xref: /openbmc/qemu/include/block/block_int.h (revision 88cd34ee)
1 /*
2  * QEMU System Emulator block driver
3  *
4  * Copyright (c) 2003 Fabrice Bellard
5  *
6  * Permission is hereby granted, free of charge, to any person obtaining a copy
7  * of this software and associated documentation files (the "Software"), to deal
8  * in the Software without restriction, including without limitation the rights
9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10  * copies of the Software, and to permit persons to whom the Software is
11  * furnished to do so, subject to the following conditions:
12  *
13  * The above copyright notice and this permission notice shall be included in
14  * all copies or substantial portions of the Software.
15  *
16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22  * THE SOFTWARE.
23  */
24 #ifndef BLOCK_INT_H
25 #define BLOCK_INT_H
26 
27 #include "block/accounting.h"
28 #include "block/block.h"
29 #include "block/aio-wait.h"
30 #include "qemu/queue.h"
31 #include "qemu/coroutine.h"
32 #include "qemu/stats64.h"
33 #include "qemu/timer.h"
34 #include "qemu/hbitmap.h"
35 #include "block/snapshot.h"
36 #include "qemu/throttle.h"
37 
38 #define BLOCK_FLAG_LAZY_REFCOUNTS   8
39 
40 #define BLOCK_OPT_SIZE              "size"
41 #define BLOCK_OPT_ENCRYPT           "encryption"
42 #define BLOCK_OPT_ENCRYPT_FORMAT    "encrypt.format"
43 #define BLOCK_OPT_COMPAT6           "compat6"
44 #define BLOCK_OPT_HWVERSION         "hwversion"
45 #define BLOCK_OPT_BACKING_FILE      "backing_file"
46 #define BLOCK_OPT_BACKING_FMT       "backing_fmt"
47 #define BLOCK_OPT_CLUSTER_SIZE      "cluster_size"
48 #define BLOCK_OPT_TABLE_SIZE        "table_size"
49 #define BLOCK_OPT_PREALLOC          "preallocation"
50 #define BLOCK_OPT_SUBFMT            "subformat"
51 #define BLOCK_OPT_COMPAT_LEVEL      "compat"
52 #define BLOCK_OPT_LAZY_REFCOUNTS    "lazy_refcounts"
53 #define BLOCK_OPT_ADAPTER_TYPE      "adapter_type"
54 #define BLOCK_OPT_REDUNDANCY        "redundancy"
55 #define BLOCK_OPT_NOCOW             "nocow"
56 #define BLOCK_OPT_OBJECT_SIZE       "object_size"
57 #define BLOCK_OPT_REFCOUNT_BITS     "refcount_bits"
58 #define BLOCK_OPT_DATA_FILE         "data_file"
59 #define BLOCK_OPT_DATA_FILE_RAW     "data_file_raw"
60 
61 #define BLOCK_PROBE_BUF_SIZE        512
62 
63 enum BdrvTrackedRequestType {
64     BDRV_TRACKED_READ,
65     BDRV_TRACKED_WRITE,
66     BDRV_TRACKED_DISCARD,
67     BDRV_TRACKED_TRUNCATE,
68 };
69 
70 typedef struct BdrvTrackedRequest {
71     BlockDriverState *bs;
72     int64_t offset;
73     uint64_t bytes;
74     enum BdrvTrackedRequestType type;
75 
76     bool serialising;
77     int64_t overlap_offset;
78     uint64_t overlap_bytes;
79 
80     QLIST_ENTRY(BdrvTrackedRequest) list;
81     Coroutine *co; /* owner, used for deadlock detection */
82     CoQueue wait_queue; /* coroutines blocked on this request */
83 
84     struct BdrvTrackedRequest *waiting_for;
85 } BdrvTrackedRequest;
86 
87 struct BlockDriver {
88     const char *format_name;
89     int instance_size;
90 
91     /* set to true if the BlockDriver is a block filter. Block filters pass
92      * certain callbacks that refer to data (see block.c) to their bs->file if
93      * the driver doesn't implement them. Drivers that do not wish to forward
94      * must implement them and return -ENOTSUP.
95      */
96     bool is_filter;
97     /*
98      * Return true if @to_replace can be replaced by a BDS with the
99      * same data as @bs without it affecting @bs's behavior (that is,
100      * without it being visible to @bs's parents).
101      */
102     bool (*bdrv_recurse_can_replace)(BlockDriverState *bs,
103                                      BlockDriverState *to_replace);
104 
105     int (*bdrv_probe)(const uint8_t *buf, int buf_size, const char *filename);
106     int (*bdrv_probe_device)(const char *filename);
107 
108     /* Any driver implementing this callback is expected to be able to handle
109      * NULL file names in its .bdrv_open() implementation */
110     void (*bdrv_parse_filename)(const char *filename, QDict *options, Error **errp);
111     /* Drivers not implementing bdrv_parse_filename nor bdrv_open should have
112      * this field set to true, except ones that are defined only by their
113      * child's bs.
114      * An example of the last type will be the quorum block driver.
115      */
116     bool bdrv_needs_filename;
117 
118     /* Set if a driver can support backing files */
119     bool supports_backing;
120 
121     /* For handling image reopen for split or non-split files */
122     int (*bdrv_reopen_prepare)(BDRVReopenState *reopen_state,
123                                BlockReopenQueue *queue, Error **errp);
124     void (*bdrv_reopen_commit)(BDRVReopenState *reopen_state);
125     void (*bdrv_reopen_abort)(BDRVReopenState *reopen_state);
126     void (*bdrv_join_options)(QDict *options, QDict *old_options);
127 
128     int (*bdrv_open)(BlockDriverState *bs, QDict *options, int flags,
129                      Error **errp);
130 
131     /* Protocol drivers should implement this instead of bdrv_open */
132     int (*bdrv_file_open)(BlockDriverState *bs, QDict *options, int flags,
133                           Error **errp);
134     void (*bdrv_close)(BlockDriverState *bs);
135     int coroutine_fn (*bdrv_co_create)(BlockdevCreateOptions *opts,
136                                        Error **errp);
137     int coroutine_fn (*bdrv_co_create_opts)(const char *filename,
138                                             QemuOpts *opts,
139                                             Error **errp);
140     int (*bdrv_make_empty)(BlockDriverState *bs);
141 
142     /*
143      * Refreshes the bs->exact_filename field. If that is impossible,
144      * bs->exact_filename has to be left empty.
145      */
146     void (*bdrv_refresh_filename)(BlockDriverState *bs);
147 
148     /*
149      * Gathers the open options for all children into @target.
150      * A simple format driver (without backing file support) might
151      * implement this function like this:
152      *
153      *     QINCREF(bs->file->bs->full_open_options);
154      *     qdict_put(target, "file", bs->file->bs->full_open_options);
155      *
156      * If not specified, the generic implementation will simply put
157      * all children's options under their respective name.
158      *
159      * @backing_overridden is true when bs->backing seems not to be
160      * the child that would result from opening bs->backing_file.
161      * Therefore, if it is true, the backing child's options should be
162      * gathered; otherwise, there is no need since the backing child
163      * is the one implied by the image header.
164      *
165      * Note that ideally this function would not be needed.  Every
166      * block driver which implements it is probably doing something
167      * shady regarding its runtime option structure.
168      */
169     void (*bdrv_gather_child_options)(BlockDriverState *bs, QDict *target,
170                                       bool backing_overridden);
171 
172     /*
173      * Returns an allocated string which is the directory name of this BDS: It
174      * will be used to make relative filenames absolute by prepending this
175      * function's return value to them.
