xref: /openbmc/qemu/net/tap.c (revision 9925990d)
1 /*
2  * QEMU System Emulator
3  *
4  * Copyright (c) 2003-2008 Fabrice Bellard
5  * Copyright (c) 2009 Red Hat, Inc.
6  *
7  * Permission is hereby granted, free of charge, to any person obtaining a copy
8  * of this software and associated documentation files (the "Software"), to deal
9  * in the Software without restriction, including without limitation the rights
10  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11  * copies of the Software, and to permit persons to whom the Software is
12  * furnished to do so, subject to the following conditions:
13  *
14  * The above copyright notice and this permission notice shall be included in
15  * all copies or substantial portions of the Software.
16  *
17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
23  * THE SOFTWARE.
24  */
25 
26 #include "qemu/osdep.h"
27 #include "tap_int.h"
28 
29 
30 #include <sys/ioctl.h>
31 #include <sys/wait.h>
32 #include <sys/socket.h>
33 #include <net/if.h>
34 
35 #include "net/net.h"
36 #include "clients.h"
37 #include "monitor/monitor.h"
38 #include "sysemu/sysemu.h"
39 #include "qapi/error.h"
40 #include "qemu-common.h"
41 #include "qemu/cutils.h"
42 #include "qemu/error-report.h"
43 #include "qemu/main-loop.h"
44 #include "qemu/sockets.h"
45 
46 #include "net/tap.h"
47 
48 #include "net/vhost_net.h"
49 
50 typedef struct TAPState {
51     NetClientState nc;
52     int fd;
53     char down_script[1024];
54     char down_script_arg[128];
55     uint8_t buf[NET_BUFSIZE];
56     bool read_poll;
57     bool write_poll;
58     bool using_vnet_hdr;
59     bool has_ufo;
60     bool enabled;
61     VHostNetState *vhost_net;
62     unsigned host_vnet_hdr_len;
63     Notifier exit;
64 } TAPState;
65 
66 static void launch_script(const char *setup_script, const char *ifname,
67                           int fd, Error **errp);
68 
69 static void tap_send(void *opaque);
70 static void tap_writable(void *opaque);
71 
72 static void tap_update_fd_handler(TAPState *s)
73 {
74     qemu_set_fd_handler(s->fd,
75                         s->read_poll && s->enabled ? tap_send : NULL,
76                         s->write_poll && s->enabled ? tap_writable : NULL,
77                         s);
78 }
79 
80 static void tap_read_poll(TAPState *s, bool enable)
81 {
82     s->read_poll = enable;
83     tap_update_fd_handler(s);
84 }
85 
86 static void tap_write_poll(TAPState *s, bool enable)
87 {
88     s->write_poll = enable;
89     tap_update_fd_handler(s);
90 }
91 
92 static void tap_writable(void *opaque)
93 {
94     TAPState *s = opaque;
95 
96     tap_write_poll(s, false);
97 
98     qemu_flush_queued_packets(&s->nc);
99 }
100 
101 static ssize_t tap_write_packet(TAPState *s, const struct iovec *iov, int iovcnt)
102 {
103     ssize_t len;
104 
105     do {
106         len = writev(s->fd, iov, iovcnt);
107     } while (len == -1 && errno == EINTR);
108 
109     if (len == -1 && errno == EAGAIN) {
110         tap_write_poll(s, true);
111         return 0;
112     }
113 
114     return len;
115 }
116 
117 static ssize_t tap_receive_iov(NetClientState *nc, const struct iovec *iov,
118                                int iovcnt)
119 {
120     TAPState *s = DO_UPCAST(TAPState, nc, nc);
121     const struct iovec *iovp = iov;
122     struct iovec iov_copy[iovcnt + 1];
123     struct virtio_net_hdr_mrg_rxbuf hdr = { };
124 
125     if (s->host_vnet_hdr_len && !s->using_vnet_hdr) {
126         iov_copy[0].iov_base = &hdr;
127         iov_copy[0].iov_len =  s->host_vnet_hdr_len;
128         memcpy(&iov_copy[1], iov, iovcnt * sizeof(*iov));
129         iovp = iov_copy;
130         iovcnt++;
131     }
132 
133     return tap_write_packet(s, iovp, iovcnt);
