xref: /openbmc/qemu/migration/savevm.c (revision 2dbb1308)
1 /*
2  * QEMU System Emulator
3  *
4  * Copyright (c) 2003-2008 Fabrice Bellard
5  * Copyright (c) 2009-2015 Red Hat Inc
6  *
7  * Authors:
8  *  Juan Quintela <quintela@redhat.com>
9  *
10  * Permission is hereby granted, free of charge, to any person obtaining a copy
11  * of this software and associated documentation files (the "Software"), to deal
12  * in the Software without restriction, including without limitation the rights
13  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
14  * copies of the Software, and to permit persons to whom the Software is
15  * furnished to do so, subject to the following conditions:
16  *
17  * The above copyright notice and this permission notice shall be included in
18  * all copies or substantial portions of the Software.
19  *
20  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
21  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
22  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
23  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
24  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
25  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
26  * THE SOFTWARE.
27  */
28 
29 #include "qemu/osdep.h"
30 #include "hw/boards.h"
31 #include "net/net.h"
32 #include "migration.h"
33 #include "migration/snapshot.h"
34 #include "migration/vmstate.h"
35 #include "migration/misc.h"
36 #include "migration/register.h"
37 #include "migration/global_state.h"
38 #include "ram.h"
39 #include "qemu-file-channel.h"
40 #include "qemu-file.h"
41 #include "savevm.h"
42 #include "postcopy-ram.h"
43 #include "qapi/error.h"
44 #include "qapi/qapi-commands-migration.h"
45 #include "qapi/qapi-commands-misc.h"
46 #include "qapi/qmp/qerror.h"
47 #include "qemu/error-report.h"
48 #include "sysemu/cpus.h"
49 #include "exec/memory.h"
50 #include "exec/target_page.h"
51 #include "trace.h"
52 #include "qemu/iov.h"
53 #include "qemu/main-loop.h"
54 #include "block/snapshot.h"
55 #include "qemu/cutils.h"
56 #include "io/channel-buffer.h"
57 #include "io/channel-file.h"
58 #include "sysemu/replay.h"
59 #include "sysemu/runstate.h"
60 #include "sysemu/sysemu.h"
61 #include "sysemu/xen.h"
62 #include "qjson.h"
63 #include "migration/colo.h"
64 #include "qemu/bitmap.h"
65 #include "net/announce.h"
66 
67 const unsigned int postcopy_ram_discard_version = 0;
68 
69 /* Subcommands for QEMU_VM_COMMAND */
70 enum qemu_vm_cmd {
71     MIG_CMD_INVALID = 0,   /* Must be 0 */
72     MIG_CMD_OPEN_RETURN_PATH,  /* Tell the dest to open the Return path */
73     MIG_CMD_PING,              /* Request a PONG on the RP */
74 
75     MIG_CMD_POSTCOPY_ADVISE,       /* Prior to any page transfers, just
76                                       warn we might want to do PC */
77     MIG_CMD_POSTCOPY_LISTEN,       /* Start listening for incoming
78                                       pages as it's running. */
79     MIG_CMD_POSTCOPY_RUN,          /* Start execution */
80 
81     MIG_CMD_POSTCOPY_RAM_DISCARD,  /* A list of pages to discard that
82                                       were previously sent during
83                                       precopy but are dirty. */
84     MIG_CMD_PACKAGED,          /* Send a wrapped stream within this stream */
85     MIG_CMD_ENABLE_COLO,       /* Enable COLO */
86     MIG_CMD_POSTCOPY_RESUME,   /* resume postcopy on dest */
87     MIG_CMD_RECV_BITMAP,       /* Request for recved bitmap on dst */
88     MIG_CMD_MAX
89 };
90 
91 #define MAX_VM_CMD_PACKAGED_SIZE UINT32_MAX
92 static struct mig_cmd_args {
93     ssize_t     len; /* -1 = variable */
94     const char *name;
95 } mig_cmd_args[] = {
96     [MIG_CMD_INVALID]          = { .len = -1, .name = "INVALID" },
97     [MIG_CMD_OPEN_RETURN_PATH] = { .len =  0, .name = "OPEN_RETURN_PATH" },
98     [MIG_CMD_PING]             = { .len = sizeof(uint32_t), .name = "PING" },
99     [MIG_CMD_POSTCOPY_ADVISE]  = { .len = -1, .name = "POSTCOPY_ADVISE" },
100     [MIG_CMD_POSTCOPY_LISTEN]  = { .len =  0, .name = "POSTCOPY_LISTEN" },
101     [MIG_CMD_POSTCOPY_RUN]     = { .len =  0, .name = "POSTCOPY_RUN" },
102     [MIG_CMD_POSTCOPY_RAM_DISCARD] = {
103                                    .len = -1, .name = "POSTCOPY_RAM_DISCARD" },
104     [MIG_CMD_POSTCOPY_RESUME]  = { .len =  0, .name = "POSTCOPY_RESUME" },
105     [MIG_CMD_PACKAGED]         = { .len =  4, .name = "PACKAGED" },
106     [MIG_CMD_RECV_BITMAP]      = { .len = -1, .name = "RECV_BITMAP" },
107     [MIG_CMD_MAX]              = { .len = -1, .name = "MAX" },
108 };
109 
110 /* Note for MIG_CMD_POSTCOPY_ADVISE:
111  * The format of arguments is depending on postcopy mode:
112  * - postcopy RAM only
113  *   uint64_t host page size
114  *   uint64_t taget page size
115  *
116  * - postcopy RAM and postcopy dirty bitmaps
117  *   format is the same as for postcopy RAM only
118  *
119  * - postcopy dirty bitmaps only
120  *   Nothing. Command length field is 0.
121  *
122  * Be careful: adding a new postcopy entity with some other parameters should
123  * not break format self-description ability. Good way is to introduce some
124  * generic extendable format with an exception for two old entities.
125  */
126 
127 /***********************************************************/
128 /* savevm/loadvm support */
129 
130 static ssize_t block_writev_buffer(void *opaque, struct iovec *iov, int iovcnt,
131                                    int64_t pos, Error **errp)
132 {
133     int ret;
134     QEMUIOVector qiov;
135 
136     qemu_iovec_init_external(&qiov, iov, iovcnt);
137     ret = bdrv_writev_vmstate(opaque, &qiov, pos);
138     if (ret < 0) {
139         return ret;
140     }
141 
142     return qiov.size;
143 }
144 
145 static ssize_t block_get_buffer(void *opaque, uint8_t *buf, int64_t pos,
146                                 size_t size, Error **errp)
147 {
148     return bdrv_load_vmstate(opaque, buf, pos, size);
149 }
150 
151 static int bdrv_fclose(void *opaque, Error **errp)
152 {
153     return bdrv_flush(opaque);
154 }
155 
156 static const QEMUFileOps bdrv_read_ops = {
157     .get_buffer = block_get_buffer,
158     .close =      bdrv_fclose
159 };
160 
161 static const QEMUFileOps bdrv_write_ops = {
162     .writev_buffer  = block_writev_buffer,
163     .close          = bdrv_fclose
164 };
165 
166 static QEMUFile *qemu_fopen_bdrv(BlockDriverState *bs, int is_writable)
167 {
168     if (is_writable) {
169         return qemu_fopen_ops(bs, &bdrv_write_ops);
170     }
171     return qemu_fopen_ops(bs, &bdrv_read_ops);
172 }
173 
174 
175 /* QEMUFile timer support.
176  * Not in qemu-file.c to not add qemu-timer.c as dependency to qemu-file.c
177  */
178 
179 void timer_put(QEMUFile *f, QEMUTimer *ts)
180 {
181     uint64_t expire_time;
182 
183     expire_time = timer_expire_time_ns(ts);
184     qemu_put_be64(f, expire_time);
185 }
186 
187 void timer_get(QEMUFile *f, QEMUTimer *ts)
188 {
189     uint64_t expire_time;
190 
191     expire_time = qemu_get_be64(f);
192     if (expire_time != -1) {
193         timer_mod_ns(ts, expire_time);
194     } else {
195         timer_del(ts);
196     }
197 }
198 
199 
200 /* VMState timer support.
201  * Not in vmstate.c to not add qemu-timer.c as dependency to vmstate.c
202  */
203 
204 static int get_timer(QEMUFile *f, void *pv, size_t size,
205                      const VMStateField *field)
206 {
207     QEMUTimer *v = pv;
208     timer_get(f, v);
209     return 0;
210 }
211 
212 static int put_timer(QEMUFile *f, void *pv, size_t size,
213                      const VMStateField *field, QJSON *vmdesc)
214 {
215     QEMUTimer *v = pv;
216     timer_put(f, v);
217 
218     return 0;
219 }
220 
221 const VMStateInfo vmstate_info_timer = {
222     .name = "timer",
223     .get  = get_timer,
224     .put  = put_timer,
225 };
226 
227 
228 typedef struct CompatEntry {
229     char idstr[256];
230     int instance_id;
231 } CompatEntry;
232 
233 typedef struct SaveStateEntry {
234     QTAILQ_ENTRY(SaveStateEntry) entry;
235     char idstr[256];
236     uint32_t instance_id;
237     int alias_id;
238     int version_id;
239     /* version id read from the stream */
240     int load_version_id;
241     int section_id;
242     /* section id read from the stream */
243     int load_section_id;
244     const SaveVMHandlers *ops;
245     const VMStateDescription *vmsd;
246     void *opaque;
247     CompatEntry *compat;
248     int is_ram;
249 } SaveStateEntry;
250 
251 typedef struct SaveState {
252     QTAILQ_HEAD(, SaveStateEntry) handlers;
253     SaveStateEntry *handler_pri_head[MIG_PRI_MAX + 1];
254     int global_section_id;
255     uint32_t len;
256     const char *name;
257     uint32_t target_page_bits;
258     uint32_t caps_count;
259     MigrationCapability *capabilities;
260     QemuUUID uuid;
261 } SaveState;
262 
263 static SaveState savevm_state = {
264     .handlers = QTAILQ_HEAD_INITIALIZER(savevm_state.handlers),
265     .handler_pri_head = { [MIG_PRI_DEFAULT ... MIG_PRI_MAX] = NULL },
266     .global_section_id = 0,
267 };
268 
269 static bool should_validate_capability(int capability)
270 {
271     assert(capability >= 0 && capability < MIGRATION_CAPABILITY__MAX);
272     /* Validate only new capabilities to keep compatibility. */
273     switch (capability) {
274     case MIGRATION_CAPABILITY_X_IGNORE_SHARED:
275         return true;
276     default:
277         return false;
278     }
279 }
280 
281 static uint32_t get_validatable_capabilities_count(void)
282 {
283     MigrationState *s = migrate_get_current();
284     uint32_t result = 0;
285     int i;
286     for (i = 0; i < MIGRATION_CAPABILITY__MAX; i++) {
287         if (should_validate_capability(i) && s->enabled_capabilities[i]) {
288             result++;
289         }
290     }
291     return result;
292 }
293 
294 static int configuration_pre_save(void *opaque)
295 {
296     SaveState *state = opaque;
297     const char *current_name = MACHINE_GET_CLASS(current_machine)->name;
298     MigrationState *s = migrate_get_current();
299     int i, j;
300 
301     state->len = strlen(current_name);
302     state->name = current_name;
303     state->target_page_bits = qemu_target_page_bits();
304 
305     state->caps_count = get_validatable_capabilities_count();
306     state->capabilities = g_renew(MigrationCapability, state->capabilities,
307                                   state->caps_count);
308     for (i = j = 0; i < MIGRATION_CAPABILITY__MAX; i++) {
309         if (should_validate_capability(i) && s->enabled_capabilities[i]) {
310             state->capabilities[j++] = i;
311         }
312     }
313     state->uuid = qemu_uuid;
314 
315     return 0;
316 }
317 
318 static int configuration_pre_load(void *opaque)
319 {
320     SaveState *state = opaque;
321 
322     /* If there is no target-page-bits subsection it means the source
323      * predates the variable-target-page-bits support and is using the
324      * minimum possible value for this CPU.