176      */
177     char *(*bdrv_dirname)(BlockDriverState *bs, Error **errp);
178 
179     /* aio */
180     BlockAIOCB *(*bdrv_aio_preadv)(BlockDriverState *bs,
181         uint64_t offset, uint64_t bytes, QEMUIOVector *qiov, int flags,
182         BlockCompletionFunc *cb, void *opaque);
183     BlockAIOCB *(*bdrv_aio_pwritev)(BlockDriverState *bs,
184         uint64_t offset, uint64_t bytes, QEMUIOVector *qiov, int flags,
185         BlockCompletionFunc *cb, void *opaque);
186     BlockAIOCB *(*bdrv_aio_flush)(BlockDriverState *bs,
187         BlockCompletionFunc *cb, void *opaque);
188     BlockAIOCB *(*bdrv_aio_pdiscard)(BlockDriverState *bs,
189         int64_t offset, int bytes,
190         BlockCompletionFunc *cb, void *opaque);
191 
192     int coroutine_fn (*bdrv_co_readv)(BlockDriverState *bs,
193         int64_t sector_num, int nb_sectors, QEMUIOVector *qiov);
194 
195     /**
196      * @offset: position in bytes to read at
197      * @bytes: number of bytes to read
198      * @qiov: the buffers to fill with read data
199      * @flags: currently unused, always 0
200      *
201      * @offset and @bytes will be a multiple of 'request_alignment',
202      * but the length of individual @qiov elements does not have to
203      * be a multiple.
204      *
205      * @bytes will always equal the total size of @qiov, and will be
206      * no larger than 'max_transfer'.
207      *
208      * The buffer in @qiov may point directly to guest memory.
209      */
210     int coroutine_fn (*bdrv_co_preadv)(BlockDriverState *bs,
211         uint64_t offset, uint64_t bytes, QEMUIOVector *qiov, int flags);
212     int coroutine_fn (*bdrv_co_preadv_part)(BlockDriverState *bs,
213         uint64_t offset, uint64_t bytes,
214         QEMUIOVector *qiov, size_t qiov_offset, int flags);
215     int coroutine_fn (*bdrv_co_writev)(BlockDriverState *bs,
216         int64_t sector_num, int nb_sectors, QEMUIOVector *qiov, int flags);
217     /**
218      * @offset: position in bytes to write at
219      * @bytes: number of bytes to write
220      * @qiov: the buffers containing data to write
221      * @flags: zero or more bits allowed by 'supported_write_flags'
222      *
223      * @offset and @bytes will be a multiple of 'request_alignment',
224      * but the length of individual @qiov elements does not have to
225      * be a multiple.
226      *
227      * @bytes will always equal the total size of @qiov, and will be
228      * no larger than 'max_transfer'.
229      *
230      * The buffer in @qiov may point directly to guest memory.
231      */
232     int coroutine_fn (*bdrv_co_pwritev)(BlockDriverState *bs,
233         uint64_t offset, uint64_t bytes, QEMUIOVector *qiov, int flags);
234     int coroutine_fn (*bdrv_co_pwritev_part)(BlockDriverState *bs,
235         uint64_t offset, uint64_t bytes,
236         QEMUIOVector *qiov, size_t qiov_offset, int flags);
237 
238     /*
239      * Efficiently zero a region of the disk image.  Typically an image format
240      * would use a compact metadata representation to implement this.  This
241      * function pointer may be NULL or return -ENOSUP and .bdrv_co_writev()
242      * will be called instead.
243      */
244     int coroutine_fn (*bdrv_co_pwrite_zeroes)(BlockDriverState *bs,
245         int64_t offset, int bytes, BdrvRequestFlags flags);
246     int coroutine_fn (*bdrv_co_pdiscard)(BlockDriverState *bs,
247         int64_t offset, int bytes);
248 
249     /* Map [offset, offset + nbytes) range onto a child of @bs to copy from,
250      * and invoke bdrv_co_copy_range_from(child, ...), or invoke
251      * bdrv_co_copy_range_to() if @bs is the leaf child to copy data from.
252      *
253      * See the comment of bdrv_co_copy_range for the parameter and return value
254      * semantics.
255      */
256     int coroutine_fn (*bdrv_co_copy_range_from)(BlockDriverState *bs,
257                                                 BdrvChild *src,
258                                                 uint64_t offset,
259                                                 BdrvChild *dst,
260                                                 uint64_t dst_offset,
261                                                 uint64_t bytes,
262                                                 BdrvRequestFlags read_flags,
263                                                 BdrvRequestFlags write_flags);
264 
265     /* Map [offset, offset + nbytes) range onto a child of bs to copy data to,
266      * and invoke bdrv_co_copy_range_to(child, src, ...), or perform the copy
267      * operation if @bs is the leaf and @src has the same BlockDriver.  Return
268      * -ENOTSUP if @bs is the leaf but @src has a different BlockDriver.
269      *
270      * See the comment of bdrv_co_copy_range for the parameter and return value
271      * semantics.
272      */
273     int coroutine_fn (*bdrv_co_copy_range_to)(BlockDriverState *bs,
274                                               BdrvChild *src,
275                                               uint64_t src_offset,
276                                               BdrvChild *dst,
277                                               uint64_t dst_offset,
278                                               uint64_t bytes,
279                                               BdrvRequestFlags read_flags,
280                                               BdrvRequestFlags write_flags);
281 
282     /*
283      * Building block for bdrv_block_status[_above] and
284      * bdrv_is_allocated[_above].  The driver should answer only
285      * according to the current layer, and should only need to set
286      * BDRV_BLOCK_DATA, BDRV_BLOCK_ZERO, BDRV_BLOCK_OFFSET_VALID,
287      * and/or BDRV_BLOCK_RAW; if the current layer defers to a backing
288      * layer, the result should be 0 (and not BDRV_BLOCK_ZERO).  See
289      * block.h for the overall meaning of the bits.  As a hint, the
290      * flag want_zero is true if the caller cares more about precise
291      * mappings (favor accurate _OFFSET_VALID/_ZERO) or false for
292      * overall allocation (favor larger *pnum, perhaps by reporting
293      * _DATA instead of _ZERO).  The block layer guarantees input
294      * clamped to bdrv_getlength() and aligned to request_alignment,
295      * as well as non-NULL pnum, map, and file; in turn, the driver
296      * must return an error or set pnum to an aligned non-zero value.
297      */
298     int coroutine_fn (*bdrv_co_block_status)(BlockDriverState *bs,
299         bool want_zero, int64_t offset, int64_t bytes, int64_t *pnum,
300         int64_t *map, BlockDriverState **file);
301 
302     /*
303      * Invalidate any cached meta-data.
304      */
305     void coroutine_fn (*bdrv_co_invalidate_cache)(BlockDriverState *bs,
306                                                   Error **errp);
307     int (*bdrv_inactivate)(BlockDriverState *bs);
308 
309     /*
310      * Flushes all data for all layers by calling bdrv_co_flush for underlying
311      * layers, if needed. This function is needed for deterministic
312      * synchronization of the flush finishing callback.
313      */
314     int coroutine_fn (*bdrv_co_flush)(BlockDriverState *bs);
315 
316     /*
317      * Flushes all data that was already written to the OS all the way down to
318      * the disk (for example file-posix.c calls fsync()).
319      */
320     int coroutine_fn (*bdrv_co_flush_to_disk)(BlockDriverState *bs);
321 
322     /*
323      * Flushes all internal caches to the OS. The data may still sit in a
324      * writeback cache of the host OS, but it will survive a crash of the qemu
325      * process.
