adding Irix (and, to a lesser extent, Solaris) userland emulation to QEMU
Go to file
David S. Ahern 4ab4183d76 segfault due to buffer overrun in usb-serial
This fixes a segfault due to buffer overrun in the usb-serial device.
The memcpy was incrementing the start location by recv_used yet, the
computation of first_size (how much to write at the end of the buffer
before wrapping to the front) was not accounting for it. This causes the
next element after the receive buffer (recv_ptr) to get overwritten with
random data.

Signed-off-by: David Ahern <daahern@cisco.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
2010-02-10 12:45:11 -06:00
QMP QMP: BLOCK_IO_ERROR event handling 2010-02-10 11:57:02 -06:00
audio audio: include more information into audio_bug's output 2010-01-17 02:03:30 +03:00
block qcow2: Fix signedness bugs 2010-02-10 11:56:57 -06:00
bsd-user bsd/darwin-user: mmap_frag() users only check for -1 error 2010-01-31 13:41:07 +00:00
darwin-user bsd/darwin-user: mmap_frag() users only check for -1 error 2010-01-31 13:41:07 +00:00
default-configs Add support for S390x system emulation 2009-12-05 17:36:05 +01:00
docs docs: New qdev-device-use.txt 2010-01-13 17:14:16 -06:00
fpu arm host: fix compiler warning 2010-02-06 23:16:05 +01:00
gdb-xml
hw segfault due to buffer overrun in usb-serial 2010-02-10 12:45:11 -06:00
linux-user linux-user: adapt uname machine to emulated CPU 2010-02-06 17:19:43 +01:00
net Fix BSD build 2010-01-27 17:47:33 +00:00
pc-bios Sparc32: Update OpenBIOS image to r666 2010-01-17 20:36:13 +00:00
roms seabios: use correct submodule hash 2010-02-03 12:36:25 -06:00
slirp Do not use dprintf 2010-02-07 02:03:50 +03:00
target-alpha kill regs_to_env and env_to_regs 2010-01-19 16:31:02 -06:00
target-arm target-arm: refactor cp15.c13 register access 2010-02-06 17:19:43 +01:00
target-cris cris: Prettify register dumps. 2010-01-31 11:26:54 +01:00
target-i386 Merge remote branch 'qemu-kvm/uq/master' into staging-tmp 2010-02-08 10:06:54 -06:00
target-m68k kill regs_to_env and env_to_regs 2010-01-19 16:31:02 -06:00
target-microblaze kill regs_to_env and env_to_regs 2010-01-19 16:31:02 -06:00
target-mips target-mips: don't call cpu_loop_exit() from helper.c 2010-02-06 17:23:33 +01:00
target-ppc target-ppc: change DCR helpers to target_long arguments 2010-02-06 17:14:24 +01:00
target-s390x kill regs_to_env and env_to_regs 2010-01-19 16:31:02 -06:00
target-sh4 target-sh4: MMU: separate execute and read/write permissions 2010-02-09 21:08:06 +01:00
target-sparc sparc32 don't mark page dirty when failing 2010-01-31 07:49:26 +00:00
tcg tcg/mips: fix crash in tcg_out_qemu_ld() 2010-02-09 22:54:22 +01:00
tests Use vpath directive 2010-01-08 09:58:40 -06:00
.gitignore Documentation: Add build support for documentation in pdf format 2010-02-10 11:56:56 -06:00
.gitmodules Switch pc bios from pc-bios to seabios 2009-10-30 09:42:36 -05:00
CODING_STYLE Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
COPYING
COPYING.LIB
Changelog Update version and changelog to sync with stable branch 2009-12-19 08:26:03 -06:00
LICENSE
MAINTAINERS Update MAINTAINERS 2010-02-06 19:24:42 +01:00
Makefile Documentation: Add build support for documentation in pdf format 2010-02-10 11:56:56 -06:00
Makefile.hw Use vpath directive 2010-01-08 09:58:40 -06:00
Makefile.objs virtio-console: Rename virtio-serial.c back to virtio-console.c 2010-01-26 15:42:02 -06:00
Makefile.target linux-user: adapt uname machine to emulated CPU 2010-02-06 17:19:43 +01:00
Makefile.user Use vpath directive 2010-01-08 09:58:40 -06:00
README
TODO
VERSION Update version and changelog to sync with stable branch 2009-12-19 08:26:03 -06:00
a.out.h
acl.c
acl.h
aes.c
aes.h
