xref: /openbmc/qemu/linux-user/syscall.c (revision 579a97f7)
1 /*
2  *  Linux syscalls
3  *
4  *  Copyright (c) 2003 Fabrice Bellard
5  *
6  *  This program is free software; you can redistribute it and/or modify
7  *  it under the terms of the GNU General Public License as published by
8  *  the Free Software Foundation; either version 2 of the License, or
9  *  (at your option) any later version.
10  *
11  *  This program is distributed in the hope that it will be useful,
12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14  *  GNU General Public License for more details.
15  *
16  *  You should have received a copy of the GNU General Public License
17  *  along with this program; if not, write to the Free Software
18  *  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
19  */
20 #include <stdlib.h>
21 #include <stdio.h>
22 #include <stdarg.h>
23 #include <string.h>
24 #include <elf.h>
25 #include <endian.h>
26 #include <errno.h>
27 #include <unistd.h>
28 #include <fcntl.h>
29 #include <time.h>
30 #include <sys/types.h>
31 #include <sys/ipc.h>
32 #include <sys/msg.h>
33 #include <sys/wait.h>
34 #include <sys/time.h>
35 #include <sys/stat.h>
36 #include <sys/mount.h>
37 #include <sys/prctl.h>
38 #include <sys/resource.h>
39 #include <sys/mman.h>
40 #include <sys/swap.h>
41 #include <signal.h>
42 #include <sched.h>
43 #include <sys/socket.h>
44 #include <sys/uio.h>
45 #include <sys/poll.h>
46 #include <sys/times.h>
47 #include <sys/shm.h>
48 #include <sys/sem.h>
49 #include <sys/statfs.h>
50 #include <utime.h>
51 #include <sys/sysinfo.h>
52 //#include <sys/user.h>
53 #include <netinet/ip.h>
54 #include <netinet/tcp.h>
55 
56 #define termios host_termios
57 #define winsize host_winsize
58 #define termio host_termio
59 #define sgttyb host_sgttyb /* same as target */
60 #define tchars host_tchars /* same as target */
61 #define ltchars host_ltchars /* same as target */
62 
63 #include <linux/termios.h>
64 #include <linux/unistd.h>
65 #include <linux/utsname.h>
66 #include <linux/cdrom.h>
67 #include <linux/hdreg.h>
68 #include <linux/soundcard.h>
69 #include <linux/dirent.h>
70 #include <linux/kd.h>
71 
72 #include "qemu.h"
73 
74 //#define DEBUG
75 
76 #if defined(TARGET_I386) || defined(TARGET_ARM) || defined(TARGET_SPARC) \
77     || defined(TARGET_M68K) || defined(TARGET_SH4) || defined(TARGET_CRIS)
78 /* 16 bit uid wrappers emulation */
79 #define USE_UID16
80 #endif
81 
82 //#include <linux/msdos_fs.h>
83 #define	VFAT_IOCTL_READDIR_BOTH		_IOR('r', 1, struct dirent [2])
84 #define	VFAT_IOCTL_READDIR_SHORT	_IOR('r', 2, struct dirent [2])
85 
86 
87 #undef _syscall0
88 #undef _syscall1
89 #undef _syscall2
90 #undef _syscall3
91 #undef _syscall4
92 #undef _syscall5
93 #undef _syscall6
94 
95 #define _syscall0(type,name)		\
96 type name (void)			\
97 {					\
98 	return syscall(__NR_##name);	\
99 }
100 
101 #define _syscall1(type,name,type1,arg1)		\
102 type name (type1 arg1)				\
103 {						\
104 	return syscall(__NR_##name, arg1);	\
105 }
106 
107 #define _syscall2(type,name,type1,arg1,type2,arg2)	\
108 type name (type1 arg1,type2 arg2)			\
109 {							\
110 	return syscall(__NR_##name, arg1, arg2);	\
111 }
112 
113 #define _syscall3(type,name,type1,arg1,type2,arg2,type3,arg3)	\
114 type name (type1 arg1,type2 arg2,type3 arg3)			\
115 {								\
116 	return syscall(__NR_##name, arg1, arg2, arg3);		\
117 }
118 
119 #define _syscall4(type,name,type1,arg1,type2,arg2,type3,arg3,type4,arg4)	\
120 type name (type1 arg1,type2 arg2,type3 arg3,type4 arg4)				\
121 {										\
122 	return syscall(__NR_##name, arg1, arg2, arg3, arg4);			\
123 }
124 
125 #define _syscall5(type,name,type1,arg1,type2,arg2,type3,arg3,type4,arg4,	\
126 		  type5,arg5)							\
127 type name (type1 arg1,type2 arg2,type3 arg3,type4 arg4,type5 arg5)		\
128 {										\
129 	return syscall(__NR_##name, arg1, arg2, arg3, arg4, arg5);		\
130 }
131 
132 
133 #define _syscall6(type,name,type1,arg1,type2,arg2,type3,arg3,type4,arg4,	\
134 		  type5,arg5,type6,arg6)					\
135 type name (type1 arg1,type2 arg2,type3 arg3,type4 arg4,type5 arg5,type6 arg6)	\
136 {										\
137 	return syscall(__NR_##name, arg1, arg2, arg3, arg4, arg5, arg6);	\
138 }
139 
140 
141 #define __NR_sys_uname __NR_uname
142 #define __NR_sys_faccessat __NR_faccessat
143 #define __NR_sys_fchmodat __NR_fchmodat
144 #define __NR_sys_fchownat __NR_fchownat
145 #define __NR_sys_getcwd1 __NR_getcwd
146 #define __NR_sys_getdents __NR_getdents
147 #define __NR_sys_getdents64 __NR_getdents64
148 #define __NR_sys_getpriority __NR_getpriority
149 #define __NR_sys_linkat __NR_linkat
150 #define __NR_sys_mkdirat __NR_mkdirat
151 #define __NR_sys_mknodat __NR_mknodat
152 #define __NR_sys_openat __NR_openat
153 #define __NR_sys_readlinkat __NR_readlinkat
154 #define __NR_sys_renameat __NR_renameat
155 #define __NR_sys_rt_sigqueueinfo __NR_rt_sigqueueinfo
156 #define __NR_sys_symlinkat __NR_symlinkat
157 #define __NR_sys_syslog __NR_syslog
158 #define __NR_sys_tgkill __NR_tgkill
159 #define __NR_sys_tkill __NR_tkill
160 #define __NR_sys_unlinkat __NR_unlinkat
161 #define __NR_sys_utimensat __NR_utimensat
162 
163 #if defined(__alpha__) || defined (__ia64__) || defined(__x86_64__)
164 #define __NR__llseek __NR_lseek
165 #endif
166 
167 #ifdef __NR_gettid
168 _syscall0(int, gettid)
169 #else
170 /* This is a replacement for the host gettid() and must return a host
171    errno. */
172 static int gettid(void) {
173     return -ENOSYS;
174 }
175 #endif
176 _syscall1(int,sys_uname,struct new_utsname *,buf)
177 #if defined(TARGET_NR_faccessat) && defined(__NR_faccessat)
178 _syscall4(int,sys_faccessat,int,dirfd,const char *,pathname,int,mode,int,flags)
179 #endif
180 #if defined(TARGET_NR_fchmodat) && defined(__NR_fchmodat)
181 _syscall4(int,sys_fchmodat,int,dirfd,const char *,pathname,
182           mode_t,mode,int,flags)
183 #endif
184 #if defined(TARGET_NR_fchownat) && defined(__NR_fchownat)
185 _syscall5(int,sys_fchownat,int,dirfd,const char *,pathname,
186           uid_t,owner,gid_t,group,int,flags)
187 #endif
188 _syscall2(int,sys_getcwd1,char *,buf,size_t,size)
189 _syscall3(int, sys_getdents, uint, fd, struct dirent *, dirp, uint, count);
190 #if defined(TARGET_NR_getdents64) && defined(__NR_getdents64)
191 _syscall3(int, sys_getdents64, uint, fd, struct dirent64 *, dirp, uint, count);
192 #endif
193 _syscall2(int, sys_getpriority, int, which, int, who);
194 _syscall5(int, _llseek,  uint,  fd, ulong, hi, ulong, lo,
195           loff_t *, res, uint, wh);
196 #if defined(TARGET_NR_linkat) && defined(__NR_linkat)
197 _syscall5(int,sys_linkat,int,olddirfd,const char *,oldpath,
198 	  int,newdirfd,const char *,newpath,int,flags)
199 #endif
200 #if defined(TARGET_NR_mkdirat) && defined(__NR_mkdirat)
201 _syscall3(int,sys_mkdirat,int,dirfd,const char *,pathname,mode_t,mode)
202 #endif
203 #if defined(TARGET_NR_mknodat) && defined(__NR_mknodat)
204 _syscall4(int,sys_mknodat,int,dirfd,const char *,pathname,
205           mode_t,mode,dev_t,dev)
206 #endif
207 #if defined(TARGET_NR_openat) && defined(__NR_openat)
208 _syscall4(int,sys_openat,int,dirfd,const char *,pathname,int,flags,mode_t,mode)
209 #endif
210 #if defined(TARGET_NR_readlinkat) && defined(__NR_readlinkat)
211 _syscall4(int,sys_readlinkat,int,dirfd,const char *,pathname,
212           char *,buf,size_t,bufsize)
213 #endif
214 #if defined(TARGET_NR_renameat) && defined(__NR_renameat)
215 _syscall4(int,sys_renameat,int,olddirfd,const char *,oldpath,
216           int,newdirfd,const char *,newpath)
217 #endif
218 _syscall3(int,sys_rt_sigqueueinfo,int,pid,int,sig,siginfo_t *,uinfo)
219 #if defined(TARGET_NR_symlinkat) && defined(__NR_symlinkat)
220 _syscall3(int,sys_symlinkat,const char *,oldpath,
221           int,newdirfd,const char *,newpath)
222 #endif
223 _syscall3(int,sys_syslog,int,type,char*,bufp,int,len)
224 #if defined(TARGET_NR_tgkill) && defined(__NR_tgkill)
225 _syscall3(int,sys_tgkill,int,tgid,int,pid,int,sig)
226 #endif
227 #if defined(TARGET_NR_tkill) && defined(__NR_tkill)
228 _syscall2(int,sys_tkill,int,tid,int,sig)
229 #endif
230 #ifdef __NR_exit_group
231 _syscall1(int,exit_group,int,error_code)
232 #endif
233 #if defined(TARGET_NR_set_tid_address) && defined(__NR_set_tid_address)
234 _syscall1(int,set_tid_address,int *,tidptr)
235 #endif
236 #if defined(TARGET_NR_unlinkat) && defined(__NR_unlinkat)
237 _syscall3(int,sys_unlinkat,int,dirfd,const char *,pathname,int,flags)
238 #endif
239 #if defined(TARGET_NR_utimensat) && defined(__NR_utimensat)
240 _syscall4(int,sys_utimensat,int,dirfd,const char *,pathname,
241           const struct timespec *,tsp,int,flags)
242 #endif
243 
244 extern int personality(int);
245 extern int flock(int, int);
246 extern int setfsuid(int);
247 extern int setfsgid(int);
248 extern int setresuid(uid_t, uid_t, uid_t);
249 extern int getresuid(uid_t *, uid_t *, uid_t *);
250 extern int setresgid(gid_t, gid_t, gid_t);
251 extern int getresgid(gid_t *, gid_t *, gid_t *);
252 extern int setgroups(int, gid_t *);
253 
254 #define ERRNO_TABLE_SIZE 1200
255 
256 /* target_to_host_errno_table[] is initialized from
257  * host_to_target_errno_table[] in syscall_init(). */
258 static uint16_t target_to_host_errno_table[ERRNO_TABLE_SIZE] = {
259 };
260 
261 /*
262  * This list is the union of errno values overridden in asm-<arch>/errno.h
263  * minus the errnos that are not actually generic to all archs.
264  */
265 static uint16_t host_to_target_errno_table[ERRNO_TABLE_SIZE] = {
266     [EIDRM]		= TARGET_EIDRM,
267     [ECHRNG]		= TARGET_ECHRNG,
268     [EL2NSYNC]		= TARGET_EL2NSYNC,
269     [EL3HLT]		= TARGET_EL3HLT,
270     [EL3RST]		= TARGET_EL3RST,
271     [ELNRNG]		= TARGET_ELNRNG,
272     [EUNATCH]		= TARGET_EUNATCH,
273     [ENOCSI]		= TARGET_ENOCSI,
274     [EL2HLT]		= TARGET_EL2HLT,
275     [EDEADLK]		= TARGET_EDEADLK,
276     [ENOLCK]		= TARGET_ENOLCK,
277     [EBADE]		= TARGET_EBADE,
278     [EBADR]		= TARGET_EBADR,
279     [EXFULL]		= TARGET_EXFULL,
280     [ENOANO]		= TARGET_ENOANO,
281     [EBADRQC]		= TARGET_EBADRQC,
282     [EBADSLT]		= TARGET_EBADSLT,
283     [EBFONT]		= TARGET_EBFONT,
284     [ENOSTR]		= TARGET_ENOSTR,
285     [ENODATA]		= TARGET_ENODATA,
286     [ETIME]		= TARGET_ETIME,
287     [ENOSR]		= TARGET_ENOSR,
288     [ENONET]		= TARGET_ENONET,
289     [ENOPKG]		= TARGET_ENOPKG,
290     [EREMOTE]		= TARGET_EREMOTE,
291     [ENOLINK]		= TARGET_ENOLINK,
292     [EADV]		= TARGET_EADV,
293     [ESRMNT]		= TARGET_ESRMNT,
294     [ECOMM]		= TARGET_ECOMM,
295     [EPROTO]		= TARGET_EPROTO,
296     [EDOTDOT]		= TARGET_EDOTDOT,
297     [EMULTIHOP]		= TARGET_EMULTIHOP,
298     [EBADMSG]		= TARGET_EBADMSG,
299     [ENAMETOOLONG]	= TARGET_ENAMETOOLONG,
300     [EOVERFLOW]		= TARGET_EOVERFLOW,
301     [ENOTUNIQ]		= TARGET_ENOTUNIQ,
302     [EBADFD]		= TARGET_EBADFD,
303     [EREMCHG]		= TARGET_EREMCHG,
304     [ELIBACC]		= TARGET_ELIBACC,
305     [ELIBBAD]		= TARGET_ELIBBAD,
306     [ELIBSCN]		= TARGET_ELIBSCN,
307     [ELIBMAX]		= TARGET_ELIBMAX,
308     [ELIBEXEC]		= TARGET_ELIBEXEC,
309     [EILSEQ]		= TARGET_EILSEQ,
310     [ENOSYS]		= TARGET_ENOSYS,
311     [ELOOP]		= TARGET_ELOOP,
312     [ERESTART]		= TARGET_ERESTART,
313     [ESTRPIPE]		= TARGET_ESTRPIPE,
314     [ENOTEMPTY]		= TARGET_ENOTEMPTY,
315     [EUSERS]		= TARGET_EUSERS,
316     [ENOTSOCK]		= TARGET_ENOTSOCK,
317     [EDESTADDRREQ]	= TARGET_EDESTADDRREQ,
318     [EMSGSIZE]		= TARGET_EMSGSIZE,
319     [EPROTOTYPE]	= TARGET_EPROTOTYPE,
320     [ENOPROTOOPT]	= TARGET_ENOPROTOOPT,
321     [EPROTONOSUPPORT]	= TARGET_EPROTONOSUPPORT,
322     [ESOCKTNOSUPPORT]	= TARGET_ESOCKTNOSUPPORT,
323     [EOPNOTSUPP]	= TARGET_EOPNOTSUPP,
324     [EPFNOSUPPORT]	= TARGET_EPFNOSUPPORT,
325     [EAFNOSUPPORT]	= TARGET_EAFNOSUPPORT,
326     [EADDRINUSE]	= TARGET_EADDRINUSE,
327     [EADDRNOTAVAIL]	= TARGET_EADDRNOTAVAIL,
328     [ENETDOWN]		= TARGET_ENETDOWN,
329     [ENETUNREACH]	= TARGET_ENETUNREACH,
330     [ENETRESET]		= TARGET_ENETRESET,
331     [ECONNABORTED]	= TARGET_ECONNABORTED,
332     [ECONNRESET]	= TARGET_ECONNRESET,
333     [ENOBUFS]		= TARGET_ENOBUFS,
334     [EISCONN]		= TARGET_EISCONN,
335     [ENOTCONN]		= TARGET_ENOTCONN,
336     [EUCLEAN]		= TARGET_EUCLEAN,
337     [ENOTNAM]		= TARGET_ENOTNAM,
338     [ENAVAIL]		= TARGET_ENAVAIL,
339     [EISNAM]		= TARGET_EISNAM,
340     [EREMOTEIO]		= TARGET_EREMOTEIO,
341     [ESHUTDOWN]		= TARGET_ESHUTDOWN,
342     [ETOOMANYREFS]	= TARGET_ETOOMANYREFS,
343     [ETIMEDOUT]		= TARGET_ETIMEDOUT,
344     [ECONNREFUSED]	= TARGET_ECONNREFUSED,
345     [EHOSTDOWN]		= TARGET_EHOSTDOWN,
346     [EHOSTUNREACH]	= TARGET_EHOSTUNREACH,
347     [EALREADY]		= TARGET_EALREADY,
348     [EINPROGRESS]	= TARGET_EINPROGRESS,
349     [ESTALE]		= TARGET_ESTALE,
350     [ECANCELED]		= TARGET_ECANCELED,
351     [ENOMEDIUM]		= TARGET_ENOMEDIUM,
352     [EMEDIUMTYPE]	= TARGET_EMEDIUMTYPE,
353 #ifdef ENOKEY
354     [ENOKEY]		= TARGET_ENOKEY,
355 #endif
356 #ifdef EKEYEXPIRED
357     [EKEYEXPIRED]	= TARGET_EKEYEXPIRED,
358 #endif
359 #ifdef EKEYREVOKED
360     [EKEYREVOKED]	= TARGET_EKEYREVOKED,
361 #endif
362 #ifdef EKEYREJECTED
363     [EKEYREJECTED]	= TARGET_EKEYREJECTED,
364 #endif
365 #ifdef EOWNERDEAD
366     [EOWNERDEAD]	= TARGET_EOWNERDEAD,
367 #endif
368 #ifdef ENOTRECOVERABLE
369     [ENOTRECOVERABLE]	= TARGET_ENOTRECOVERABLE,
370 #endif
371 };
372 
373 static inline int host_to_target_errno(int err)
374 {
375     if(host_to_target_errno_table[err])
376         return host_to_target_errno_table[err];
377     return err;
378 }
379 
380 static inline int target_to_host_errno(int err)
381 {
382     if (target_to_host_errno_table[err])
383         return target_to_host_errno_table[err];
384     return err;
385 }
386 
387 static inline abi_long get_errno(abi_long ret)
388 {
389     if (ret == -1)
390         return -host_to_target_errno(errno);
391     else
392         return ret;
393 }
394 
395 static inline int is_error(abi_long ret)
396 {
397     return (abi_ulong)ret >= (abi_ulong)(-4096);
398 }
399 
400 char *target_strerror(int err)
401 {
402     return strerror(target_to_host_errno(err));
403 }
404 
405 static abi_ulong target_brk;
406 static abi_ulong target_original_brk;
407 
408 void target_set_brk(abi_ulong new_brk)
409 {
410     target_original_brk = target_brk = HOST_PAGE_ALIGN(new_brk);
411 }
412 
413 /* do_brk() must return target values and target errnos. */
414 abi_long do_brk(abi_ulong new_brk)
415 {
416     abi_ulong brk_page;
417     abi_long mapped_addr;
418     int	new_alloc_size;
419 
420     if (!new_brk)
421         return target_brk;
422     if (new_brk < target_original_brk)
423         return -TARGET_ENOMEM;
424 
425     brk_page = HOST_PAGE_ALIGN(target_brk);
426 
427     /* If the new brk is less than this, set it and we're done... */
428     if (new_brk < brk_page) {
429 	target_brk = new_brk;
430     	return target_brk;
431     }
432 
433     /* We need to allocate more memory after the brk... */
434     new_alloc_size = HOST_PAGE_ALIGN(new_brk - brk_page + 1);
435     mapped_addr = get_errno(target_mmap(brk_page, new_alloc_size,
436                                         PROT_READ|PROT_WRITE,
437                                         MAP_ANON|MAP_FIXED|MAP_PRIVATE, 0, 0));
438     if (is_error(mapped_addr)) {
439 	return mapped_addr;
440     } else {
441 	target_brk = new_brk;
442     	return target_brk;
443     }
444 }
445 
446 static inline fd_set *target_to_host_fds(fd_set *fds,
447                                          abi_long *target_fds, int n)
448 {
449 #if !defined(BSWAP_NEEDED) && !defined(WORDS_BIGENDIAN)
450     return (fd_set *)target_fds;
451 #else
452     int i, b;
453     if (target_fds) {
454         FD_ZERO(fds);
455         for(i = 0;i < n; i++) {
456             b = (tswapl(target_fds[i / TARGET_ABI_BITS]) >>
457                  (i & (TARGET_ABI_BITS - 1))) & 1;
458             if (b)
459                 FD_SET(i, fds);
460         }
461         return fds;
462     } else {
463         return NULL;
464     }
465 #endif
466 }
467 
468 static inline void host_to_target_fds(abi_long *target_fds,
469                                       fd_set *fds, int n)
470 {
471 #if !defined(BSWAP_NEEDED) && !defined(WORDS_BIGENDIAN)
472     /* nothing to do */
473 #else
474     int i, nw, j, k;
475     abi_long v;
476 
477     if (target_fds) {
478         nw = (n + TARGET_ABI_BITS - 1) / TARGET_ABI_BITS;
479         k = 0;
480         for(i = 0;i < nw; i++) {
481             v = 0;
482             for(j = 0; j < TARGET_ABI_BITS; j++) {
483                 v |= ((FD_ISSET(k, fds) != 0) << j);
484                 k++;
485             }
486             target_fds[i] = tswapl(v);
487         }
488     }
489 #endif
490 }
491 
492 #if defined(__alpha__)
493 #define HOST_HZ 1024
494 #else
495 #define HOST_HZ 100
496 #endif
497 
498 static inline abi_long host_to_target_clock_t(long ticks)
499 {
500 #if HOST_HZ == TARGET_HZ
501     return ticks;
502 #else
503     return ((int64_t)ticks * TARGET_HZ) / HOST_HZ;
504 #endif
505 }
506 
507 static inline abi_long host_to_target_rusage(abi_ulong target_addr,
508                                              const struct rusage *rusage)
509 {
510     struct target_rusage *target_rusage;
511 
512     if (!lock_user_struct(VERIFY_WRITE, target_rusage, target_addr, 0))
513         return -TARGET_EFAULT;
514     target_rusage->ru_utime.tv_sec = tswapl(rusage->ru_utime.tv_sec);
515     target_rusage->ru_utime.tv_usec = tswapl(rusage->ru_utime.tv_usec);
516     target_rusage->ru_stime.tv_sec = tswapl(rusage->ru_stime.tv_sec);
517     target_rusage->ru_stime.tv_usec = tswapl(rusage->ru_stime.tv_usec);
518     target_rusage->ru_maxrss = tswapl(rusage->ru_maxrss);
519     target_rusage->ru_ixrss = tswapl(rusage->ru_ixrss);
520     target_rusage->ru_idrss = tswapl(rusage->ru_idrss);
521     target_rusage->ru_isrss = tswapl(rusage->ru_isrss);
522     target_rusage->ru_minflt = tswapl(rusage->ru_minflt);
523     target_rusage->ru_majflt = tswapl(rusage->ru_majflt);
524     target_rusage->ru_nswap = tswapl(rusage->ru_nswap);
525     target_rusage->ru_inblock = tswapl(rusage->ru_inblock);
526     target_rusage->ru_oublock = tswapl(rusage->ru_oublock);
527     target_rusage->ru_msgsnd = tswapl(rusage->ru_msgsnd);
528     target_rusage->ru_msgrcv = tswapl(rusage->ru_msgrcv);
529     target_rusage->ru_nsignals = tswapl(rusage->ru_nsignals);
530     target_rusage->ru_nvcsw = tswapl(rusage->ru_nvcsw);
531     target_rusage->ru_nivcsw = tswapl(rusage->ru_nivcsw);
532     unlock_user_struct(target_rusage, target_addr, 1);
533 
534     return 0;
535 }
536 
537 static inline abi_long target_to_host_timeval(struct timeval *tv,
538                                               abi_ulong target_addr)
539 {
540     struct target_timeval *target_tv;
541 
542     if (!lock_user_struct(VERIFY_READ, target_tv, target_addr, 1))
543         return -TARGET_EFAULT;
544     tv->tv_sec = tswapl(target_tv->tv_sec);
545     tv->tv_usec = tswapl(target_tv->tv_usec);
546     unlock_user_struct(target_tv, target_addr, 0);
547 
548     return 0;
549 }
550 
551 static inline abi_long host_to_target_timeval(abi_ulong target_addr,
552                                               const struct timeval *tv)
553 {
554     struct target_timeval *target_tv;
555 
556     if (!lock_user_struct(VERIFY_WRITE, target_tv, target_addr, 0))
557         return -TARGET_EFAULT;
558     target_tv->tv_sec = tswapl(tv->tv_sec);
559     target_tv->tv_usec = tswapl(tv->tv_usec);
560     unlock_user_struct(target_tv, target_addr, 1);
561 
562     return 0;
563 }
564 
565 
566 /* do_select() must return target values and target errnos. */
567 static abi_long do_select(int n,
568                           abi_ulong rfd_p, abi_ulong wfd_p,
569                           abi_ulong efd_p, abi_ulong target_tv)
570 {
571     fd_set rfds, wfds, efds;
572     fd_set *rfds_ptr, *wfds_ptr, *efds_ptr;
573     abi_long *target_rfds, *target_wfds, *target_efds;
574     struct timeval tv, *tv_ptr;
575     abi_long ret;
576     int ok;
577 
578     if (rfd_p) {
579         target_rfds = lock_user(VERIFY_WRITE, rfd_p, sizeof(abi_long) * n, 1);
580         if (!target_rfds) {
581             ret = -TARGET_EFAULT;
582             goto end;
583         }
584         rfds_ptr = target_to_host_fds(&rfds, target_rfds, n);
585     } else {
586         target_rfds = NULL;
587         rfds_ptr = NULL;
588     }
589     if (wfd_p) {
590         target_wfds = lock_user(VERIFY_WRITE, wfd_p, sizeof(abi_long) * n, 1);
591         if (!target_wfds) {
592             ret = -TARGET_EFAULT;
593             goto end;
594         }
595         wfds_ptr = target_to_host_fds(&wfds, target_wfds, n);
596     } else {
597         target_wfds = NULL;
598         wfds_ptr = NULL;
599     }
600     if (efd_p) {
601         target_efds = lock_user(VERIFY_WRITE, efd_p, sizeof(abi_long) * n, 1);
602         if (!target_efds) {
603             ret = -TARGET_EFAULT;
604             goto end;
605         }
606         efds_ptr = target_to_host_fds(&efds, target_efds, n);
607     } else {
608         target_efds = NULL;
609         efds_ptr = NULL;
610     }
611 
612     if (target_tv) {
613         target_to_host_timeval(&tv, target_tv);
614         tv_ptr = &tv;
615     } else {
616         tv_ptr = NULL;
617     }
618     ret = get_errno(select(n, rfds_ptr, wfds_ptr, efds_ptr, tv_ptr));
619     ok = !is_error(ret);
620 
621     if (ok) {
622         host_to_target_fds(target_rfds, rfds_ptr, n);
623         host_to_target_fds(target_wfds, wfds_ptr, n);
624         host_to_target_fds(target_efds, efds_ptr, n);
625 
626         if (target_tv) {
627             host_to_target_timeval(target_tv, &tv);
628         }
629     }
630 
631 end:
632     unlock_user(target_rfds, rfd_p, ok ? sizeof(abi_long) * n : 0);
633     unlock_user(target_wfds, wfd_p, ok ? sizeof(abi_long) * n : 0);
634     unlock_user(target_efds, efd_p, ok ? sizeof(abi_long) * n : 0);
635 
636     return ret;
637 }
638 
639 static inline abi_long target_to_host_sockaddr(struct sockaddr *addr,
640                                                abi_ulong target_addr,
641                                                socklen_t len)
642 {
643     struct target_sockaddr *target_saddr;
644 
645     target_saddr = lock_user(VERIFY_READ, target_addr, len, 1);
646     if (!target_saddr)
647         return -TARGET_EFAULT;
648     memcpy(addr, target_saddr, len);
649     addr->sa_family = tswap16(target_saddr->sa_family);
650     unlock_user(target_saddr, target_addr, 0);
651 
652     return 0;
653 }
654 
655 static inline abi_long host_to_target_sockaddr(abi_ulong target_addr,
656                                                struct sockaddr *addr,
657                                                socklen_t len)
658 {
659     struct target_sockaddr *target_saddr;
660 
661     target_saddr = lock_user(VERIFY_WRITE, target_addr, len, 0);
662     if (!target_saddr)
663         return -TARGET_EFAULT;
664     memcpy(target_saddr, addr, len);
665     target_saddr->sa_family = tswap16(addr->sa_family);
666     unlock_user(target_saddr, target_addr, len);
667 
668     return 0;
669 }
670 
671 /* ??? Should this also swap msgh->name?  */
672 static inline void target_to_host_cmsg(struct msghdr *msgh,
673                                        struct target_msghdr *target_msgh)
674 {
675     struct cmsghdr *cmsg = CMSG_FIRSTHDR(msgh);
676     struct target_cmsghdr *target_cmsg = TARGET_CMSG_FIRSTHDR(target_msgh);
677     socklen_t space = 0;
678 
679     while (cmsg && target_cmsg) {
680         void *data = CMSG_DATA(cmsg);
681         void *target_data = TARGET_CMSG_DATA(target_cmsg);
682 
683         int len = tswapl(target_cmsg->cmsg_len)
684                   - TARGET_CMSG_ALIGN(sizeof (struct target_cmsghdr));
685 
686         space += CMSG_SPACE(len);
687         if (space > msgh->msg_controllen) {
