dev-storage.c 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796
  1. /*
  2. * USB Mass Storage Device emulation
  3. *
  4. * Copyright (c) 2006 CodeSourcery.
  5. * Written by Paul Brook
  6. *
  7. * This code is licensed under the LGPL.
  8. */
  9. #include "qemu-common.h"
  10. #include "qemu/option.h"
  11. #include "qemu/config-file.h"
  12. #include "hw/usb.h"
  13. #include "hw/usb/desc.h"
  14. #include "hw/scsi.h"
  15. #include "ui/console.h"
  16. #include "monitor/monitor.h"
  17. #include "sysemu/sysemu.h"
  18. #include "sysemu/blockdev.h"
  19. //#define DEBUG_MSD
  20. #ifdef DEBUG_MSD
  21. #define DPRINTF(fmt, ...) \
  22. do { printf("usb-msd: " fmt , ## __VA_ARGS__); } while (0)
  23. #else
  24. #define DPRINTF(fmt, ...) do {} while(0)
  25. #endif
  26. /* USB requests. */
  27. #define MassStorageReset 0xff
  28. #define GetMaxLun 0xfe
  29. enum USBMSDMode {
  30. USB_MSDM_CBW, /* Command Block. */
  31. USB_MSDM_DATAOUT, /* Transfer data to device. */
  32. USB_MSDM_DATAIN, /* Transfer data from device. */
  33. USB_MSDM_CSW /* Command Status. */
  34. };
  35. struct usb_msd_csw {
  36. uint32_t sig;
  37. uint32_t tag;
  38. uint32_t residue;
  39. uint8_t status;
  40. };
  41. typedef struct {
  42. USBDevice dev;
  43. enum USBMSDMode mode;
  44. uint32_t scsi_off;
  45. uint32_t scsi_len;
  46. uint32_t data_len;
  47. struct usb_msd_csw csw;
  48. SCSIRequest *req;
  49. SCSIBus bus;
  50. /* For async completion. */
  51. USBPacket *packet;
  52. /* usb-storage only */
  53. BlockConf conf;
  54. char *serial;
  55. uint32_t removable;
  56. } MSDState;
  57. struct usb_msd_cbw {
  58. uint32_t sig;
  59. uint32_t tag;
  60. uint32_t data_len;
  61. uint8_t flags;
  62. uint8_t lun;
  63. uint8_t cmd_len;
  64. uint8_t cmd[16];
  65. };
  66. enum {
  67. STR_MANUFACTURER = 1,
  68. STR_PRODUCT,
  69. STR_SERIALNUMBER,
  70. STR_CONFIG_FULL,
  71. STR_CONFIG_HIGH,
  72. STR_CONFIG_SUPER,
  73. };
  74. static const USBDescStrings desc_strings = {
  75. [STR_MANUFACTURER] = "QEMU",
  76. [STR_PRODUCT] = "QEMU USB HARDDRIVE",
  77. [STR_SERIALNUMBER] = "1",
  78. [STR_CONFIG_FULL] = "Full speed config (usb 1.1)",
  79. [STR_CONFIG_HIGH] = "High speed config (usb 2.0)",
  80. [STR_CONFIG_SUPER] = "Super speed config (usb 3.0)",
  81. };
  82. static const USBDescIface desc_iface_full = {
  83. .bInterfaceNumber = 0,
  84. .bNumEndpoints = 2,
  85. .bInterfaceClass = USB_CLASS_MASS_STORAGE,
  86. .bInterfaceSubClass = 0x06, /* SCSI */
  87. .bInterfaceProtocol = 0x50, /* Bulk */
  88. .eps = (USBDescEndpoint[]) {
  89. {
  90. .bEndpointAddress = USB_DIR_IN | 0x01,
  91. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  92. .wMaxPacketSize = 64,
  93. },{
  94. .bEndpointAddress = USB_DIR_OUT | 0x02,
  95. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  96. .wMaxPacketSize = 64,
  97. },
  98. }
  99. };
  100. static const USBDescDevice desc_device_full = {
  101. .bcdUSB = 0x0200,
  102. .bMaxPacketSize0 = 8,
  103. .bNumConfigurations = 1,
  104. .confs = (USBDescConfig[]) {
  105. {
  106. .bNumInterfaces = 1,
  107. .bConfigurationValue = 1,
