dev-storage.c 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790
  1. /*
  2. * USB Mass Storage Device emulation
  3. *
  4. * Copyright (c) 2006 CodeSourcery.
  5. * Written by Paul Brook
  6. *
  7. * This code is licensed under the LGPL.
  8. */
  9. #include "qemu/osdep.h"
  10. #include "qapi/error.h"
  11. #include "qemu/error-report.h"
  12. #include "qemu/module.h"
  13. #include "qemu/option.h"
  14. #include "qemu/config-file.h"
  15. #include "hw/usb.h"
  16. #include "desc.h"
  17. #include "hw/qdev-properties.h"
  18. #include "hw/scsi/scsi.h"
  19. #include "ui/console.h"
  20. #include "migration/vmstate.h"
  21. #include "monitor/monitor.h"
  22. #include "sysemu/sysemu.h"
  23. #include "sysemu/block-backend.h"
  24. #include "qapi/visitor.h"
  25. #include "qemu/cutils.h"
  26. //#define DEBUG_MSD
  27. #ifdef DEBUG_MSD
  28. #define DPRINTF(fmt, ...) \
  29. do { printf("usb-msd: " fmt , ## __VA_ARGS__); } while (0)
  30. #else
  31. #define DPRINTF(fmt, ...) do {} while(0)
  32. #endif
  33. /* USB requests. */
  34. #define MassStorageReset 0xff
  35. #define GetMaxLun 0xfe
  36. enum USBMSDMode {
  37. USB_MSDM_CBW, /* Command Block. */
  38. USB_MSDM_DATAOUT, /* Transfer data to device. */
  39. USB_MSDM_DATAIN, /* Transfer data from device. */
  40. USB_MSDM_CSW /* Command Status. */
  41. };
  42. struct usb_msd_csw {
  43. uint32_t sig;
  44. uint32_t tag;
  45. uint32_t residue;
  46. uint8_t status;
  47. };
  48. typedef struct {
  49. USBDevice dev;
  50. enum USBMSDMode mode;
  51. uint32_t scsi_off;
  52. uint32_t scsi_len;
  53. uint32_t data_len;
  54. struct usb_msd_csw csw;
  55. SCSIRequest *req;
  56. SCSIBus bus;
  57. /* For async completion. */
  58. USBPacket *packet;
  59. /* usb-storage only */
  60. BlockConf conf;
  61. uint32_t removable;
  62. SCSIDevice *scsi_dev;
  63. } MSDState;
  64. #define TYPE_USB_STORAGE "usb-storage-dev"
  65. #define USB_STORAGE_DEV(obj) OBJECT_CHECK(MSDState, (obj), TYPE_USB_STORAGE)
  66. struct usb_msd_cbw {
  67. uint32_t sig;
  68. uint32_t tag;
  69. uint32_t data_len;
  70. uint8_t flags;
  71. uint8_t lun;
  72. uint8_t cmd_len;
  73. uint8_t cmd[16];
  74. };
  75. enum {
  76. STR_MANUFACTURER = 1,
  77. STR_PRODUCT,
  78. STR_SERIALNUMBER,
  79. STR_CONFIG_FULL,
  80. STR_CONFIG_HIGH,
  81. STR_CONFIG_SUPER,
  82. };
  83. static const USBDescStrings desc_strings = {
  84. [STR_MANUFACTURER] = "QEMU",
  85. [STR_PRODUCT] = "QEMU USB HARDDRIVE",
  86. [STR_SERIALNUMBER] = "1",
  87. [STR_CONFIG_FULL] = "Full speed config (usb 1.1)",
  88. [STR_CONFIG_HIGH] = "High speed config (usb 2.0)",
  89. [STR_CONFIG_SUPER] = "Super speed config (usb 3.0)",
  90. };
  91. static const USBDescIface desc_iface_full = {
  92. .bInterfaceNumber = 0,
  93. .bNumEndpoints = 2,
  94. .bInterfaceClass = USB_CLASS_MASS_STORAGE,
  95. .bInterfaceSubClass = 0x06, /* SCSI */
  96. .bInterfaceProtocol = 0x50, /* Bulk */
  97. .eps = (USBDescEndpoint[]) {
  98. {
  99. .bEndpointAddress = USB_DIR_IN | 0x01,
  100. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  101. .wMaxPacketSize = 64,
  102. },{
  103. .bEndpointAddress = USB_DIR_OUT | 0x02,