688             space -= CMSG_SPACE(len);
689             gemu_log("Host cmsg overflow\n");
690             break;
691         }
692 
693         cmsg->cmsg_level = tswap32(target_cmsg->cmsg_level);
694         cmsg->cmsg_type = tswap32(target_cmsg->cmsg_type);
695         cmsg->cmsg_len = CMSG_LEN(len);
696 
697         if (cmsg->cmsg_level != TARGET_SOL_SOCKET || cmsg->cmsg_type != SCM_RIGHTS) {
698             gemu_log("Unsupported ancillary data: %d/%d\n", cmsg->cmsg_level, cmsg->cmsg_type);
699             memcpy(data, target_data, len);
700         } else {
701             int *fd = (int *)data;
702             int *target_fd = (int *)target_data;
703             int i, numfds = len / sizeof(int);
704 
705             for (i = 0; i < numfds; i++)
706                 fd[i] = tswap32(target_fd[i]);
707         }
708 
709         cmsg = CMSG_NXTHDR(msgh, cmsg);
710         target_cmsg = TARGET_CMSG_NXTHDR(target_msgh, target_cmsg);
711     }
712 
713     msgh->msg_controllen = space;
714 }
715 
716 /* ??? Should this also swap msgh->name?  */
717 static inline void host_to_target_cmsg(struct target_msghdr *target_msgh,
718                                        struct msghdr *msgh)
719 {
720     struct cmsghdr *cmsg = CMSG_FIRSTHDR(msgh);
721     struct target_cmsghdr *target_cmsg = TARGET_CMSG_FIRSTHDR(target_msgh);
722     socklen_t space = 0;
723 
724     while (cmsg && target_cmsg) {
725         void *data = CMSG_DATA(cmsg);
726         void *target_data = TARGET_CMSG_DATA(target_cmsg);
727 
728         int len = cmsg->cmsg_len - CMSG_ALIGN(sizeof (struct cmsghdr));
729 
730         space += TARGET_CMSG_SPACE(len);
731         if (space > tswapl(target_msgh->msg_controllen)) {
732             space -= TARGET_CMSG_SPACE(len);
733             gemu_log("Target cmsg overflow\n");
734             break;
735         }
736 
737         target_cmsg->cmsg_level = tswap32(cmsg->cmsg_level);
738         target_cmsg->cmsg_type = tswap32(cmsg->cmsg_type);
739         target_cmsg->cmsg_len = tswapl(TARGET_CMSG_LEN(len));
740 
741         if (cmsg->cmsg_level != TARGET_SOL_SOCKET || cmsg->cmsg_type != SCM_RIGHTS) {
742             gemu_log("Unsupported ancillary data: %d/%d\n", cmsg->cmsg_level, cmsg->cmsg_type);
743             memcpy(target_data, data, len);
744         } else {
745             int *fd = (int *)data;
746             int *target_fd = (int *)target_data;
747             int i, numfds = len / sizeof(int);
748 
749             for (i = 0; i < numfds; i++)
750                 target_fd[i] = tswap32(fd[i]);
751         }
752 
753         cmsg = CMSG_NXTHDR(msgh, cmsg);
754         target_cmsg = TARGET_CMSG_NXTHDR(target_msgh, target_cmsg);
755     }
756 
757     msgh->msg_controllen = tswapl(space);
758 }
759 
760 /* do_setsockopt() Must return target values and target errnos. */
761 static abi_long do_setsockopt(int sockfd, int level, int optname,
762                               abi_ulong optval, socklen_t optlen)
763 {
764     abi_long ret;
765     int val;
766 
767     switch(level) {
768     case SOL_TCP:
769         /* TCP options all take an 'int' value.  */
770         if (optlen < sizeof(uint32_t))
771             return -TARGET_EINVAL;
772 
773         val = tget32(optval);
774         ret = get_errno(setsockopt(sockfd, level, optname, &val, sizeof(val)));
775         break;
776     case SOL_IP:
777         switch(optname) {
778         case IP_TOS:
779         case IP_TTL:
780         case IP_HDRINCL:
781         case IP_ROUTER_ALERT:
782         case IP_RECVOPTS:
783         case IP_RETOPTS:
784         case IP_PKTINFO:
785         case IP_MTU_DISCOVER:
786         case IP_RECVERR:
787         case IP_RECVTOS:
788 #ifdef IP_FREEBIND
789         case IP_FREEBIND:
790 #endif
791         case IP_MULTICAST_TTL:
792         case IP_MULTICAST_LOOP:
793             val = 0;
794             if (optlen >= sizeof(uint32_t)) {
795                 val = tget32(optval);
796             } else if (optlen >= 1) {
797                 val = tget8(optval);
798             }
799             ret = get_errno(setsockopt(sockfd, level, optname, &val, sizeof(val)));
800             break;
801         default:
802             goto unimplemented;
803         }
804         break;
805     case TARGET_SOL_SOCKET:
806         switch (optname) {
807             /* Options with 'int' argument.  */
808         case TARGET_SO_DEBUG:
809 		optname = SO_DEBUG;
810 		break;
811         case TARGET_SO_REUSEADDR:
812 		optname = SO_REUSEADDR;
813 		break;
814         case TARGET_SO_TYPE:
815 		optname = SO_TYPE;
816 		break;
817         case TARGET_SO_ERROR:
818 		optname = SO_ERROR;
819 		break;
820         case TARGET_SO_DONTROUTE:
821 		optname = SO_DONTROUTE;
822 		break;
823         case TARGET_SO_BROADCAST:
824 		optname = SO_BROADCAST;
825 		break;
826         case TARGET_SO_SNDBUF:
827 		optname = SO_SNDBUF;
828 		break;
829         case TARGET_SO_RCVBUF:
830 		optname = SO_RCVBUF;
831 		break;
832         case TARGET_SO_KEEPALIVE:
833 		optname = SO_KEEPALIVE;
834 		break;
835         case TARGET_SO_OOBINLINE:
836 		optname = SO_OOBINLINE;
837 		break;
838         case TARGET_SO_NO_CHECK:
839 		optname = SO_NO_CHECK;
840 		break;
841         case TARGET_SO_PRIORITY:
842 		optname = SO_PRIORITY;
843 		break;
844 #ifdef SO_BSDCOMPAT
845         case TARGET_SO_BSDCOMPAT:
846 		optname = SO_BSDCOMPAT;
847 		break;
848 #endif
849         case TARGET_SO_PASSCRED:
850 		optname = SO_PASSCRED;
851 		break;
852         case TARGET_SO_TIMESTAMP:
853 		optname = SO_TIMESTAMP;
854 		break;
855         case TARGET_SO_RCVLOWAT:
856 		optname = SO_RCVLOWAT;
857 		break;
858         case TARGET_SO_RCVTIMEO:
859 		optname = SO_RCVTIMEO;
860 		break;
861         case TARGET_SO_SNDTIMEO:
862 		optname = SO_SNDTIMEO;
863 		break;
864             break;
865         default:
866             goto unimplemented;
867         }
868 	if (optlen < sizeof(uint32_t))
869 	return -TARGET_EINVAL;
870 
871 	val = tget32(optval);
872 	ret = get_errno(setsockopt(sockfd, SOL_SOCKET, optname, &val, sizeof(val)));
873         break;
874     default:
875     unimplemented:
876         gemu_log("Unsupported setsockopt level=%d optname=%d \n", level, optname);
877         ret = -TARGET_ENOSYS;
878     }
879     return ret;
880 }
881 
882 /* do_getsockopt() Must return target values and target errnos. */
883 static abi_long do_getsockopt(int sockfd, int level, int optname,
884                               abi_ulong optval, abi_ulong optlen)
885 {
886     abi_long ret;
887     int len, lv, val;
888 
889     switch(level) {
890     case TARGET_SOL_SOCKET:
891     	level = SOL_SOCKET;
892 	switch (optname) {
893 	case TARGET_SO_LINGER:
894 	case TARGET_SO_RCVTIMEO:
895 	case TARGET_SO_SNDTIMEO:
896 	case TARGET_SO_PEERCRED:
897 	case TARGET_SO_PEERNAME:
898 	    /* These don't just return a single integer */
899 	    goto unimplemented;
900         default:
901             goto int_case;
902         }
903         break;
904     case SOL_TCP:
905         /* TCP options all take an 'int' value.  */
906     int_case:
907         len = tget32(optlen);
908         if (len < 0)
909             return -TARGET_EINVAL;
910         lv = sizeof(int);
911         ret = get_errno(getsockopt(sockfd, level, optname, &val, &lv));
912         if (ret < 0)
913             return ret;
914         val = tswap32(val);
915         if (len > lv)
916             len = lv;
917         if (len == 4)
918             tput32(optval, val);
919         else
920             tput8(optval, val);
921         tput32(optlen, len);
922         break;
923     case SOL_IP:
924         switch(optname) {
925         case IP_TOS:
926         case IP_TTL:
927         case IP_HDRINCL:
928         case IP_ROUTER_ALERT:
929         case IP_RECVOPTS:
930         case IP_RETOPTS:
931         case IP_PKTINFO:
932         case IP_MTU_DISCOVER:
933         case IP_RECVERR:
934         case IP_RECVTOS:
935 #ifdef IP_FREEBIND
936         case IP_FREEBIND:
937 #endif
938         case IP_MULTICAST_TTL:
939         case IP_MULTICAST_LOOP:
940             len = tget32(optlen);
941             if (len < 0)
942                 return -TARGET_EINVAL;
943             lv = sizeof(int);
944             ret = get_errno(getsockopt(sockfd, level, optname, &val, &lv));
945             if (ret < 0)
946                 return ret;
947             if (len < sizeof(int) && len > 0 && val >= 0 && val < 255) {
948                 len = 1;
949                 tput32(optlen, len);
950                 tput8(optval, val);
951             } else {
952                 if (len > sizeof(int))
953                     len = sizeof(int);
954                 tput32(optlen, len);
955                 tput32(optval, val);
956             }
957             break;
958         default:
959             goto unimplemented;
960         }
961         break;
962     default:
963     unimplemented:
964         gemu_log("getsockopt level=%d optname=%d not yet supported\n",
965                  level, optname);
966         ret = -TARGET_ENOSYS;
967         break;
968     }
969     return ret;
970 }
971 
972 /* FIXME
973  * lock_iovec()/unlock_iovec() have a return code of 0 for success where
974  * other lock functions have a return code of 0 for failure.
975  */
976 static abi_long lock_iovec(int type, struct iovec *vec, abi_ulong target_addr,
977                            int count, int copy)
978 {
979     struct target_iovec *target_vec;
980     abi_ulong base;
981     int i, j;
982 
983     target_vec = lock_user(VERIFY_READ, target_addr, count * sizeof(struct target_iovec), 1);
984     if (!target_vec)
985         return -TARGET_EFAULT;
986     for(i = 0;i < count; i++) {
987         base = tswapl(target_vec[i].iov_base);
988         vec[i].iov_len = tswapl(target_vec[i].iov_len);
989         vec[i].iov_base = lock_user(type, base, vec[i].iov_len, copy);
990 	if (!vec[i].iov_base)
991             goto fail;
992     }
993     unlock_user (target_vec, target_addr, 0);
994     return 0;
995  fail:
996     /* failure - unwind locks */
997     for (j = 0; j < i; j++) {
998         base = tswapl(target_vec[j].iov_base);
999         unlock_user(vec[j].iov_base, base, 0);
1000     }
1001     unlock_user (target_vec, target_addr, 0);
1002     return -TARGET_EFAULT;
1003 }
1004 
1005 static abi_long unlock_iovec(struct iovec *vec, abi_ulong target_addr,
1006                              int count, int copy)
1007 {
1008     struct target_iovec *target_vec;
1009     abi_ulong base;
1010     int i;
1011 
1012     target_vec = lock_user(VERIFY_READ, target_addr, count * sizeof(struct target_iovec), 1);
1013     if (!target_vec)
1014         return -TARGET_EFAULT;
1015     for(i = 0;i < count; i++) {
1016         base = tswapl(target_vec[i].iov_base);
1017         unlock_user(vec[i].iov_base, base, copy ? vec[i].iov_len : 0);
1018     }
1019     unlock_user (target_vec, target_addr, 0);
1020 
1021     return 0;
1022 }
1023 
1024 /* do_socket() Must return target values and target errnos. */
1025 static abi_long do_socket(int domain, int type, int protocol)
1026 {
1027 #if defined(TARGET_MIPS)
1028     switch(type) {
1029     case TARGET_SOCK_DGRAM:
1030         type = SOCK_DGRAM;
1031         break;
1032     case TARGET_SOCK_STREAM:
1033         type = SOCK_STREAM;
1034         break;
1035     case TARGET_SOCK_RAW:
1036         type = SOCK_RAW;
1037         break;
1038     case TARGET_SOCK_RDM:
1039         type = SOCK_RDM;
1040         break;
1041     case TARGET_SOCK_SEQPACKET:
1042         type = SOCK_SEQPACKET;
1043         break;
1044     case TARGET_SOCK_PACKET:
1045         type = SOCK_PACKET;
1046         break;
1047     }
1048 #endif
1049     if (domain == PF_NETLINK)
1050         return -EAFNOSUPPORT; /* do not NETLINK socket connections possible */
1051     return get_errno(socket(domain, type, protocol));
1052 }
1053 
1054 /* do_bind() Must return target values and target errnos. */
1055 static abi_long do_bind(int sockfd, abi_ulong target_addr,
1056                         socklen_t addrlen)
1057 {
1058     void *addr = alloca(addrlen);
1059 
1060     target_to_host_sockaddr(addr, target_addr, addrlen);
1061     return get_errno(bind(sockfd, addr, addrlen));
1062 }
1063 
1064 /* do_connect() Must return target values and target errnos. */
1065 static abi_long do_connect(int sockfd, abi_ulong target_addr,
1066                            socklen_t addrlen)
1067 {
1068     void *addr = alloca(addrlen);
1069 
1070     target_to_host_sockaddr(addr, target_addr, addrlen);
1071     return get_errno(connect(sockfd, addr, addrlen));
1072 }
1073 
1074 /* do_sendrecvmsg() Must return target values and target errnos. */
1075 static abi_long do_sendrecvmsg(int fd, abi_ulong target_msg,
1076                                int flags, int send)
1077 {
1078     abi_long ret;
1079     struct target_msghdr *msgp;
1080     struct msghdr msg;
1081     int count;
1082     struct iovec *vec;
1083     abi_ulong target_vec;
1084 
1085     /* FIXME */
1086     if (!lock_user_struct(send ? VERIFY_READ : VERIFY_WRITE,
1087                           msgp,
1088                           target_msg,
1089                           send ? 1 : 0))
1090         return -TARGET_EFAULT;
1091     if (msgp->msg_name) {
1092         msg.msg_namelen = tswap32(msgp->msg_namelen);
1093         msg.msg_name = alloca(msg.msg_namelen);
1094         target_to_host_sockaddr(msg.msg_name, tswapl(msgp->msg_name),
1095                                 msg.msg_namelen);
1096     } else {
1097         msg.msg_name = NULL;
1098         msg.msg_namelen = 0;
1099     }
1100     msg.msg_controllen = 2 * tswapl(msgp->msg_controllen);
1101     msg.msg_control = alloca(msg.msg_controllen);
1102     msg.msg_flags = tswap32(msgp->msg_flags);
1103 
1104     count = tswapl(msgp->msg_iovlen);
1105     vec = alloca(count * sizeof(struct iovec));
1106     target_vec = tswapl(msgp->msg_iov);
1107     lock_iovec(send ? VERIFY_READ : VERIFY_WRITE, vec, target_vec, count, send);
1108     msg.msg_iovlen = count;
1109     msg.msg_iov = vec;
1110 
1111     if (send) {
1112         target_to_host_cmsg(&msg, msgp);
1113         ret = get_errno(sendmsg(fd, &msg, flags));
1114     } else {
1115         ret = get_errno(recvmsg(fd, &msg, flags));
1116         if (!is_error(ret))
1117             host_to_target_cmsg(msgp, &msg);
1118     }
1119     unlock_iovec(vec, target_vec, count, !send);
1120     unlock_user_struct(msgp, target_msg, send ? 0 : 1);
1121     return ret;
1122 }
1123 
1124 /* do_accept() Must return target values and target errnos. */
1125 static abi_long do_accept(int fd, abi_ulong target_addr,
1126                           abi_ulong target_addrlen)
1127 {
1128     socklen_t addrlen = tget32(target_addrlen);
1129     void *addr = alloca(addrlen);
1130     abi_long ret;
1131 
1132     ret = get_errno(accept(fd, addr, &addrlen));
1133     if (!is_error(ret)) {
1134         host_to_target_sockaddr(target_addr, addr, addrlen);
1135         tput32(target_addrlen, addrlen);
1136     }
1137     return ret;
1138 }
1139 
1140 /* do_getpeername() Must return target values and target errnos. */
1141 static abi_long do_getpeername(int fd, abi_ulong target_addr,
1142                                abi_ulong target_addrlen)
1143 {
1144     socklen_t addrlen = tget32(target_addrlen);
1145     void *addr = alloca(addrlen);
1146     abi_long ret;
1147 
1148     ret = get_errno(getpeername(fd, addr, &addrlen));
1149     if (!is_error(ret)) {
1150         host_to_target_sockaddr(target_addr, addr, addrlen);
1151         tput32(target_addrlen, addrlen);
1152     }
1153     return ret;
1154 }
1155 
1156 /* do_getsockname() Must return target values and target errnos. */
1157 static abi_long do_getsockname(int fd, abi_ulong target_addr,
1158                                abi_ulong target_addrlen)
1159 {
1160     socklen_t addrlen = tget32(target_addrlen);
1161     void *addr = alloca(addrlen);
1162     abi_long ret;
1163 
1164     ret = get_errno(getsockname(fd, addr, &addrlen));
1165     if (!is_error(ret)) {
1166         host_to_target_sockaddr(target_addr, addr, addrlen);
1167         tput32(target_addrlen, addrlen);
1168     }
1169     return ret;
1170 }
1171 
1172 /* do_socketpair() Must return target values and target errnos. */
1173 static abi_long do_socketpair(int domain, int type, int protocol,
1174                               abi_ulong target_tab)
1175 {
1176     int tab[2];
1177     abi_long ret;
1178 
1179     ret = get_errno(socketpair(domain, type, protocol, tab));
1180     if (!is_error(ret)) {
1181         tput32(target_tab, tab[0]);
1182         tput32(target_tab + 4, tab[1]);
1183     }
1184     return ret;
1185 }
1186 
1187 /* do_sendto() Must return target values and target errnos. */
1188 static abi_long do_sendto(int fd, abi_ulong msg, size_t len, int flags,
1189                           abi_ulong target_addr, socklen_t addrlen)
1190 {
1191     void *addr;
1192     void *host_msg;
1193     abi_long ret;
1194 
1195     host_msg = lock_user(VERIFY_READ, msg, len, 1);
1196     if (!host_msg)
1197         return -TARGET_EFAULT;
1198     if (target_addr) {
1199         addr = alloca(addrlen);
1200         target_to_host_sockaddr(addr, target_addr, addrlen);
1201         ret = get_errno(sendto(fd, host_msg, len, flags, addr, addrlen));
1202     } else {
1203         ret = get_errno(send(fd, host_msg, len, flags));
1204     }
1205     unlock_user(host_msg, msg, 0);
1206     return ret;
1207 }
1208 
1209 /* do_recvfrom() Must return target values and target errnos. */
1210 static abi_long do_recvfrom(int fd, abi_ulong msg, size_t len, int flags,
1211                             abi_ulong target_addr,
1212                             abi_ulong target_addrlen)
1213 {
1214     socklen_t addrlen;
1215     void *addr;
1216     void *host_msg;
1217     abi_long ret;
1218 
1219     host_msg = lock_user(VERIFY_WRITE, msg, len, 0);
1220     if (!host_msg)
1221         return -TARGET_EFAULT;
1222     if (target_addr) {
1223         addrlen = tget32(target_addrlen);
1224         addr = alloca(addrlen);
1225         ret = get_errno(recvfrom(fd, host_msg, len, flags, addr, &addrlen));
1226     } else {
1227         addr = NULL; /* To keep compiler quiet.  */
1228         ret = get_errno(recv(fd, host_msg, len, flags));
1229     }
1230     if (!is_error(ret)) {
1231         if (target_addr) {
1232             host_to_target_sockaddr(target_addr, addr, addrlen);
1233             tput32(target_addrlen, addrlen);
1234         }
1235         unlock_user(host_msg, msg, len);
1236     } else {
1237         unlock_user(host_msg, msg, 0);
1238     }
1239     return ret;
1240 }
1241 
1242 #ifdef TARGET_NR_socketcall
1243 /* do_socketcall() Must return target values and target errnos. */
1244 static abi_long do_socketcall(int num, abi_ulong vptr)
1245 {
1246     abi_long ret;
1247     const int n = sizeof(abi_ulong);
1248 
1249     switch(num) {
1250     case SOCKOP_socket:
1251 	{
1252             int domain = tgetl(vptr);
1253             int type = tgetl(vptr + n);
1254             int protocol = tgetl(vptr + 2 * n);
1255             ret = do_socket(domain, type, protocol);
1256 	}
1257         break;
1258     case SOCKOP_bind:
1259 	{
1260             int sockfd = tgetl(vptr);
1261             abi_ulong target_addr = tgetl(vptr + n);
1262             socklen_t addrlen = tgetl(vptr + 2 * n);
1263             ret = do_bind(sockfd, target_addr, addrlen);
1264         }
1265         break;
1266     case SOCKOP_connect:
1267         {
1268             int sockfd = tgetl(vptr);
1269             abi_ulong target_addr = tgetl(vptr + n);
1270             socklen_t addrlen = tgetl(vptr + 2 * n);
1271             ret = do_connect(sockfd, target_addr, addrlen);
1272         }
1273         break;
1274     case SOCKOP_listen:
1275         {
1276             int sockfd = tgetl(vptr);
1277             int backlog = tgetl(vptr + n);
1278             ret = get_errno(listen(sockfd, backlog));
1279         }
1280         break;
1281     case SOCKOP_accept:
1282         {
1283             int sockfd = tgetl(vptr);
1284             abi_ulong target_addr = tgetl(vptr + n);
1285             abi_ulong target_addrlen = tgetl(vptr + 2 * n);
1286             ret = do_accept(sockfd, target_addr, target_addrlen);
1287         }
1288         break;
1289     case SOCKOP_getsockname:
1290         {
1291             int sockfd = tgetl(vptr);
1292             abi_ulong target_addr = tgetl(vptr + n);
1293             abi_ulong target_addrlen = tgetl(vptr + 2 * n);
1294             ret = do_getsockname(sockfd, target_addr, target_addrlen);
1295         }
1296         break;
1297     case SOCKOP_getpeername:
1298         {
1299             int sockfd = tgetl(vptr);
1300             abi_ulong target_addr = tgetl(vptr + n);
1301             abi_ulong target_addrlen = tgetl(vptr + 2 * n);
1302             ret = do_getpeername(sockfd, target_addr, target_addrlen);
1303         }
1304         break;
1305     case SOCKOP_socketpair:
1306         {
1307             int domain = tgetl(vptr);
1308             int type = tgetl(vptr + n);
1309             int protocol = tgetl(vptr + 2 * n);
1310             abi_ulong tab = tgetl(vptr + 3 * n);
1311             ret = do_socketpair(domain, type, protocol, tab);
1312         }
1313         break;
1314     case SOCKOP_send:
1315         {
1316             int sockfd = tgetl(vptr);
1317             abi_ulong msg = tgetl(vptr + n);
1318             size_t len = tgetl(vptr + 2 * n);
1319             int flags = tgetl(vptr + 3 * n);
1320             ret = do_sendto(sockfd, msg, len, flags, 0, 0);
1321         }
1322         break;
1323     case SOCKOP_recv:
1324         {
1325             int sockfd = tgetl(vptr);
1326             abi_ulong msg = tgetl(vptr + n);
1327             size_t len = tgetl(vptr + 2 * n);
1328             int flags = tgetl(vptr + 3 * n);
1329             ret = do_recvfrom(sockfd, msg, len, flags, 0, 0);
1330         }
1331         break;
1332     case SOCKOP_sendto:
1333         {
1334             int sockfd = tgetl(vptr);
1335             abi_ulong msg = tgetl(vptr + n);
1336             size_t len = tgetl(vptr + 2 * n);
1337             int flags = tgetl(vptr + 3 * n);
1338             abi_ulong addr = tgetl(vptr + 4 * n);
1339             socklen_t addrlen = tgetl(vptr + 5 * n);
1340             ret = do_sendto(sockfd, msg, len, flags, addr, addrlen);
1341         }
1342         break;
1343     case SOCKOP_recvfrom:
1344         {
1345             int sockfd = tgetl(vptr);
1346             abi_ulong msg = tgetl(vptr + n);
1347             size_t len = tgetl(vptr + 2 * n);
1348             int flags = tgetl(vptr + 3 * n);
1349             abi_ulong addr = tgetl(vptr + 4 * n);
1350             abi_ulong addrlen = tgetl(vptr + 5 * n);
1351             ret = do_recvfrom(sockfd, msg, len, flags, addr, addrlen);
1352         }
1353         break;
1354     case SOCKOP_shutdown:
1355         {
1356             int sockfd = tgetl(vptr);
1357             int how = tgetl(vptr + n);
1358 
1359             ret = get_errno(shutdown(sockfd, how));
1360         }
1361         break;
1362     case SOCKOP_sendmsg:
1363     case SOCKOP_recvmsg:
1364         {
1365             int fd;
1366             abi_ulong target_msg;
1367             int flags;
1368 
1369             fd = tgetl(vptr);
1370             target_msg = tgetl(vptr + n);
1371             flags = tgetl(vptr + 2 * n);
1372 
1373             ret = do_sendrecvmsg(fd, target_msg, flags,
1374                                  (num == SOCKOP_sendmsg));
1375         }
1376         break;
1377     case SOCKOP_setsockopt:
1378         {
1379             int sockfd = tgetl(vptr);
1380             int level = tgetl(vptr + n);
1381             int optname = tgetl(vptr + 2 * n);
1382             abi_ulong optval = tgetl(vptr + 3 * n);