326      */
327     int coroutine_fn (*bdrv_co_flush_to_os)(BlockDriverState *bs);
328 
329     /*
330      * Drivers setting this field must be able to work with just a plain
331      * filename with '<protocol_name>:' as a prefix, and no other options.
332      * Options may be extracted from the filename by implementing
333      * bdrv_parse_filename.
334      */
335     const char *protocol_name;
336 
337     /*
338      * Truncate @bs to @offset bytes using the given @prealloc mode
339      * when growing.  Modes other than PREALLOC_MODE_OFF should be
340      * rejected when shrinking @bs.
341      *
342      * If @exact is true, @bs must be resized to exactly @offset.
343      * Otherwise, it is sufficient for @bs (if it is a host block
344      * device and thus there is no way to resize it) to be at least
345      * @offset bytes in length.
346      *
347      * If @exact is true and this function fails but would succeed
348      * with @exact = false, it should return -ENOTSUP.
349      */
350     int coroutine_fn (*bdrv_co_truncate)(BlockDriverState *bs, int64_t offset,
351                                          bool exact, PreallocMode prealloc,
352                                          Error **errp);
353 
354     int64_t (*bdrv_getlength)(BlockDriverState *bs);
355     bool has_variable_length;
356     int64_t (*bdrv_get_allocated_file_size)(BlockDriverState *bs);
357     BlockMeasureInfo *(*bdrv_measure)(QemuOpts *opts, BlockDriverState *in_bs,
358                                       Error **errp);
359 
360     int coroutine_fn (*bdrv_co_pwritev_compressed)(BlockDriverState *bs,
361         uint64_t offset, uint64_t bytes, QEMUIOVector *qiov);
362     int coroutine_fn (*bdrv_co_pwritev_compressed_part)(BlockDriverState *bs,
363         uint64_t offset, uint64_t bytes, QEMUIOVector *qiov,
364         size_t qiov_offset);
365 
366     int (*bdrv_snapshot_create)(BlockDriverState *bs,
367                                 QEMUSnapshotInfo *sn_info);
368     int (*bdrv_snapshot_goto)(BlockDriverState *bs,
369                               const char *snapshot_id);
370     int (*bdrv_snapshot_delete)(BlockDriverState *bs,
371                                 const char *snapshot_id,
372                                 const char *name,
373                                 Error **errp);
374     int (*bdrv_snapshot_list)(BlockDriverState *bs,
375                               QEMUSnapshotInfo **psn_info);
376     int (*bdrv_snapshot_load_tmp)(BlockDriverState *bs,
377                                   const char *snapshot_id,
378                                   const char *name,
379                                   Error **errp);
380     int (*bdrv_get_info)(BlockDriverState *bs, BlockDriverInfo *bdi);
381     ImageInfoSpecific *(*bdrv_get_specific_info)(BlockDriverState *bs,
382                                                  Error **errp);
383     BlockStatsSpecific *(*bdrv_get_specific_stats)(BlockDriverState *bs);
384 
385     int coroutine_fn (*bdrv_save_vmstate)(BlockDriverState *bs,
386                                           QEMUIOVector *qiov,
387                                           int64_t pos);
388     int coroutine_fn (*bdrv_load_vmstate)(BlockDriverState *bs,
389                                           QEMUIOVector *qiov,
390                                           int64_t pos);
391 
392     int (*bdrv_change_backing_file)(BlockDriverState *bs,
393         const char *backing_file, const char *backing_fmt);
394 
395     /* removable device specific */
396     bool (*bdrv_is_inserted)(BlockDriverState *bs);
397     void (*bdrv_eject)(BlockDriverState *bs, bool eject_flag);
398     void (*bdrv_lock_medium)(BlockDriverState *bs, bool locked);
399 
400     /* to control generic scsi devices */
401     BlockAIOCB *(*bdrv_aio_ioctl)(BlockDriverState *bs,
402         unsigned long int req, void *buf,
403         BlockCompletionFunc *cb, void *opaque);
404     int coroutine_fn (*bdrv_co_ioctl)(BlockDriverState *bs,
405                                       unsigned long int req, void *buf);
406 
407     /* List of options for creating images, terminated by name == NULL */
408     QemuOptsList *create_opts;
409     /*
410      * If this driver supports reopening images this contains a
411      * NULL-terminated list of the runtime options that can be
412      * modified. If an option in this list is unspecified during
413      * reopen then it _must_ be reset to its default value or return
414      * an error.
415      */
416     const char *const *mutable_opts;
417 
418     /*
419      * Returns 0 for completed check, -errno for internal errors.
420      * The check results are stored in result.
421      */
422     int coroutine_fn (*bdrv_co_check)(BlockDriverState *bs,
423                                       BdrvCheckResult *result,
424                                       BdrvCheckMode fix);
425 
426     int (*bdrv_amend_options)(BlockDriverState *bs, QemuOpts *opts,
427                               BlockDriverAmendStatusCB *status_cb,
428                               void *cb_opaque,
429                               Error **errp);
430 
431     void (*bdrv_debug_event)(BlockDriverState *bs, BlkdebugEvent event);
432 
433     /* TODO Better pass a option string/QDict/QemuOpts to add any rule? */
434     int (*bdrv_debug_breakpoint)(BlockDriverState *bs, const char *event,
435         const char *tag);
436     int (*bdrv_debug_remove_breakpoint)(BlockDriverState *bs,
437         const char *tag);
438     int (*bdrv_debug_resume)(BlockDriverState *bs, const char *tag);
439     bool (*bdrv_debug_is_suspended)(BlockDriverState *bs, const char *tag);
440 
441     void (*bdrv_refresh_limits)(BlockDriverState *bs, Error **errp);
442 
443     /*
444      * Returns 1 if newly created images are guaranteed to contain only
445      * zeros, 0 otherwise.
446      * Must return 0 if .bdrv_has_zero_init_truncate() returns 0.
447      */
448     int (*bdrv_has_zero_init)(BlockDriverState *bs);
449 
450     /*
451      * Returns 1 if new areas added by growing the image with
452      * PREALLOC_MODE_OFF contain only zeros, 0 otherwise.
453      */
454     int (*bdrv_has_zero_init_truncate)(BlockDriverState *bs);
455 
456     /* Remove fd handlers, timers, and other event loop callbacks so the event
457      * loop is no longer in use.  Called with no in-flight requests and in
458      * depth-first traversal order with parents before child nodes.
459      */
460     void (*bdrv_detach_aio_context)(BlockDriverState *bs);
461 
462     /* Add fd handlers, timers, and other event loop callbacks so I/O requests
463      * can be processed again.  Called with no in-flight requests and in
464      * depth-first traversal order with child nodes before parent nodes.
465      */
466     void (*bdrv_attach_aio_context)(BlockDriverState *bs,
467                                     AioContext *new_context);
468 
469     /* io queue for linux-aio */
470     void (*bdrv_io_plug)(BlockDriverState *bs);
471     void (*bdrv_io_unplug)(BlockDriverState *bs);
472 
473     /**
474      * Try to get @bs's logical and physical block size.
475      * On success, store them in @bsz and return zero.
476      * On failure, return negative errno.
477      */
478     int (*bdrv_probe_blocksizes)(BlockDriverState *bs, BlockSizes *bsz);
479     /**
480      * Try to get @bs's geometry (cyls, heads, sectors)
481      * On success, store them in @geo and return 0.
482      * On failure return -errno.
483      * Only drivers that want to override guest geometry implement this
484      * callback; see hd_geometry_guess().
485      */
486     int (*bdrv_probe_geometry)(BlockDriverState *bs, HDGeometry *geo);
487 
488     /**
489      * bdrv_co_drain_begin is called if implemented in the beginning of a
490      * drain operation to drain and stop any internal sources of requests in
491      * the driver.