325      */
326     state->target_page_bits = qemu_target_page_bits_min();
327     return 0;
328 }
329 
330 static bool configuration_validate_capabilities(SaveState *state)
331 {
332     bool ret = true;
333     MigrationState *s = migrate_get_current();
334     unsigned long *source_caps_bm;
335     int i;
336 
337     source_caps_bm = bitmap_new(MIGRATION_CAPABILITY__MAX);
338     for (i = 0; i < state->caps_count; i++) {
339         MigrationCapability capability = state->capabilities[i];
340         set_bit(capability, source_caps_bm);
341     }
342 
343     for (i = 0; i < MIGRATION_CAPABILITY__MAX; i++) {
344         bool source_state, target_state;
345         if (!should_validate_capability(i)) {
346             continue;
347         }
348         source_state = test_bit(i, source_caps_bm);
349         target_state = s->enabled_capabilities[i];
350         if (source_state != target_state) {
351             error_report("Capability %s is %s, but received capability is %s",
352                          MigrationCapability_str(i),
353                          target_state ? "on" : "off",
354                          source_state ? "on" : "off");
355             ret = false;
356             /* Don't break here to report all failed capabilities */
357         }
358     }
359 
360     g_free(source_caps_bm);
361     return ret;
362 }
363 
364 static int configuration_post_load(void *opaque, int version_id)
365 {
366     SaveState *state = opaque;
367     const char *current_name = MACHINE_GET_CLASS(current_machine)->name;
368 
369     if (strncmp(state->name, current_name, state->len) != 0) {
370         error_report("Machine type received is '%.*s' and local is '%s'",
371                      (int) state->len, state->name, current_name);
372         return -EINVAL;
373     }
374 
375     if (state->target_page_bits != qemu_target_page_bits()) {
376         error_report("Received TARGET_PAGE_BITS is %d but local is %d",
377                      state->target_page_bits, qemu_target_page_bits());
378         return -EINVAL;
379     }
380 
381     if (!configuration_validate_capabilities(state)) {
382         return -EINVAL;
383     }
384 
385     return 0;
386 }
387 
388 static int get_capability(QEMUFile *f, void *pv, size_t size,
389                           const VMStateField *field)
390 {
391     MigrationCapability *capability = pv;
392     char capability_str[UINT8_MAX + 1];
393     uint8_t len;
394     int i;
395 
396     len = qemu_get_byte(f);
397     qemu_get_buffer(f, (uint8_t *)capability_str, len);
398     capability_str[len] = '\0';
399     for (i = 0; i < MIGRATION_CAPABILITY__MAX; i++) {
400         if (!strcmp(MigrationCapability_str(i), capability_str)) {
401             *capability = i;
402             return 0;
403         }
404     }
405     error_report("Received unknown capability %s", capability_str);
406     return -EINVAL;
407 }
408 
409 static int put_capability(QEMUFile *f, void *pv, size_t size,
410                           const VMStateField *field, QJSON *vmdesc)
411 {
412     MigrationCapability *capability = pv;
413     const char *capability_str = MigrationCapability_str(*capability);
414     size_t len = strlen(capability_str);
415     assert(len <= UINT8_MAX);
416 
417     qemu_put_byte(f, len);
418     qemu_put_buffer(f, (uint8_t *)capability_str, len);
419     return 0;
420 }
421 
422 static const VMStateInfo vmstate_info_capability = {
423     .name = "capability",
424     .get  = get_capability,
425     .put  = put_capability,
426 };
427 
428 /* The target-page-bits subsection is present only if the
429  * target page size is not the same as the default (ie the
430  * minimum page size for a variable-page-size guest CPU).
431  * If it is present then it contains the actual target page
432  * bits for the machine, and migration will fail if the
433  * two ends don't agree about it.
434  */
435 static bool vmstate_target_page_bits_needed(void *opaque)
436 {
437     return qemu_target_page_bits()
438         > qemu_target_page_bits_min();
439 }
440 
441 static const VMStateDescription vmstate_target_page_bits = {
442     .name = "configuration/target-page-bits",
443     .version_id = 1,
444     .minimum_version_id = 1,
445     .needed = vmstate_target_page_bits_needed,
446     .fields = (VMStateField[]) {
447         VMSTATE_UINT32(target_page_bits, SaveState),
448         VMSTATE_END_OF_LIST()
449     }
450 };
451 
452 static bool vmstate_capabilites_needed(void *opaque)
453 {
454     return get_validatable_capabilities_count() > 0;
455 }
456 
457 static const VMStateDescription vmstate_capabilites = {
458     .name = "configuration/capabilities",
459     .version_id = 1,
460     .minimum_version_id = 1,
461     .needed = vmstate_capabilites_needed,
462     .fields = (VMStateField[]) {
463         VMSTATE_UINT32_V(caps_count, SaveState, 1),
464         VMSTATE_VARRAY_UINT32_ALLOC(capabilities, SaveState, caps_count, 1,
465                                     vmstate_info_capability,
466                                     MigrationCapability),
467         VMSTATE_END_OF_LIST()
468     }
469 };
470 
471 static bool vmstate_uuid_needed(void *opaque)
472 {
473     return qemu_uuid_set && migrate_validate_uuid();
474 }
475 
476 static int vmstate_uuid_post_load(void *opaque, int version_id)
477 {
478     SaveState *state = opaque;
479     char uuid_src[UUID_FMT_LEN + 1];
480     char uuid_dst[UUID_FMT_LEN + 1];
481 
482     if (!qemu_uuid_set) {
483         /*
484          * It's warning because user might not know UUID in some cases,
485          * e.g. load an old snapshot
486          */
487         qemu_uuid_unparse(&state->uuid, uuid_src);
488         warn_report("UUID is received %s, but local uuid isn't set",
489                      uuid_src);
490         return 0;
491     }
492     if (!qemu_uuid_is_equal(&state->uuid, &qemu_uuid)) {
493         qemu_uuid_unparse(&state->uuid, uuid_src);
494         qemu_uuid_unparse(&qemu_uuid, uuid_dst);
495         error_report("UUID received is %s and local is %s", uuid_src, uuid_dst);
496         return -EINVAL;
497     }
498     return 0;
499 }
500 
501 static const VMStateDescription vmstate_uuid = {
502     .name = "configuration/uuid",
503     .version_id = 1,
504     .minimum_version_id = 1,
505     .needed = vmstate_uuid_needed,
506     .post_load = vmstate_uuid_post_load,
507     .fields = (VMStateField[]) {
508         VMSTATE_UINT8_ARRAY_V(uuid.data, SaveState, sizeof(QemuUUID), 1),
509         VMSTATE_END_OF_LIST()
510     }
511 };
512 
513 static const VMStateDescription vmstate_configuration = {
514     .name = "configuration",
515     .version_id = 1,
516     .pre_load = configuration_pre_load,
517     .post_load = configuration_post_load,
518     .pre_save = configuration_pre_save,
519     .fields = (VMStateField[]) {
520         VMSTATE_UINT32(len, SaveState),
521         VMSTATE_VBUFFER_ALLOC_UINT32(name, SaveState, 0, NULL, len),
522         VMSTATE_END_OF_LIST()
523     },
524     .subsections = (const VMStateDescription*[]) {
525         &vmstate_target_page_bits,
526         &vmstate_capabilites,
527         &vmstate_uuid,
528         NULL
529     }
530 };
531 
532 static void dump_vmstate_vmsd(FILE *out_file,
533                               const VMStateDescription *vmsd, int indent,
534                               bool is_subsection);
535 
536 static void dump_vmstate_vmsf(FILE *out_file, const VMStateField *field,
537                               int indent)
538 {
539     fprintf(out_file, "%*s{\n", indent, "");
540     indent += 2;
541     fprintf(out_file, "%*s\"field\": \"%s\",\n", indent, "", field->name);
542     fprintf(out_file, "%*s\"version_id\": %d,\n", indent, "",
543             field->version_id);
544     fprintf(out_file, "%*s\"field_exists\": %s,\n", indent, "",
545             field->field_exists ? "true" : "false");
546     fprintf(out_file, "%*s\"size\": %zu", indent, "", field->size);
547     if (field->vmsd != NULL) {
548         fprintf(out_file, ",\n");
549         dump_vmstate_vmsd(out_file, field->vmsd, indent, false);
550     }
551     fprintf(out_file, "\n%*s}", indent - 2, "");
552 }
553 
554 static void dump_vmstate_vmss(FILE *out_file,
555                               const VMStateDescription **subsection,
556                               int indent)
557 {
558     if (*subsection != NULL) {
559         dump_vmstate_vmsd(out_file, *subsection, indent, true);
560     }
561 }
562 
563 static void dump_vmstate_vmsd(FILE *out_file,
564                               const VMStateDescription *vmsd, int indent,
565                               bool is_subsection)
566 {
567     if (is_subsection) {
568         fprintf(out_file, "%*s{\n", indent, "");
569     } else {
570         fprintf(out_file, "%*s\"%s\": {\n", indent, "", "Description");
571     }
572     indent += 2;
573     fprintf(out_file, "%*s\"name\": \"%s\",\n", indent, "", vmsd->name);
574     fprintf(out_file, "%*s\"version_id\": %d,\n", indent, "",
575             vmsd->version_id);
576     fprintf(out_file, "%*s\"minimum_version_id\": %d", indent, "",
577             vmsd->minimum_version_id);
578     if (vmsd->fields != NULL) {
579         const VMStateField *field = vmsd->fields;
580         bool first;
581 
582         fprintf(out_file, ",\n%*s\"Fields\": [\n", indent, "");
583         first = true;
584         while (field->name != NULL) {
585             if (field->flags & VMS_MUST_EXIST) {
586                 /* Ignore VMSTATE_VALIDATE bits; these don't get migrated */
587                 field++;
588                 continue;
589             }
590             if (!first) {
591                 fprintf(out_file, ",\n");
592             }
593             dump_vmstate_vmsf(out_file, field, indent + 2);
594             field++;
595             first = false;
596         }
597         fprintf(out_file, "\n%*s]", indent, "");
598     }
599     if (vmsd->subsections != NULL) {
600         const VMStateDescription **subsection = vmsd->subsections;
601         bool first;
602 
603         fprintf(out_file, ",\n%*s\"Subsections\": [\n", indent, "");
604         first = true;
605         while (*subsection != NULL) {
606             if (!first) {
607                 fprintf(out_file, ",\n");
608             }
609             dump_vmstate_vmss(out_file, subsection, indent + 2);
610             subsection++;
611             first = false;
612         }
613         fprintf(out_file, "\n%*s]", indent, "");
614     }
615     fprintf(out_file, "\n%*s}", indent - 2, "");
616 }
617 
618 static void dump_machine_type(FILE *out_file)
619 {
620     MachineClass *mc;
621 
622     mc = MACHINE_GET_CLASS(current_machine);
623 
624     fprintf(out_file, "  \"vmschkmachine\": {\n");
625     fprintf(out_file, "    \"Name\": \"%s\"\n", mc->name);
626     fprintf(out_file, "  },\n");
627 }
628 
629 void dump_vmstate_json_to_file(FILE *out_file)
630 {
631     GSList *list, *elt;
632     bool first;
633 
634     fprintf(out_file, "{\n");
635     dump_machine_type(out_file);
636 
637     first = true;
638     list = object_class_get_list(TYPE_DEVICE, true);
639     for (elt = list; elt; elt = elt->next) {
640         DeviceClass *dc = OBJECT_CLASS_CHECK(DeviceClass, elt->data,
641                                              TYPE_DEVICE);
642         const char *name;
643         int indent = 2;
644 
645         if (!dc->vmsd) {
646             continue;
647         }
648 
649         if (!first) {
650             fprintf(out_file, ",\n");
651         }
652         name = object_class_get_name(OBJECT_CLASS(dc));
653         fprintf(out_file, "%*s\"%s\": {\n", indent, "", name);
654         indent += 2;
655         fprintf(out_file, "%*s\"Name\": \"%s\",\n", indent, "", name);
656         fprintf(out_file, "%*s\"version_id\": %d,\n", indent, "",
657                 dc->vmsd->version_id);
658         fprintf(out_file, "%*s\"minimum_version_id\": %d,\n", indent, "",
659                 dc->vmsd->minimum_version_id);
660 
661         dump_vmstate_vmsd(out_file, dc->vmsd, indent, false);
662 
663         fprintf(out_file, "\n%*s}", indent - 2, "");
664         first = false;
665     }
666     fprintf(out_file, "\n}\n");
667     fclose(out_file);
668     g_slist_free(list);
669 }
670 
671 static uint32_t calculate_new_instance_id(const char *idstr)
672 {
673     SaveStateEntry *se;
674     uint32_t instance_id = 0;
675 
676     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
677         if (strcmp(idstr, se->idstr) == 0
678             && instance_id <= se->instance_id) {
679             instance_id = se->instance_id + 1;
680         }
681     }
682     /* Make sure we never loop over without being noticed */
683     assert(instance_id != VMSTATE_INSTANCE_ID_ANY);
684     return instance_id;
685 }
686 
687 static int calculate_compat_instance_id(const char *idstr)
688 {
689     SaveStateEntry *se;
690     int instance_id = 0;
691 
692     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
693         if (!se->compat) {
694             continue;
695         }
696 
697         if (strcmp(idstr, se->compat->idstr) == 0
698             && instance_id <= se->compat->instance_id) {
699             instance_id = se->compat->instance_id + 1;
700         }
701     }
702     return instance_id;
703 }
704 
705 static inline MigrationPriority save_state_priority(SaveStateEntry *se)
706 {
707     if (se->vmsd) {
708         return se->vmsd->priority;
709     }
710     return MIG_PRI_DEFAULT;
711 }
712 
713 static void savevm_state_handler_insert(SaveStateEntry *nse)
714 {
715     MigrationPriority priority = save_state_priority(nse);
716     SaveStateEntry *se;
717     int i;
718 
719     assert(priority <= MIG_PRI_MAX);
720 
721     for (i = priority - 1; i >= 0; i--) {
722         se = savevm_state.handler_pri_head[i];
723         if (se != NULL) {
724             assert(save_state_priority(se) < priority);
725             break;
726         }
727     }
728 
729     if (i >= 0) {
730         QTAILQ_INSERT_BEFORE(se, nse, entry);
731     } else {
732         QTAILQ_INSERT_TAIL(&savevm_state.handlers, nse, entry);
733     }
734 
735     if (savevm_state.handler_pri_head[priority] == NULL) {
736         savevm_state.handler_pri_head[priority] = nse;
737     }
738 }
739 
740 static void savevm_state_handler_remove(SaveStateEntry *se)
741 {
742     SaveStateEntry *next;
743     MigrationPriority priority = save_state_priority(se);
744 
745     if (se == savevm_state.handler_pri_head[priority]) {
746         next = QTAILQ_NEXT(se, entry);
747         if (next != NULL && save_state_priority(next) == priority) {
748             savevm_state.handler_pri_head[priority] = next;
749         } else {
750             savevm_state.handler_pri_head[priority] = NULL;
751         }
752     }
753     QTAILQ_REMOVE(&savevm_state.handlers, se, entry);
754 }
755 
756 /* TODO: Individual devices generally have very little idea about the rest
757    of the system, so instance_id should be removed/replaced.
