301 Commits

Author SHA1 Message Date
Jiabo Feng
b239b0b2d5 QEMU update to version 6.2.0-78(master)
- sw_64: Added sw64 architecture related updates
- virtio-crypto: verify src&dst buffer length for sym request
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present
- qga: Fix suspend on Linux guests without systemd
- tests: vhost-user-test: release mutex on protocol violation
- qapi: support updating expected test output via make
- block: Fix misleading hexadecimal format
- block/rbd: fix write zeroes with growing images
- block/nbd.c: Fixed IO request coroutine not being wakeup when kill NBD server
- block/nfs: Fix 32-bit Windows build
- qapi/qdev: Tidy up device_add documentation
- hw/xen/xen_pt: fix uninitialized variable
- migration/ram: Fix error handling in ram_write_tracking_start()
- docs/about/build-platforms: Refine the distro support policy
- xen-block: Avoid leaks on new error path
- QGA VSS: Add wrapper to send log to debugger and stderr
- chardev/char-socket: set s->listener = NULL in char_socket_finalize
- qapi/block: Tidy up block-latency-histogram-set documentation
- disas/riscv Fix ctzw disassemble
- vfio: Fix vfio_get_dev_region() trace event
- migration/ram: Fix populate_read_range()
- Check and report for incomplete 'global' option  format

Signed-off-by: Jiabo Feng <fengjiabo1@huawei.com>
2023-08-16 08:57:07 +08:00
Jiabo Feng
3474c19ee4 QEMU update to version 6.2.0-77(master)
- test-vmstate: fix bad GTree usage, use-after-free

Signed-off-by: Jiabo Feng <fengjiabo1@huawei.com>
2023-08-07 16:54:24 +08:00
Jiabo Feng
c4dab45526 QEMU update to version 6.2.0-76(master)
- qga/win32: Use rundll for VSS installation
- qga/win32: Remove change action from MSI installer
- ide: Increment BB in-flight counter for TRIM BH
- hw/pci-bridge/pxb: Fix missing swizzle
- host-vdpa: make notifiers _init()/_uninit() symmetric
- hw/virtio: vdpa: Fix leak of host-notifier memory-region
- accel/tcg/cpu-exec: Fix precise single-stepping after interrupt
- Allow setting up to 8 bytes with the generic loader
- hw/net/virtio-net: make some VirtIONet const
- accel/tcg: Optimize jump cache flush during tlb range flush
- 9pfs: prevent opening special files (CVE-2023-2861)
- tcg: Reduce tcg_assert_listed_vecop() scope
- gitlab: Disable plugins for cross-i386-tci
- vfio/pci: Fix a segfault in vfio_realize
- block/iscsi: fix double-free on BUSY or similar statuses
- tests/tcg: fix unused variable in linux-test
- hw/net/vmxnet3: allow VMXNET3_MAX_MTU itself as a value
- qga/vss-win32: fix warning for clang++-15
- vnc: avoid underflow when accessing user-provided address
- block/monitor: Fix crash when executing HMP commit
- virtio-gpu: add a FIXME for virtio_gpu_load()
- hw/ppc/Kconfig: MAC_NEWWORLD should always select USB_OHCI_PCI
- migration: report compress thread pid to libvirt

Signed-off-by: Jiabo Feng <fengjiabo1@huawei.com>
2023-08-07 16:46:33 +08:00
Jiabo Feng
8040b814b8 QEMU update to version 6.2.0-75(master)
- Add lbt support for kvm.
    - Fix smp.cores value and Fix divide 0 error
    - hw/nvme: Change alignment in dma functions for nvme_blk_*
    - virtio: fix reachable assertion due to stale value of cached region size
    - hw/nvme: fix missing DNR on compare failure

    Signed-off-by: Jiabo Feng <fengjiabo1@huawei.com>
2023-07-05 09:07:37 +08:00
liuxiangdong
522d65d171 spec: delete repetitive man8/qemu-ga.8* from qemu-guest-agent package
Files man8/qemu-ga.8* are packaged in qemu-help package.

Delete it from qemu-guest-agent package.