492      * bdrv_co_drain_end is called if implemented at the end of the drain.
493      *
494      * They should be used by the driver to e.g. manage scheduled I/O
495      * requests, or toggle an internal state. After the end of the drain new
496      * requests will continue normally.
497      */
498     void coroutine_fn (*bdrv_co_drain_begin)(BlockDriverState *bs);
499     void coroutine_fn (*bdrv_co_drain_end)(BlockDriverState *bs);
500 
501     void (*bdrv_add_child)(BlockDriverState *parent, BlockDriverState *child,
502                            Error **errp);
503     void (*bdrv_del_child)(BlockDriverState *parent, BdrvChild *child,
504                            Error **errp);
505 
506     /**
507      * Informs the block driver that a permission change is intended. The
508      * driver checks whether the change is permissible and may take other
509      * preparations for the change (e.g. get file system locks). This operation
510      * is always followed either by a call to either .bdrv_set_perm or
511      * .bdrv_abort_perm_update.
512      *
513      * Checks whether the requested set of cumulative permissions in @perm
514      * can be granted for accessing @bs and whether no other users are using
515      * permissions other than those given in @shared (both arguments take
516      * BLK_PERM_* bitmasks).
517      *
518      * If both conditions are met, 0 is returned. Otherwise, -errno is returned
519      * and errp is set to an error describing the conflict.
520      */
521     int (*bdrv_check_perm)(BlockDriverState *bs, uint64_t perm,
522                            uint64_t shared, Error **errp);
523 
524     /**
525      * Called to inform the driver that the set of cumulative set of used
526      * permissions for @bs has changed to @perm, and the set of sharable
527      * permission to @shared. The driver can use this to propagate changes to
528      * its children (i.e. request permissions only if a parent actually needs
529      * them).
530      *
531      * This function is only invoked after bdrv_check_perm(), so block drivers
532      * may rely on preparations made in their .bdrv_check_perm implementation.
533      */
534     void (*bdrv_set_perm)(BlockDriverState *bs, uint64_t perm, uint64_t shared);
535 
536     /*
537      * Called to inform the driver that after a previous bdrv_check_perm()
538      * call, the permission update is not performed and any preparations made
539      * for it (e.g. taken file locks) need to be undone.
540      *
541      * This function can be called even for nodes that never saw a
542      * bdrv_check_perm() call. It is a no-op then.
543      */
544     void (*bdrv_abort_perm_update)(BlockDriverState *bs);
545 
546     /**
547      * Returns in @nperm and @nshared the permissions that the driver for @bs
548      * needs on its child @c, based on the cumulative permissions requested by
549      * the parents in @parent_perm and @parent_shared.
550      *
551      * If @c is NULL, return the permissions for attaching a new child for the
552      * given @role.
553      *
554      * If @reopen_queue is non-NULL, don't return the currently needed
555      * permissions, but those that will be needed after applying the
556      * @reopen_queue.
557      */
558      void (*bdrv_child_perm)(BlockDriverState *bs, BdrvChild *c,
559                              const BdrvChildRole *role,
560                              BlockReopenQueue *reopen_queue,
561                              uint64_t parent_perm, uint64_t parent_shared,
562                              uint64_t *nperm, uint64_t *nshared);
563 
564     bool (*bdrv_co_can_store_new_dirty_bitmap)(BlockDriverState *bs,
565                                                const char *name,
566                                                uint32_t granularity,
567                                                Error **errp);
568     int (*bdrv_co_remove_persistent_dirty_bitmap)(BlockDriverState *bs,
569                                                   const char *name,
570                                                   Error **errp);
571 
572     /**
573      * Register/unregister a buffer for I/O. For example, when the driver is
574      * interested to know the memory areas that will later be used in iovs, so
575      * that it can do IOMMU mapping with VFIO etc., in order to get better
576      * performance. In the case of VFIO drivers, this callback is used to do
577      * DMA mapping for hot buffers.
578      */
579     void (*bdrv_register_buf)(BlockDriverState *bs, void *host, size_t size);
580     void (*bdrv_unregister_buf)(BlockDriverState *bs, void *host);
581     QLIST_ENTRY(BlockDriver) list;
582 
583     /* Pointer to a NULL-terminated array of names of strong options
584      * that can be specified for bdrv_open(). A strong option is one
585      * that changes the data of a BDS.
586      * If this pointer is NULL, the array is considered empty.
587      * "filename" and "driver" are always considered strong. */
588     const char *const *strong_runtime_opts;
589 };
590 
591 static inline bool block_driver_can_compress(BlockDriver *drv)
592 {
593     return drv->bdrv_co_pwritev_compressed ||
594            drv->bdrv_co_pwritev_compressed_part;
595 }
596 
597 typedef struct BlockLimits {
598     /* Alignment requirement, in bytes, for offset/length of I/O
599      * requests. Must be a power of 2 less than INT_MAX; defaults to
600      * 1 for drivers with modern byte interfaces, and to 512
601      * otherwise. */
602     uint32_t request_alignment;
603 
604     /* Maximum number of bytes that can be discarded at once (since it
605      * is signed, it must be < 2G, if set). Must be multiple of
606      * pdiscard_alignment, but need not be power of 2. May be 0 if no
607      * inherent 32-bit limit */
608     int32_t max_pdiscard;
609 
610     /* Optimal alignment for discard requests in bytes. A power of 2
611      * is best but not mandatory.  Must be a multiple of
612      * bl.request_alignment, and must be less than max_pdiscard if
613      * that is set. May be 0 if bl.request_alignment is good enough */
614     uint32_t pdiscard_alignment;
615 
616     /* Maximum number of bytes that can zeroized at once (since it is
617      * signed, it must be < 2G, if set). Must be multiple of
618      * pwrite_zeroes_alignment. May be 0 if no inherent 32-bit limit */
619     int32_t max_pwrite_zeroes;
620 
621     /* Optimal alignment for write zeroes requests in bytes. A power
622      * of 2 is best but not mandatory.  Must be a multiple of
623      * bl.request_alignment, and must be less than max_pwrite_zeroes
624      * if that is set. May be 0 if bl.request_alignment is good
625      * enough */
626     uint32_t pwrite_zeroes_alignment;
627 
628     /* Optimal transfer length in bytes.  A power of 2 is best but not
629      * mandatory.  Must be a multiple of bl.request_alignment, or 0 if
630      * no preferred size */
631     uint32_t opt_transfer;
632 
633     /* Maximal transfer length in bytes.  Need not be power of 2, but
634      * must be multiple of opt_transfer and bl.request_alignment, or 0
635      * for no 32-bit limit.  For now, anything larger than INT_MAX is
636      * clamped down. */
637     uint32_t max_transfer;
638 
639     /* memory alignment, in bytes so that no bounce buffer is needed */
640     size_t min_mem_alignment;
641 
642     /* memory alignment, in bytes, for bounce buffer */
643     size_t opt_mem_alignment;
644 
645     /* maximum number of iovec elements */
646     int max_iov;
647 } BlockLimits;
648 
649 typedef struct BdrvOpBlocker BdrvOpBlocker;
650 
651 typedef struct BdrvAioNotifier {
652     void (*attached_aio_context)(AioContext *new_context, void *opaque);
653     void (*detach_aio_context)(void *opaque);
654 
655     void *opaque;
656     bool deleted;
657 
658     QLIST_ENTRY(BdrvAioNotifier) list;
659 } BdrvAioNotifier;
660 
661 struct BdrvChildRole {
662     /* If true, bdrv_replace_node() doesn't change the node this BdrvChild
663      * points to. */
664     bool stay_at_node;
665 
666     /* If true, the parent is a BlockDriverState and bdrv_next_all_states()
667      * will return it. This information is used for drain_all, where every node
668      * will be drained separately, so the drain only needs to be propagated to
669      * non-BDS parents. */
670     bool parent_is_bds;
671 
672     void (*inherit_options)(int *child_flags, QDict *child_options,
673                             int parent_flags, QDict *parent_options);
674 
675     void (*change_media)(BdrvChild *child, bool load);
676     void (*resize)(BdrvChild *child);
677 
678     /* Returns a name that is supposedly more useful for human users than the
679      * node name for identifying the node in question (in particular, a BB
680      * name), or NULL if the parent can't provide a better name. */
681     const char *(*get_name)(BdrvChild *child);
682 
683     /* Returns a malloced string that describes the parent of the child for a
684      * human reader. This could be a node-name, BlockBackend name, qdev ID or
685      * QOM path of the device owning the BlockBackend, job type and ID etc. The
686      * caller is responsible for freeing the memory. */
687     char *(*get_parent_desc)(BdrvChild *child);
688 
689     /*
690      * If this pair of functions is implemented, the parent doesn't issue new
691      * requests after returning from .drained_begin() until .drained_end() is
692      * called.
