Commits · v2.5.1.1 · Paolo Bonzini / QEMU · GitLab

May 09, 2016
- Update version for 2.5.1.1 release · db51dfc1
  Michael Roth authored May 09, 2016
  View commits for tag v2.5.1.1 v2.5.1.1
  db51dfc1
- cadence_uart: bounds check write offset · 5b7236f7
  MST authored Apr 18, 2016
  5b7236f7
- Revert "ehci: make idt processing more robust" · 0bcdb632
  Gerd Hoffmann authored Apr 18, 2016
  0bcdb632
- ehci: apply limit to iTD/sidt descriptors · 706bab67
  Gerd Hoffmann authored Apr 18, 2016
  706bab67
- vga: make sure vga register setup for vbe stays intact (CVE-2016-3712). · 44b86aa3
  Gerd Hoffmann authored Apr 26, 2016
  44b86aa3
- vga: update vga register setup on vbe changes · a6e5e5dd
  Gerd Hoffmann authored Apr 26, 2016
  a6e5e5dd
- vga: factor out vga register setup · 2f2f74e8
  Gerd Hoffmann authored Apr 26, 2016
  2f2f74e8
- vga: add vbe_enabled() helper · 46aff2c7
  Gerd Hoffmann authored Apr 26, 2016
  46aff2c7
- vga: fix banked access bounds checking (CVE-2016-3710) · 4f0323d2
  Gerd Hoffmann authored Apr 26, 2016
  4f0323d2
Mar 29, 2016
- Update version for 2.5.1 release · a58047f7
  Michael Roth authored Mar 29, 2016
  View commits for tag v2.5.1 v2.5.1
  a58047f7
Mar 22, 2016
- hyperv: cpu hotplug fix with HyperV enabled · 5f409b10
  Denis Lunev authored Feb 22, 2016
  5f409b10
- vmdk: Fix converting to streamOptimized · 078de118
  Fam Zheng authored Jan 25, 2016
  078de118
- vmdk: Create streamOptimized as version 3 · acea76c1
  Fam Zheng authored Sep 17, 2015
  acea76c1
- usb: check USB configuration descriptor object · 80b6e572
  Prasad J Pandit authored Feb 11, 2016
  80b6e572
- usb: check RNDIS message length · 9bddb45d
  Prasad J Pandit authored Feb 17, 2016
  9bddb45d
- usb: check RNDIS buffer offsets & length · e3a2cdfc
  Prasad J Pandit authored Feb 17, 2016
  e3a2cdfc
- usb: check page select value while processing iTD · 4dcd2f13
  Prasad J Pandit authored Jan 20, 2016
  4dcd2f13
- net: ne2000: fix bounds check in ioport operations · 38e09211
  Prasad J Pandit authored Dec 31, 2015
  38e09211
- net: check packet payload length · d0ee85b4
  Prasad J Pandit authored Mar 02, 2016
  d0ee85b4
- ide: ahci: reset ncq object to unused on error · 4f046a6b
  Prasad J Pandit authored Jan 11, 2016
  4f046a6b
- i386: avoid null pointer dereference · b47809c6
  Prasad Pandit authored Dec 18, 2015
  b47809c6
- hmp: fix sendkey out of bounds write (CVE-2015-8619) · 24fe899c
  Wolfgang Bumiller authored Jan 13, 2016
  24fe899c
- ahci: Do not unmap NULL addresses · aaf4fb6a
  John Snow authored Feb 10, 2016
  aaf4fb6a
- migration: allow machine to enforce configuration section migration · a2ae1688
  Greg Kurz authored Feb 18, 2016
  a2ae1688
Mar 17, 2016
- vl.c: Fix regression in machine error message · bad094d5
  Marcel Apfelbaum authored Feb 12, 2016
  bad094d5
- quorum: Fix crash in quorum_aio_cb() · 4b0b1ec8
  Alberto Garcia authored Mar 10, 2016
  4b0b1ec8
- target-arm: Make reserved ranges in ID_AA64* spaces RAZ, not UNDEF · cab1cc72
  Peter Maydell authored Feb 19, 2016
  cab1cc72
- vhost-user: don't merge regions with different fds · 9ae02175
  MST authored Feb 21, 2016
  9ae02175
- fw_cfg: unbreak migration compatibility for 2.4 and earlier machines · 30929793
  Laszlo Ersek authored Feb 18, 2016
  30929793
- hw/virtio: group virtio flags into an enum · c5c9841c
  Marcel Apfelbaum authored Feb 10, 2016
  c5c9841c
- hw/virtio: fix double use of a virtio flag · 6b62303e
  Marcel Apfelbaum authored Feb 10, 2016
  6b62303e
- spapr: skip configuration section during migration of older machines · c06f3420
  Greg Kurz authored Feb 18, 2016
  c06f3420
- e1000: eliminate infinite loops on out-of-bounds transfer start · cb873eaa
  Laszlo Ersek authored Jan 19, 2016
  cb873eaa
- block: qemu-iotests - add test for snapshot, commit, snapshot bug · 4853a5a8
  Jeff Cody authored Feb 01, 2016
  4853a5a8
- block: set device_list.tqe_prev to NULL on BDS removal · a375e0b0
  Jeff Cody authored Feb 01, 2016
  a375e0b0
- qmp: Fix reference-counting of qnull on empty output visit · a38a283f
  Eric Blake authored Jan 29, 2016
  a38a283f
- cpus: use broadcast on qemu_pause_cond · 225d50fb
  Dr. David Alan Gilbert authored Jan 25, 2016
  225d50fb
- fw_cfg: avoid calculating invalid current entry pointer · 020282d3
  Gabriel L. Somlo authored Nov 05, 2015
  020282d3
- s390x/css: fix control flags during csch · 091af181
  Halil Pasic authored Jan 20, 2016
  091af181
- s390x/ioinst: set type and len for SEI response · d9839237
  Pierre Morel authored Jan 14, 2016
  d9839237