qemu-irix

adding Irix (and, to a lesser extent, Solaris) userland emulation to QEMU

Go to file

Stefan Hajnoczi e4fc8781db qed: fix use-after-free during l2 cache commit QED's metadata caching strategy allows two parallel requests to race for metadata lookup. The first one to complete will populate the metadata cache and the second one will drop the data it just read in favor of the cached data. There is a use-after-free in qed_read_l2_table_cb() and qed_commit_l2_update() where l2_table->offset was used after the l2_table may have been freed due to a metadata lookup race. Fix this by keeping the l2_offset in a local variable and not reaching into the possibly freed l2_table. Reported-by: Amit Shah <amit.shah@redhat.com> Signed-off-by: Stefan Hajnoczi <stefanha@linux.vnet.ibm.com> Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>		2011-10-05 10:52:31 -05:00
QMP	…
audio	Merge remote-tracking branch 'qmp/queue/qmp' into staging	2011-09-20 15:16:00 -05:00
block	qed: fix use-after-free during l2 cache commit	2011-10-05 10:52:31 -05:00
bsd-user	…
darwin-user	Remove blanks before \n in output strings	2011-09-16 08:25:56 -05:00
default-configs	target-xtensa: add target to the configure script	2011-09-10 16:57:36 +00:00
docs	trace: Update docs to use example events that exist	2011-09-21 11:32:37 +01:00
fpu	softfloat: Reinstate accidentally disabled target-specific NaN handling	2011-10-01 06:19:07 +00:00
fsdev	hw/9pfs: Add handle based fs driver	2011-09-22 21:38:53 +05:30
gdb-xml	…
hw	etrax-dma: Remove bogus if statement	2011-10-03 10:20:13 +02:00
libcacard	Silence make if nothing is to do for libcacard	2011-09-21 10:49:38 +01:00
linux-headers	…
linux-user	Merge remote-tracking branch 'riku/linux-user-for-upstream' into staging	2011-09-26 07:59:13 -05:00
net	Allow overriding the location of Samba's smbd.	2011-09-03 17:45:48 +00:00
pc-bios	Add OpenBIOS as a submodule	2011-09-28 20:39:34 +00:00
qapi	…
qga	…
roms	Add OpenBIOS as a submodule	2011-09-28 20:39:34 +00:00
scripts	trace: allow PRI*64 at beginning and ending of format string	2011-09-17 15:14:05 +00:00
slirp	slirp: Fix packet expiration	2011-09-28 13:11:30 +02:00
sysconfigs/target	…
target-alpha	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-arm	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-cris	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-i386	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-lm32	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-m68k	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-microblaze	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-mips	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-ppc	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-s390x	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-sh4	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-sparc	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
target-unicore32	Use hex instead of binary.	2011-09-09 12:58:16 -05:00
target-xtensa	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
tcg	tcg-i386: Introduce limited deposit support	2011-10-01 06:42:46 +00:00
tests	Remove blanks before \n in output strings	2011-09-16 08:25:56 -05:00
trace	trace: use binary file open mode in simpletrace	2011-09-21 11:30:10 +01:00
ui	use qemu_* ctype functions	2011-09-21 11:10:52 +01:00
.gitignore	…
.gitmodules	Add OpenBIOS as a submodule	2011-09-28 20:39:34 +00:00
