336 Commits

Author SHA1 Message Date
Qiang Wei
c0643ca1a3 Use bcond_without to control conditon build
It is more clear about conditonal build.

Signed-off-by: Qiang Wei <qiang.wei@suse.com>
(cherry picked from commit c00bd7dc70f700b90db24c324d2e2333282130b9)
2022-12-13 11:32:41 +08:00
Qiang Wei
d2867e8c56 Make Ceph rbd support optional
Signed-off-by: Qiang Wei <qiang.wei@suse.com>
(cherry picked from commit 8c06fb9dd9a12341f29aad3e7296a6c32587067a)
2022-12-09 17:39:34 +08:00
yezengruan
417caf54a7 BuildRequires add make
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 173dd41c89697ee2ea4d399cc24c31fccff8d783)
2022-12-07 15:47:19 +08:00
yezengruan
86bdfa9211 QEMU update to verison 6.2.0-60
- sync some bugfix patches from upstream
- fix the virtio features negotiation flaw
- fix CVE-2022-4144

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-12-06 12:44:38 +08:00
yezengruan
dec64939c6 Qemu update to version 6.2.0-59
- arm/virt: Fix vcpu hotplug idx_from_topo_ids
- Revert patches related to the vSVA
- sync some bugfix patches from upstream
- add generic vDPA device support

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit b99dbfd9847104300672fb4f559f1c2abba8aa33)
2022-12-06 09:18:10 +08:00
yezengruan
5f67a2826a update qemu download url
The download url is dead and needs to be updated.

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 60ac7eb978859584cfa877bade4168a7ae60968c)
2022-11-23 17:59:23 +08:00
weishaokun
f6a40d3606 Support io-uring by adding --enable-io-uring compilation option 2022-11-14 15:16:04 +08:00
yezengruan
c39a6c8586 build: make check with -j
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-11-08 20:12:16 +08:00
yuelg
62f5717c6f by default enable rbd support
Support rbd by adding --enable-rbd compilation option

Signed-off-by: yuelg <yuelg@chinaunicom.cn>
2022-11-07 12:04:57 +08:00
yezengruan
e9095b76ae Qemu update to version 6.2.0-55
- support dirty restraint on vCPU
- support SPR AMX in Qemu
- fix compilation errors of sw64

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-11-04 09:59:34 +08:00
fu-shanqing
f68cfde3b0 add '--enable-slirp' compilation options 2022-10-24 10:10:07 +08:00
bobychen
40d7d3a15d ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (CVE-2022-3165)
Signed-off-by: yezengruan <yezengruan@huawei.com>
Signed-off-by: bobychen <boby.chen@huawei.com>
2022-10-21 09:52:59 +08:00
wanborj
d72c1d27b2 Backport upstream bugfix
Signed-off-by: wanborj <wanbo13@huawei.com>
2022-09-30 17:51:42 +08:00
zhangxinhao
a2786109b9 Backport upstream bugfix
Signed-off-by: zhangxinhao <zhangxinhao1@huawei.com>
2022-09-30 16:47:15 +08:00
Zhang Bo
9e73b27bd8 spec: fix wrong patch name
net-tulip-Restrict-DMA-engine-to-memories.patch was named with CVE-XX
surfixes, the spec remains that old name, change the name there.

Signed-off-by: Zhang Bo <oscar.zhangbo@huawei.com>
2022-09-30 15:45:10 +08:00
Zhang Bo
69b69596a2 net: tulip: Restrict DMA engine to memories(CVE-2022-2962)
fix CVE-2022-2962.
The DMA engine is started by I/O access and then itself accesses the
I/O registers, triggering a teentrancy bug.
Fix this bug by restricting the DMA engine to memories regions.

Signed-off-by: Zhang Bo <oscar.zhangbo@huawei.com>
2022-09-30 14:28:43 +08:00
yezengruan
9e16c84fbf hw/usb/hcd-xhci: Fix unbounded loop in xhci_ring_chain_length() (CVE-2020-14394)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-09-03 09:17:16 +08:00
yezengruan
9b71f5aa79 fix CVE-2022-0216 (openeuler !332)
hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
tests/qtest: Add fuzz-lsi53c895a-test
scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-08-30 19:33:44 +08:00
Zhang Bo
6e9beed308 backport nbd related patches to avoid vm crash during migration
block-nbd was refacted during release 6.2.0, but we didn't induced
all the needed patches within the 6.2.0 baseline, which leads to
vm crash during migration.
the reasons are as below:
when iothread is configured, the coroutines should get back to
the exact iothread that was out of. But within the 6.2.0 baseline,
patches were missing, nbd related coroutine didn't have its related
aio_context. It in fact get to the mainline aio_context, the mistaken
context leads to vm crash.
2022-08-29 17:09:05 +08:00
yezengruan
65770dadad Qemu update to version 10:6.2.0-46
vhost-user: remove VirtQ notifier restore
vhost-user: fix VirtQ notifier cleanup
enable vDPA build params
Provides qemu-kvm for upgrade