758    Meanwhile pass -1 as instance_id if you do not already have a clearly
759    distinguishing id for all instances of your device class. */
760 int register_savevm_live(const char *idstr,
761                          uint32_t instance_id,
762                          int version_id,
763                          const SaveVMHandlers *ops,
764                          void *opaque)
765 {
766     SaveStateEntry *se;
767 
768     se = g_new0(SaveStateEntry, 1);
769     se->version_id = version_id;
770     se->section_id = savevm_state.global_section_id++;
771     se->ops = ops;
772     se->opaque = opaque;
773     se->vmsd = NULL;
774     /* if this is a live_savem then set is_ram */
775     if (ops->save_setup != NULL) {
776         se->is_ram = 1;
777     }
778 
779     pstrcat(se->idstr, sizeof(se->idstr), idstr);
780 
781     if (instance_id == VMSTATE_INSTANCE_ID_ANY) {
782         se->instance_id = calculate_new_instance_id(se->idstr);
783     } else {
784         se->instance_id = instance_id;
785     }
786     assert(!se->compat || se->instance_id == 0);
787     savevm_state_handler_insert(se);
788     return 0;
789 }
790 
791 void unregister_savevm(VMStateIf *obj, const char *idstr, void *opaque)
792 {
793     SaveStateEntry *se, *new_se;
794     char id[256] = "";
795 
796     if (obj) {
797         char *oid = vmstate_if_get_id(obj);
798         if (oid) {
799             pstrcpy(id, sizeof(id), oid);
800             pstrcat(id, sizeof(id), "/");
801             g_free(oid);
802         }
803     }
804     pstrcat(id, sizeof(id), idstr);
805 
806     QTAILQ_FOREACH_SAFE(se, &savevm_state.handlers, entry, new_se) {
807         if (strcmp(se->idstr, id) == 0 && se->opaque == opaque) {
808             savevm_state_handler_remove(se);
809             g_free(se->compat);
810             g_free(se);
811         }
812     }
813 }
814 
815 int vmstate_register_with_alias_id(VMStateIf *obj, uint32_t instance_id,
816                                    const VMStateDescription *vmsd,
817                                    void *opaque, int alias_id,
818                                    int required_for_version,
819                                    Error **errp)
820 {
821     SaveStateEntry *se;
822 
823     /* If this triggers, alias support can be dropped for the vmsd. */
824     assert(alias_id == -1 || required_for_version >= vmsd->minimum_version_id);
825 
826     se = g_new0(SaveStateEntry, 1);
827     se->version_id = vmsd->version_id;
828     se->section_id = savevm_state.global_section_id++;
829     se->opaque = opaque;
830     se->vmsd = vmsd;
831     se->alias_id = alias_id;
832 
833     if (obj) {
834         char *id = vmstate_if_get_id(obj);
835         if (id) {
836             if (snprintf(se->idstr, sizeof(se->idstr), "%s/", id) >=
837                 sizeof(se->idstr)) {
838                 error_setg(errp, "Path too long for VMState (%s)", id);
839                 g_free(id);
840                 g_free(se);
841 
842                 return -1;
843             }
844             g_free(id);
845 
846             se->compat = g_new0(CompatEntry, 1);
847             pstrcpy(se->compat->idstr, sizeof(se->compat->idstr), vmsd->name);
848             se->compat->instance_id = instance_id == VMSTATE_INSTANCE_ID_ANY ?
849                          calculate_compat_instance_id(vmsd->name) : instance_id;
850             instance_id = VMSTATE_INSTANCE_ID_ANY;
851         }
852     }
853     pstrcat(se->idstr, sizeof(se->idstr), vmsd->name);
854 
855     if (instance_id == VMSTATE_INSTANCE_ID_ANY) {
856         se->instance_id = calculate_new_instance_id(se->idstr);
857     } else {
858         se->instance_id = instance_id;
859     }
860     assert(!se->compat || se->instance_id == 0);
861     savevm_state_handler_insert(se);
862     return 0;
863 }
864 
865 void vmstate_unregister(VMStateIf *obj, const VMStateDescription *vmsd,
866                         void *opaque)
867 {
868     SaveStateEntry *se, *new_se;
869 
870     QTAILQ_FOREACH_SAFE(se, &savevm_state.handlers, entry, new_se) {
871         if (se->vmsd == vmsd && se->opaque == opaque) {
872             savevm_state_handler_remove(se);
873             g_free(se->compat);
874             g_free(se);
875         }
876     }
877 }
878 
879 static int vmstate_load(QEMUFile *f, SaveStateEntry *se)
880 {
881     trace_vmstate_load(se->idstr, se->vmsd ? se->vmsd->name : "(old)");
882     if (!se->vmsd) {         /* Old style */
883         return se->ops->load_state(f, se->opaque, se->load_version_id);
884     }
885     return vmstate_load_state(f, se->vmsd, se->opaque, se->load_version_id);
886 }
887 
888 static void vmstate_save_old_style(QEMUFile *f, SaveStateEntry *se, QJSON *vmdesc)
889 {
890     int64_t old_offset, size;
891 
892     old_offset = qemu_ftell_fast(f);
893     se->ops->save_state(f, se->opaque);
894     size = qemu_ftell_fast(f) - old_offset;
895 
896     if (vmdesc) {
897         json_prop_int(vmdesc, "size", size);
898         json_start_array(vmdesc, "fields");
899         json_start_object(vmdesc, NULL);
900         json_prop_str(vmdesc, "name", "data");
901         json_prop_int(vmdesc, "size", size);
902         json_prop_str(vmdesc, "type", "buffer");
903         json_end_object(vmdesc);
904         json_end_array(vmdesc);
905     }
906 }
907 
908 static int vmstate_save(QEMUFile *f, SaveStateEntry *se, QJSON *vmdesc)
909 {
910     trace_vmstate_save(se->idstr, se->vmsd ? se->vmsd->name : "(old)");
911     if (!se->vmsd) {
912         vmstate_save_old_style(f, se, vmdesc);
913         return 0;
914     }
915     return vmstate_save_state(f, se->vmsd, se->opaque, vmdesc);
916 }
917 
918 /*
919  * Write the header for device section (QEMU_VM_SECTION START/END/PART/FULL)
920  */
921 static void save_section_header(QEMUFile *f, SaveStateEntry *se,
922                                 uint8_t section_type)
923 {
924     qemu_put_byte(f, section_type);
925     qemu_put_be32(f, se->section_id);
926 
927     if (section_type == QEMU_VM_SECTION_FULL ||
928         section_type == QEMU_VM_SECTION_START) {
929         /* ID string */
930         size_t len = strlen(se->idstr);
931         qemu_put_byte(f, len);
932         qemu_put_buffer(f, (uint8_t *)se->idstr, len);
933 
934         qemu_put_be32(f, se->instance_id);
935         qemu_put_be32(f, se->version_id);
936     }
937 }
938 
939 /*
940  * Write a footer onto device sections that catches cases misformatted device
941  * sections.
942  */
943 static void save_section_footer(QEMUFile *f, SaveStateEntry *se)
944 {
945     if (migrate_get_current()->send_section_footer) {
946         qemu_put_byte(f, QEMU_VM_SECTION_FOOTER);
947         qemu_put_be32(f, se->section_id);
948     }
949 }
950 
951 /**
952  * qemu_savevm_command_send: Send a 'QEMU_VM_COMMAND' type element with the
953  *                           command and associated data.
954  *
955  * @f: File to send command on
956  * @command: Command type to send
957  * @len: Length of associated data
958  * @data: Data associated with command.
959  */
960 static void qemu_savevm_command_send(QEMUFile *f,
961                                      enum qemu_vm_cmd command,
962                                      uint16_t len,
963                                      uint8_t *data)
964 {
965     trace_savevm_command_send(command, len);
966     qemu_put_byte(f, QEMU_VM_COMMAND);
967     qemu_put_be16(f, (uint16_t)command);
968     qemu_put_be16(f, len);
969     qemu_put_buffer(f, data, len);
970     qemu_fflush(f);
971 }
972 
973 void qemu_savevm_send_colo_enable(QEMUFile *f)
974 {
975     trace_savevm_send_colo_enable();
976     qemu_savevm_command_send(f, MIG_CMD_ENABLE_COLO, 0, NULL);
977 }
978 
979 void qemu_savevm_send_ping(QEMUFile *f, uint32_t value)
980 {
981     uint32_t buf;
982 
983     trace_savevm_send_ping(value);
984     buf = cpu_to_be32(value);
985     qemu_savevm_command_send(f, MIG_CMD_PING, sizeof(value), (uint8_t *)&buf);
986 }
987 
988 void qemu_savevm_send_open_return_path(QEMUFile *f)
989 {
990     trace_savevm_send_open_return_path();
991     qemu_savevm_command_send(f, MIG_CMD_OPEN_RETURN_PATH, 0, NULL);
992 }
993 
994 /* We have a buffer of data to send; we don't want that all to be loaded
995  * by the command itself, so the command contains just the length of the
996  * extra buffer that we then send straight after it.
997  * TODO: Must be a better way to organise that
998  *
999  * Returns:
1000  *    0 on success
1001  *    -ve on error
1002  */
1003 int qemu_savevm_send_packaged(QEMUFile *f, const uint8_t *buf, size_t len)
1004 {
1005     uint32_t tmp;
1006 
1007     if (len > MAX_VM_CMD_PACKAGED_SIZE) {
1008         error_report("%s: Unreasonably large packaged state: %zu",
1009                      __func__, len);
1010         return -1;
1011     }
1012 
1013     tmp = cpu_to_be32(len);
1014 
1015     trace_qemu_savevm_send_packaged();
1016     qemu_savevm_command_send(f, MIG_CMD_PACKAGED, 4, (uint8_t *)&tmp);
1017 
1018     qemu_put_buffer(f, buf, len);
1019 
1020     return 0;
1021 }
1022 
1023 /* Send prior to any postcopy transfer */
1024 void qemu_savevm_send_postcopy_advise(QEMUFile *f)
1025 {
1026     if (migrate_postcopy_ram()) {
1027         uint64_t tmp[2];
1028         tmp[0] = cpu_to_be64(ram_pagesize_summary());
1029         tmp[1] = cpu_to_be64(qemu_target_page_size());
1030 
1031         trace_qemu_savevm_send_postcopy_advise();
1032         qemu_savevm_command_send(f, MIG_CMD_POSTCOPY_ADVISE,
1033                                  16, (uint8_t *)tmp);
1034     } else {
1035         qemu_savevm_command_send(f, MIG_CMD_POSTCOPY_ADVISE, 0, NULL);
1036     }
1037 }
1038 
1039 /* Sent prior to starting the destination running in postcopy, discard pages
1040  * that have already been sent but redirtied on the source.
