The ccw notify hypercall handler was missing a sanity check for the queue number, making it possible for an ill-behaving caller to crash qemu. Not good.
Please pull. The following changes since commit e769bdc26ded6d7681cddd9f67c5f87a4b5ba53c: hw/qdev: Abort rather than ignoring errors adding device properties (2013-03-26 09:27:02 -0500) are available in the git repository at: git://github.com/cohuck/qemu virtio-ccw-upstr for you to fetch changes up to b57ed9bf075e33cdd2f9eb545ff555301dd57221: virtio-ccw: Queue sanity check for notify hypercall. (2013-03-26 18:04:24 +0100) ---------------------------------------------------------------- Cornelia Huck (1): virtio-ccw: Queue sanity check for notify hypercall. hw/s390x/s390-virtio-ccw.c | 3 +++ 1 file changed, 3 insertions(+) -- 1.7.9.5