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit a6c5c96c0b65904db08e803692a01447553a725a)
2022-08-25 17:15:08 +08:00
yezengruan
bb777b4dce Qemu update to version 6.2.0-45
numa: Enable numa for SGX EPC sections
target/ppc: enhance error handling in kvmppc_read_int*
fix pointer double free in func qemu_savevm_state_complete_precopy_non_iterable

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-08-11 19:19:20 +08:00
yezengruan
9d2610934b add Requires libgcc
(cherry picked from commit 56beae0617d658b8100fabcf91bed5568e4a8b99)
2022-07-26 17:00:15 +08:00
cenhuilin
5054179fc5 fix CVE-2022-35414 2022-07-19 10:02:23 +00:00
l00500761
8b199ba599 Fix CVE-2022-0358 and CVE-2021-4158 2022-07-12 15:41:12 +08:00
yezengruan
36eaeb0b27 hw/nvme: fix CVE-2021-3929 (openeuler !313)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-06-22 10:38:05 +08:00
saarloos
1bf06bf4ad Add riscv rpm include qemu-system-riscv32 and qemu-system-riscv64 2022-06-20 20:28:47 +08:00
yezengruan
cbe2a01c81 fix CVE-2021-3611
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-06-09 17:10:50 +08:00
yezengruan
ba8cdf7ac0 fix CVE-2021-3507 and fix -acpitable regression (openeuler !300!301)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-05-31 09:17:56 +08:00
saarloos
666acae1c3 add qemu-system-x86_64 qemu-system-arm qemu-system-aarch64 rpm 2022-05-30 14:39:26 +08:00
Jun Yang
d9686f6f3e qemu: remove unnecessary dependency of kernel package
Signed-off-by: Jun Yang <jun.yang@suse.com>
2022-05-26 19:20:58 +08:00
yezengruan
b39643dc6e fix CVE-2021-3750 (openeuler !293)
hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
softmmu/physmem: Simplify flatview_write and address_space_access_valid
softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR
2022-05-21 14:45:11 +08:00
yezengruan
dec7c9d2cf fix CVE-2021-4207 and CVE-2021-4206 (openeuler !287)
display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)
2022-05-10 21:27:52 +08:00
yezengruan
af63dcf8b2 update changelog
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-27 20:17:55 +08:00
yezengruan
ce1ce575d6 vfio/pci: Ascend710 change to bar2 quirk
Change Ascend710's quirk regions to bar2 for internal causes.
And support Ascend710 2P format now.

Signed-off-by: Wu Binfeng <wubinfeng@huawei.com>
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-27 10:04:21 +08:00
yezengruan
b07ad26dc2 fix CVE-2022-26354 and CVE-2022-26353
vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
virtio-net: fix map leaking on error during receive (CVE-2022-26353)

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-15 17:26:10 +08:00
yezengruan
cf2a6631e6 spec: Update release version with !273
fix some IO hang bugs

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-03-30 10:22:16 +08:00
Jinhua Cao
f0684b551e qemu-img create: cache paramter only use for reg file image
The paramter 'cache' is invalid for host device(/dev/xxx). If
'qemu-img create' operator performed on host device, the host
device not support 'cache' would result 'qemu-img create excute'
failed.

Signed-off-by: Jinhua Cao <caojinhua1@huawei.com>
2022-03-30 10:21:32 +08:00
Yan Wang
d3ad6ab6ba spec: add hw-usb-host rpm package
Signed-off-by: Yan Wang <wangyan122@huawei.com>
2022-03-30 10:21:21 +08:00
yezengruan
5d70d132d5 spec: Update release version with !266 and support sw64
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-03-19 14:42:32 +08:00
yezengruan
d9dc01751d add patch for sw64 support
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-03-19 14:42:32 +08:00
jiang-dawei15
a2bda2ea92 cflages: add cflags '-ftls-model=initial-exec'
This option changes the thread local storage (TLS) model. Thread-local storage
is a mechanism by which variables are allocated in a way that causes one instance
of the variable per extant thread.

i.global-dynamic

Generates a generic TLS code. The code can be used everywhere and the code can access
variables defined anywhere else. This setting causes the largest size code to be generated
and uses the most run time to produce.

ii.local-dynamic

Generates an optimized TLS code. To use this setting, the thread-local variables must be
defined in the same object in which they are referenced.

iii.initial-exec

Generates a restrictive, optimized TLS code. To use this setting, the thread-local variables
accessed must be defined in one of the modules available to the program.

iv.local-exec

Generates the most restrictive TLS code. To use this setting, the thread-local variables
must be defined in the executable.