1041  * CMD_POSTCOPY_RAM_DISCARD consist of:
1042  *      byte   version (0)
1043  *      byte   Length of name field (not including 0)
1044  *  n x byte   RAM block name
1045  *      byte   0 terminator (just for safety)
1046  *  n x        Byte ranges within the named RAMBlock
1047  *      be64   Start of the range
1048  *      be64   Length
1049  *
1050  *  name:  RAMBlock name that these entries are part of
1051  *  len: Number of page entries
1052  *  start_list: 'len' addresses
1053  *  length_list: 'len' addresses
1054  *
1055  */
1056 void qemu_savevm_send_postcopy_ram_discard(QEMUFile *f, const char *name,
1057                                            uint16_t len,
1058                                            uint64_t *start_list,
1059                                            uint64_t *length_list)
1060 {
1061     uint8_t *buf;
1062     uint16_t tmplen;
1063     uint16_t t;
1064     size_t name_len = strlen(name);
1065 
1066     trace_qemu_savevm_send_postcopy_ram_discard(name, len);
1067     assert(name_len < 256);
1068     buf = g_malloc0(1 + 1 + name_len + 1 + (8 + 8) * len);
1069     buf[0] = postcopy_ram_discard_version;
1070     buf[1] = name_len;
1071     memcpy(buf + 2, name, name_len);
1072     tmplen = 2 + name_len;
1073     buf[tmplen++] = '\0';
1074 
1075     for (t = 0; t < len; t++) {
1076         stq_be_p(buf + tmplen, start_list[t]);
1077         tmplen += 8;
1078         stq_be_p(buf + tmplen, length_list[t]);
1079         tmplen += 8;
1080     }
1081     qemu_savevm_command_send(f, MIG_CMD_POSTCOPY_RAM_DISCARD, tmplen, buf);
1082     g_free(buf);
1083 }
1084 
1085 /* Get the destination into a state where it can receive postcopy data. */
1086 void qemu_savevm_send_postcopy_listen(QEMUFile *f)
1087 {
1088     trace_savevm_send_postcopy_listen();
1089     qemu_savevm_command_send(f, MIG_CMD_POSTCOPY_LISTEN, 0, NULL);
1090 }
1091 
1092 /* Kick the destination into running */
1093 void qemu_savevm_send_postcopy_run(QEMUFile *f)
1094 {
1095     trace_savevm_send_postcopy_run();
1096     qemu_savevm_command_send(f, MIG_CMD_POSTCOPY_RUN, 0, NULL);
1097 }
1098 
1099 void qemu_savevm_send_postcopy_resume(QEMUFile *f)
1100 {
1101     trace_savevm_send_postcopy_resume();
1102     qemu_savevm_command_send(f, MIG_CMD_POSTCOPY_RESUME, 0, NULL);
1103 }
1104 
1105 void qemu_savevm_send_recv_bitmap(QEMUFile *f, char *block_name)
1106 {
1107     size_t len;
1108     char buf[256];
1109 
1110     trace_savevm_send_recv_bitmap(block_name);
1111 
1112     buf[0] = len = strlen(block_name);
1113     memcpy(buf + 1, block_name, len);
1114 
1115     qemu_savevm_command_send(f, MIG_CMD_RECV_BITMAP, len + 1, (uint8_t *)buf);
1116 }
1117 
1118 bool qemu_savevm_state_blocked(Error **errp)
1119 {
1120     SaveStateEntry *se;
1121 
1122     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1123         if (se->vmsd && se->vmsd->unmigratable) {
1124             error_setg(errp, "State blocked by non-migratable device '%s'",
1125                        se->idstr);
1126             return true;
1127         }
1128     }
1129     return false;
1130 }
1131 
1132 void qemu_savevm_state_header(QEMUFile *f)
1133 {
1134     trace_savevm_state_header();
1135     qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
1136     qemu_put_be32(f, QEMU_VM_FILE_VERSION);
1137 
1138     if (migrate_get_current()->send_configuration) {
1139         qemu_put_byte(f, QEMU_VM_CONFIGURATION);
1140         vmstate_save_state(f, &vmstate_configuration, &savevm_state, 0);
1141     }
1142 }
1143 
1144 bool qemu_savevm_state_guest_unplug_pending(void)
1145 {
1146     SaveStateEntry *se;
1147 
1148     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1149         if (se->vmsd && se->vmsd->dev_unplug_pending &&
1150             se->vmsd->dev_unplug_pending(se->opaque)) {
1151             return true;
1152         }
1153     }
1154 
1155     return false;
1156 }
1157 
1158 void qemu_savevm_state_setup(QEMUFile *f)
1159 {
1160     SaveStateEntry *se;
1161     Error *local_err = NULL;
1162     int ret;
1163 
1164     trace_savevm_state_setup();
1165     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1166         if (!se->ops || !se->ops->save_setup) {
1167             continue;
1168         }
1169         if (se->ops->is_active) {
1170             if (!se->ops->is_active(se->opaque)) {
1171                 continue;
1172             }
1173         }
1174         save_section_header(f, se, QEMU_VM_SECTION_START);
1175 
1176         ret = se->ops->save_setup(f, se->opaque);
1177         save_section_footer(f, se);
1178         if (ret < 0) {
1179             qemu_file_set_error(f, ret);
1180             break;
1181         }
1182     }
1183 
1184     if (precopy_notify(PRECOPY_NOTIFY_SETUP, &local_err)) {
1185         error_report_err(local_err);
1186     }
1187 }
1188 
1189 int qemu_savevm_state_resume_prepare(MigrationState *s)
1190 {
1191     SaveStateEntry *se;
1192     int ret;
1193 
1194     trace_savevm_state_resume_prepare();
1195 
1196     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1197         if (!se->ops || !se->ops->resume_prepare) {
1198             continue;
1199         }
1200         if (se->ops->is_active) {
1201             if (!se->ops->is_active(se->opaque)) {
1202                 continue;
1203             }
1204         }
1205         ret = se->ops->resume_prepare(s, se->opaque);
1206         if (ret < 0) {
1207             return ret;
1208         }
1209     }
1210 
1211     return 0;
1212 }
1213 
1214 /*
1215  * this function has three return values:
1216  *   negative: there was one error, and we have -errno.
1217  *   0 : We haven't finished, caller have to go again
1218  *   1 : We have finished, we can go to complete phase
1219  */
1220 int qemu_savevm_state_iterate(QEMUFile *f, bool postcopy)
1221 {
1222     SaveStateEntry *se;
1223     int ret = 1;
1224 
1225     trace_savevm_state_iterate();
1226     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1227         if (!se->ops || !se->ops->save_live_iterate) {
1228             continue;
1229         }
1230         if (se->ops->is_active &&
1231             !se->ops->is_active(se->opaque)) {
1232             continue;
1233         }
1234         if (se->ops->is_active_iterate &&
1235             !se->ops->is_active_iterate(se->opaque)) {
1236             continue;
1237         }
1238         /*
1239          * In the postcopy phase, any device that doesn't know how to
1240          * do postcopy should have saved it's state in the _complete
1241          * call that's already run, it might get confused if we call
1242          * iterate afterwards.
1243          */
1244         if (postcopy &&
1245             !(se->ops->has_postcopy && se->ops->has_postcopy(se->opaque))) {
1246             continue;
1247         }
1248         if (qemu_file_rate_limit(f)) {
1249             return 0;
1250         }
1251         trace_savevm_section_start(se->idstr, se->section_id);
1252 
1253         save_section_header(f, se, QEMU_VM_SECTION_PART);
1254 
1255         ret = se->ops->save_live_iterate(f, se->opaque);
1256         trace_savevm_section_end(se->idstr, se->section_id, ret);
1257         save_section_footer(f, se);
1258 
1259         if (ret < 0) {
1260             error_report("failed to save SaveStateEntry with id(name): %d(%s)",
1261                          se->section_id, se->idstr);
1262             qemu_file_set_error(f, ret);
1263         }
1264         if (ret <= 0) {
1265             /* Do not proceed to the next vmstate before this one reported
1266                completion of the current stage. This serializes the migration
1267                and reduces the probability that a faster changing state is
1268                synchronized over and over again. */
1269             break;
1270         }
1271     }
1272     return ret;
1273 }
1274 
1275 static bool should_send_vmdesc(void)
1276 {
1277     MachineState *machine = MACHINE(qdev_get_machine());
1278     bool in_postcopy = migration_in_postcopy();
1279     return !machine->suppress_vmdesc && !in_postcopy;
1280 }
1281 
1282 /*
1283  * Calls the save_live_complete_postcopy methods
1284  * causing the last few pages to be sent immediately and doing any associated
1285  * cleanup.
1286  * Note postcopy also calls qemu_savevm_state_complete_precopy to complete
1287  * all the other devices, but that happens at the point we switch to postcopy.
1288  */
1289 void qemu_savevm_state_complete_postcopy(QEMUFile *f)
1290 {
1291     SaveStateEntry *se;
1292     int ret;
1293 
1294     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1295         if (!se->ops || !se->ops->save_live_complete_postcopy) {
1296             continue;
1297         }
1298         if (se->ops->is_active) {
1299             if (!se->ops->is_active(se->opaque)) {
1300                 continue;
1301             }
1302         }
1303         trace_savevm_section_start(se->idstr, se->section_id);
1304         /* Section type */
1305         qemu_put_byte(f, QEMU_VM_SECTION_END);
1306         qemu_put_be32(f, se->section_id);
1307 
1308         ret = se->ops->save_live_complete_postcopy(f, se->opaque);
1309         trace_savevm_section_end(se->idstr, se->section_id, ret);
1310         save_section_footer(f, se);
1311         if (ret < 0) {
1312             qemu_file_set_error(f, ret);
1313             return;
1314         }
1315     }
1316 
1317     qemu_put_byte(f, QEMU_VM_EOF);
1318     qemu_fflush(f);
1319 }
1320 
1321 static
1322 int qemu_savevm_state_complete_precopy_iterable(QEMUFile *f, bool in_postcopy)
1323 {
1324     SaveStateEntry *se;
1325     int ret;
1326 
1327     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1328         if (!se->ops ||
1329             (in_postcopy && se->ops->has_postcopy &&
1330              se->ops->has_postcopy(se->opaque)) ||
1331             !se->ops->save_live_complete_precopy) {
1332             continue;
1333         }
1334 
1335         if (se->ops->is_active) {
1336             if (!se->ops->is_active(se->opaque)) {
1337                 continue;
1338             }
1339         }
1340         trace_savevm_section_start(se->idstr, se->section_id);
1341 
1342         save_section_header(f, se, QEMU_VM_SECTION_END);
1343 
1344         ret = se->ops->save_live_complete_precopy(f, se->opaque);
1345         trace_savevm_section_end(se->idstr, se->section_id, ret);
1346         save_section_footer(f, se);
1347         if (ret < 0) {
1348             qemu_file_set_error(f, ret);
1349             return -1;
1350         }
1351     }
1352 
1353     return 0;
1354 }
1355 
1356 static
1357 int qemu_savevm_state_complete_precopy_non_iterable(QEMUFile *f,
1358                                                     bool in_postcopy,
1359                                                     bool inactivate_disks)
1360 {
1361     g_autoptr(QJSON) vmdesc = NULL;
1362     int vmdesc_len;
1363     SaveStateEntry *se;
1364     int ret;
1365 
1366     vmdesc = qjson_new();
1367     json_prop_int(vmdesc, "page_size", qemu_target_page_size());
1368     json_start_array(vmdesc, "devices");
1369     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1370 
1371         if ((!se->ops || !se->ops->save_state) && !se->vmsd) {
1372             continue;
1373         }
1374         if (se->vmsd && !vmstate_save_needed(se->vmsd, se->opaque)) {
1375             trace_savevm_section_skip(se->idstr, se->section_id);
1376             continue;
1377         }
1378 
1379         trace_savevm_section_start(se->idstr, se->section_id);
1380 
1381         json_start_object(vmdesc, NULL);
1382         json_prop_str(vmdesc, "name", se->idstr);
1383         json_prop_int(vmdesc, "instance_id", se->instance_id);
1384 
1385         save_section_header(f, se, QEMU_VM_SECTION_FULL);
1386         ret = vmstate_save(f, se, vmdesc);
1387         if (ret) {
1388             qemu_file_set_error(f, ret);
1389             return ret;
1390         }
1391         trace_savevm_section_end(se->idstr, se->section_id, 0);
1392         save_section_footer(f, se);
1393 
1394         json_end_object(vmdesc);
1395     }
1396 
1397     if (inactivate_disks) {
1398         /* Inactivate before sending QEMU_VM_EOF so that the
1399          * bdrv_invalidate_cache_all() on the other end won't fail. */
1400         ret = bdrv_inactivate_all();
1401         if (ret) {
1402             error_report("%s: bdrv_inactivate_all() failed (%d)",
1403                          __func__, ret);
1404             qemu_file_set_error(f, ret);
1405             return ret;
1406         }
1407     }
1408     if (!in_postcopy) {
1409         /* Postcopy stream will still be going */
1410         qemu_put_byte(f, QEMU_VM_EOF);
1411     }
1412 
1413     json_end_array(vmdesc);
1414     qjson_finish(vmdesc);
1415     vmdesc_len = strlen(qjson_get_str(vmdesc));
1416 
1417     if (should_send_vmdesc()) {
1418         qemu_put_byte(f, QEMU_VM_VMDESCRIPTION);
1419         qemu_put_be32(f, vmdesc_len);
1420         qemu_put_buffer(f, (uint8_t *)qjson_get_str(vmdesc), vmdesc_len);
1421     }
1422 
1423     return 0;
1424 }
1425 
1426 int qemu_savevm_state_complete_precopy(QEMUFile *f, bool iterable_only,
1427                                        bool inactivate_disks)
1428 {
1429     int ret;
1430     Error *local_err = NULL;
1431     bool in_postcopy = migration_in_postcopy();
1432 
1433     if (precopy_notify(PRECOPY_NOTIFY_COMPLETE, &local_err)) {
1434         error_report_err(local_err);
1435     }
1436 
1437     trace_savevm_state_complete_precopy();
1438 
1439     cpu_synchronize_all_states();
1440 
1441     if (!in_postcopy || iterable_only) {
1442         ret = qemu_savevm_state_complete_precopy_iterable(f, in_postcopy);
1443         if (ret) {
1444             return ret;
1445         }
1446     }
1447 
1448     if (iterable_only) {
1449         goto flush;
1450     }
1451 
1452     ret = qemu_savevm_state_complete_precopy_non_iterable(f, in_postcopy,
1453                                                           inactivate_disks);
1454     if (ret) {
1455         return ret;
1456     }
1457 
1458 flush:
1459     qemu_fflush(f);
1460     return 0;
1461 }
1462 
1463 /* Give an estimate of the amount left to be transferred,
1464  * the result is split into the amount for units that can and
1465  * for units that can't do postcopy.