Signed-off-by: liuxiangdong <liuxiangdong5@huawei.com>
2023-05-13 09:54:43 +08:00
liuxiangdong
0470850380 spec: delete useless core3-hmcode/core3-reset/uefi-bios-sw
"%exclude" only means not packaging these three files but they
are still existing in buildroot directory. "ERROR: No build ID
not found in XXXXX" will be reported when generating debug package.

Delete them directly in buildroot directory.

Signed-off-by: liuxiangdong <liuxiangdong5@huawei.com>
2023-05-13 05:12:16 +08:00
Fei Xu
2ddec1532b QEMU update to version 6.2.0-72(master)
- migration/xbzrle: fix out-of-bounds write with axv512
- migration/xbzrle: use ctz64 to avoid undefined result
- Update bench-code for addressing CI problem
- AVX512 support for xbzrle_encode_buffer
- configure, meson: move AVX tests to meson
- target/i386: KVM: allow fast string operations if host supports them
- target/i386: add FSRM to TCG
- hw/nvme: fix memory leak in nvme_dsm
- aio-posix: fix race between epoll upgrade and aio_set_fd_handler()
- target/i386: Add SGX aex-notify and EDECCSSA support
- hw/usb/imx: Fix out of bounds access in imx_usbphy_read()
- target/i386: Set maximum APIC ID to KVM prior to vCPU creation
- target/i386: Fix sanity check on max APIC ID / X2APIC enablement

Signed-off-by: Fei Xu <xufei30@huawei.com>
2023-05-18 14:19:42 +08:00
Fei Xu
f9d45693eb QEMU update to version 6.2.0-71(master)
-vhost-user-blk: fix the resize crash
 -plugins: make qemu_plugin_user_exit's locking order consistent with fork_start's
 -linux-user: fix strace build w/out munlockall
 -ui: fix crash on serial reset, during init
 -qga/win/vss: requester_freeze changes
 -migration: fix populate_vfio_info
 -block/rbd: workaround for ceph issue #53784
 -target/i386: add FZRM, FSRS, FSRC
 -i386: Add new CPU model SapphireRapids
 -core/cpu-common: Fix the wrong '#ifdef __aarch64__'

Signed-off-by: Fei Xu <xufei30@huawei.com>
2023-04-22 21:43:51 +08:00
lixianglai
f1d5d42d62 Add spice buildrequires.
Add spice buildrequires for loongarch.

Signed-off-by: lixianglai <lixianglai@loongson.cn>
2023-03-30 05:22:13 -04:00
lixianglai
6b685cefd0 fixup compile on loongarch64 machine.
Add function kvm_arch_accel_class_init definition on loongarch64 machine.

Signed-off-by: lixianglai <lixianglai@loongson.cn>
2023-03-29 03:37:45 -04:00
Fei Xu
d29b61f5c2 QEMU update to version 6.2.0-68(master)
-tests: modify qemu.spec to add (riscv virt) machine mapping to testenv

Signed-off-by: Fei Xu <xufei30@huawei.com>
2023-03-29 09:50:44 +08:00
chenhuiying
cb59798846 QEMU update to viersion 6.2.0-67(master)
-bugfix: fix qmp command migrate-set-parameters
-some bugfixs about ARM hot-plugged CPUs
-hw/core/machine:Fix the missing consideration of cluster-id
-test/tcg:Fix target-specific Makefile variable path for user-mode
-tests:add (riscv virt) machine mapping to testenv
-Make a litte improvement in curl and hw/riscv
-qemu support for loongarch
-hw/pvrdma: Protect against buggy or malious guest driver
-hw/audio/intel-hda:fix stream reset
-dsoundaudio:fix crackling audio recordings
-add notify-vm-exit support for i386
-blok-backend: prevent dangling BDS pointers across aio_poll()
-net:Fix uninitialized data usage
-net/eth:Don't consider ESP to be an IPv6 option header
-hw/net/vmxnet3:Log guest-triggerable errors using LOG_GUEST_ERROR

Signed-off-by: FeiXu <xufei30@huawei.com>
2023-03-29 07:29:51 +08:00
rminmin
a3130d6086 spec: Add multiboot_dma.bin
Add multiboot_dma.bin