1383             socklen_t optlen = tgetl(vptr + 4 * n);
1384 
1385             ret = do_setsockopt(sockfd, level, optname, optval, optlen);
1386         }
1387         break;
1388     case SOCKOP_getsockopt:
1389         {
1390             int sockfd = tgetl(vptr);
1391             int level = tgetl(vptr + n);
1392             int optname = tgetl(vptr + 2 * n);
1393             abi_ulong optval = tgetl(vptr + 3 * n);
1394             abi_ulong poptlen = tgetl(vptr + 4 * n);
1395 
1396             ret = do_getsockopt(sockfd, level, optname, optval, poptlen);
1397         }
1398         break;
1399     default:
1400         gemu_log("Unsupported socketcall: %d\n", num);
1401         ret = -TARGET_ENOSYS;
1402         break;
1403     }
1404     return ret;
1405 }
1406 #endif
1407 
1408 #ifdef TARGET_NR_ipc
1409 #define N_SHM_REGIONS	32
1410 
1411 static struct shm_region {
1412     uint32_t	start;
1413     uint32_t	size;
1414 } shm_regions[N_SHM_REGIONS];
1415 
1416 struct target_ipc_perm
1417 {
1418     abi_long __key;
1419     abi_ulong uid;
1420     abi_ulong gid;
1421     abi_ulong cuid;
1422     abi_ulong cgid;
1423     unsigned short int mode;
1424     unsigned short int __pad1;
1425     unsigned short int __seq;
1426     unsigned short int __pad2;
1427     abi_ulong __unused1;
1428     abi_ulong __unused2;
1429 };
1430 
1431 struct target_semid_ds
1432 {
1433   struct target_ipc_perm sem_perm;
1434   abi_ulong sem_otime;
1435   abi_ulong __unused1;
1436   abi_ulong sem_ctime;
1437   abi_ulong __unused2;
1438   abi_ulong sem_nsems;
1439   abi_ulong __unused3;
1440   abi_ulong __unused4;
1441 };
1442 
1443 static inline abi_long target_to_host_ipc_perm(struct ipc_perm *host_ip,
1444                                                abi_ulong target_addr)
1445 {
1446     struct target_ipc_perm *target_ip;
1447     struct target_semid_ds *target_sd;
1448 
1449     if (!lock_user_struct(VERIFY_READ, target_sd, target_addr, 1))
1450         return -TARGET_EFAULT;
1451     target_ip=&(target_sd->sem_perm);
1452     host_ip->__key = tswapl(target_ip->__key);
1453     host_ip->uid = tswapl(target_ip->uid);
1454     host_ip->gid = tswapl(target_ip->gid);
1455     host_ip->cuid = tswapl(target_ip->cuid);
1456     host_ip->cgid = tswapl(target_ip->cgid);
1457     host_ip->mode = tswapl(target_ip->mode);
1458     unlock_user_struct(target_sd, target_addr, 0);
1459     return 0;
1460 }
1461 
1462 static inline abi_long host_to_target_ipc_perm(abi_ulong target_addr,
1463                                                struct ipc_perm *host_ip)
1464 {
1465     struct target_ipc_perm *target_ip;
1466     struct target_semid_ds *target_sd;
1467 
1468     if (!lock_user_struct(VERIFY_WRITE, target_sd, target_addr, 0))
1469         return -TARGET_EFAULT;
1470     target_ip = &(target_sd->sem_perm);
1471     target_ip->__key = tswapl(host_ip->__key);
1472     target_ip->uid = tswapl(host_ip->uid);
1473     target_ip->gid = tswapl(host_ip->gid);
1474     target_ip->cuid = tswapl(host_ip->cuid);
1475     target_ip->cgid = tswapl(host_ip->cgid);
1476     target_ip->mode = tswapl(host_ip->mode);
1477     unlock_user_struct(target_sd, target_addr, 1);
1478     return 0;
1479 }
1480 
1481 static inline abi_long target_to_host_semid_ds(struct semid_ds *host_sd,
1482                                                abi_ulong target_addr)
1483 {
1484     struct target_semid_ds *target_sd;
1485 
1486     if (!lock_user_struct(VERIFY_READ, target_sd, target_addr, 1))
1487         return -TARGET_EFAULT;
1488     target_to_host_ipc_perm(&(host_sd->sem_perm),target_addr);
1489     host_sd->sem_nsems = tswapl(target_sd->sem_nsems);
1490     host_sd->sem_otime = tswapl(target_sd->sem_otime);
1491     host_sd->sem_ctime = tswapl(target_sd->sem_ctime);
1492     unlock_user_struct(target_sd, target_addr, 0);
1493     return 0;
1494 }
1495 
1496 static inline abi_long host_to_target_semid_ds(abi_ulong target_addr,
1497                                                struct semid_ds *host_sd)
1498 {
1499     struct target_semid_ds *target_sd;
1500 
1501     if (!lock_user_struct(VERIFY_WRITE, target_sd, target_addr, 0))
1502         return -TARGET_EFAULT;
1503     host_to_target_ipc_perm(target_addr,&(host_sd->sem_perm));
1504     target_sd->sem_nsems = tswapl(host_sd->sem_nsems);
1505     target_sd->sem_otime = tswapl(host_sd->sem_otime);
1506     target_sd->sem_ctime = tswapl(host_sd->sem_ctime);
1507     unlock_user_struct(target_sd, target_addr, 1);
1508     return 0;
1509 }
1510 
1511 union semun {
1512 	int val;
1513 	struct semid_ds *buf;
1514 	unsigned short *array;
1515 };
1516 
1517 union target_semun {
1518 	int val;
1519 	abi_long buf;
1520 	unsigned short int *array;
1521 };
1522 
1523 static inline abi_long target_to_host_semun(int cmd,
1524                                             union semun *host_su,
1525                                             abi_ulong target_addr,
1526                                             struct semid_ds *ds)
1527 {
1528     union target_semun *target_su;
1529 
1530     switch( cmd ) {
1531 	case IPC_STAT:
1532 	case IPC_SET:
1533            if (!lock_user_struct(VERIFY_READ, target_su, target_addr, 1))
1534                return -TARGET_EFAULT;
1535 	   target_to_host_semid_ds(ds,target_su->buf);
1536 	   host_su->buf = ds;
1537            unlock_user_struct(target_su, target_addr, 0);
1538 	   break;
1539 	case GETVAL:
1540 	case SETVAL:
1541            if (!lock_user_struct(VERIFY_READ, target_su, target_addr, 1))
1542                return -TARGET_EFAULT;
1543 	   host_su->val = tswapl(target_su->val);
1544            unlock_user_struct(target_su, target_addr, 0);
1545 	   break;
1546 	case GETALL:
1547 	case SETALL:
1548            if (!lock_user_struct(VERIFY_READ, target_su, target_addr, 1))
1549                return -TARGET_EFAULT;
1550 	   *host_su->array = tswap16(*target_su->array);
1551            unlock_user_struct(target_su, target_addr, 0);
1552 	   break;
1553 	default:
1554            gemu_log("semun operation not fully supported: %d\n", (int)cmd);
1555     }
1556     return 0;
1557 }
1558 
1559 static inline abi_long host_to_target_semun(int cmd,
1560                                             abi_ulong target_addr,
1561                                             union semun *host_su,
1562                                             struct semid_ds *ds)
1563 {
1564     union target_semun *target_su;
1565 
1566     switch( cmd ) {
1567 	case IPC_STAT:
1568 	case IPC_SET:
1569            if (lock_user_struct(VERIFY_WRITE, target_su, target_addr, 0))
1570                return -TARGET_EFAULT;
1571 	   host_to_target_semid_ds(target_su->buf,ds);
1572            unlock_user_struct(target_su, target_addr, 1);
1573 	   break;
1574 	case GETVAL:
1575 	case SETVAL:
1576            if (lock_user_struct(VERIFY_WRITE, target_su, target_addr, 0))
1577                return -TARGET_EFAULT;
1578 	   target_su->val = tswapl(host_su->val);
1579            unlock_user_struct(target_su, target_addr, 1);
1580 	   break;
1581 	case GETALL:
1582 	case SETALL:
1583            if (lock_user_struct(VERIFY_WRITE, target_su, target_addr, 0))
1584                return -TARGET_EFAULT;
1585 	   *target_su->array = tswap16(*host_su->array);
1586            unlock_user_struct(target_su, target_addr, 1);
1587 	   break;
1588         default:
1589            gemu_log("semun operation not fully supported: %d\n", (int)cmd);
1590     }
1591     return 0;
1592 }
1593 
1594 static inline abi_long do_semctl(int first, int second, int third,
1595                                  abi_long ptr)
1596 {
1597     union semun arg;
1598     struct semid_ds dsarg;
1599     int cmd = third&0xff;
1600     abi_long ret = 0;
1601 
1602     switch( cmd ) {
1603 	case GETVAL:
1604             target_to_host_semun(cmd,&arg,ptr,&dsarg);
1605             ret = get_errno(semctl(first, second, cmd, arg));
1606             host_to_target_semun(cmd,ptr,&arg,&dsarg);
1607             break;
1608 	case SETVAL:
1609             target_to_host_semun(cmd,&arg,ptr,&dsarg);
1610             ret = get_errno(semctl(first, second, cmd, arg));
1611             host_to_target_semun(cmd,ptr,&arg,&dsarg);
1612             break;
1613 	case GETALL:
1614             target_to_host_semun(cmd,&arg,ptr,&dsarg);
1615             ret = get_errno(semctl(first, second, cmd, arg));
1616             host_to_target_semun(cmd,ptr,&arg,&dsarg);
1617             break;
1618 	case SETALL:
1619             target_to_host_semun(cmd,&arg,ptr,&dsarg);
1620             ret = get_errno(semctl(first, second, cmd, arg));
1621             host_to_target_semun(cmd,ptr,&arg,&dsarg);
1622             break;
1623 	case IPC_STAT:
1624             target_to_host_semun(cmd,&arg,ptr,&dsarg);
1625             ret = get_errno(semctl(first, second, cmd, arg));
1626             host_to_target_semun(cmd,ptr,&arg,&dsarg);
1627             break;
1628 	case IPC_SET:
1629             target_to_host_semun(cmd,&arg,ptr,&dsarg);
1630             ret = get_errno(semctl(first, second, cmd, arg));
1631             host_to_target_semun(cmd,ptr,&arg,&dsarg);
1632             break;
1633     default:
1634             ret = get_errno(semctl(first, second, cmd, arg));
1635     }
1636 
1637     return ret;
1638 }
1639 
1640 struct target_msqid_ds
1641 {
1642   struct target_ipc_perm msg_perm;
1643   abi_ulong msg_stime;
1644   abi_ulong __unused1;
1645   abi_ulong msg_rtime;
1646   abi_ulong __unused2;
1647   abi_ulong msg_ctime;
1648   abi_ulong __unused3;
1649   abi_ulong __msg_cbytes;
1650   abi_ulong msg_qnum;
1651   abi_ulong msg_qbytes;
1652   abi_ulong msg_lspid;
1653   abi_ulong msg_lrpid;
1654   abi_ulong __unused4;
1655   abi_ulong __unused5;
1656 };
1657 
1658 static inline abi_long target_to_host_msqid_ds(struct msqid_ds *host_md,
1659                                                abi_ulong target_addr)
1660 {
1661     struct target_msqid_ds *target_md;
1662 
1663     if (!lock_user_struct(VERIFY_READ, target_md, target_addr, 1))
1664         return -TARGET_EFAULT;
1665     target_to_host_ipc_perm(&(host_md->msg_perm),target_addr);
1666     host_md->msg_stime = tswapl(target_md->msg_stime);
1667     host_md->msg_rtime = tswapl(target_md->msg_rtime);
1668     host_md->msg_ctime = tswapl(target_md->msg_ctime);
1669     host_md->__msg_cbytes = tswapl(target_md->__msg_cbytes);
1670     host_md->msg_qnum = tswapl(target_md->msg_qnum);
1671     host_md->msg_qbytes = tswapl(target_md->msg_qbytes);
1672     host_md->msg_lspid = tswapl(target_md->msg_lspid);
1673     host_md->msg_lrpid = tswapl(target_md->msg_lrpid);
1674     unlock_user_struct(target_md, target_addr, 0);
1675     return 0;
1676 }
1677 
1678 static inline abi_long host_to_target_msqid_ds(abi_ulong target_addr,
1679                                                struct msqid_ds *host_md)
1680 {
1681     struct target_msqid_ds *target_md;
1682 
1683     if (!lock_user_struct(VERIFY_WRITE, target_md, target_addr, 0))
1684         return -TARGET_EFAULT;
1685     host_to_target_ipc_perm(target_addr,&(host_md->msg_perm));
1686     target_md->msg_stime = tswapl(host_md->msg_stime);
1687     target_md->msg_rtime = tswapl(host_md->msg_rtime);
1688     target_md->msg_ctime = tswapl(host_md->msg_ctime);
1689     target_md->__msg_cbytes = tswapl(host_md->__msg_cbytes);
1690     target_md->msg_qnum = tswapl(host_md->msg_qnum);
1691     target_md->msg_qbytes = tswapl(host_md->msg_qbytes);
1692     target_md->msg_lspid = tswapl(host_md->msg_lspid);
1693     target_md->msg_lrpid = tswapl(host_md->msg_lrpid);
1694     unlock_user_struct(target_md, target_addr, 1);
1695     return 0;
1696 }
1697 
1698 static inline abi_long do_msgctl(int first, int second, abi_long ptr)
1699 {
1700     struct msqid_ds dsarg;
1701     int cmd = second&0xff;
1702     abi_long ret = 0;
1703     switch( cmd ) {
1704     case IPC_STAT:
1705     case IPC_SET:
1706         target_to_host_msqid_ds(&dsarg,ptr);
1707         ret = get_errno(msgctl(first, cmd, &dsarg));
1708         host_to_target_msqid_ds(ptr,&dsarg);
1709     default:
1710         ret = get_errno(msgctl(first, cmd, &dsarg));
1711     }
1712     return ret;
1713 }
1714 
1715 struct target_msgbuf {
1716 	abi_ulong mtype;
1717 	char	mtext[1];
1718 };
1719 
1720 static inline abi_long do_msgsnd(int msqid, abi_long msgp,
1721                                  unsigned int msgsz, int msgflg)
1722 {
1723     struct target_msgbuf *target_mb;
1724     struct msgbuf *host_mb;
1725     abi_long ret = 0;
1726 
1727     if (!lock_user_struct(VERIFY_READ, target_mb, msgp, 0))
1728         return -TARGET_EFAULT;
1729     host_mb = malloc(msgsz+sizeof(long));
1730     host_mb->mtype = tswapl(target_mb->mtype);
1731     memcpy(host_mb->mtext,target_mb->mtext,msgsz);
1732     ret = get_errno(msgsnd(msqid, host_mb, msgsz, msgflg));
1733     free(host_mb);
1734     unlock_user_struct(target_mb, msgp, 0);
1735 
1736     return ret;
1737 }
1738 
1739 static inline abi_long do_msgrcv(int msqid, abi_long msgp,
1740                                  unsigned int msgsz, int msgtype,
1741                                  int msgflg)
1742 {
1743     struct target_msgbuf *target_mb;
1744     char *target_mtext;
1745     struct msgbuf *host_mb;
1746     abi_long ret = 0;
1747 
1748     if (!lock_user_struct(VERIFY_WRITE, target_mb, msgp, 0))
1749         return -TARGET_EFAULT;
1750     host_mb = malloc(msgsz+sizeof(long));
1751     ret = get_errno(msgrcv(msqid, host_mb, msgsz, 1, msgflg));
1752     if (ret > 0) {
1753         abi_ulong target_mtext_addr = msgp + sizeof(abi_ulong);
1754         target_mtext = lock_user(VERIFY_WRITE, target_mtext_addr, ret, 0);
1755         if (!target_mtext) {
1756             ret = -TARGET_EFAULT;
1757             goto end;
1758         }
1759     	memcpy(target_mb->mtext, host_mb->mtext, ret);
1760         unlock_user(target_mtext, target_mtext_addr, ret);
1761     }
1762     target_mb->mtype = tswapl(host_mb->mtype);
1763     free(host_mb);
1764 
1765 end:
1766     if (target_mb)
1767         unlock_user_struct(target_mb, msgp, 1);
1768     return ret;
1769 }
1770 
1771 /* ??? This only works with linear mappings.  */
1772 /* do_ipc() must return target values and target errnos. */
1773 static abi_long do_ipc(unsigned int call, int first,
1774                        int second, int third,
1775                        abi_long ptr, abi_long fifth)
1776 {
1777     int version;
1778     abi_long ret = 0;
1779     unsigned long raddr;
1780     struct shmid_ds shm_info;
1781     int i;
1782 
1783     version = call >> 16;
1784     call &= 0xffff;
1785 
1786     switch (call) {
1787     case IPCOP_semop:
1788         ret = get_errno(semop(first,(struct sembuf *)g2h(ptr), second));
1789         break;
1790 
1791     case IPCOP_semget:
1792         ret = get_errno(semget(first, second, third));
1793         break;
1794 
1795     case IPCOP_semctl:
1796         ret = do_semctl(first, second, third, ptr);
1797         break;
1798 
1799     case IPCOP_semtimedop:
1800         gemu_log("Unsupported ipc call: %d (version %d)\n", call, version);
1801         ret = -TARGET_ENOSYS;
1802         break;
1803 
1804 	case IPCOP_msgget:
1805 		ret = get_errno(msgget(first, second));
1806 		break;
1807 
1808 	case IPCOP_msgsnd:
1809 		ret = do_msgsnd(first, ptr, second, third);
1810 		break;
1811 
1812 	case IPCOP_msgctl:
1813         	ret = do_msgctl(first, second, ptr);
1814 		break;
1815 
1816 	case IPCOP_msgrcv:
1817                 {
1818                       /* XXX: this code is not correct */
1819                       struct ipc_kludge
1820                       {
1821                               void *__unbounded msgp;
1822                               long int msgtyp;
1823                       };
1824 
1825                       struct ipc_kludge *foo = (struct ipc_kludge *)g2h(ptr);
1826                       struct msgbuf *msgp = (struct msgbuf *) foo->msgp;
1827 
1828                       ret = do_msgrcv(first, (long)msgp, second, 0, third);
1829 
1830                 }
1831 		break;
1832 
1833     case IPCOP_shmat:
1834 	/* SHM_* flags are the same on all linux platforms */
1835 	ret = get_errno((long) shmat(first, (void *) ptr, second));
1836         if (is_error(ret))
1837             break;
1838         raddr = ret;
1839 	/* find out the length of the shared memory segment */
1840 
1841         ret = get_errno(shmctl(first, IPC_STAT, &shm_info));
1842         if (is_error(ret)) {
1843             /* can't get length, bail out */
1844             shmdt((void *) raddr);
1845 	    break;
1846 	}
1847 	page_set_flags(raddr, raddr + shm_info.shm_segsz,
1848 		       PAGE_VALID | PAGE_READ |
1849 		       ((second & SHM_RDONLY)? 0: PAGE_WRITE));
1850 	for (i = 0; i < N_SHM_REGIONS; ++i) {
1851 	    if (shm_regions[i].start == 0) {
1852 		shm_regions[i].start = raddr;
1853 		shm_regions[i].size = shm_info.shm_segsz;
1854                 break;
1855 	    }
1856 	}
1857         if (put_user(raddr, third, abi_ulong))
1858             return -TARGET_EFAULT;
1859         ret = 0;
1860 	break;
1861     case IPCOP_shmdt:
1862 	for (i = 0; i < N_SHM_REGIONS; ++i) {
1863 	    if (shm_regions[i].start == ptr) {
1864 		shm_regions[i].start = 0;
1865 		page_set_flags(ptr, shm_regions[i].size, 0);
1866 		break;
1867 	    }
1868 	}
1869 	ret = get_errno(shmdt((void *) ptr));
1870 	break;
1871 
1872     case IPCOP_shmget:
1873 	/* IPC_* flag values are the same on all linux platforms */
1874 	ret = get_errno(shmget(first, second, third));
1875 	break;
1876 
1877 	/* IPC_* and SHM_* command values are the same on all linux platforms */
1878     case IPCOP_shmctl:
1879         switch(second) {
1880         case IPC_RMID:
1881         case SHM_LOCK:
1882         case SHM_UNLOCK:
1883             ret = get_errno(shmctl(first, second, NULL));
1884             break;
1885         default:
1886             goto unimplemented;
1887         }
1888         break;
1889     default:
1890     unimplemented:
1891 	gemu_log("Unsupported ipc call: %d (version %d)\n", call, version);
1892 	ret = -TARGET_ENOSYS;
1893 	break;
1894     }
1895     return ret;
1896 }
1897 #endif
1898 
1899 /* kernel structure types definitions */
1900 #define IFNAMSIZ        16
1901 
1902 #define STRUCT(name, list...) STRUCT_ ## name,
1903 #define STRUCT_SPECIAL(name) STRUCT_ ## name,
1904 enum {
1905 #include "syscall_types.h"
1906 };
1907 #undef STRUCT
1908 #undef STRUCT_SPECIAL
1909 
1910 #define STRUCT(name, list...) const argtype struct_ ## name ## _def[] = { list, TYPE_NULL };
1911 #define STRUCT_SPECIAL(name)
1912 #include "syscall_types.h"
1913 #undef STRUCT
1914 #undef STRUCT_SPECIAL
1915 
1916 typedef struct IOCTLEntry {
1917     unsigned int target_cmd;
1918     unsigned int host_cmd;
1919     const char *name;
1920     int access;
1921     const argtype arg_type[5];
1922 } IOCTLEntry;
1923 
1924 #define IOC_R 0x0001
1925 #define IOC_W 0x0002
1926 #define IOC_RW (IOC_R | IOC_W)
1927 
1928 #define MAX_STRUCT_SIZE 4096
1929 
1930 IOCTLEntry ioctl_entries[] = {
1931 #define IOCTL(cmd, access, types...) \
1932     { TARGET_ ## cmd, cmd, #cmd, access, { types } },
1933 #include "ioctls.h"
1934     { 0, 0, },
1935 };
1936 
1937 /* ??? Implement proper locking for ioctls.  */
1938 /* do_ioctl() Must return target values and target errnos. */
1939 static abi_long do_ioctl(int fd, abi_long cmd, abi_long arg)
1940 {
1941     const IOCTLEntry *ie;
1942     const argtype *arg_type;
1943     abi_long ret;
1944     uint8_t buf_temp[MAX_STRUCT_SIZE];
1945     int target_size;
1946     void *argptr;
1947 
1948     ie = ioctl_entries;
1949     for(;;) {
1950         if (ie->target_cmd == 0) {
1951             gemu_log("Unsupported ioctl: cmd=0x%04lx\n", (long)cmd);
1952             return -TARGET_ENOSYS;
1953         }
1954         if (ie->target_cmd == cmd)
1955             break;
1956         ie++;
1957     }
1958     arg_type = ie->arg_type;
1959 #if defined(DEBUG)
1960     gemu_log("ioctl: cmd=0x%04lx (%s)\n", (long)cmd, ie->name);
1961 #endif
1962     switch(arg_type[0]) {
1963     case TYPE_NULL:
1964         /* no argument */
1965         ret = get_errno(ioctl(fd, ie->host_cmd));
1966         break;
1967     case TYPE_PTRVOID:
1968     case TYPE_INT:
1969         /* int argment */
1970         ret = get_errno(ioctl(fd, ie->host_cmd, arg));
1971         break;
1972     case TYPE_PTR:
1973         arg_type++;
1974         target_size = thunk_type_size(arg_type, 0);
1975         switch(ie->access) {
1976         case IOC_R:
1977             ret = get_errno(ioctl(fd, ie->host_cmd, buf_temp));
1978             if (!is_error(ret)) {
1979                 argptr = lock_user(VERIFY_WRITE, arg, target_size, 0);
1980                 if (!argptr)
1981                     return -TARGET_EFAULT;
1982                 thunk_convert(argptr, buf_temp, arg_type, THUNK_TARGET);
1983                 unlock_user(argptr, arg, target_size);
1984             }
1985             break;
1986         case IOC_W:
1987             argptr = lock_user(VERIFY_READ, arg, target_size, 1);
1988             if (!argptr)
1989                 return -TARGET_EFAULT;
1990             thunk_convert(buf_temp, argptr, arg_type, THUNK_HOST);
1991             unlock_user(argptr, arg, 0);
1992             ret = get_errno(ioctl(fd, ie->host_cmd, buf_temp));
1993             break;
1994         default:
1995         case IOC_RW:
1996             argptr = lock_user(VERIFY_READ, arg, target_size, 1);
1997             if (!argptr)
1998                 return -TARGET_EFAULT;
1999             thunk_convert(buf_temp, argptr, arg_type, THUNK_HOST);
2000             unlock_user(argptr, arg, 0);
2001             ret = get_errno(ioctl(fd, ie->host_cmd, buf_temp));
2002             if (!is_error(ret)) {
2003                 argptr = lock_user(VERIFY_WRITE, arg, target_size, 0);
2004                 if (!argptr)
2005                     return -TARGET_EFAULT;
2006                 thunk_convert(argptr, buf_temp, arg_type, THUNK_TARGET);
2007                 unlock_user(argptr, arg, target_size);
2008             }
2009             break;
2010         }
2011         break;
2012     default:
2013         gemu_log("Unsupported ioctl type: cmd=0x%04lx type=%d\n",
2014                  (long)cmd, arg_type[0]);
2015         ret = -TARGET_ENOSYS;
2016         break;
2017     }
2018     return ret;
2019 }
2020 
2021 bitmask_transtbl iflag_tbl[] = {
2022         { TARGET_IGNBRK, TARGET_IGNBRK, IGNBRK, IGNBRK },
2023         { TARGET_BRKINT, TARGET_BRKINT, BRKINT, BRKINT },
2024         { TARGET_IGNPAR, TARGET_IGNPAR, IGNPAR, IGNPAR },
2025         { TARGET_PARMRK, TARGET_PARMRK, PARMRK, PARMRK },
2026         { TARGET_INPCK, TARGET_INPCK, INPCK, INPCK },
2027         { TARGET_ISTRIP, TARGET_ISTRIP, ISTRIP, ISTRIP },
2028         { TARGET_INLCR, TARGET_INLCR, INLCR, INLCR },
2029         { TARGET_IGNCR, TARGET_IGNCR, IGNCR, IGNCR },
2030         { TARGET_ICRNL, TARGET_ICRNL, ICRNL, ICRNL },
2031         { TARGET_IUCLC, TARGET_IUCLC, IUCLC, IUCLC },
2032         { TARGET_IXON, TARGET_IXON, IXON, IXON },
2033         { TARGET_IXANY, TARGET_IXANY, IXANY, IXANY },
2034         { TARGET_IXOFF, TARGET_IXOFF, IXOFF, IXOFF },
2035         { TARGET_IMAXBEL, TARGET_IMAXBEL, IMAXBEL, IMAXBEL },
2036         { 0, 0, 0, 0 }
2037 };
2038 
2039 bitmask_transtbl oflag_tbl[] = {
2040 	{ TARGET_OPOST, TARGET_OPOST, OPOST, OPOST },
2041 	{ TARGET_OLCUC, TARGET_OLCUC, OLCUC, OLCUC },
2042 	{ TARGET_ONLCR, TARGET_ONLCR, ONLCR, ONLCR },
2043 	{ TARGET_OCRNL, TARGET_OCRNL, OCRNL, OCRNL },
2044 	{ TARGET_ONOCR, TARGET_ONOCR, ONOCR, ONOCR },
2045 	{ TARGET_ONLRET, TARGET_ONLRET, ONLRET, ONLRET },
2046 	{ TARGET_OFILL, TARGET_OFILL, OFILL, OFILL },
2047 	{ TARGET_OFDEL, TARGET_OFDEL, OFDEL, OFDEL },
2048 	{ TARGET_NLDLY, TARGET_NL0, NLDLY, NL0 },
2049 	{ TARGET_NLDLY, TARGET_NL1, NLDLY, NL1 },