1466  */
1467 void qemu_savevm_state_pending(QEMUFile *f, uint64_t threshold_size,
1468                                uint64_t *res_precopy_only,
1469                                uint64_t *res_compatible,
1470                                uint64_t *res_postcopy_only)
1471 {
1472     SaveStateEntry *se;
1473 
1474     *res_precopy_only = 0;
1475     *res_compatible = 0;
1476     *res_postcopy_only = 0;
1477 
1478 
1479     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1480         if (!se->ops || !se->ops->save_live_pending) {
1481             continue;
1482         }
1483         if (se->ops->is_active) {
1484             if (!se->ops->is_active(se->opaque)) {
1485                 continue;
1486             }
1487         }
1488         se->ops->save_live_pending(f, se->opaque, threshold_size,
1489                                    res_precopy_only, res_compatible,
1490                                    res_postcopy_only);
1491     }
1492 }
1493 
1494 void qemu_savevm_state_cleanup(void)
1495 {
1496     SaveStateEntry *se;
1497     Error *local_err = NULL;
1498 
1499     if (precopy_notify(PRECOPY_NOTIFY_CLEANUP, &local_err)) {
1500         error_report_err(local_err);
1501     }
1502 
1503     trace_savevm_state_cleanup();
1504     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1505         if (se->ops && se->ops->save_cleanup) {
1506             se->ops->save_cleanup(se->opaque);
1507         }
1508     }
1509 }
1510 
1511 static int qemu_savevm_state(QEMUFile *f, Error **errp)
1512 {
1513     int ret;
1514     MigrationState *ms = migrate_get_current();
1515     MigrationStatus status;
1516 
1517     if (migration_is_running(ms->state)) {
1518         error_setg(errp, QERR_MIGRATION_ACTIVE);
1519         return -EINVAL;
1520     }
1521 
1522     if (migrate_use_block()) {
1523         error_setg(errp, "Block migration and snapshots are incompatible");
1524         return -EINVAL;
1525     }
1526 
1527     migrate_init(ms);
1528     memset(&ram_counters, 0, sizeof(ram_counters));
1529     ms->to_dst_file = f;
1530 
1531     qemu_mutex_unlock_iothread();
1532     qemu_savevm_state_header(f);
1533     qemu_savevm_state_setup(f);
1534     qemu_mutex_lock_iothread();
1535 
1536     while (qemu_file_get_error(f) == 0) {
1537         if (qemu_savevm_state_iterate(f, false) > 0) {
1538             break;
1539         }
1540     }
1541 
1542     ret = qemu_file_get_error(f);
1543     if (ret == 0) {
1544         qemu_savevm_state_complete_precopy(f, false, false);
1545         ret = qemu_file_get_error(f);
1546     }
1547     qemu_savevm_state_cleanup();
1548     if (ret != 0) {
1549         error_setg_errno(errp, -ret, "Error while writing VM state");
1550     }
1551 
1552     if (ret != 0) {
1553         status = MIGRATION_STATUS_FAILED;
1554     } else {
1555         status = MIGRATION_STATUS_COMPLETED;
1556     }
1557     migrate_set_state(&ms->state, MIGRATION_STATUS_SETUP, status);
1558 
1559     /* f is outer parameter, it should not stay in global migration state after
1560      * this function finished */
1561     ms->to_dst_file = NULL;
1562 
1563     return ret;
1564 }
1565 
1566 void qemu_savevm_live_state(QEMUFile *f)
1567 {
1568     /* save QEMU_VM_SECTION_END section */
1569     qemu_savevm_state_complete_precopy(f, true, false);
1570     qemu_put_byte(f, QEMU_VM_EOF);
1571 }
1572 
1573 int qemu_save_device_state(QEMUFile *f)
1574 {
1575     SaveStateEntry *se;
1576 
1577     if (!migration_in_colo_state()) {
1578         qemu_put_be32(f, QEMU_VM_FILE_MAGIC);
1579         qemu_put_be32(f, QEMU_VM_FILE_VERSION);
1580     }
1581     cpu_synchronize_all_states();
1582 
1583     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1584         int ret;
1585 
1586         if (se->is_ram) {
1587             continue;
1588         }
1589         if ((!se->ops || !se->ops->save_state) && !se->vmsd) {
1590             continue;
1591         }
1592         if (se->vmsd && !vmstate_save_needed(se->vmsd, se->opaque)) {
1593             continue;
1594         }
1595 
1596         save_section_header(f, se, QEMU_VM_SECTION_FULL);
1597 
1598         ret = vmstate_save(f, se, NULL);
1599         if (ret) {
1600             return ret;
1601         }
1602 
1603         save_section_footer(f, se);
1604     }
1605 
1606     qemu_put_byte(f, QEMU_VM_EOF);
1607 
1608     return qemu_file_get_error(f);
1609 }
1610 
1611 static SaveStateEntry *find_se(const char *idstr, uint32_t instance_id)
1612 {
1613     SaveStateEntry *se;
1614 
1615     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
1616         if (!strcmp(se->idstr, idstr) &&
1617             (instance_id == se->instance_id ||
1618              instance_id == se->alias_id))
1619             return se;
1620         /* Migrating from an older version? */
1621         if (strstr(se->idstr, idstr) && se->compat) {
1622             if (!strcmp(se->compat->idstr, idstr) &&
1623                 (instance_id == se->compat->instance_id ||
1624                  instance_id == se->alias_id))
1625                 return se;
1626         }
1627     }
1628     return NULL;
1629 }
1630 
1631 enum LoadVMExitCodes {
1632     /* Allow a command to quit all layers of nested loadvm loops */
1633     LOADVM_QUIT     =  1,
1634 };
1635 
1636 /* ------ incoming postcopy messages ------ */
1637 /* 'advise' arrives before any transfers just to tell us that a postcopy
1638  * *might* happen - it might be skipped if precopy transferred everything
1639  * quickly.
1640  */
1641 static int loadvm_postcopy_handle_advise(MigrationIncomingState *mis,
1642                                          uint16_t len)
1643 {
1644     PostcopyState ps = postcopy_state_set(POSTCOPY_INCOMING_ADVISE);
1645     uint64_t remote_pagesize_summary, local_pagesize_summary, remote_tps;
1646     Error *local_err = NULL;
1647 
1648     trace_loadvm_postcopy_handle_advise();
1649     if (ps != POSTCOPY_INCOMING_NONE) {
1650         error_report("CMD_POSTCOPY_ADVISE in wrong postcopy state (%d)", ps);
1651         return -1;
1652     }
1653 
1654     switch (len) {
1655     case 0:
1656         if (migrate_postcopy_ram()) {
1657             error_report("RAM postcopy is enabled but have 0 byte advise");
1658             return -EINVAL;
1659         }
1660         return 0;
1661     case 8 + 8:
1662         if (!migrate_postcopy_ram()) {
1663             error_report("RAM postcopy is disabled but have 16 byte advise");
1664             return -EINVAL;
1665         }
1666         break;
1667     default:
1668         error_report("CMD_POSTCOPY_ADVISE invalid length (%d)", len);
1669         return -EINVAL;
1670     }
1671 
1672     if (!postcopy_ram_supported_by_host(mis)) {
1673         postcopy_state_set(POSTCOPY_INCOMING_NONE);
1674         return -1;
1675     }
1676 
1677     remote_pagesize_summary = qemu_get_be64(mis->from_src_file);
1678     local_pagesize_summary = ram_pagesize_summary();
1679 
1680     if (remote_pagesize_summary != local_pagesize_summary)  {
1681         /*
1682          * This detects two potential causes of mismatch:
1683          *   a) A mismatch in host page sizes
1684          *      Some combinations of mismatch are probably possible but it gets
1685          *      a bit more complicated.  In particular we need to place whole
1686          *      host pages on the dest at once, and we need to ensure that we
1687          *      handle dirtying to make sure we never end up sending part of
1688          *      a hostpage on it's own.
1689          *   b) The use of different huge page sizes on source/destination
1690          *      a more fine grain test is performed during RAM block migration
1691          *      but this test here causes a nice early clear failure, and
1692          *      also fails when passed to an older qemu that doesn't
1693          *      do huge pages.
1694          */
1695         error_report("Postcopy needs matching RAM page sizes (s=%" PRIx64
1696                                                              " d=%" PRIx64 ")",
1697                      remote_pagesize_summary, local_pagesize_summary);
1698         return -1;
1699     }
1700 
1701     remote_tps = qemu_get_be64(mis->from_src_file);
1702     if (remote_tps != qemu_target_page_size()) {
1703         /*
1704          * Again, some differences could be dealt with, but for now keep it
1705          * simple.
1706          */
1707         error_report("Postcopy needs matching target page sizes (s=%d d=%zd)",
1708                      (int)remote_tps, qemu_target_page_size());
1709         return -1;
1710     }
1711 
1712     if (postcopy_notify(POSTCOPY_NOTIFY_INBOUND_ADVISE, &local_err)) {
1713         error_report_err(local_err);
1714         return -1;
1715     }
1716 
1717     if (ram_postcopy_incoming_init(mis)) {
1718         return -1;
1719     }
1720 
1721     return 0;
1722 }
1723 
1724 /* After postcopy we will be told to throw some pages away since they're
1725  * dirty and will have to be demand fetched.  Must happen before CPU is
1726  * started.
1727  * There can be 0..many of these messages, each encoding multiple pages.
1728  */
1729 static int loadvm_postcopy_ram_handle_discard(MigrationIncomingState *mis,
1730                                               uint16_t len)
1731 {
1732     int tmp;
1733     char ramid[256];
1734     PostcopyState ps = postcopy_state_get();
1735 
1736     trace_loadvm_postcopy_ram_handle_discard();
1737 
1738     switch (ps) {
1739     case POSTCOPY_INCOMING_ADVISE:
1740         /* 1st discard */
1741         tmp = postcopy_ram_prepare_discard(mis);
1742         if (tmp) {
1743             return tmp;
1744         }
1745         break;
1746 
1747     case POSTCOPY_INCOMING_DISCARD:
1748         /* Expected state */
1749         break;
1750 
1751     default:
1752         error_report("CMD_POSTCOPY_RAM_DISCARD in wrong postcopy state (%d)",
1753                      ps);
1754         return -1;
1755     }
1756     /* We're expecting a
1757      *    Version (0)
1758      *    a RAM ID string (length byte, name, 0 term)
1759      *    then at least 1 16 byte chunk
1760     */
1761     if (len < (1 + 1 + 1 + 1 + 2 * 8)) {
1762         error_report("CMD_POSTCOPY_RAM_DISCARD invalid length (%d)", len);
1763         return -1;
1764     }
1765 
1766     tmp = qemu_get_byte(mis->from_src_file);
1767     if (tmp != postcopy_ram_discard_version) {
1768         error_report("CMD_POSTCOPY_RAM_DISCARD invalid version (%d)", tmp);
1769         return -1;
1770     }
1771 
1772     if (!qemu_get_counted_string(mis->from_src_file, ramid)) {
1773         error_report("CMD_POSTCOPY_RAM_DISCARD Failed to read RAMBlock ID");
1774         return -1;
1775     }
1776     tmp = qemu_get_byte(mis->from_src_file);
1777     if (tmp != 0) {
1778         error_report("CMD_POSTCOPY_RAM_DISCARD missing nil (%d)", tmp);
1779         return -1;
1780     }
1781 
1782     len -= 3 + strlen(ramid);
1783     if (len % 16) {
1784         error_report("CMD_POSTCOPY_RAM_DISCARD invalid length (%d)", len);
1785         return -1;
1786     }
1787     trace_loadvm_postcopy_ram_handle_discard_header(ramid, len);
1788     while (len) {
1789         uint64_t start_addr, block_length;
1790         start_addr = qemu_get_be64(mis->from_src_file);
1791         block_length = qemu_get_be64(mis->from_src_file);
1792 
1793         len -= 16;
1794         int ret = ram_discard_range(ramid, start_addr, block_length);
1795         if (ret) {
1796             return ret;
1797         }
1798     }
1799     trace_loadvm_postcopy_ram_handle_discard_end();
1800 
1801     return 0;
1802 }
1803 
1804 /*
1805  * Triggered by a postcopy_listen command; this thread takes over reading
1806  * the input stream, leaving the main thread free to carry on loading the rest
1807  * of the device state (from RAM).
1808  * (TODO:This could do with being in a postcopy file - but there again it's
1809  * just another input loop, not that postcopy specific)
1810  */
1811 static void *postcopy_ram_listen_thread(void *opaque)
1812 {
1813     MigrationIncomingState *mis = migration_incoming_get_current();
1814     QEMUFile *f = mis->from_src_file;
1815     int load_res;
1816     MigrationState *migr = migrate_get_current();
1817 
1818     object_ref(OBJECT(migr));
1819 
1820     migrate_set_state(&mis->state, MIGRATION_STATUS_ACTIVE,
1821                                    MIGRATION_STATUS_POSTCOPY_ACTIVE);
1822     qemu_sem_post(&mis->listen_thread_sem);
1823     trace_postcopy_ram_listen_thread_start();
1824 
1825     rcu_register_thread();
1826     /*
1827      * Because we're a thread and not a coroutine we can't yield
1828      * in qemu_file, and thus we must be blocking now.
1829      */
1830     qemu_file_set_blocking(f, true);
1831     load_res = qemu_loadvm_state_main(f, mis);
1832 
1833     /*
1834      * This is tricky, but, mis->from_src_file can change after it
1835      * returns, when postcopy recovery happened. In the future, we may
1836      * want a wrapper for the QEMUFile handle.
1837      */
1838     f = mis->from_src_file;
1839 
1840     /* And non-blocking again so we don't block in any cleanup */
1841     qemu_file_set_blocking(f, false);
1842 
1843     trace_postcopy_ram_listen_thread_exit();
1844     if (load_res < 0) {
1845         qemu_file_set_error(f, load_res);
1846         dirty_bitmap_mig_cancel_incoming();
1847         if (postcopy_state_get() == POSTCOPY_INCOMING_RUNNING &&
1848             !migrate_postcopy_ram() && migrate_dirty_bitmaps())
1849         {
1850             error_report("%s: loadvm failed during postcopy: %d. All states "
1851                          "are migrated except dirty bitmaps. Some dirty "
1852                          "bitmaps may be lost, and present migrated dirty "
1853                          "bitmaps are correctly migrated and valid.",
1854                          __func__, load_res);
1855             load_res = 0; /* prevent further exit() */
1856         } else {
1857             error_report("%s: loadvm failed: %d", __func__, load_res);
1858             migrate_set_state(&mis->state, MIGRATION_STATUS_POSTCOPY_ACTIVE,
1859                                            MIGRATION_STATUS_FAILED);
1860         }
1861     }
1862     if (load_res >= 0) {
1863         /*
1864          * This looks good, but it's possible that the device loading in the
1865          * main thread hasn't finished yet, and so we might not be in 'RUN'
1866          * state yet; wait for the end of the main thread.
