{"push_id":1073975246,"size":11,"distinct_size":10,"ref":"refs/heads/master","head":"1f7685fafa6ba1354731a59822e5cc43323d6989","before":"92b674b62a1aec734280c9019cfb3b3745044b66","commits":[{"sha":"9997cf7bdac056aeed246613639675c5a9f8fdc2","author":{"email":"50373d7c08ceadf576dd7dca718012445b677ce6@redhat.com","name":"Eduardo Habkost"},"message":"target-i386: Set AMD alias bits after filtering CPUID data\n\nQEMU complains about -cpu host on an AMD machine:\n  warning: host doesn't support requested feature: CPUID.80000001H:EDX [bit 0]\nFor bits 0,1,3,4,5,6,7,8,9,12,13,14,15,16,17,23,24.\n\nKVM_GET_SUPPORTED_CPUID and and x86_cpu_get_migratable_flags()\ndon't handle the AMD CPUID aliases bits, making\nx86_cpu_filter_features() print warnings and clear those CPUID\nbits incorrectly.\n\nTo avoid hacking x86_cpu_get_migratable_flags() to handle\nCPUID_EXT2_AMD_ALIASES (just like the existing hack inside\nkvm_arch_get_supported_cpuid()), simply move the\nCPUID_EXT2_AMD_ALIASES code in x86_cpu_realizefn() after the\nx86_cpu_filter_features() call.\n\nThis will probably make the CPUID_EXT2_AMD_ALIASES hack in\nkvm_arch_get_supported_cpuid() unnecessary, too. The hack will be\nremoved in a follow-up patch after v2.6.0.\n\nReported-by: Radim Krčmář <rkrcmar@redhat.com>\nTested-by: Radim Krčmář <rkrcmar@redhat.com>\nSigned-off-by: Eduardo Habkost <ehabkost@redhat.com>","distinct":false,"url":"https://api.github.com/repos/ehabkost/qemu/commits/9997cf7bdac056aeed246613639675c5a9f8fdc2"},{"sha":"ed3d807b0a577c4f825b25f3281fe54ce89202db","author":{"email":"bceb368e7f2cb351af47298f32034f0587bbe4a6@aurel32.net","name":"Aurelien Jarno"},"message":"cuda: fix off-by-one error in SET_TIME command\n\nWith the new framework the cuda_cmd_set_time command directly receive\nthe data, without the command byte. Therefore the time is stored at\nin_data[0], not at in_data[1].\n\nThis fixes the \"hwclock --systohc\" command in a guest.\n\nCc: Hervé Poussineau <hpoussin@reactos.org>\nCc: David Gibson <david@gibson.dropbear.id.au>\nSigned-off-by: Aurelien Jarno <aurelien@aurel32.net>\nReviewed-by: Hervé Poussineau <hpoussin@reactos.org>\n[this fixes a regression introduced by e647317 \"cuda: port SET_TIME\n command to new framework\"]\nSigned-off-by: David Gibson <david@gibson.dropbear.id.au>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/ed3d807b0a577c4f825b25f3281fe54ce89202db"},{"sha":"1ae3f2f178087711f9591350abad133525ba93f2","author":{"email":"cad73e70082427fddc9be3baaf34e698dffd21c0@redhat.com","name":"Gerd Hoffmann"},"message":"ehci: apply limit to iTD/sidt descriptors\n\nCommit \"156a2e4 ehci: make idt processing more robust\" tries to avoid a\nDoS by the guest (create a circular iTD queue and let qemu ehci\nemulation run in circles forever).  Unfortunately this has two problems:\nFirst it misses the case of siTDs, and second it reportedly breaks\nFreeBSD.\n\nSo lets go for a different approach: just count the number of iTDs and\nsiTDs we have seen per frame and apply a limit.  That should really\ncatch all cases now.\n\nReported-by: 杜少博 <dushaobo@360.cn>\nSigned-off-by: Gerd Hoffmann <kraxel@redhat.com>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/1ae3f2f178087711f9591350abad133525ba93f2"},{"sha":"a49923d2837d20510d645d3758f1ad87c32d0730","author":{"email":"cad73e70082427fddc9be3baaf34e698dffd21c0@redhat.com","name":"Gerd Hoffmann"},"message":"Revert \"ehci: make idt processing more robust\"\n\nThis reverts commit 156a2e4dbffa85997636a7a39ef12da6f1b40254.