[Qemu-commits] [qemu/qemu] f0180f: s390x/ipl: always load the bios for ccw machine

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: f0180f913e3bcd04cb132f5f6036e823a78e0673
      
https://github.com/qemu/qemu/commit/f0180f913e3bcd04cb132f5f6036e823a78e0673
  Author: Fan Zhang <address@hidden>
  Date:   2015-02-13 (Fri, 13 Feb 2015)

  Changed paths:
    M hw/s390x/ipl.c
    M hw/s390x/s390-virtio-ccw.c
    M hw/s390x/s390-virtio.c
    M hw/s390x/s390-virtio.h

  Log Message:
  -----------
  s390x/ipl: always load the bios for ccw machine

We will need bios support in order to be able to support selecting a
different boot device via diagnose 308 in the ccw machine, so let's
make the bios mandatory for the ccw machine.

Reviewed-by: Cornelia Huck <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Acked-by: Christian Borntraeger <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Fan Zhang <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: df75a4e2c607836eee044d7e6b0d94724d6ebf21
      
https://github.com/qemu/qemu/commit/df75a4e2c607836eee044d7e6b0d94724d6ebf21
  Author: Fan Zhang <address@hidden>
  Date:   2015-02-13 (Fri, 13 Feb 2015)

  Changed paths:
    M hw/s390x/ipl.c
    A hw/s390x/ipl.h
    M hw/s390x/s390-virtio.c
    M target-s390x/misc_helper.c

  Log Message:
  -----------
  s390x/ipl: support diagnose 308 subcodes 5 and 6

To support dynamically updating the IPL device from inside the KVM
guest on the s390 platform, DIAG 308 instruction is intercepted
in QEMU to handle the request.

Subcode 5 allows to specify a new boot device, which is saved for
later in the s390_ipl device. This also allows to switch from an
external kernel to a boot device.

Subcode 6 retrieves boot device configuration that has been previously
set.

Reviewed-by: Cornelia Huck <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Acked-by: Christian Borntraeger <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Fan Zhang <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: e91e972ccfbaeba1d1416202ad1b667810a33e1f
      
https://github.com/qemu/qemu/commit/e91e972ccfbaeba1d1416202ad1b667810a33e1f
  Author: Fan Zhang <address@hidden>
  Date:   2015-02-13 (Fri, 13 Feb 2015)

  Changed paths:
    M hw/s390x/ipl.c
    M hw/s390x/ipl.h
    M target-s390x/kvm.c

  Log Message:
  -----------
  s390x/ipl: drop reipl parameters on resets

Whenever a reboot initiated by the guest is done, the reipl parameters should
remain valid. The disk configured by the guest is to be used for
ipl'ing. External reboot/reset request (e.g. via virsh reset guest) should
completely reset the guest to the initial state, and therefore also reset the
reipl parameters, resulting in an ipl behaviour of the initially configured
guest. This could be an external kernel or a disk.

Reviewed-by: Cornelia Huck <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Acked-by: Christian Borntraeger <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Fan Zhang <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 2e13fbe42d7aed77d1b1c62b342d080c2510af0e
      
https://github.com/qemu/qemu/commit/2e13fbe42d7aed77d1b1c62b342d080c2510af0e
  Author: Fan Zhang <address@hidden>
  Date:   2015-02-13 (Fri, 13 Feb 2015)

  Changed paths:
    M hw/s390x/ipl.c

  Log Message:
  -----------
  s390x/ipl: make s390x ipl device aware of migration

We have to migrate the reipl parameters, so a reboot on the migrated machine
will behave just like on the origin. Otherwise, the reipl parameters configured
by the guest would be lost.

Reviewed-by: Cornelia Huck <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Acked-by: Christian Borntraeger <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Fan Zhang <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: dfebd7a7a9f8435fe5cd6c7d3901091db6322f99
      
https://github.com/qemu/qemu/commit/dfebd7a7a9f8435fe5cd6c7d3901091db6322f99
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/Makefile.objs
    M target-s390x/cpu.h
    M target-s390x/helper.c
    A target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Move mmu_translate() and friends to separate file

helper.c is quite overcrowded already, so let's move the MMU
translation to a separate file instead (like it has been done
with the other targets already).