  108. .iConfiguration = STR_CONFIG_FULL,
  109. .bmAttributes = 0xc0,
  110. .nif = 1,
  111. .ifs = &desc_iface_full,
  112. },
  113. },
  114. };
  115. static const USBDescIface desc_iface_high = {
  116. .bInterfaceNumber = 0,
  117. .bNumEndpoints = 2,
  118. .bInterfaceClass = USB_CLASS_MASS_STORAGE,
  119. .bInterfaceSubClass = 0x06, /* SCSI */
  120. .bInterfaceProtocol = 0x50, /* Bulk */
  121. .eps = (USBDescEndpoint[]) {
  122. {
  123. .bEndpointAddress = USB_DIR_IN | 0x01,
  124. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  125. .wMaxPacketSize = 512,
  126. },{
  127. .bEndpointAddress = USB_DIR_OUT | 0x02,
  128. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  129. .wMaxPacketSize = 512,
  130. },
  131. }
  132. };
  133. static const USBDescDevice desc_device_high = {
  134. .bcdUSB = 0x0200,
  135. .bMaxPacketSize0 = 64,
  136. .bNumConfigurations = 1,
  137. .confs = (USBDescConfig[]) {
  138. {
  139. .bNumInterfaces = 1,
  140. .bConfigurationValue = 1,
  141. .iConfiguration = STR_CONFIG_HIGH,
  142. .bmAttributes = 0xc0,
  143. .nif = 1,
  144. .ifs = &desc_iface_high,
  145. },
  146. },
  147. };
  148. static const USBDescIface desc_iface_super = {
  149. .bInterfaceNumber = 0,
  150. .bNumEndpoints = 2,
  151. .bInterfaceClass = USB_CLASS_MASS_STORAGE,
  152. .bInterfaceSubClass = 0x06, /* SCSI */
  153. .bInterfaceProtocol = 0x50, /* Bulk */
  154. .eps = (USBDescEndpoint[]) {
  155. {
  156. .bEndpointAddress = USB_DIR_IN | 0x01,
  157. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  158. .wMaxPacketSize = 1024,
  159. .bMaxBurst = 15,
  160. },{
  161. .bEndpointAddress = USB_DIR_OUT | 0x02,
  162. .bmAttributes = USB_ENDPOINT_XFER_BULK,
  163. .wMaxPacketSize = 1024,
  164. .bMaxBurst = 15,
  165. },
  166. }
  167. };
  168. static const USBDescDevice desc_device_super = {
  169. .bcdUSB = 0x0300,
  170. .bMaxPacketSize0 = 9,
  171. .bNumConfigurations = 1,
  172. .confs = (USBDescConfig[]) {
  173. {
  174. .bNumInterfaces = 1,
  175. .bConfigurationValue = 1,
  176. .iConfiguration = STR_CONFIG_SUPER,
  177. .bmAttributes = 0xc0,
  178. .nif = 1,
  179. .ifs = &desc_iface_super,
  180. },
  181. },
  182. };
  183. static const USBDesc desc = {
  184. .id = {
  185. .idVendor = 0x46f4, /* CRC16() of "QEMU" */
  186. .idProduct = 0x0001,
  187. .bcdDevice = 0,
  188. .iManufacturer = STR_MANUFACTURER,
  189. .iProduct = STR_PRODUCT,
  190. .iSerialNumber = STR_SERIALNUMBER,
  191. },
  192. .full = &desc_device_full,
  193. .high = &desc_device_high,
  194. .super = &desc_device_super,
  195. .str = desc_strings,
  196. };
  197. static void usb_msd_copy_data(MSDState *s, USBPacket *p)
  198. {
  199. uint32_t len;
  200. len = p->iov.size - p->actual_length;
  201. if (len > s->scsi_len)
  202. len = s->scsi_len;
  203. usb_packet_copy(p, scsi_req_get_buf(s->req) + s->scsi_off, len);
  204. s->scsi_len -= len;
  205. s->scsi_off += len;
  206. s->data_len -= len;
  207. if (s->scsi_len == 0 || s->data_len == 0) {
  208. scsi_req_continue(s->req);
  209. }
  210. }
  211. static void usb_msd_send_status(MSDState *s, USBPacket *p)