Optimize qemu cflags with '-ftls-model=initial-exec' which means we use initial-exec
mode.
2022-03-19 14:42:32 +08:00
yezengruan
efd1f8a7bf spec: Update release version with !265
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-03-19 14:42:32 +08:00
jiang-dawei15
a0a3c6a357 qemu.spec: add "--enable-debug" parameter to configure.
(cherry picked from commit 64b9ff905211b4a6f318d77e6183bac89873cf59)
2022-03-19 14:42:32 +08:00
Chen Qun
f7e17bbe44 spec: Update release version with !263 !264
increase release verison by one

Signed-off-by: Chen Qun <kuhn.chenqun@huawei.com>
2022-03-19 14:42:32 +08:00
Chen Qun
b00a57bdfa spec: Update patch and changelog with !264 tools/virtiofsd: Add rseq syscall to the seccomp allowlist !264
tools/virtiofsd: Add rseq syscall to the seccomp allowlist

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2022-03-19 14:42:32 +08:00
Chen Qun
9cb44f2d1d spec: Update patch and changelog with !263 【6.2.0】修改object_unref导致的abort问题 !263
scsi-bus: fix unmatched object_unref()

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2022-03-19 14:42:32 +08:00
Yan Wang
846e2a19aa spec: Update release version with !220
increase release version by one

Signed-off-by: Yan Wang <wangyan122@huawei.com>
2022-03-19 14:42:32 +08:00
Yan Wang
59d4491bda spec: Update patch and changelog with !220
pl011-reset-read-FIFO-when-UARTTIMSC-0-UARTICR-0xfff.patch
qcow2-fix-memory-leak-in-qcow2_read_extensions.patch
scsi-disk-define-props-in-scsi_block_disk-to-avoid-m.patch
pcie-Add-pcie-root-port-fast-plug-unplug-feature.patch
pcie-Compat-with-devices-which-do-not-support-Link-W.patch

Signed-off-by: Yan Wang <wangyan122@huawei.com>
2022-03-19 14:42:32 +08:00
Chen Qun
71bd18e462 spec: Update release version with !257
increase release verison by one

Signed-off-by: Chen Qun <kuhn.chenqun@huawei.com>
(cherry picked from commit 185b204119d6955d15deaba8f441880eacfa3f8f)
2022-03-19 14:42:32 +08:00
Chen Qun
f5a6f5b203 spec: Update patch and changelog with !257 add vcpu hotplug feature from 4.1 to 6.2 !257
acpi/madt: Factor out the building of MADT GICC struct
hw/arm/virt: Assign virt_madt_cpu_entry to acpi_ged madt_cpu hook
arm/virt/acpi: Factor out CPPC building from DSDT CPU aml
acpi/cpu: Prepare build_cpus_aml for arm virt
acpi/ged: Extend ACPI GED to support CPU hotplug
arm/cpu: assign arm_get_arch_id handler to get_arch_id hook
tests/acpi/bios-tables-test: Allow changes to virt/DSDT file
arm/virt: Attach ACPI CPU hotplug support to virt
tests/acpi/bios-table-test: Update expected virt/DSDT file
arm/virt: Add CPU hotplug framework
arm/virt: Add CPU topology support
test/numa: Adjust aarch64 numa test
hw/arm/virt: Factor out some CPU init codes to pre_plug hook
hw/arm/boot: Add manually register and trigger of CPU reset
arm/virt/gic: Construct irqs connection from create_gic
intc/gicv3_common: Factor out arm_gicv3_common_cpu_realize
intc/gicv3_cpuif: Factor out gicv3_init_one_cpuif
intc/kvm_gicv3: Factor out kvm_arm_gicv3_cpu_realize
hw/intc/gicv3: Add CPU hotplug realize hook
accel/kvm: Add pre-park vCPU support
intc/gicv3: Add pre-sizing capability to GICv3
acpi/madt: Add pre-sizing capability to MADT GICC struct
arm/virt: Add cpu_hotplug_enabled field
arm/virt/acpi: Extend cpufreq to support max_cpus
arm/virt: Pre-sizing MADT-GICC GICv3 and Pre-park KVM vCPU
arm/virt: Start up CPU hot-plug and cold-plug

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
(cherry picked from commit 9390aa07e450024769ceb3bb3ab481af8911a77b)
2022-03-19 14:42:32 +08:00