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Acked-by: Alexander Graf <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 89a41e0a37f3c749f3038ac2544f74257bc7b94d
      
https://github.com/qemu/qemu/commit/89a41e0a37f3c749f3038ac2544f74257bc7b94d
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Fix the check for the real-space designation bit

The real-space designation bits live in the ASCEs, not in the table entries,
so the check must be done before we start walking the MMU table.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: f8f84e93ab6111848cfc83b3d6122573eb03bccf
      
https://github.com/qemu/qemu/commit/f8f84e93ab6111848cfc83b3d6122573eb03bccf
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Fix the handling of the table levels

The current code used a wrong and very confusing way of dealing with
the table levels by introducing a "fake level above current". However,
the real problem was simply that the checks for the region/segment
invalid bit and for the matching region/segment level was done at the
wrong spot in the code - it has to be done after the first table entry
has been looked up instead (e.g. there is also no "invalid" bit in the
ASCE itself and the current "level" has to be the same as the level in
the entry that we just looked up).
Also the entries for the segment table are quite a bit different compared
to the region table entries. So this patch moves the related code into the
function mmu_translate_segment() to make it clear at which table level we
currently are and to get rid of the ugly switch-statement in the function
mmu_translate_region().

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 5d180439d07774c5a2477cf9901c9b51c9edd74b
      
https://github.com/qemu/qemu/commit/5d180439d07774c5a2477cf9901c9b51c9edd74b
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/cpu.h
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Check table length and offset fields

The ACSEs have a table length field and the region entries have
table length and offset fields which must be checked during
translation to see whether the given virtual address is really
covered by the translation table.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: e3e09d87c6e69c2da684d5aacabe3124ebcb6f8e
      
https://github.com/qemu/qemu/commit/e3e09d87c6e69c2da684d5aacabe3124ebcb6f8e
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/cpu.h
    M target-s390x/helper.c
    M target-s390x/mem_helper.c
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Skip exceptions properly when translating addresses for debug

When a fault occurs during the MMU lookup in s390_cpu_get_phys_page_debug(),
the trigger_page_fault() function writes the translation exception code
into the lowcore - something you would not expect during a memory access
by the debugger. Ease this problem by adding an additional parameter to
mmu_translate() which can be used to specify whether a program check and
the translation exception code should be injected or not.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: bab58bf0921ef5da3c5c764920f152ac7c914c41
      
https://github.com/qemu/qemu/commit/bab58bf0921ef5da3c5c764920f152ac7c914c41
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Fix translation exception code in lowcore

The address space bits in the translation exception code were wrong.
In fact, we can simply copy the bits from the PSW, so there's no need
for the trans_bits() function anymore.
Additionally, we now also set the fetch/store bits in the translation
exception code, so a guest can determine whether the exception occured
during a write or during a read.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: d267571be419d389184916b56f862a8f143e67c5
      
https://github.com/qemu/qemu/commit/d267571be419d389184916b56f862a8f143e67c5
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Fix exception types when checking the ASCEs

If an ASCE has illegal bits set, an ASCE-type exception should be
generated instead of a translation specification exception.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 5a123b3c1a1d3540d4455772c42c466870d81061
      
https://github.com/qemu/qemu/commit/5a123b3c1a1d3540d4455772c42c466870d81061
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Fix the exception codes for illegal table entries

Each different level of region/segment table has a dedicated
exception type for illegal entries.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 43d49b0115aef2ead5125d4aa9719852d47ef6fc
      
https://github.com/qemu/qemu/commit/43d49b0115aef2ead5125d4aa9719852d47ef6fc
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/cpu.h
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Add support for read-only regions

If the "DAT-protection" bit is set in the region table entry and EDAT is
enabled, only read accesses are allowed in the corresponding memory area.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: ede59855785f1980be76d9d3b3a727954bfbc461
      
https://github.com/qemu/qemu/commit/ede59855785f1980be76d9d3b3a727954bfbc461
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Renaming related to the ASCE confusion

An Address Space Control Element (ASCE) is only the very first unit of
an s390 address translation (normally residing in one of the control
registers). The entries in the page tables are called differently.
So let's call the relevant variable pt_entry instead of asce in
mmu_translate_pte() to avoid future confusion (thus there is no
functional change in this patch, just renaming).

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: b4ecbf8071022a2042624baaff78cab2bf7e94af
      
https://github.com/qemu/qemu/commit/b4ecbf8071022a2042624baaff78cab2bf7e94af
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/cpu.h
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Check bit 52 in page table entry

Bit 52 in a page table entry has always to be zero, or a translation
specification exception is to be recognized.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 9d77309c9fedca33525cae820b9eff6f35c795f4
      
https://github.com/qemu/qemu/commit/9d77309c9fedca33525cae820b9eff6f35c795f4
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Clean up mmu_translate_asc()

We can get rid of the switch(asc) in mmu_translate_asc() by simply
selecting the right control register ASCE in the mmu_translate()
function already.
This patch is based on an original patch/idea by Ralf Hoppe.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 801cdd355f8bc578f1d02462a91313959e55bee7
      
https://github.com/qemu/qemu/commit/801cdd355f8bc578f1d02462a91313959e55bee7
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/cpu.h
    M target-s390x/kvm.c
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/kvm: Add function for injecting pgm access exceptions

Program access exceptions are defined to deliver a translation exception
code in the low-core. Add a function trigger_access_exception() that
generates the proper program interrupt on both KVM and non-KVM systems
and switch the existing code to use it.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: c3edd62851098e6417786193ed9e9341781fcf57
      
https://github.com/qemu/qemu/commit/c3edd62851098e6417786193ed9e9341781fcf57
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/cpu.h
    M target-s390x/mmu_helper.c

  Log Message:
  -----------
  s390x/mmu: Add function for accessing guest memory

According to the POP specification, the parameter blocks of various
functions like the IO instructions are accessed with logical addresses.
Thus we need a function that can read or write a buffer from/to the
guest's logical address space.

