[Qemu-stable] [000/108] Patch Round-up for stable 2.0.1, freeze on 2014-08-12

[Michael Roth]

Hi everyone,

The following new patches are queued for QEMU stable v2.0.1:

  https://github.com/mdroth/qemu/commits/stable-2.0-staging

The release is planned for 2014-08-15:

  http://wiki.qemu.org/Planning/2.0

Please respond here or CC address@hidden on any patches you
think should be included in the release.

Due to delays, this is the final planned release for the 2.0.0 series.
We will return to the standard 2-release cycle for 2.1 (one midway
during 2.2 development cycle, one immediately following 2.2 release)

Testing/feedback is greatly appreciated.

Thanks!

----------------------------------------------------------------
Alex Bennée (1):
      target-arm: A64: fix unallocated test of scalar SQXTUN

Alexander Graf (2):
      KVM: Fix GSI number space limit
      virtio-serial: don't migrate the config space

Alexey Kardashevskiy (1):
      spapr_pci: Fix number of returned vectors in ibm, change-msi

Amos Kong (1):
      qdev: Fix crash by validating the object type

Andreas Färber (2):
      sdhci: Fix misuse of qemu_free_irqs()
      hw: Fix qemu_allocate_irqs() leaks

Andrew Oates (1):
      input (curses): mask keycodes to remove modifier bits

Benoît Canet (1):
      block: Prevent coroutine stack overflow when recursing in 
bdrv_open_backing_file.

Chen Gang (2):
      arch_init: Be sure of only one exit entry with DPRINTF() for ram_load()
      kvm-all: Use 'tmpcpu' instead of 'cpu' in sub-looping to avoid 'cpu' be 
NULL

ChenLiang (1):
      migration: remove duplicate code

Christian Borntraeger (1):
      s390x/kvm: rework KVM synchronize to tracing for some ONEREGS

Cornelia Huck (1):
      s390x/css: handle emw correctly for tsch

Cédric Le Goater (1):
      virtio-net: byteswap virtio-net header

David Hildenbrand (1):
      s390x: empty function stubs in preparation for __KVM_HAVE_GUEST_DEBUG

Don Slutz (1):
      pc: make isapc and pc-0.10 to pc-0.13 have 1.7.0 memory layout

Dr. David Alan Gilbert (1):
      Allow mismatched virtio config-len

Edgar E. Iglesias (2):
      target-arm: A64: Handle blr lr
      target-arm: Make vbar_write 64bit friendly on 32bit hosts

Eduardo Habkost (3):
      q35: Use PC_Q35_COMPAT_1_4 on pc-q35-1.4 compat_props
      target-i386: Make TCG feature filtering more readable
      target-i386: Filter FEAT_7_0_EBX TCG features too

Gabriel L. Somlo (1):
      SMBIOS: Rename symbols to better reflect future use

Gonglei (1):
      qga: Fix handle fd leak in acquire_privilege()

Hani Benhabiles (5):
      usb: Fix usb-bt-dongle initialization.
      nbd: Don't export a block device with no medium.
      nbd: Don't validate from and len in NBD_CMD_DISC.
      nbd: Close socket on negotiation failure.
      nbd: Shutdown socket before closing.

Hannes Reinecke (1):
      megasas: Implement LD_LIST_QUERY

Jason J. Herne (1):
      s390x/kvm: synchronize guest floating point registers

KONRAD Frederic (1):
      cadence_uart: check for serial backend before using it.

Kevin Wolf (5):
      qcow1: Make padding in the header explicit
      qcow1: Check maximum cluster size
      qcow1: Validate L2 table size (CVE-2014-0222)
      qcow1: Validate image size (CVE-2014-0223)
      qcow1: Stricter backing file length check

Laszlo Ersek (1):
      vmstate_xhci_event: fix unterminated field list

Le Tan (1):
      pci: assign devfn to pci_dev before calling 
pci_device_iommu_address_space()

Markus Armbruster (12):
      virtio-scsi: Plug memory leak on virtio_scsi_push_event() error path
      qemu-img: Plug memory leak in convert command
      block/sheepdog: Plug memory leak in sd_snapshot_create()
      block/vvfat: Plug memory leak in read_directory()
      block/vvfat: Plug memory leak in check_directory_consistency()
      block/qapi: Plug memory leak in dump_qobject() case QTYPE_QERROR
      blockdev: Plug memory leak in drive_init()
      blockdev: Plug memory leak in blockdev_init()
      qemu-io: Plug memory leak in open command
      block: Plug memory leak on brv_open_image() error path
      qcow2: Plug memory leak on qcow2_invalidate_cache() error paths
      hw: Consistently name Error ** objects errp, and not err