\n\nBreaks FreeBSD.\n\nSigned-off-by: Gerd Hoffmann <kraxel@redhat.com>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/a49923d2837d20510d645d3758f1ad87c32d0730"},{"sha":"a087cc589d3581a89fdb8c09324941512b5ef300","author":{"email":"313afa09ce093b19ae1dd74f57c1ebd94508584c@linaro.org","name":"Peter Maydell"},"message":"Merge remote-tracking branch 'remotes/ehabkost/tags/x86-pull-request' into staging\n\nX86 fix for 2.6.0-rc3\n\n# gpg: Signature made Mon 18 Apr 2016 20:02:15 BST using RSA key ID 984DC5A6\n# gpg: Good signature from \"Eduardo Habkost <ehabkost@redhat.com>\"\n\n* remotes/ehabkost/tags/x86-pull-request:\n  target-i386: Set AMD alias bits after filtering CPUID data\n\nSigned-off-by: Peter Maydell <peter.maydell@linaro.org>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/a087cc589d3581a89fdb8c09324941512b5ef300"},{"sha":"5eb0b194e9b01ba0f3613e6ddc2cb9f63ce96ae5","author":{"email":"255103e50249e3d658441816e0597170ebfc16ef@redhat.com","name":"Michael S. Tsirkin"},"message":"cadence_uart: bounds check write offset\n\ncadence_uart_init() initializes an I/O memory region of size 0x1000\nbytes.  However in uart_write(), the 'offset' parameter (offset within\nregion) is divided by 4 and then used to index the array 'r' of size\nCADENCE_UART_R_MAX which is much smaller: (0x48/4).  If 'offset>>=2'\nexceeds CADENCE_UART_R_MAX, this will cause an out-of-bounds memory\nwrite where the offset and the value are controlled by guest.\n\nThis will corrupt QEMU memory, in most situations this causes the vm to\ncrash.\n\nFix by checking the offset against the array size.\n\nCc: qemu-stable@nongnu.org\nReported-by: 李强 <liqiang6-s@360.cn>\nSigned-off-by: Michael S. Tsirkin <mst@redhat.com>\nReviewed-by: Alistair Francis <alistair.francis@xilinx.com>\nMessage-id: 20160418100735.GA517@redhat.com\nSigned-off-by: Peter Maydell <peter.maydell@linaro.org>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/5eb0b194e9b01ba0f3613e6ddc2cb9f63ce96ae5"},{"sha":"bb97bfd90194eb3c6995b446643af4818a142805","author":{"email":"313afa09ce093b19ae1dd74f57c1ebd94508584c@linaro.org","name":"Peter Maydell"},"message":"Merge remote-tracking branch 'remotes/dgibson/tags/ppc-for-2.6-20160419' into staging\n\nppc patch queueu for 2016-04-19\n\nA single fix for a regression since 2.5.  This should be the last ppc\npull request for 2.6.\n\n# gpg: Signature made Tue 19 Apr 2016 02:48:30 BST using RSA key ID 20D9B392\n# gpg: Good signature from \"David Gibson <david@gibson.dropbear.id.au>\"\n# gpg:                 aka \"David Gibson (Red Hat) <dgibson@redhat.com>\"\n# gpg:                 aka \"David Gibson (ozlabs.org) <dgibson@ozlabs.org>\"\n# gpg: WARNING: This key is not certified with sufficiently trusted signatures!\n# gpg:          It is not certain that the signature belongs to the owner.\n# Primary key fingerprint: 75F4 6586 AE61 A66C C44E  87DC 6C38 CACA 20D9 B392\n\n* remotes/dgibson/tags/ppc-for-2.6-20160419:\n  cuda: fix off-by-one error in SET_TIME command\n\nSigned-off-by: Peter Maydell <peter.maydell@linaro.org>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/bb97bfd90194eb3c6995b446643af4818a142805"},{"sha":"ef5d5641f5f35f64a7f150bb3593dae0c08f236d","author":{"email":"313afa09ce093b19ae1dd74f57c1ebd94508584c@linaro.org","name":"Peter Maydell"},"message":"Merge remote-tracking branch 'remotes/kraxel/tags/pull-usb-20160419-1' into staging\n\nehci: fix (s)iTD looping issue (CVE-2015-8558) in a different way.