This patch now provides a function that can be used to access virtual
guest memory by using the mmu_translate function of QEMU to convert
the virtual addresses to physical.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: bffd09cd76bc800f466b47d32b35470f9ccef88c
      
https://github.com/qemu/qemu/commit/bffd09cd76bc800f466b47d32b35470f9ccef88c
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M hw/s390x/css.c
    M target-s390x/cpu.h

  Log Message:
  -----------
  s390x/css: Make schib parameter of css_do_msch const

The schib parameter of css_do_msch() can be declared as const to
make it clear that it does not get modified by this function.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Acked-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 14b4e13d4c74f52875d9e1456a126ae076fd2204
      
https://github.com/qemu/qemu/commit/14b4e13d4c74f52875d9e1456a126ae076fd2204
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/ioinst.c

  Log Message:
  -----------
  s390x/ioinst: Rework memory access in MSCH instruction

Change the handler for MSCH to use the new logical memory
access functions.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 234d9b1d3c5a0c87b9f41f7350bcf8c07a992864
      
https://github.com/qemu/qemu/commit/234d9b1d3c5a0c87b9f41f7350bcf8c07a992864
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/ioinst.c

  Log Message:
  -----------
  s390x/ioinst: Rework memory access in SSCH instruction

Change the handler for SSCH to use the new logical memory
access functions.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 57b22fc7920ff1bc40ea7f800a8b83520a1aa244
      
https://github.com/qemu/qemu/commit/57b22fc7920ff1bc40ea7f800a8b83520a1aa244
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/ioinst.c

  Log Message:
  -----------
  s390x/ioinst: Rework memory access in STSCH instruction

Change the handler for STSCH to use the new logical memory
access functions.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 653b080960578c25ed88f7e6c5b7ec65d4fe1648
      
https://github.com/qemu/qemu/commit/653b080960578c25ed88f7e6c5b7ec65d4fe1648
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/ioinst.c
    M target-s390x/ioinst.h
    M target-s390x/kvm.c

  Log Message:
  -----------
  s390x/ioinst: Set condition code in ioinst_handle_tsch() handler

Move the setting of the condition code from kvm.c into the handler
function in ioinst.c itself, just like it has been done with the other
handlers already (TSCH has just not been changed yet since it is called
from a different dispatcher in kvm.c).

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: b7b6348ab433519f16c1500e3ea04805428be91e
      
https://github.com/qemu/qemu/commit/b7b6348ab433519f16c1500e3ea04805428be91e
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M hw/s390x/css.c
    M target-s390x/cpu.h
    M target-s390x/ioinst.c

  Log Message:
  -----------
  s390x/ioinst: Rework memory access in TSCH instruction

Change the TSCH handler to use the new logical memory access functions.
Since the channel should not be updated in case of a protection or access
exception while writing to the guest memory, the css_do_tsch() has to be
split up into two parts, one for retrieving the IRB and one for the update.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 7f74f0aa74a01698ef24459f7bc2a23f3880a2b8
      
https://github.com/qemu/qemu/commit/7f74f0aa74a01698ef24459f7bc2a23f3880a2b8
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M hw/s390x/css.c
    M target-s390x/cpu.h
    M target-s390x/ioinst.c

  Log Message:
  -----------
  s390x/ioinst: Rework memory access in STCRW instruction

Change the handler for STCRW to use the new logical memory access
functions. Since STCRW is suppressed on protection/access exceptions,
we also have to make sure to re-queue the CRW in case it could not be
written to the memory.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 166f1bb7968738490fafc058e4b6505eb78701b6
      
https://github.com/qemu/qemu/commit/166f1bb7968738490fafc058e4b6505eb78701b6
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/ioinst.c

  Log Message:
  -----------
  s390x/ioinst: Rework memory access in CHSC instruction

Change the CHSC handler to correctly use logical addresses, too.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Reviewed-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 7781a492fa5a2eff53d06b25b93f0186ad3226c9
      
https://github.com/qemu/qemu/commit/7781a492fa5a2eff53d06b25b93f0186ad3226c9
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/ioinst.c
    M target-s390x/ioinst.h

  Log Message:
  -----------
  s390x/ioinst: Rework memory access in TPI instruction

Change the handler for TPI to use the new logical memory
access functions.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Acked-by: Cornelia Huck <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 63ceef61ac6cc033d465a6a06d394bcc2854a7b2
      
https://github.com/qemu/qemu/commit/63ceef61ac6cc033d465a6a06d394bcc2854a7b2
  Author: Frank Blaschka <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M hw/s390x/s390-pci-inst.c

  Log Message:
  -----------
  s390x/pci: Rework memory access in zpci instruction

Change zpci instructions to use the new logical memory access
functions.