134 }
135 
136 static ssize_t tap_receive_raw(NetClientState *nc, const uint8_t *buf, size_t size)
137 {
138     TAPState *s = DO_UPCAST(TAPState, nc, nc);
139     struct iovec iov[2];
140     int iovcnt = 0;
141     struct virtio_net_hdr_mrg_rxbuf hdr = { };
142 
143     if (s->host_vnet_hdr_len) {
144         iov[iovcnt].iov_base = &hdr;
145         iov[iovcnt].iov_len  = s->host_vnet_hdr_len;
146         iovcnt++;
147     }
148 
149     iov[iovcnt].iov_base = (char *)buf;
150     iov[iovcnt].iov_len  = size;
151     iovcnt++;
152 
153     return tap_write_packet(s, iov, iovcnt);
154 }
155 
156 static ssize_t tap_receive(NetClientState *nc, const uint8_t *buf, size_t size)
157 {
158     TAPState *s = DO_UPCAST(TAPState, nc, nc);
159     struct iovec iov[1];
160 
161     if (s->host_vnet_hdr_len && !s->using_vnet_hdr) {
162         return tap_receive_raw(nc, buf, size);
163     }
164 
165     iov[0].iov_base = (char *)buf;
166     iov[0].iov_len  = size;
167 
168     return tap_write_packet(s, iov, 1);
169 }
170 
171 #ifndef __sun__
172 ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
173 {
174     return read(tapfd, buf, maxlen);
175 }
176 #endif
177 
178 static void tap_send_completed(NetClientState *nc, ssize_t len)
179 {
180     TAPState *s = DO_UPCAST(TAPState, nc, nc);
181     tap_read_poll(s, true);
182 }
183 
184 static void tap_send(void *opaque)
185 {
186     TAPState *s = opaque;
187     int size;
188     int packets = 0;
189 
190     while (true) {
191         uint8_t *buf = s->buf;
192 
193         size = tap_read_packet(s->fd, s->buf, sizeof(s->buf));
194         if (size <= 0) {
195             break;
196         }
197 
198         if (s->host_vnet_hdr_len && !s->using_vnet_hdr) {
199             buf  += s->host_vnet_hdr_len;
200             size -= s->host_vnet_hdr_len;
201         }
202 
203         size = qemu_send_packet_async(&s->nc, buf, size, tap_send_completed);
204         if (size == 0) {
205             tap_read_poll(s, false);
206             break;
207         } else if (size < 0) {
208             break;
209         }
210 
211         /*
212          * When the host keeps receiving more packets while tap_send() is
213          * running we can hog the QEMU global mutex.  Limit the number of
214          * packets that are processed per tap_send() callback to prevent
215          * stalling the guest.
216          */
217         packets++;
218         if (packets >= 50) {
219             break;
220         }
221     }
222 }
223 
224 static bool tap_has_ufo(NetClientState *nc)
225 {
226     TAPState *s = DO_UPCAST(TAPState, nc, nc);
227 
228     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
229 
230     return s->has_ufo;
231 }
232 
233 static bool tap_has_vnet_hdr(NetClientState *nc)
234 {
235     TAPState *s = DO_UPCAST(TAPState, nc, nc);
236 
237     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
238 
239     return !!s->host_vnet_hdr_len;
240 }
241 
242 static bool tap_has_vnet_hdr_len(NetClientState *nc, int len)
243 {
244     TAPState *s = DO_UPCAST(TAPState, nc, nc);
245 
246     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
247 
248     return !!tap_probe_vnet_hdr_len(s->fd, len);
249 }
250 
251 static void tap_set_vnet_hdr_len(NetClientState *nc, int len)
252 {
253     TAPState *s = DO_UPCAST(TAPState, nc, nc);
254 
255     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
256     assert(len == sizeof(struct virtio_net_hdr_mrg_rxbuf) ||
257            len == sizeof(struct virtio_net_hdr) ||
258            len == sizeof(struct virtio_net_hdr_v1_hash));
259 
260     tap_fd_set_vnet_hdr_len(s->fd, len);
261     s->host_vnet_hdr_len = len;
262 }
263 
264 static void tap_using_vnet_hdr(NetClientState *nc, bool using_vnet_hdr)