2050 	{ TARGET_CRDLY, TARGET_CR0, CRDLY, CR0 },
2051 	{ TARGET_CRDLY, TARGET_CR1, CRDLY, CR1 },
2052 	{ TARGET_CRDLY, TARGET_CR2, CRDLY, CR2 },
2053 	{ TARGET_CRDLY, TARGET_CR3, CRDLY, CR3 },
2054 	{ TARGET_TABDLY, TARGET_TAB0, TABDLY, TAB0 },
2055 	{ TARGET_TABDLY, TARGET_TAB1, TABDLY, TAB1 },
2056 	{ TARGET_TABDLY, TARGET_TAB2, TABDLY, TAB2 },
2057 	{ TARGET_TABDLY, TARGET_TAB3, TABDLY, TAB3 },
2058 	{ TARGET_BSDLY, TARGET_BS0, BSDLY, BS0 },
2059 	{ TARGET_BSDLY, TARGET_BS1, BSDLY, BS1 },
2060 	{ TARGET_VTDLY, TARGET_VT0, VTDLY, VT0 },
2061 	{ TARGET_VTDLY, TARGET_VT1, VTDLY, VT1 },
2062 	{ TARGET_FFDLY, TARGET_FF0, FFDLY, FF0 },
2063 	{ TARGET_FFDLY, TARGET_FF1, FFDLY, FF1 },
2064 	{ 0, 0, 0, 0 }
2065 };
2066 
2067 bitmask_transtbl cflag_tbl[] = {
2068 	{ TARGET_CBAUD, TARGET_B0, CBAUD, B0 },
2069 	{ TARGET_CBAUD, TARGET_B50, CBAUD, B50 },
2070 	{ TARGET_CBAUD, TARGET_B75, CBAUD, B75 },
2071 	{ TARGET_CBAUD, TARGET_B110, CBAUD, B110 },
2072 	{ TARGET_CBAUD, TARGET_B134, CBAUD, B134 },
2073 	{ TARGET_CBAUD, TARGET_B150, CBAUD, B150 },
2074 	{ TARGET_CBAUD, TARGET_B200, CBAUD, B200 },
2075 	{ TARGET_CBAUD, TARGET_B300, CBAUD, B300 },
2076 	{ TARGET_CBAUD, TARGET_B600, CBAUD, B600 },
2077 	{ TARGET_CBAUD, TARGET_B1200, CBAUD, B1200 },
2078 	{ TARGET_CBAUD, TARGET_B1800, CBAUD, B1800 },
2079 	{ TARGET_CBAUD, TARGET_B2400, CBAUD, B2400 },
2080 	{ TARGET_CBAUD, TARGET_B4800, CBAUD, B4800 },
2081 	{ TARGET_CBAUD, TARGET_B9600, CBAUD, B9600 },
2082 	{ TARGET_CBAUD, TARGET_B19200, CBAUD, B19200 },
2083 	{ TARGET_CBAUD, TARGET_B38400, CBAUD, B38400 },
2084 	{ TARGET_CBAUD, TARGET_B57600, CBAUD, B57600 },
2085 	{ TARGET_CBAUD, TARGET_B115200, CBAUD, B115200 },
2086 	{ TARGET_CBAUD, TARGET_B230400, CBAUD, B230400 },
2087 	{ TARGET_CBAUD, TARGET_B460800, CBAUD, B460800 },
2088 	{ TARGET_CSIZE, TARGET_CS5, CSIZE, CS5 },
2089 	{ TARGET_CSIZE, TARGET_CS6, CSIZE, CS6 },
2090 	{ TARGET_CSIZE, TARGET_CS7, CSIZE, CS7 },
2091 	{ TARGET_CSIZE, TARGET_CS8, CSIZE, CS8 },
2092 	{ TARGET_CSTOPB, TARGET_CSTOPB, CSTOPB, CSTOPB },
2093 	{ TARGET_CREAD, TARGET_CREAD, CREAD, CREAD },
2094 	{ TARGET_PARENB, TARGET_PARENB, PARENB, PARENB },
2095 	{ TARGET_PARODD, TARGET_PARODD, PARODD, PARODD },
2096 	{ TARGET_HUPCL, TARGET_HUPCL, HUPCL, HUPCL },
2097 	{ TARGET_CLOCAL, TARGET_CLOCAL, CLOCAL, CLOCAL },
2098 	{ TARGET_CRTSCTS, TARGET_CRTSCTS, CRTSCTS, CRTSCTS },
2099 	{ 0, 0, 0, 0 }
2100 };
2101 
2102 bitmask_transtbl lflag_tbl[] = {
2103 	{ TARGET_ISIG, TARGET_ISIG, ISIG, ISIG },
2104 	{ TARGET_ICANON, TARGET_ICANON, ICANON, ICANON },
2105 	{ TARGET_XCASE, TARGET_XCASE, XCASE, XCASE },
2106 	{ TARGET_ECHO, TARGET_ECHO, ECHO, ECHO },
2107 	{ TARGET_ECHOE, TARGET_ECHOE, ECHOE, ECHOE },
2108 	{ TARGET_ECHOK, TARGET_ECHOK, ECHOK, ECHOK },
2109 	{ TARGET_ECHONL, TARGET_ECHONL, ECHONL, ECHONL },
2110 	{ TARGET_NOFLSH, TARGET_NOFLSH, NOFLSH, NOFLSH },
2111 	{ TARGET_TOSTOP, TARGET_TOSTOP, TOSTOP, TOSTOP },
2112 	{ TARGET_ECHOCTL, TARGET_ECHOCTL, ECHOCTL, ECHOCTL },
2113 	{ TARGET_ECHOPRT, TARGET_ECHOPRT, ECHOPRT, ECHOPRT },
2114 	{ TARGET_ECHOKE, TARGET_ECHOKE, ECHOKE, ECHOKE },
2115 	{ TARGET_FLUSHO, TARGET_FLUSHO, FLUSHO, FLUSHO },
2116 	{ TARGET_PENDIN, TARGET_PENDIN, PENDIN, PENDIN },
2117 	{ TARGET_IEXTEN, TARGET_IEXTEN, IEXTEN, IEXTEN },
2118 	{ 0, 0, 0, 0 }
2119 };
2120 
2121 static void target_to_host_termios (void *dst, const void *src)
2122 {
2123     struct host_termios *host = dst;
2124     const struct target_termios *target = src;
2125 
2126     host->c_iflag =
2127         target_to_host_bitmask(tswap32(target->c_iflag), iflag_tbl);
2128     host->c_oflag =
2129         target_to_host_bitmask(tswap32(target->c_oflag), oflag_tbl);
2130     host->c_cflag =
2131         target_to_host_bitmask(tswap32(target->c_cflag), cflag_tbl);
2132     host->c_lflag =
2133         target_to_host_bitmask(tswap32(target->c_lflag), lflag_tbl);
2134     host->c_line = target->c_line;
2135 
2136     host->c_cc[VINTR] = target->c_cc[TARGET_VINTR];
2137     host->c_cc[VQUIT] = target->c_cc[TARGET_VQUIT];
2138     host->c_cc[VERASE] = target->c_cc[TARGET_VERASE];
2139     host->c_cc[VKILL] = target->c_cc[TARGET_VKILL];
2140     host->c_cc[VEOF] = target->c_cc[TARGET_VEOF];
2141     host->c_cc[VTIME] = target->c_cc[TARGET_VTIME];
2142     host->c_cc[VMIN] = target->c_cc[TARGET_VMIN];
2143     host->c_cc[VSWTC] = target->c_cc[TARGET_VSWTC];
2144     host->c_cc[VSTART] = target->c_cc[TARGET_VSTART];
2145     host->c_cc[VSTOP] = target->c_cc[TARGET_VSTOP];
2146     host->c_cc[VSUSP] = target->c_cc[TARGET_VSUSP];
2147     host->c_cc[VEOL] = target->c_cc[TARGET_VEOL];
2148     host->c_cc[VREPRINT] = target->c_cc[TARGET_VREPRINT];
2149     host->c_cc[VDISCARD] = target->c_cc[TARGET_VDISCARD];
2150     host->c_cc[VWERASE] = target->c_cc[TARGET_VWERASE];
2151     host->c_cc[VLNEXT] = target->c_cc[TARGET_VLNEXT];
2152     host->c_cc[VEOL2] = target->c_cc[TARGET_VEOL2];
2153 }
2154 
2155 static void host_to_target_termios (void *dst, const void *src)
2156 {
2157     struct target_termios *target = dst;
2158     const struct host_termios *host = src;
2159 
2160     target->c_iflag =
2161         tswap32(host_to_target_bitmask(host->c_iflag, iflag_tbl));
2162     target->c_oflag =
2163         tswap32(host_to_target_bitmask(host->c_oflag, oflag_tbl));
2164     target->c_cflag =
2165         tswap32(host_to_target_bitmask(host->c_cflag, cflag_tbl));
2166     target->c_lflag =
2167         tswap32(host_to_target_bitmask(host->c_lflag, lflag_tbl));
2168     target->c_line = host->c_line;
2169 
2170     target->c_cc[TARGET_VINTR] = host->c_cc[VINTR];
2171     target->c_cc[TARGET_VQUIT] = host->c_cc[VQUIT];
2172     target->c_cc[TARGET_VERASE] = host->c_cc[VERASE];
2173     target->c_cc[TARGET_VKILL] = host->c_cc[VKILL];
2174     target->c_cc[TARGET_VEOF] = host->c_cc[VEOF];
2175     target->c_cc[TARGET_VTIME] = host->c_cc[VTIME];
2176     target->c_cc[TARGET_VMIN] = host->c_cc[VMIN];
2177     target->c_cc[TARGET_VSWTC] = host->c_cc[VSWTC];
2178     target->c_cc[TARGET_VSTART] = host->c_cc[VSTART];
2179     target->c_cc[TARGET_VSTOP] = host->c_cc[VSTOP];
2180     target->c_cc[TARGET_VSUSP] = host->c_cc[VSUSP];
2181     target->c_cc[TARGET_VEOL] = host->c_cc[VEOL];
2182     target->c_cc[TARGET_VREPRINT] = host->c_cc[VREPRINT];
2183     target->c_cc[TARGET_VDISCARD] = host->c_cc[VDISCARD];
2184     target->c_cc[TARGET_VWERASE] = host->c_cc[VWERASE];
2185     target->c_cc[TARGET_VLNEXT] = host->c_cc[VLNEXT];
2186     target->c_cc[TARGET_VEOL2] = host->c_cc[VEOL2];
2187 }
2188 
2189 StructEntry struct_termios_def = {
2190     .convert = { host_to_target_termios, target_to_host_termios },
2191     .size = { sizeof(struct target_termios), sizeof(struct host_termios) },
2192     .align = { __alignof__(struct target_termios), __alignof__(struct host_termios) },
2193 };
2194 
2195 static bitmask_transtbl mmap_flags_tbl[] = {
2196 	{ TARGET_MAP_SHARED, TARGET_MAP_SHARED, MAP_SHARED, MAP_SHARED },
2197 	{ TARGET_MAP_PRIVATE, TARGET_MAP_PRIVATE, MAP_PRIVATE, MAP_PRIVATE },
2198 	{ TARGET_MAP_FIXED, TARGET_MAP_FIXED, MAP_FIXED, MAP_FIXED },
2199 	{ TARGET_MAP_ANONYMOUS, TARGET_MAP_ANONYMOUS, MAP_ANONYMOUS, MAP_ANONYMOUS },
2200 	{ TARGET_MAP_GROWSDOWN, TARGET_MAP_GROWSDOWN, MAP_GROWSDOWN, MAP_GROWSDOWN },
2201 	{ TARGET_MAP_DENYWRITE, TARGET_MAP_DENYWRITE, MAP_DENYWRITE, MAP_DENYWRITE },
2202 	{ TARGET_MAP_EXECUTABLE, TARGET_MAP_EXECUTABLE, MAP_EXECUTABLE, MAP_EXECUTABLE },
2203 	{ TARGET_MAP_LOCKED, TARGET_MAP_LOCKED, MAP_LOCKED, MAP_LOCKED },
2204 	{ 0, 0, 0, 0 }
2205 };
2206 
2207 static bitmask_transtbl fcntl_flags_tbl[] = {
2208 	{ TARGET_O_ACCMODE,   TARGET_O_WRONLY,    O_ACCMODE,   O_WRONLY,    },
2209 	{ TARGET_O_ACCMODE,   TARGET_O_RDWR,      O_ACCMODE,   O_RDWR,      },
2210 	{ TARGET_O_CREAT,     TARGET_O_CREAT,     O_CREAT,     O_CREAT,     },
2211 	{ TARGET_O_EXCL,      TARGET_O_EXCL,      O_EXCL,      O_EXCL,      },
2212 	{ TARGET_O_NOCTTY,    TARGET_O_NOCTTY,    O_NOCTTY,    O_NOCTTY,    },
2213 	{ TARGET_O_TRUNC,     TARGET_O_TRUNC,     O_TRUNC,     O_TRUNC,     },
2214 	{ TARGET_O_APPEND,    TARGET_O_APPEND,    O_APPEND,    O_APPEND,    },
2215 	{ TARGET_O_NONBLOCK,  TARGET_O_NONBLOCK,  O_NONBLOCK,  O_NONBLOCK,  },
2216 	{ TARGET_O_SYNC,      TARGET_O_SYNC,      O_SYNC,      O_SYNC,      },
2217 	{ TARGET_FASYNC,      TARGET_FASYNC,      FASYNC,      FASYNC,      },
2218 	{ TARGET_O_DIRECTORY, TARGET_O_DIRECTORY, O_DIRECTORY, O_DIRECTORY, },
2219 	{ TARGET_O_NOFOLLOW,  TARGET_O_NOFOLLOW,  O_NOFOLLOW,  O_NOFOLLOW,  },
2220 	{ TARGET_O_LARGEFILE, TARGET_O_LARGEFILE, O_LARGEFILE, O_LARGEFILE, },
2221 #if defined(O_DIRECT)
2222 	{ TARGET_O_DIRECT,    TARGET_O_DIRECT,    O_DIRECT,    O_DIRECT,    },
2223 #endif
2224 	{ 0, 0, 0, 0 }
2225 };
2226 
2227 #if defined(TARGET_I386)
2228 
2229 /* NOTE: there is really one LDT for all the threads */
2230 uint8_t *ldt_table;
2231 
2232 static int read_ldt(abi_ulong ptr, unsigned long bytecount)
2233 {
2234     int size;
2235     void *p;
2236 
2237     if (!ldt_table)
2238         return 0;
2239     size = TARGET_LDT_ENTRIES * TARGET_LDT_ENTRY_SIZE;
2240     if (size > bytecount)
2241         size = bytecount;
2242     p = lock_user(VERIFY_WRITE, ptr, size, 0);
2243     if (!p)
2244         return -EFAULT;
2245     /* ??? Should this by byteswapped?  */
2246     memcpy(p, ldt_table, size);
2247     unlock_user(p, ptr, size);
2248     return size;
2249 }
2250 
2251 /* XXX: add locking support */
2252 /* write_ldt() returns host errnos */
2253 static int write_ldt(CPUX86State *env,
2254                      abi_ulong ptr, unsigned long bytecount, int oldmode)
2255 {
2256     struct target_modify_ldt_ldt_s ldt_info;
2257     struct target_modify_ldt_ldt_s *target_ldt_info;
2258     int seg_32bit, contents, read_exec_only, limit_in_pages;
2259     int seg_not_present, useable;
2260     uint32_t *lp, entry_1, entry_2;
2261 
2262     if (bytecount != sizeof(ldt_info))
2263         return -EINVAL;
2264     if (!lock_user_struct(VERIFY_READ, target_ldt_info, ptr, 1))
2265         return -EFAULT;
2266     ldt_info.entry_number = tswap32(target_ldt_info->entry_number);
2267     ldt_info.base_addr = tswapl(target_ldt_info->base_addr);
2268     ldt_info.limit = tswap32(target_ldt_info->limit);
2269     ldt_info.flags = tswap32(target_ldt_info->flags);
2270     unlock_user_struct(target_ldt_info, ptr, 0);
2271 
2272     if (ldt_info.entry_number >= TARGET_LDT_ENTRIES)
2273         return -EINVAL;
2274     seg_32bit = ldt_info.flags & 1;
2275     contents = (ldt_info.flags >> 1) & 3;
2276     read_exec_only = (ldt_info.flags >> 3) & 1;
2277     limit_in_pages = (ldt_info.flags >> 4) & 1;
2278     seg_not_present = (ldt_info.flags >> 5) & 1;
2279     useable = (ldt_info.flags >> 6) & 1;
2280 
2281     if (contents == 3) {
2282         if (oldmode)
2283             return -EINVAL;
2284         if (seg_not_present == 0)
2285             return -EINVAL;
2286     }
2287     /* allocate the LDT */
2288     if (!ldt_table) {
2289         ldt_table = malloc(TARGET_LDT_ENTRIES * TARGET_LDT_ENTRY_SIZE);
2290         if (!ldt_table)
2291             return -ENOMEM;
2292         memset(ldt_table, 0, TARGET_LDT_ENTRIES * TARGET_LDT_ENTRY_SIZE);
2293         env->ldt.base = h2g(ldt_table);
2294         env->ldt.limit = 0xffff;
2295     }
2296 
2297     /* NOTE: same code as Linux kernel */
2298     /* Allow LDTs to be cleared by the user. */
2299     if (ldt_info.base_addr == 0 && ldt_info.limit == 0) {
2300         if (oldmode ||
2301             (contents == 0		&&
2302              read_exec_only == 1	&&
2303              seg_32bit == 0		&&
2304              limit_in_pages == 0	&&
2305              seg_not_present == 1	&&
2306              useable == 0 )) {
2307             entry_1 = 0;
2308             entry_2 = 0;
2309             goto install;
2310         }
2311     }
2312 
2313     entry_1 = ((ldt_info.base_addr & 0x0000ffff) << 16) |
2314         (ldt_info.limit & 0x0ffff);
2315     entry_2 = (ldt_info.base_addr & 0xff000000) |
2316         ((ldt_info.base_addr & 0x00ff0000) >> 16) |
2317         (ldt_info.limit & 0xf0000) |
2318         ((read_exec_only ^ 1) << 9) |
2319         (contents << 10) |
2320         ((seg_not_present ^ 1) << 15) |
2321         (seg_32bit << 22) |
2322         (limit_in_pages << 23) |
2323         0x7000;
2324     if (!oldmode)
2325         entry_2 |= (useable << 20);
2326 
2327     /* Install the new entry ...  */
2328 install:
2329     lp = (uint32_t *)(ldt_table + (ldt_info.entry_number << 3));
2330     lp[0] = tswap32(entry_1);
2331     lp[1] = tswap32(entry_2);
2332     return 0;
2333 }
2334 
2335 /* specific and weird i386 syscalls */
2336 /* do_modify_ldt() returns host errnos (it is inconsistent with the
2337    other do_*() functions which return target errnos). */
2338 int do_modify_ldt(CPUX86State *env, int func, abi_ulong ptr, unsigned long bytecount)
2339 {
2340     int ret = -ENOSYS;
2341 
2342     switch (func) {
2343     case 0:
2344         ret = read_ldt(ptr, bytecount);
2345         break;
2346     case 1:
2347         ret = write_ldt(env, ptr, bytecount, 1);
2348         break;
2349     case 0x11:
2350         ret = write_ldt(env, ptr, bytecount, 0);
2351         break;
2352     }
2353     return ret;
2354 }
2355 
2356 #endif /* defined(TARGET_I386) */
2357 
2358 /* this stack is the equivalent of the kernel stack associated with a
2359    thread/process */
2360 #define NEW_STACK_SIZE 8192
2361 
2362 static int clone_func(void *arg)
2363 {
2364     CPUState *env = arg;
2365     cpu_loop(env);
2366     /* never exits */
2367     return 0;
2368 }
2369 
2370 /* do_fork() Must return host values and target errnos (unlike most
2371    do_*() functions). */
2372 int do_fork(CPUState *env, unsigned int flags, abi_ulong newsp)
2373 {
2374     int ret;
2375     TaskState *ts;
2376     uint8_t *new_stack;
2377     CPUState *new_env;
2378 
2379     if (flags & CLONE_VM) {
2380         ts = malloc(sizeof(TaskState) + NEW_STACK_SIZE);
2381         memset(ts, 0, sizeof(TaskState));
2382         new_stack = ts->stack;
2383         ts->used = 1;
2384         /* add in task state list */
2385         ts->next = first_task_state;
2386         first_task_state = ts;
2387         /* we create a new CPU instance. */
2388         new_env = cpu_copy(env);
2389 #if defined(TARGET_I386)
2390         if (!newsp)
2391             newsp = env->regs[R_ESP];
2392         new_env->regs[R_ESP] = newsp;
2393         new_env->regs[R_EAX] = 0;
2394 #elif defined(TARGET_ARM)
2395         if (!newsp)
2396             newsp = env->regs[13];
2397         new_env->regs[13] = newsp;
2398         new_env->regs[0] = 0;
2399 #elif defined(TARGET_SPARC)
2400         if (!newsp)
2401             newsp = env->regwptr[22];
2402         new_env->regwptr[22] = newsp;
2403         new_env->regwptr[0] = 0;
2404 	/* XXXXX */
2405         printf ("HELPME: %s:%d\n", __FILE__, __LINE__);
2406 #elif defined(TARGET_M68K)
2407         if (!newsp)
2408             newsp = env->aregs[7];
2409         new_env->aregs[7] = newsp;
2410         new_env->dregs[0] = 0;
2411         /* ??? is this sufficient?  */
2412 #elif defined(TARGET_MIPS)
2413         if (!newsp)
2414             newsp = env->gpr[29][env->current_tc];
2415         new_env->gpr[29][env->current_tc] = newsp;
2416 #elif defined(TARGET_PPC)
2417         if (!newsp)
2418             newsp = env->gpr[1];
2419         new_env->gpr[1] = newsp;
2420         {
2421             int i;
2422             for (i = 7; i < 32; i++)
2423                 new_env->gpr[i] = 0;
2424         }
2425 #elif defined(TARGET_SH4)
2426 	if (!newsp)
2427 	  newsp = env->gregs[15];
2428 	new_env->gregs[15] = newsp;
2429 	/* XXXXX */
2430 #elif defined(TARGET_ALPHA)
2431        if (!newsp)
2432          newsp = env->ir[30];
2433        new_env->ir[30] = newsp;
2434         /* ? */
2435         {
2436             int i;
2437             for (i = 7; i < 30; i++)
2438                 new_env->ir[i] = 0;
2439         }
2440 #elif defined(TARGET_CRIS)
2441 	if (!newsp)
2442 	  newsp = env->regs[14];
2443 	new_env->regs[14] = newsp;
2444 #else
2445 #error unsupported target CPU
2446 #endif
2447         new_env->opaque = ts;
2448 #ifdef __ia64__
2449         ret = __clone2(clone_func, new_stack + NEW_STACK_SIZE, flags, new_env);
2450 #else
2451 	ret = clone(clone_func, new_stack + NEW_STACK_SIZE, flags, new_env);
2452 #endif
2453     } else {
2454         /* if no CLONE_VM, we consider it is a fork */
2455         if ((flags & ~CSIGNAL) != 0)
2456             return -EINVAL;
2457         ret = fork();
2458     }
2459     return ret;
2460 }
2461 
2462 static abi_long do_fcntl(int fd, int cmd, abi_ulong arg)
2463 {
2464     struct flock fl;
2465     struct target_flock *target_fl;
2466     struct flock64 fl64;
2467     struct target_flock64 *target_fl64;
2468     abi_long ret;
2469 
2470     switch(cmd) {
2471     case TARGET_F_GETLK:
2472         if (!lock_user_struct(VERIFY_READ, target_fl, arg, 1))
2473             return -TARGET_EFAULT;
2474         fl.l_type = tswap16(target_fl->l_type);
2475         fl.l_whence = tswap16(target_fl->l_whence);
2476         fl.l_start = tswapl(target_fl->l_start);
2477         fl.l_len = tswapl(target_fl->l_len);
2478         fl.l_pid = tswapl(target_fl->l_pid);
2479         unlock_user_struct(target_fl, arg, 0);
2480         ret = fcntl(fd, cmd, &fl);
2481         if (ret == 0) {
2482             if (!lock_user_struct(VERIFY_WRITE, target_fl, arg, 0))
2483                 return -TARGET_EFAULT;
2484             target_fl->l_type = tswap16(fl.l_type);
2485             target_fl->l_whence = tswap16(fl.l_whence);
2486             target_fl->l_start = tswapl(fl.l_start);
2487             target_fl->l_len = tswapl(fl.l_len);
2488             target_fl->l_pid = tswapl(fl.l_pid);
2489             unlock_user_struct(target_fl, arg, 1);
2490         }
2491         break;
2492 
2493     case TARGET_F_SETLK:
2494     case TARGET_F_SETLKW:
2495         if (!lock_user_struct(VERIFY_READ, target_fl, arg, 1))
2496             return -TARGET_EFAULT;
2497         fl.l_type = tswap16(target_fl->l_type);
2498         fl.l_whence = tswap16(target_fl->l_whence);
2499         fl.l_start = tswapl(target_fl->l_start);
2500         fl.l_len = tswapl(target_fl->l_len);
2501         fl.l_pid = tswapl(target_fl->l_pid);
2502         unlock_user_struct(target_fl, arg, 0);
2503         ret = fcntl(fd, cmd, &fl);
2504         break;
2505 
2506     case TARGET_F_GETLK64:
2507         if (!lock_user_struct(VERIFY_READ, target_fl64, arg, 1))
2508             return -TARGET_EFAULT;
2509         fl64.l_type = tswap16(target_fl64->l_type) >> 1;
2510         fl64.l_whence = tswap16(target_fl64->l_whence);
2511         fl64.l_start = tswapl(target_fl64->l_start);
2512         fl64.l_len = tswapl(target_fl64->l_len);
2513         fl64.l_pid = tswap16(target_fl64->l_pid);
2514         unlock_user_struct(target_fl64, arg, 0);
2515         ret = fcntl(fd, cmd >> 1, &fl64);
2516         if (ret == 0) {
2517             if (!lock_user_struct(VERIFY_WRITE, target_fl64, arg, 0))
2518                 return -TARGET_EFAULT;
2519             target_fl64->l_type = tswap16(fl64.l_type) >> 1;
2520             target_fl64->l_whence = tswap16(fl64.l_whence);
2521             target_fl64->l_start = tswapl(fl64.l_start);
2522             target_fl64->l_len = tswapl(fl64.l_len);
2523             target_fl64->l_pid = tswapl(fl64.l_pid);
2524             unlock_user_struct(target_fl64, arg, 1);
2525         }
2526 		break;
2527     case TARGET_F_SETLK64:
2528     case TARGET_F_SETLKW64:
2529         if (!lock_user_struct(VERIFY_READ, target_fl64, arg, 1))
2530             return -TARGET_EFAULT;
2531         fl64.l_type = tswap16(target_fl64->l_type) >> 1;
2532         fl64.l_whence = tswap16(target_fl64->l_whence);
2533         fl64.l_start = tswapl(target_fl64->l_start);
2534         fl64.l_len = tswapl(target_fl64->l_len);
2535         fl64.l_pid = tswap16(target_fl64->l_pid);
2536         unlock_user_struct(target_fl64, arg, 0);
2537         ret = fcntl(fd, cmd >> 1, &fl64);
2538         break;
2539 
2540     case F_GETFL:
2541         ret = fcntl(fd, cmd, arg);
2542         ret = host_to_target_bitmask(ret, fcntl_flags_tbl);
2543         break;
2544 
2545     case F_SETFL:
2546         ret = fcntl(fd, cmd, target_to_host_bitmask(arg, fcntl_flags_tbl));
2547         break;
2548 
2549     default:
2550         ret = fcntl(fd, cmd, arg);
2551         break;
2552     }
2553     return ret;
2554 }
2555 
2556 #ifdef USE_UID16
2557 
2558 static inline int high2lowuid(int uid)
2559 {
2560     if (uid > 65535)
2561         return 65534;
2562     else
2563         return uid;
2564 }
2565 
2566 static inline int high2lowgid(int gid)
2567 {
2568     if (gid > 65535)
2569         return 65534;
2570     else
2571         return gid;
2572 }
2573 
2574 static inline int low2highuid(int uid)
2575 {
2576     if ((int16_t)uid == -1)
2577         return -1;
2578     else
2579         return uid;
2580 }
2581 
2582 static inline int low2highgid(int gid)
2583 {
2584     if ((int16_t)gid == -1)
2585         return -1;
2586     else
2587         return gid;
2588 }
2589 
2590 #endif /* USE_UID16 */
2591 
2592 void syscall_init(void)
2593 {
2594     IOCTLEntry *ie;
2595     const argtype *arg_type;
2596     int size;
2597     int i;
2598 
2599 #define STRUCT(name, list...) thunk_register_struct(STRUCT_ ## name, #name, struct_ ## name ## _def);
2600 #define STRUCT_SPECIAL(name) thunk_register_struct_direct(STRUCT_ ## name, #name, &struct_ ## name ## _def);
2601 #include "syscall_types.h"
2602 #undef STRUCT
2603 #undef STRUCT_SPECIAL
2604 
2605     /* we patch the ioctl size if necessary. We rely on the fact that
2606        no ioctl has all the bits at '1' in the size field */
2607     ie = ioctl_entries;
2608     while (ie->target_cmd != 0) {
2609         if (((ie->target_cmd >> TARGET_IOC_SIZESHIFT) & TARGET_IOC_SIZEMASK) ==
2610             TARGET_IOC_SIZEMASK) {
2611             arg_type = ie->arg_type;
2612             if (arg_type[0] != TYPE_PTR) {
2613                 fprintf(stderr, "cannot patch size for ioctl 0x%x\n",
2614                         ie->target_cmd);
2615                 exit(1);
2616             }
2617             arg_type++;
2618             size = thunk_type_size(arg_type, 0);
2619             ie->target_cmd = (ie->target_cmd &
2620                               ~(TARGET_IOC_SIZEMASK << TARGET_IOC_SIZESHIFT)) |
2621                 (size << TARGET_IOC_SIZESHIFT);
2622         }
2623 
2624         /* Build target_to_host_errno_table[] table from
2625          * host_to_target_errno_table[]. */
2626         for (i=0; i < ERRNO_TABLE_SIZE; i++)
2627                 target_to_host_errno_table[host_to_target_errno_table[i]] = i;
2628 
2629         /* automatic consistency check if same arch */
2630 #if defined(__i386__) && defined(TARGET_I386)
2631         if (ie->target_cmd != ie->host_cmd) {
2632             fprintf(stderr, "ERROR: ioctl: target=0x%x host=0x%x\n",
2633                     ie->target_cmd, ie->host_cmd);
2634         }
2635 #endif
2636         ie++;
2637     }
2638 }
2639 
2640 #if TARGET_ABI_BITS == 32
2641 static inline uint64_t target_offset64(uint32_t word0, uint32_t word1)
2642 {
2643 #ifdef TARGET_WORDS_BIG_ENDIAN
2644     return ((uint64_t)word0 << 32) | word1;
2645 #else
2646     return ((uint64_t)word1 << 32) | word0;
2647 #endif
2648 }
2649 #else /* TARGET_ABI_BITS == 32 */
2650 static inline uint64_t target_offset64(uint64_t word0, uint64_t word1)
2651 {
2652     return word0;
2653 }
2654 #endif /* TARGET_ABI_BITS != 32 */
2655 
2656 #ifdef TARGET_NR_truncate64
2657 static inline abi_long target_truncate64(void *cpu_env, const char *arg1,
2658                                          abi_long arg2,
2659                                          abi_long arg3,