aio.c Add qemu_aio_process_queue() 2009-10-27 12:28:59 -05:00
alpha-dis.c
alpha.ld
arm-dis.c bdf: Remove last users of FALSE/TRUE 2009-10-05 09:32:44 -05:00
arm-semi.c
arm.ld
async.c Introduce contexts for asynchronous callbacks 2009-10-27 12:28:59 -05:00
balloon.h virtio: Add memory statistics reporting to the balloon driver 2010-01-26 17:08:03 -06:00
block-migration.c Try not to exceed max downtime on stage3 2010-02-09 16:56:14 -06:00
block-migration.h block migration: Report progress also via info migration 2009-12-03 10:48:53 -06:00
block.c block: saner flags filtering in bdrv_open2 2010-02-10 11:57:03 -06:00
block.h block: BLOCK_IO_ERROR QMP event 2010-02-10 11:57:03 -06:00
block_int.h Count dirty blocks and expose an API to get dirty count 2010-02-09 16:56:14 -06:00
bswap.h
bt-host.c
bt-host.h
bt-vhci.c
buffered_file.c Do not use dprintf 2010-02-07 02:03:50 +03:00
buffered_file.h
cache-utils.c
cache-utils.h
check-qdict.c QDict: Fix size update 2009-12-18 11:26:27 -06:00
check-qfloat.c Add unit test for QFloat 2009-11-17 08:49:38 -06:00
check-qint.c
check-qjson.c Add test suite for json marshalling 2009-11-17 08:49:40 -06:00
check-qlist.c Introduce QList unit-tests 2009-10-08 21:17:18 -05:00
check-qstring.c utests: Add qstring_from_substr() unit-test 2009-12-03 09:41:19 -06:00
cmd.c Fix OpenBSD build of qemu-io 2009-11-21 09:06:46 +00:00
cmd.h
cocoa.m Cocoa: Use optimized drawing for the window 2010-01-07 10:57:34 +03:00
config.h Makefile dependencies for device configs 2009-11-22 21:24:54 +00:00
configure configure: fix the static compilation for sdl 2010-02-08 12:29:20 +01:00
console.c vc: colorize chardev title line with blue background. 2009-12-12 07:59:42 -06:00
console.h VNC: Convert do_info_vnc() to QObject 2009-12-12 07:59:49 -06:00
cpu-all.h kvm: Flush coalesced MMIO buffer periodly 2010-02-03 19:47:33 -02:00
cpu-common.h qemu: memory notifiers 2010-02-09 16:56:13 -06:00
cpu-defs.h KVM: Move and rename regs_modified 2010-02-03 19:47:34 -02:00
cpu-exec.c avoid unreachable statement after break 2010-01-19 16:31:03 -06:00
create_config Configurable block format whitelist 2009-11-09 08:43:02 -06:00
cris-dis.c bdf: Remove last users of FALSE/TRUE 2009-10-05 09:32:44 -05:00
curses.c Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
curses_keys.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
cutils.c
d3des.c
d3des.h
def-helper.h
device_tree.c
device_tree.h
dis-asm.h bdf: Remove last users of FALSE/TRUE 2009-10-05 09:32:44 -05:00
disas.c sh4 disasm fixes 2009-11-14 01:19:12 +01:00
disas.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
dma-helpers.c Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
dma.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
dyngen-exec.h S/390 fake TCG implementation 2009-12-05 17:36:00 +01:00
elf.h tcg-i386: Implement small forward branches. 2010-02-06 22:23:39 +01:00
envlist.c
envlist.h
exec-all.h tcg: increase TCG_MAX_OP_SIZE to 192 2009-12-01 00:06:15 +00:00
exec.c kvm: move kvm to use memory notifiers 2010-02-09 16:56:13 -06:00
feature_to_c.sh
gdbstub.c target-m68k: fix a typo in 'P' packet processing 2010-01-14 20:00:23 +01:00
gdbstub.h
gen-icount.h target-arm: remove cpu_T for ARM once and for all 2009-10-17 23:52:18 +02:00
host-utils.c
host-utils.h target-alpha: Fix generic ctz64. 2009-12-17 18:12:04 +01:00
hostregs_helper.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
hpet.h
hppa-dis.c
hppa.ld
hxtool
i386-dis.c
i386.ld Fix missing symbols in .rel/.rela.plt sections 2010-02-06 22:22:27 +01:00
ia64.ld
input.c move kbd/mouse handling to input.c 2010-01-13 17:14:14 -06:00
ioport-user.c Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
ioport.c Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
