342 Commits

Author SHA1 Message Date
Chen Qun
f64c0eea3d spec: Update patch and changelog with !146 fix CVE-2021-3527 #I3U9T9 && CVE-2019-12067#I3VG5H && CVE-2021-20221 #I3UFOP !146
ide: ahci: add check to avoid null dereference (CVE-2019-12067)
hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
usb: limit combined packets to 1 MiB (CVE-2021-3527)

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2021-06-21 16:27:26 +08:00
Chen Qun
ef989d6fc8 spec: Update release version with !141
increase release verison by one

Signed-off-by: Chen Qun <kuhn.chenqun@huawei.com>
2021-06-15 16:27:16 +08:00
Chen Qun
f1d6caff39 spec: Update patch and changelog with !141 fix CVE-2021-3544 #I3VG5I && fix CVE-2021-3545 #I3V9I8 && fix CVE-2021-3546 #I3V9I7 !141
vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)
vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544)
vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)
vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544)
vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545)
vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2021-06-15 16:27:11 +08:00
Chen Qun
36455e017b spec: Update release version with !118
increase release verison by one

Signed-off-by: Chen Qun <kuhn.chenqun@huawei.com>
2021-05-28 16:27:23 +08:00
Chen Qun
6d6cd0fe82 spec: Update patch and changelog with !118 blockjob: Fix crash with IOthread when block commit after snapshot !118
blockjob: Fix crash with IOthread when block commit after snapshot

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2021-05-28 16:27:22 +08:00
zhouli57
69f71b8b94 arm/cpu: Fixed function undefined error at compile time under arm 2021-05-20 11:10:10 +08:00
Ming Yang
454f2844f7 Merge branch 'master' of gitee.com:src-openeuler/qemu into master 2021-05-20 10:08:04 +08:00
zhouli57
eefa614339 util/cacheinfo: fix crash when compiling with uClibc 2021-05-19 17:21:24 +08:00
Ming Yang
de95cacd5f add strip for block-iscsi.so, block-rbd.so and block-ssh.so.
Signed-off-by: Ming Yang <yangming73@huawei.com>
2021-05-19 09:11:35 +00:00
Chen Qun
6f1aa31d5f spec: Update release version with !88
increase release verison by one

Signed-off-by: Chen Qun <kuhn.chenqun@huawei.com>
2021-03-26 11:14:37 +08:00
Chen Qun
2562f7d6dc spec: Update patch and changelog with !88 fix CVE-2020-15469 #I1NJI5 !88
hw/pci-host: add pci-intack write method
pci-host: add pcie-msi read method
vfio: add quirk device write method
prep: add ppc-parity write method
nvram: add nrf51_soc flash read method
spapr_pci: add spapr msi read method
tz-ppc: add dummy read/write methods
imx7-ccm: add digprog mmio write method

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2021-03-26 11:14:36 +08:00
Chen Qun
1b4396dd9a spec: Update release version with !87
increase release verison by one

Signed-off-by: Chen Qun <kuhn.chenqun@huawei.com>
2021-03-18 22:02:37 +08:00
Chen Qun
578e31cf55 spec: Update patch and changelog with !87 block: Add sanity check when setting retry parameters !87
block: Add sanity check when setting retry parameters

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2021-03-18 22:02:14 +08:00
Jiajie Li
1d77f79cd3 enable strip for qemu-block-rbd.so and qemu-block-ssh.so
Signed-off-by: Jiajie Li <lijiajie11@huawei.com>
2021-03-17 14:32:32 +08:00
Chen Qun
b3c33c5447 spec: Update release version with !79 !81
increase release verison by one

Signed-off-by: Chen Qun <kuhn.chenqun@huawei.com>
2021-03-12 16:45:12 +08:00
Chen Qun
6912ff6399 spec: Update patch and changelog with !81 fix CVE-2021-20203 #I3A34O !81
net: vmxnet3: validate configuration values during activate (CVE-2021-20203)

