783 Commits

Author SHA1 Message Date
Zhang Bo
711cbb5d02 net: tulip: Restrict DMA engine to memories(CVE-2022-2962)
fix CVE-2022-2962.
The DMA engine is started by I/O access and then itself accesses the
I/O registers, triggering a teentrancy bug.
Fix this bug by restricting the DMA engine to memories regions.

Signed-off-by: Zhang Bo <oscar.zhangbo@huawei.com>
(cherry picked from commit 69b69596a274bd68695dda39ef939ed1ddbf9ba1)
2022-09-30 15:19:49 +08:00
openeuler-ci-bot
76e4a646c7
!643 [sync] PR-640: hw/usb/hcd-xhci: Fix unbounded loop in xhci_ring_chain_length() (CVE-2020-14394)
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-09-07 12:00:33 +00:00
yezengruan
bf46d59f28 hw/usb/hcd-xhci: Fix unbounded loop in xhci_ring_chain_length() (CVE-2020-14394)
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 9e16c84fbf0f5f14fcf086e2eea666f667a95385)
2022-09-07 17:14:50 +08:00
openeuler-ci-bot
aa4df0f67c
!637 [sync] PR-634: fix CVE-2022-0216 (openeuler !332)
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-09-01 03:31:52 +00:00
yezengruan
4da9c8cdcc fix CVE-2022-0216 (openeuler !332)
hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
tests/qtest: Add fuzz-lsi53c895a-test
scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 9b71f5aa79cf60ef96779e8127429e08af0f3f12)
2022-09-01 09:39:45 +08:00
openeuler-ci-bot
bbe4217cd5
!632 [sync] PR-630: 回合upstream nbd重构后的相关patch
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-08-30 06:03:14 +00:00
Zhang Bo
a0455b1002 backport nbd related patches to avoid vm crash during migration
block-nbd was refacted during release 6.2.0, but we didn't induced
all the needed patches within the 6.2.0 baseline, which leads to
vm crash during migration.
the reasons are as below:
when iothread is configured, the coroutines should get back to
the exact iothread that was out of. But within the 6.2.0 baseline,
patches were missing, nbd related coroutine didn't have its related
aio_context. It in fact get to the mainline aio_context, the mistaken
context leads to vm crash.

(cherry picked from commit 6e9beed308cf3a252419fe8fde37cae3d1f2e281)
2022-08-30 09:22:33 +08:00
openeuler-ci-bot
bffbc39279
!625 Qemu update to version 10:6.2.0-46
From: @yezengruan 
Reviewed-by: @aven6 
Signed-off-by: @aven6
2022-08-25 09:12:04 +00:00
yezengruan
a6c5c96c0b Qemu update to version 10:6.2.0-46
vhost-user: remove VirtQ notifier restore
vhost-user: fix VirtQ notifier cleanup
enable vDPA build params
Provides qemu-kvm for upgrade

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-08-25 14:50:16 +08:00
openeuler-ci-bot
0c70c970ee
!621 [sync] PR-619: Qemu update to version 6.2.0-45
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-08-12 01:52:53 +00:00
yezengruan
4fd1515e26 Qemu update to version 6.2.0-45
numa: Enable numa for SGX EPC sections
target/ppc: enhance error handling in kvmppc_read_int*
fix pointer double free in func qemu_savevm_state_complete_precopy_non_iterable

