Hi everyone,
The following new patches are queued for QEMU stable v3.0.1: https://github.com/mdroth/qemu/commits/stable-3.0-staging The release is planned for 2019-04-11: https://wiki.qemu.org/Planning/3.0 Please respond here or CC qemu-sta...@nongnu.org on any patches you think should be included in the release. Note that this update falls outside the normal stable release support window (~1 development cycle), but is being release now since it was delayed from its intended release date. Thanks! ---------------------------------------------------------------- Alberto Garcia (1): block: Fix use after free error in bdrv_open_inherit() BALATON Zoltan (1): i2c: Move typedef of bitbang_i2c_interface to i2c.h Bharata B Rao (1): spapr_cpu_core: vmstate_[un]register per-CPU data from (un)realizefn Christian Borntraeger (1): iotests: make 235 work on s390 (and others) Corey Minyard (2): i2c: Add a length check to the SMBus write handling pc:piix4: Update smbus I/O space after a migration Daniel Henrique Barboza (1): qga: update docs with systemd suspend support info Daniel P. Berrangé (1): qemu-img: fix regression copying secrets during convert Denis V. Lunev (1): nbd: fix NBD_FLAG_SEND_CACHE value Eduardo Habkost (1): i386: Disable TOPOEXT by default on "-cpu host" Eric Blake (4): nbd/server: Advertise all contexts in response to bare LIST nbd/client: Make x-dirty-bitmap more reliable nbd/client: Send NBD_CMD_DISC if open fails after connect bitmap: Update count after a merge Fam Zheng (5): nvme: Fix nvme_init error handling aio-posix: Don't count ctx->notifier as progress when polling aio: Do aio_notify_accept only during blocking aio_poll slirp: Add sanity check for str option length job: Fix nested aio_poll() hanging in job_txn_apply Gerd Hoffmann (3): fmops: fix off-by-one in AR_TABLE and DR_TABLE array size usb-mtp: outlaw slashes in filenames usb-mtp: use O_NOFOLLOW and O_CLOEXEC. Greg Kurz (1): 9p: fix QEMU crash when renaming files Igor Mammedov (1): pc: acpi: revert back to 1 SRAT entry for hotpluggable area Ilya Maximets (1): migration: Stop postcopy fault thread before notifying Janosch Frank (1): s390x: Return specification exception for unimplemented diag 308 subcodes Jason Wang (5): ne2000: fix possible out of bound access in ne2000_receive rtl8139: fix possible out of bound access pcnet: fix possible buffer overflow net: ignore packet size greater than INT_MAX net: drop too large packet early Jeff Cody (6): block: for jobs, do not clear user_paused until after the resume block: iotest to catch abort on forced blockjob cancel block/rbd: pull out qemu_rbd_convert_options block/rbd: Attempt to parse legacy filenames block/rbd: add iotest for rbd legacy keyvalue filename parsing block/rbd: add deprecation documentation for filename keyvalue pairs Kevin Wolf (4): block/qapi: Fix memory leak in qmp_query_blockstats() mirror: Fail gracefully for source == target block-backend: Set werror/rerror defaults in blk_new() block: Fix invalidate_cache error path for parent activation Liam Merwick (1): tpm_tis: fix loop that cancels any seizure by a lower locality Marc-André Lureau (1): monitor: fix oob command leak Marcel Apfelbaum (1): hw/rdma: another clang compilation fix Mark Cave-Ayland (1): fdc: fix segfault in fdctrl_stop_transfer() when DMA is disabled Markus Armbruster (1): vfio-helpers: Fix