  104. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  105. .wMaxPacketSize = 64,
  106. },
  107. }
  108. };
  109. static const USBDescDevice desc_device_full = {
  110. .bcdUSB = 0x0200,
  111. .bMaxPacketSize0 = 8,
  112. .bNumConfigurations = 1,
  113. .confs = (USBDescConfig[]) {
  114. {
  115. .bNumInterfaces = 1,
  116. .bConfigurationValue = 1,
  117. .iConfiguration = STR_CONFIG_FULL,
  118. .bmAttributes = USB_CFG_ATT_ONE | USB_CFG_ATT_SELFPOWER,
  119. .nif = 1,
  120. .ifs = &desc_iface_full,
  121. },
  122. },
  123. };
  124. static const USBDescIface desc_iface_high = {
  125. .bInterfaceNumber = 0,
  126. .bNumEndpoints = 2,
  127. .bInterfaceClass = USB_CLASS_MASS_STORAGE,
  128. .bInterfaceSubClass = 0x06, /* SCSI */
  129. .bInterfaceProtocol = 0x50, /* Bulk */
  130. .eps = (USBDescEndpoint[]) {
  131. {
  132. .bEndpointAddress = USB_DIR_IN | 0x01,
  133. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  134. .wMaxPacketSize = 512,
  135. },{
  136. .bEndpointAddress = USB_DIR_OUT | 0x02,
  137. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  138. .wMaxPacketSize = 512,
  139. },
  140. }
  141. };
  142. static const USBDescDevice desc_device_high = {
  143. .bcdUSB = 0x0200,
  144. .bMaxPacketSize0 = 64,
  145. .bNumConfigurations = 1,
  146. .confs = (USBDescConfig[]) {
  147. {
  148. .bNumInterfaces = 1,
  149. .bConfigurationValue = 1,
  150. .iConfiguration = STR_CONFIG_HIGH,
  151. .bmAttributes = USB_CFG_ATT_ONE | USB_CFG_ATT_SELFPOWER,
  152. .nif = 1,
  153. .ifs = &desc_iface_high,
  154. },
  155. },
  156. };
  157. static const USBDescIface desc_iface_super = {
  158. .bInterfaceNumber = 0,
  159. .bNumEndpoints = 2,
  160. .bInterfaceClass = USB_CLASS_MASS_STORAGE,
  161. .bInterfaceSubClass = 0x06, /* SCSI */
  162. .bInterfaceProtocol = 0x50, /* Bulk */
  163. .eps = (USBDescEndpoint[]) {
  164. {
  165. .bEndpointAddress = USB_DIR_IN | 0x01,
  166. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  167. .wMaxPacketSize = 1024,
  168. .bMaxBurst = 15,
  169. },{
  170. .bEndpointAddress = USB_DIR_OUT | 0x02,
  171. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  172. .wMaxPacketSize = 1024,
  173. .bMaxBurst = 15,
  174. },
  175. }
  176. };
  177. static const USBDescDevice desc_device_super = {
  178. .bcdUSB = 0x0300,
  179. .bMaxPacketSize0 = 9,
  180. .bNumConfigurations = 1,
  181. .confs = (USBDescConfig[]) {
  182. {
  183. .bNumInterfaces = 1,
  184. .bConfigurationValue = 1,
  185. .iConfiguration = STR_CONFIG_SUPER,
  186. .bmAttributes = USB_CFG_ATT_ONE | USB_CFG_ATT_SELFPOWER,
  187. .nif = 1,
  188. .ifs = &desc_iface_super,
  189. },
  190. },
  191. };
  192. static const USBDesc desc = {
  193. .id = {
  194. .idVendor = 0x46f4, /* CRC16() of "QEMU" */
  195. .idProduct = 0x0001,
  196. .bcdDevice = 0,
  197. .iManufacturer = STR_MANUFACTURER,
  198. .iProduct = STR_PRODUCT,
  199. .iSerialNumber = STR_SERIALNUMBER,
  200. },
  201. .full = &desc_device_full,
  202. .high = &desc_device_high,
  203. .super = &desc_device_super,
  204. .str = desc_strings,
  205. };
  206. static void usb_msd_copy_data(MSDState *s, USBPacket *p)
  207. {
  208. uint32_t len;
  209. len = p->iov.size - p->actual_length;