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit bb777b4dcec9cce839f38c256bf8f3856eb859e4)
2022-08-11 19:54:57 +08:00
openeuler-ci-bot
8cd3448068
!614 [sync] PR-612: add Requires libgcc
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-07-26 10:50:24 +00:00
yezengruan
1862863088 add Requires libgcc
(cherry picked from commit 56beae0617d658b8100fabcf91bed5568e4a8b99)
2022-07-26 17:00:21 +08:00
openeuler-ci-bot
58bcfe8b21
!606 [sync] PR-604: fix CVE-2022-35414
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-07-20 02:20:40 +00:00
cenhuilin
8efe99aebf fix CVE-2022-35414
(cherry picked from commit 5054179fc589c666ff10a561931eae09c34902f7)
2022-07-20 09:01:07 +08:00
openeuler-ci-bot
9f67245eaf
!602 [sync] PR-600: Fix CVE-2022-0358 and CVE-2021-4158
From: @openeuler-sync-bot 
Reviewed-by: @ooorz 
Signed-off-by: @ooorz
2022-07-13 11:45:43 +00:00
l00500761
6112b46845 Fix CVE-2022-0358 and CVE-2021-4158
(cherry picked from commit 8b199ba599c28c4071f46b4c11cc0b3f22bc4f09)
2022-07-13 15:31:23 +08:00
openeuler-ci-bot
8a2f34dc29
!596 [sync] PR-595: hw/nvme: fix CVE-2021-3929 (openeuler !313)
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-06-23 06:06:47 +00:00
yezengruan
3e2d31c28e hw/nvme: fix CVE-2021-3929 (openeuler !313)
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 36eaeb0b27e6170738b08a7dd0624849b8911e37)
2022-06-23 09:58:42 +08:00
openeuler-ci-bot
11807058ca
!593 [sync] PR-592: spec: Add qemu-system-riscv rpm package
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-06-21 06:07:05 +00:00
saarloos
4b76d42c1b Add riscv rpm include qemu-system-riscv32 and qemu-system-riscv64
(cherry picked from commit 1bf06bf4adb1724c6cdc1865b639bb7abc5b5e63)
2022-06-21 09:21:13 +08:00
openeuler-ci-bot
a2b7ae37d2
!591 fix CVE-2021-3611
From: @bobychen 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-06-14 09:05:31 +00:00
bobychen
78cfb1e61d fix CVE-2021-3611
Signed-off-by: yezengruan <yezengruan@huawei.com>
Signed-off-by: bobychen <boby.chen@huawei.com>
2022-06-11 10:34:14 +08:00
openeuler-ci-bot
5a4664d64d
!584 [sync] PR-581: fix CVE-2021-3507 and fix -acpitable regression (openeuler !300!301)
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-06-02 09:26:26 +00:00
yezengruan
ed3dcd58ca fix CVE-2021-3507 and fix -acpitable regression (openeuler !300!301)
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit ba8cdf7ac04fdc9e6d55cbf5e0b86b736ec57096)
2022-06-02 10:31:20 +08:00
openeuler-ci-bot
dbaa0de557
!582 [sync] PR-566: 增加system-aarch64 system-arm system-x86_64包生成
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-06-02 02:30:30 +00:00
saarloos
d8d794f51c add qemu-system-x86_64 qemu-system-arm qemu-system-aarch64 rpm
(cherry picked from commit 666acae1c364d7d82200bb32f8d3386528b99a4a)
2022-05-31 21:25:50 +08:00
openeuler-ci-bot
0b3e30e4ba
!580 [sync] PR-574: spec中删除不需要的依赖包
From: @openeuler-sync-bot 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan
2022-05-30 10:30:26 +00:00
Jun Yang
b88add3eb3 qemu: remove unnecessary dependency of kernel package
Signed-off-by: Jun Yang <jun.yang@suse.com>
(cherry picked from commit d9686f6f3e83d37662bd9202a8a69dbefc8f6094)
2022-05-30 15:13:37 +08:00
openeuler-ci-bot
9d3d091f41
!573 [sync] PR-571: fix CVE-2021-3750 (openeuler !293)
From: @openeuler-sync-bot 
Reviewed-by: @kevinzhu1 
Signed-off-by: @kevinzhu1
2022-05-24 02:23:45 +00:00
yezengruan
081694dc6b fix CVE-2021-3750 (openeuler !293)
hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
softmmu/physmem: Simplify flatview_write and address_space_access_valid
softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR

(cherry picked from commit b39643dc6ee4fab61b1d840a1124cb407c7c0af1)
2022-05-23 20:38:59 +08:00
openeuler-ci-bot
5242ceff08
!556 [sync] PR-553: fix CVE-2021-4207 and CVE-2021-4206 (openeuler !287)
From: @openeuler-sync-bot 
Reviewed-by: @kevinzhu1 
Signed-off-by: @kevinzhu1
2022-05-12 11:32:53 +00:00
yezengruan
98f1919458 fix CVE-2021-4207 and CVE-2021-4206 (openeuler !287)
display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)