1867          */
1868         qemu_event_wait(&mis->main_thread_load_event);
1869     }
1870     postcopy_ram_incoming_cleanup(mis);
1871 
1872     if (load_res < 0) {
1873         /*
1874          * If something went wrong then we have a bad state so exit;
1875          * depending how far we got it might be possible at this point
1876          * to leave the guest running and fire MCEs for pages that never
1877          * arrived as a desperate recovery step.
1878          */
1879         rcu_unregister_thread();
1880         exit(EXIT_FAILURE);
1881     }
1882 
1883     migrate_set_state(&mis->state, MIGRATION_STATUS_POSTCOPY_ACTIVE,
1884                                    MIGRATION_STATUS_COMPLETED);
1885     /*
1886      * If everything has worked fine, then the main thread has waited
1887      * for us to start, and we're the last use of the mis.
1888      * (If something broke then qemu will have to exit anyway since it's
1889      * got a bad migration state).
1890      */
1891     migration_incoming_state_destroy();
1892     qemu_loadvm_state_cleanup();
1893 
1894     rcu_unregister_thread();
1895     mis->have_listen_thread = false;
1896     postcopy_state_set(POSTCOPY_INCOMING_END);
1897 
1898     object_unref(OBJECT(migr));
1899 
1900     return NULL;
1901 }
1902 
1903 /* After this message we must be able to immediately receive postcopy data */
1904 static int loadvm_postcopy_handle_listen(MigrationIncomingState *mis)
1905 {
1906     PostcopyState ps = postcopy_state_set(POSTCOPY_INCOMING_LISTENING);
1907     trace_loadvm_postcopy_handle_listen();
1908     Error *local_err = NULL;
1909 
1910     if (ps != POSTCOPY_INCOMING_ADVISE && ps != POSTCOPY_INCOMING_DISCARD) {
1911         error_report("CMD_POSTCOPY_LISTEN in wrong postcopy state (%d)", ps);
1912         return -1;
1913     }
1914     if (ps == POSTCOPY_INCOMING_ADVISE) {
1915         /*
1916          * A rare case, we entered listen without having to do any discards,
1917          * so do the setup that's normally done at the time of the 1st discard.
1918          */
1919         if (migrate_postcopy_ram()) {
1920             postcopy_ram_prepare_discard(mis);
1921         }
1922     }
1923 
1924     /*
1925      * Sensitise RAM - can now generate requests for blocks that don't exist
1926      * However, at this point the CPU shouldn't be running, and the IO
1927      * shouldn't be doing anything yet so don't actually expect requests
1928      */
1929     if (migrate_postcopy_ram()) {
1930         if (postcopy_ram_incoming_setup(mis)) {
1931             postcopy_ram_incoming_cleanup(mis);
1932             return -1;
1933         }
1934     }
1935 
1936     if (postcopy_notify(POSTCOPY_NOTIFY_INBOUND_LISTEN, &local_err)) {
1937         error_report_err(local_err);
1938         return -1;
1939     }
1940 
1941     mis->have_listen_thread = true;
1942     /* Start up the listening thread and wait for it to signal ready */
1943     qemu_sem_init(&mis->listen_thread_sem, 0);
1944     qemu_thread_create(&mis->listen_thread, "postcopy/listen",
1945                        postcopy_ram_listen_thread, NULL,
1946                        QEMU_THREAD_DETACHED);
1947     qemu_sem_wait(&mis->listen_thread_sem);
1948     qemu_sem_destroy(&mis->listen_thread_sem);
1949 
1950     return 0;
1951 }
1952 
1953 static void loadvm_postcopy_handle_run_bh(void *opaque)
1954 {
1955     Error *local_err = NULL;
1956     MigrationIncomingState *mis = opaque;
1957 
1958     /* TODO we should move all of this lot into postcopy_ram.c or a shared code
1959      * in migration.c
1960      */
1961     cpu_synchronize_all_post_init();
1962 
1963     qemu_announce_self(&mis->announce_timer, migrate_announce_params());
1964 
1965     /* Make sure all file formats flush their mutable metadata.
1966      * If we get an error here, just don't restart the VM yet. */
1967     bdrv_invalidate_cache_all(&local_err);
1968     if (local_err) {
1969         error_report_err(local_err);
1970         local_err = NULL;
1971         autostart = false;
1972     }
1973 
1974     trace_loadvm_postcopy_handle_run_cpu_sync();
1975 
1976     trace_loadvm_postcopy_handle_run_vmstart();
1977 
1978     dirty_bitmap_mig_before_vm_start();
1979 
1980     if (autostart) {
1981         /* Hold onto your hats, starting the CPU */
1982         vm_start();
1983     } else {
1984         /* leave it paused and let management decide when to start the CPU */
1985         runstate_set(RUN_STATE_PAUSED);
1986     }
1987 
1988     qemu_bh_delete(mis->bh);
1989 }
1990 
1991 /* After all discards we can start running and asking for pages */
1992 static int loadvm_postcopy_handle_run(MigrationIncomingState *mis)
1993 {
1994     PostcopyState ps = postcopy_state_get();
1995 
1996     trace_loadvm_postcopy_handle_run();
1997     if (ps != POSTCOPY_INCOMING_LISTENING) {
1998         error_report("CMD_POSTCOPY_RUN in wrong postcopy state (%d)", ps);
1999         return -1;
2000     }
2001 
2002     postcopy_state_set(POSTCOPY_INCOMING_RUNNING);
2003     mis->bh = qemu_bh_new(loadvm_postcopy_handle_run_bh, mis);
2004     qemu_bh_schedule(mis->bh);
2005 
2006     /* We need to finish reading the stream from the package
2007      * and also stop reading anything more from the stream that loaded the
2008      * package (since it's now being read by the listener thread).
2009      * LOADVM_QUIT will quit all the layers of nested loadvm loops.
2010      */
2011     return LOADVM_QUIT;
2012 }
2013 
2014 static int loadvm_postcopy_handle_resume(MigrationIncomingState *mis)
2015 {
2016     if (mis->state != MIGRATION_STATUS_POSTCOPY_RECOVER) {
2017         error_report("%s: illegal resume received", __func__);
2018         /* Don't fail the load, only for this. */
2019         return 0;
2020     }
2021 
2022     /*
2023      * This means source VM is ready to resume the postcopy migration.
2024      * It's time to switch state and release the fault thread to
2025      * continue service page faults.
2026      */
2027     migrate_set_state(&mis->state, MIGRATION_STATUS_POSTCOPY_RECOVER,
2028                       MIGRATION_STATUS_POSTCOPY_ACTIVE);
2029     qemu_sem_post(&mis->postcopy_pause_sem_fault);
2030 
2031     trace_loadvm_postcopy_handle_resume();
2032 
2033     /* Tell source that "we are ready" */
2034     migrate_send_rp_resume_ack(mis, MIGRATION_RESUME_ACK_VALUE);
2035 
2036     return 0;
2037 }
2038 
2039 /**
2040  * Immediately following this command is a blob of data containing an embedded
2041  * chunk of migration stream; read it and load it.
2042  *
2043  * @mis: Incoming state
2044  * @length: Length of packaged data to read
2045  *
2046  * Returns: Negative values on error
2047  *
2048  */
2049 static int loadvm_handle_cmd_packaged(MigrationIncomingState *mis)
2050 {
2051     int ret;
2052     size_t length;
2053     QIOChannelBuffer *bioc;
2054 
2055     length = qemu_get_be32(mis->from_src_file);
2056     trace_loadvm_handle_cmd_packaged(length);
2057 
2058     if (length > MAX_VM_CMD_PACKAGED_SIZE) {
2059         error_report("Unreasonably large packaged state: %zu", length);
2060         return -1;
2061     }
2062 
2063     bioc = qio_channel_buffer_new(length);
2064     qio_channel_set_name(QIO_CHANNEL(bioc), "migration-loadvm-buffer");
2065     ret = qemu_get_buffer(mis->from_src_file,
2066                           bioc->data,
2067                           length);
2068     if (ret != length) {
2069         object_unref(OBJECT(bioc));
2070         error_report("CMD_PACKAGED: Buffer receive fail ret=%d length=%zu",
2071                      ret, length);
2072         return (ret < 0) ? ret : -EAGAIN;
2073     }
2074     bioc->usage += length;
2075     trace_loadvm_handle_cmd_packaged_received(ret);
2076 
2077     QEMUFile *packf = qemu_fopen_channel_input(QIO_CHANNEL(bioc));
2078 
2079     ret = qemu_loadvm_state_main(packf, mis);
2080     trace_loadvm_handle_cmd_packaged_main(ret);
2081     qemu_fclose(packf);
2082     object_unref(OBJECT(bioc));
2083 
2084     return ret;
2085 }
2086 
2087 /*
2088  * Handle request that source requests for recved_bitmap on
2089  * destination. Payload format:
2090  *
2091  * len (1 byte) + ramblock_name (<255 bytes)
2092  */
2093 static int loadvm_handle_recv_bitmap(MigrationIncomingState *mis,
2094                                      uint16_t len)
2095 {
2096     QEMUFile *file = mis->from_src_file;
2097     RAMBlock *rb;
2098     char block_name[256];
2099     size_t cnt;
2100 
2101     cnt = qemu_get_counted_string(file, block_name);
2102     if (!cnt) {
2103         error_report("%s: failed to read block name", __func__);
2104         return -EINVAL;
2105     }
2106 
2107     /* Validate before using the data */
2108     if (qemu_file_get_error(file)) {
2109         return qemu_file_get_error(file);
2110     }
2111 
2112     if (len != cnt + 1) {
2113         error_report("%s: invalid payload length (%d)", __func__, len);
2114         return -EINVAL;
2115     }
2116 
2117     rb = qemu_ram_block_by_name(block_name);
2118     if (!rb) {
2119         error_report("%s: block '%s' not found", __func__, block_name);
2120         return -EINVAL;
2121     }
2122 
2123     migrate_send_rp_recv_bitmap(mis, block_name);
2124 
2125     trace_loadvm_handle_recv_bitmap(block_name);
2126 
2127     return 0;
2128 }
2129 
2130 static int loadvm_process_enable_colo(MigrationIncomingState *mis)
2131 {
2132     int ret = migration_incoming_enable_colo();
2133 
2134     if (!ret) {
2135         ret = colo_init_ram_cache();
2136         if (ret) {
2137             migration_incoming_disable_colo();
2138         }
2139     }
2140     return ret;
2141 }
2142 
2143 /*
2144  * Process an incoming 'QEMU_VM_COMMAND'
2145  * 0           just a normal return
2146  * LOADVM_QUIT All good, but exit the loop
2147  * <0          Error
2148  */
2149 static int loadvm_process_command(QEMUFile *f)
2150 {
2151     MigrationIncomingState *mis = migration_incoming_get_current();
2152     uint16_t cmd;
2153     uint16_t len;
2154     uint32_t tmp32;
2155 
2156     cmd = qemu_get_be16(f);
2157     len = qemu_get_be16(f);
2158 
2159     /* Check validity before continue processing of cmds */
2160     if (qemu_file_get_error(f)) {
2161         return qemu_file_get_error(f);
2162     }
2163 
2164     trace_loadvm_process_command(cmd, len);
2165     if (cmd >= MIG_CMD_MAX || cmd == MIG_CMD_INVALID) {
2166         error_report("MIG_CMD 0x%x unknown (len 0x%x)", cmd, len);
2167         return -EINVAL;
2168     }
2169 
2170     if (mig_cmd_args[cmd].len != -1 && mig_cmd_args[cmd].len != len) {
2171         error_report("%s received with bad length - expecting %zu, got %d",
2172                      mig_cmd_args[cmd].name,
2173                      (size_t)mig_cmd_args[cmd].len, len);
2174         return -ERANGE;
2175     }
2176 
2177     switch (cmd) {
2178     case MIG_CMD_OPEN_RETURN_PATH:
2179         if (mis->to_src_file) {
2180             error_report("CMD_OPEN_RETURN_PATH called when RP already open");
2181             /* Not really a problem, so don't give up */
2182             return 0;
2183         }
2184         mis->to_src_file = qemu_file_get_return_path(f);
2185         if (!mis->to_src_file) {
2186             error_report("CMD_OPEN_RETURN_PATH failed");
2187             return -1;
2188         }
2189         break;
2190 
2191     case MIG_CMD_PING:
2192         tmp32 = qemu_get_be32(f);
2193         trace_loadvm_process_command_ping(tmp32);
2194         if (!mis->to_src_file) {
2195             error_report("CMD_PING (0x%x) received with no return path",
2196                          tmp32);
2197             return -1;
2198         }
2199         migrate_send_rp_pong(mis, tmp32);
2200         break;
2201 
2202     case MIG_CMD_PACKAGED:
2203         return loadvm_handle_cmd_packaged(mis);
2204 
2205     case MIG_CMD_POSTCOPY_ADVISE:
2206         return loadvm_postcopy_handle_advise(mis, len);
2207 
2208     case MIG_CMD_POSTCOPY_LISTEN:
2209         return loadvm_postcopy_handle_listen(mis);
2210 
2211     case MIG_CMD_POSTCOPY_RUN:
2212         return loadvm_postcopy_handle_run(mis);
2213 
2214     case MIG_CMD_POSTCOPY_RAM_DISCARD:
2215         return loadvm_postcopy_ram_handle_discard(mis, len);
2216 
2217     case MIG_CMD_POSTCOPY_RESUME:
2218         return loadvm_postcopy_handle_resume(mis);
2219 
2220     case MIG_CMD_RECV_BITMAP:
2221         return loadvm_handle_recv_bitmap(mis, len);
2222 
2223     case MIG_CMD_ENABLE_COLO:
2224         return loadvm_process_enable_colo(mis);
2225     }
2226 
2227     return 0;
2228 }
2229 
2230 /*
2231  * Read a footer off the wire and check that it matches the expected section
2232  *
2233  * Returns: true if the footer was good
2234  *          false if there is a problem (and calls error_report to say why)
2235  */
2236 static bool check_section_footer(QEMUFile *f, SaveStateEntry *se)
2237 {
2238     int ret;
2239     uint8_t read_mark;
2240     uint32_t read_section_id;
2241 
2242     if (!migrate_get_current()->send_section_footer) {
2243         /* No footer to check */
2244         return true;
2245     }
2246 
2247     read_mark = qemu_get_byte(f);
2248 
2249     ret = qemu_file_get_error(f);
2250     if (ret) {
2251         error_report("%s: Read section footer failed: %d",
2252                      __func__, ret);
2253         return false;
2254     }
2255 
2256     if (read_mark != QEMU_VM_SECTION_FOOTER) {
2257         error_report("Missing section footer for %s", se->idstr);
2258         return false;
2259     }
2260 
2261     read_section_id = qemu_get_be32(f);
2262     if (read_section_id != se->load_section_id) {
2263         error_report("Mismatched section id in footer for %s -"
2264                      " read 0x%x expected 0x%x",
2265                      se->idstr, read_section_id, se->load_section_id);
2266         return false;
2267     }
2268 
2269     /* All good */
2270     return true;
2271 }
2272 
2273 static int
2274 qemu_loadvm_section_start_full(QEMUFile *f, MigrationIncomingState *mis)
2275 {
2276     uint32_t instance_id, version_id, section_id;
2277     SaveStateEntry *se;
2278     char idstr[256];
2279     int ret;
2280 
2281     /* Read section start */
2282     section_id = qemu_get_be32(f);
2283     if (!qemu_get_counted_string(f, idstr)) {
2284         error_report("Unable to read ID string for section %u",
2285                      section_id);
2286         return -EINVAL;
2287     }
2288     instance_id = qemu_get_be32(f);
2289     version_id = qemu_get_be32(f);
2290 
2291     ret = qemu_file_get_error(f);
2292     if (ret) {
2293         error_report("%s: Failed to read instance/version ID: %d",
2294                      __func__, ret);
2295         return ret;
2296     }
2297 
2298     trace_qemu_loadvm_state_section_startfull(section_id, idstr,
2299             instance_id, version_id);
2300     /* Find savevm section */
2301     se = find_se(idstr, instance_id);
2302     if (se == NULL) {
2303         error_report("Unknown savevm section or instance '%s' %"PRIu32". "
2304                      "Make sure that your current VM setup matches your "
2305                      "saved VM setup, including any hotplugged devices",
2306                      idstr, instance_id);
2307         return -EINVAL;
2308     }
2309 
2310     /* Validate version */
2311     if (version_id > se->version_id) {
2312         error_report("savevm: unsupported version %d for '%s' v%d",
2313                      version_id, idstr, se->version_id);
2314         return -EINVAL;
2315     }
2316     se->load_version_id = version_id;
2317     se->load_section_id = section_id;
2318 
2319     /* Validate if it is a device's state */
2320     if (xen_enabled() && se->is_ram) {
2321         error_report("loadvm: %s RAM loading not allowed on Xen", idstr);
2322         return -EINVAL;
2323     }
2324 
2325     ret = vmstate_load(f, se);
2326     if (ret < 0) {
2327         error_report("error while loading state for instance 0x%"PRIx32" of"
2328                      " device '%s'", instance_id, idstr);
2329         return ret;
2330     }
2331     if (!check_section_footer(f, se)) {
2332         return -EINVAL;
2333     }
2334 
2335     return 0;
2336 }
2337 
2338 static int
2339 qemu_loadvm_section_part_end(QEMUFile *f, MigrationIncomingState *mis)
2340 {
2341     uint32_t section_id;
2342     SaveStateEntry *se;
2343     int ret;
2344 
2345     section_id = qemu_get_be32(f);
2346 
2347     ret = qemu_file_get_error(f);
2348     if (ret) {
2349         error_report("%s: Failed to read section ID: %d",
2350                      __func__, ret);
2351         return ret;
2352     }
2353 
2354     trace_qemu_loadvm_state_section_partend(section_id);
2355     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
2356         if (se->load_section_id == section_id) {
2357             break;
2358         }
2359     }
2360     if (se == NULL) {
2361         error_report("Unknown savevm section %d", section_id);
2362         return -EINVAL;
2363     }
2364 
2365     ret = vmstate_load(f, se);
2366     if (ret < 0) {
2367         error_report("error while loading state section id %d(%s)",
2368                      section_id, se->idstr);
2369         return ret;
2370     }
2371     if (!check_section_footer(f, se)) {
2372         return -EINVAL;
2373     }
2374 
2375     return 0;
2376 }
2377 
2378 static int qemu_loadvm_state_header(QEMUFile *f)
2379 {
2380     unsigned int v;
2381     int ret;
2382 
2383     v = qemu_get_be32(f);
2384     if (v != QEMU_VM_FILE_MAGIC) {
2385         error_report("Not a migration stream");
2386         return -EINVAL;
2387     }
2388 
2389     v = qemu_get_be32(f);
2390     if (v == QEMU_VM_FILE_VERSION_COMPAT) {
2391         error_report("SaveVM v2 format is obsolete and don't work anymore");
2392         return -ENOTSUP;
2393     }
2394     if (v != QEMU_VM_FILE_VERSION) {
2395         error_report("Unsupported migration stream version");
2396         return -ENOTSUP;
2397     }
2398 
2399     if (migrate_get_current()->send_configuration) {
2400         if (qemu_get_byte(f) != QEMU_VM_CONFIGURATION) {
2401             error_report("Configuration section missing");
2402             qemu_loadvm_state_cleanup();
2403             return -EINVAL;
2404         }
2405         ret = vmstate_load_state(f, &vmstate_configuration, &savevm_state, 0);
2406 
2407         if (ret) {
2408             qemu_loadvm_state_cleanup();
2409             return ret;
2410         }
2411     }
2412     return 0;
2413 }
2414 
2415 static int qemu_loadvm_state_setup(QEMUFile *f)
2416 {
2417     SaveStateEntry *se;
2418     int ret;
2419 
2420     trace_loadvm_state_setup();
2421     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
2422         if (!se->ops || !se->ops->load_setup) {
2423             continue;
2424         }
2425         if (se->ops->is_active) {
2426             if (!se->ops->is_active(se->opaque)) {
2427                 continue;
2428             }
2429         }
2430 
2431         ret = se->ops->load_setup(f, se->opaque);
2432         if (ret < 0) {
2433             qemu_file_set_error(f, ret);
2434             error_report("Load state of device %s failed", se->idstr);
2435             return ret;
2436         }
2437     }
2438     return 0;
2439 }
2440 
2441 void qemu_loadvm_state_cleanup(void)
2442 {
2443     SaveStateEntry *se;
2444 
2445     trace_loadvm_state_cleanup();
2446     QTAILQ_FOREACH(se, &savevm_state.handlers, entry) {
2447         if (se->ops && se->ops->load_cleanup) {
2448             se->ops->load_cleanup(se->opaque);
2449         }
2450     }
2451 }
2452 
2453 /* Return true if we should continue the migration, or false. */
2454 static bool postcopy_pause_incoming(MigrationIncomingState *mis)
2455 {
2456     trace_postcopy_pause_incoming();
2457 
2458     assert(migrate_postcopy_ram());
2459 
2460     /* Clear the triggered bit to allow one recovery */
2461     mis->postcopy_recover_triggered = false;
2462 
2463     assert(mis->from_src_file);
2464     qemu_file_shutdown(mis->from_src_file);
2465     qemu_fclose(mis->from_src_file);
2466     mis->from_src_file = NULL;
2467 
2468     assert(mis->to_src_file);
2469     qemu_file_shutdown(mis->to_src_file);
2470     qemu_mutex_lock(&mis->rp_mutex);
2471     qemu_fclose(mis->to_src_file);
2472     mis->to_src_file = NULL;
2473     qemu_mutex_unlock(&mis->rp_mutex);
2474 
2475     migrate_set_state(&mis->state, MIGRATION_STATUS_POSTCOPY_ACTIVE,
2476                       MIGRATION_STATUS_POSTCOPY_PAUSED);
2477 
2478     /* Notify the fault thread for the invalidated file handle */
2479     postcopy_fault_thread_notify(mis);
2480 
2481     error_report("Detected IO failure for postcopy. "
2482                  "Migration paused.");
2483 
2484     while (mis->state == MIGRATION_STATUS_POSTCOPY_PAUSED) {
2485         qemu_sem_wait(&mis->postcopy_pause_sem_dst);
2486     }
2487 
2488     trace_postcopy_pause_incoming_continued();
2489 
2490     return true;
2491 }
2492 
2493 int qemu_loadvm_state_main(QEMUFile *f, MigrationIncomingState *mis)
2494 {
2495     uint8_t section_type;
2496     int ret = 0;
2497 
2498 retry:
2499     while (true) {
2500         section_type = qemu_get_byte(f);
2501 
2502         if (qemu_file_get_error(f)) {
2503             ret = qemu_file_get_error(f);
2504             break;
2505         }
2506 
2507         trace_qemu_loadvm_state_section(section_type);
2508         switch (section_type) {
2509         case QEMU_VM_SECTION_START:
2510         case QEMU_VM_SECTION_FULL:
2511             ret = qemu_loadvm_section_start_full(f, mis);
2512             if (ret < 0) {
2513                 goto out;
2514             }
2515             break;
2516         case QEMU_VM_SECTION_PART:
2517         case QEMU_VM_SECTION_END:
2518             ret = qemu_loadvm_section_part_end(f, mis);
2519             if (ret < 0) {
2520                 goto out;
2521             }
2522             break;
2523         case QEMU_VM_COMMAND:
2524             ret = loadvm_process_command(f);
2525             trace_qemu_loadvm_state_section_command(ret);
2526             if ((ret < 0) || (ret == LOADVM_QUIT)) {
2527                 goto out;
2528             }
2529             break;
2530         case QEMU_VM_EOF:
2531             /* This is the end of migration */
2532             goto out;
2533         default:
2534             error_report("Unknown savevm section type %d", section_type);
2535             ret = -EINVAL;
2536             goto out;
2537         }
2538     }
2539 
2540 out:
2541     if (ret < 0) {
2542         qemu_file_set_error(f, ret);
2543 
2544         /* Cancel bitmaps incoming regardless of recovery */
2545         dirty_bitmap_mig_cancel_incoming();
2546 
2547         /*
2548          * If we are during an active postcopy, then we pause instead
2549          * of bail out to at least keep the VM's dirty data.  Note
2550          * that POSTCOPY_INCOMING_LISTENING stage is still not enough,
2551          * during which we're still receiving device states and we
2552          * still haven't yet started the VM on destination.
2553          *
2554          * Only RAM postcopy supports recovery. Still, if RAM postcopy is
2555          * enabled, canceled bitmaps postcopy will not affect RAM postcopy
2556          * recovering.
2557          */
2558         if (postcopy_state_get() == POSTCOPY_INCOMING_RUNNING &&
2559             migrate_postcopy_ram() && postcopy_pause_incoming(mis)) {
2560             /* Reset f to point to the newly created channel */
2561             f = mis->from_src_file;
2562             goto retry;
2563         }
2564     }
2565     return ret;
2566 }
2567 
2568 int qemu_loadvm_state(QEMUFile *f)
2569 {
2570     MigrationIncomingState *mis = migration_incoming_get_current();
2571     Error *local_err = NULL;
2572     int ret;
2573 
2574     if (qemu_savevm_state_blocked(&local_err)) {
2575         error_report_err(local_err);
2576         return -EINVAL;
2577     }
2578 
2579     ret = qemu_loadvm_state_header(f);
2580     if (ret) {
2581         return ret;
2582     }
2583 
2584     if (qemu_loadvm_state_setup(f) != 0) {
2585         return -EINVAL;
2586     }
2587 
2588     cpu_synchronize_all_pre_loadvm();
2589 
2590     ret = qemu_loadvm_state_main(f, mis);
2591     qemu_event_set(&mis->main_thread_load_event);
2592 
2593     trace_qemu_loadvm_state_post_main(ret);
2594 
2595     if (mis->have_listen_thread) {
2596         /* Listen thread still going, can't clean up yet */
2597         return ret;
2598     }
2599 
2600     if (ret == 0) {
2601         ret = qemu_file_get_error(f);
2602     }
2603 
2604     /*
2605      * Try to read in the VMDESC section as well, so that dumping tools that
2606      * intercept our migration stream have the chance to see it.
2607      */
2608 
2609     /* We've got to be careful; if we don't read the data and just shut the fd
2610      * then the sender can error if we close while it's still sending.