  210. if (len > s->scsi_len)
  211. len = s->scsi_len;
  212. usb_packet_copy(p, scsi_req_get_buf(s->req) + s->scsi_off, len);
  213. s->scsi_len -= len;
  214. s->scsi_off += len;
  215. s->data_len -= len;
  216. if (s->scsi_len == 0 || s->data_len == 0) {
  217. scsi_req_continue(s->req);
  218. }
  219. }
  220. static void usb_msd_send_status(MSDState *s, USBPacket *p)
  221. {
  222. int len;
  223. DPRINTF("Command status %d tag 0x%x, len %zd\n",
  224. s->csw.status, le32_to_cpu(s->csw.tag), p->iov.size);
  225. assert(s->csw.sig == cpu_to_le32(0x53425355));
  226. len = MIN(sizeof(s->csw), p->iov.size);
  227. usb_packet_copy(p, &s->csw, len);
  228. memset(&s->csw, 0, sizeof(s->csw));
  229. }
  230. static void usb_msd_packet_complete(MSDState *s)
  231. {
  232. USBPacket *p = s->packet;
  233. /* Set s->packet to NULL before calling usb_packet_complete
  234. because another request may be issued before
  235. usb_packet_complete returns. */
  236. DPRINTF("Packet complete %p\n", p);
  237. s->packet = NULL;
  238. usb_packet_complete(&s->dev, p);
  239. }
  240. static void usb_msd_transfer_data(SCSIRequest *req, uint32_t len)
  241. {
  242. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  243. USBPacket *p = s->packet;
  244. assert((s->mode == USB_MSDM_DATAOUT) == (req->cmd.mode == SCSI_XFER_TO_DEV));
  245. s->scsi_len = len;
  246. s->scsi_off = 0;
  247. if (p) {
  248. usb_msd_copy_data(s, p);
  249. p = s->packet;
  250. if (p && p->actual_length == p->iov.size) {
  251. p->status = USB_RET_SUCCESS; /* Clear previous ASYNC status */
  252. usb_msd_packet_complete(s);
  253. }
  254. }
  255. }
  256. static void usb_msd_command_complete(SCSIRequest *req, uint32_t status, size_t resid)
  257. {
  258. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  259. USBPacket *p = s->packet;
  260. DPRINTF("Command complete %d tag 0x%x\n", status, req->tag);
  261. s->csw.sig = cpu_to_le32(0x53425355);
  262. s->csw.tag = cpu_to_le32(req->tag);
  263. s->csw.residue = cpu_to_le32(s->data_len);
  264. s->csw.status = status != 0;
  265. if (s->packet) {
  266. if (s->data_len == 0 && s->mode == USB_MSDM_DATAOUT) {
  267. /* A deferred packet with no write data remaining must be
  268. the status read packet. */
  269. usb_msd_send_status(s, p);
  270. s->mode = USB_MSDM_CBW;
  271. } else if (s->mode == USB_MSDM_CSW) {
  272. usb_msd_send_status(s, p);
  273. s->mode = USB_MSDM_CBW;
  274. } else {
  275. if (s->data_len) {
  276. int len = (p->iov.size - p->actual_length);
  277. usb_packet_skip(p, len);
  278. s->data_len -= len;
  279. }
  280. if (s->data_len == 0) {
  281. s->mode = USB_MSDM_CSW;
  282. }
  283. }
  284. p->status = USB_RET_SUCCESS; /* Clear previous ASYNC status */
  285. usb_msd_packet_complete(s);
  286. } else if (s->data_len == 0) {
  287. s->mode = USB_MSDM_CSW;
  288. }
  289. scsi_req_unref(req);
  290. s->req = NULL;
  291. }
  292. static void usb_msd_request_cancelled(SCSIRequest *req)
  293. {
  294. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  295. if (req == s->req) {
  296. scsi_req_unref(s->req);
  297. s->req = NULL;
  298. s->scsi_len = 0;
  299. }
  300. }
  301. static void usb_msd_handle_reset(USBDevice *dev)