2660                                          abi_long arg4)
2661 {
2662 #ifdef TARGET_ARM
2663     if (((CPUARMState *)cpu_env)->eabi)
2664       {
2665         arg2 = arg3;
2666         arg3 = arg4;
2667       }
2668 #endif
2669     return get_errno(truncate64(arg1, target_offset64(arg2, arg3)));
2670 }
2671 #endif
2672 
2673 #ifdef TARGET_NR_ftruncate64
2674 static inline abi_long target_ftruncate64(void *cpu_env, abi_long arg1,
2675                                           abi_long arg2,
2676                                           abi_long arg3,
2677                                           abi_long arg4)
2678 {
2679 #ifdef TARGET_ARM
2680     if (((CPUARMState *)cpu_env)->eabi)
2681       {
2682         arg2 = arg3;
2683         arg3 = arg4;
2684       }
2685 #endif
2686     return get_errno(ftruncate64(arg1, target_offset64(arg2, arg3)));
2687 }
2688 #endif
2689 
2690 static inline abi_long target_to_host_timespec(struct timespec *host_ts,
2691                                                abi_ulong target_addr)
2692 {
2693     struct target_timespec *target_ts;
2694 
2695     if (!lock_user_struct(VERIFY_READ, target_ts, target_addr, 1))
2696         return -TARGET_EFAULT;
2697     host_ts->tv_sec = tswapl(target_ts->tv_sec);
2698     host_ts->tv_nsec = tswapl(target_ts->tv_nsec);
2699     unlock_user_struct(target_ts, target_addr, 0);
2700 }
2701 
2702 static inline abi_long host_to_target_timespec(abi_ulong target_addr,
2703                                                struct timespec *host_ts)
2704 {
2705     struct target_timespec *target_ts;
2706 
2707     if (!lock_user_struct(VERIFY_WRITE, target_ts, target_addr, 0))
2708         return -TARGET_EFAULT;
2709     target_ts->tv_sec = tswapl(host_ts->tv_sec);
2710     target_ts->tv_nsec = tswapl(host_ts->tv_nsec);
2711     unlock_user_struct(target_ts, target_addr, 1);
2712 }
2713 
2714 /* do_syscall() should always have a single exit point at the end so
2715    that actions, such as logging of syscall results, can be performed.
2716    All errnos that do_syscall() returns must be -TARGET_<errcode>. */
2717 abi_long do_syscall(void *cpu_env, int num, abi_long arg1,
2718                     abi_long arg2, abi_long arg3, abi_long arg4,
2719                     abi_long arg5, abi_long arg6)
2720 {
2721     abi_long ret;
2722     struct stat st;
2723     struct statfs stfs;
2724     void *p;
2725 
2726 #ifdef DEBUG
2727     gemu_log("syscall %d", num);
2728 #endif
2729     if(do_strace)
2730         print_syscall(num, arg1, arg2, arg3, arg4, arg5, arg6);
2731 
2732     switch(num) {
2733     case TARGET_NR_exit:
2734 #ifdef HAVE_GPROF
2735         _mcleanup();
2736 #endif
2737         gdb_exit(cpu_env, arg1);
2738         /* XXX: should free thread stack and CPU env */
2739         _exit(arg1);
2740         ret = 0; /* avoid warning */
2741         break;
2742     case TARGET_NR_read:
2743         page_unprotect_range(arg2, arg3);
2744         if (!(p = lock_user(VERIFY_WRITE, arg2, arg3, 0)))
2745             goto efault;
2746         ret = get_errno(read(arg1, p, arg3));
2747         unlock_user(p, arg2, ret);
2748         break;
2749     case TARGET_NR_write:
2750         if (!(p = lock_user(VERIFY_READ, arg2, arg3, 1)))
2751             goto efault;
2752         ret = get_errno(write(arg1, p, arg3));
2753         unlock_user(p, arg2, 0);
2754         break;
2755     case TARGET_NR_open:
2756         if (!(p = lock_user_string(arg1))) {
2757             return -TARGET_EFAULT;
2758             goto fail;
2759         }
2760         ret = get_errno(open(path(p),
2761                              target_to_host_bitmask(arg2, fcntl_flags_tbl),
2762                              arg3));
2763         unlock_user(p, arg1, 0);
2764         break;
2765 #if defined(TARGET_NR_openat) && defined(__NR_openat)
2766     case TARGET_NR_openat:
2767         if (!(p = lock_user_string(arg2)))
2768             goto efault;
2769         ret = get_errno(sys_openat(arg1,
2770                                    path(p),
2771                                    target_to_host_bitmask(arg3, fcntl_flags_tbl),
2772                                    arg4));
2773         unlock_user(p, arg2, 0);
2774         break;
2775 #endif
2776     case TARGET_NR_close:
2777         ret = get_errno(close(arg1));
2778         break;
2779     case TARGET_NR_brk:
2780         ret = do_brk(arg1);
2781         break;
2782     case TARGET_NR_fork:
2783         ret = get_errno(do_fork(cpu_env, SIGCHLD, 0));
2784         break;
2785 #ifdef TARGET_NR_waitpid
2786     case TARGET_NR_waitpid:
2787         {
2788             int status;
2789             ret = get_errno(waitpid(arg1, &status, arg3));
2790             if (!is_error(ret) && arg2)
2791                 tput32(arg2, status);
2792         }
2793         break;
2794 #endif
2795 #ifdef TARGET_NR_creat /* not on alpha */
2796     case TARGET_NR_creat:
2797         if (!(p = lock_user_string(arg1)))
2798             goto efault;
2799         ret = get_errno(creat(p, arg2));
2800         unlock_user(p, arg1, 0);
2801         break;
2802 #endif
2803     case TARGET_NR_link:
2804         {
2805             void * p2;
2806             p = lock_user_string(arg1);
2807             p2 = lock_user_string(arg2);
2808             if (!p || !p2)
2809                 ret = -TARGET_EFAULT;
2810             else
2811                 ret = get_errno(link(p, p2));
2812             unlock_user(p2, arg2, 0);
2813             unlock_user(p, arg1, 0);
2814         }
2815         break;
2816 #if defined(TARGET_NR_linkat) && defined(__NR_linkat)
2817     case TARGET_NR_linkat:
2818         {
2819             void * p2 = NULL;
2820             if (!arg2 || !arg4)
2821                 goto efault;
2822             p  = lock_user_string(arg2);
2823             p2 = lock_user_string(arg4);
2824             if (!p || !p2)
2825                 ret = -TARGET_EFAULT;
2826             else
2827                 ret = get_errno(sys_linkat(arg1, p, arg3, p2, arg5));
2828             unlock_user(p, arg2, 0);
2829             unlock_user(p2, arg4, 0);
2830         }
2831         break;
2832 #endif
2833     case TARGET_NR_unlink:
2834         if (!(p = lock_user_string(arg1)))
2835             goto efault;
2836         ret = get_errno(unlink(p));
2837         unlock_user(p, arg1, 0);
2838         break;
2839 #if defined(TARGET_NR_unlinkat) && defined(__NR_unlinkat)
2840     case TARGET_NR_unlinkat:
2841         if (!(p = lock_user_string(arg2)))
2842             goto efault;
2843         ret = get_errno(sys_unlinkat(arg1, p, arg3));
2844         unlock_user(p, arg2, 0);
2845 #endif
2846     case TARGET_NR_execve:
2847         {
2848             char **argp, **envp;
2849             int argc, envc;
2850             abi_ulong gp;
2851             abi_ulong guest_argp;
2852             abi_ulong guest_envp;
2853             abi_ulong addr;
2854             char **q;
2855 
2856             argc = 0;
2857             guest_argp = arg2;
2858             for (gp = guest_argp; tgetl(gp); gp++)
2859                 argc++;
2860             envc = 0;
2861             guest_envp = arg3;
2862             for (gp = guest_envp; tgetl(gp); gp++)
2863                 envc++;
2864 
2865             argp = alloca((argc + 1) * sizeof(void *));
2866             envp = alloca((envc + 1) * sizeof(void *));
2867 
2868             for (gp = guest_argp, q = argp; ;
2869                   gp += sizeof(abi_ulong), q++) {
2870                 addr = tgetl(gp);
2871                 if (!addr)
2872                     break;
2873                 if (!(*q = lock_user_string(addr))) {
2874                     ret = -TARGET_EFAULT;
2875                     goto execve_fail;
2876                 }
2877             }
2878             *q = NULL;
2879 
2880             for (gp = guest_envp, q = envp; ;
2881                   gp += sizeof(abi_ulong), q++) {
2882                 addr = tgetl(gp);
2883                 if (!addr)
2884                     break;
2885                 if (!(*q = lock_user_string(addr))) {
2886                     ret = -TARGET_EFAULT;
2887                     goto execve_fail;
2888                 }
2889             }
2890             *q = NULL;
2891 
2892             if (!(p = lock_user_string(arg1))) {
2893                 ret = -TARGET_EFAULT;
2894                 goto execve_fail;
2895             }
2896             ret = get_errno(execve(p, argp, envp));
2897             unlock_user(p, arg1, 0);
2898 
2899         execve_fail:
2900             for (gp = guest_argp, q = argp; *q;
2901                   gp += sizeof(abi_ulong), q++) {
2902                 addr = tgetl(gp);
2903                 unlock_user(*q, addr, 0);
2904             }
2905             for (gp = guest_envp, q = envp; *q;
2906                   gp += sizeof(abi_ulong), q++) {
2907                 addr = tgetl(gp);
2908                 unlock_user(*q, addr, 0);
2909             }
2910         }
2911         break;
2912     case TARGET_NR_chdir:
2913         if (!(p = lock_user_string(arg1)))
2914             goto efault;
2915         ret = get_errno(chdir(p));
2916         unlock_user(p, arg1, 0);
2917         break;
2918 #ifdef TARGET_NR_time
2919     case TARGET_NR_time:
2920         {
2921             time_t host_time;
2922             ret = get_errno(time(&host_time));
2923             if (!is_error(ret) && arg1)
2924                 tputl(arg1, host_time);
2925         }
2926         break;
2927 #endif
2928     case TARGET_NR_mknod:
2929         if (!(p = lock_user_string(arg1)))
2930             goto efault;
2931         ret = get_errno(mknod(p, arg2, arg3));
2932         unlock_user(p, arg1, 0);
2933         break;
2934 #if defined(TARGET_NR_mknodat) && defined(__NR_mknodat)
2935     case TARGET_NR_mknodat:
2936         if (!(p = lock_user_string(arg2)))
2937             goto efault;
2938         ret = get_errno(sys_mknodat(arg1, p, arg3, arg4));
2939         unlock_user(p, arg2, 0);
2940         break;
2941 #endif
2942     case TARGET_NR_chmod:
2943         if (!(p = lock_user_string(arg1)))
2944             goto efault;
2945         ret = get_errno(chmod(p, arg2));
2946         unlock_user(p, arg1, 0);
2947         break;
2948 #ifdef TARGET_NR_break
2949     case TARGET_NR_break:
2950         goto unimplemented;
2951 #endif
2952 #ifdef TARGET_NR_oldstat
2953     case TARGET_NR_oldstat:
2954         goto unimplemented;
2955 #endif
2956     case TARGET_NR_lseek:
2957         ret = get_errno(lseek(arg1, arg2, arg3));
2958         break;
2959 #ifdef TARGET_NR_getxpid
2960     case TARGET_NR_getxpid:
2961 #else
2962     case TARGET_NR_getpid:
2963 #endif
2964         ret = get_errno(getpid());
2965         break;
2966     case TARGET_NR_mount:
2967 		{
2968 			/* need to look at the data field */
2969 			void *p2, *p3;
2970 			p = lock_user_string(arg1);
2971 			p2 = lock_user_string(arg2);
2972 			p3 = lock_user_string(arg3);
2973                         if (!p || !p2 || !p3)
2974                             ret = -TARGET_EFAULT;
2975                         else
2976                             /* FIXME - arg5 should be locked, but it isn't clear how to
2977                              * do that since it's not guaranteed to be a NULL-terminated
2978                              * string.
2979                              */
2980                             ret = get_errno(mount(p, p2, p3, (unsigned long)arg4, g2h(arg5)));
2981                         unlock_user(p, arg1, 0);
2982                         unlock_user(p2, arg2, 0);
2983                         unlock_user(p3, arg3, 0);
2984 			break;
2985 		}
2986 #ifdef TARGET_NR_umount
2987     case TARGET_NR_umount:
2988         if (!(p = lock_user_string(arg1)))
2989             goto efault;
2990         ret = get_errno(umount(p));
2991         unlock_user(p, arg1, 0);
2992         break;
2993 #endif
2994 #ifdef TARGET_NR_stime /* not on alpha */
2995     case TARGET_NR_stime:
2996         {
2997             time_t host_time;
2998             host_time = tgetl(arg1);
2999             ret = get_errno(stime(&host_time));
3000         }
3001         break;
3002 #endif
3003     case TARGET_NR_ptrace:
3004         goto unimplemented;
3005 #ifdef TARGET_NR_alarm /* not on alpha */
3006     case TARGET_NR_alarm:
3007         ret = alarm(arg1);
3008         break;
3009 #endif
3010 #ifdef TARGET_NR_oldfstat
3011     case TARGET_NR_oldfstat:
3012         goto unimplemented;
3013 #endif
3014 #ifdef TARGET_NR_pause /* not on alpha */
3015     case TARGET_NR_pause:
3016         ret = get_errno(pause());
3017         break;
3018 #endif
3019 #ifdef TARGET_NR_utime
3020     case TARGET_NR_utime:
3021         {
3022             struct utimbuf tbuf, *host_tbuf;
3023             struct target_utimbuf *target_tbuf;
3024             if (arg2) {
3025                 if (!lock_user_struct(VERIFY_READ, target_tbuf, arg2, 1))
3026                     goto efault;
3027                 tbuf.actime = tswapl(target_tbuf->actime);
3028                 tbuf.modtime = tswapl(target_tbuf->modtime);
3029                 unlock_user_struct(target_tbuf, arg2, 0);
3030                 host_tbuf = &tbuf;
3031             } else {
3032                 host_tbuf = NULL;
3033             }
3034             if (!(p = lock_user_string(arg1)))
3035                 goto efault;
3036             ret = get_errno(utime(p, host_tbuf));
3037             unlock_user(p, arg1, 0);
3038         }
3039         break;
3040 #endif
3041     case TARGET_NR_utimes:
3042         {
3043             struct timeval *tvp, tv[2];
3044             if (arg2) {
3045                 target_to_host_timeval(&tv[0], arg2);
3046                 target_to_host_timeval(&tv[1],
3047                     arg2 + sizeof (struct target_timeval));
3048                 tvp = tv;
3049             } else {
3050                 tvp = NULL;
3051             }
3052             if (!(p = lock_user_string(arg1)))
3053                 goto efault;
3054             ret = get_errno(utimes(p, tvp));
3055             unlock_user(p, arg1, 0);
3056         }
3057         break;
3058 #ifdef TARGET_NR_stty
3059     case TARGET_NR_stty:
3060         goto unimplemented;
3061 #endif
3062 #ifdef TARGET_NR_gtty
3063     case TARGET_NR_gtty:
3064         goto unimplemented;
3065 #endif
3066     case TARGET_NR_access:
3067         if (!(p = lock_user_string(arg1)))
3068             goto efault;
3069         ret = get_errno(access(p, arg2));
3070         unlock_user(p, arg1, 0);
3071         break;
3072 #if defined(TARGET_NR_faccessat) && defined(__NR_faccessat)
3073     case TARGET_NR_faccessat:
3074         if (!(p = lock_user_string(arg2)))
3075             goto efault;
3076         ret = get_errno(sys_faccessat(arg1, p, arg3, arg4));
3077         unlock_user(p, arg2, 0);
3078         break;
3079 #endif
3080 #ifdef TARGET_NR_nice /* not on alpha */
3081     case TARGET_NR_nice:
3082         ret = get_errno(nice(arg1));
3083         break;
3084 #endif
3085 #ifdef TARGET_NR_ftime
3086     case TARGET_NR_ftime:
3087         goto unimplemented;
3088 #endif
3089     case TARGET_NR_sync:
3090         sync();
3091         ret = 0;
3092         break;
3093     case TARGET_NR_kill:
3094         ret = get_errno(kill(arg1, arg2));
3095         break;
3096     case TARGET_NR_rename:
3097         {
3098             void *p2;
3099             p = lock_user_string(arg1);
3100             p2 = lock_user_string(arg2);
3101             if (!p || !p2)
3102                 ret = -TARGET_EFAULT;
3103             else
3104                 ret = get_errno(rename(p, p2));
3105             unlock_user(p2, arg2, 0);
3106             unlock_user(p, arg1, 0);
3107         }
3108         break;
3109 #if defined(TARGET_NR_renameat) && defined(__NR_renameat)
3110     case TARGET_NR_renameat:
3111         {
3112             void *p2;
3113             p  = lock_user_string(arg2);
3114             p2 = lock_user_string(arg4);
3115             if (!p || !p2)
3116                 ret = -TARGET_EFAULT;
3117             else
3118                 ret = get_errno(sys_renameat(arg1, p, arg3, p2));
3119             unlock_user(p2, arg4, 0);
3120             unlock_user(p, arg2, 0);
3121         }
3122         break;
3123 #endif
3124     case TARGET_NR_mkdir:
3125         if (!(p = lock_user_string(arg1)))
3126             goto efault;
3127         ret = get_errno(mkdir(p, arg2));
3128         unlock_user(p, arg1, 0);
3129         break;
3130 #if defined(TARGET_NR_mkdirat) && defined(__NR_mkdirat)
3131     case TARGET_NR_mkdirat:
3132         if (!(p = lock_user_string(arg2)))
3133             goto efault;
3134         ret = get_errno(sys_mkdirat(arg1, p, arg3));
3135         unlock_user(p, arg2, 0);
3136         break;
3137 #endif
3138     case TARGET_NR_rmdir:
3139         if (!(p = lock_user_string(arg1)))
3140             goto efault;
3141         ret = get_errno(rmdir(p));
3142         unlock_user(p, arg1, 0);
3143         break;
3144     case TARGET_NR_dup:
3145         ret = get_errno(dup(arg1));
3146         break;
3147     case TARGET_NR_pipe:
3148         {
3149             int host_pipe[2];
3150             ret = get_errno(pipe(host_pipe));
3151             if (!is_error(ret)) {
3152 #if defined(TARGET_MIPS)
3153                 CPUMIPSState *env = (CPUMIPSState*)cpu_env;
3154 		env->gpr[3][env->current_tc] = host_pipe[1];
3155 		ret = host_pipe[0];
3156 #else
3157                 tput32(arg1, host_pipe[0]);
3158                 tput32(arg1 + 4, host_pipe[1]);
3159 #endif
3160             }
3161         }
3162         break;
3163     case TARGET_NR_times:
3164         {
3165             struct target_tms *tmsp;
3166             struct tms tms;
3167             ret = get_errno(times(&tms));
3168             if (arg1) {
3169                 tmsp = lock_user(VERIFY_WRITE, arg1, sizeof(struct target_tms), 0);
3170                 if (!tmsp)
3171                     goto efault;
3172                 tmsp->tms_utime = tswapl(host_to_target_clock_t(tms.tms_utime));
3173                 tmsp->tms_stime = tswapl(host_to_target_clock_t(tms.tms_stime));
3174                 tmsp->tms_cutime = tswapl(host_to_target_clock_t(tms.tms_cutime));
3175                 tmsp->tms_cstime = tswapl(host_to_target_clock_t(tms.tms_cstime));
3176             }
3177             if (!is_error(ret))
3178                 ret = host_to_target_clock_t(ret);
3179         }
3180         break;
3181 #ifdef TARGET_NR_prof
3182     case TARGET_NR_prof:
3183         goto unimplemented;
3184 #endif
3185 #ifdef TARGET_NR_signal
3186     case TARGET_NR_signal:
3187         goto unimplemented;
3188 #endif
3189     case TARGET_NR_acct:
3190         if (!(p = lock_user_string(arg1)))
3191             goto efault;
3192         ret = get_errno(acct(path(p)));
3193         unlock_user(p, arg1, 0);
3194         break;
3195 #ifdef TARGET_NR_umount2 /* not on alpha */
3196     case TARGET_NR_umount2:
3197         if (!(p = lock_user_string(arg1)))
3198             goto efault;
3199         ret = get_errno(umount2(p, arg2));
3200         unlock_user(p, arg1, 0);
3201         break;
3202 #endif
3203 #ifdef TARGET_NR_lock
3204     case TARGET_NR_lock:
3205         goto unimplemented;
3206 #endif
3207     case TARGET_NR_ioctl:
3208         ret = do_ioctl(arg1, arg2, arg3);
3209         break;
3210     case TARGET_NR_fcntl:
3211         ret = get_errno(do_fcntl(arg1, arg2, arg3));
3212         break;
3213 #ifdef TARGET_NR_mpx
3214     case TARGET_NR_mpx:
3215         goto unimplemented;
3216 #endif
3217     case TARGET_NR_setpgid:
3218         ret = get_errno(setpgid(arg1, arg2));
3219         break;
3220 #ifdef TARGET_NR_ulimit
3221     case TARGET_NR_ulimit:
3222         goto unimplemented;
3223 #endif
3224 #ifdef TARGET_NR_oldolduname
3225     case TARGET_NR_oldolduname:
3226         goto unimplemented;
3227 #endif
3228     case TARGET_NR_umask:
3229         ret = get_errno(umask(arg1));
3230         break;
3231     case TARGET_NR_chroot:
3232         if (!(p = lock_user_string(arg1)))
3233             goto efault;
3234         ret = get_errno(chroot(p));
3235         unlock_user(p, arg1, 0);
3236         break;
3237     case TARGET_NR_ustat:
3238         goto unimplemented;
3239     case TARGET_NR_dup2:
3240         ret = get_errno(dup2(arg1, arg2));
3241         break;
3242 #ifdef TARGET_NR_getppid /* not on alpha */
3243     case TARGET_NR_getppid:
3244         ret = get_errno(getppid());
3245         break;
3246 #endif
3247     case TARGET_NR_getpgrp:
3248         ret = get_errno(getpgrp());
3249         break;
3250     case TARGET_NR_setsid:
3251         ret = get_errno(setsid());
3252         break;
3253 #ifdef TARGET_NR_sigaction
3254     case TARGET_NR_sigaction:
3255         {
3256 #if !defined(TARGET_MIPS)
3257             struct target_old_sigaction *old_act;
3258             struct target_sigaction act, oact, *pact;
3259             if (arg2) {
3260                 if (!lock_user_struct(VERIFY_READ, old_act, arg2, 1))
3261                     goto efault;
3262                 act._sa_handler = old_act->_sa_handler;
3263                 target_siginitset(&act.sa_mask, old_act->sa_mask);
3264                 act.sa_flags = old_act->sa_flags;
3265                 act.sa_restorer = old_act->sa_restorer;
3266                 unlock_user_struct(old_act, arg2, 0);
3267                 pact = &act;
3268             } else {
3269                 pact = NULL;
3270             }
3271             ret = get_errno(do_sigaction(arg1, pact, &oact));
3272             if (!is_error(ret) && arg3) {
3273                 if (!lock_user_struct(VERIFY_WRITE, old_act, arg3, 0))
3274                     goto efault;
3275                 old_act->_sa_handler = oact._sa_handler;
3276                 old_act->sa_mask = oact.sa_mask.sig[0];
3277                 old_act->sa_flags = oact.sa_flags;
3278                 old_act->sa_restorer = oact.sa_restorer;
3279                 unlock_user_struct(old_act, arg3, 1);
3280             }
3281 #else
3282 	    struct target_sigaction act, oact, *pact, *old_act;
3283 
3284 	    if (arg2) {
3285                 if (!lock_user_struct(VERIFY_READ, old_act, arg2, 1))
3286                     goto efault;
3287 		act._sa_handler = old_act->_sa_handler;
3288 		target_siginitset(&act.sa_mask, old_act->sa_mask.sig[0]);
3289 		act.sa_flags = old_act->sa_flags;
3290 		unlock_user_struct(old_act, arg2, 0);
3291 		pact = &act;
3292 	    } else {
3293 		pact = NULL;
3294 	    }
3295 
3296 	    ret = get_errno(do_sigaction(arg1, pact, &oact));
3297 
3298 	    if (!is_error(ret) && arg3) {
3299                 if (!lock_user_struct(VERIFY_WRITE, old_act, arg3, 0))
3300                     goto efault;
3301 		old_act->_sa_handler = oact._sa_handler;
3302 		old_act->sa_flags = oact.sa_flags;
3303 		old_act->sa_mask.sig[0] = oact.sa_mask.sig[0];
3304 		old_act->sa_mask.sig[1] = 0;
3305 		old_act->sa_mask.sig[2] = 0;
3306 		old_act->sa_mask.sig[3] = 0;
3307 		unlock_user_struct(old_act, arg3, 1);
3308 	    }
3309 #endif
3310         }
3311         break;
3312 #endif
3313     case TARGET_NR_rt_sigaction:
3314         {
3315             struct target_sigaction *act;
3316             struct target_sigaction *oact;
3317 
3318             if (arg2) {
3319                 if (!lock_user_struct(VERIFY_READ, act, arg2, 1))
3320                     goto efault;
3321             } else
3322                 act = NULL;
3323             if (arg3) {
3324                 if (!lock_user_struct(VERIFY_WRITE, oact, arg3, 0)) {
3325                     ret = -TARGET_EFAULT;
3326                     goto rt_sigaction_fail;
3327                 }
3328             } else
3329                 oact = NULL;
3330             ret = get_errno(do_sigaction(arg1, act, oact));
3331 	rt_sigaction_fail:
3332             if (act)
3333                 unlock_user_struct(act, arg2, 0);
3334             if (oact)