265 {
266     TAPState *s = DO_UPCAST(TAPState, nc, nc);
267 
268     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
269     assert(!!s->host_vnet_hdr_len == using_vnet_hdr);
270 
271     s->using_vnet_hdr = using_vnet_hdr;
272 }
273 
274 static int tap_set_vnet_le(NetClientState *nc, bool is_le)
275 {
276     TAPState *s = DO_UPCAST(TAPState, nc, nc);
277 
278     return tap_fd_set_vnet_le(s->fd, is_le);
279 }
280 
281 static int tap_set_vnet_be(NetClientState *nc, bool is_be)
282 {
283     TAPState *s = DO_UPCAST(TAPState, nc, nc);
284 
285     return tap_fd_set_vnet_be(s->fd, is_be);
286 }
287 
288 static void tap_set_offload(NetClientState *nc, int csum, int tso4,
289                      int tso6, int ecn, int ufo)
290 {
291     TAPState *s = DO_UPCAST(TAPState, nc, nc);
292     if (s->fd < 0) {
293         return;
294     }
295 
296     tap_fd_set_offload(s->fd, csum, tso4, tso6, ecn, ufo);
297 }
298 
299 static void tap_exit_notify(Notifier *notifier, void *data)
300 {
301     TAPState *s = container_of(notifier, TAPState, exit);
302     Error *err = NULL;
303 
304     if (s->down_script[0]) {
305         launch_script(s->down_script, s->down_script_arg, s->fd, &err);
306         if (err) {
307             error_report_err(err);
308         }
309     }
310 }
311 
312 static void tap_cleanup(NetClientState *nc)
313 {
314     TAPState *s = DO_UPCAST(TAPState, nc, nc);
315 
316     if (s->vhost_net) {
317         vhost_net_cleanup(s->vhost_net);
318         g_free(s->vhost_net);
319         s->vhost_net = NULL;
320     }
321 
322     qemu_purge_queued_packets(nc);
323 
324     tap_exit_notify(&s->exit, NULL);
325     qemu_remove_exit_notifier(&s->exit);
326 
327     tap_read_poll(s, false);
328     tap_write_poll(s, false);
329     close(s->fd);
330     s->fd = -1;
331 }
332 
333 static void tap_poll(NetClientState *nc, bool enable)
334 {
335     TAPState *s = DO_UPCAST(TAPState, nc, nc);
336     tap_read_poll(s, enable);
337     tap_write_poll(s, enable);
338 }
339 
340 int tap_get_fd(NetClientState *nc)
341 {
342     TAPState *s = DO_UPCAST(TAPState, nc, nc);
343     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
344     return s->fd;
345 }
346 
347 /* fd support */
348 
349 static NetClientInfo net_tap_info = {
350     .type = NET_CLIENT_DRIVER_TAP,
351     .size = sizeof(TAPState),
352     .receive = tap_receive,
353     .receive_raw = tap_receive_raw,
354     .receive_iov = tap_receive_iov,
355     .poll = tap_poll,
356     .cleanup = tap_cleanup,
357     .has_ufo = tap_has_ufo,
358     .has_vnet_hdr = tap_has_vnet_hdr,
359     .has_vnet_hdr_len = tap_has_vnet_hdr_len,
360     .using_vnet_hdr = tap_using_vnet_hdr,
361     .set_offload = tap_set_offload,
362     .set_vnet_hdr_len = tap_set_vnet_hdr_len,
363     .set_vnet_le = tap_set_vnet_le,
364     .set_vnet_be = tap_set_vnet_be,
365 };
366 
367 static TAPState *net_tap_fd_init(NetClientState *peer,
368                                  const char *model,
369                                  const char *name,
370                                  int fd,
371                                  int vnet_hdr)
372 {
373     NetClientState *nc;
374     TAPState *s;
375 
376     nc = qemu_new_net_client(&net_tap_info, peer, model, name);
377 
378     s = DO_UPCAST(TAPState, nc, nc);
379 
380     s->fd = fd;
381     s->host_vnet_hdr_len = vnet_hdr ? sizeof(struct virtio_net_hdr) : 0;
382     s->using_vnet_hdr = false;
383     s->has_ufo = tap_probe_has_ufo(s->fd);
384     s->enabled = true;
385     tap_set_offload(&s->nc, 0, 0, 0, 0, 0);
386     /*
387      * Make sure host header length is set correctly in tap:
388      * it might have been modified by another instance of qemu.