CODING_STYLE	…
COPYING	…
COPYING.LIB	…
Changelog	…
HACKING	…
LICENSE	…
MAINTAINERS	Merge remote-tracking branch 'pmaydell/omap-for-upstream' into staging	2011-09-26 08:00:00 -05:00
Makefile	Makefile: Remove 'tarbin' target	2011-09-23 13:42:34 -05:00
Makefile.dis	…
Makefile.hw	Makefile.hw: allow hw/ files to include glib headers	2011-09-04 17:46:51 +03:00
Makefile.objs	hw/9pfs: Add handle based fs driver	2011-09-22 21:38:53 +05:30
Makefile.target	build: Move tracing objects into libuser on usermode emulation targets	2011-09-16 08:25:56 -05:00
Makefile.user	build: Move tracing objects into libuser on usermode emulation targets	2011-09-16 08:25:56 -05:00
README	…
TODO	…
VERSION	…
a.out.h	Use new macro QEMU_PACKED for packed structures	2011-09-03 10:45:59 +00:00
acl.c	…
acl.h	…
aes.c	…
aes.h	…
aio.c	…
alpha-dis.c	…
alpha.ld	…
arch_init.c	core: remove qemu_service_io	2011-09-23 10:55:32 -05:00
arch_init.h	target-xtensa: add target stubs	2011-09-10 16:57:36 +00:00
arm-dis.c	…
arm-semi.c	…
arm.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
async.c	async: Allow nested qemu_bh_poll calls	2011-09-06 11:23:51 +02:00
balloon.c	balloon: Disassociate handlers from balloon device on unplug	2011-09-09 12:58:16 -05:00
balloon.h	balloon: Disassociate handlers from balloon device on unplug	2011-09-09 12:58:16 -05:00
bitmap.c	…
bitmap.h	…
bitops.c	…
bitops.h	…
block-migration.c	…
block-migration.h	…
block.c	block: New change_media_cb() parameter load	2011-09-12 15:17:22 +02:00
block.h	block: New change_media_cb() parameter load	2011-09-12 15:17:22 +02:00
block_int.h	block: Move BlockConf & friends from block_int.h to block.h	2011-09-12 15:17:21 +02:00
blockdev.c	ide/atapi scsi-disk: Make monitor eject -f, then change work	2011-09-12 15:17:22 +02:00
blockdev.h	…
bswap.h	bswap.h: build fix	2011-09-16 08:26:31 -05:00
bt-host.c	…
bt-host.h	…
bt-vhci.c	…
buffered_file.c	…
buffered_file.h	…
cache-utils.c	…
cache-utils.h	…
check-qdict.c	…
check-qfloat.c	…
check-qint.c	…
check-qjson.c	Fix qjson test of solidus encoding	2011-09-06 10:15:39 -03:00
check-qlist.c	…
check-qstring.c	…
cmd.c	use qemu_* ctype functions	2011-09-21 11:10:52 +01:00
cmd.h	…
compatfd.c	…
compatfd.h	…
compiler.h	Fix and clean code which tests the gcc version	2011-09-23 11:51:05 -05:00
config.h	…
configure	configure: Detect predefined compiler symbols for ARM and HPPA	2011-10-01 06:13:04 +00:00
console.c	console: Properly switch consoles for screen dumps	2011-09-16 08:25:57 -05:00
console.h	curses: fix garbling when chtype != long	2011-09-09 12:58:16 -05:00
coroutine-gthread.c	…
coroutine-ucontext.c	…
coroutine-win32.c	…
cpu-all.h	Remove qemu_host_page_bits	2011-09-21 10:50:59 +01:00
cpu-common.h	…
cpu-defs.h	…
cpu-exec.c	target-xtensa: implement exceptions	2011-09-10 16:57:38 +00:00
cpus.c	Merge remote-tracking branch 'kwolf/for-anthony' into staging	2011-09-20 15:21:03 -05:00
cpus.h	Move vm_state_notify() prototype from cpus.h to sysemu.h	2011-09-15 16:39:31 -03:00
cris-dis.c	…
cursor.c	…
cursor_hidden.xpm	…
cursor_left_ptr.xpm	…
cutils.c	Fix up some style nits of last uq/master merge	2011-08-25 09:21:35 +01:00
def-helper.h	…
device_tree.c	…
device_tree.h	…
dis-asm.h	…
disas.c	disasm: update comment	2011-08-25 09:21:48 +01:00
disas.h	…
dma-helpers.c	dma-helpers: rewrite completion/cancellation	2011-09-20 12:27:43 +02:00
