);
1929     g_assert(rsp);
1930     g_assert(qdict_haskey(rsp, "return"));
1931     g_assert(!qdict_haskey(rsp, "error"));
1932     qobject_unref(rsp);
1933 }
1934 
1935 void qtest_qmp_device_del(QTestState *qts, const char *id)
1936 {
1937     qtest_qmp_device_del_send(qts, id);
1938     qtest_qmp_eventwait(qts, "DEVICE_DELETED");
1939 }
1940 
1941 static void qtest_client_set_tx_handler(QTestState *s,
1942                     QTestSendFn send)
1943 {
1944     s->ops.send = send;
1945 }
1946 static void qtest_client_set_rx_handler(QTestState *s, QTestRecvFn recv)
1947 {
1948     s->ops.recv_line = recv;
1949 }
1950 /* A type-safe wrapper for s->send() */
1951 static void send_wrapper(QTestState *s, const char *buf)
1952 {
1953     s->ops.external_send(s, buf);
1954 }
1955 
1956 static GString *qtest_client_inproc_recv_line(QTestState *s)
1957 {
1958     GString *line;
1959     size_t offset;
1960     char *eol;
1961 
1962     eol = strchr(s->rx->str, '\n');
1963     offset = eol - s->rx->str;
1964     line = g_string_new_len(s->rx->str, offset);
1965     g_string_erase(s->rx, 0, offset + 1);
1966     return line;
1967 }
1968 
1969 QTestState *qtest_inproc_init(QTestState **s, bool log, const char* arch,
1970                     void (*send)(void*, const char*))
1971 {
1972     QTestState *qts;
1973     qts = g_new0(QTestState, 1);
1974     qts->pending_events = NULL;
1975     *s = qts; /* Expose qts early on, since the query endianness relies on it */
1976     qts->wstatus = 0;
1977     for (int i = 0; i < MAX_IRQ; i++) {
1978         qts->irq_level[i] = false;
1979     }
1980 
1981     qtest_client_set_rx_handler(qts, qtest_client_inproc_recv_line);
1982 
1983     /* send() may not have a matching prototype, so use a type-safe wrapper */
1984     qts->ops.external_send = send;
1985     qtest_client_set_tx_handler(qts, send_wrapper);
1986 
1987     qts->big_endian = qtest_query_target_endianness(qts);
1988 
1989     /*
1990      * Set a dummy path for QTEST_QEMU_BINARY. Doesn't need to exist, but this
1991      * way, qtest_get_arch works for inproc qtest.
1992      */
1993     gchar *bin_path = g_strconcat("/qemu-system-", arch, NULL);
1994     if (!g_setenv("QTEST_QEMU_BINARY", bin_path, 0)) {
1995         fprintf(stderr,
1996                 "Could not set environment variable QTEST_QEMU_BINARY\n");
1997         exit(1);
1998     }
1999     g_free(bin_path);
2000 
2001     return qts;
2002 }
2003 
2004 void qtest_client_inproc_recv(void *opaque, const char *str)
2005 {
2006     QTestState *qts = *(QTestState **)opaque;
2007 
2008     if (!qts->rx) {
2009         qts->rx = g_string_new(NULL);
2010     }
2011     g_string_append(qts->rx, str);
2012     return;
2013 }
2014 
2015 void qtest_qom_set_bool(QTestState *s, const char *path, const char *property,
2016                          bool value)
2017 {
2018     QDict *r;
2019 
2020     r = qtest_qmp(s, "{ 'execute': 'qom-set', 'arguments': "
2021                      "{ 'path': %s, 'property': %s, 'value': %i } }",
2022                      path, property, value);
2023     qobject_unref(r);
2024 }
2025 
2026 bool qtest_qom_get_bool(QTestState *s, const char *path, const char *property)
2027 {
2028     QDict *r;
2029     bool b;
2030 
2031     r = qtest_qmp(s, "{ 'execute': 'qom-get', 'arguments': "
2032                      "{ 'path': %s, 'property': %s } }", path, property);
2033     b = qdict_get_bool(r, "return");
2034     qobject_unref(r);
2035 
2036     return b;
2037 }
2038 
2039 bool have_qemu_img(void)
2040 {
2041     char *rpath;
2042     const char *path = getenv("QTEST_QEMU_IMG");
2043     if (!path) {
2044         return false;
2045     }
2046 
2047     rpath = realpath(path, NULL);
2048     if (!rpath) {
2049         return false;
2050     } else {
2051         free(rpath);
2052         return true;
2053     }
2054 }
2055 
2056 bool mkimg(const char *file, const char *fmt, unsigned size_mb)
2057 {
2058     gchar *cli;
2059     bool ret;
2060     int rc;
2061     GError *err = NULL;
2062     char *qemu_img_path;
2063     gchar *out, *out2;
2064     char *qemu_img_abs_path;
2065 
2066     qemu_img_path = getenv("QTEST_QEMU_IMG");
2067     if (!qemu_img_path) {
2068         return false;
2069     }
2070     qemu_img_abs_path = realpath(qemu_img_path, NULL);
2071     if (!qemu_img_abs_path) {
2072         return false;
2073     }
2074 
2075     cli = g_strdup_printf("%s create -f %s %s %uM", qemu_img_abs_path,
2076                           fmt, file, size_mb);
2077     ret = g_spawn_command_line_sync(cli, &out, &out2, &rc, &err);
2078     if (err || !g_spawn_check_exit_status(rc, &err)) {
2079         fprintf(stderr, "%s\n", err->message);
2080         g_error_free(err);
2081     }
2082 
2083     g_free(out);
2084     g_free(out2);
2085     g_free(cli);
2086     free(qemu_img_abs_path);
2087 
2088     return ret && !err;
2089 }
2090