2010-04-01 21:57:12 +04:00
|
|
|
/*
|
2011-07-20 12:05:30 +04:00
|
|
|
* Generic Balloon handlers and management
|
2010-04-01 21:57:12 +04:00
|
|
|
*
|
|
|
|
* Copyright (c) 2003-2008 Fabrice Bellard
|
2011-07-20 12:05:30 +04:00
|
|
|
* Copyright (C) 2011 Red Hat, Inc.
|
|
|
|
* Copyright (C) 2011 Amit Shah <amit.shah@redhat.com>
|
2010-04-01 21:57:12 +04:00
|
|
|
*
|
|
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
|
|
* in the Software without restriction, including without limitation the rights
|
|
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
|
|
* furnished to do so, subject to the following conditions:
|
|
|
|
*
|
|
|
|
* The above copyright notice and this permission notice shall be included in
|
|
|
|
* all copies or substantial portions of the Software.
|
|
|
|
*
|
|
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
|
|
|
|
* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
|
|
* THE SOFTWARE.
|
|
|
|
*/
|
|
|
|
|
2016-01-29 20:50:05 +03:00
|
|
|
#include "qemu/osdep.h"
|
2015-03-17 20:16:21 +03:00
|
|
|
#include "qemu-common.h"
|
2012-12-17 21:19:49 +04:00
|
|
|
#include "exec/cpu-common.h"
|
2012-12-17 21:20:04 +04:00
|
|
|
#include "sysemu/kvm.h"
|
|
|
|
#include "sysemu/balloon.h"
|
2017-01-25 19:14:15 +03:00
|
|
|
#include "trace-root.h"
|
2018-02-01 14:18:31 +03:00
|
|
|
#include "qapi/error.h"
|
2018-02-27 02:13:27 +03:00
|
|
|
#include "qapi/qapi-commands-misc.h"
|
2015-03-17 19:22:46 +03:00
|
|
|
#include "qapi/qmp/qerror.h"
|
2010-04-01 21:57:12 +04:00
|
|
|
|
2011-07-20 11:38:46 +04:00
|
|
|
static QEMUBalloonEvent *balloon_event_fn;
|
balloon: Separate out stat and balloon handling
Passing on '0' as ballooning target to indicate retrieval of stats is
bad API. It also makes 'balloon 0' in the monitor cause a segfault.
Have two different functions handle the different functionality instead.
Detailed explanation from Markus's review:
1. do_info_balloon() is an info_async() method. It receives a callback
with argument, to be called exactly once (callback frees the
argument). It passes the callback via qemu_balloon_status() and
indirectly through qemu_balloon_event to virtio_balloon_to_target().
virtio_balloon_to_target() executes its balloon stats half. It
stores the callback in the device state.
If it can't send a stats request, it resets stats and calls the
callback right away.
Else, it sends a stats request. The device model runs the callback
when it receives the answer.
Works.
2. do_balloon() is a cmd_async() method. It receives a callback with
argument, to be called when the command completes. do_balloon()
calls it right before it succeeds. Odd, but should work.
Nevertheless, it passes the callback on via qemu_ballon() and
indirectly through qemu_balloon_event to virtio_balloon_to_target().
a. If the argument is non-zero, virtio_balloon_to_target() executes
its balloon half, which doesn't use the callback in any way.
Odd, but works.
b. If the argument is zero, virtio_balloon_to_target() executes its
balloon stats half, just like in 1. It either calls the callback
right away, or arranges for it to be called later.
Thus, the callback runs twice: use after free and double free.
Test case: start with -S -device virtio-balloon, execute "balloon 0" in
human monitor. Runs the callback first from virtio_balloon_to_target(),
then again from do_balloon().
Reported-by: Mike Cao <bcao@redhat.com>
Signed-off-by: Amit Shah <amit.shah@redhat.com>
Reviewed-by: Markus Armbruster <armbru@redhat.com>
2011-07-20 12:00:56 +04:00
|
|
|
static QEMUBalloonStatus *balloon_stat_fn;
|
2011-07-20 11:38:46 +04:00
|
|
|
static void *balloon_opaque;
|
2015-11-05 21:11:23 +03:00
|
|
|
static bool balloon_inhibited;
|
|
|
|
|
|
|
|
bool qemu_balloon_is_inhibited(void)
|
|
|
|
{
|
|
|
|
return balloon_inhibited;
|
|
|
|
}
|
|
|
|
|
|
|
|
void qemu_balloon_inhibit(bool state)
|
|
|
|
{
|
|
|
|
balloon_inhibited = state;
|
|
|
|
}
|
2010-04-01 21:57:12 +04:00
|
|
|
|
2015-02-11 01:40:30 +03:00
|
|
|
static bool have_balloon(Error **errp)
|
2015-01-13 19:44:14 +03:00
|
|
|
{
|
|
|
|
if (kvm_enabled() && !kvm_has_sync_mmu()) {
|
2015-01-13 19:50:23 +03:00
|
|
|
error_set(errp, ERROR_CLASS_KVM_MISSING_CAP,
|
|
|
|
"Using KVM without synchronous MMU, balloon unavailable");
|
2015-01-13 19:44:14 +03:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
if (!balloon_event_fn) {
|
2015-01-13 19:50:23 +03:00
|
|
|
error_set(errp, ERROR_CLASS_DEVICE_NOT_ACTIVE,
|
|
|
|
"No balloon device has been activated");
|
2015-01-13 19:44:14 +03:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
2011-07-27 10:58:19 +04:00
|
|
|
int qemu_add_balloon_handler(QEMUBalloonEvent *event_func,
|
|
|
|
QEMUBalloonStatus *stat_func, void *opaque)
|
2010-04-01 21:57:12 +04:00
|
|
|
{
|
2011-07-27 10:58:19 +04:00
|
|
|
if (balloon_event_fn || balloon_stat_fn || balloon_opaque) {
|
|
|
|
/* We're already registered one balloon handler. How many can
|
|
|
|
* a guest really have?