  212. {
  213. int len;
  214. DPRINTF("Command status %d tag 0x%x, len %zd\n",
  215. s->csw.status, le32_to_cpu(s->csw.tag), p->iov.size);
  216. assert(s->csw.sig == cpu_to_le32(0x53425355));
  217. len = MIN(sizeof(s->csw), p->iov.size);
  218. usb_packet_copy(p, &s->csw, len);
  219. memset(&s->csw, 0, sizeof(s->csw));
  220. }
  221. static void usb_msd_packet_complete(MSDState *s)
  222. {
  223. USBPacket *p = s->packet;
  224. /* Set s->packet to NULL before calling usb_packet_complete
  225. because another request may be issued before
  226. usb_packet_complete returns. */
  227. DPRINTF("Packet complete %p\n", p);
  228. s->packet = NULL;
  229. usb_packet_complete(&s->dev, p);
  230. }
  231. static void usb_msd_transfer_data(SCSIRequest *req, uint32_t len)
  232. {
  233. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  234. USBPacket *p = s->packet;
  235. assert((s->mode == USB_MSDM_DATAOUT) == (req->cmd.mode == SCSI_XFER_TO_DEV));
  236. s->scsi_len = len;
  237. s->scsi_off = 0;
  238. if (p) {
  239. usb_msd_copy_data(s, p);
  240. p = s->packet;
  241. if (p && p->actual_length == p->iov.size) {
  242. p->status = USB_RET_SUCCESS; /* Clear previous ASYNC status */
  243. usb_msd_packet_complete(s);
  244. }
  245. }
  246. }
  247. static void usb_msd_command_complete(SCSIRequest *req, uint32_t status, size_t resid)
  248. {
  249. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  250. USBPacket *p = s->packet;
  251. DPRINTF("Command complete %d tag 0x%x\n", status, req->tag);
  252. s->csw.sig = cpu_to_le32(0x53425355);
  253. s->csw.tag = cpu_to_le32(req->tag);
  254. s->csw.residue = cpu_to_le32(s->data_len);
  255. s->csw.status = status != 0;
  256. if (s->packet) {
  257. if (s->data_len == 0 && s->mode == USB_MSDM_DATAOUT) {
  258. /* A deferred packet with no write data remaining must be
  259. the status read packet. */
  260. usb_msd_send_status(s, p);
  261. s->mode = USB_MSDM_CBW;
  262. } else if (s->mode == USB_MSDM_CSW) {
  263. usb_msd_send_status(s, p);
  264. s->mode = USB_MSDM_CBW;
  265. } else {
  266. if (s->data_len) {
  267. int len = (p->iov.size - p->actual_length);
  268. usb_packet_skip(p, len);
  269. s->data_len -= len;
  270. }
  271. if (s->data_len == 0) {
  272. s->mode = USB_MSDM_CSW;
  273. }
  274. }
  275. p->status = USB_RET_SUCCESS; /* Clear previous ASYNC status */
  276. usb_msd_packet_complete(s);
  277. } else if (s->data_len == 0) {
  278. s->mode = USB_MSDM_CSW;
  279. }
  280. scsi_req_unref(req);
  281. s->req = NULL;
  282. }
  283. static void usb_msd_request_cancelled(SCSIRequest *req)
  284. {
  285. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  286. if (req == s->req) {
  287. scsi_req_unref(s->req);
  288. s->req = NULL;
  289. s->scsi_len = 0;
  290. }
  291. }
  292. static void usb_msd_handle_reset(USBDevice *dev)
  293. {
  294. MSDState *s = (MSDState *)dev;
  295. DPRINTF("Reset\n");
  296. if (s->req) {
  297. scsi_req_cancel(s->req);
  298. }
  299. assert(s->req == NULL);
  300. if (s->packet) {
  301. s->packet->status = USB_RET_STALL;
  302. usb_msd_packet_complete(s);
  303. }
