mirrors/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
21,243 Commits 50 Branches 394 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Avi Kivity 730a9c53b4 virtio-blk: fix use-after-free while handling scsi commands 
The scsi passthrough handler falls through after completing a
request into the failure path, resulting in a use after free.

Reproducible by running a guest with aio=native on a block device.

Reported-by: Stefan Priebe <s.priebe@profihost.ag>
Signed-off-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@linux.vnet.ibm.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
2012-08-10 10:25:11 +02:00
audio
…
block
qcow2: implement lazy refcounts
2012-08-06 22:39:14 +02:00
bsd-user
Support 'help' as a synonym for '?' in command line options
2012-08-02 13:16:42 -05:00
default-configs
esp: move PCI emulation to a new file esp-pci.c
2012-08-09 18:21:47 +00:00
docs
docs: add lazy refcounts bit to qcow2 specification
2012-08-06 22:39:14 +02:00
fpu
…
fsdev
…
gdb-xml
…
hw
virtio-blk: fix use-after-free while handling scsi commands
2012-08-10 10:25:11 +02:00
include/qemu
cpu: Move thread_kicked to CPUState
2012-08-02 18:12:17 +02:00
libcacard
…
linux-headers
…
linux-user
sparc: fix expression with uninitialized initial value
2012-08-09 18:34:57 +00:00
net
qapi: avoid reserved keywords
2012-08-09 18:34:57 +00:00
pc-bios
…
qapi
qapi: introduce OptsVisitor
2012-07-23 11:55:17 +01:00
qga
build: Fix linking failure for qemu-ga
2012-07-29 08:41:53 +00:00
QMP
…
qom
…
roms
…
scripts
qapi: avoid reserved keywords
2012-08-09 18:34:57 +00:00
slirp
slirp: fix build on mingw32
2012-08-06 19:31:55 -05:00
sysconfigs/target
…
target-alpha
alpha-linux-user: Work around hosted mmap allocation problems
2012-08-04 09:37:48 -07:00
target-arm
…
target-cris
…
target-i386
Merge branch 'x86cpu_qom_tcg_v2' of git://github.com/imammedo/qemu
2012-08-09 18:44:49 +00:00
target-lm32
…
target-m68k
…
target-microblaze
…
target-mips
MIPS: Correct FCR0 initialization
2012-08-09 18:36:19 +00:00
target-openrisc
target-or32: Add linux user support
2012-07-27 21:13:05 +00:00
target-ppc
…
target-s390x
…
target-sh4
…
target-sparc
…
target-unicore32
…
target-xtensa
Merge branch 'x86cpu_qom_tcg_v2' of git://github.com/imammedo/qemu
2012-08-09 18:44:49 +00:00
tcg
…
tests
qemu-iotests: Be more flexible with image creation options
2012-08-06 22:39:14 +02:00
trace
Simpletrace v2: Support multiple arguments, strings.
2012-07-19 11:34:33 +01:00
ui
vnc: disable VNC password authentication (security type 2) when in FIPS mode
2012-08-03 14:28:40 -05:00
.gitignore
…
.gitmodules
…
.mailmap
…
a.out.h
…
acl.c
…
acl.h
…
aes.c
…
aes.h
…
aio.c
…
alpha-dis.c
…
alpha.ld
…
arch_init.c
Support 'help' as a synonym for '?' in command line options
2012-08-02 13:16:42 -05:00
arch_init.h
target-or32: Add target stubs and QOM cpu
2012-07-27 21:12:55 +00:00
arm-dis.c
…
arm.ld
…
async.c
…
balloon.c
…
balloon.h
…
bitmap.c
…
bitmap.h
…
bitops.c
…
bitops.h
bitops: drop volatile qualifier
2012-08-04 15:51:23 +00:00