qemu_vfio_open_pci() crash Max Filippov (3): target/xtensa: fix FPU2000 bugs target/xtensa: fix s32c1i TCGMemOp flags target/xtensa: drop num_[core_]regs from dc232b/dc233c configs Max Reitz (2): qemu-img: Fix typo qemu-img: Fix leak Michael Roth (1): make-release: add skiboot .version file Michael S. Tsirkin (1): tests: update acpi expected files Paolo Bonzini (3): virtio: update MemoryRegionCaches when guest negotiates features virtio: do not take address of packed members nvme: fix out-of-bounds access to the CMB Paul A. Clarke (1): Changes requirement for "vsubsbs" instruction Peter Maydell (4): virt: Suppress external aborts on virt-2.10 and earlier target/arm: Correct condition for v8M callee stack push linux-user: make pwrite64/pread64(fd, NULL, 0, offset) return 0 exec.c: Don't reallocate IOMMUNotifiers that are in use Peter Wu (1): vnc: fix memleak of the "vnc-worker-output" name Peter Xu (2): intel_iommu: introduce vtd_reset_caches() intel_iommu: better handling of dmar state switch Prasad J Pandit (1): tpm: use loop iterator to set sts data field Prasad Singamsetty (1): kvm: add call to qemu_add_opts() for -overcommit option Richard Henderson (16): target/arm: Fix sign of sve_cmpeq_ppzw/sve_cmpne_ppzw target/arm: Fix typo in do_sat_addsub_64 target/arm: Reorganize SVE WHILE target/arm: Fix typo in helper_sve_movz_d target/arm: Fix typo in helper_sve_ld1hss_r target/arm: Fix sign-extension in sve do_ldr/do_str target/arm: Fix offset for LD1R instructions target/arm: Fix offset scaling for LD_zprr and ST_zprr target/arm: Reformat integer register dump target/arm: Dump SVE state if enabled target/arm: Add sve-max-vq cpu property to -cpu max target/arm: Adjust FPCR_MASK for FZ16 target/arm: Ignore float_flag_input_denormal from fp_status_f16 target/arm: Use fp_status_fp16 for do_fmpa_zpzzz_h target/arm: Use FZ not FZ16 for SVE FCVT single-half and double-half target/arm: Fix cpu_get_tb_cpu_state() for non-SVE CPUs Stefan Berger (4): tpm: Zero-init structure to avoid uninitialized variables in valgrind log tpm: Make sure new locality passed to tpm_tis_prep_abort() is valid tpm: Make sure the locality received from backend is valid acpi: Make TPM 2.0 with TIS available as MSFT0101 Thomas Huth (1): hw/s390x: Fix bad mask in time2tod() Tony Garnock-Jones (1): linux-user: write(fd, NULL, 0) parity with linux's treatment of same Vladimir Sementsov-Ogievskiy (4): nbd/server: fix bitmap export nbd/server: fix NBD_CMD_CACHE mirror: fix dead-lock iotests: simple mirror test with kvm on 1G image William Bowling (1): slirp: check sscanf result when emulating ident Yury Kotov (1): vhost: fix invalid downcast Zheng Xiang (1): pcie: set link state inactive/active after hot unplug/plug liujunjie (1): clean up callback when del virtqueue yuchenlin (1): vhost-scsi: prevent using uninitialized vqs block.c | 2 + block/block-backend.c | 3 + block/mirror.c | 18 ++--- block/nbd-client.c | 22 +++++- block/nvme.c | 37 ++++------ block/qapi.c | 3 +- block/rbd.c | 90 ++++++++++++++++++++---- exec.c | 10 +-- hw/9pfs/9p.c | 3 + hw/acpi/piix4.c | 1 + hw/arm/virt.c | 2 + hw/audio/fmopl.h | 4 +- hw/block/fdc.c | 2 +- hw/block/nvme.c | 2 +- hw/char/virtio-serial-bus.c | 6 +- hw/i2c/bitbang_i2c.h | 2 - hw/i2c/smbus.c | 6 +- hw/i386/acpi-build.c | 85 ++++++----------------- hw/i386/intel_iommu.c | 34 ++++++--- hw/net/ne2000.c | 4 +- hw/net/pcnet.c | 4 +- hw/net/rtl8139.c | 8 +-- hw/pci/pcie.c | 12 ++++ hw/ppc/spapr_cpu_core.c | 62 +++++++++-------- hw/rdma/rdma_rm_defs.h | 4 +- hw/scsi/vhost-scsi.c | 2 +- hw/tpm/tpm_emulator.c | 1 + hw/tpm/tpm_tis.c | 10 ++- hw/usb/dev-mtp.c | 19 ++++-- hw/virtio/vhost.c | 4 +- hw/virtio/virtio.c | 17 ++++- include/block/nbd.h | 4 +- include/hw/i2c/i2c.h | 2 + include/hw/i2c/ppc4xx_i2c.h | 3 - include/hw/s390x/tod.h | 2 +- include/net/net.h | 6 -- job.c | 20 ++---- linux-user/syscall.c | 44 +++++++++--- migration/postcopy-ram.c | 11 +-- monitor.c | 2 + nbd/server.c | 9 ++- net/net.c | 23 +++++-- net/slirp.c | 9 +++ qemu-deprecated.texi | 15 ++++ qemu-img.c | 35 +++++----- qga/qapi-schema.json | 25 ++++--- scripts/make-release | 1 + slirp/bootp.c | 32 ++++++--- slirp/tcp_subr.c | 10 +-- target/arm/cpu.c | 6 +- target/arm/cpu.h | 5 +- target/arm/cpu64.c | 29 ++++++++ target/arm/helper.c | 55 +++++++++------ target/arm/sve_helper.c | 23 +++---- target/arm/translate-a64.c | 106 ++++++++++++++++++++++++----- target/arm/translate-sve.c | 81 +++++++++++++--------- target/i386/cpu.c | 6 ++ target/ppc/translate/vmx-ops.inc.c | 2 +- target/s390x/diag.c | 2 +- target/xtensa/core-dc232b.c | 2 - target/xtensa/core-dc232b/gdb-config.inc.c | 1 + target/xtensa/core-dc233c.c | 2 - target/xtensa/core-dc233c/gdb-config.inc.c | 1 + target/xtensa/translate.c | 8 +-- tests/Makefile.include | 2 +- tests/acpi-test-data/pc/DSDT | Bin 5144 -> 5131 bytes tests/acpi-test-data/pc/DSDT.bridge | Bin 7003 -> 6990 bytes tests/acpi-test-data/pc/DSDT.cphp | Bin 5607 -> 5594 bytes tests/acpi-test-data/pc/DSDT.dimmpxm | Bin 6803 -> 6790 bytes tests/acpi-test-data/pc/DSDT.ipmikcs | Bin 5216 -> 5203 bytes tests/acpi-test-data/pc/DSDT.memhp | Bin 6509 -> 6496 bytes tests/acpi-test-data/pc/DSDT.numamem | Bin 5150 -> 5137 bytes tests/acpi-test-data/pc/SRAT.dimmpxm | Bin 472 -> 392 bytes tests/acpi-test-data/pc/SRAT.memhp | Bin 264 -> 264 bytes tests/acpi-test-data/q35/DSDT | Bin 7828 -> 7815 bytes tests/acpi-test-data/q35/DSDT.bridge | Bin 7845 -> 7832 bytes tests/acpi-test-data/q35/DSDT.cphp | Bin 8291 -> 8278 bytes tests/acpi-test-data/q35/DSDT.dimmpxm | Bin 9487 -> 9474 bytes tests/acpi-test-data/q35/DSDT.ipmibt | Bin 7903 -> 7890 bytes tests/acpi-test-data/q35/DSDT.memhp | Bin 9193 -> 9180 bytes tests/acpi-test-data/q35/DSDT.numamem | Bin 7834 -> 7821 bytes tests/acpi-test-data/q35/SRAT.dimmpxm | Bin 472 -> 392 bytes tests/acpi-test-data/q35/SRAT.memhp | Bin 264 -> 264 bytes tests/nvme-test.c | 68 +++++++++++++++--- tests/qemu-iotests/041 | 6 ++ tests/qemu-iotests/041.out | 4 +- tests/qemu-iotests/067.out | 1 + tests/qemu-iotests/229 | 95 ++++++++++++++++++++++++++ tests/qemu-iotests/229.out | 23 +++++++ tests/qemu-iotests/231 | 62 +++++++++++++++++ tests/qemu-iotests/231.out | 9 +++ tests/qemu-iotests/235 | 78 +++++++++++++++++++++ tests/qemu-iotests/235.out | 3 + tests/qemu-iotests/group | 3 + ui/vnc-jobs.c | 3 +- util/aio-posix.c | 7 +- util/aio-win32.c | 3 +- util/hbitmap.c | 3 + util/vfio-helpers.c | 2 +- vl.c | 1 + 100 files changed, 1033 insertions(+), 401 deletions(-) create mode 100755 tests/qemu-iotests/229 create mode 100644 tests/qemu-iotests/229.out create mode 100755 tests/qemu-iotests/231 create mode 100644 tests/qemu-iotests/231.out create mode 100755 tests/qemu-iotests/235 create mode 100644 tests/qemu-iotests/235.out