389      */
390     if (tap_probe_vnet_hdr_len(s->fd, s->host_vnet_hdr_len)) {
391         tap_fd_set_vnet_hdr_len(s->fd, s->host_vnet_hdr_len);
392     }
393     tap_read_poll(s, true);
394     s->vhost_net = NULL;
395 
396     s->exit.notify = tap_exit_notify;
397     qemu_add_exit_notifier(&s->exit);
398 
399     return s;
400 }
401 
402 static void launch_script(const char *setup_script, const char *ifname,
403                           int fd, Error **errp)
404 {
405     int pid, status;
406     char *args[3];
407     char **parg;
408 
409     /* try to launch network script */
410     pid = fork();
411     if (pid < 0) {
412         error_setg_errno(errp, errno, "could not launch network script %s",
413                          setup_script);
414         return;
415     }
416     if (pid == 0) {
417         int open_max = sysconf(_SC_OPEN_MAX), i;
418 
419         for (i = 3; i < open_max; i++) {
420             if (i != fd) {
421                 close(i);
422             }
423         }
424         parg = args;
425         *parg++ = (char *)setup_script;
426         *parg++ = (char *)ifname;
427         *parg = NULL;
428         execv(setup_script, args);
429         _exit(1);
430     } else {
431         while (waitpid(pid, &status, 0) != pid) {
432             /* loop */
433         }
434 
435         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
436             return;
437         }
438         error_setg(errp, "network script %s failed with status %d",
439                    setup_script, status);
440     }
441 }
442 
443 static int recv_fd(int c)
444 {
445     int fd;
446     uint8_t msgbuf[CMSG_SPACE(sizeof(fd))];
447     struct msghdr msg = {
448         .msg_control = msgbuf,
449         .msg_controllen = sizeof(msgbuf),
450     };
451     struct cmsghdr *cmsg;
452     struct iovec iov;
453     uint8_t req[1];
454     ssize_t len;
455 
456     cmsg = CMSG_FIRSTHDR(&msg);
457     cmsg->cmsg_level = SOL_SOCKET;
458     cmsg->cmsg_type = SCM_RIGHTS;
459     cmsg->cmsg_len = CMSG_LEN(sizeof(fd));
460     msg.msg_controllen = cmsg->cmsg_len;
461 
462     iov.iov_base = req;
463     iov.iov_len = sizeof(req);
464 
465     msg.msg_iov = &iov;
466     msg.msg_iovlen = 1;
467 
468     len = recvmsg(c, &msg, 0);
469     if (len > 0) {
470         memcpy(&fd, CMSG_DATA(cmsg), sizeof(fd));
471         return fd;
472     }
473 
474     return len;
475 }
476 
477 static int net_bridge_run_helper(const char *helper, const char *bridge,
478                                  Error **errp)
479 {
480     sigset_t oldmask, mask;
481     g_autofree char *default_helper = NULL;
482     int pid, status;
483     char *args[5];
484     char **parg;
485     int sv[2];
486 
487     sigemptyset(&mask);
488     sigaddset(&mask, SIGCHLD);
489     sigprocmask(SIG_BLOCK, &mask, &oldmask);
490 
491     if (!helper) {
492         helper = default_helper = get_relocated_path(DEFAULT_BRIDGE_HELPER);
493     }
494 
495     if (socketpair(PF_UNIX, SOCK_STREAM, 0, sv) == -1) {
496         error_setg_errno(errp, errno, "socketpair() failed");
497         return -1;
498     }
499 
500     /* try to launch bridge helper */
501     pid = fork();
502     if (pid < 0) {
503         error_setg_errno(errp, errno, "Can't fork bridge helper");
504         return -1;
505     }
506     if (pid == 0) {
507         int open_max = sysconf(_SC_OPEN_MAX), i;
508         char *fd_buf = NULL;
509         char *br_buf = NULL;
510         char *helper_cmd = NULL;
511 
512         for (i = 3; i < open_max; i++) {
513             if (i != sv[1]) {
514                 close(i);
515             }
516         }
517 
518         fd_buf = g_strdup_printf("%s%d", "--fd=", sv[1]);
519 
520         if (strrchr(helper, ' ') || strrchr(helper, '\t')) {
521             /* assume helper is a command */
522 
523             if (strstr(helper, "--br=") == NULL) {
524                 br_buf = g_strdup_printf("%s%s", "--br=", bridge);
525             }
526 
527             helper_cmd = g_strdup_printf("%s %s %s %s", helper,
528                             "--use-vnet", fd_buf, br_buf ? br_buf : "");
529 
530             parg = args;
531             *parg++ = (char *)"sh";
532             *parg++ = (char *)"-c";
533             *parg++ = helper_cmd;