693      *
694      * These functions must not change the graph (and therefore also must not
695      * call aio_poll(), which could change the graph indirectly).
696      *
697      * If drained_end() schedules background operations, it must atomically
698      * increment *drained_end_counter for each such operation and atomically
699      * decrement it once the operation has settled.
700      *
701      * Note that this can be nested. If drained_begin() was called twice, new
702      * I/O is allowed only after drained_end() was called twice, too.
703      */
704     void (*drained_begin)(BdrvChild *child);
705     void (*drained_end)(BdrvChild *child, int *drained_end_counter);
706 
707     /*
708      * Returns whether the parent has pending requests for the child. This
709      * callback is polled after .drained_begin() has been called until all
710      * activity on the child has stopped.
711      */
712     bool (*drained_poll)(BdrvChild *child);
713 
714     /* Notifies the parent that the child has been activated/inactivated (e.g.
715      * when migration is completing) and it can start/stop requesting
716      * permissions and doing I/O on it. */
717     void (*activate)(BdrvChild *child, Error **errp);
718     int (*inactivate)(BdrvChild *child);
719 
720     void (*attach)(BdrvChild *child);
721     void (*detach)(BdrvChild *child);
722 
723     /* Notifies the parent that the filename of its child has changed (e.g.
724      * because the direct child was removed from the backing chain), so that it
725      * can update its reference. */
726     int (*update_filename)(BdrvChild *child, BlockDriverState *new_base,
727                            const char *filename, Error **errp);
728 
729     bool (*can_set_aio_ctx)(BdrvChild *child, AioContext *ctx,
730                             GSList **ignore, Error **errp);
731     void (*set_aio_ctx)(BdrvChild *child, AioContext *ctx, GSList **ignore);
732 };
733 
734 extern const BdrvChildRole child_file;
735 extern const BdrvChildRole child_format;
736 extern const BdrvChildRole child_backing;
737 
738 struct BdrvChild {
739     BlockDriverState *bs;
740     char *name;
741     const BdrvChildRole *role;
742     void *opaque;
743 
744     /**
745      * Granted permissions for operating on this BdrvChild (BLK_PERM_* bitmask)
746      */
747     uint64_t perm;
748 
749     /**
750      * Permissions that can still be granted to other users of @bs while this
751      * BdrvChild is still attached to it. (BLK_PERM_* bitmask)
752      */
753     uint64_t shared_perm;
754 
755     /* backup of permissions during permission update procedure */
756     bool has_backup_perm;
757     uint64_t backup_perm;
758     uint64_t backup_shared_perm;
759 
760     /*
761      * This link is frozen: the child can neither be replaced nor
762      * detached from the parent.
763      */
764     bool frozen;
765 
766     /*
767      * How many times the parent of this child has been drained
768      * (through role->drained_*).
769      * Usually, this is equal to bs->quiesce_counter (potentially
770      * reduced by bdrv_drain_all_count).  It may differ while the
771      * child is entering or leaving a drained section.
772      */
773     int parent_quiesce_counter;
774 
775     QLIST_ENTRY(BdrvChild) next;
776     QLIST_ENTRY(BdrvChild) next_parent;
777 };
778 
779 /*
780  * Note: the function bdrv_append() copies and swaps contents of
781  * BlockDriverStates, so if you add new fields to this struct, please
782  * inspect bdrv_append() to determine if the new fields need to be
783  * copied as well.
784  */
785 struct BlockDriverState {
786     /* Protected by big QEMU lock or read-only after opening.  No special
787      * locking needed during I/O...
788      */
789     int open_flags; /* flags used to open the file, re-used for re-open */
790     bool read_only; /* if true, the media is read only */
791     bool encrypted; /* if true, the media is encrypted */
792     bool sg;        /* if true, the device is a /dev/sg* */
793     bool probed;    /* if true, format was probed rather than specified */
794     bool force_share; /* if true, always allow all shared permissions */
795     bool implicit;  /* if true, this filter node was automatically inserted */
796 
797     BlockDriver *drv; /* NULL means no media */
798     void *opaque;
799 
800     AioContext *aio_context; /* event loop used for fd handlers, timers, etc */
801     /* long-running tasks intended to always use the same AioContext as this
802      * BDS may register themselves in this list to be notified of changes
803      * regarding this BDS's context */
804     QLIST_HEAD(, BdrvAioNotifier) aio_notifiers;
805     bool walking_aio_notifiers; /* to make removal during iteration safe */
806 
807     char filename[PATH_MAX];
808     char backing_file[PATH_MAX]; /* if non zero, the image is a diff of
809                                     this file image */
810     /* The backing filename indicated by the image header; if we ever
811      * open this file, then this is replaced by the resulting BDS's
812      * filename (i.e. after a bdrv_refresh_filename() run). */
813     char auto_backing_file[PATH_MAX];
814     char backing_format[16]; /* if non-zero and backing_file exists */
815 
816     QDict *full_open_options;
817     char exact_filename[PATH_MAX];
818 
819     BdrvChild *backing;
820     BdrvChild *file;
821 
822     /* I/O Limits */
823     BlockLimits bl;
824 
825     /* Flags honored during pwrite (so far: BDRV_REQ_FUA,
826      * BDRV_REQ_WRITE_UNCHANGED).
827      * If a driver does not support BDRV_REQ_WRITE_UNCHANGED, those
828      * writes will be issued as normal writes without the flag set.