ioport.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
json-lexer.c Add a lexer for JSON 2009-11-17 08:49:39 -06:00
json-lexer.h Add a lexer for JSON 2009-11-17 08:49:39 -06:00
json-parser.c json-parser: remove dead increment 2010-01-13 17:14:15 -06:00
json-parser.h Add a JSON parser 2009-11-17 08:49:39 -06:00
json-streamer.c Add a JSON message boundary identifier 2009-11-17 08:49:39 -06:00
json-streamer.h Add a JSON message boundary identifier 2009-11-17 08:49:39 -06:00
keymaps.c Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
keymaps.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
kvm-all.c kvm: reduce code duplication in config_iothread 2010-02-10 12:45:04 -06:00
kvm.h kvm: move kvm to use memory notifiers 2010-02-09 16:56:13 -06:00
libfdt_env.h
linux-aio.c linux-aio: Honour AsyncContext 2009-10-27 12:28:59 -05:00
m68k-dis.c
m68k-semi.c Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
m68k.ld
microblaze-dis.c microblaze: Update disasm to latest GPLv2 version. 2009-12-10 12:33:49 +01:00
migration-exec.c Do not use dprintf 2010-02-07 02:03:50 +03:00
migration-fd.c Do not use dprintf 2010-02-07 02:03:50 +03:00
migration-tcp.c Do not use dprintf 2010-02-07 02:03:50 +03:00
migration-unix.c Do not use dprintf 2010-02-07 02:03:50 +03:00
migration.c Do not use dprintf 2010-02-07 02:03:50 +03:00
migration.h monitor: convert do_migrate_set_downtime() to QObject 2010-02-03 12:36:26 -06:00
mips-dis.c
mips.ld
module.c
module.h
monitor.c QMP: BLOCK_IO_ERROR event handling 2010-02-10 11:57:02 -06:00
monitor.h QMP: BLOCK_IO_ERROR event handling 2010-02-10 11:57:02 -06:00
nbd.c
nbd.h
net-checksum.c
net.c default devices: network 2009-12-12 07:59:43 -06:00
net.h net: add API to disable/enable polling 2010-01-08 09:58:40 -06:00
osdep.c fix placement of config-host.h inclusion 2010-02-10 11:56:56 -06:00
osdep.h qdev: move DO_UPCAST() into osdep.h 2009-12-03 09:41:29 -06:00
path.c path.c fix warning with _FORTIFY_SOURCE 2009-12-25 18:19:15 +00:00
pci-ids.txt
posix-aio-compat.c posix-aio-compat.c: fix warning with _FORTIFY_SOURCE 2010-01-26 14:59:19 -06:00
ppc-dis.c
ppc.ld
ppc64.ld
qbool.c Add a QBool type 2009-11-17 08:49:39 -06:00
qbool.h Add a QBool type 2009-11-17 08:49:39 -06:00
qdict-test-data.txt
qdict.c QDict: New qdict_get_double() 2010-02-03 12:36:25 -06:00
qdict.h QDict: New qdict_get_double() 2010-02-03 12:36:25 -06:00
qemu-aio.h Add qemu_aio_process_queue() 2009-10-27 12:28:59 -05:00
qemu-binfmt-conf.sh target-alpha: Add binfmt entry. 2009-12-13 20:32:36 +01:00
qemu-char.c Do not ignore error, if open file failed (-serial /dev/tty) 2010-02-10 11:56:56 -06:00
qemu-char.h char: Convert qemu_chr_info() to QObject 2009-12-12 07:59:49 -06:00
qemu-common.h block: avoid creating too large iovecs in multiwrite_merge 2010-01-26 17:08:03 -06:00
qemu-config.c rework -monitor handling, switch to QemuOpts 2009-12-12 07:59:43 -06:00
qemu-config.h defaults: update device_list[] 2009-12-18 11:26:27 -06:00
qemu-doc.texi Documentation: Enhance documentation (index, keywords) 2010-02-10 12:44:15 -06:00
qemu-img-cmds.hx qemu-img rebase 2010-01-13 17:14:15 -06:00
qemu-img.c qemu-img: Fix qemu-img can't create qcow image based on read-only image 2010-02-10 11:56:56 -06:00
qemu-img.texi Documentation: Add options to image format descriptions 2009-11-09 08:43:12 -06:00
qemu-io.c block: kill BDRV_O_CREAT 2010-01-26 15:42:02 -06:00
qemu-lock.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
qemu-log.h
qemu-malloc.c Do not abort on qemu_malloc(0) in production builds 2009-12-12 07:59:37 -06:00
qemu-monitor.hx Documentation: Add monitor commands to function index 2010-02-10 12:44:15 -06:00