534             *parg++ = NULL;
535 
536             execv("/bin/sh", args);
537             g_free(helper_cmd);
538         } else {
539             /* assume helper is just the executable path name */
540 
541             br_buf = g_strdup_printf("%s%s", "--br=", bridge);
542 
543             parg = args;
544             *parg++ = (char *)helper;
545             *parg++ = (char *)"--use-vnet";
546             *parg++ = fd_buf;
547             *parg++ = br_buf;
548             *parg++ = NULL;
549 
550             execv(helper, args);
551         }
552         g_free(fd_buf);
553         g_free(br_buf);
554         _exit(1);
555 
556     } else {
557         int fd;
558         int saved_errno;
559 
560         close(sv[1]);
561 
562         do {
563             fd = recv_fd(sv[0]);
564         } while (fd == -1 && errno == EINTR);
565         saved_errno = errno;
566 
567         close(sv[0]);
568 
569         while (waitpid(pid, &status, 0) != pid) {
570             /* loop */
571         }
572         sigprocmask(SIG_SETMASK, &oldmask, NULL);
573         if (fd < 0) {
574             error_setg_errno(errp, saved_errno,
575                              "failed to recv file descriptor");
576             return -1;
577         }
578         if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
579             error_setg(errp, "bridge helper failed");
580             return -1;
581         }
582         return fd;
583     }
584 }
585 
586 int net_init_bridge(const Netdev *netdev, const char *name,
587                     NetClientState *peer, Error **errp)
588 {
589     const NetdevBridgeOptions *bridge;
590     const char *helper, *br;
591     TAPState *s;
592     int fd, vnet_hdr;
593 
594     assert(netdev->type == NET_CLIENT_DRIVER_BRIDGE);
595     bridge = &netdev->u.bridge;
596     helper = bridge->has_helper ? bridge->helper : NULL;
597     br     = bridge->has_br     ? bridge->br     : DEFAULT_BRIDGE_INTERFACE;
598 
599     fd = net_bridge_run_helper(helper, br, errp);
600     if (fd == -1) {
601         return -1;
602     }
603 
604     qemu_set_nonblock(fd);
605     vnet_hdr = tap_probe_vnet_hdr(fd, errp);
606     if (vnet_hdr < 0) {
607         close(fd);
608         return -1;
609     }
610     s = net_tap_fd_init(peer, "bridge", name, fd, vnet_hdr);
611 
612     snprintf(s->nc.info_str, sizeof(s->nc.info_str), "helper=%s,br=%s", helper,
613              br);
614 
615     return 0;
616 }
617 
618 static int net_tap_init(const NetdevTapOptions *tap, int *vnet_hdr,
619                         const char *setup_script, char *ifname,
620                         size_t ifname_sz, int mq_required, Error **errp)
621 {
622     Error *err = NULL;
623     int fd, vnet_hdr_required;
624 
625     if (tap->has_vnet_hdr) {
626         *vnet_hdr = tap->vnet_hdr;
627         vnet_hdr_required = *vnet_hdr;
628     } else {
629         *vnet_hdr = 1;
630         vnet_hdr_required = 0;
631     }
632 
633     TFR(fd = tap_open(ifname, ifname_sz, vnet_hdr, vnet_hdr_required,
634                       mq_required, errp));
635     if (fd < 0) {
636         return -1;
637     }
638 
639     if (setup_script &&
640         setup_script[0] != '\0' &&
641         strcmp(setup_script, "no") != 0) {
642         launch_script(setup_script, ifname, fd, &err);
643         if (err) {
644             error_propagate(errp, err);
645             close(fd);
646             return -1;
647         }
648     }
649 
650     return fd;
651 }
652 
653 #define MAX_TAP_QUEUES 1024
654 
655 static void net_init_tap_one(const NetdevTapOptions *tap, NetClientState *peer,
656                              const char *model, const char *name,
657                              const char *ifname, const char *script,
658                              const char *downscript, const char *vhostfdname,
659                              int vnet_hdr, int fd, Error **errp)
660 {
661     Error *err = NULL;
662     TAPState *s = net_tap_fd_init(peer, model, name, fd, vnet_hdr);
663     int vhostfd;
664 
665     tap_set_sndbuf(s->fd, tap, &err);
666     if (err) {
667         error_propagate(errp, err);
668         return;
669     }
670 
671     if (tap->has_fd || tap->has_fds) {
672         snprintf(s->nc.info_str, sizeof(s->nc.info_str), "fd=%d", fd);