3335                 unlock_user_struct(oact, arg3, 1);
3336         }
3337         break;
3338 #ifdef TARGET_NR_sgetmask /* not on alpha */
3339     case TARGET_NR_sgetmask:
3340         {
3341             sigset_t cur_set;
3342             abi_ulong target_set;
3343             sigprocmask(0, NULL, &cur_set);
3344             host_to_target_old_sigset(&target_set, &cur_set);
3345             ret = target_set;
3346         }
3347         break;
3348 #endif
3349 #ifdef TARGET_NR_ssetmask /* not on alpha */
3350     case TARGET_NR_ssetmask:
3351         {
3352             sigset_t set, oset, cur_set;
3353             abi_ulong target_set = arg1;
3354             sigprocmask(0, NULL, &cur_set);
3355             target_to_host_old_sigset(&set, &target_set);
3356             sigorset(&set, &set, &cur_set);
3357             sigprocmask(SIG_SETMASK, &set, &oset);
3358             host_to_target_old_sigset(&target_set, &oset);
3359             ret = target_set;
3360         }
3361         break;
3362 #endif
3363 #ifdef TARGET_NR_sigprocmask
3364     case TARGET_NR_sigprocmask:
3365         {
3366             int how = arg1;
3367             sigset_t set, oldset, *set_ptr;
3368 
3369             if (arg2) {
3370                 switch(how) {
3371                 case TARGET_SIG_BLOCK:
3372                     how = SIG_BLOCK;
3373                     break;
3374                 case TARGET_SIG_UNBLOCK:
3375                     how = SIG_UNBLOCK;
3376                     break;
3377                 case TARGET_SIG_SETMASK:
3378                     how = SIG_SETMASK;
3379                     break;
3380                 default:
3381                     ret = -TARGET_EINVAL;
3382                     goto fail;
3383                 }
3384                 if (!(p = lock_user(VERIFY_READ, arg2, sizeof(target_sigset_t), 1)))
3385                     goto efault;
3386                 target_to_host_old_sigset(&set, p);
3387                 unlock_user(p, arg2, 0);
3388                 set_ptr = &set;
3389             } else {
3390                 how = 0;
3391                 set_ptr = NULL;
3392             }
3393             ret = get_errno(sigprocmask(arg1, set_ptr, &oldset));
3394             if (!is_error(ret) && arg3) {
3395                 if (!(p = lock_user(VERIFY_WRITE, arg3, sizeof(target_sigset_t), 0)))
3396                     goto efault;
3397                 host_to_target_old_sigset(p, &oldset);
3398                 unlock_user(p, arg3, sizeof(target_sigset_t));
3399             }
3400         }
3401         break;
3402 #endif
3403     case TARGET_NR_rt_sigprocmask:
3404         {
3405             int how = arg1;
3406             sigset_t set, oldset, *set_ptr;
3407 
3408             if (arg2) {
3409                 switch(how) {
3410                 case TARGET_SIG_BLOCK:
3411                     how = SIG_BLOCK;
3412                     break;
3413                 case TARGET_SIG_UNBLOCK:
3414                     how = SIG_UNBLOCK;
3415                     break;
3416                 case TARGET_SIG_SETMASK:
3417                     how = SIG_SETMASK;
3418                     break;
3419                 default:
3420                     ret = -TARGET_EINVAL;
3421                     goto fail;
3422                 }
3423                 if (!(p = lock_user(VERIFY_READ, arg2, sizeof(target_sigset_t), 1)))
3424                     goto efault;
3425                 target_to_host_sigset(&set, p);
3426                 unlock_user(p, arg2, 0);
3427                 set_ptr = &set;
3428             } else {
3429                 how = 0;
3430                 set_ptr = NULL;
3431             }
3432             ret = get_errno(sigprocmask(how, set_ptr, &oldset));
3433             if (!is_error(ret) && arg3) {
3434                 if (!(p = lock_user(VERIFY_WRITE, arg3, sizeof(target_sigset_t), 0)))
3435                     goto efault;
3436                 host_to_target_sigset(p, &oldset);
3437                 unlock_user(p, arg3, sizeof(target_sigset_t));
3438             }
3439         }
3440         break;
3441 #ifdef TARGET_NR_sigpending
3442     case TARGET_NR_sigpending:
3443         {
3444             sigset_t set;
3445             ret = get_errno(sigpending(&set));
3446             if (!is_error(ret)) {
3447                 if (!(p = lock_user(VERIFY_WRITE, arg1, sizeof(target_sigset_t), 0)))
3448                     goto efault;
3449                 host_to_target_old_sigset(p, &set);
3450                 unlock_user(p, arg1, sizeof(target_sigset_t));
3451             }
3452         }
3453         break;
3454 #endif
3455     case TARGET_NR_rt_sigpending:
3456         {
3457             sigset_t set;
3458             ret = get_errno(sigpending(&set));
3459             if (!is_error(ret)) {
3460                 if (!(p = lock_user(VERIFY_WRITE, arg1, sizeof(target_sigset_t), 0)))
3461                     goto efault;
3462                 host_to_target_sigset(p, &set);
3463                 unlock_user(p, arg1, sizeof(target_sigset_t));
3464             }
3465         }
3466         break;
3467 #ifdef TARGET_NR_sigsuspend
3468     case TARGET_NR_sigsuspend:
3469         {
3470             sigset_t set;
3471             if (!(p = lock_user(VERIFY_READ, arg1, sizeof(target_sigset_t), 1)))
3472                 goto efault;
3473             target_to_host_old_sigset(&set, p);
3474             unlock_user(p, arg1, 0);
3475             ret = get_errno(sigsuspend(&set));
3476         }
3477         break;
3478 #endif
3479     case TARGET_NR_rt_sigsuspend:
3480         {
3481             sigset_t set;
3482             if (!(p = lock_user(VERIFY_READ, arg1, sizeof(target_sigset_t), 1)))
3483                 goto efault;
3484             target_to_host_sigset(&set, p);
3485             unlock_user(p, arg1, 0);
3486             ret = get_errno(sigsuspend(&set));
3487         }
3488         break;
3489     case TARGET_NR_rt_sigtimedwait:
3490         {
3491             sigset_t set;
3492             struct timespec uts, *puts;
3493             siginfo_t uinfo;
3494 
3495             if (!(p = lock_user(VERIFY_READ, arg1, sizeof(target_sigset_t), 1)))
3496                 goto efault;
3497             target_to_host_sigset(&set, p);
3498             unlock_user(p, arg1, 0);
3499             if (arg3) {
3500                 puts = &uts;
3501                 target_to_host_timespec(puts, arg3);
3502             } else {
3503                 puts = NULL;
3504             }
3505             ret = get_errno(sigtimedwait(&set, &uinfo, puts));
3506             if (!is_error(ret) && arg2) {
3507                 if (!(p = lock_user(VERIFY_WRITE, arg2, sizeof(target_sigset_t), 0)))
3508                     goto efault;
3509                 host_to_target_siginfo(p, &uinfo);
3510                 unlock_user(p, arg2, sizeof(target_sigset_t));
3511             }
3512         }
3513         break;
3514     case TARGET_NR_rt_sigqueueinfo:
3515         {
3516             siginfo_t uinfo;
3517             if (!(p = lock_user(VERIFY_READ, arg3, sizeof(target_sigset_t), 1)))
3518                 goto efault;
3519             target_to_host_siginfo(&uinfo, p);
3520             unlock_user(p, arg1, 0);
3521             ret = get_errno(sys_rt_sigqueueinfo(arg1, arg2, &uinfo));
3522         }
3523         break;
3524 #ifdef TARGET_NR_sigreturn
3525     case TARGET_NR_sigreturn:
3526         /* NOTE: ret is eax, so not transcoding must be done */
3527         ret = do_sigreturn(cpu_env);
3528         break;
3529 #endif
3530     case TARGET_NR_rt_sigreturn:
3531         /* NOTE: ret is eax, so not transcoding must be done */
3532         ret = do_rt_sigreturn(cpu_env);
3533         break;
3534     case TARGET_NR_sethostname:
3535         if (!(p = lock_user_string(arg1)))
3536             goto efault;
3537         ret = get_errno(sethostname(p, arg2));
3538         unlock_user(p, arg1, 0);
3539         break;
3540     case TARGET_NR_setrlimit:
3541         {
3542             /* XXX: convert resource ? */
3543             int resource = arg1;
3544             struct target_rlimit *target_rlim;
3545             struct rlimit rlim;
3546             if (!lock_user_struct(VERIFY_READ, target_rlim, arg2, 1))
3547                 goto efault;
3548             rlim.rlim_cur = tswapl(target_rlim->rlim_cur);
3549             rlim.rlim_max = tswapl(target_rlim->rlim_max);
3550             unlock_user_struct(target_rlim, arg2, 0);
3551             ret = get_errno(setrlimit(resource, &rlim));
3552         }
3553         break;
3554     case TARGET_NR_getrlimit:
3555         {
3556             /* XXX: convert resource ? */
3557             int resource = arg1;
3558             struct target_rlimit *target_rlim;
3559             struct rlimit rlim;
3560 
3561             ret = get_errno(getrlimit(resource, &rlim));
3562             if (!is_error(ret)) {
3563                 if (!lock_user_struct(VERIFY_WRITE, target_rlim, arg2, 0))
3564                     goto efault;
3565                 rlim.rlim_cur = tswapl(target_rlim->rlim_cur);
3566                 rlim.rlim_max = tswapl(target_rlim->rlim_max);
3567                 unlock_user_struct(target_rlim, arg2, 1);
3568             }
3569         }
3570         break;
3571     case TARGET_NR_getrusage:
3572         {
3573             struct rusage rusage;
3574             ret = get_errno(getrusage(arg1, &rusage));
3575             if (!is_error(ret)) {
3576                 host_to_target_rusage(arg2, &rusage);
3577             }
3578         }
3579         break;
3580     case TARGET_NR_gettimeofday:
3581         {
3582             struct timeval tv;
3583             ret = get_errno(gettimeofday(&tv, NULL));
3584             if (!is_error(ret)) {
3585                 host_to_target_timeval(arg1, &tv);
3586             }
3587         }
3588         break;
3589     case TARGET_NR_settimeofday:
3590         {
3591             struct timeval tv;
3592             target_to_host_timeval(&tv, arg1);
3593             ret = get_errno(settimeofday(&tv, NULL));
3594         }
3595         break;
3596 #ifdef TARGET_NR_select
3597     case TARGET_NR_select:
3598         {
3599             struct target_sel_arg_struct *sel;
3600             abi_ulong inp, outp, exp, tvp;
3601             long nsel;
3602 
3603             if (!lock_user_struct(VERIFY_READ, sel, arg1, 1))
3604                 goto efault;
3605             nsel = tswapl(sel->n);
3606             inp = tswapl(sel->inp);
3607             outp = tswapl(sel->outp);
3608             exp = tswapl(sel->exp);
3609             tvp = tswapl(sel->tvp);
3610             unlock_user_struct(sel, arg1, 0);
3611             ret = do_select(nsel, inp, outp, exp, tvp);
3612         }
3613         break;
3614 #endif
3615     case TARGET_NR_symlink:
3616         {
3617             void *p2;
3618             p = lock_user_string(arg1);
3619             p2 = lock_user_string(arg2);
3620             if (!p || !p2)
3621                 ret = -TARGET_EFAULT;
3622             else
3623                 ret = get_errno(symlink(p, p2));
3624             unlock_user(p2, arg2, 0);
3625             unlock_user(p, arg1, 0);
3626         }
3627         break;
3628 #if defined(TARGET_NR_symlinkat) && defined(__NR_symlinkat)
3629     case TARGET_NR_symlinkat:
3630         {
3631             void *p2;
3632             p  = lock_user_string(arg1);
3633             p2 = lock_user_string(arg3);
3634             if (!p || !p2)
3635                 ret = -TARGET_EFAULT;
3636             else
3637                 ret = get_errno(sys_symlinkat(p, arg2, p2));
3638             unlock_user(p2, arg3, 0);
3639             unlock_user(p, arg1, 0);
3640         }
3641         break;
3642 #endif
3643 #ifdef TARGET_NR_oldlstat
3644     case TARGET_NR_oldlstat:
3645         goto unimplemented;
3646 #endif
3647     case TARGET_NR_readlink:
3648         {
3649             void *p2;
3650             p = lock_user_string(arg1);
3651             p2 = lock_user(VERIFY_WRITE, arg2, arg3, 0);
3652             if (!p || !p2)
3653                 ret = -TARGET_EFAULT;
3654             else
3655                 ret = get_errno(readlink(path(p), p2, arg3));
3656             unlock_user(p2, arg2, ret);
3657             unlock_user(p, arg1, 0);
3658         }
3659         break;
3660 #if defined(TARGET_NR_readlinkat) && defined(__NR_readlinkat)
3661     case TARGET_NR_readlinkat:
3662         {
3663             void *p2;
3664             p  = lock_user_string(arg2);
3665             p2 = lock_user(VERIFY_WRITE, arg3, arg4, 0);
3666             if (!p || !p2)
3667         	ret = -TARGET_EFAULT;
3668             else
3669                 ret = get_errno(sys_readlinkat(arg1, path(p), p2, arg4));
3670             unlock_user(p2, arg3, ret);
3671             unlock_user(p, arg2, 0);
3672         }
3673         break;
3674 #endif
3675 #ifdef TARGET_NR_uselib
3676     case TARGET_NR_uselib:
3677         goto unimplemented;
3678 #endif
3679 #ifdef TARGET_NR_swapon
3680     case TARGET_NR_swapon:
3681         if (!(p = lock_user_string(arg1)))
3682             goto efault;
3683         ret = get_errno(swapon(p, arg2));
3684         unlock_user(p, arg1, 0);
3685         break;
3686 #endif
3687     case TARGET_NR_reboot:
3688         goto unimplemented;
3689 #ifdef TARGET_NR_readdir
3690     case TARGET_NR_readdir:
3691         goto unimplemented;
3692 #endif
3693 #ifdef TARGET_NR_mmap
3694     case TARGET_NR_mmap:
3695 #if defined(TARGET_I386) || defined(TARGET_ARM) || defined(TARGET_M68K) || defined(TARGET_CRIS)
3696         {
3697             abi_ulong *v;
3698             abi_ulong v1, v2, v3, v4, v5, v6;
3699             if (!(v = lock_user(VERIFY_READ, arg1, 6 * sizeof(abi_ulong), 1)))
3700                 goto efault;
3701             v1 = tswapl(v[0]);
3702             v2 = tswapl(v[1]);
3703             v3 = tswapl(v[2]);
3704             v4 = tswapl(v[3]);
3705             v5 = tswapl(v[4]);
3706             v6 = tswapl(v[5]);
3707             unlock_user(v, arg1, 0);
3708             ret = get_errno(target_mmap(v1, v2, v3,
3709                                         target_to_host_bitmask(v4, mmap_flags_tbl),
3710                                         v5, v6));
3711         }
3712 #else
3713         ret = get_errno(target_mmap(arg1, arg2, arg3,
3714                                     target_to_host_bitmask(arg4, mmap_flags_tbl),
3715                                     arg5,
3716                                     arg6));
3717 #endif
3718         break;
3719 #endif
3720 #ifdef TARGET_NR_mmap2
3721     case TARGET_NR_mmap2:
3722 #if defined(TARGET_SPARC) || defined(TARGET_MIPS)
3723 #define MMAP_SHIFT 12
3724 #else
3725 #define MMAP_SHIFT TARGET_PAGE_BITS
3726 #endif
3727         ret = get_errno(target_mmap(arg1, arg2, arg3,
3728                                     target_to_host_bitmask(arg4, mmap_flags_tbl),
3729                                     arg5,
3730                                     arg6 << MMAP_SHIFT));
3731         break;
3732 #endif
3733     case TARGET_NR_munmap:
3734         ret = get_errno(target_munmap(arg1, arg2));
3735         break;
3736     case TARGET_NR_mprotect:
3737         ret = get_errno(target_mprotect(arg1, arg2, arg3));
3738         break;
3739 #ifdef TARGET_NR_mremap
3740     case TARGET_NR_mremap:
3741         ret = get_errno(target_mremap(arg1, arg2, arg3, arg4, arg5));
3742         break;
3743 #endif
3744         /* ??? msync/mlock/munlock are broken for softmmu.  */
3745 #ifdef TARGET_NR_msync
3746     case TARGET_NR_msync:
3747         ret = get_errno(msync(g2h(arg1), arg2, arg3));
3748         break;
3749 #endif
3750 #ifdef TARGET_NR_mlock
3751     case TARGET_NR_mlock:
3752         ret = get_errno(mlock(g2h(arg1), arg2));
3753         break;
3754 #endif
3755 #ifdef TARGET_NR_munlock
3756     case TARGET_NR_munlock:
3757         ret = get_errno(munlock(g2h(arg1), arg2));
3758         break;
3759 #endif
3760 #ifdef TARGET_NR_mlockall
3761     case TARGET_NR_mlockall:
3762         ret = get_errno(mlockall(arg1));
3763         break;
3764 #endif
3765 #ifdef TARGET_NR_munlockall
3766     case TARGET_NR_munlockall:
3767         ret = get_errno(munlockall());
3768         break;
3769 #endif
3770     case TARGET_NR_truncate:
3771         if (!(p = lock_user_string(arg1)))
3772             goto efault;
3773         ret = get_errno(truncate(p, arg2));
3774         unlock_user(p, arg1, 0);
3775         break;
3776     case TARGET_NR_ftruncate:
3777         ret = get_errno(ftruncate(arg1, arg2));
3778         break;
3779     case TARGET_NR_fchmod:
3780         ret = get_errno(fchmod(arg1, arg2));
3781         break;
3782 #if defined(TARGET_NR_fchmodat) && defined(__NR_fchmodat)
3783     case TARGET_NR_fchmodat:
3784         if (!(p = lock_user_string(arg2)))
3785             goto efault;
3786         ret = get_errno(sys_fchmodat(arg1, p, arg3, arg4));
3787         unlock_user(p, arg2, 0);
3788         break;
3789 #endif
3790     case TARGET_NR_getpriority:
3791         /* libc does special remapping of the return value of
3792          * sys_getpriority() so it's just easiest to call
3793          * sys_getpriority() directly rather than through libc. */
3794         ret = sys_getpriority(arg1, arg2);
3795         break;
3796     case TARGET_NR_setpriority:
3797         ret = get_errno(setpriority(arg1, arg2, arg3));
3798         break;
3799 #ifdef TARGET_NR_profil
3800     case TARGET_NR_profil:
3801         goto unimplemented;
3802 #endif
3803     case TARGET_NR_statfs:
3804         if (!(p = lock_user_string(arg1)))
3805             goto efault;
3806         ret = get_errno(statfs(path(p), &stfs));
3807         unlock_user(p, arg1, 0);
3808     convert_statfs:
3809         if (!is_error(ret)) {
3810             struct target_statfs *target_stfs;
3811 
3812             if (!lock_user_struct(VERIFY_WRITE, target_stfs, arg2, 0))
3813                 goto efault;
3814             __put_user(stfs.f_type, &target_stfs->f_type);
3815             __put_user(stfs.f_bsize, &target_stfs->f_bsize);
3816             __put_user(stfs.f_blocks, &target_stfs->f_blocks);
3817             __put_user(stfs.f_bfree, &target_stfs->f_bfree);
3818             __put_user(stfs.f_bavail, &target_stfs->f_bavail);
3819             __put_user(stfs.f_files, &target_stfs->f_files);
3820             __put_user(stfs.f_ffree, &target_stfs->f_ffree);
3821             __put_user(stfs.f_fsid.__val[0], &target_stfs->f_fsid.val[0]);
3822             __put_user(stfs.f_fsid.__val[1], &target_stfs->f_fsid.val[1]);
3823             __put_user(stfs.f_namelen, &target_stfs->f_namelen);
3824             unlock_user_struct(target_stfs, arg2, 1);
3825         }
3826         break;
3827     case TARGET_NR_fstatfs:
3828         ret = get_errno(fstatfs(arg1, &stfs));
3829         goto convert_statfs;
3830 #ifdef TARGET_NR_statfs64
3831     case TARGET_NR_statfs64:
3832         if (!(p = lock_user_string(arg1)))
3833             goto efault;
3834         ret = get_errno(statfs(path(p), &stfs));
3835         unlock_user(p, arg1, 0);
3836     convert_statfs64:
3837         if (!is_error(ret)) {
3838             struct target_statfs64 *target_stfs;
3839 
3840             if (!lock_user_struct(VERIFY_WRITE, target_stfs, arg3, 0))
3841                 goto efault;
3842             __put_user(stfs.f_type, &target_stfs->f_type);
3843             __put_user(stfs.f_bsize, &target_stfs->f_bsize);
3844             __put_user(stfs.f_blocks, &target_stfs->f_blocks);
3845             __put_user(stfs.f_bfree, &target_stfs->f_bfree);
3846             __put_user(stfs.f_bavail, &target_stfs->f_bavail);
3847             __put_user(stfs.f_files, &target_stfs->f_files);
3848             __put_user(stfs.f_ffree, &target_stfs->f_ffree);
3849             __put_user(stfs.f_fsid.__val[0], &target_stfs->f_fsid.val[0]);
3850             __put_user(stfs.f_fsid.__val[1], &target_stfs->f_fsid.val[1]);
3851             __put_user(stfs.f_namelen, &target_stfs->f_namelen);
3852             unlock_user_struct(target_stfs, arg3, 1);
3853         }
3854         break;
3855     case TARGET_NR_fstatfs64:
3856         ret = get_errno(fstatfs(arg1, &stfs));
3857         goto convert_statfs64;
3858 #endif
3859 #ifdef TARGET_NR_ioperm
3860     case TARGET_NR_ioperm:
3861         goto unimplemented;
3862 #endif
3863 #ifdef TARGET_NR_socketcall
3864     case TARGET_NR_socketcall:
3865         ret = do_socketcall(arg1, arg2);
3866         break;
3867 #endif
3868 #ifdef TARGET_NR_accept
3869     case TARGET_NR_accept:
3870         ret = do_accept(arg1, arg2, arg3);
3871         break;
3872 #endif
3873 #ifdef TARGET_NR_bind
3874     case TARGET_NR_bind:
3875         ret = do_bind(arg1, arg2, arg3);
3876         break;
3877 #endif
3878 #ifdef TARGET_NR_connect
3879     case TARGET_NR_connect:
3880         ret = do_connect(arg1, arg2, arg3);
3881         break;
3882 #endif
3883 #ifdef TARGET_NR_getpeername
3884     case TARGET_NR_getpeername:
3885         ret = do_getpeername(arg1, arg2, arg3);
3886         break;
3887 #endif
3888 #ifdef TARGET_NR_getsockname
3889     case TARGET_NR_getsockname:
3890         ret = do_getsockname(arg1, arg2, arg3);
3891         break;
3892 #endif
3893 #ifdef TARGET_NR_getsockopt
3894     case TARGET_NR_getsockopt:
3895         ret = do_getsockopt(arg1, arg2, arg3, arg4, arg5);
3896         break;
3897 #endif
3898 #ifdef TARGET_NR_listen
3899     case TARGET_NR_listen:
3900         ret = get_errno(listen(arg1, arg2));
3901         break;
3902 #endif
3903 #ifdef TARGET_NR_recv
3904     case TARGET_NR_recv:
3905         ret = do_recvfrom(arg1, arg2, arg3, arg4, 0, 0);
3906         break;
3907 #endif
3908 #ifdef TARGET_NR_recvfrom
3909     case TARGET_NR_recvfrom:
3910         ret = do_recvfrom(arg1, arg2, arg3, arg4, arg5, arg6);
3911         break;
3912 #endif
3913 #ifdef TARGET_NR_recvmsg
3914     case TARGET_NR_recvmsg:
3915         ret = do_sendrecvmsg(arg1, arg2, arg3, 0);
3916         break;
3917 #endif
3918 #ifdef TARGET_NR_send
3919     case TARGET_NR_send:
3920         ret = do_sendto(arg1, arg2, arg3, arg4, 0, 0);
3921         break;
3922 #endif
3923 #ifdef TARGET_NR_sendmsg
3924     case TARGET_NR_sendmsg:
3925         ret = do_sendrecvmsg(arg1, arg2, arg3, 1);
3926         break;
3927 #endif
3928 #ifdef TARGET_NR_sendto
3929     case TARGET_NR_sendto:
3930         ret = do_sendto(arg1, arg2, arg3, arg4, arg5, arg6);
3931         break;
3932 #endif
3933 #ifdef TARGET_NR_shutdown
3934     case TARGET_NR_shutdown:
3935         ret = get_errno(shutdown(arg1, arg2));
3936         break;
3937 #endif
3938 #ifdef TARGET_NR_socket
3939     case TARGET_NR_socket:
3940         ret = do_socket(arg1, arg2, arg3);
3941         break;
3942 #endif
3943 #ifdef TARGET_NR_socketpair
3944     case TARGET_NR_socketpair:
3945         ret = do_socketpair(arg1, arg2, arg3, arg4);
3946         break;
3947 #endif
3948 #ifdef TARGET_NR_setsockopt
3949     case TARGET_NR_setsockopt:
3950         ret = do_setsockopt(arg1, arg2, arg3, arg4, (socklen_t) arg5);
3951         break;
3952 #endif
3953 
3954     case TARGET_NR_syslog:
3955         if (!(p = lock_user_string(arg2)))
3956             goto efault;
3957         ret = get_errno(sys_syslog((int)arg1, p, (int)arg3));
3958         unlock_user(p, arg2, 0);
3959         break;
3960 
3961     case TARGET_NR_setitimer:
3962         {
3963             struct itimerval value, ovalue, *pvalue;
3964 
3965             if (arg2) {
3966                 pvalue = &value;
3967                 target_to_host_timeval(&pvalue->it_interval,
3968                                        arg2);
3969                 target_to_host_timeval(&pvalue->it_value,
3970                                        arg2 + sizeof(struct target_timeval));
3971             } else {
3972                 pvalue = NULL;
3973             }
3974             ret = get_errno(setitimer(arg1, pvalue, &ovalue));