(cherry picked from commit dec7c9d2cf2df71421daaaffbda4f42a885adcc0)
2022-05-11 17:01:13 +08:00
openeuler-ci-bot
b55069e04e
!552 [sync] PR-549: spec文件changelog格式更新
From: @openeuler-sync-bot 
Reviewed-by: @kevinzhu1 
Signed-off-by: @kevinzhu1
2022-05-05 09:43:53 +00:00
yezengruan
b1c6ee74df update changelog
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit af63dcf8b243999a83db1a9e7f7c1790603e1b48)
2022-05-05 15:57:06 +08:00
openeuler-ci-bot
d3b19f690f
!548 [sync] PR-546: vfio/pci: Ascend710 change to bar2 quirk
From: @openeuler-sync-bot 
Reviewed-by: @kevinzhu1 
Signed-off-by: @kevinzhu1
2022-05-04 02:46:08 +00:00
yezengruan
dc36d8b306 vfio/pci: Ascend710 change to bar2 quirk
Change Ascend710's quirk regions to bar2 for internal causes.
And support Ascend710 2P format now.

Signed-off-by: Wu Binfeng <wubinfeng@huawei.com>
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit ce1ce575d621f918d1719f8d2fadbbcc68260ada)
2022-04-27 14:52:25 +08:00
openeuler-ci-bot
95e6194f9f
!544 fix CVE-2022-26354 and CVE-2022-26353
From: @yezengruan 
Reviewed-by: @kevinzhu1 
Signed-off-by: @kevinzhu1
2022-04-16 01:16:03 +00:00
yezengruan
d19e0bfda9 fix CVE-2022-26354 and CVE-2022-26353
vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
virtio-net: fix map leaking on error during receive (CVE-2022-26353)

Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-15 17:27:48 +08:00
openeuler-ci-bot
e1203213b4
!536 [sync] PR-523: spec: Update release version with !273
From: @openeuler-sync-bot 
Reviewed-by: @kevinzhu1 
Signed-off-by: @kevinzhu1
2022-04-11 01:50:58 +00:00
yezengruan
01c7174a9f spec: Update release version with !273
fix some IO hang bugs

Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit e8aae2239ba7269ffa38ebf99c2dd01d39a016b6)
2022-04-09 15:28:46 +08:00
yezengruan
0b17689cb3 fix some IO hang bugs
scsi-bus: fix incorrect call for blk_error_retry_reset_timeout()
Revert "monitor: limit io error qmp event to at most once per 60s"

Signed-off-by: Yan Wang <wangyan122@huawei.com>
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit 054b20fa4e67f996662bcb8cf12c305bcea83303)
2022-04-09 15:28:46 +08:00
openeuler-ci-bot
80a52623c8
!513 qemu-img create: 'cache' paramter only use for reg file image
From: @caojinhuahw 
Reviewed-by: @sujerry1991, @imxcc 
Signed-off-by: @imxcc
2022-03-25 02:44:12 +00:00
Jinhua Cao
e6b080ac1b qemu-img create: cache paramter only use for reg file image
The paramter 'cache' is invalid for host device(/dev/xxx). If
'qemu-img create' operator performed on host device, the host
device not support 'cache' would result 'qemu-img create excute'
failed.

Signed-off-by: Jinhua Cao <caojinhua1@huawei.com>
2022-03-25 09:42:57 +08:00
openeuler-ci-bot
90ca3e03b4
!506 【6.2.0】增加qemu-hw-usb-host rpm包
From: @sujerry1991 
Reviewed-by: @imxcc 
Signed-off-by: @imxcc
2022-03-24 14:13:54 +00:00
Yan Wang
513c8cd566 spec: add hw-usb-host rpm package
Signed-off-by: Yan Wang <wangyan122@huawei.com>
2022-03-24 21:27:17 +08:00
openeuler-ci-bot
171bef105c
!498 [sync] PR-492/497: spec: Update release version with !266 and support sw64
From: @yezengruan 
Reviewed-by: @imxcc 
Signed-off-by: @imxcc
2022-03-18 12:30:34 +00:00
yezengruan
62e9a21b5b spec: Update release version with !266 and support sw64
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-03-18 17:33:56 +08:00
jiang-dawei15
0a27da9d7f coro: support live patch for libcare
Description:
For coroutine live patch, we need find all coroutines stack and check them
before patching. There is no structure to manage all coroutines in qemu. So we
add a list which contain all running coroutines to accelerate libcare live
patch.

Signed-off-by: jiang-dawei15 <jiangdawei15@huawei.com>
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-03-18 17:33:43 +08:00
yezengruan
518ee8d115 add patch for sw64 support
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-03-18 17:33:24 +08:00