673     } else if (tap->has_helper) {
674         snprintf(s->nc.info_str, sizeof(s->nc.info_str), "helper=%s",
675                  tap->helper);
676     } else {
677         snprintf(s->nc.info_str, sizeof(s->nc.info_str),
678                  "ifname=%s,script=%s,downscript=%s", ifname, script,
679                  downscript);
680 
681         if (strcmp(downscript, "no") != 0) {
682             snprintf(s->down_script, sizeof(s->down_script), "%s", downscript);
683             snprintf(s->down_script_arg, sizeof(s->down_script_arg),
684                      "%s", ifname);
685         }
686     }
687 
688     if (tap->has_vhost ? tap->vhost :
689         vhostfdname || (tap->has_vhostforce && tap->vhostforce)) {
690         VhostNetOptions options;
691 
692         options.backend_type = VHOST_BACKEND_TYPE_KERNEL;
693         options.net_backend = &s->nc;
694         if (tap->has_poll_us) {
695             options.busyloop_timeout = tap->poll_us;
696         } else {
697             options.busyloop_timeout = 0;
698         }
699 
700         if (vhostfdname) {
701             int ret;
702 
703             vhostfd = monitor_fd_param(monitor_cur(), vhostfdname, &err);
704             if (vhostfd == -1) {
705                 if (tap->has_vhostforce && tap->vhostforce) {
706                     error_propagate(errp, err);
707                 } else {
708                     warn_report_err(err);
709                 }
710                 return;
711             }
712             ret = qemu_try_set_nonblock(vhostfd);
713             if (ret < 0) {
714                 error_setg_errno(errp, -ret, "%s: Can't use file descriptor %d",
715                                  name, fd);
716                 return;
717             }
718         } else {
719             vhostfd = open("/dev/vhost-net", O_RDWR);
720             if (vhostfd < 0) {
721                 if (tap->has_vhostforce && tap->vhostforce) {
722                     error_setg_errno(errp, errno,
723                                      "tap: open vhost char device failed");
724                 } else {
725                     warn_report("tap: open vhost char device failed: %s",
726                                 strerror(errno));
727                 }
728                 return;
729             }
730             qemu_set_nonblock(vhostfd);
731         }
732         options.opaque = (void *)(uintptr_t)vhostfd;
733 
734         s->vhost_net = vhost_net_init(&options);
735         if (!s->vhost_net) {
736             if (tap->has_vhostforce && tap->vhostforce) {
737                 error_setg(errp, VHOST_NET_INIT_FAILED);
738             } else {
739                 warn_report(VHOST_NET_INIT_FAILED);
740             }
741             return;
742         }
743     } else if (vhostfdname) {
744         error_setg(errp, "vhostfd(s)= is not valid without vhost");
745     }
746 }
747 
748 static int get_fds(char *str, char *fds[], int max)
749 {
750     char *ptr = str, *this;
751     size_t len = strlen(str);
752     int i = 0;
753 
754     while (i < max && ptr < str + len) {
755         this = strchr(ptr, ':');
756 
757         if (this == NULL) {
758             fds[i] = g_strdup(ptr);
759         } else {
760             fds[i] = g_strndup(ptr, this - ptr);
761         }
762 
763         i++;
764         if (this == NULL) {
765             break;
766         } else {
767             ptr = this + 1;
768         }
769     }
770 
771     return i;
772 }
773 
774 int net_init_tap(const Netdev *netdev, const char *name,
775                  NetClientState *peer, Error **errp)
776 {
777     const NetdevTapOptions *tap;
778     int fd, vnet_hdr = 0, i = 0, queues;
779     /* for the no-fd, no-helper case */
780     const char *script;
781     const char *downscript;
782     Error *err = NULL;
783     const char *vhostfdname;
784     char ifname[128];
785     int ret = 0;
786 
787     assert(netdev->type == NET_CLIENT_DRIVER_TAP);
788     tap = &netdev->u.tap;
789     queues = tap->has_queues ? tap->queues : 1;
790     vhostfdname = tap->has_vhostfd ? tap->vhostfd : NULL;
791     script = tap->has_script ? tap->script : NULL;
792     downscript = tap->has_downscript ? tap->downscript : NULL;
793 
794     /* QEMU hubs do not support multiqueue tap, in this case peer is set.