  302. {
  303. MSDState *s = (MSDState *)dev;
  304. DPRINTF("Reset\n");
  305. if (s->req) {
  306. scsi_req_cancel(s->req);
  307. }
  308. assert(s->req == NULL);
  309. if (s->packet) {
  310. s->packet->status = USB_RET_STALL;
  311. usb_msd_packet_complete(s);
  312. }
  313. s->mode = USB_MSDM_CBW;
  314. }
  315. static void usb_msd_handle_control(USBDevice *dev, USBPacket *p,
  316. int request, int value, int index, int length, uint8_t *data)
  317. {
  318. MSDState *s = (MSDState *)dev;
  319. SCSIDevice *scsi_dev;
  320. int ret, maxlun;
  321. ret = usb_desc_handle_control(dev, p, request, value, index, length, data);
  322. if (ret >= 0) {
  323. return;
  324. }
  325. switch (request) {
  326. case EndpointOutRequest | USB_REQ_CLEAR_FEATURE:
  327. break;
  328. /* Class specific requests. */
  329. case ClassInterfaceOutRequest | MassStorageReset:
  330. /* Reset state ready for the next CBW. */
  331. s->mode = USB_MSDM_CBW;
  332. break;
  333. case ClassInterfaceRequest | GetMaxLun:
  334. maxlun = 0;
  335. for (;;) {
  336. scsi_dev = scsi_device_find(&s->bus, 0, 0, maxlun+1);
  337. if (scsi_dev == NULL) {
  338. break;
  339. }
  340. if (scsi_dev->lun != maxlun+1) {
  341. break;
  342. }
  343. maxlun++;
  344. }
  345. DPRINTF("MaxLun %d\n", maxlun);
  346. data[0] = maxlun;
  347. p->actual_length = 1;
  348. break;
  349. default:
  350. p->status = USB_RET_STALL;
  351. break;
  352. }
  353. }
  354. static void usb_msd_cancel_io(USBDevice *dev, USBPacket *p)
  355. {
  356. MSDState *s = USB_STORAGE_DEV(dev);
  357. assert(s->packet == p);
  358. s->packet = NULL;
  359. if (s->req) {
  360. scsi_req_cancel(s->req);
  361. }
  362. }
  363. static void usb_msd_handle_data(USBDevice *dev, USBPacket *p)
  364. {
  365. MSDState *s = (MSDState *)dev;
  366. uint32_t tag;
  367. struct usb_msd_cbw cbw;
  368. uint8_t devep = p->ep->nr;
  369. SCSIDevice *scsi_dev;
  370. uint32_t len;
  371. switch (p->pid) {
  372. case USB_TOKEN_OUT:
  373. if (devep != 2)
  374. goto fail;
  375. switch (s->mode) {
  376. case USB_MSDM_CBW:
  377. if (p->iov.size != 31) {
  378. error_report("usb-msd: Bad CBW size");
  379. goto fail;
  380. }
  381. usb_packet_copy(p, &cbw, 31);
  382. if (le32_to_cpu(cbw.sig) != 0x43425355) {
  383. error_report("usb-msd: Bad signature %08x",
  384. le32_to_cpu(cbw.sig));
  385. goto fail;
  386. }
  387. DPRINTF("Command on LUN %d\n", cbw.lun);
  388. scsi_dev = scsi_device_find(&s->bus, 0, 0, cbw.lun);
  389. if (scsi_dev == NULL) {
  390. error_report("usb-msd: Bad LUN %d", cbw.lun);
  391. goto fail;
  392. }
  393. tag = le32_to_cpu(cbw.tag);
  394. s->data_len = le32_to_cpu(cbw.data_len);
  395. if (s->data_len == 0) {
  396. s->mode = USB_MSDM_CSW;
  397. } else if (cbw.flags & 0x80) {
  398. s->mode = USB_MSDM_DATAIN;
  399. } else {
  400. s->mode = USB_MSDM_DATAOUT;
  401. }
  402. DPRINTF("Command tag 0x%x flags %08x len %d data %d\n",
  403. tag, cbw.flags, cbw.cmd_len, s->data_len);
  404. assert(le32_to_cpu(s->csw.residue) == 0);
  405. s->scsi_len = 0;
  406. s->req = scsi_req_new(scsi_dev, tag, cbw.lun, cbw.cmd, NULL);
  407. #ifdef DEBUG_MSD
  408. scsi_req_print(s->req);
