summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2015-08-10Update version for 2.3.1 releasev2.3.1Michael Roth1-1/+1
2015-08-10qemu-char: handle EINTR for TCP character devicesPaolo Bonzini1-2/+11
2015-08-04rtl8139: check TCP Data Offset field (CVE-2015-5165)Stefan Hajnoczi1-0/+5
2015-08-04rtl8139: skip offload on short TCP header (CVE-2015-5165)Stefan Hajnoczi1-0/+5
2015-08-04rtl8139: check IP Total Length field (CVE-2015-5165)Stefan Hajnoczi1-1/+6
2015-08-04rtl8139: check IP Header Length field (CVE-2015-5165)Stefan Hajnoczi1-11/+8
2015-08-04rtl8139: skip offload on short Ethernet/IP header (CVE-2015-5165)Stefan Hajnoczi1-0/+5
2015-08-04rtl8139: drop tautologous if (ip) {...} statement (CVE-2015-5165)Stefan Hajnoczi1-154/+151
2015-08-04rtl8139: avoid nested ifs in IP header parsing (CVE-2015-5165)Stefan Hajnoczi1-19/+22
2015-08-04tcg/mips: fix add2Aurelien Jarno1-0/+3
2015-08-04tcg/mips: fix TLB loading for BE host with 32-bit guestsAurelien Jarno1-1/+3
2015-08-04Fix release_drive on unplugged devices (pci_piix3_xen_ide_unplug)Stefano Stabellini1-0/+7
2015-07-29ide: Clear DRQ after handling all expected accessesKevin Wolf1-4/+12
2015-07-29ide/atapi: Fix START STOP UNIT command completionKevin Wolf1-0/+1
2015-07-29ide: Check array bounds before writing to io_buffer (CVE-2015-5154)Kevin Wolf1-0/+16
2015-07-29block: qemu-iotests - add check for multiplication overflow in vpcJeff Cody4-0/+60
2015-07-29block: vpc - prevent overflow if max_table_entries >= 0x40000000Jeff Cody1-4/+14
2015-07-29scsi: fix buffer overflow in scsi_req_parse_cdb (CVE-2015-5158)Paolo Bonzini1-1/+6
2015-07-29vfio/pci: Fix bootindexAlex Williamson1-1/+0
2015-07-29virtio-net: unbreak any layoutJason Wang2-5/+27
2015-07-29vfio/pci: Fix RTL8168 NIC quirksAlex Williamson1-4/+5
2015-07-29mips/kvm: Sign extend registers written to KVMJames Hogan1-4/+4
2015-07-29mips/kvm: Fix Big endian 32-bit register accessJames Hogan1-10/+3
2015-07-29block: Initialize local_err in bdrv_append_temp_snapshotFam Zheng1-1/+1
2015-07-29Fix irq route entries exceeding KVM_MAX_IRQ_ROUTES马文霜1-7/+10
2015-07-29target-ppc: fix hugepage support when using memory-backend-fileMichael Roth1-6/+51
2015-07-29spapr_vty: lookup should only return valid VTY objectsDavid Gibson1-0/+4
2015-07-29s390x/ipl: Fix boot if no bootindex was specifiedChristian Borntraeger1-2/+2
2015-07-29block/nfs: limit maximum readahead size to 1MBPeter Lieven1-0/+7
2015-07-29iotests: add QMP event waiting queueJohn Snow2-30/+103
2015-07-29iotests: Use event_wait in wait_readyFam Zheng1-7/+2
2015-07-29qemu-iotests: Add test case for mirror with unmapFam Zheng3-0/+65
2015-07-29qemu-iotests: Make block job methods commonFam Zheng2-51/+43
2015-07-29block: Fix dirty bitmap in bdrv_co_discardFam Zheng1-13/+2
2015-07-29mirror: Do zero write on target if sectors not allocatedFam Zheng1-2/+18
2015-07-29qmp: Add optional bool "unmap" to drive-mirrorFam Zheng6-4/+24
2015-07-29block: Add bdrv_get_block_status_aboveFam Zheng2-11/+49
2015-07-29virtio-ccw: complete handling of guest-initiated resetsCornelia Huck1-17/+22
2015-07-29vhost: correctly pass error to caller in vhost_dev_enable_notifiers()Jason Wang1-4/+4
2015-07-29hw/core: rebase sysbus_get_fw_dev_path() to g_strdup_printf()Laszlo Ersek1-10/+6
2015-07-29i8254: fix out-of-bounds memory access in pit_ioport_read()Petr Matousek1-0/+6
2015-07-29spice-display: fix segfault in qemu_spice_create_updateGerd Hoffmann1-4/+5
2015-07-29sdl2: fix crash in handle_windowevent() when restoring the screen sizeAlberto Garcia1-0/+4
2015-07-29vmdk: Use vmdk_find_index_in_cluster everywhereFam Zheng1-8/+2
2015-07-29vmdk: Fix index_in_cluster calculation in vmdk_co_get_block_statusFam Zheng1-1/+12
2015-07-29iotests: qcow2 COW with minimal L2 cache sizeMax Reitz2-0/+15
2015-07-29qcow2: Set MIN_L2_CACHE_SIZE to 2Max Reitz1-1/+2
2015-07-29kbd: add brazil kbd keys to x11 evdev mapGerd Hoffmann1-2/+2
2015-07-29kbd: add brazil kbd keys to qemuGerd Hoffmann2-1/+7
2015-07-29qga/commands-posix: Fix bug in guest-fstrimJustin Ossevoort1-5/+4