795      * For -netdev, peer is always NULL. */
796     if (peer && (tap->has_queues || tap->has_fds || tap->has_vhostfds)) {
797         error_setg(errp, "Multiqueue tap cannot be used with hubs");
798         return -1;
799     }
800 
801     if (tap->has_fd) {
802         if (tap->has_ifname || tap->has_script || tap->has_downscript ||
803             tap->has_vnet_hdr || tap->has_helper || tap->has_queues ||
804             tap->has_fds || tap->has_vhostfds) {
805             error_setg(errp, "ifname=, script=, downscript=, vnet_hdr=, "
806                        "helper=, queues=, fds=, and vhostfds= "
807                        "are invalid with fd=");
808             return -1;
809         }
810 
811         fd = monitor_fd_param(monitor_cur(), tap->fd, errp);
812         if (fd == -1) {
813             return -1;
814         }
815 
816         ret = qemu_try_set_nonblock(fd);
817         if (ret < 0) {
818             error_setg_errno(errp, -ret, "%s: Can't use file descriptor %d",
819                              name, fd);
820             close(fd);
821             return -1;
822         }
823 
824         vnet_hdr = tap_probe_vnet_hdr(fd, errp);
825         if (vnet_hdr < 0) {
826             close(fd);
827             return -1;
828         }
829 
830         net_init_tap_one(tap, peer, "tap", name, NULL,
831                          script, downscript,
832                          vhostfdname, vnet_hdr, fd, &err);
833         if (err) {
834             error_propagate(errp, err);
835             close(fd);
836             return -1;
837         }
838     } else if (tap->has_fds) {
839         char **fds;
840         char **vhost_fds;
841         int nfds = 0, nvhosts = 0;
842 
843         if (tap->has_ifname || tap->has_script || tap->has_downscript ||
844             tap->has_vnet_hdr || tap->has_helper || tap->has_queues ||
845             tap->has_vhostfd) {
846             error_setg(errp, "ifname=, script=, downscript=, vnet_hdr=, "
847                        "helper=, queues=, and vhostfd= "
848                        "are invalid with fds=");
849             return -1;
850         }
851 
852         fds = g_new0(char *, MAX_TAP_QUEUES);
853         vhost_fds = g_new0(char *, MAX_TAP_QUEUES);
854 
855         nfds = get_fds(tap->fds, fds, MAX_TAP_QUEUES);
856         if (tap->has_vhostfds) {
857             nvhosts = get_fds(tap->vhostfds, vhost_fds, MAX_TAP_QUEUES);
858             if (nfds != nvhosts) {
859                 error_setg(errp, "The number of fds passed does not match "
860                            "the number of vhostfds passed");
861                 ret = -1;
862                 goto free_fail;
863             }
864         }
865 
866         for (i = 0; i < nfds; i++) {
867             fd = monitor_fd_param(monitor_cur(), fds[i], errp);
868             if (fd == -1) {
869                 ret = -1;
870                 goto free_fail;
871             }
872 
873             ret = qemu_try_set_nonblock(fd);
874             if (ret < 0) {
875                 error_setg_errno(errp, -ret, "%s: Can't use file descriptor %d",
876                                  name, fd);
877                 goto free_fail;
878             }
879 
880             if (i == 0) {
881                 vnet_hdr = tap_probe_vnet_hdr(fd, errp);
882                 if (vnet_hdr < 0) {
883                     goto free_fail;
884                 }
885             } else if (vnet_hdr != tap_probe_vnet_hdr(fd, NULL)) {
886                 error_setg(errp,
887                            "vnet_hdr not consistent across given tap fds");
888                 ret = -1;
889                 goto free_fail;
890             }
891 
892             net_init_tap_one(tap, peer, "tap", name, ifname,
893                              script, downscript,
894                              tap->has_vhostfds ? vhost_fds[i] : NULL,
895                              vnet_hdr, fd, &err);
896             if (err) {
897                 error_propagate(errp, err);
898                 ret = -1;
899                 goto free_fail;
900             }
901         }
902 
903 free_fail:
904         for (i = 0; i < nvhosts; i++) {
905             g_free(vhost_fds[i]);
906         }
907         for (i = 0; i < nfds; i++) {
908             g_free(fds[i]);
909         }
910         g_free(fds);
911         g_free(vhost_fds);
912         return ret;
913     } else if (tap->has_helper) {
914         if (tap->has_ifname || tap->has_script || tap->has_downscript ||
915             tap->has_vnet_hdr || tap->has_queues || tap->has_vhostfds) {
916             error_setg(errp, "ifname=, script=, downscript=, vnet_hdr=, "
917                        "queues=, and vhostfds= are invalid with helper=");
918             return -1;
919         }
920 
921         fd = net_bridge_run_helper(tap->helper,
922                                    tap->has_br ?