829      * This is important to note for drivers that do not explicitly
830      * request a WRITE permission for their children and instead take
831      * the same permissions as their parent did (this is commonly what
832      * block filters do).  Such drivers have to be aware that the
833      * parent may have taken a WRITE_UNCHANGED permission only and is
834      * issuing such requests.  Drivers either must make sure that
835      * these requests do not result in plain WRITE accesses (usually
836      * by supporting BDRV_REQ_WRITE_UNCHANGED, and then forwarding
837      * every incoming write request as-is, including potentially that
838      * flag), or they have to explicitly take the WRITE permission for
839      * their children. */
840     unsigned int supported_write_flags;
841     /* Flags honored during pwrite_zeroes (so far: BDRV_REQ_FUA,
842      * BDRV_REQ_MAY_UNMAP, BDRV_REQ_WRITE_UNCHANGED) */
843     unsigned int supported_zero_flags;
844 
845     /* the following member gives a name to every node on the bs graph. */
846     char node_name[32];
847     /* element of the list of named nodes building the graph */
848     QTAILQ_ENTRY(BlockDriverState) node_list;
849     /* element of the list of all BlockDriverStates (all_bdrv_states) */
850     QTAILQ_ENTRY(BlockDriverState) bs_list;
851     /* element of the list of monitor-owned BDS */
852     QTAILQ_ENTRY(BlockDriverState) monitor_list;
853     int refcnt;
854 
855     /* operation blockers */
856     QLIST_HEAD(, BdrvOpBlocker) op_blockers[BLOCK_OP_TYPE_MAX];
857 
858     /* The node that this node inherited default options from (and a reopen on
859      * which can affect this node by changing these defaults). This is always a
860      * parent node of this node. */
861     BlockDriverState *inherits_from;
862     QLIST_HEAD(, BdrvChild) children;
863     QLIST_HEAD(, BdrvChild) parents;
864 
865     QDict *options;
866     QDict *explicit_options;
867     BlockdevDetectZeroesOptions detect_zeroes;
868 
869     /* The error object in use for blocking operations on backing_hd */
870     Error *backing_blocker;
871 
872     /* Protected by AioContext lock */
873 
874     /* If we are reading a disk image, give its size in sectors.
875      * Generally read-only; it is written to by load_snapshot and
876      * save_snaphost, but the block layer is quiescent during those.
877      */
878     int64_t total_sectors;
879 
880     /* Callback before write request is processed */
881     NotifierWithReturnList before_write_notifiers;
882 
883     /* threshold limit for writes, in bytes. "High water mark". */
884     uint64_t write_threshold_offset;
885     NotifierWithReturn write_threshold_notifier;
886 
887     /* Writing to the list requires the BQL _and_ the dirty_bitmap_mutex.
888      * Reading from the list can be done with either the BQL or the
889      * dirty_bitmap_mutex.  Modifying a bitmap only requires
890      * dirty_bitmap_mutex.  */
891     QemuMutex dirty_bitmap_mutex;
892     QLIST_HEAD(, BdrvDirtyBitmap) dirty_bitmaps;
893 
894     /* Offset after the highest byte written to */
895     Stat64 wr_highest_offset;
896 
897     /* If true, copy read backing sectors into image.  Can be >1 if more
898      * than one client has requested copy-on-read.  Accessed with atomic
899      * ops.
900      */
901     int copy_on_read;
902 
903     /* number of in-flight requests; overall and serialising.
904      * Accessed with atomic ops.
905      */
906     unsigned int in_flight;
907     unsigned int serialising_in_flight;
908 
909     /* counter for nested bdrv_io_plug.
910      * Accessed with atomic ops.
911     */
912     unsigned io_plugged;
913 
914     /* do we need to tell the quest if we have a volatile write cache? */
915     int enable_write_cache;
916 
917     /* Accessed with atomic ops.  */
918     int quiesce_counter;
919     int recursive_quiesce_counter;
920 
921     unsigned int write_gen;               /* Current data generation */
922 
923     /* Protected by reqs_lock.  */
924     CoMutex reqs_lock;
925     QLIST_HEAD(, BdrvTrackedRequest) tracked_requests;
926     CoQueue flush_queue;                  /* Serializing flush queue */
927     bool active_flush_req;                /* Flush request in flight? */
928 
929     /* Only read/written by whoever has set active_flush_req to true.  */
930     unsigned int flushed_gen;             /* Flushed write generation */
931 
932     /* BdrvChild links to this node may never be frozen */
933     bool never_freeze;
934 };
935 
936 struct BlockBackendRootState {
937     int open_flags;
938     bool read_only;
939     BlockdevDetectZeroesOptions detect_zeroes;
940 };
941 
942 typedef enum BlockMirrorBackingMode {
943     /* Reuse the existing backing chain from the source for the target.
944      * - sync=full: Set backing BDS to NULL.
945      * - sync=top:  Use source's backing BDS.
946      * - sync=none: Use source as the backing BDS. */
947     MIRROR_SOURCE_BACKING_CHAIN,
948 
949     /* Open the target's backing chain completely anew */
950     MIRROR_OPEN_BACKING_CHAIN,
951 
952     /* Do not change the target's backing BDS after job completion */
953     MIRROR_LEAVE_BACKING_CHAIN,
954 } BlockMirrorBackingMode;
955 
956 static inline BlockDriverState *backing_bs(BlockDriverState *bs)
957 {
958     return bs->backing ? bs->backing->bs : NULL;
959 }
960 
961 
962 /* Essential block drivers which must always be statically linked into qemu, and
963  * which therefore can be accessed without using bdrv_find_format() */
964 extern BlockDriver bdrv_file;
965 extern BlockDriver bdrv_raw;
966 extern BlockDriver bdrv_qcow2;
967 
968 int coroutine_fn bdrv_co_preadv(BdrvChild *child,
969     int64_t offset, unsigned int bytes, QEMUIOVector *qiov,
970     BdrvRequestFlags flags);
971 int coroutine_fn bdrv_co_preadv_part(BdrvChild *child,
972     int64_t offset, unsigned int bytes,
973     QEMUIOVector *qiov, size_t qiov_offset, BdrvRequestFlags flags);
974 int coroutine_fn bdrv_co_pwritev(BdrvChild *child,
975     int64_t offset, unsigned int bytes, QEMUIOVector *qiov,
976     BdrvRequestFlags flags);
977 int coroutine_fn bdrv_co_pwritev_part(BdrvChild *child,
978     int64_t offset, unsigned int bytes,
979     QEMUIOVector *qiov, size_t qiov_offset, BdrvRequestFlags flags);
980 
981 static inline int coroutine_fn bdrv_co_pread(BdrvChild *child,
982     int64_t offset, unsigned int bytes, void *buf, BdrvRequestFlags flags)
983 {
984     QEMUIOVector qiov = QEMU_IOVEC_INIT_BUF(qiov, buf, bytes);
985 
986     return bdrv_co_preadv(child, offset, bytes, &qiov, flags);
987 }
988 
989 static inline int coroutine_fn bdrv_co_pwrite(BdrvChild *child,
990     int64_t offset, unsigned int bytes, void *buf, BdrvRequestFlags flags)
991 {
992     QEMUIOVector qiov = QEMU_IOVEC_INIT_BUF(qiov, buf, bytes);
993 
994     return bdrv_co_pwritev(child, offset, bytes, &qiov, flags);
995 }
996 
997 extern unsigned int bdrv_drain_all_count;
998 void bdrv_apply_subtree_drain(BdrvChild *child, BlockDriverState *new_parent);
999 void bdrv_unapply_subtree_drain(BdrvChild *child, BlockDriverState *old_parent);
1000 
1001 bool coroutine_fn bdrv_mark_request_serialising(BdrvTrackedRequest *req, uint64_t align);
1002 BdrvTrackedRequest *coroutine_fn bdrv_co_get_self_request(BlockDriverState *bs);
1003 
1004 int get_tmp_filename(char *filename, int size);
1005 BlockDriver *bdrv_probe_all(const uint8_t *buf, int buf_size,
1006                             const char *filename);
1007 
1008 void bdrv_parse_filename_strip_prefix(const char *filename, const char *prefix,
1009                                       QDict *options);
1010 
1011 
1012 /**
1013  * bdrv_add_before_write_notifier:
1014  *
1015  * Register a callback that is invoked before write requests are processed but
1016  * after any throttling or waiting for overlapping requests.
1017  */
1018 void bdrv_add_before_write_notifier(BlockDriverState *bs,
1019                                     NotifierWithReturn *notifier);
1020 
1021 /**
1022  * bdrv_add_aio_context_notifier:
1023  *
1024  * If a long-running job intends to be always run in the same AioContext as a
1025  * certain BDS, it may use this function to be notified of changes regarding the
1026  * association of the BDS to an AioContext.