  409. #endif
  410. len = scsi_req_enqueue(s->req);
  411. if (len) {
  412. scsi_req_continue(s->req);
  413. }
  414. break;
  415. case USB_MSDM_DATAOUT:
  416. DPRINTF("Data out %zd/%d\n", p->iov.size, s->data_len);
  417. if (p->iov.size > s->data_len) {
  418. goto fail;
  419. }
  420. if (s->scsi_len) {
  421. usb_msd_copy_data(s, p);
  422. }
  423. if (le32_to_cpu(s->csw.residue)) {
  424. int len = p->iov.size - p->actual_length;
  425. if (len) {
  426. usb_packet_skip(p, len);
  427. s->data_len -= len;
  428. if (s->data_len == 0) {
  429. s->mode = USB_MSDM_CSW;
  430. }
  431. }
  432. }
  433. if (p->actual_length < p->iov.size) {
  434. DPRINTF("Deferring packet %p [wait data-out]\n", p);
  435. s->packet = p;
  436. p->status = USB_RET_ASYNC;
  437. }
  438. break;
  439. default:
  440. DPRINTF("Unexpected write (len %zd)\n", p->iov.size);
  441. goto fail;
  442. }
  443. break;
  444. case USB_TOKEN_IN:
  445. if (devep != 1)
  446. goto fail;
  447. switch (s->mode) {
  448. case USB_MSDM_DATAOUT:
  449. if (s->data_len != 0 || p->iov.size < 13) {
  450. goto fail;
  451. }
  452. /* Waiting for SCSI write to complete. */
  453. s->packet = p;
  454. p->status = USB_RET_ASYNC;
  455. break;
  456. case USB_MSDM_CSW:
  457. if (p->iov.size < 13) {
  458. goto fail;
  459. }
  460. if (s->req) {
  461. /* still in flight */
  462. DPRINTF("Deferring packet %p [wait status]\n", p);
  463. s->packet = p;
  464. p->status = USB_RET_ASYNC;
  465. } else {
  466. usb_msd_send_status(s, p);
  467. s->mode = USB_MSDM_CBW;
  468. }
  469. break;
  470. case USB_MSDM_DATAIN:
  471. DPRINTF("Data in %zd/%d, scsi_len %d\n",
  472. p->iov.size, s->data_len, s->scsi_len);
  473. if (s->scsi_len) {
  474. usb_msd_copy_data(s, p);
  475. }
  476. if (le32_to_cpu(s->csw.residue)) {
  477. int len = p->iov.size - p->actual_length;
  478. if (len) {
  479. usb_packet_skip(p, len);
  480. s->data_len -= len;
  481. if (s->data_len == 0) {
  482. s->mode = USB_MSDM_CSW;
  483. }
  484. }
  485. }
  486. if (p->actual_length < p->iov.size) {
  487. DPRINTF("Deferring packet %p [wait data-in]\n", p);
  488. s->packet = p;
  489. p->status = USB_RET_ASYNC;
  490. }
  491. break;
  492. default:
  493. DPRINTF("Unexpected read (len %zd)\n", p->iov.size);
  494. goto fail;
  495. }
  496. break;
  497. default:
  498. DPRINTF("Bad token\n");
  499. fail:
  500. p->status = USB_RET_STALL;
  501. break;
  502. }
  503. }
  504. static void *usb_msd_load_request(QEMUFile *f, SCSIRequest *req)
  505. {
  506. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  507. /* nothing to load, just store req in our state struct */
  508. assert(s->req == NULL);
  509. scsi_req_ref(req);
  510. s->req = req;
  511. return NULL;
  512. }
  513. static const struct SCSIBusInfo usb_msd_scsi_info_storage = {
  514. .tcq = false,
  515. .max_target = 0,
  516. .max_lun = 0,
  517. .transfer_data = usb_msd_transfer_data,
  518. .complete = usb_msd_command_complete,
  519. .cancel = usb_msd_request_cancelled,
  520. .load_request = usb_msd_load_request,
  521. };
  522. static const struct SCSIBusInfo usb_msd_scsi_info_bot = {
  523. .tcq = false,
  524. .max_target = 0,