923                                    tap->br : DEFAULT_BRIDGE_INTERFACE,
924                                    errp);
925         if (fd == -1) {
926             return -1;
927         }
928 
929         qemu_set_nonblock(fd);
930         vnet_hdr = tap_probe_vnet_hdr(fd, errp);
931         if (vnet_hdr < 0) {
932             close(fd);
933             return -1;
934         }
935 
936         net_init_tap_one(tap, peer, "bridge", name, ifname,
937                          script, downscript, vhostfdname,
938                          vnet_hdr, fd, &err);
939         if (err) {
940             error_propagate(errp, err);
941             close(fd);
942             return -1;
943         }
944     } else {
945         g_autofree char *default_script = NULL;
946         g_autofree char *default_downscript = NULL;
947         if (tap->has_vhostfds) {
948             error_setg(errp, "vhostfds= is invalid if fds= wasn't specified");
949             return -1;
950         }
951 
952         if (!script) {
953             script = default_script = get_relocated_path(DEFAULT_NETWORK_SCRIPT);
954         }
955         if (!downscript) {
956             downscript = default_downscript =
957                                  get_relocated_path(DEFAULT_NETWORK_DOWN_SCRIPT);
958         }
959 
960         if (tap->has_ifname) {
961             pstrcpy(ifname, sizeof ifname, tap->ifname);
962         } else {
963             ifname[0] = '\0';
964         }
965 
966         for (i = 0; i < queues; i++) {
967             fd = net_tap_init(tap, &vnet_hdr, i >= 1 ? "no" : script,
968                               ifname, sizeof ifname, queues > 1, errp);
969             if (fd == -1) {
970                 return -1;
971             }
972 
973             if (queues > 1 && i == 0 && !tap->has_ifname) {
974                 if (tap_fd_get_ifname(fd, ifname)) {
975                     error_setg(errp, "Fail to get ifname");
976                     close(fd);
977                     return -1;
978                 }
979             }
980 
981             net_init_tap_one(tap, peer, "tap", name, ifname,
982                              i >= 1 ? "no" : script,
983                              i >= 1 ? "no" : downscript,
984                              vhostfdname, vnet_hdr, fd, &err);
985             if (err) {
986                 error_propagate(errp, err);
987                 close(fd);
988                 return -1;
989             }
990         }
991     }
992 
993     return 0;
994 }
995 
996 VHostNetState *tap_get_vhost_net(NetClientState *nc)
997 {
998     TAPState *s = DO_UPCAST(TAPState, nc, nc);
999     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
1000     return s->vhost_net;
1001 }
1002 
1003 int tap_enable(NetClientState *nc)
1004 {
1005     TAPState *s = DO_UPCAST(TAPState, nc, nc);
1006     int ret;
1007 
1008     if (s->enabled) {
1009         return 0;
1010     } else {
1011         ret = tap_fd_enable(s->fd);
1012         if (ret == 0) {
1013             s->enabled = true;
1014             tap_update_fd_handler(s);
1015         }
1016         return ret;
1017     }
1018 }
1019 
1020 int tap_disable(NetClientState *nc)
1021 {
1022     TAPState *s = DO_UPCAST(TAPState, nc, nc);
1023     int ret;
1024 
1025     if (s->enabled == 0) {
1026         return 0;
1027     } else {
1028         ret = tap_fd_disable(s->fd);
1029         if (ret == 0) {
1030             qemu_purge_queued_packets(nc);
1031             s->enabled = false;
1032             tap_update_fd_handler(s);
1033         }
1034         return ret;
1035     }
1036 }
1037