3975             if (!is_error(ret) && arg3) {
3976                 host_to_target_timeval(arg3,
3977                                        &ovalue.it_interval);
3978                 host_to_target_timeval(arg3 + sizeof(struct target_timeval),
3979                                        &ovalue.it_value);
3980             }
3981         }
3982         break;
3983     case TARGET_NR_getitimer:
3984         {
3985             struct itimerval value;
3986 
3987             ret = get_errno(getitimer(arg1, &value));
3988             if (!is_error(ret) && arg2) {
3989                 host_to_target_timeval(arg2,
3990                                        &value.it_interval);
3991                 host_to_target_timeval(arg2 + sizeof(struct target_timeval),
3992                                        &value.it_value);
3993             }
3994         }
3995         break;
3996     case TARGET_NR_stat:
3997         if (!(p = lock_user_string(arg1)))
3998             goto efault;
3999         ret = get_errno(stat(path(p), &st));
4000         unlock_user(p, arg1, 0);
4001         goto do_stat;
4002     case TARGET_NR_lstat:
4003         if (!(p = lock_user_string(arg1)))
4004             goto efault;
4005         ret = get_errno(lstat(path(p), &st));
4006         unlock_user(p, arg1, 0);
4007         goto do_stat;
4008     case TARGET_NR_fstat:
4009         {
4010             ret = get_errno(fstat(arg1, &st));
4011         do_stat:
4012             if (!is_error(ret)) {
4013                 struct target_stat *target_st;
4014 
4015                 if (!lock_user_struct(VERIFY_WRITE, target_st, arg2, 0))
4016                     goto efault;
4017 #if defined(TARGET_MIPS) || (defined(TARGET_SPARC64) && !defined(TARGET_ABI32))
4018                 target_st->st_dev = tswap32(st.st_dev);
4019 #else
4020                 target_st->st_dev = tswap16(st.st_dev);
4021 #endif
4022                 target_st->st_ino = tswapl(st.st_ino);
4023 #if defined(TARGET_PPC) || defined(TARGET_MIPS)
4024                 target_st->st_mode = tswapl(st.st_mode); /* XXX: check this */
4025                 target_st->st_uid = tswap32(st.st_uid);
4026                 target_st->st_gid = tswap32(st.st_gid);
4027 #elif defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
4028                 target_st->st_mode = tswap32(st.st_mode);
4029                 target_st->st_uid = tswap32(st.st_uid);
4030                 target_st->st_gid = tswap32(st.st_gid);
4031 #else
4032                 target_st->st_mode = tswap16(st.st_mode);
4033                 target_st->st_uid = tswap16(st.st_uid);
4034                 target_st->st_gid = tswap16(st.st_gid);
4035 #endif
4036 #if defined(TARGET_MIPS)
4037 		/* If this is the same on PPC, then just merge w/ the above ifdef */
4038                 target_st->st_nlink = tswapl(st.st_nlink);
4039                 target_st->st_rdev = tswapl(st.st_rdev);
4040 #elif defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
4041                 target_st->st_nlink = tswap32(st.st_nlink);
4042                 target_st->st_rdev = tswap32(st.st_rdev);
4043 #else
4044                 target_st->st_nlink = tswap16(st.st_nlink);
4045                 target_st->st_rdev = tswap16(st.st_rdev);
4046 #endif
4047                 target_st->st_size = tswapl(st.st_size);
4048                 target_st->st_blksize = tswapl(st.st_blksize);
4049                 target_st->st_blocks = tswapl(st.st_blocks);
4050                 target_st->target_st_atime = tswapl(st.st_atime);
4051                 target_st->target_st_mtime = tswapl(st.st_mtime);
4052                 target_st->target_st_ctime = tswapl(st.st_ctime);
4053                 unlock_user_struct(target_st, arg2, 1);
4054             }
4055         }
4056         break;
4057 #ifdef TARGET_NR_olduname
4058     case TARGET_NR_olduname:
4059         goto unimplemented;
4060 #endif
4061 #ifdef TARGET_NR_iopl
4062     case TARGET_NR_iopl:
4063         goto unimplemented;
4064 #endif
4065     case TARGET_NR_vhangup:
4066         ret = get_errno(vhangup());
4067         break;
4068 #ifdef TARGET_NR_idle
4069     case TARGET_NR_idle:
4070         goto unimplemented;
4071 #endif
4072 #ifdef TARGET_NR_syscall
4073     case TARGET_NR_syscall:
4074     	ret = do_syscall(cpu_env,arg1 & 0xffff,arg2,arg3,arg4,arg5,arg6,0);
4075     	break;
4076 #endif
4077     case TARGET_NR_wait4:
4078         {
4079             int status;
4080             abi_long status_ptr = arg2;
4081             struct rusage rusage, *rusage_ptr;
4082             abi_ulong target_rusage = arg4;
4083             if (target_rusage)
4084                 rusage_ptr = &rusage;
4085             else
4086                 rusage_ptr = NULL;
4087             ret = get_errno(wait4(arg1, &status, arg3, rusage_ptr));
4088             if (!is_error(ret)) {
4089                 if (status_ptr)
4090                     tputl(status_ptr, status);
4091                 if (target_rusage) {
4092                     host_to_target_rusage(target_rusage, &rusage);
4093                 }
4094             }
4095         }
4096         break;
4097 #ifdef TARGET_NR_swapoff
4098     case TARGET_NR_swapoff:
4099         if (!(p = lock_user_string(arg1)))
4100             goto efault;
4101         ret = get_errno(swapoff(p));
4102         unlock_user(p, arg1, 0);
4103         break;
4104 #endif
4105     case TARGET_NR_sysinfo:
4106         {
4107             struct target_sysinfo *target_value;
4108             struct sysinfo value;
4109             ret = get_errno(sysinfo(&value));
4110             if (!is_error(ret) && arg1)
4111             {
4112                 if (!lock_user_struct(VERIFY_WRITE, target_value, arg1, 0))
4113                     goto efault;
4114                 __put_user(value.uptime, &target_value->uptime);
4115                 __put_user(value.loads[0], &target_value->loads[0]);
4116                 __put_user(value.loads[1], &target_value->loads[1]);
4117                 __put_user(value.loads[2], &target_value->loads[2]);
4118                 __put_user(value.totalram, &target_value->totalram);
4119                 __put_user(value.freeram, &target_value->freeram);
4120                 __put_user(value.sharedram, &target_value->sharedram);
4121                 __put_user(value.bufferram, &target_value->bufferram);
4122                 __put_user(value.totalswap, &target_value->totalswap);
4123                 __put_user(value.freeswap, &target_value->freeswap);
4124                 __put_user(value.procs, &target_value->procs);
4125                 __put_user(value.totalhigh, &target_value->totalhigh);
4126                 __put_user(value.freehigh, &target_value->freehigh);
4127                 __put_user(value.mem_unit, &target_value->mem_unit);
4128                 unlock_user_struct(target_value, arg1, 1);
4129             }
4130         }
4131         break;
4132 #ifdef TARGET_NR_ipc
4133     case TARGET_NR_ipc:
4134 	ret = do_ipc(arg1, arg2, arg3, arg4, arg5, arg6);
4135 	break;
4136 #endif
4137     case TARGET_NR_fsync:
4138         ret = get_errno(fsync(arg1));
4139         break;
4140     case TARGET_NR_clone:
4141         ret = get_errno(do_fork(cpu_env, arg1, arg2));
4142         break;
4143 #ifdef __NR_exit_group
4144         /* new thread calls */
4145     case TARGET_NR_exit_group:
4146         gdb_exit(cpu_env, arg1);
4147         ret = get_errno(exit_group(arg1));
4148         break;
4149 #endif
4150     case TARGET_NR_setdomainname:
4151         if (!(p = lock_user_string(arg1)))
4152             goto efault;
4153         ret = get_errno(setdomainname(p, arg2));
4154         unlock_user(p, arg1, 0);
4155         break;
4156     case TARGET_NR_uname:
4157         /* no need to transcode because we use the linux syscall */
4158         {
4159             struct new_utsname * buf;
4160 
4161             if (!lock_user_struct(VERIFY_WRITE, buf, arg1, 0))
4162                 goto efault;
4163             ret = get_errno(sys_uname(buf));
4164             if (!is_error(ret)) {
4165                 /* Overrite the native machine name with whatever is being
4166                    emulated. */
4167                 strcpy (buf->machine, UNAME_MACHINE);
4168                 /* Allow the user to override the reported release.  */
4169                 if (qemu_uname_release && *qemu_uname_release)
4170                   strcpy (buf->release, qemu_uname_release);
4171             }
4172             unlock_user_struct(buf, arg1, 1);
4173         }
4174         break;
4175 #ifdef TARGET_I386
4176     case TARGET_NR_modify_ldt:
4177         ret = get_errno(do_modify_ldt(cpu_env, arg1, arg2, arg3));
4178         break;
4179 #if !defined(TARGET_X86_64)
4180     case TARGET_NR_vm86old:
4181         goto unimplemented;
4182     case TARGET_NR_vm86:
4183         ret = do_vm86(cpu_env, arg1, arg2);
4184         break;
4185 #endif
4186 #endif
4187     case TARGET_NR_adjtimex:
4188         goto unimplemented;
4189 #ifdef TARGET_NR_create_module
4190     case TARGET_NR_create_module:
4191 #endif
4192     case TARGET_NR_init_module:
4193     case TARGET_NR_delete_module:
4194 #ifdef TARGET_NR_get_kernel_syms
4195     case TARGET_NR_get_kernel_syms:
4196 #endif
4197         goto unimplemented;
4198     case TARGET_NR_quotactl:
4199         goto unimplemented;
4200     case TARGET_NR_getpgid:
4201         ret = get_errno(getpgid(arg1));
4202         break;
4203     case TARGET_NR_fchdir:
4204         ret = get_errno(fchdir(arg1));
4205         break;
4206 #ifdef TARGET_NR_bdflush /* not on x86_64 */
4207     case TARGET_NR_bdflush:
4208         goto unimplemented;
4209 #endif
4210 #ifdef TARGET_NR_sysfs
4211     case TARGET_NR_sysfs:
4212         goto unimplemented;
4213 #endif
4214     case TARGET_NR_personality:
4215         ret = get_errno(personality(arg1));
4216         break;
4217 #ifdef TARGET_NR_afs_syscall
4218     case TARGET_NR_afs_syscall:
4219         goto unimplemented;
4220 #endif
4221 #ifdef TARGET_NR__llseek /* Not on alpha */
4222     case TARGET_NR__llseek:
4223         {
4224 #if defined (__x86_64__)
4225             ret = get_errno(lseek(arg1, ((uint64_t )arg2 << 32) | arg3, arg5));
4226             tput64(arg4, ret);
4227 #else
4228             int64_t res;
4229             ret = get_errno(_llseek(arg1, arg2, arg3, &res, arg5));
4230             tput64(arg4, res);
4231 #endif
4232         }
4233         break;
4234 #endif
4235     case TARGET_NR_getdents:
4236 #if TARGET_ABI_BITS != 32
4237         goto unimplemented;
4238 #warning not supported
4239 #elif TARGET_ABI_BITS == 32 && HOST_LONG_BITS == 64
4240         {
4241             struct target_dirent *target_dirp;
4242             struct dirent *dirp;
4243             abi_long count = arg3;
4244 
4245 	    dirp = malloc(count);
4246 	    if (!dirp) {
4247                 ret = -TARGET_ENOMEM;
4248                 goto fail;
4249             }
4250 
4251             ret = get_errno(sys_getdents(arg1, dirp, count));
4252             if (!is_error(ret)) {
4253                 struct dirent *de;
4254 		struct target_dirent *tde;
4255                 int len = ret;
4256                 int reclen, treclen;
4257 		int count1, tnamelen;
4258 
4259 		count1 = 0;
4260                 de = dirp;
4261                 if (!(target_dirp = lock_user(VERIFY_WRITE, arg2, count, 0)))
4262                     goto efault;
4263 		tde = target_dirp;
4264                 while (len > 0) {
4265                     reclen = de->d_reclen;
4266 		    treclen = reclen - (2 * (sizeof(long) - sizeof(abi_long)));
4267                     tde->d_reclen = tswap16(treclen);
4268                     tde->d_ino = tswapl(de->d_ino);
4269                     tde->d_off = tswapl(de->d_off);
4270 		    tnamelen = treclen - (2 * sizeof(abi_long) + 2);
4271 		    if (tnamelen > 256)
4272                         tnamelen = 256;
4273                     /* XXX: may not be correct */
4274 		    strncpy(tde->d_name, de->d_name, tnamelen);
4275                     de = (struct dirent *)((char *)de + reclen);
4276                     len -= reclen;
4277                     tde = (struct target_dirent *)((char *)tde + treclen);
4278 		    count1 += treclen;
4279                 }
4280 		ret = count1;
4281                 unlock_user(target_dirp, arg2, ret);
4282             }
4283 	    free(dirp);
4284         }
4285 #else
4286         {
4287             struct dirent *dirp;
4288             abi_long count = arg3;
4289 
4290             if (!(dirp = lock_user(VERIFY_WRITE, arg2, count, 0)))
4291                 goto efault;
4292             ret = get_errno(sys_getdents(arg1, dirp, count));
4293             if (!is_error(ret)) {
4294                 struct dirent *de;
4295                 int len = ret;
4296                 int reclen;
4297                 de = dirp;
4298                 while (len > 0) {
4299                     reclen = de->d_reclen;
4300                     if (reclen > len)
4301                         break;
4302                     de->d_reclen = tswap16(reclen);
4303                     tswapls(&de->d_ino);
4304                     tswapls(&de->d_off);
4305                     de = (struct dirent *)((char *)de + reclen);
4306                     len -= reclen;
4307                 }
4308             }
4309             unlock_user(dirp, arg2, ret);
4310         }
4311 #endif
4312         break;
4313 #if defined(TARGET_NR_getdents64) && defined(__NR_getdents64)
4314     case TARGET_NR_getdents64:
4315         {
4316             struct dirent64 *dirp;
4317             abi_long count = arg3;
4318             if (!(dirp = lock_user(VERIFY_WRITE, arg2, count, 0)))
4319                 goto efault;
4320             ret = get_errno(sys_getdents64(arg1, dirp, count));
4321             if (!is_error(ret)) {
4322                 struct dirent64 *de;
4323                 int len = ret;
4324                 int reclen;
4325                 de = dirp;
4326                 while (len > 0) {
4327                     reclen = de->d_reclen;
4328                     if (reclen > len)
4329                         break;
4330                     de->d_reclen = tswap16(reclen);
4331                     tswap64s(&de->d_ino);
4332                     tswap64s(&de->d_off);
4333                     de = (struct dirent64 *)((char *)de + reclen);
4334                     len -= reclen;
4335                 }
4336             }
4337             unlock_user(dirp, arg2, ret);
4338         }
4339         break;
4340 #endif /* TARGET_NR_getdents64 */
4341 #ifdef TARGET_NR__newselect
4342     case TARGET_NR__newselect:
4343         ret = do_select(arg1, arg2, arg3, arg4, arg5);
4344         break;
4345 #endif
4346 #ifdef TARGET_NR_poll
4347     case TARGET_NR_poll:
4348         {
4349             struct target_pollfd *target_pfd;
4350             unsigned int nfds = arg2;
4351             int timeout = arg3;
4352             struct pollfd *pfd;
4353             unsigned int i;
4354 
4355             target_pfd = lock_user(VERIFY_WRITE, arg1, sizeof(struct target_pollfd) * nfds, 1);
4356             if (!target_pfd)
4357                 goto efault;
4358             pfd = alloca(sizeof(struct pollfd) * nfds);
4359             for(i = 0; i < nfds; i++) {
4360                 pfd[i].fd = tswap32(target_pfd[i].fd);
4361                 pfd[i].events = tswap16(target_pfd[i].events);
4362             }
4363             ret = get_errno(poll(pfd, nfds, timeout));
4364             if (!is_error(ret)) {
4365                 for(i = 0; i < nfds; i++) {
4366                     target_pfd[i].revents = tswap16(pfd[i].revents);
4367                 }
4368                 ret += nfds * (sizeof(struct target_pollfd)
4369                                - sizeof(struct pollfd));
4370             }
4371             unlock_user(target_pfd, arg1, ret);
4372         }
4373         break;
4374 #endif
4375     case TARGET_NR_flock:
4376         /* NOTE: the flock constant seems to be the same for every
4377            Linux platform */
4378         ret = get_errno(flock(arg1, arg2));
4379         break;
4380     case TARGET_NR_readv:
4381         {
4382             int count = arg3;
4383             struct iovec *vec;
4384 
4385             vec = alloca(count * sizeof(struct iovec));
4386             lock_iovec(VERIFY_WRITE, vec, arg2, count, 0);
4387             ret = get_errno(readv(arg1, vec, count));
4388             unlock_iovec(vec, arg2, count, 1);
4389         }
4390         break;
4391     case TARGET_NR_writev:
4392         {
4393             int count = arg3;
4394             struct iovec *vec;
4395 
4396             vec = alloca(count * sizeof(struct iovec));
4397             lock_iovec(VERIFY_READ, vec, arg2, count, 1);
4398             ret = get_errno(writev(arg1, vec, count));
4399             unlock_iovec(vec, arg2, count, 0);
4400         }
4401         break;
4402     case TARGET_NR_getsid:
4403         ret = get_errno(getsid(arg1));
4404         break;
4405 #if defined(TARGET_NR_fdatasync) /* Not on alpha (osf_datasync ?) */
4406     case TARGET_NR_fdatasync:
4407         ret = get_errno(fdatasync(arg1));
4408         break;
4409 #endif
4410     case TARGET_NR__sysctl:
4411         /* We don't implement this, but ENOTDIR is always a safe
4412            return value. */
4413         ret = -TARGET_ENOTDIR;
4414         break;
4415     case TARGET_NR_sched_setparam:
4416         {
4417             struct sched_param *target_schp;
4418             struct sched_param schp;
4419 
4420             if (!lock_user_struct(VERIFY_READ, target_schp, arg2, 1))
4421                 goto efault;
4422             schp.sched_priority = tswap32(target_schp->sched_priority);
4423             unlock_user_struct(target_schp, arg2, 0);
4424             ret = get_errno(sched_setparam(arg1, &schp));
4425         }
4426         break;
4427     case TARGET_NR_sched_getparam:
4428         {
4429             struct sched_param *target_schp;
4430             struct sched_param schp;
4431             ret = get_errno(sched_getparam(arg1, &schp));
4432             if (!is_error(ret)) {
4433                 if (!lock_user_struct(VERIFY_WRITE, target_schp, arg2, 0))
4434                     goto efault;
4435                 target_schp->sched_priority = tswap32(schp.sched_priority);
4436                 unlock_user_struct(target_schp, arg2, 1);
4437             }
4438         }
4439         break;
4440     case TARGET_NR_sched_setscheduler:
4441         {
4442             struct sched_param *target_schp;
4443             struct sched_param schp;
4444             if (!lock_user_struct(VERIFY_READ, target_schp, arg3, 1))
4445                 goto efault;
4446             schp.sched_priority = tswap32(target_schp->sched_priority);
4447             unlock_user_struct(target_schp, arg3, 0);
4448             ret = get_errno(sched_setscheduler(arg1, arg2, &schp));
4449         }
4450         break;
4451     case TARGET_NR_sched_getscheduler:
4452         ret = get_errno(sched_getscheduler(arg1));
4453         break;
4454     case TARGET_NR_sched_yield:
4455         ret = get_errno(sched_yield());
4456         break;
4457     case TARGET_NR_sched_get_priority_max:
4458         ret = get_errno(sched_get_priority_max(arg1));
4459         break;
4460     case TARGET_NR_sched_get_priority_min:
4461         ret = get_errno(sched_get_priority_min(arg1));
4462         break;
4463     case TARGET_NR_sched_rr_get_interval:
4464         {
4465             struct timespec ts;
4466             ret = get_errno(sched_rr_get_interval(arg1, &ts));
4467             if (!is_error(ret)) {
4468                 host_to_target_timespec(arg2, &ts);
4469             }
4470         }
4471         break;
4472     case TARGET_NR_nanosleep:
4473         {
4474             struct timespec req, rem;
4475             target_to_host_timespec(&req, arg1);
4476             ret = get_errno(nanosleep(&req, &rem));
4477             if (is_error(ret) && arg2) {
4478                 host_to_target_timespec(arg2, &rem);
4479             }
4480         }
4481         break;
4482 #ifdef TARGET_NR_query_module
4483     case TARGET_NR_query_module:
4484         goto unimplemented;
4485 #endif
4486 #ifdef TARGET_NR_nfsservctl
4487     case TARGET_NR_nfsservctl:
4488         goto unimplemented;
4489 #endif
4490     case TARGET_NR_prctl:
4491         switch (arg1)
4492             {
4493             case PR_GET_PDEATHSIG:
4494                 {
4495                     int deathsig;
4496                     ret = get_errno(prctl(arg1, &deathsig, arg3, arg4, arg5));
4497                     if (!is_error(ret) && arg2)
4498                         tput32(arg2, deathsig);
4499                 }
4500                 break;
4501             default:
4502                 ret = get_errno(prctl(arg1, arg2, arg3, arg4, arg5));
4503                 break;
4504             }
4505         break;
4506 #ifdef TARGET_NR_pread
4507     case TARGET_NR_pread:
4508         page_unprotect_range(arg2, arg3);
4509         if (!(p = lock_user(VERIFY_WRITE, arg2, arg3, 0)))
4510             goto efault;
4511         ret = get_errno(pread(arg1, p, arg3, arg4));
4512         unlock_user(p, arg2, ret);
4513         break;
4514     case TARGET_NR_pwrite:
4515         if (!(p = lock_user(VERIFY_READ, arg2, arg3, 1)))
4516             goto efault;
4517         ret = get_errno(pwrite(arg1, p, arg3, arg4));
4518         unlock_user(p, arg2, 0);
4519         break;
4520 #endif
4521     case TARGET_NR_getcwd:
4522         if (!(p = lock_user(VERIFY_WRITE, arg1, arg2, 0)))
4523             goto efault;
4524         ret = get_errno(sys_getcwd1(p, arg2));
4525         unlock_user(p, arg1, ret);
4526         break;
4527     case TARGET_NR_capget:
4528         goto unimplemented;
4529     case TARGET_NR_capset:
4530         goto unimplemented;
4531     case TARGET_NR_sigaltstack:
4532 #if defined(TARGET_I386) || defined(TARGET_ARM) || defined(TARGET_MIPS) || \
4533     defined(TARGET_SPARC) || defined(TARGET_PPC) || defined(TARGET_ALPHA)
4534         ret = do_sigaltstack(arg1, arg2, get_sp_from_cpustate((CPUState *)cpu_env));
4535         break;
4536 #else
4537         goto unimplemented;
4538 #endif
4539     case TARGET_NR_sendfile:
4540         goto unimplemented;
4541 #ifdef TARGET_NR_getpmsg
4542     case TARGET_NR_getpmsg:
4543         goto unimplemented;
4544 #endif
4545 #ifdef TARGET_NR_putpmsg
4546     case TARGET_NR_putpmsg:
4547         goto unimplemented;
4548 #endif
4549 #ifdef TARGET_NR_vfork
4550     case TARGET_NR_vfork:
4551         ret = get_errno(do_fork(cpu_env, CLONE_VFORK | CLONE_VM | SIGCHLD, 0));
4552         break;
4553 #endif
4554 #ifdef TARGET_NR_ugetrlimit
4555     case TARGET_NR_ugetrlimit:
4556     {
4557 	struct rlimit rlim;
4558 	ret = get_errno(getrlimit(arg1, &rlim));
4559 	if (!is_error(ret)) {
4560 	    struct target_rlimit *target_rlim;
4561             if (!lock_user_struct(VERIFY_WRITE, target_rlim, arg2, 0))
4562                 goto efault;
4563 	    target_rlim->rlim_cur = tswapl(rlim.rlim_cur);
4564 	    target_rlim->rlim_max = tswapl(rlim.rlim_max);
4565             unlock_user_struct(target_rlim, arg2, 1);
4566 	}
4567 	break;
4568     }
4569 #endif
4570 #ifdef TARGET_NR_truncate64
4571     case TARGET_NR_truncate64:
4572         if (!(p = lock_user_string(arg1)))
4573             goto efault;
4574 	ret = target_truncate64(cpu_env, p, arg2, arg3, arg4);
4575         unlock_user(p, arg1, 0);
4576 	break;
4577 #endif
4578 #ifdef TARGET_NR_ftruncate64
4579     case TARGET_NR_ftruncate64:
4580 	ret = target_ftruncate64(cpu_env, arg1, arg2, arg3, arg4);
4581 	break;
4582 #endif
4583 #ifdef TARGET_NR_stat64
4584     case TARGET_NR_stat64:
4585         if (!(p = lock_user_string(arg1)))
4586             goto efault;
4587         ret = get_errno(stat(path(p), &st));
4588         unlock_user(p, arg1, 0);
4589         goto do_stat64;