Signed-off-by: Frank Blaschka <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: e95d24ff40c77fbfd71396834a2eb99375f8bcc4
      
https://github.com/qemu/qemu/commit/e95d24ff40c77fbfd71396834a2eb99375f8bcc4
  Author: Thomas Huth <address@hidden>
  Date:   2015-02-18 (Wed, 18 Feb 2015)

  Changed paths:
    M target-s390x/cpu.h
    M target-s390x/helper.c

  Log Message:
  -----------
  s390x/helper: Remove s390_cpu_physical_memory_map

The function is now not used anymore, so it can be removed safely.

Signed-off-by: Thomas Huth <address@hidden>
Signed-off-by: Jens Freimann <address@hidden>
Acked-by: Cornelia Huck <address@hidden>
Reviewed-by: David Hildenbrand <address@hidden>
Signed-off-by: Christian Borntraeger <address@hidden>


  Commit: 11d39a131020cc5c54ff9bc86d3259f7d32bf849
      
https://github.com/qemu/qemu/commit/11d39a131020cc5c54ff9bc86d3259f7d32bf849
  Author: Peter Maydell <address@hidden>
  Date:   2015-02-26 (Thu, 26 Feb 2015)

  Changed paths:
    M hw/s390x/css.c
    M hw/s390x/ipl.c
    A hw/s390x/ipl.h
    M hw/s390x/s390-pci-inst.c
    M hw/s390x/s390-virtio-ccw.c
    M hw/s390x/s390-virtio.c
    M hw/s390x/s390-virtio.h
    M target-s390x/Makefile.objs
    M target-s390x/cpu.h
    M target-s390x/helper.c
    M target-s390x/ioinst.c
    M target-s390x/ioinst.h
    M target-s390x/kvm.c
    M target-s390x/mem_helper.c
    M target-s390x/misc_helper.c
    A target-s390x/mmu_helper.c

  Log Message:
  -----------
  Merge remote-tracking branch 'remotes/borntraeger/tags/s390x-20150218' into 
staging

Features for s390x/kvm

1. guest reIPL changes (Fan Zhang)
Implements subcode 5 and 6 of diag 0x308. This allows to use
/sys/firmware/[re]ipl/ccw/* and the chreipl and lsreipl tools in
Linux. In addition to the normal "change the disk" this also
allows to switch from booting an external kernel into rebooting
from a disk.

2. Memory page table walking (Thomas Huth)
Fix several page table walking functions, used in several places
like gdb server and instruction handling. Also use these functions
in several I/O related functions.

# gpg: Signature made Wed Feb 18 09:13:22 2015 GMT using RSA key ID B5A61C7C
# gpg: Good signature from "Christian Borntraeger (IBM) <address@hidden>"

* remotes/borntraeger/tags/s390x-20150218: (29 commits)
  s390x/helper: Remove s390_cpu_physical_memory_map
  s390x/pci: Rework memory access in zpci instruction
  s390x/ioinst: Rework memory access in TPI instruction
  s390x/ioinst: Rework memory access in CHSC instruction
  s390x/ioinst: Rework memory access in STCRW instruction
  s390x/ioinst: Rework memory access in TSCH instruction
  s390x/ioinst: Set condition code in ioinst_handle_tsch() handler
  s390x/ioinst: Rework memory access in STSCH instruction
  s390x/ioinst: Rework memory access in SSCH instruction
  s390x/ioinst: Rework memory access in MSCH instruction
  s390x/css: Make schib parameter of css_do_msch const
  s390x/mmu: Add function for accessing guest memory
  s390x/kvm: Add function for injecting pgm access exceptions
  s390x/mmu: Clean up mmu_translate_asc()
  s390x/mmu: Check bit 52 in page table entry
  s390x/mmu: Renaming related to the ASCE confusion
  s390x/mmu: Add support for read-only regions
  s390x/mmu: Fix the exception codes for illegal table entries
  s390x/mmu: Fix exception types when checking the ASCEs
  s390x/mmu: Fix translation exception code in lowcore
  ...

Signed-off-by: Peter Maydell <address@hidden>


Compare: https://github.com/qemu/qemu/compare/c5c6d7f81a69...11d39a131020