Max Filippov (2):
      target-xtensa: fix cross-page jumps/calls at the end of TB
      hw/xtensa/xtfpga: fix FLASH mapping to boot region for KC705

Michael R. Hines (1):
      rdma: bug fixes

Michael Roth (2):
      virtio: avoid buffer overrun on incoming migration
      openpic: avoid buffer overrun on incoming migration

Michael S. Tsirkin (26):
      vmstate: reduce code duplication
      vmstate: add VMS_MUST_EXIST
      vmstate: add VMSTATE_VALIDATE
      virtio-net: fix buffer overflow on invalid state load
      virtio-net: out-of-bounds buffer write on invalid state load
      virtio-net: out-of-bounds buffer write on load
      ahci: fix buffer overrun on invalid state load
      hpet: fix buffer overrun on invalid state load
      hw/pci/pcie_aer.c: fix buffer overruns on invalid state load
      pl022: fix buffer overun on invalid state load
      vmstate: fix buffer overflow in target-arm/machine.c
      virtio: validate num_sg when mapping
      pxa2xx: avoid buffer overrun on incoming migration
      ssi-sd: fix buffer overrun on invalid state load
      ssd0323: fix buffer overun on invalid state load
      tsc210x: fix buffer overrun on invalid state load
      zaurus: fix buffer overrun on invalid state load
      usb: sanity check setup_index+setup_len in post_load
      virtio-scsi: fix buffer overrun on invalid state load
      acpi: fix tables for no-hpet configuration
      stellaris_enet: block migration
      pci-assign: limit # of msix vectors
      virtio: allow mapping up to max queue size
      vhost: fix resource leak in error handling
      virtio: out-of-bounds buffer write on invalid state load
      virtio: validate config_len on load

Michael Tokarev (2):
      po/Makefile: fix $SRC_PATH reference
      configure: remove bashism

Ming Lei (1):
      virtio-scsi: define dummy handle_output for vhost-scsi vqs

Paolo Bonzini (4):
      target-i386: fix set of registers zeroed on reset
      qdev: reorganize error reporting in bus_set_realized
      qdev: recursively unrealize devices when unrealizing bus
      mc146818rtc: register the clock reset notifier on the right clock

Peter Crosthwaite (1):
      arm: translate.c: Fix smlald Instruction

Peter Lieven (2):
      Revert "qapi: Clean up superfluous null check in qapi_dealloc_type_str()"
      migration: catch unknown flags in ram_load

Peter Maydell (10):
      hw/net/stellaris_enet: Restructure tx_fifo code to avoid buffer overrun
      hw/net/stellaris_enet: Correct handling of packet padding
      linux-user/elfload.c: Fix incorrect ARM HWCAP bits
      linux-user/elfload.c: Update ARM HWCAP bits
      linux-user/elfload.c: Fix A64 code which was incorrectly acting like A32
      linux-user: Don't overrun guest buffer in sched_getaffinity
      target-arm: Fix errors in writes to generic timer control registers
      coroutine-win32.c: Add noinline attribute to work around gcc bug
      hw/misc/imx_ccm.c: Add missing VMState list terminator
      hw/arm/boot: Set PC correctly when loading AArch64 ELF files

Richard Henderson (1):
      tcg-i386: Fix win64 qemu store

Stefan Hajnoczi (1):
      aio: fix qemu_bh_schedule() bh->ctx race condition

Stefan Weil (1):
      cputlb: Fix regression with TCG interpreter (bug 1310324)

Stefano Stabellini (1):
      disas/libvixl: prepend the include path of libvixl header files

Ulrich Obergfell (1):
      scsi-disk: fix bug in scsi_block_new_request() introduced by commit 
137745c