  525. .max_lun = 15,
  526. .transfer_data = usb_msd_transfer_data,
  527. .complete = usb_msd_command_complete,
  528. .cancel = usb_msd_request_cancelled,
  529. .load_request = usb_msd_load_request,
  530. };
  531. static void usb_msd_storage_realize(USBDevice *dev, Error **errp)
  532. {
  533. MSDState *s = USB_STORAGE_DEV(dev);
  534. BlockBackend *blk = s->conf.blk;
  535. SCSIDevice *scsi_dev;
  536. if (!blk) {
  537. error_setg(errp, "drive property not set");
  538. return;
  539. }
  540. blkconf_blocksizes(&s->conf);
  541. if (!blkconf_apply_backend_options(&s->conf, blk_is_read_only(blk), true,
  542. errp)) {
  543. return;
  544. }
  545. /*
  546. * Hack alert: this pretends to be a block device, but it's really
  547. * a SCSI bus that can serve only a single device, which it
  548. * creates automatically. But first it needs to detach from its
  549. * blockdev, or else scsi_bus_legacy_add_drive() dies when it
  550. * attaches again. We also need to take another reference so that
  551. * blk_detach_dev() doesn't free blk while we still need it.
  552. *
  553. * The hack is probably a bad idea.
  554. */
  555. blk_ref(blk);
  556. blk_detach_dev(blk, DEVICE(s));
  557. s->conf.blk = NULL;
  558. usb_desc_create_serial(dev);
  559. usb_desc_init(dev);
  560. scsi_bus_new(&s->bus, sizeof(s->bus), DEVICE(dev),
  561. &usb_msd_scsi_info_storage, NULL);
  562. scsi_dev = scsi_bus_legacy_add_drive(&s->bus, blk, 0, !!s->removable,
  563. s->conf.bootindex, s->conf.share_rw,
  564. s->conf.rerror, s->conf.werror,
  565. dev->serial,
  566. errp);
  567. blk_unref(blk);
  568. if (!scsi_dev) {
  569. return;
  570. }
  571. usb_msd_handle_reset(dev);
  572. s->scsi_dev = scsi_dev;
  573. }
  574. static void usb_msd_bot_realize(USBDevice *dev, Error **errp)
  575. {
  576. MSDState *s = USB_STORAGE_DEV(dev);
  577. DeviceState *d = DEVICE(dev);
  578. usb_desc_create_serial(dev);
  579. usb_desc_init(dev);
  580. if (d->hotplugged) {
  581. s->dev.auto_attach = 0;
  582. }
  583. scsi_bus_new(&s->bus, sizeof(s->bus), DEVICE(dev),
  584. &usb_msd_scsi_info_bot, NULL);
  585. usb_msd_handle_reset(dev);
  586. }
  587. static const VMStateDescription vmstate_usb_msd = {
  588. .name = "usb-storage",
  589. .version_id = 1,
  590. .minimum_version_id = 1,
  591. .fields = (VMStateField[]) {
  592. VMSTATE_USB_DEVICE(dev, MSDState),
  593. VMSTATE_UINT32(mode, MSDState),
  594. VMSTATE_UINT32(scsi_len, MSDState),
  595. VMSTATE_UINT32(scsi_off, MSDState),
  596. VMSTATE_UINT32(data_len, MSDState),
  597. VMSTATE_UINT32(csw.sig, MSDState),
  598. VMSTATE_UINT32(csw.tag, MSDState),
  599. VMSTATE_UINT32(csw.residue, MSDState),
  600. VMSTATE_UINT8(csw.status, MSDState),
  601. VMSTATE_END_OF_LIST()
  602. }
  603. };
  604. static Property msd_properties[] = {
  605. DEFINE_BLOCK_PROPERTIES(MSDState, conf),
  606. DEFINE_BLOCK_ERROR_PROPERTIES(MSDState, conf),
  607. DEFINE_PROP_BIT("removable", MSDState, removable, 0, false),
  608. DEFINE_PROP_END_OF_LIST(),
  609. };
  610. static void usb_msd_class_initfn_common(ObjectClass *klass, void *data)
  611. {
  612. DeviceClass *dc = DEVICE_CLASS(klass);
  613. USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