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2021-03-12 16:45:10 +08:00
Chen Qun
5bde19b297 spec: Update patch and changelog with !79 migration: backport migration/tls patches from upstream !79
migration: fix memory leak in qmp_migrate_set_parameters
migration/tls: fix inverted semantics in multifd_channel_connect
migration/tls: add error handling in multifd_tls_handshake_thread

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
2021-03-12 16:45:08 +08:00
Jiajie Li
c29fbf0083 add iscsi rpm package requirement 2021-03-11 21:10:41 +08:00
Jiajie Li
d82535f081 iscsi: make iscsi rpm package
Signed-off-by: Jiajie Li <lijiajie11@huawei.com>
2021-03-10 15:15:45 +08:00
Jiajie Li
482b3d0cc3 qemu spec: add --enable-zstd to configure parameter
Signed-off-by: Jiajie Li <lijiajie11@huawei.com>
2021-03-03 14:47:59 +08:00
Euler Robot
6dd6890812 spec: Update release version with !77 !78
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2021-02-26 16:28:21 +08:00
Euler Robot
f8f7dd42e8 spec: Update patch and changelog with !78
block-backend: Stop retrying when draining

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-02-26 16:27:55 +08:00
Euler Robot
f8b7dd549d spec: Update patch and changelog with !77
ide:atapi: check io_buffer_index in ide_atapi_cmd_reply_end

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-02-26 16:27:53 +08:00
Euler Robot
cfccf26734 spec: Update release version with !71
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2021-02-19 21:28:48 +08:00
Euler Robot
e76de305cc spec: Update patch and changelog with !71
ati: use vga_read_byte in ati_cursor_define
sd: sdhci: assert data_count is within fifo_buffer
msix: add valid.accepts methods to check address

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-02-19 21:27:56 +08:00
Euler Robot
99eb051c68 spec: Update release version with !69
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2021-02-04 16:28:08 +08:00
Euler Robot
ef3cb17353 spec: Update patch and changelog with !69
migration: Add multi-thread compress method
migration: Refactoring multi-thread compress migration
migration: Add multi-thread compress ops
migration: Add zstd support in multi-thread compression
migration: Add compress_level sanity check
doc: Update multi-thread compression doc
configure: Enable test and libs for zstd

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-02-04 16:27:33 +08:00
Euler Robot
34a1635015 spec: Update release version with !65
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2021-01-30 16:26:59 +08:00
Euler Robot
4bffc50ac3 spec: Update patch and changelog with !65
scsi-bus: Refactor the code that retries requests
scsi-disk: Add support for retry on errors
qapi/block-core: Add retry option for error action
block-backend: Introduce retry timer
block-backend: Add device specific retry callback
block-backend: Enable retry action on errors
block-backend: Add timeout support for retry
block: Add error retry param setting
virtio-blk: Refactor the code that processes queued requests
virtio-blk: On restart, process queued requests in the proper context
virtio_blk: Add support for retry on errors

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-01-30 16:26:59 +08:00
Ying Fang
1f69406f31 feature: enable spice protocol
Enable the spice protocol

Signed-off-by: Ying Fang <fangying1@huawei.com>
2021-01-19 20:14:15 +08:00
Ying Fang
e68cf6bcb7 spec: recoder changelog
Nothing but just reorder the changelog.

Signed-off-by: Ying Fang <fangying1@huawei.com>
2021-01-19 20:11:31 +08:00
Euler Robot
d048d2e58f spec: Update release version with !60
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2021-01-15 11:27:06 +08:00
Euler Robot
83a95bec06 spec: Update patch and changelog with !60
memory: clamp cached translation in case it points to an MMIO region

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-01-15 11:26:50 +08:00
Alex Chen
a650a5c510 spec: updating the license info
Specify the version of CC-BY license