dma.h	dma-helpers: allow including from target-independent code	2011-09-20 12:27:34 +02:00
dyngen-exec.h	Move GETPC from dyngen-exec.h to exec-all.h	2011-10-01 09:31:43 +00:00
elf.h	target-xtensa: add target stubs	2011-09-10 16:57:36 +00:00
envlist.c	…
envlist.h	…
error.c	…
error.h	…
error_int.h	…
exec-all.h	Move GETPC from dyngen-exec.h to exec-all.h	2011-10-01 09:31:43 +00:00
exec-memory.h	…
exec.c	Move GETPC from dyngen-exec.h to exec-all.h	2011-10-01 09:31:43 +00:00
gdbstub.c	Drop the vm_running global variable	2011-09-15 16:39:32 -03:00
gdbstub.h	…
gen-icount.h	…
hmp-commands.hx	trace: always compile support for controlling and querying trace event states	2011-09-01 10:34:54 +01:00
host-utils.c	…
host-utils.h	Move macro QEMU_GNUC_PREREQ to compiler.h	2011-09-23 11:51:05 -05:00
hpet.h	…
hppa-dis.c	…
hppa.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
i386-dis.c	…
i386.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
ia64-dis.c	…
ia64.ld	…
input.c	…
iohandler.c	iohandlers: fix issue with qemu_set_fd_handler()	2011-09-08 08:06:08 -05:00
ioport-user.c	…
ioport.c	…
ioport.h	…
iorange.h	…
iov.c	…
iov.h	…
json-lexer.c	…
json-lexer.h	…
json-parser.c	…
json-parser.h	…
json-streamer.c	…
json-streamer.h	…
kvm-all.c	Replace the VMSTOP macros with a proper state type	2011-09-15 16:39:32 -03:00
kvm-stub.c	…
kvm.h	…
libfdt_env.h	…
linux-aio.c	linux-aio: remove process requests callback	2011-09-20 14:34:17 +02:00
m68k-dis.c	…
m68k-semi.c	Use new macro QEMU_PACKED for packed structures	2011-09-03 10:45:59 +00:00
m68k.ld	…
memory.c	memory: Print regions in ascending order	2011-10-02 16:27:14 +02:00
memory.h	memory: simple memory tree printer	2011-10-02 16:27:13 +02:00
microblaze-dis.c	…
migration-exec.c	…
migration-fd.c	…
migration-tcp.c	…
migration-unix.c	…
migration.c	Drop the vm_running global variable	2011-09-15 16:39:32 -03:00
migration.h	…
mips-dis.c	Remove blanks before \n in output strings	2011-09-16 08:25:56 -05:00
mips.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
module.c	…
module.h	…
monitor.c	memory: simple memory tree printer	2011-10-02 16:27:13 +02:00
monitor.h	…
nbd.c	nbd: fix non-Linux build failure	2011-09-21 11:34:43 +02:00
nbd.h	nbd: sync API definitions with upstream	2011-09-19 11:34:33 +02:00
net.c	…
net.h	Allow overriding the location of Samba's smbd.	2011-09-03 17:45:48 +00:00
notify.c	…
notify.h	…
os-posix.c	…
os-win32.c	…
osdep.c	…
osdep.h	Move macro QEMU_GNUC_PREREQ to compiler.h	2011-09-23 11:51:05 -05:00
oslib-posix.c	qemu_vmalloc: align properly for transparent hugepages and KVM	2011-09-09 12:58:16 -05:00
oslib-win32.c	…
path.c	…
pci-ids.txt	…
pflib.c	…
pflib.h	…
poison.h	…
posix-aio-compat.c	block: avoid SIGUSR2	2011-09-20 14:32:56 +02:00
ppc-dis.c	…
ppc.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
ppc64.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
qapi-schema-guest.json	…
qapi-schema-test.json	…
qbool.c	…
qbool.h	…
qdict-test-data.txt	…
qdict.c	…
qdict.h	…
qemu-aio.h	…
qemu-barrier.h	Barriers in qemu-barrier.h should not be x86 specific	2011-09-23 11:51:05 -05:00
qemu-char.c	qemu-char: use qemu_set_fd_handler/2 consistently	2011-09-23 13:42:33 -05:00
qemu-char.h	…
qemu-common.h	core: remove qemu_service_io	2011-09-23 10:55:32 -05:00
qemu-config.c	trace: add "-trace events" argument to control initial state	2011-09-01 10:34:54 +01:00
qemu-config.h	…
qemu-coroutine-int.h	…