Signed-off-by: rminmin <renmm6@chinaunicom.cn>
2023-03-22 16:23:23 +08:00
yezengruan
30db78c75b QEMU update to version 6.2.0-65
- linux-user: Add strace output for timer_settime64() syscall
- fix qemu-core when vhost-user-net config with server mode

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-12-20 11:23:00 +08:00
yezengruan
61b834b8b4 QEMU update to version 6.2.0-64
- target/arm: Fix kvm probe of ID_AA64ZFR0
- migration: report migration/multiFd related thread pid to libvirt
- vhost_net: keep acked_feature only for NET_CLIENT_DRIVER_VHOST_USER

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 2d46526fa69b16614ac095e5d2b11ae4e06649cf)
2022-12-14 16:26:53 +08:00
Qiang Wei
c0643ca1a3 Use bcond_without to control conditon build
It is more clear about conditonal build.

Signed-off-by: Qiang Wei <qiang.wei@suse.com>
(cherry picked from commit c00bd7dc70f700b90db24c324d2e2333282130b9)
2022-12-13 11:32:41 +08:00
Qiang Wei
d2867e8c56 Make Ceph rbd support optional
Signed-off-by: Qiang Wei <qiang.wei@suse.com>
(cherry picked from commit 8c06fb9dd9a12341f29aad3e7296a6c32587067a)
2022-12-09 17:39:34 +08:00
yezengruan
417caf54a7 BuildRequires add make
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 173dd41c89697ee2ea4d399cc24c31fccff8d783)
2022-12-07 15:47:19 +08:00
yezengruan
86bdfa9211 QEMU update to verison 6.2.0-60
- sync some bugfix patches from upstream
- fix the virtio features negotiation flaw
- fix CVE-2022-4144

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-12-06 12:44:38 +08:00
yezengruan
dec64939c6 Qemu update to version 6.2.0-59
- arm/virt: Fix vcpu hotplug idx_from_topo_ids
- Revert patches related to the vSVA
- sync some bugfix patches from upstream
- add generic vDPA device support

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit b99dbfd9847104300672fb4f559f1c2abba8aa33)
2022-12-06 09:18:10 +08:00
yezengruan
5f67a2826a update qemu download url
The download url is dead and needs to be updated.

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 60ac7eb978859584cfa877bade4168a7ae60968c)
2022-11-23 17:59:23 +08:00
weishaokun
f6a40d3606 Support io-uring by adding --enable-io-uring compilation option 2022-11-14 15:16:04 +08:00
yezengruan
c39a6c8586 build: make check with -j
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-11-08 20:12:16 +08:00
yuelg
62f5717c6f by default enable rbd support
Support rbd by adding --enable-rbd compilation option

Signed-off-by: yuelg <yuelg@chinaunicom.cn>
2022-11-07 12:04:57 +08:00
yezengruan
e9095b76ae Qemu update to version 6.2.0-55
- support dirty restraint on vCPU
- support SPR AMX in Qemu
- fix compilation errors of sw64

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-11-04 09:59:34 +08:00
fu-shanqing
f68cfde3b0 add '--enable-slirp' compilation options 2022-10-24 10:10:07 +08:00
bobychen
40d7d3a15d ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (CVE-2022-3165)
Signed-off-by: yezengruan <yezengruan@huawei.com>
Signed-off-by: bobychen <boby.chen@huawei.com>
2022-10-21 09:52:59 +08:00
wanborj
d72c1d27b2 Backport upstream bugfix
Signed-off-by: wanborj <wanbo13@huawei.com>
2022-09-30 17:51:42 +08:00
zhangxinhao
a2786109b9 Backport upstream bugfix
Signed-off-by: zhangxinhao <zhangxinhao1@huawei.com>
2022-09-30 16:47:15 +08:00
Zhang Bo
9e73b27bd8 spec: fix wrong patch name
net-tulip-Restrict-DMA-engine-to-memories.patch was named with CVE-XX
surfixes, the spec remains that old name, change the name there.

Signed-off-by: Zhang Bo <oscar.zhangbo@huawei.com>
2022-09-30 15:45:10 +08:00
Zhang Bo
69b69596a2 net: tulip: Restrict DMA engine to memories(CVE-2022-2962)
fix CVE-2022-2962.
The DMA engine is started by I/O access and then itself accesses the
I/O registers, triggering a teentrancy bug.
Fix this bug by restricting the DMA engine to memories regions.