1027  *
1028  * attached_aio_context() is called after the target BDS has been attached to a
1029  * new AioContext; detach_aio_context() is called before the target BDS is being
1030  * detached from its old AioContext.
1031  */
1032 void bdrv_add_aio_context_notifier(BlockDriverState *bs,
1033         void (*attached_aio_context)(AioContext *new_context, void *opaque),
1034         void (*detach_aio_context)(void *opaque), void *opaque);
1035 
1036 /**
1037  * bdrv_remove_aio_context_notifier:
1038  *
1039  * Unsubscribe of change notifications regarding the BDS's AioContext. The
1040  * parameters given here have to be the same as those given to
1041  * bdrv_add_aio_context_notifier().
1042  */
1043 void bdrv_remove_aio_context_notifier(BlockDriverState *bs,
1044                                       void (*aio_context_attached)(AioContext *,
1045                                                                    void *),
1046                                       void (*aio_context_detached)(void *),
1047                                       void *opaque);
1048 
1049 /**
1050  * bdrv_wakeup:
1051  * @bs: The BlockDriverState for which an I/O operation has been completed.
1052  *
1053  * Wake up the main thread if it is waiting on BDRV_POLL_WHILE.  During
1054  * synchronous I/O on a BlockDriverState that is attached to another
1055  * I/O thread, the main thread lets the I/O thread's event loop run,
1056  * waiting for the I/O operation to complete.  A bdrv_wakeup will wake
1057  * up the main thread if necessary.
1058  *
1059  * Manual calls to bdrv_wakeup are rarely necessary, because
1060  * bdrv_dec_in_flight already calls it.
1061  */
1062 void bdrv_wakeup(BlockDriverState *bs);
1063 
1064 #ifdef _WIN32
1065 int is_windows_drive(const char *filename);
1066 #endif
1067 
1068 /**
1069  * stream_start:
1070  * @job_id: The id of the newly-created job, or %NULL to use the
1071  * device name of @bs.
1072  * @bs: Block device to operate on.
1073  * @base: Block device that will become the new base, or %NULL to
1074  * flatten the whole backing file chain onto @bs.
1075  * @backing_file_str: The file name that will be written to @bs as the
1076  * the new backing file if the job completes. Ignored if @base is %NULL.
1077  * @creation_flags: Flags that control the behavior of the Job lifetime.
1078  *                  See @BlockJobCreateFlags
1079  * @speed: The maximum speed, in bytes per second, or 0 for unlimited.
1080  * @on_error: The action to take upon error.
1081  * @errp: Error object.
1082  *
1083  * Start a streaming operation on @bs.  Clusters that are unallocated
1084  * in @bs, but allocated in any image between @base and @bs (both
1085  * exclusive) will be written to @bs.  At the end of a successful
1086  * streaming job, the backing file of @bs will be changed to
1087  * @backing_file_str in the written image and to @base in the live
1088  * BlockDriverState.
1089  */
1090 void stream_start(const char *job_id, BlockDriverState *bs,
1091                   BlockDriverState *base, const char *backing_file_str,
1092                   int creation_flags, int64_t speed,
1093                   BlockdevOnError on_error, Error **errp);
1094 
1095 /**
1096  * commit_start:
1097  * @job_id: The id of the newly-created job, or %NULL to use the
1098  * device name of @bs.
1099  * @bs: Active block device.
1100  * @top: Top block device to be committed.
1101  * @base: Block device that will be written into, and become the new top.
1102  * @creation_flags: Flags that control the behavior of the Job lifetime.
1103  *                  See @BlockJobCreateFlags
1104  * @speed: The maximum speed, in bytes per second, or 0 for unlimited.
1105  * @on_error: The action to take upon error.
1106  * @backing_file_str: String to use as the backing file in @top's overlay
1107  * @filter_node_name: The node name that should be assigned to the filter
1108  * driver that the commit job inserts into the graph above @top. NULL means
1109  * that a node name should be autogenerated.
1110  * @errp: Error object.
1111  *
1112  */
1113 void commit_start(const char *job_id, BlockDriverState *bs,
1114                   BlockDriverState *base, BlockDriverState *top,
1115                   int creation_flags, int64_t speed,
1116                   BlockdevOnError on_error, const char *backing_file_str,
1117                   const char *filter_node_name, Error **errp);
1118 /**
1119  * commit_active_start:
1120  * @job_id: The id of the newly-created job, or %NULL to use the
1121  * device name of @bs.
1122  * @bs: Active block device to be committed.
1123  * @base: Block device that will be written into, and become the new top.
1124  * @creation_flags: Flags that control the behavior of the Job lifetime.
1125  *                  See @BlockJobCreateFlags
1126  * @speed: The maximum speed, in bytes per second, or 0 for unlimited.
1127  * @on_error: The action to take upon error.
1128  * @filter_node_name: The node name that should be assigned to the filter
1129  * driver that the commit job inserts into the graph above @bs. NULL means that
1130  * a node name should be autogenerated.
1131  * @cb: Completion function for the job.
1132  * @opaque: Opaque pointer value passed to @cb.
1133  * @auto_complete: Auto complete the job.
1134  * @errp: Error object.
1135  *
1136  */
1137 BlockJob *commit_active_start(const char *job_id, BlockDriverState *bs,
1138                               BlockDriverState *base, int creation_flags,
1139                               int64_t speed, BlockdevOnError on_error,
1140                               const char *filter_node_name,
1141                               BlockCompletionFunc *cb, void *opaque,
1142                               bool auto_complete, Error **errp);
1143 /*
1144  * mirror_start:
1145  * @job_id: The id of the newly-created job, or %NULL to use the
1146  * device name of @bs.
1147  * @bs: Block device to operate on.
1148  * @target: Block device to write to.
1149  * @replaces: Block graph node name to replace once the mirror is done. Can
1150  *            only be used when full mirroring is selected.
1151  * @creation_flags: Flags that control the behavior of the Job lifetime.
1152  *                  See @BlockJobCreateFlags
1153  * @speed: The maximum speed, in bytes per second, or 0 for unlimited.
1154  * @granularity: The chosen granularity for the dirty bitmap.
1155  * @buf_size: The amount of data that can be in flight at one time.
1156  * @mode: Whether to collapse all images in the chain to the target.
1157  * @backing_mode: How to establish the target's backing chain after completion.
1158  * @zero_target: Whether the target should be explicitly zero-initialized
1159  * @on_source_error: The action to take upon error reading from the source.
1160  * @on_target_error: The action to take upon error writing to the target.
1161  * @unmap: Whether to unmap target where source sectors only contain zeroes.
1162  * @filter_node_name: The node name that should be assigned to the filter
1163  * driver that the mirror job inserts into the graph above @bs. NULL means that
1164  * a node name should be autogenerated.
1165  * @copy_mode: When to trigger writes to the target.
1166  * @errp: Error object.
1167  *
1168  * Start a mirroring operation on @bs.  Clusters that are allocated
1169  * in @bs will be written to @target until the job is cancelled or
1170  * manually completed.  At the end of a successful mirroring job,
1171  * @bs will be switched to read from @target.