 arch_init.c                     | 110 +++++++++++++++++++++-------------------
 async.c                         |  14 ++++--
 block.c                         |  34 +++++++------
 block/qapi.c                    |   1 +
 block/qcow.c                    |  44 +++++++++++++---
 block/qcow2.c                   |   3 +-
 block/sheepdog.c                |   4 +-
 block/vvfat.c                   |   6 ++-
 blockdev-nbd.c                  |   9 +++-
 blockdev.c                      |   7 ++-
 configure                       |   2 +-
 coroutine-win32.c               |  13 ++++-
 cputlb.c                        |   6 ++-
 disas/Makefile.objs             |   2 +-
 disas/libvixl/Makefile.objs     |   2 +-
 hw/arm/boot.c                   |   8 ++-
 hw/arm/omap1.c                  |  14 +++---
 hw/arm/omap2.c                  |   2 +-
 hw/arm/pxa2xx.c                 |  12 +++--
 hw/arm/spitz.c                  |   4 +-
 hw/arm/z2.c                     |   2 +-
 hw/char/cadence_uart.c          |  15 ++++--
 hw/char/virtio-serial-bus.c     |  16 +++---
 hw/core/irq.c                   |   4 +-
 hw/core/qdev.c                  |  45 +++++++++--------
 hw/display/ssd0323.c            |  24 +++++++++
 hw/dma/omap_dma.c               |   4 +-
 hw/gpio/zaurus.c                |  10 ++++
 hw/i386/acpi-build.c            |   7 +--
 hw/i386/kvm/pci-assign.c        |  12 ++---
 hw/i386/pc.c                    |   2 +-
 hw/i386/pc_piix.c               |  20 +++++---
 hw/i386/pc_q35.c                |  12 ++---
 hw/i386/smbios.c                |  18 ++++---
 hw/ide/ahci.c                   |   2 +-
 hw/ide/microdrive.c             |   2 +-
 hw/input/tsc210x.c              |  12 +++++
 hw/intc/i8259.c                 |   4 +-
 hw/intc/openpic.c               |  16 +++++-
 hw/misc/cbus.c                  |   6 +--
 hw/misc/imx_ccm.c               |   1 +
 hw/net/stellaris_enet.c         |  23 ++++++---
 hw/net/virtio-net.c             |  37 ++++++++++++--
 hw/pci/pci.c                    |   2 +-
 hw/pci/pcie_aer.c               |  10 +++-
 hw/pcmcia/pxa2xx.c              |   2 +-
 hw/ppc/spapr_pci.c              |  15 ++++++
 hw/s390x/css.c                  |  24 +++++++--
 hw/scsi/megasas.c               |  17 +++++++
 hw/scsi/mfi.h                   |   9 ++++
 hw/scsi/scsi-disk.c             |   2 +-
 hw/scsi/vhost-scsi.c            |   8 ++-
 hw/scsi/virtio-scsi.c           |  26 +++++++---
 hw/sd/omap_mmc.c                |   2 +-
 hw/sd/sdhci.c                   |   8 +--
 hw/sd/ssi-sd.c                  |   9 ++++
 hw/sh4/sh7750.c                 |   3 +-
 hw/ssi/pl022.c                  |  14 ++++++
 hw/timer/hpet.c                 |  13 +++++
 hw/timer/i8254.c                |   4 +-
 hw/timer/mc146818rtc.c          |   2 +-
 hw/timer/omap_gptimer.c         |   4 +-
 hw/usb/bus.c                    |   4 +-
 hw/usb/dev-bluetooth.c          |  24 ++++++---
 hw/usb/hcd-xhci.c               |   1 +
 hw/virtio/vhost.c               |  10 ++--
 hw/virtio/virtio.c              |  33 ++++++++++--
 hw/xtensa/xtensa_lx60.c         |   8 +--
 include/hw/i386/smbios.h        |   6 +--
 include/hw/virtio/virtio-net.h  |   4 +-
 include/hw/virtio/virtio-scsi.h |   7 ++-
 include/migration/vmstate.h     |   9 ++++
 kvm-all.c                       |   7 +--
 linux-user/elfload.c            | 117 
+++++++++++++++++++++++++++++++++++-------
 linux-user/syscall.c            |  16 ++++++
 migration-rdma.c                |  20 ++++----
 migration.c                     |   2 +-
 nbd.c                           |   7 +--
 po/Makefile                     |   4 +-
 qapi/qapi-dealloc-visitor.c     |   4 +-
 qdev-monitor.c                  |   2 +-
 qemu-img.c                      |   2 +-
 qemu-io.c                       |   2 +
 qemu-nbd.c                      |   5 +-
 qga/commands-win32.c            |   6 ++-
 target-arm/helper.c             |   8 +--
 target-arm/translate-a64.c      |   5 +-
 target-arm/translate.c          |  34 +++++++++----
 target-i386/cpu.c               |  22 ++++----
 target-i386/cpu.h               |  11 ++--
 target-s390x/kvm.c              | 190 
+++++++++++++++++++++++++++++++++++++++++----------------------------
 target-xtensa/translate.c       |   4 +-
 tcg/i386/tcg-target.c           |   3 +-
 tests/qemu-iotests/092          |  98 ++++++++++++++++++++++++++++++++++++
 tests/qemu-iotests/092.out      |  38 ++++++++++++++
 tests/qemu-iotests/group        |   1 +
 trace-events                    |   5 ++
 ui/curses.c                     |   4 +-
 vmstate.c                       | 117 
+++++++++++++++++++++++-------------------
 99 files changed, 1147 insertions(+), 458 deletions(-)
 create mode 100755 tests/qemu-iotests/092
 create mode 100644 tests/qemu-iotests/092.out