Signed-off-by: Zhang Bo <oscar.zhangbo@huawei.com>
2022-09-30 14:28:43 +08:00
yezengruan
9e16c84fbf hw/usb/hcd-xhci: Fix unbounded loop in xhci_ring_chain_length() (CVE-2020-14394)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-09-03 09:17:16 +08:00
yezengruan
9b71f5aa79 fix CVE-2022-0216 (openeuler !332)
hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
tests/qtest: Add fuzz-lsi53c895a-test
scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-08-30 19:33:44 +08:00
Zhang Bo
6e9beed308 backport nbd related patches to avoid vm crash during migration
block-nbd was refacted during release 6.2.0, but we didn't induced
all the needed patches within the 6.2.0 baseline, which leads to
vm crash during migration.
the reasons are as below:
when iothread is configured, the coroutines should get back to
the exact iothread that was out of. But within the 6.2.0 baseline,
patches were missing, nbd related coroutine didn't have its related
aio_context. It in fact get to the mainline aio_context, the mistaken
context leads to vm crash.
2022-08-29 17:09:05 +08:00
yezengruan
65770dadad Qemu update to version 10:6.2.0-46
vhost-user: remove VirtQ notifier restore
vhost-user: fix VirtQ notifier cleanup
enable vDPA build params
Provides qemu-kvm for upgrade

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit a6c5c96c0b65904db08e803692a01447553a725a)
2022-08-25 17:15:08 +08:00
yezengruan
bb777b4dce Qemu update to version 6.2.0-45
numa: Enable numa for SGX EPC sections
target/ppc: enhance error handling in kvmppc_read_int*
fix pointer double free in func qemu_savevm_state_complete_precopy_non_iterable

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-08-11 19:19:20 +08:00
yezengruan
9d2610934b add Requires libgcc
(cherry picked from commit 56beae0617d658b8100fabcf91bed5568e4a8b99)
2022-07-26 17:00:15 +08:00
cenhuilin
5054179fc5 fix CVE-2022-35414 2022-07-19 10:02:23 +00:00
l00500761
8b199ba599 Fix CVE-2022-0358 and CVE-2021-4158 2022-07-12 15:41:12 +08:00
yezengruan
36eaeb0b27 hw/nvme: fix CVE-2021-3929 (openeuler !313)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-06-22 10:38:05 +08:00
saarloos
1bf06bf4ad Add riscv rpm include qemu-system-riscv32 and qemu-system-riscv64 2022-06-20 20:28:47 +08:00
yezengruan
cbe2a01c81 fix CVE-2021-3611
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-06-09 17:10:50 +08:00
yezengruan
ba8cdf7ac0 fix CVE-2021-3507 and fix -acpitable regression (openeuler !300!301)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-05-31 09:17:56 +08:00
saarloos
666acae1c3 add qemu-system-x86_64 qemu-system-arm qemu-system-aarch64 rpm 2022-05-30 14:39:26 +08:00
Jun Yang
d9686f6f3e qemu: remove unnecessary dependency of kernel package
Signed-off-by: Jun Yang <jun.yang@suse.com>
2022-05-26 19:20:58 +08:00
yezengruan
b39643dc6e fix CVE-2021-3750 (openeuler !293)
hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
softmmu/physmem: Simplify flatview_write and address_space_access_valid
softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR
2022-05-21 14:45:11 +08:00
yezengruan
dec7c9d2cf fix CVE-2021-4207 and CVE-2021-4206 (openeuler !287)
display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)
2022-05-10 21:27:52 +08:00
yezengruan
af63dcf8b2 update changelog
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-27 20:17:55 +08:00
yezengruan
ce1ce575d6 vfio/pci: Ascend710 change to bar2 quirk
Change Ascend710's quirk regions to bar2 for internal causes.
And support Ascend710 2P format now.

Signed-off-by: Wu Binfeng <wubinfeng@huawei.com>
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-27 10:04:21 +08:00
yezengruan
b07ad26dc2 fix CVE-2022-26354 and CVE-2022-26353
vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
virtio-net: fix map leaking on error during receive (CVE-2022-26353)

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-15 17:26:10 +08:00