  304. s->mode = USB_MSDM_CBW;
  305. }
  306. static void usb_msd_handle_control(USBDevice *dev, USBPacket *p,
  307. int request, int value, int index, int length, uint8_t *data)
  308. {
  309. MSDState *s = (MSDState *)dev;
  310. SCSIDevice *scsi_dev;
  311. int ret, maxlun;
  312. ret = usb_desc_handle_control(dev, p, request, value, index, length, data);
  313. if (ret >= 0) {
  314. return;
  315. }
  316. switch (request) {
  317. case EndpointOutRequest | USB_REQ_CLEAR_FEATURE:
  318. break;
  319. /* Class specific requests. */
  320. case ClassInterfaceOutRequest | MassStorageReset:
  321. /* Reset state ready for the next CBW. */
  322. s->mode = USB_MSDM_CBW;
  323. break;
  324. case ClassInterfaceRequest | GetMaxLun:
  325. maxlun = 0;
  326. for (;;) {
  327. scsi_dev = scsi_device_find(&s->bus, 0, 0, maxlun+1);
  328. if (scsi_dev == NULL) {
  329. break;
  330. }
  331. if (scsi_dev->lun != maxlun+1) {
  332. break;
  333. }
  334. maxlun++;
  335. }
  336. DPRINTF("MaxLun %d\n", maxlun);
  337. data[0] = maxlun;
  338. p->actual_length = 1;
  339. break;
  340. default:
  341. p->status = USB_RET_STALL;
  342. break;
  343. }
  344. }
  345. static void usb_msd_cancel_io(USBDevice *dev, USBPacket *p)
  346. {
  347. MSDState *s = DO_UPCAST(MSDState, dev, dev);
  348. assert(s->packet == p);
  349. s->packet = NULL;
  350. if (s->req) {
  351. scsi_req_cancel(s->req);
  352. }
  353. }
  354. static void usb_msd_handle_data(USBDevice *dev, USBPacket *p)
  355. {
  356. MSDState *s = (MSDState *)dev;
  357. uint32_t tag;
  358. struct usb_msd_cbw cbw;
  359. uint8_t devep = p->ep->nr;
  360. SCSIDevice *scsi_dev;
  361. switch (p->pid) {
  362. case USB_TOKEN_OUT:
  363. if (devep != 2)
  364. goto fail;
  365. switch (s->mode) {
  366. case USB_MSDM_CBW:
  367. if (p->iov.size != 31) {
  368. fprintf(stderr, "usb-msd: Bad CBW size");
  369. goto fail;
  370. }
  371. usb_packet_copy(p, &cbw, 31);
  372. if (le32_to_cpu(cbw.sig) != 0x43425355) {
  373. fprintf(stderr, "usb-msd: Bad signature %08x\n",
  374. le32_to_cpu(cbw.sig));
  375. goto fail;
  376. }
  377. DPRINTF("Command on LUN %d\n", cbw.lun);
  378. scsi_dev = scsi_device_find(&s->bus, 0, 0, cbw.lun);
  379. if (scsi_dev == NULL) {
  380. fprintf(stderr, "usb-msd: Bad LUN %d\n", cbw.lun);
  381. goto fail;
  382. }
  383. tag = le32_to_cpu(cbw.tag);
  384. s->data_len = le32_to_cpu(cbw.data_len);
  385. if (s->data_len == 0) {
  386. s->mode = USB_MSDM_CSW;
  387. } else if (cbw.flags & 0x80) {
  388. s->mode = USB_MSDM_DATAIN;
  389. } else {
  390. s->mode = USB_MSDM_DATAOUT;
  391. }
  392. DPRINTF("Command tag 0x%x flags %08x len %d data %d\n",
  393. tag, cbw.flags, cbw.cmd_len, s->data_len);
  394. assert(le32_to_cpu(s->csw.residue) == 0);
  395. s->scsi_len = 0;
  396. s->req = scsi_req_new(scsi_dev, tag, cbw.lun, cbw.cmd, NULL);
  397. #ifdef DEBUG_MSD
  398. scsi_req_print(s->req);
  399. #endif
  400. scsi_req_enqueue(s->req);
  401. if (s->req && s->req->cmd.xfer != SCSI_XFER_NONE) {
  402. scsi_req_continue(s->req);
  403. }
  404. break;
  405. case USB_MSDM_DATAOUT:
  406. DPRINTF("Data out %zd/%d\n", p->iov.size, s->data_len);