qemu-coroutine-lock.c	…
qemu-coroutine.c	…
qemu-coroutine.h	…
qemu-doc.texi	…
qemu-error.c	…
qemu-error.h	…
qemu-ga.c	Fix spelling in comments and debug messages (recieve -> receive)	2011-08-29 11:47:33 +01:00
qemu-img-cmds.hx	qemu-img: Require larger zero areas for sparse handling	2011-08-29 14:42:39 +02:00
qemu-img.c	qemu-img: Require larger zero areas for sparse handling	2011-08-29 14:42:39 +02:00
qemu-img.texi	qemu-img: Require larger zero areas for sparse handling	2011-08-29 14:42:39 +02:00
qemu-io.c	Remove blanks before \n in output strings	2011-09-16 08:25:56 -05:00
qemu-lock.h	…
qemu-log.h	…
qemu-nbd.c	nbd: support feature negotiation	2011-09-19 11:34:33 +02:00
qemu-nbd.texi	…
qemu-objects.h	…
qemu-option.c	…
qemu-option.h	…
qemu-options.h	…
qemu-options.hx	target-xtensa: implement SIMCALL	2011-09-10 16:57:39 +00:00
qemu-os-posix.h	…
qemu-os-win32.h	…
qemu-progress.c	…
qemu-queue.h	…
qemu-sockets.c	…
qemu-tech.texi	…
qemu-thread-posix.c	Abort on thread layer errors	2011-09-21 10:50:10 +01:00
qemu-thread-posix.h	…
qemu-thread-win32.c	Abort on thread layer errors	2011-09-21 10:50:10 +01:00
qemu-thread-win32.h	…
qemu-thread.h	…
qemu-timer-common.c	…
qemu-timer.c	Drop the vm_running global variable	2011-09-15 16:39:32 -03:00
qemu-timer.h	…
qemu-tool.c	core: remove qemu_service_io	2011-09-23 10:55:32 -05:00
qemu-x509.h	…
qemu.sasl	…
qemu_socket.h	…
qerror.c	Monitor/QMP: Don't allow cont on bad VM state	2011-09-15 16:39:32 -03:00
qerror.h	Monitor/QMP: Don't allow cont on bad VM state	2011-09-15 16:39:32 -03:00
qfloat.c	…
qfloat.h	…
qint.c	…
qint.h	…
qjson.c	…
qjson.h	…
qlist.c	…
qlist.h	…
qmp-commands.hx	QMP: query-status: Introduce 'status' key	2011-09-15 16:39:32 -03:00
qobject.h	…
qstring.c	…
qstring.h	…
range.h	…
readline.c	…
readline.h	…
rules.mak	build: sort objects to remove duplicates for link	2011-09-01 13:12:51 -05:00
s390-dis.c	…
s390.ld	…
savevm.c	Drop the vm_running global variable	2011-09-15 16:39:32 -03:00
sh4-dis.c	…
softmmu-semi.h	…
softmmu_defs.h	Document softmmu templates	2011-10-01 09:31:08 +00:00
softmmu_exec.h	Document softmmu templates	2011-10-01 09:31:08 +00:00
softmmu_header.h	Document softmmu templates	2011-10-01 09:31:08 +00:00
softmmu_template.h	softmmu_header: pass CPUState to tlb_fill	2011-10-01 09:31:26 +00:00
sparc-dis.c	…
sparc.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
sparc64.ld	…
spice-qemu-char.c	spice-qemu-char.c: Use correct printf format char for ssize_t	2011-09-07 09:20:09 +02:00
sysemu.h	QMP: query-status: Introduce 'status' key	2011-09-15 16:39:32 -03:00
targphys.h	…
tcg-runtime.c	…
test-coroutine.c	…
test-qmp-commands.c	…
test-visitor.c	…
thunk.c	…
thunk.h	…
trace-events	ESP: convert to trace framework	2011-10-01 09:28:40 +00:00
translate-all.c	…
uboot_image.h	…
usb-bsd.c	…
usb-linux.c	usb-host: tag as unmigratable	2011-09-07 09:58:27 +02:00
usb-redir.c	…
usb-stub.c	…
user-exec.c	…
version.rc	…
vgafont.h	…
vl.c	Merge remote-tracking branch 'qmp/queue/qmp' into staging	2011-09-20 15:16:00 -05:00
x86_64.ld	Fix linker scripts	2011-08-27 15:42:35 +00:00
xen-all.c	Drop the vm_running global variable	2011-09-15 16:39:32 -03:00
xen-mapcache.c	xen-mapcache: Fix rlimit set size.	2011-09-09 13:13:16 +00:00
xen-mapcache.h	…
xen-stub.c	…
xtensa-semi.c	target-xtensa: implement SIMCALL	2011-09-10 16:57:39 +00:00

README

Read the documentation in qemu-doc.html.

Fabrice Bellard.