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-01-08 14:00:45 +08:00
Euler Robot
1710ca191e spec: Update release version with !56
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2021-01-04 16:26:46 +08:00
Euler Robot
51ce899440 spec: Update patch and changelog with !56
target/arm: Fix write redundant values to kvm

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2021-01-04 16:26:46 +08:00
Euler Robot
4ee63994f5 spec: Update release version with !57
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2020-12-31 11:27:02 +08:00
Euler Robot
903c155e74 spec: Update patch and changelog with !57
hostmem: Fix up free host_nodes list right after visited

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2020-12-31 11:26:53 +08:00
Ming Yang
c0ee9876b5 spec: Add two packages.
1. Add qemu-block-rbd package.
2. Add qemu-block-ssh package.

Signed-off-by: Ming Yang <yangming73@huawei.com>
2020-12-28 20:25:54 +08:00
Euler Robot
aae6cc182b spec: Update release version with !51
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2020-12-15 21:27:38 +08:00
Euler Robot
fb6029a728 spec: Update patch and changelog with !51
hw: usb: hcd-ohci: check for processed TD before retire
hw: ehci: check return value of 'usb_packet_map'
hw: usb: hcd-ohci: check len and frame_number variables
hw/net/e1000e: advance desc_offset in case of null descriptor

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2020-12-15 21:27:19 +08:00
Alex Chen
abe003640c slirp: check pkt_len before reading protocol header
While processing ARP/NCSI packets in 'arp_input' or 'ncsi_input'
routines, ensure that pkt_len is large enough to accommodate the
respective protocol headers, lest it should do an OOB access.
Add check to avoid it.

CVE-2020-29129 CVE-2020-29130
  QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets
 -> https://www.openwall.com/lists/oss-security/2020/11/27/1

Reported-by: Qiuhao Li <Qiuhao.Li@outlook.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-Id: <20201126135706.273950-1-ppandit@redhat.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
(cherry-picked from 2e1dcbc0)
Signed-off-by: Alex Chen <alex.chen@huawei.com>
2020-12-14 18:00:31 +08:00
Euler Robot
0190db4b51 spec: Update release version with !47
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2020-12-08 21:26:57 +08:00
Euler Robot
43a7247237 spec: Update patch and changelog with !47
Bugfix: hw/acpi: Use max_cpus instead of cpus when build PPTT table

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2020-12-08 21:26:55 +08:00
Euler Robot
c6d7e42e3c spec: Update release version with !43
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2020-12-08 17:07:55 +08:00
Euler Robot
8a67ba69fe spec: Update patch and changelog with !43
json: Fix a memleak in parse_pair()

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2020-12-08 17:07:48 +08:00
Euler Robot
ef52e3f6f9 spec: Update release version with !39
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2020-12-07 11:27:02 +08:00
Euler Robot
ac58d429a9 spec: Update patch and changelog with !39
net: remove an assert call in eth_get_gso_type

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2020-12-07 11:26:54 +08:00
Euler Robot
0f34d3b407 spec: Update release version with !38
increase release verison by one

Signed-off-by: Euler Robot <euler.robot@huawei.com>
2020-12-03 21:26:57 +08:00
Euler Robot
dd0133f54b spec: Update patch and changelog with !38
migration/tls: save hostname into MigrationState
migration/tls: extract migration_tls_client_create for common-use
migration/tls: add tls_hostname into MultiFDSendParams
migration/tls: extract cleanup function for common-use
migration/tls: add support for multifd tls-handshake
migration/tls: add trace points for multifd-tls
qemu-file: Don't do IO after shutdown
multifd: Make sure that we don't do any IO after an error
migration: Don't send data if we have stopped
migration: Create migration_is_running()
migration: fix COLO broken caused by a previous commit
migration/multifd: fix hangup with TLS-Multifd due to  blocking handshake
multifd/tls: fix memoryleak of the QIOChannelSocket object when cancelling migration

Signed-off-by: Alex Chen <alex.chen@huawei.com>
2020-12-03 21:26:56 +08:00