  407. if (p->iov.size > s->data_len) {
  408. goto fail;
  409. }
  410. if (s->scsi_len) {
  411. usb_msd_copy_data(s, p);
  412. }
  413. if (le32_to_cpu(s->csw.residue)) {
  414. int len = p->iov.size - p->actual_length;
  415. if (len) {
  416. usb_packet_skip(p, len);
  417. s->data_len -= len;
  418. if (s->data_len == 0) {
  419. s->mode = USB_MSDM_CSW;
  420. }
  421. }
  422. }
  423. if (p->actual_length < p->iov.size) {
  424. DPRINTF("Deferring packet %p [wait data-out]\n", p);
  425. s->packet = p;
  426. p->status = USB_RET_ASYNC;
  427. }
  428. break;
  429. default:
  430. DPRINTF("Unexpected write (len %zd)\n", p->iov.size);
  431. goto fail;
  432. }
  433. break;
  434. case USB_TOKEN_IN:
  435. if (devep != 1)
  436. goto fail;
  437. switch (s->mode) {
  438. case USB_MSDM_DATAOUT:
  439. if (s->data_len != 0 || p->iov.size < 13) {
  440. goto fail;
  441. }
  442. /* Waiting for SCSI write to complete. */
  443. s->packet = p;
  444. p->status = USB_RET_ASYNC;
  445. break;
  446. case USB_MSDM_CSW:
  447. if (p->iov.size < 13) {
  448. goto fail;
  449. }
  450. if (s->req) {
  451. /* still in flight */
  452. DPRINTF("Deferring packet %p [wait status]\n", p);
  453. s->packet = p;
  454. p->status = USB_RET_ASYNC;
  455. } else {
  456. usb_msd_send_status(s, p);
  457. s->mode = USB_MSDM_CBW;
  458. }
  459. break;
  460. case USB_MSDM_DATAIN:
  461. DPRINTF("Data in %zd/%d, scsi_len %d\n",
  462. p->iov.size, s->data_len, s->scsi_len);
  463. if (s->scsi_len) {
  464. usb_msd_copy_data(s, p);
  465. }
  466. if (le32_to_cpu(s->csw.residue)) {
  467. int len = p->iov.size - p->actual_length;
  468. if (len) {
  469. usb_packet_skip(p, len);
  470. s->data_len -= len;
  471. if (s->data_len == 0) {
  472. s->mode = USB_MSDM_CSW;
  473. }
  474. }
  475. }
  476. if (p->actual_length < p->iov.size) {
  477. DPRINTF("Deferring packet %p [wait data-in]\n", p);
  478. s->packet = p;
  479. p->status = USB_RET_ASYNC;
  480. }
  481. break;
  482. default:
  483. DPRINTF("Unexpected read (len %zd)\n", p->iov.size);
  484. goto fail;
  485. }
  486. break;
  487. default:
  488. DPRINTF("Bad token\n");
  489. fail:
  490. p->status = USB_RET_STALL;
  491. break;
  492. }
  493. }
  494. static void usb_msd_password_cb(void *opaque, int err)
  495. {
  496. MSDState *s = opaque;
  497. if (!err)
  498. err = usb_device_attach(&s->dev);
  499. if (err)
  500. qdev_unplug(&s->dev.qdev, NULL);
  501. }
  502. static void *usb_msd_load_request(QEMUFile *f, SCSIRequest *req)
  503. {
  504. MSDState *s = DO_UPCAST(MSDState, dev.qdev, req->bus->qbus.parent);
  505. /* nothing to load, just store req in our state struct */
  506. assert(s->req == NULL);
  507. scsi_req_ref(req);
  508. s->req = req;
  509. return NULL;
  510. }
  511. static const struct SCSIBusInfo usb_msd_scsi_info_storage = {
  512. .tcq = false,
  513. .max_target = 0,
  514. .max_lun = 0,
  515. .transfer_data = usb_msd_transfer_data,
  516. .complete = usb_msd_command_complete,
  517. .cancel = usb_msd_request_cancelled,
  518. .load_request = usb_msd_load_request,
  519. };