block_int.h
qcow2: implement lazy refcounts
2012-08-06 22:39:14 +02:00
block-migration.c
savevm: split save_live into stage2 and stage3
2012-07-20 08:19:27 +02:00
block-migration.h
…
block.c
block: Use bdrv_get_backing_file_depth()
2012-08-03 10:10:51 -03:00
block.h
block: create bdrv_get_backing_file_depth()
2012-08-03 10:10:38 -03:00
blockdev.c
Support 'help' as a synonym for '?' in command line options
2012-08-02 13:16:42 -05:00
blockdev.h
blockdev: Don't limit DriveInfo serial to 20 characters
2012-07-17 16:48:32 +02:00
bswap.h
…
bt-host.c
…
bt-host.h
…
bt-vhci.c
…
buffered_file.c
…
buffered_file.h
…
cache-utils.c
…
cache-utils.h
…
Changelog
…
cmd.c
…
cmd.h
…
CODING_STYLE
…
compatfd.c
…
compatfd.h
…
compiler.h
…
config.h
…
configure
configure: Fix set-but-not-used warning in Xen 4.1 probe
2012-08-04 13:25:05 +00:00
console.c
…
console.h
…
COPYING
…
COPYING.LIB
…
coroutine-gthread.c
…
coroutine-sigaltstack.c
…
coroutine-ucontext.c
configure: Split valgrind test into pragma test and valgrind.h test
2012-07-31 20:04:42 +00:00
coroutine-win32.c
…
cpu-all.h
…
cpu-common.h
…
cpu-defs.h
cpu: Move thread_kicked to CPUState
2012-08-02 18:12:17 +02:00
cpu-exec.c
Merge branch 'x86cpu_qom_tcg_v2' of git://github.com/imammedo/qemu
2012-08-09 18:44:49 +00:00
cpus.c
Fixes related to processing of qemu's -numa option
2012-08-04 13:23:58 +00:00
cpus.h
…
cputlb.c
…
cputlb.h
…
cris-dis.c
…
cursor_hidden.xpm
…
cursor_left_ptr.xpm
…
cursor.c
…
cutils.c
cutils: add strpadcpy()
2012-07-26 17:44:08 +02:00
def-helper.h
…
device_tree.c
device_tree: Add support for reading device tree properties
2012-07-20 13:34:50 +01:00
device_tree.h
device_tree: Add support for reading device tree properties
2012-07-20 13:34:50 +01:00
dis-asm.h
…
disas.c
…
disas.h
…
dma-helpers.c
…
dma.h
Avoid returning void
2012-07-28 09:23:11 +00:00
dump-stub.c
…
dump.c
…
dump.h
…
dyngen-exec.h
…
elf.h
target-or32: Add target stubs and QOM cpu
2012-07-27 21:12:55 +00:00
envlist.c
…
envlist.h
…
error_int.h
…
error.c
qapi: fix error propagation
2012-07-23 11:55:17 +01:00
error.h
qapi: fix error propagation
2012-07-23 11:55:17 +01:00
event_notifier.c
…
event_notifier.h
…
exec-all.h
…
exec-memory.h
…
exec-obsolete.h
…
exec.c
exec.c: Remove out of date comment
2012-08-03 14:25:22 +01:00
gdbstub.c
target-or32: Add gdb stub support
2012-07-27 21:13:04 +00:00
gdbstub.h
…
gen-icount.h
…
HACKING
…
hmp-commands.hx
qapi: generalize documentation of streaming commands
2012-08-06 22:39:14 +02:00
hmp.c
hmp: show the backing file depth
2012-08-03 10:10:55 -03:00
hmp.h
…
host-utils.c
…
host-utils.h
…
hppa-dis.c
…
hppa.ld
…
i386-dis.c
…
i386.ld
…
ia64-dis.c
…
ia64.ld
…
input.c
…
int128.h
…
iohandler.c
…
ioport.c
…
ioport.h
…
iorange.h
…
iov.c
…
iov.h
…
json-lexer.c
…
json-lexer.h
…
json-parser.c
…
json-parser.h
…
json-streamer.c
…
json-streamer.h
…
kvm-all.c
Merge remote-tracking branch 'qemu-kvm/uq/master' into staging
2012-07-18 14:44:43 -05:00
kvm-stub.c
…
kvm.h
Merge remote-tracking branch 'qemu-kvm/uq/master' into staging