\n\n# gpg: Signature made Tue 19 Apr 2016 07:22:22 BST using RSA key ID D3E87138\n# gpg: Good signature from \"Gerd Hoffmann (work) <kraxel@redhat.com>\"\n# gpg:                 aka \"Gerd Hoffmann <gerd@kraxel.org>\"\n# gpg:                 aka \"Gerd Hoffmann (private) <kraxel@gmail.com>\"\n\n* remotes/kraxel/tags/pull-usb-20160419-1:\n  Revert \"ehci: make idt processing more robust\"\n  ehci: apply limit to iTD/sidt descriptors\n\nSigned-off-by: Peter Maydell <peter.maydell@linaro.org>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/ef5d5641f5f35f64a7f150bb3593dae0c08f236d"},{"sha":"63d3145aadbecaa7e8be1e74b5d6b5cbbeb4e153","author":{"email":"5d00b6b660f20fb41305186c34c40973ec5cb35b@redhat.com","name":"Markus Armbruster"},"message":"fw_cfg: Adopt /opt/RFQDN convention\n\nFW CFG's primary user is QEMU, which uses it to expose configuration\ninformation (in the widest sense) to Firmware.  Thus the name FW CFG.\n\nFW CFG can also be used by others for their own purposes.  QEMU is\nmerely acting as transport then.  Names starting with opt/ are\nreserved for such uses.  There is no provision, however, to guide safe\nsharing among different such users.\n\nFix that, loosely following QMP precedence: names should start with\nopt/RFQDN/, where RFQDN is a reverse fully qualified domain name you\ncontrol.\n\nBased on a more ambitious patch from Michael Tsirkin.\n\nCc: Gerd Hoffmann <kraxel@redhat.com>\nCc: Gabriel L. Somlo <somlo@cmu.edu>\nCc: Laszlo Ersek <lersek@redhat.com>\nCc: Michael S. Tsirkin <mst@redhat.com>\nSigned-off-by: Markus Armbruster <armbru@redhat.com>\nReviewed-by: Michael S. Tsirkin <mst@redhat.com>\nSigned-off-by: Michael S. Tsirkin <mst@redhat.com>\nAcked-by: Gabriel Somlo <somlo@cmu.edu>\nReviewed-by: Laszlo Ersek <lersek@redhat.com>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/63d3145aadbecaa7e8be1e74b5d6b5cbbeb4e153"},{"sha":"d4dffa4a3f51b10cc0b7e6e34431919cac7a318e","author":{"email":"313afa09ce093b19ae1dd74f57c1ebd94508584c@linaro.org","name":"Peter Maydell"},"message":"Merge remote-tracking branch 'remotes/armbru/tags/pull-fw_cfg-2016-04-19' into staging\n\nfw_cfg: Adopt /opt/RFQDN convention\n\n# gpg: Signature made Tue 19 Apr 2016 15:14:20 BST using RSA key ID EB918653\n# gpg: Good signature from \"Markus Armbruster <armbru@redhat.com>\"\n# gpg:                 aka \"Markus Armbruster <armbru@pond.sub.org>\"\n\n* remotes/armbru/tags/pull-fw_cfg-2016-04-19:\n  fw_cfg: Adopt /opt/RFQDN convention\n\nSigned-off-by: Peter Maydell <peter.maydell@linaro.org>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/d4dffa4a3f51b10cc0b7e6e34431919cac7a318e"},{"sha":"1f7685fafa6ba1354731a59822e5cc43323d6989","author":{"email":"313afa09ce093b19ae1dd74f57c1ebd94508584c@linaro.org","name":"Peter Maydell"},"message":"Update language files for QEMU 2.6.0\n\nUpdate translation files (change created via 'make -C po update').\n\nSigned-off-by: Peter Maydell <peter.maydell@linaro.org>\nMessage-id: 1461059023-14470-1-git-send-email-peter.maydell@linaro.org\nReviewed-by: Stefan Weil <sw@weilnetz.de>","distinct":true,"url":"https://api.github.com/repos/ehabkost/qemu/commits/1f7685fafa6ba1354731a59822e5cc43323d6989"}]}