  520. static const struct SCSIBusInfo usb_msd_scsi_info_bot = {
  521. .tcq = false,
  522. .max_target = 0,
  523. .max_lun = 15,
  524. .transfer_data = usb_msd_transfer_data,
  525. .complete = usb_msd_command_complete,
  526. .cancel = usb_msd_request_cancelled,
  527. .load_request = usb_msd_load_request,
  528. };
  529. static int usb_msd_initfn_storage(USBDevice *dev)
  530. {
  531. MSDState *s = DO_UPCAST(MSDState, dev, dev);
  532. BlockDriverState *bs = s->conf.bs;
  533. SCSIDevice *scsi_dev;
  534. if (!bs) {
  535. error_report("drive property not set");
  536. return -1;
  537. }
  538. blkconf_serial(&s->conf, &s->serial);
  539. /*
  540. * Hack alert: this pretends to be a block device, but it's really
  541. * a SCSI bus that can serve only a single device, which it
  542. * creates automatically. But first it needs to detach from its
  543. * blockdev, or else scsi_bus_legacy_add_drive() dies when it
  544. * attaches again.
  545. *
  546. * The hack is probably a bad idea.
  547. */
  548. bdrv_detach_dev(bs, &s->dev.qdev);
  549. s->conf.bs = NULL;
  550. if (s->serial) {
  551. usb_desc_set_string(dev, STR_SERIALNUMBER, s->serial);
  552. } else {
  553. usb_desc_create_serial(dev);
  554. }
  555. usb_desc_init(dev);
  556. scsi_bus_new(&s->bus, &s->dev.qdev, &usb_msd_scsi_info_storage);
  557. scsi_dev = scsi_bus_legacy_add_drive(&s->bus, bs, 0, !!s->removable,
  558. s->conf.bootindex);
  559. if (!scsi_dev) {
  560. return -1;
  561. }
  562. s->bus.qbus.allow_hotplug = 0;
  563. usb_msd_handle_reset(dev);
  564. if (bdrv_key_required(bs)) {
  565. if (cur_mon) {
  566. monitor_read_bdrv_key_start(cur_mon, bs, usb_msd_password_cb, s);
  567. s->dev.auto_attach = 0;
  568. } else {
  569. autostart = 0;
  570. }
  571. }
  572. return 0;
  573. }
  574. static int usb_msd_initfn_bot(USBDevice *dev)
  575. {
  576. MSDState *s = DO_UPCAST(MSDState, dev, dev);
  577. usb_desc_create_serial(dev);
  578. usb_desc_init(dev);
  579. scsi_bus_new(&s->bus, &s->dev.qdev, &usb_msd_scsi_info_bot);
  580. s->bus.qbus.allow_hotplug = 0;
  581. usb_msd_handle_reset(dev);
  582. return 0;
  583. }
  584. static USBDevice *usb_msd_init(USBBus *bus, const char *filename)
  585. {
  586. static int nr=0;
  587. char id[8];
  588. QemuOpts *opts;
  589. DriveInfo *dinfo;
  590. USBDevice *dev;
  591. const char *p1;
  592. char fmt[32];
  593. /* parse -usbdevice disk: syntax into drive opts */
  594. snprintf(id, sizeof(id), "usb%d", nr++);
  595. opts = qemu_opts_create(qemu_find_opts("drive"), id, 0, NULL);
  596. p1 = strchr(filename, ':');
  597. if (p1++) {
  598. const char *p2;
  599. if (strstart(filename, "format=", &p2)) {
  600. int len = MIN(p1 - p2, sizeof(fmt));
  601. pstrcpy(fmt, len, p2);
  602. qemu_opt_set(opts, "format", fmt);
  603. } else if (*filename != ':') {
  604. printf("unrecognized USB mass-storage option %s\n", filename);
  605. return NULL;
  606. }
  607. filename = p1;
  608. }
  609. if (!*filename) {
  610. printf("block device specification needed\n");
  611. return NULL;
  612. }
  613. qemu_opt_set(opts, "file", filename);
  614. qemu_opt_set(opts, "if", "none");