2012-07-18 14:44:43 -05:00
libfdt_env.h
…
LICENSE
…
linux-aio.c
…
lm32-dis.c
…
m68k-dis.c
…
m68k.ld
…
main-loop.c
…
main-loop.h
…
MAINTAINERS
MAINTAINERS: Replace net maintainer Mark McLoughlin with Stefan Hajnoczi
2012-07-23 11:55:17 +01:00
Makefile
qom: Clean libuser object and dependency files
2012-08-03 10:44:33 +01:00
Makefile.dis
build: get dependency file directories from object file names
2012-07-28 09:16:09 +00:00
Makefile.hw
build: get dependency file directories from object file names
2012-07-28 09:16:09 +00:00
Makefile.objs
…
Makefile.target
build: get dependency file directories from object file names
2012-07-28 09:16:09 +00:00
Makefile.user
build: get dependency file directories from object file names
2012-07-28 09:16:09 +00:00
memory_mapping-stub.c
…
memory_mapping.c
…
memory_mapping.h
…
memory.c
…
memory.h
…
microblaze-dis.c
…
migration-exec.c
…
migration-fd.c
…
migration-tcp.c
…
migration-unix.c
…
migration.c
…
migration.h
savevm: Live migration handlers register the struct directly
2012-07-20 08:19:27 +02:00
mips-dis.c
…
mips.ld
…
module.c
…
module.h
…
monitor.c
monitor: remove unused do_info_trace
2012-07-19 11:34:32 +01:00
monitor.h
…
nbd.c
…
nbd.h
…
net.c
Merge remote-tracking branch 'stefanha/net' into staging
2012-08-03 13:54:05 -05:00
net.h
net: cleanup deliver/deliver_iov func pointers
2012-08-01 13:32:11 +01:00
notify.c
…
notify.h
…
os-posix.c
fips: fix build on !Linux
2012-08-03 18:28:37 -05:00
os-win32.c
…
osdep.c
vnc: disable VNC password authentication (security type 2) when in FIPS mode
2012-08-03 14:28:40 -05:00
osdep.h
vnc: disable VNC password authentication (security type 2) when in FIPS mode
2012-08-03 14:28:40 -05:00
oslib-posix.c
…
oslib-win32.c
…
path.c
…
pci-ids.txt
…
pflib.c
…
pflib.h
…
poison.h
target-or32: Add target stubs and QOM cpu
2012-07-27 21:12:55 +00:00
posix-aio-compat.c
…
ppc64.ld
…
ppc-dis.c
…
ppc.ld
…
qapi-schema-guest.json
…
qapi-schema-test.json
…
qapi-schema.json
qapi: generalize documentation of streaming commands
2012-08-06 22:39:14 +02:00
qbool.c
…
qbool.h
…
qdict-test-data.txt
…
qdict.c
…
qdict.h
…
qemu_socket.h
…
qemu-aio.h
…
qemu-barrier.h
…
qemu-bridge-helper.c
net: Add interface to bridge when SIOCBRADDIF isn't available
2012-08-01 12:28:51 +01:00
qemu-char.c
…
qemu-char.h
…
qemu-common.h
Merge remote-tracking branch 'stefanha/net' into staging
2012-08-03 13:54:05 -05:00
qemu-config.c
…
qemu-config.h
…
qemu-coroutine-int.h
…
qemu-coroutine-io.c
…
qemu-coroutine-lock.c
…
qemu-coroutine-sleep.c
…
qemu-coroutine.c
…
qemu-coroutine.h
…
qemu-doc.texi
vnc: disable VNC password authentication (security type 2) when in FIPS mode
2012-08-03 14:28:40 -05:00
qemu-error.c
…
qemu-error.h
…
qemu-file.h
…
qemu-ga.c
Support 'help' as a synonym for '?' in command line options
2012-08-02 13:16:42 -05:00
qemu-img-cmds.hx
…
qemu-img.c
qemu-img: use QemuOpts instead of QEMUOptionParameter in resize function
2012-08-06 22:39:14 +02:00
qemu-img.texi
…
qemu-io.c
qemu-io: add "abort" command to simulate program crash