|
|
|
|
*/
|
|
|
|
return -1;
|
|
|
|
}
|
balloon: Separate out stat and balloon handling
Passing on '0' as ballooning target to indicate retrieval of stats is
bad API. It also makes 'balloon 0' in the monitor cause a segfault.
Have two different functions handle the different functionality instead.
Detailed explanation from Markus's review:
1. do_info_balloon() is an info_async() method. It receives a callback
with argument, to be called exactly once (callback frees the
argument). It passes the callback via qemu_balloon_status() and
indirectly through qemu_balloon_event to virtio_balloon_to_target().
virtio_balloon_to_target() executes its balloon stats half. It
stores the callback in the device state.
If it can't send a stats request, it resets stats and calls the
callback right away.
Else, it sends a stats request. The device model runs the callback
when it receives the answer.
Works.
2. do_balloon() is a cmd_async() method. It receives a callback with
argument, to be called when the command completes. do_balloon()
calls it right before it succeeds. Odd, but should work.
Nevertheless, it passes the callback on via qemu_ballon() and
indirectly through qemu_balloon_event to virtio_balloon_to_target().
a. If the argument is non-zero, virtio_balloon_to_target() executes
its balloon half, which doesn't use the callback in any way.
Odd, but works.
b. If the argument is zero, virtio_balloon_to_target() executes its
balloon stats half, just like in 1. It either calls the callback
right away, or arranges for it to be called later.
Thus, the callback runs twice: use after free and double free.
Test case: start with -S -device virtio-balloon, execute "balloon 0" in
human monitor. Runs the callback first from virtio_balloon_to_target(),
then again from do_balloon().
Reported-by: Mike Cao <bcao@redhat.com>
Signed-off-by: Amit Shah <amit.shah@redhat.com>
Reviewed-by: Markus Armbruster <armbru@redhat.com>
2011-07-20 12:00:56 +04:00
|
|
|
balloon_event_fn = event_func;
|
|
|
|
balloon_stat_fn = stat_func;
|
2011-07-20 11:38:46 +04:00
|
|
|
balloon_opaque = opaque;
|
2011-07-27 10:58:19 +04:00
|
|
|
return 0;
|
2010-04-01 21:57:12 +04:00
|
|
|
}
|
|
|
|
|
2011-09-09 13:00:39 +04:00
|
|
|
void qemu_remove_balloon_handler(void *opaque)
|
|
|
|
{
|
|
|
|
if (balloon_opaque != opaque) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
balloon_event_fn = NULL;
|
|
|
|
balloon_stat_fn = NULL;
|
|
|
|
balloon_opaque = NULL;
|
|
|
|
}
|
|
|
|
|
2011-10-21 17:41:37 +04:00
|
|
|
BalloonInfo *qmp_query_balloon(Error **errp)
|
2010-04-01 21:57:12 +04:00
|
|
|
{
|
2011-10-21 17:41:37 +04:00
|
|
|
BalloonInfo *info;
|
2010-04-01 21:57:12 +04:00
|
|
|
|
2015-02-11 01:40:30 +03:00
|
|
|
if (!have_balloon(errp)) {
|
2011-10-21 17:41:37 +04:00
|
|
|
return NULL;
|
2010-04-01 21:57:12 +04:00
|
|
|
}
|
|
|
|
|
2015-01-13 19:43:25 +03:00
|
|
|
info = g_malloc0(sizeof(*info));
|
|
|
|
balloon_stat_fn(balloon_opaque, info);
|
2011-10-21 17:41:37 +04:00
|
|
|
return info;
|
2010-04-01 21:57:12 +04:00
|
|
|
}
|
|
|
|
|
2015-01-13 19:43:25 +03:00
|
|
|
void qmp_balloon(int64_t target, Error **errp)
|
2010-04-01 21:57:12 +04:00
|
|
|
{
|
2015-02-11 01:40:30 +03:00
|
|
|
if (!have_balloon(errp)) {
|
2011-11-25 20:38:09 +04:00
|
|
|
return;
|
2010-04-01 21:57:12 +04:00
|
|
|
}
|
|
|
|
|
2015-01-13 19:43:25 +03:00
|
|
|
if (target <= 0) {
|
2015-03-17 13:54:50 +03:00
|
|
|
error_setg(errp, QERR_INVALID_PARAMETER_VALUE, "target", "a size");
|
2011-11-25 20:38:09 +04:00
|
|
|
return;
|
2011-07-27 15:20:54 +04:00
|
|
|
}
|
2015-01-13 19:43:25 +03:00
|
|
|
|
|
|
|
trace_balloon_event(balloon_opaque, target);
|
|
|
|
balloon_event_fn(balloon_opaque, target);
|
2010-04-01 21:57:12 +04:00
|
|
|
}
|