qemu-nbd.c win32: pair qemu_memalign() with qemu_vfree() 2010-01-26 16:41:06 -06:00
qemu-nbd.texi
qemu-objects.h Introduce qemu-objects.h header file 2009-12-12 07:59:45 -06:00
qemu-option.c qemu-option: Make qemu_opts_foreach() accumulate return values 2010-02-03 12:39:01 -06:00
qemu-option.h Add qemu_opts_validate() for post parsing validation 2009-10-06 14:36:11 -05:00
qemu-options.hx Documentation: Add command line options to function index 2010-02-10 12:44:25 -06:00
qemu-queue.h Import a simple queue implementation from NetBSD 2009-12-03 10:48:52 -06:00
qemu-sockets.c net: inet_strfamily(): Better unknown family report 2010-01-20 08:25:23 -06:00
qemu-tech.texi Documentation: Use UTF-8 encoding and fix one wrong encoding 2010-02-10 12:43:04 -06:00
qemu-thread.c
qemu-thread.h
qemu-timer.h add qemu_get_clock_ns 2010-02-09 16:56:13 -06:00
qemu-tool.c QMP: Asynchronous events infrastructure 2009-12-03 09:41:23 -06:00
qemu.sasl
qemu_socket.h net: Make inet_strfamily() public 2010-01-20 08:25:23 -06:00
qerror.c Revert "QError: New QERR_INVALID_CPU_INDEX" 2010-02-03 12:39:01 -06:00
qerror.h Revert "QError: New QERR_INVALID_CPU_INDEX" 2010-02-03 12:39:01 -06:00
qfloat.c Add a QFloat datatype 2009-11-17 08:49:38 -06:00
qfloat.h Add a QFloat datatype 2009-11-17 08:49:38 -06:00
qint.c
qint.h
qjson.c json: escape u0000 .. u001F when outputting json 2010-01-26 14:54:59 -06:00
qjson.h QJSON: Introduce qobject_from_jsonv() 2009-12-03 09:41:18 -06:00
qlist.c Add operations to qlist to allow it to be used as a stack 2009-11-17 08:49:38 -06:00
qlist.h QList: Introduce QLIST_FOREACH_ENTRY() 2010-01-26 15:42:01 -06:00
qobject.h Introduce QError 2009-12-03 09:41:20 -06:00
qstring.c QString: Introduce qstring_from_substr() 2009-12-03 09:41:19 -06:00
qstring.h QString: Introduce qstring_from_substr() 2009-12-03 09:41:19 -06:00
readline.c cope with printf macro definition in readline.c 2010-02-08 12:12:40 +03:00
readline.h
rules.mak finish VPATH -> vpath translation 2010-01-08 16:55:03 -06:00
s390-dis.c
s390.ld
savevm.c fix savevm command without id or tag 2010-01-26 15:45:06 -06:00
sdl.c win32/sdl: Fix toggle full screen 2010-01-26 16:28:46 -06:00
sdl_keysym.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
sdl_zoom.c
sdl_zoom.h
sdl_zoom_template.h
sh4-dis.c sh4 disasm fixes 2009-11-14 01:19:12 +01:00
softmmu-semi.h
softmmu_defs.h
softmmu_exec.h
softmmu_header.h
softmmu_template.h softmmu: Dont clobber retaddr in slow_ldx(). 2010-01-28 22:46:13 +01:00
sparc-dis.c Sparc: comment out unused variable, spotted by clang 2010-01-13 18:54:54 +00:00
sparc.ld
sparc64.ld
sysemu.h virtio-console: qdev conversion, new virtio-serial-bus 2010-01-20 08:25:23 -06:00
targphys.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
tcg-runtime.c
texi2pod.pl
thunk.c
thunk.h
translate-all.c
uboot_image.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
usb-bsd.c qdev: Replace device names containing whitespace 2009-12-12 07:59:38 -06:00
usb-linux.c Do not use dprintf 2010-02-07 02:03:50 +03:00
usb-stub.c
vgafont.h
vl.c loop write in qemu_event_increment upon EINTR 2010-02-10 11:56:56 -06:00
vnc-auth-sasl.c
vnc-auth-sasl.h
vnc-auth-vencrypt.c
vnc-auth-vencrypt.h
vnc-tls.c
vnc-tls.h
vnc.c vnc: Migrate to using QTAILQ instead of custom implementation 2010-02-10 12:45:05 -06:00
vnc.h vnc: Migrate to using QTAILQ instead of custom implementation 2010-02-10 12:45:05 -06:00
vnc_keysym.h Revert "Get rid of _t suffix" 2009-10-01 16:12:16 -05:00
vnchextile.h vnc: Fix artifacts in hextile decoding 2010-01-07 07:55:34 -06:00
x86_64.ld Fix missing symbols in .rel/.rela.plt sections 2010-02-06 22:22:27 +01:00
x_keymap.c
x_keymap.h

README

Read the documentation in qemu-doc.html.

Fabrice Bellard.