  614. uc->product_desc = "QEMU USB MSD";
  615. uc->usb_desc = &desc;
  616. uc->cancel_packet = usb_msd_cancel_io;
  617. uc->handle_attach = usb_desc_attach;
  618. uc->handle_reset = usb_msd_handle_reset;
  619. uc->handle_control = usb_msd_handle_control;
  620. uc->handle_data = usb_msd_handle_data;
  621. set_bit(DEVICE_CATEGORY_STORAGE, dc->categories);
  622. dc->fw_name = "storage";
  623. dc->vmsd = &vmstate_usb_msd;
  624. }
  625. static void usb_msd_class_storage_initfn(ObjectClass *klass, void *data)
  626. {
  627. DeviceClass *dc = DEVICE_CLASS(klass);
  628. USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
  629. uc->realize = usb_msd_storage_realize;
  630. dc->props = msd_properties;
  631. }
  632. static void usb_msd_get_bootindex(Object *obj, Visitor *v, const char *name,
  633. void *opaque, Error **errp)
  634. {
  635. USBDevice *dev = USB_DEVICE(obj);
  636. MSDState *s = USB_STORAGE_DEV(dev);
  637. visit_type_int32(v, name, &s->conf.bootindex, errp);
  638. }
  639. static void usb_msd_set_bootindex(Object *obj, Visitor *v, const char *name,
  640. void *opaque, Error **errp)
  641. {
  642. USBDevice *dev = USB_DEVICE(obj);
  643. MSDState *s = USB_STORAGE_DEV(dev);
  644. int32_t boot_index;
  645. Error *local_err = NULL;
  646. visit_type_int32(v, name, &boot_index, &local_err);
  647. if (local_err) {
  648. goto out;
  649. }
  650. /* check whether bootindex is present in fw_boot_order list */
  651. check_boot_index(boot_index, &local_err);
  652. if (local_err) {
  653. goto out;
  654. }
  655. /* change bootindex to a new one */
  656. s->conf.bootindex = boot_index;
  657. if (s->scsi_dev) {
  658. object_property_set_int(OBJECT(s->scsi_dev), boot_index, "bootindex",
  659. &error_abort);
  660. }
  661. out:
  662. error_propagate(errp, local_err);
  663. }
  664. static const TypeInfo usb_storage_dev_type_info = {
  665. .name = TYPE_USB_STORAGE,
  666. .parent = TYPE_USB_DEVICE,
  667. .instance_size = sizeof(MSDState),
  668. .abstract = true,
  669. .class_init = usb_msd_class_initfn_common,
  670. };
  671. static void usb_msd_instance_init(Object *obj)
  672. {
  673. object_property_add(obj, "bootindex", "int32",
  674. usb_msd_get_bootindex,
  675. usb_msd_set_bootindex, NULL, NULL, NULL);
  676. object_property_set_int(obj, -1, "bootindex", NULL);
  677. }
  678. static void usb_msd_class_bot_initfn(ObjectClass *klass, void *data)
  679. {
  680. USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
  681. uc->realize = usb_msd_bot_realize;
  682. uc->attached_settable = true;
  683. }
  684. static const TypeInfo msd_info = {
  685. .name = "usb-storage",
  686. .parent = TYPE_USB_STORAGE,
  687. .class_init = usb_msd_class_storage_initfn,
  688. .instance_init = usb_msd_instance_init,
  689. };
  690. static const TypeInfo bot_info = {
  691. .name = "usb-bot",
  692. .parent = TYPE_USB_STORAGE,
  693. .class_init = usb_msd_class_bot_initfn,
  694. };
  695. static void usb_msd_register_types(void)
  696. {
  697. type_register_static(&usb_storage_dev_type_info);
  698. type_register_static(&msd_info);
  699. type_register_static(&bot_info);
  700. }
  701. type_init(usb_msd_register_types)