2611      * We also mustn't read data that isn't there; some transports (RDMA)
2612      * will stall waiting for that data when the source has already closed.
2613      */
2614     if (ret == 0 && should_send_vmdesc()) {
2615         uint8_t *buf;
2616         uint32_t size;
2617         uint8_t  section_type = qemu_get_byte(f);
2618 
2619         if (section_type != QEMU_VM_VMDESCRIPTION) {
2620             error_report("Expected vmdescription section, but got %d",
2621                          section_type);
2622             /*
2623              * It doesn't seem worth failing at this point since
2624              * we apparently have an otherwise valid VM state
2625              */
2626         } else {
2627             buf = g_malloc(0x1000);
2628             size = qemu_get_be32(f);
2629 
2630             while (size > 0) {
2631                 uint32_t read_chunk = MIN(size, 0x1000);
2632                 qemu_get_buffer(f, buf, read_chunk);
2633                 size -= read_chunk;
2634             }
2635             g_free(buf);
2636         }
2637     }
2638 
2639     qemu_loadvm_state_cleanup();
2640     cpu_synchronize_all_post_init();
2641 
2642     return ret;
2643 }
2644 
2645 int qemu_load_device_state(QEMUFile *f)
2646 {
2647     MigrationIncomingState *mis = migration_incoming_get_current();
2648     int ret;
2649 
2650     /* Load QEMU_VM_SECTION_FULL section */
2651     ret = qemu_loadvm_state_main(f, mis);
2652     if (ret < 0) {
2653         error_report("Failed to load device state: %d", ret);
2654         return ret;
2655     }
2656 
2657     cpu_synchronize_all_post_init();
2658     return 0;
2659 }
2660 
2661 int save_snapshot(const char *name, Error **errp)
2662 {
2663     BlockDriverState *bs, *bs1;
2664     QEMUSnapshotInfo sn1, *sn = &sn1, old_sn1, *old_sn = &old_sn1;
2665     int ret = -1, ret2;
2666     QEMUFile *f;
2667     int saved_vm_running;
2668     uint64_t vm_state_size;
2669     qemu_timeval tv;
2670     struct tm tm;
2671     AioContext *aio_context;
2672 
2673     if (migration_is_blocked(errp)) {
2674         return ret;
2675     }
2676 
2677     if (!replay_can_snapshot()) {
2678         error_setg(errp, "Record/replay does not allow making snapshot "
2679                    "right now. Try once more later.");
2680         return ret;
2681     }
2682 
2683     if (!bdrv_all_can_snapshot(&bs)) {
2684         error_setg(errp, "Device '%s' is writable but does not support "
2685                    "snapshots", bdrv_get_device_or_node_name(bs));
2686         return ret;
2687     }
2688 
2689     /* Delete old snapshots of the same name */
2690     if (name) {
2691         ret = bdrv_all_delete_snapshot(name, &bs1, errp);
2692         if (ret < 0) {
2693             error_prepend(errp, "Error while deleting snapshot on device "
2694                           "'%s': ", bdrv_get_device_or_node_name(bs1));
2695             return ret;
2696         }
2697     }
2698 
2699     bs = bdrv_all_find_vmstate_bs();
2700     if (bs == NULL) {
2701         error_setg(errp, "No block device can accept snapshots");
2702         return ret;
2703     }
2704     aio_context = bdrv_get_aio_context(bs);
2705 
2706     saved_vm_running = runstate_is_running();
2707 
2708     ret = global_state_store();
2709     if (ret) {
2710         error_setg(errp, "Error saving global state");
2711         return ret;
2712     }
2713     vm_stop(RUN_STATE_SAVE_VM);
2714 
2715     bdrv_drain_all_begin();
2716 
2717     aio_context_acquire(aio_context);
2718 
2719     memset(sn, 0, sizeof(*sn));
2720 
2721     /* fill auxiliary fields */
2722     qemu_gettimeofday(&tv);
2723     sn->date_sec = tv.tv_sec;
2724     sn->date_nsec = tv.tv_usec * 1000;
2725     sn->vm_clock_nsec = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
2726 
2727     if (name) {
2728         ret = bdrv_snapshot_find(bs, old_sn, name);
2729         if (ret >= 0) {
2730             pstrcpy(sn->name, sizeof(sn->name), old_sn->name);
2731             pstrcpy(sn->id_str, sizeof(sn->id_str), old_sn->id_str);
2732         } else {
2733             pstrcpy(sn->name, sizeof(sn->name), name);
2734         }
2735     } else {
2736         /* cast below needed for OpenBSD where tv_sec is still 'long' */
2737         localtime_r((const time_t *)&tv.tv_sec, &tm);
2738         strftime(sn->name, sizeof(sn->name), "vm-%Y%m%d%H%M%S", &tm);
2739     }
2740 
2741     /* save the VM state */
2742     f = qemu_fopen_bdrv(bs, 1);
2743     if (!f) {
2744         error_setg(errp, "Could not open VM state file");
2745         goto the_end;
2746     }
2747     ret = qemu_savevm_state(f, errp);
2748     vm_state_size = qemu_ftell(f);
2749     ret2 = qemu_fclose(f);
2750     if (ret < 0) {
2751         goto the_end;
2752     }
2753     if (ret2 < 0) {
2754         ret = ret2;
2755         goto the_end;
2756     }
2757 
2758     /* The bdrv_all_create_snapshot() call that follows acquires the AioContext
2759      * for itself.  BDRV_POLL_WHILE() does not support nested locking because
2760      * it only releases the lock once.  Therefore synchronous I/O will deadlock
2761      * unless we release the AioContext before bdrv_all_create_snapshot().
2762      */
2763     aio_context_release(aio_context);
2764     aio_context = NULL;
2765 
2766     ret = bdrv_all_create_snapshot(sn, bs, vm_state_size, &bs);
2767     if (ret < 0) {
2768         error_setg(errp, "Error while creating snapshot on '%s'",
2769                    bdrv_get_device_or_node_name(bs));
2770         goto the_end;
2771     }
2772 
2773     ret = 0;
2774 
2775  the_end:
2776     if (aio_context) {
2777         aio_context_release(aio_context);
2778     }
2779 
2780     bdrv_drain_all_end();
2781 
2782     if (saved_vm_running) {
2783         vm_start();
2784     }
2785     return ret;
2786 }
2787 
2788 void qmp_xen_save_devices_state(const char *filename, bool has_live, bool live,
2789                                 Error **errp)
2790 {
2791     QEMUFile *f;
2792     QIOChannelFile *ioc;
2793     int saved_vm_running;
2794     int ret;
2795 
2796     if (!has_live) {
2797         /* live default to true so old version of Xen tool stack can have a
2798          * successful live migration */
2799         live = true;
2800     }
2801 
2802     saved_vm_running = runstate_is_running();
2803     vm_stop(RUN_STATE_SAVE_VM);
2804     global_state_store_running();
2805 
2806     ioc = qio_channel_file_new_path(filename, O_WRONLY | O_CREAT, 0660, errp);
2807     if (!ioc) {
2808         goto the_end;
2809     }
2810     qio_channel_set_name(QIO_CHANNEL(ioc), "migration-xen-save-state");
2811     f = qemu_fopen_channel_output(QIO_CHANNEL(ioc));
2812     object_unref(OBJECT(ioc));
2813     ret = qemu_save_device_state(f);
2814     if (ret < 0 || qemu_fclose(f) < 0) {
2815         error_setg(errp, QERR_IO_ERROR);
2816     } else {
2817         /* libxl calls the QMP command "stop" before calling
2818          * "xen-save-devices-state" and in case of migration failure, libxl
2819          * would call "cont".
2820          * So call bdrv_inactivate_all (release locks) here to let the other
2821          * side of the migration take control of the images.
2822          */
2823         if (live && !saved_vm_running) {
2824             ret = bdrv_inactivate_all();
2825             if (ret) {
2826                 error_setg(errp, "%s: bdrv_inactivate_all() failed (%d)",
2827                            __func__, ret);
2828             }
2829         }
2830     }
2831 
2832  the_end:
2833     if (saved_vm_running) {
2834         vm_start();
2835     }
2836 }
2837 
2838 void qmp_xen_load_devices_state(const char *filename, Error **errp)
2839 {
2840     QEMUFile *f;
2841     QIOChannelFile *ioc;
2842     int ret;
2843 
2844     /* Guest must be paused before loading the device state; the RAM state
2845      * will already have been loaded by xc
2846      */
2847     if (runstate_is_running()) {
2848         error_setg(errp, "Cannot update device state while vm is running");
2849         return;
2850     }
2851     vm_stop(RUN_STATE_RESTORE_VM);
2852 
2853     ioc = qio_channel_file_new_path(filename, O_RDONLY | O_BINARY, 0, errp);
2854     if (!ioc) {
2855         return;
2856     }
2857     qio_channel_set_name(QIO_CHANNEL(ioc), "migration-xen-load-state");
2858     f = qemu_fopen_channel_input(QIO_CHANNEL(ioc));
2859     object_unref(OBJECT(ioc));
2860 
2861     ret = qemu_loadvm_state(f);
2862     qemu_fclose(f);
2863     if (ret < 0) {
2864         error_setg(errp, QERR_IO_ERROR);
2865     }
2866     migration_incoming_state_destroy();
2867 }
2868 
2869 int load_snapshot(const char *name, Error **errp)
2870 {
2871     BlockDriverState *bs, *bs_vm_state;
2872     QEMUSnapshotInfo sn;
2873     QEMUFile *f;
2874     int ret;
2875     AioContext *aio_context;
2876     MigrationIncomingState *mis = migration_incoming_get_current();
2877 
2878     if (!replay_can_snapshot()) {
2879         error_setg(errp, "Record/replay does not allow loading snapshot "
2880                    "right now. Try once more later.");
2881         return -EINVAL;
2882     }
2883 
2884     if (!bdrv_all_can_snapshot(&bs)) {
2885         error_setg(errp,
2886                    "Device '%s' is writable but does not support snapshots",
2887                    bdrv_get_device_or_node_name(bs));
2888         return -ENOTSUP;
2889     }
2890     ret = bdrv_all_find_snapshot(name, &bs);
2891     if (ret < 0) {
2892         error_setg(errp,
2893                    "Device '%s' does not have the requested snapshot '%s'",
2894                    bdrv_get_device_or_node_name(bs), name);
2895         return ret;
2896     }
2897 
2898     bs_vm_state = bdrv_all_find_vmstate_bs();
2899     if (!bs_vm_state) {
2900         error_setg(errp, "No block device supports snapshots");
2901         return -ENOTSUP;
2902     }
2903     aio_context = bdrv_get_aio_context(bs_vm_state);
2904 
2905     /* Don't even try to load empty VM states */
2906     aio_context_acquire(aio_context);
2907     ret = bdrv_snapshot_find(bs_vm_state, &sn, name);
2908     aio_context_release(aio_context);
2909     if (ret < 0) {
2910         return ret;
2911     } else if (sn.vm_state_size == 0) {
2912         error_setg(errp, "This is a disk-only snapshot. Revert to it "
2913                    " offline using qemu-img");
2914         return -EINVAL;
2915     }
2916 
2917     /* Flush all IO requests so they don't interfere with the new state.  */
2918     bdrv_drain_all_begin();
2919 
2920     ret = bdrv_all_goto_snapshot(name, &bs, errp);
2921     if (ret < 0) {
2922         error_prepend(errp, "Could not load snapshot '%s' on '%s': ",
2923                       name, bdrv_get_device_or_node_name(bs));
2924         goto err_drain;
2925     }
2926 
2927     /* restore the VM state */
2928     f = qemu_fopen_bdrv(bs_vm_state, 0);
2929     if (!f) {
2930         error_setg(errp, "Could not open VM state file");
2931         ret = -EINVAL;
2932         goto err_drain;
2933     }
2934 
2935     qemu_system_reset(SHUTDOWN_CAUSE_NONE);
2936     mis->from_src_file = f;
2937 
2938     aio_context_acquire(aio_context);
2939     ret = qemu_loadvm_state(f);
2940     migration_incoming_state_destroy();
2941     aio_context_release(aio_context);
2942 
2943     bdrv_drain_all_end();
2944 
2945     if (ret < 0) {
2946         error_setg(errp, "Error %d while loading VM state", ret);
2947         return ret;
2948     }
2949 
2950     return 0;
2951 
2952 err_drain:
2953     bdrv_drain_all_end();
2954     return ret;
2955 }
2956 
2957 void vmstate_register_ram(MemoryRegion *mr, DeviceState *dev)
2958 {
2959     qemu_ram_set_idstr(mr->ram_block,
2960                        memory_region_name(mr), dev);
2961     qemu_ram_set_migratable(mr->ram_block);
2962 }
2963 
2964 void vmstate_unregister_ram(MemoryRegion *mr, DeviceState *dev)
2965 {
2966     qemu_ram_unset_idstr(mr->ram_block);
2967     qemu_ram_unset_migratable(mr->ram_block);
2968 }
2969 
2970 void vmstate_register_ram_global(MemoryRegion *mr)
2971 {
2972     vmstate_register_ram(mr, NULL);
2973 }
2974 
2975 bool vmstate_check_only_migratable(const VMStateDescription *vmsd)
2976 {
2977     /* check needed if --only-migratable is specified */
2978     if (!only_migratable) {
2979         return true;
2980     }
2981 
2982     return !(vmsd && vmsd->unmigratable);
2983 }
2984