4590 #endif
4591 #ifdef TARGET_NR_lstat64
4592     case TARGET_NR_lstat64:
4593         if (!(p = lock_user_string(arg1)))
4594             goto efault;
4595         ret = get_errno(lstat(path(p), &st));
4596         unlock_user(p, arg1, 0);
4597         goto do_stat64;
4598 #endif
4599 #ifdef TARGET_NR_fstat64
4600     case TARGET_NR_fstat64:
4601         {
4602             ret = get_errno(fstat(arg1, &st));
4603         do_stat64:
4604             if (!is_error(ret)) {
4605 #ifdef TARGET_ARM
4606                 if (((CPUARMState *)cpu_env)->eabi) {
4607                     struct target_eabi_stat64 *target_st;
4608 
4609                     if (!lock_user_struct(VERIFY_WRITE, target_st, arg2, 0))
4610                         goto efault;
4611                     memset(target_st, 0, sizeof(struct target_eabi_stat64));
4612                     __put_user(st.st_dev, &target_st->st_dev);
4613                     __put_user(st.st_ino, &target_st->st_ino);
4614 #ifdef TARGET_STAT64_HAS_BROKEN_ST_INO
4615                     __put_user(st.st_ino, &target_st->__st_ino);
4616 #endif
4617                     __put_user(st.st_mode, &target_st->st_mode);
4618                     __put_user(st.st_nlink, &target_st->st_nlink);
4619                     __put_user(st.st_uid, &target_st->st_uid);
4620                     __put_user(st.st_gid, &target_st->st_gid);
4621                     __put_user(st.st_rdev, &target_st->st_rdev);
4622                     __put_user(st.st_size, &target_st->st_size);
4623                     __put_user(st.st_blksize, &target_st->st_blksize);
4624                     __put_user(st.st_blocks, &target_st->st_blocks);
4625                     __put_user(st.st_atime, &target_st->target_st_atime);
4626                     __put_user(st.st_mtime, &target_st->target_st_mtime);
4627                     __put_user(st.st_ctime, &target_st->target_st_ctime);
4628                     unlock_user_struct(target_st, arg2, 1);
4629                 } else
4630 #endif
4631                 {
4632                     struct target_stat64 *target_st;
4633 
4634                     if (!lock_user_struct(VERIFY_WRITE, target_st, arg2, 0))
4635                         goto efault;
4636                     memset(target_st, 0, sizeof(struct target_stat64));
4637                     __put_user(st.st_dev, &target_st->st_dev);
4638                     __put_user(st.st_ino, &target_st->st_ino);
4639 #ifdef TARGET_STAT64_HAS_BROKEN_ST_INO
4640                     __put_user(st.st_ino, &target_st->__st_ino);
4641 #endif
4642                     __put_user(st.st_mode, &target_st->st_mode);
4643                     __put_user(st.st_nlink, &target_st->st_nlink);
4644                     __put_user(st.st_uid, &target_st->st_uid);
4645                     __put_user(st.st_gid, &target_st->st_gid);
4646                     __put_user(st.st_rdev, &target_st->st_rdev);
4647                     /* XXX: better use of kernel struct */
4648                     __put_user(st.st_size, &target_st->st_size);
4649                     __put_user(st.st_blksize, &target_st->st_blksize);
4650                     __put_user(st.st_blocks, &target_st->st_blocks);
4651                     __put_user(st.st_atime, &target_st->target_st_atime);
4652                     __put_user(st.st_mtime, &target_st->target_st_mtime);
4653                     __put_user(st.st_ctime, &target_st->target_st_ctime);
4654                     unlock_user_struct(target_st, arg2, 1);
4655                 }
4656             }
4657         }
4658         break;
4659 #endif
4660 #ifdef USE_UID16
4661     case TARGET_NR_lchown:
4662         if (!(p = lock_user_string(arg1)))
4663             goto efault;
4664         ret = get_errno(lchown(p, low2highuid(arg2), low2highgid(arg3)));
4665         unlock_user(p, arg1, 0);
4666         break;
4667     case TARGET_NR_getuid:
4668         ret = get_errno(high2lowuid(getuid()));
4669         break;
4670     case TARGET_NR_getgid:
4671         ret = get_errno(high2lowgid(getgid()));
4672         break;
4673     case TARGET_NR_geteuid:
4674         ret = get_errno(high2lowuid(geteuid()));
4675         break;
4676     case TARGET_NR_getegid:
4677         ret = get_errno(high2lowgid(getegid()));
4678         break;
4679     case TARGET_NR_setreuid:
4680         ret = get_errno(setreuid(low2highuid(arg1), low2highuid(arg2)));
4681         break;
4682     case TARGET_NR_setregid:
4683         ret = get_errno(setregid(low2highgid(arg1), low2highgid(arg2)));
4684         break;
4685     case TARGET_NR_getgroups:
4686         {
4687             int gidsetsize = arg1;
4688             uint16_t *target_grouplist;
4689             gid_t *grouplist;
4690             int i;
4691 
4692             grouplist = alloca(gidsetsize * sizeof(gid_t));
4693             ret = get_errno(getgroups(gidsetsize, grouplist));
4694             if (!is_error(ret)) {
4695                 target_grouplist = lock_user(VERIFY_WRITE, arg2, gidsetsize * 2, 0);
4696                 if (!target_grouplist)
4697                     goto efault;
4698                 for(i = 0;i < gidsetsize; i++)
4699                     target_grouplist[i] = tswap16(grouplist[i]);
4700                 unlock_user(target_grouplist, arg2, gidsetsize * 2);
4701             }
4702         }
4703         break;
4704     case TARGET_NR_setgroups:
4705         {
4706             int gidsetsize = arg1;
4707             uint16_t *target_grouplist;
4708             gid_t *grouplist;
4709             int i;
4710 
4711             grouplist = alloca(gidsetsize * sizeof(gid_t));
4712             target_grouplist = lock_user(VERIFY_READ, arg2, gidsetsize * 2, 1);
4713             if (!target_grouplist) {
4714                 ret = -TARGET_EFAULT;
4715                 goto fail;
4716             }
4717             for(i = 0;i < gidsetsize; i++)
4718                 grouplist[i] = tswap16(target_grouplist[i]);
4719             unlock_user(target_grouplist, arg2, 0);
4720             ret = get_errno(setgroups(gidsetsize, grouplist));
4721         }
4722         break;
4723     case TARGET_NR_fchown:
4724         ret = get_errno(fchown(arg1, low2highuid(arg2), low2highgid(arg3)));
4725         break;
4726 #if defined(TARGET_NR_fchownat) && defined(__NR_fchownat)
4727     case TARGET_NR_fchownat:
4728         if (!(p = lock_user_string(arg2)))
4729             goto efault;
4730         ret = get_errno(sys_fchownat(arg1, p, low2highuid(arg3), low2highgid(arg4), arg5));
4731         unlock_user(p, arg2, 0);
4732         break;
4733 #endif
4734 #ifdef TARGET_NR_setresuid
4735     case TARGET_NR_setresuid:
4736         ret = get_errno(setresuid(low2highuid(arg1),
4737                                   low2highuid(arg2),
4738                                   low2highuid(arg3)));
4739         break;
4740 #endif
4741 #ifdef TARGET_NR_getresuid
4742     case TARGET_NR_getresuid:
4743         {
4744             uid_t ruid, euid, suid;
4745             ret = get_errno(getresuid(&ruid, &euid, &suid));
4746             if (!is_error(ret)) {
4747                 tput16(arg1, tswap16(high2lowuid(ruid)));
4748                 tput16(arg2, tswap16(high2lowuid(euid)));
4749                 tput16(arg3, tswap16(high2lowuid(suid)));
4750             }
4751         }
4752         break;
4753 #endif
4754 #ifdef TARGET_NR_getresgid
4755     case TARGET_NR_setresgid:
4756         ret = get_errno(setresgid(low2highgid(arg1),
4757                                   low2highgid(arg2),
4758                                   low2highgid(arg3)));
4759         break;
4760 #endif
4761 #ifdef TARGET_NR_getresgid
4762     case TARGET_NR_getresgid:
4763         {
4764             gid_t rgid, egid, sgid;
4765             ret = get_errno(getresgid(&rgid, &egid, &sgid));
4766             if (!is_error(ret)) {
4767                 tput16(arg1, tswap16(high2lowgid(rgid)));
4768                 tput16(arg2, tswap16(high2lowgid(egid)));
4769                 tput16(arg3, tswap16(high2lowgid(sgid)));
4770             }
4771         }
4772         break;
4773 #endif
4774     case TARGET_NR_chown:
4775         if (!(p = lock_user_string(arg1)))
4776             goto efault;
4777         ret = get_errno(chown(p, low2highuid(arg2), low2highgid(arg3)));
4778         unlock_user(p, arg1, 0);
4779         break;
4780     case TARGET_NR_setuid:
4781         ret = get_errno(setuid(low2highuid(arg1)));
4782         break;
4783     case TARGET_NR_setgid:
4784         ret = get_errno(setgid(low2highgid(arg1)));
4785         break;
4786     case TARGET_NR_setfsuid:
4787         ret = get_errno(setfsuid(arg1));
4788         break;
4789     case TARGET_NR_setfsgid:
4790         ret = get_errno(setfsgid(arg1));
4791         break;
4792 #endif /* USE_UID16 */
4793 
4794 #ifdef TARGET_NR_lchown32
4795     case TARGET_NR_lchown32:
4796         if (!(p = lock_user_string(arg1)))
4797             goto efault;
4798         ret = get_errno(lchown(p, arg2, arg3));
4799         unlock_user(p, arg1, 0);
4800         break;
4801 #endif
4802 #ifdef TARGET_NR_getuid32
4803     case TARGET_NR_getuid32:
4804         ret = get_errno(getuid());
4805         break;
4806 #endif
4807 #ifdef TARGET_NR_getgid32
4808     case TARGET_NR_getgid32:
4809         ret = get_errno(getgid());
4810         break;
4811 #endif
4812 #ifdef TARGET_NR_geteuid32
4813     case TARGET_NR_geteuid32:
4814         ret = get_errno(geteuid());
4815         break;
4816 #endif
4817 #ifdef TARGET_NR_getegid32
4818     case TARGET_NR_getegid32:
4819         ret = get_errno(getegid());
4820         break;
4821 #endif
4822 #ifdef TARGET_NR_setreuid32
4823     case TARGET_NR_setreuid32:
4824         ret = get_errno(setreuid(arg1, arg2));
4825         break;
4826 #endif
4827 #ifdef TARGET_NR_setregid32
4828     case TARGET_NR_setregid32:
4829         ret = get_errno(setregid(arg1, arg2));
4830         break;
4831 #endif
4832 #ifdef TARGET_NR_getgroups32
4833     case TARGET_NR_getgroups32:
4834         {
4835             int gidsetsize = arg1;
4836             uint32_t *target_grouplist;
4837             gid_t *grouplist;
4838             int i;
4839 
4840             grouplist = alloca(gidsetsize * sizeof(gid_t));
4841             ret = get_errno(getgroups(gidsetsize, grouplist));
4842             if (!is_error(ret)) {
4843                 target_grouplist = lock_user(VERIFY_WRITE, arg2, gidsetsize * 4, 0);
4844                 if (!target_grouplist) {
4845                     ret = -TARGET_EFAULT;
4846                     goto fail;
4847                 }
4848                 for(i = 0;i < gidsetsize; i++)
4849                     target_grouplist[i] = tswap32(grouplist[i]);
4850                 unlock_user(target_grouplist, arg2, gidsetsize * 4);
4851             }
4852         }
4853         break;
4854 #endif
4855 #ifdef TARGET_NR_setgroups32
4856     case TARGET_NR_setgroups32:
4857         {
4858             int gidsetsize = arg1;
4859             uint32_t *target_grouplist;
4860             gid_t *grouplist;
4861             int i;
4862 
4863             grouplist = alloca(gidsetsize * sizeof(gid_t));
4864             target_grouplist = lock_user(VERIFY_READ, arg2, gidsetsize * 4, 1);
4865             if (!target_grouplist) {
4866                 ret = -TARGET_EFAULT;
4867                 goto fail;
4868             }
4869             for(i = 0;i < gidsetsize; i++)
4870                 grouplist[i] = tswap32(target_grouplist[i]);
4871             unlock_user(target_grouplist, arg2, 0);
4872             ret = get_errno(setgroups(gidsetsize, grouplist));
4873         }
4874         break;
4875 #endif
4876 #ifdef TARGET_NR_fchown32
4877     case TARGET_NR_fchown32:
4878         ret = get_errno(fchown(arg1, arg2, arg3));
4879         break;
4880 #endif
4881 #ifdef TARGET_NR_setresuid32
4882     case TARGET_NR_setresuid32:
4883         ret = get_errno(setresuid(arg1, arg2, arg3));
4884         break;
4885 #endif
4886 #ifdef TARGET_NR_getresuid32
4887     case TARGET_NR_getresuid32:
4888         {
4889             uid_t ruid, euid, suid;
4890             ret = get_errno(getresuid(&ruid, &euid, &suid));
4891             if (!is_error(ret)) {
4892                 tput32(arg1, tswap32(ruid));
4893                 tput32(arg2, tswap32(euid));
4894                 tput32(arg3, tswap32(suid));
4895             }
4896         }
4897         break;
4898 #endif
4899 #ifdef TARGET_NR_setresgid32
4900     case TARGET_NR_setresgid32:
4901         ret = get_errno(setresgid(arg1, arg2, arg3));
4902         break;
4903 #endif
4904 #ifdef TARGET_NR_getresgid32
4905     case TARGET_NR_getresgid32:
4906         {
4907             gid_t rgid, egid, sgid;
4908             ret = get_errno(getresgid(&rgid, &egid, &sgid));
4909             if (!is_error(ret)) {
4910                 tput32(arg1, tswap32(rgid));
4911                 tput32(arg2, tswap32(egid));
4912                 tput32(arg3, tswap32(sgid));
4913             }
4914         }
4915         break;
4916 #endif
4917 #ifdef TARGET_NR_chown32
4918     case TARGET_NR_chown32:
4919         if (!(p = lock_user_string(arg1)))
4920             goto efault;
4921         ret = get_errno(chown(p, arg2, arg3));
4922         unlock_user(p, arg1, 0);
4923         break;
4924 #endif
4925 #ifdef TARGET_NR_setuid32
4926     case TARGET_NR_setuid32:
4927         ret = get_errno(setuid(arg1));
4928         break;
4929 #endif
4930 #ifdef TARGET_NR_setgid32
4931     case TARGET_NR_setgid32:
4932         ret = get_errno(setgid(arg1));
4933         break;
4934 #endif
4935 #ifdef TARGET_NR_setfsuid32
4936     case TARGET_NR_setfsuid32:
4937         ret = get_errno(setfsuid(arg1));
4938         break;
4939 #endif
4940 #ifdef TARGET_NR_setfsgid32
4941     case TARGET_NR_setfsgid32:
4942         ret = get_errno(setfsgid(arg1));
4943         break;
4944 #endif
4945 
4946     case TARGET_NR_pivot_root:
4947         goto unimplemented;
4948 #ifdef TARGET_NR_mincore
4949     case TARGET_NR_mincore:
4950         goto unimplemented;
4951 #endif
4952 #ifdef TARGET_NR_madvise
4953     case TARGET_NR_madvise:
4954         /* A straight passthrough may not be safe because qemu sometimes
4955            turns private flie-backed mappings into anonymous mappings.
4956            This will break MADV_DONTNEED.
4957            This is a hint, so ignoring and returning success is ok.  */
4958         ret = get_errno(0);
4959         break;
4960 #endif
4961 #if TARGET_ABI_BITS == 32
4962     case TARGET_NR_fcntl64:
4963     {
4964 	int cmd;
4965 	struct flock64 fl;
4966 	struct target_flock64 *target_fl;
4967 #ifdef TARGET_ARM
4968 	struct target_eabi_flock64 *target_efl;
4969 #endif
4970 
4971         switch(arg2){
4972         case TARGET_F_GETLK64:
4973             cmd = F_GETLK64;
4974             break;
4975         case TARGET_F_SETLK64:
4976             cmd = F_SETLK64;
4977             break;
4978         case TARGET_F_SETLKW64:
4979             cmd = F_SETLK64;
4980             break;
4981         default:
4982             cmd = arg2;
4983             break;
4984         }
4985 
4986         switch(arg2) {
4987         case TARGET_F_GETLK64:
4988 #ifdef TARGET_ARM
4989             if (((CPUARMState *)cpu_env)->eabi) {
4990                 if (!lock_user_struct(VERIFY_READ, target_efl, arg3, 1)) {
4991                     ret = -TARGET_EFAULT;
4992                     goto fail;
4993                 }
4994                 fl.l_type = tswap16(target_efl->l_type);
4995                 fl.l_whence = tswap16(target_efl->l_whence);
4996                 fl.l_start = tswap64(target_efl->l_start);
4997                 fl.l_len = tswap64(target_efl->l_len);
4998                 fl.l_pid = tswapl(target_efl->l_pid);
4999                 unlock_user_struct(target_efl, arg3, 0);
5000             } else
5001 #endif
5002             {
5003                 if (!lock_user_struct(VERIFY_READ, target_fl, arg3, 1)) {
5004                     ret = -TARGET_EFAULT;
5005                     goto fail;
5006                 }
5007                 fl.l_type = tswap16(target_fl->l_type);
5008                 fl.l_whence = tswap16(target_fl->l_whence);
5009                 fl.l_start = tswap64(target_fl->l_start);
5010                 fl.l_len = tswap64(target_fl->l_len);
5011                 fl.l_pid = tswapl(target_fl->l_pid);
5012                 unlock_user_struct(target_fl, arg3, 0);
5013             }
5014             ret = get_errno(fcntl(arg1, cmd, &fl));
5015 	    if (ret == 0) {
5016 #ifdef TARGET_ARM
5017                 if (((CPUARMState *)cpu_env)->eabi) {
5018                     if (!lock_user_struct(VERIFY_WRITE, target_efl, arg3, 0)) {
5019                         ret = -TARGET_EFAULT;
5020                         goto fail;
5021                     }
5022                     target_efl->l_type = tswap16(fl.l_type);
5023                     target_efl->l_whence = tswap16(fl.l_whence);
5024                     target_efl->l_start = tswap64(fl.l_start);
5025                     target_efl->l_len = tswap64(fl.l_len);
5026                     target_efl->l_pid = tswapl(fl.l_pid);
5027                     unlock_user_struct(target_efl, arg3, 1);
5028                 } else
5029 #endif
5030                 {
5031                     if (!lock_user_struct(VERIFY_WRITE, target_fl, arg3, 0)) {
5032                         ret = -TARGET_EFAULT;
5033                         goto fail;
5034                     }
5035                     target_fl->l_type = tswap16(fl.l_type);
5036                     target_fl->l_whence = tswap16(fl.l_whence);
5037                     target_fl->l_start = tswap64(fl.l_start);
5038                     target_fl->l_len = tswap64(fl.l_len);
5039                     target_fl->l_pid = tswapl(fl.l_pid);
5040                     unlock_user_struct(target_fl, arg3, 1);
5041                 }
5042 	    }
5043 	    break;
5044 
5045         case TARGET_F_SETLK64:
5046         case TARGET_F_SETLKW64:
5047 #ifdef TARGET_ARM
5048             if (((CPUARMState *)cpu_env)->eabi) {
5049                 if (!lock_user_struct(VERIFY_READ, target_efl, arg3, 1)) {
5050                     ret = -TARGET_EFAULT;
5051                     goto fail;
5052                 }
5053                 fl.l_type = tswap16(target_efl->l_type);
5054                 fl.l_whence = tswap16(target_efl->l_whence);
5055                 fl.l_start = tswap64(target_efl->l_start);
5056                 fl.l_len = tswap64(target_efl->l_len);
5057                 fl.l_pid = tswapl(target_efl->l_pid);
5058                 unlock_user_struct(target_efl, arg3, 0);
5059             } else
5060 #endif
5061             {
5062                 if (!lock_user_struct(VERIFY_READ, target_fl, arg3, 1)) {
5063                     ret = -TARGET_EFAULT;
5064                     goto fail;
5065                 }
5066                 fl.l_type = tswap16(target_fl->l_type);
5067                 fl.l_whence = tswap16(target_fl->l_whence);
5068                 fl.l_start = tswap64(target_fl->l_start);
5069                 fl.l_len = tswap64(target_fl->l_len);
5070                 fl.l_pid = tswapl(target_fl->l_pid);
5071                 unlock_user_struct(target_fl, arg3, 0);
5072             }
5073             ret = get_errno(fcntl(arg1, cmd, &fl));
5074 	    break;
5075         default:
5076             ret = get_errno(do_fcntl(arg1, cmd, arg3));
5077             break;
5078         }
5079 	break;
5080     }
5081 #endif
5082 #ifdef TARGET_NR_cacheflush
5083     case TARGET_NR_cacheflush:
5084         /* self-modifying code is handled automatically, so nothing needed */
5085         ret = 0;
5086         break;
5087 #endif
5088 #ifdef TARGET_NR_security
5089     case TARGET_NR_security:
5090         goto unimplemented;
5091 #endif
5092 #ifdef TARGET_NR_getpagesize
5093     case TARGET_NR_getpagesize:
5094         ret = TARGET_PAGE_SIZE;
5095         break;
5096 #endif
5097     case TARGET_NR_gettid:
5098         ret = get_errno(gettid());
5099         break;
5100 #ifdef TARGET_NR_readahead
5101     case TARGET_NR_readahead:
5102         goto unimplemented;
5103 #endif
5104 #ifdef TARGET_NR_setxattr
5105     case TARGET_NR_setxattr:
5106     case TARGET_NR_lsetxattr:
5107     case TARGET_NR_fsetxattr:
5108     case TARGET_NR_getxattr:
5109     case TARGET_NR_lgetxattr:
5110     case TARGET_NR_fgetxattr:
5111     case TARGET_NR_listxattr:
5112     case TARGET_NR_llistxattr:
5113     case TARGET_NR_flistxattr:
5114     case TARGET_NR_removexattr:
5115     case TARGET_NR_lremovexattr:
5116     case TARGET_NR_fremovexattr:
5117         goto unimplemented_nowarn;
5118 #endif
5119 #ifdef TARGET_NR_set_thread_area
5120     case TARGET_NR_set_thread_area:
5121 #ifdef TARGET_MIPS
5122       ((CPUMIPSState *) cpu_env)->tls_value = arg1;
5123       ret = 0;
5124       break;
5125 #else
5126       goto unimplemented_nowarn;
5127 #endif
5128 #endif
5129 #ifdef TARGET_NR_get_thread_area
5130     case TARGET_NR_get_thread_area:
5131         goto unimplemented_nowarn;
5132 #endif
5133 #ifdef TARGET_NR_getdomainname
5134     case TARGET_NR_getdomainname:
5135         goto unimplemented_nowarn;
5136 #endif
5137 
5138 #ifdef TARGET_NR_clock_gettime
5139     case TARGET_NR_clock_gettime:
5140     {
5141         struct timespec ts;
5142         ret = get_errno(clock_gettime(arg1, &ts));
5143         if (!is_error(ret)) {
5144             host_to_target_timespec(arg2, &ts);
5145         }
5146         break;
5147     }
5148 #endif
5149 #ifdef TARGET_NR_clock_getres
5150     case TARGET_NR_clock_getres:
5151     {
5152         struct timespec ts;
5153         ret = get_errno(clock_getres(arg1, &ts));
5154         if (!is_error(ret)) {
5155             host_to_target_timespec(arg2, &ts);
5156         }
5157         break;
5158     }
5159 #endif
5160 
5161 #if defined(TARGET_NR_set_tid_address) && defined(__NR_set_tid_address)
5162     case TARGET_NR_set_tid_address:
5163         ret = get_errno(set_tid_address((int *)g2h(arg1)));
5164         break;
5165 #endif
5166 
5167 #if defined(TARGET_NR_tkill) && defined(__NR_tkill)
5168     case TARGET_NR_tkill:
5169         ret = get_errno(sys_tkill((int)arg1, (int)arg2));
5170         break;
5171 #endif
5172 
5173 #if defined(TARGET_NR_tgkill) && defined(__NR_tgkill)
5174     case TARGET_NR_tgkill:
5175 	ret = get_errno(sys_tgkill((int)arg1, (int)arg2, (int)arg3));
5176 	break;
5177 #endif
5178 
5179 #ifdef TARGET_NR_set_robust_list
5180     case TARGET_NR_set_robust_list:
5181 	goto unimplemented_nowarn;
5182 #endif
5183 
5184 #if defined(TARGET_NR_utimensat) && defined(__NR_utimensat)
5185     case TARGET_NR_utimensat:
5186         {
5187             struct timespec ts[2];
5188             target_to_host_timespec(ts, arg3);
5189             target_to_host_timespec(ts+1, arg3+sizeof(struct target_timespec));
5190             if (!arg2)
5191                 ret = get_errno(sys_utimensat(arg1, NULL, ts, arg4));
5192             else {
5193                 if (!(p = lock_user_string(arg2))) {
5194                     ret = -TARGET_EFAULT;
5195                     goto fail;
5196                 }
5197                 ret = get_errno(sys_utimensat(arg1, path(p), ts, arg4));
5198                 unlock_user(p, arg2, 0);
5199             }
5200         }
5201 	break;
5202 #endif
5203 
5204     default:
5205     unimplemented:
5206         gemu_log("qemu: Unsupported syscall: %d\n", num);
5207 #if defined(TARGET_NR_setxattr) || defined(TARGET_NR_get_thread_area) || defined(TARGET_NR_getdomainname) || defined(TARGET_NR_set_robust_list)
5208     unimplemented_nowarn:
5209 #endif
5210         ret = -TARGET_ENOSYS;
5211         break;
5212     }
5213 fail:
5214 #ifdef DEBUG
5215     gemu_log(" = %ld\n", ret);
5216 #endif
5217     if(do_strace)
5218         print_syscall_ret(num, ret);
5219     return ret;
5220 efault:
5221     ret = -TARGET_EFAULT;
5222     goto fail;
5223 }
5224