  615. /* create host drive */
  616. dinfo = drive_init(opts, 0);
  617. if (!dinfo) {
  618. qemu_opts_del(opts);
  619. return NULL;
  620. }
  621. /* create guest device */
  622. dev = usb_create(bus, "usb-storage");
  623. if (!dev) {
  624. return NULL;
  625. }
  626. if (qdev_prop_set_drive(&dev->qdev, "drive", dinfo->bdrv) < 0) {
  627. qdev_free(&dev->qdev);
  628. return NULL;
  629. }
  630. if (qdev_init(&dev->qdev) < 0)
  631. return NULL;
  632. return dev;
  633. }
  634. static const VMStateDescription vmstate_usb_msd = {
  635. .name = "usb-storage",
  636. .version_id = 1,
  637. .minimum_version_id = 1,
  638. .fields = (VMStateField []) {
  639. VMSTATE_USB_DEVICE(dev, MSDState),
  640. VMSTATE_UINT32(mode, MSDState),
  641. VMSTATE_UINT32(scsi_len, MSDState),
  642. VMSTATE_UINT32(scsi_off, MSDState),
  643. VMSTATE_UINT32(data_len, MSDState),
  644. VMSTATE_UINT32(csw.sig, MSDState),
  645. VMSTATE_UINT32(csw.tag, MSDState),
  646. VMSTATE_UINT32(csw.residue, MSDState),
  647. VMSTATE_UINT8(csw.status, MSDState),
  648. VMSTATE_END_OF_LIST()
  649. }
  650. };
  651. static Property msd_properties[] = {
  652. DEFINE_BLOCK_PROPERTIES(MSDState, conf),
  653. DEFINE_PROP_STRING("serial", MSDState, serial),
  654. DEFINE_PROP_BIT("removable", MSDState, removable, 0, false),
  655. DEFINE_PROP_END_OF_LIST(),
  656. };
  657. static void usb_msd_class_initfn_common(ObjectClass *klass)
  658. {
  659. DeviceClass *dc = DEVICE_CLASS(klass);
  660. USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
  661. uc->product_desc = "QEMU USB MSD";
  662. uc->usb_desc = &desc;
  663. uc->cancel_packet = usb_msd_cancel_io;
  664. uc->handle_attach = usb_desc_attach;
  665. uc->handle_reset = usb_msd_handle_reset;
  666. uc->handle_control = usb_msd_handle_control;
  667. uc->handle_data = usb_msd_handle_data;
  668. dc->fw_name = "storage";
  669. dc->vmsd = &vmstate_usb_msd;
  670. }
  671. static void usb_msd_class_initfn_storage(ObjectClass *klass, void *data)
  672. {
  673. DeviceClass *dc = DEVICE_CLASS(klass);
  674. USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
  675. uc->init = usb_msd_initfn_storage;
  676. dc->props = msd_properties;
  677. usb_msd_class_initfn_common(klass);
  678. }
  679. static void usb_msd_class_initfn_bot(ObjectClass *klass, void *data)
  680. {
  681. USBDeviceClass *uc = USB_DEVICE_CLASS(klass);
  682. uc->init = usb_msd_initfn_bot;
  683. usb_msd_class_initfn_common(klass);
  684. }
  685. static const TypeInfo msd_info = {
  686. .name = "usb-storage",
  687. .parent = TYPE_USB_DEVICE,
  688. .instance_size = sizeof(MSDState),
  689. .class_init = usb_msd_class_initfn_storage,
  690. };
  691. static const TypeInfo bot_info = {
  692. .name = "usb-bot",
  693. .parent = TYPE_USB_DEVICE,
  694. .instance_size = sizeof(MSDState),
  695. .class_init = usb_msd_class_initfn_bot,
  696. };
  697. static void usb_msd_register_types(void)
  698. {
  699. type_register_static(&msd_info);
  700. type_register_static(&bot_info);
  701. usb_legacy_register("usb-storage", "disk", usb_msd_init);
  702. }
  703. type_init(usb_msd_register_types)