2012-08-06 22:39:14 +02:00
qemu-lock.h
…
qemu-log.c
…
qemu-log.h
…
qemu-nbd.c
qemu-nbd: add --cache and --aio options
2012-07-24 09:31:53 +02:00
qemu-nbd.texi
…
qemu-objects.h
…
qemu-option-internal.h
expose QemuOpt and QemuOpts struct definitions to interested parties
2012-07-23 11:55:17 +01:00
qemu-option.c
Support 'help' as a synonym for '?' in command line options
2012-08-02 13:16:42 -05:00
qemu-option.h
Support 'help' as a synonym for '?' in command line options
2012-08-02 13:16:42 -05:00
qemu-options-wrapper.h
…
qemu-options.h
…
qemu-options.hx
vnc: disable VNC password authentication (security type 2) when in FIPS mode
2012-08-03 14:28:40 -05:00
qemu-os-posix.h
…
qemu-os-win32.h
…
qemu-progress.c
…
qemu-queue.h
…
qemu-sockets.c
socket: clean up redundant assignment
2012-08-03 14:25:21 +01:00
qemu-tech.texi
doc: Fix indefinite article an -> a before nouns that begin with 'h'
2012-07-17 15:40:14 -05:00
qemu-thread-posix.c
qemu-thread: Let qemu_thread_is_self() return bool
2012-08-02 18:11:11 +02:00
qemu-thread-posix.h
…
qemu-thread-win32.c
qemu-thread: Let qemu_thread_is_self() return bool
2012-08-02 18:11:11 +02:00
qemu-thread-win32.h
…
qemu-thread.h
qemu-thread: Let qemu_thread_is_self() return bool
2012-08-02 18:11:11 +02:00
qemu-timer-common.c
…
qemu-timer.c
qemu_rearm_alarm_timer: do not call rearm if the next deadline is INT64_MAX
2012-08-09 18:42:38 +00:00
qemu-timer.h
…
qemu-tls.h
…
qemu-tool.c
…
qemu-user.c
…
qemu-x509.h
…
qemu-xattr.h
…
qemu.sasl
…
qerror.c
…
qerror.h
…
qfloat.c
…
qfloat.h
…
qint.c
…
qint.h
…
qjson.c
…
qjson.h
…
qlist.c
…
qlist.h
…
qmp-commands.hx
block: Use bdrv_get_backing_file_depth()
2012-08-03 10:10:51 -03:00
qmp.c
…
qobject.h
…
qstring.c
…
qstring.h
…
qtest.c
…
qtest.h
…
range.h
…
readline.c
…
readline.h
…
README
…
rules.mak
build: get dependency file directories from object file names
2012-07-28 09:16:09 +00:00
s390-dis.c
…
s390.ld
…
savevm.c
savevm: split save_live into stage2 and stage3
2012-07-20 08:19:27 +02:00
sh4-dis.c
…
softmmu_defs.h
…
softmmu_exec.h
…
softmmu_header.h
…
softmmu_template.h
…
softmmu-semi.h
…
sparc64.ld
…
sparc-dis.c
…
sparc.ld
…
spice-qemu-char.c
…
sysemu.h
Fixes related to processing of qemu's -numa option
2012-08-04 13:23:58 +00:00
targphys.h
…
tcg-runtime.c
…
tci-dis.c
…
tci.c
…
thunk.c
…
thunk.h
…
TODO
…
trace-events
scsi: establish precedence levels for unit attention
2012-07-27 08:25:25 +02:00
translate-all.c
…
uboot_image.h
…
user-exec.c
user: fix accidental AREG0 use
2012-08-09 18:34:57 +00:00
VERSION
…
version.rc
…
vgafont.h
…
vl.c
handle device help before accelerator set up
2012-08-09 19:53:01 +00:00
vmstate.h
savevm: split save_live into stage2 and stage3
2012-07-20 08:19:27 +02:00
x86_64.ld
…
xen-all.c
…
xen-mapcache.c
…
xen-mapcache.h
…
xen-stub.c
…

README 

Read the documentation in qemu-doc.html or on http://wiki.qemu.org

- QEMU team
Description
No description provided
Readme 404 MiB
Languages
C 82.6%
C++ 6.5%
Python 3.4%
Dylan 2.9%
Shell 1.6%
Other 2.8%