{"push_id":929589142,"size":6,"distinct_size":0,"ref":"refs/heads/stable-4.3","head":"ae05efd98917223a0e669026baceb7f489755a42","before":"54dd84062d4e0f0298508826fc06990415da431e","commits":[{"sha":"f5119912e9a5f888273306ff6b462d6fd1f7a6bd","author":{"email":"01de09643e0ae62e116f8bd77de435799874b456@suse.com","name":"Jan Beulich"},"message":"x86: don't leak ST(n)/XMMn values to domains first using them\n\nFNINIT doesn't alter these registers, and hence using it is\ninsufficient to initialize a guest's initial state.\n\nThis is CVE-2015-8555 / XSA-165.\n\nSigned-off-by: Jan Beulich <jbeulich@suse.com>\nReviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>\nmaster commit: 81818b3f277544535974204f8d840da86fa8a44f\nmaster date: 2015-12-17 14:22:13 +0100","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/f5119912e9a5f888273306ff6b462d6fd1f7a6bd"},{"sha":"83349eede062fc636f89657628a772438012673a","author":{"email":"01de09643e0ae62e116f8bd77de435799874b456@suse.com","name":"Jan Beulich"},"message":"x86/HVM: avoid reading ioreq state more than once\n\nOtherwise, especially when the compiler chooses to translate the\nswitch() to a jump table, unpredictable behavior (and in the jump table\ncase arbitrary code execution) can result.\n\nThis is XSA-166.\n\nSigned-off-by: Jan Beulich <jbeulich@suse.com>\nAcked-by: Ian Campbell <ian.campbell@citrix.com>\nmaster commit: b452430a4cdfc801fa4bc391aed7522365e1deb6\nmaster date: 2015-12-17 14:22:46 +0100","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/83349eede062fc636f89657628a772438012673a"},{"sha":"0574a773238f0ecce3873dc525082f6e16ac655b","author":{"email":"b803dfa457ee7108535c9a9d11bc20116c6b9c4f@eu.citrix.com","name":"Ian Jackson"},"message":"QEMU_TAG update","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/0574a773238f0ecce3873dc525082f6e16ac655b"},{"sha":"0fe03d7ed26d41e9434fb007d6fe4d05077efa7d","author":{"email":"b803dfa457ee7108535c9a9d11bc20116c6b9c4f@eu.citrix.com","name":"Ian Jackson"},"message":"QEMU_TAG update","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/0fe03d7ed26d41e9434fb007d6fe4d05077efa7d"},{"sha":"a64bfae49ae845ba4cb8cb6923fa08c41439872a","author":{"email":"3bc232effbfb0bd9cdda6a741d96b74d3322f99c@citrix.com","name":"Dario Faggioli"},"message":"blktap: Fix two 'maybe uninitialized' variables\n\n[ Cross-ported to blktap1 from 345e44a85d71a\n  \"blktap2: Fix two 'maybe uninitialized' variables\" -iwj;\n  Remainder of commit message is from blktap2's version. ]\n\nfor which gcc 4.9.0 complains about, like this:\n\nblock-qcow.c: In function `get_cluster_offset':\nblock-qcow.c:431:3: error: `tmp_ptr' may be used uninitialized in this function\n[-Werror=maybe-uninitialized]\n   memcpy(tmp_ptr, l1_ptr, 4096);\n   ^\nblock-qcow.c:606:7: error: `tmp_ptr2' may be used uninitialized in this\nfunction [-Werror=maybe-uninitialized]\n   if (write(s->fd, tmp_ptr2, 4096) != 4096) {\n       ^\ncc1: all warnings being treated as errors\n/home/dario/Sources/xen/xen/xen.git/tools/blktap2/drivers/../../../tools/Rules.mk:89:\n recipe for target 'block-qcow.o' failed\nmake[5]: *** [block-qcow.o] Error 1\n\nThe proper behavior is to return upon allocation failure.\nAbout what to return, 0 seems the best option, looking\nat both the function and the call sites.\n\nSigned-off-by: Dario Faggioli <dario.faggioli@citrix.com>\nAcked-by: Ian Jackson <ian.jackson@eu.citrix.com>\n\nBackport-requested-by: Ian Campbell <ian.campbell@citrix.com>\nSigned-off-by: Ian Jackson <ian.jackson@eu.citrix.com>\n(cherry picked from commit 845e8c1653242bbd9b9de5a081182db0f3f39054)\n(cherry picked from commit e003d429d8c63523df40663b4586c572ce796659)","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/a64bfae49ae845ba4cb8cb6923fa08c41439872a"},{"sha":"ae05efd98917223a0e669026baceb7f489755a42","author":{"email":"a5240e9e4c4d742e3a4232ca749f78defd45d722@citrix.com","name":"Wei Liu"},"message":"Config.mk: update OVMF changeset\n\nSigned-off-by: Wei Liu <wei.liu2@citrix.com>\nAcked-by: Ian Campbell <ian.campbell@citrix.com>\n\n(cherry picked from commits 04c5efb0a141fa53e805e396970419436e74ce67\n and f046e501bbca1c8a46853b2e1f1b587e228c73de)\n\nApropos of discussion in\n \"OVMF related osstest failures on multiple branches\"\n http://lists.xenproject.org/archives/html/xen-devel/2016-01/msg00442.html\n\nWe believe the older ovmf.git does not work when built with the gcc in\nDebian jessie.  We do not know where this bug lies but we are fixing\nit by updating ovmf.\n\nWe have decided that we are not in a position to review the changes to\nOVMF upstream, and ourselves decide what to cherry pick.  Instead we\nwill update the revision wholesale and use the xen.git stable\nbranches' push gate.\n\nConflicts:\n\tConfig.mk\n\nSigned-off-by: Ian Jackson <ian.jackson@eu.citrix.com>\n\n(cherry picked from commits 6c3c6ff9ecaa5ee0be8b535d36fdcd12380564a1\n and 1d3cc6e62c4d2fc3dd9251d4921881425c9d27bd)\n\nConflicts:\n\tConfig.mk\nSigned-off-by: Ian Jackson <ian.jackson@eu.citrix.com>\n(cherry picked from commit ee576d71103e6795dc0add91db1b0d281eab1caf)\n\nConflicts:\n\tConfig.mk\nSigned-off-by: Ian Jackson <ian.jackson@eu.citrix.com>\n(cherry picked from commit 6d2c41d676339ecc6255b92876b6153d4f85f579)\n\nIn 4.3, old OVMF_UPSTREAM_REVISION was b0855f92 rather than cb9a7eba.\nI have pulled in the additional changes, willy-nilly.\n\nConflicts:\n\tConfig.mk\nSigned-off-by: Ian Jackson <ian.jackson@eu.citrix.com>","distinct":false,"url":"https://api.github.com/repos/mirage/xen/commits/ae05efd98917223a0e669026baceb7f489755a42"}]}