1172  */
1173 void mirror_start(const char *job_id, BlockDriverState *bs,
1174                   BlockDriverState *target, const char *replaces,
1175                   int creation_flags, int64_t speed,
1176                   uint32_t granularity, int64_t buf_size,
1177                   MirrorSyncMode mode, BlockMirrorBackingMode backing_mode,
1178                   bool zero_target,
1179                   BlockdevOnError on_source_error,
1180                   BlockdevOnError on_target_error,
1181                   bool unmap, const char *filter_node_name,
1182                   MirrorCopyMode copy_mode, Error **errp);
1183 
1184 /*
1185  * backup_job_create:
1186  * @job_id: The id of the newly-created job, or %NULL to use the
1187  * device name of @bs.
1188  * @bs: Block device to operate on.
1189  * @target: Block device to write to.
1190  * @speed: The maximum speed, in bytes per second, or 0 for unlimited.
1191  * @sync_mode: What parts of the disk image should be copied to the destination.
1192  * @sync_bitmap: The dirty bitmap if sync_mode is 'bitmap' or 'incremental'
1193  * @bitmap_mode: The bitmap synchronization policy to use.
1194  * @on_source_error: The action to take upon error reading from the source.
1195  * @on_target_error: The action to take upon error writing to the target.
1196  * @creation_flags: Flags that control the behavior of the Job lifetime.
1197  *                  See @BlockJobCreateFlags
1198  * @cb: Completion function for the job.
1199  * @opaque: Opaque pointer value passed to @cb.
1200  * @txn: Transaction that this job is part of (may be NULL).
1201  *
1202  * Create a backup operation on @bs.  Clusters in @bs are written to @target
1203  * until the job is cancelled or manually completed.
1204  */
1205 BlockJob *backup_job_create(const char *job_id, BlockDriverState *bs,
1206                             BlockDriverState *target, int64_t speed,
1207                             MirrorSyncMode sync_mode,
1208                             BdrvDirtyBitmap *sync_bitmap,
1209                             BitmapSyncMode bitmap_mode,
1210                             bool compress,
1211                             const char *filter_node_name,
1212                             BlockdevOnError on_source_error,
1213                             BlockdevOnError on_target_error,
1214                             int creation_flags,
1215                             BlockCompletionFunc *cb, void *opaque,
1216                             JobTxn *txn, Error **errp);
1217 
1218 void hmp_drive_add_node(Monitor *mon, const char *optstr);
1219 
1220 BdrvChild *bdrv_root_attach_child(BlockDriverState *child_bs,
1221                                   const char *child_name,
1222                                   const BdrvChildRole *child_role,
1223                                   AioContext *ctx,
1224                                   uint64_t perm, uint64_t shared_perm,
1225                                   void *opaque, Error **errp);
1226 void bdrv_root_unref_child(BdrvChild *child);
1227 
1228 /**
1229  * Sets a BdrvChild's permissions.  Avoid if the parent is a BDS; use
1230  * bdrv_child_refresh_perms() instead and make the parent's
1231  * .bdrv_child_perm() implementation return the correct values.
1232  */
1233 int bdrv_child_try_set_perm(BdrvChild *c, uint64_t perm, uint64_t shared,
1234                             Error **errp);
1235 
1236 /**
1237  * Calls bs->drv->bdrv_child_perm() and updates the child's permission
1238  * masks with the result.
1239  * Drivers should invoke this function whenever an event occurs that
1240  * makes their .bdrv_child_perm() implementation return different
1241  * values than before, but which will not result in the block layer
1242  * automatically refreshing the permissions.
1243  */
1244 int bdrv_child_refresh_perms(BlockDriverState *bs, BdrvChild *c, Error **errp);
1245 
1246 /* Default implementation for BlockDriver.bdrv_child_perm() that can be used by
1247  * block filters: Forward CONSISTENT_READ, WRITE, WRITE_UNCHANGED and RESIZE to
1248  * all children */
1249 void bdrv_filter_default_perms(BlockDriverState *bs, BdrvChild *c,
1250                                const BdrvChildRole *role,
1251                                BlockReopenQueue *reopen_queue,
1252                                uint64_t perm, uint64_t shared,
1253                                uint64_t *nperm, uint64_t *nshared);
1254 
1255 /* Default implementation for BlockDriver.bdrv_child_perm() that can be used by
1256  * (non-raw) image formats: Like above for bs->backing, but for bs->file it
1257  * requires WRITE | RESIZE for read-write images, always requires
1258  * CONSISTENT_READ and doesn't share WRITE. */
1259 void bdrv_format_default_perms(BlockDriverState *bs, BdrvChild *c,
1260                                const BdrvChildRole *role,
1261                                BlockReopenQueue *reopen_queue,
1262                                uint64_t perm, uint64_t shared,
1263                                uint64_t *nperm, uint64_t *nshared);
1264 
1265 bool bdrv_recurse_can_replace(BlockDriverState *bs,
1266                               BlockDriverState *to_replace);
1267 
1268 /*
1269  * Default implementation for drivers to pass bdrv_co_block_status() to
1270  * their file.
1271  */
1272 int coroutine_fn bdrv_co_block_status_from_file(BlockDriverState *bs,
1273                                                 bool want_zero,
1274                                                 int64_t offset,
1275                                                 int64_t bytes,
1276                                                 int64_t *pnum,
1277                                                 int64_t *map,
1278                                                 BlockDriverState **file);
1279 /*
1280  * Default implementation for drivers to pass bdrv_co_block_status() to
1281  * their backing file.
1282  */
1283 int coroutine_fn bdrv_co_block_status_from_backing(BlockDriverState *bs,
1284                                                    bool want_zero,
1285                                                    int64_t offset,
1286                                                    int64_t bytes,
1287                                                    int64_t *pnum,
1288                                                    int64_t *map,
1289                                                    BlockDriverState **file);
1290 const char *bdrv_get_parent_name(const BlockDriverState *bs);
1291 void blk_dev_change_media_cb(BlockBackend *blk, bool load, Error **errp);
1292 bool blk_dev_has_removable_media(BlockBackend *blk);
1293 bool blk_dev_has_tray(BlockBackend *blk);
1294 void blk_dev_eject_request(BlockBackend *blk, bool force);
1295 bool blk_dev_is_tray_open(BlockBackend *blk);
1296 bool blk_dev_is_medium_locked(BlockBackend *blk);
1297 
1298 void bdrv_set_dirty(BlockDriverState *bs, int64_t offset, int64_t bytes);
1299 
1300 void bdrv_clear_dirty_bitmap(BdrvDirtyBitmap *bitmap, HBitmap **out);
1301 void bdrv_restore_dirty_bitmap(BdrvDirtyBitmap *bitmap, HBitmap *backup);
1302 bool bdrv_dirty_bitmap_merge_internal(BdrvDirtyBitmap *dest,
1303                                       const BdrvDirtyBitmap *src,
1304                                       HBitmap **backup, bool lock);
1305 
1306 void bdrv_inc_in_flight(BlockDriverState *bs);
1307 void bdrv_dec_in_flight(BlockDriverState *bs);
1308 
1309 void blockdev_close_all_bdrv_states(void);
1310 
1311 int coroutine_fn bdrv_co_copy_range_from(BdrvChild *src, uint64_t src_offset,
1312                                          BdrvChild *dst, uint64_t dst_offset,
1313                                          uint64_t bytes,
1314                                          BdrvRequestFlags read_flags,
1315                                          BdrvRequestFlags write_flags);
1316 int coroutine_fn bdrv_co_copy_range_to(BdrvChild *src, uint64_t src_offset,
1317                                        BdrvChild *dst, uint64_t dst_offset,
1318                                        uint64_t bytes,
1319                                        BdrvRequestFlags read_flags,
1320                                        BdrvRequestFlags write_flags);
1321 
1322 int refresh_total_sectors(BlockDriverState *bs, int64_t hint);
1323 
1324 #endif /* BLOCK_INT_H */
1325