dfaggioli/qemu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
34,620 Commits 59 Branches 1,031 Tags
3f937de067cb646dd8c2783e8b738e29fb16b019
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Petr Matousek 3f937de067 pcnet: force the buffer access to be in bounds during tx 
4096 is the maximum length per TMD and it is also currently the size of
the relay buffer pcnet driver uses for sending the packet data to QEMU
for further processing. With packet spanning multiple TMDs it can
happen that the overall packet size will be bigger than sizeof(buffer),
which results in memory corruption.

Fix this by only allowing to queue maximum sizeof(buffer) bytes.

This is CVE-2015-3209.

Signed-off-by: Petr Matousek <pmatouse@redhat.com>
Reported-by: Matt Tait <matttait@google.com>
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
[BR: BSC#932770]
Signed-off-by: Bruce Rogers <brogers@suse.com>
2016-03-03 10:38:55 -07:00
audio
audio: Don't free hw resources until after hw backend is stopped
2015-01-14 17:08:43 -06:00
backends
Revert "rng-egd: remove redundant free"
2014-09-23 10:48:06 -05:00
block
Legacy Patch kvm-qemu-preXX-dictzip3.patch
2015-05-14 18:45:22 +02:00
bsd-user
bsd-user: Fix syscall format, add strace support for more syscalls
2014-06-11 00:25:06 +01:00
default-configs
pc: implement pc-dimm device abstraction
2014-06-19 16:41:47 +03:00
disas
disas/libvixl: prepend the include path of libvixl header files
2014-07-08 12:45:57 +01:00
docs
docs: document missing VSERPORT_CHANGE event
2014-07-24 10:00:33 -04:00
dtc @ bc895d6d09
dtc: add submodule
2013-04-18 13:50:53 +02:00
fpu
fpu: softfloat: drop INLINE macro
2014-06-23 11:00:12 -04:00
fsdev
virtfs-proxy-helper: Provide __u64 for broken sys/capability.h
2015-05-14 18:45:22 +02:00
gdb-xml
target-arm: Support fp registers in gdb stub
2013-12-17 19:42:32 +00:00
hw
pcnet: force the buffer access to be in bounds during tx
2016-03-03 10:38:55 -07:00
include
linux-user: fix segfault deadlock
2015-05-14 18:45:20 +02:00
libcacard
libcacard: fix resource leak
2015-01-07 14:45:17 -06:00
libdecnumber
libdecnumber: Fix decNumberSetBCD
2014-06-16 13:24:29 +02:00
linux-headers
linux-headers: update linux headers to kvm/next
2014-06-16 13:24:41 +02:00
linux-user
linux-user: Convert blkpg to use a special subop handler
2015-05-14 18:45:44 +02:00
net
Legacy Patch kvm-qemu-preXX-report-default-mac-used.patch
2015-05-14 18:45:22 +02:00
pc-bios
linuxboot: fix loading old kernels
2015-01-14 17:08:43 -06:00
pixman @ 97336fad32
qapi: move include files to include/qobject/
2012-12-19 08:31:31 +01:00
po
po: update Italian translation
2014-07-29 13:23:33 +01:00
qapi
qapi: dealloc visitor, implement visit_start_union
2015-01-04 13:44:04 -06:00
qga
qga: Add missing 'static' attribute
2014-07-18 17:45:37 +04:00
qobject
json-lexer: fix escaped backslash in single-quoted string
2014-06-23 11:01:24 -04:00
qom
qom: object: Ignore refs/unrefs of NULL
2014-07-01 10:20:41 +02:00
roms
pseries: Update SLOF firmware image to qemu-slof-20140630
2014-07-08 12:10:36 +02:00
scripts
linux-user: add binfmt wrapper for argv[0] handling
2015-05-14 18:45:20 +02:00
slirp
slirp: -nooutgoing
2015-05-14 18:45:21 +02:00
stubs
Merge remote-tracking branch 'remotes/qmp-unstable/queue/qmp' into staging
2014-06-24 13:06:13 +01:00
sysconfigs/target
Eliminate cpus-x86_64.conf file
2012-09-21 15:12:58 +02:00
target-alpha
softmmu: introduce cpu_ldst.h
2014-06-05 16:10:33 +02:00
target-arm
target-arm: linux-user: no tb_flush on reset
2015-05-14 18:45:20 +02:00
target-cris
target-cris/translate.c: Remove _t_gen_mov_TN_env and _t_gen_mov_env_TN
2014-06-09 01:04:44 +02:00
target-i386
target-i386: Support migratable=no properly
2014-09-10 09:30:58 -05:00
target-lm32
vl: allow other threads to do qemu_system_vmstop_request
2014-06-23 16:36:13 +08:00
target-m68k
softmmu: introduce cpu_ldst.h
2014-06-05 16:10:33 +02:00
target-microblaze
target-microblaze: Delete unused sign_extend() function
2014-06-10 19:39:34 +04:00
target-mips
target-mips/translate.c: Free TCG in OPC_DINSV
2014-07-28 23:37:15 +02:00
target-moxie
softmmu: introduce cpu_ldst.h
2014-06-05 16:10:33 +02:00
target-openrisc
openrisc: fix comment
2014-06-29 18:59:06 +03:00
target-ppc
spapr: Move RMA memory region registration code
2014-07-15 16:11:59 +02:00
target-s390x
s390x/kvm: synchronize guest floating point registers
2014-07-14 09:15:38 +02:00
target-sh4
softmmu: introduce cpu_ldst.h
2014-06-05 16:10:33 +02:00
target-sparc
softmmu: introduce cpu_ldst.h
2014-06-05 16:10:33 +02:00
target-unicore32
target-unicore: Remove unused functions
2014-06-24 20:01:24 +04:00
target-xtensa
target-xtensa: fix translation for opcodes crossing page boundary
2015-01-14 17:08:43 -06:00
tcg
linux-user: lock tcg
2015-05-14 18:45:20 +02:00
tests
qtest: Increase socket timeout
2015-05-14 18:45:44 +02:00
trace
glib-compat.h: add new thread API emulation on top of pre-2.31 API
2014-06-10 07:44:01 +02:00
ui
CVE-2015-1779: limit size of HTTP headers from websockets clients
2016-03-03 10:24:07 -07:00
util
module: Don't complain when a module is absent
2014-07-18 14:57:35 +02:00
.exrc
qemu: add .exrc
2012-09-07 09:02:44 +03:00
.gitignore
qapi: ignore generated event files
2014-06-27 09:27:55 -04:00
.gitmodules
PPC: Add u-boot firmware for e500
2014-06-16 13:24:35 +02:00
.mailmap
Update mailmap
2013-09-05 09:40:31 -05:00
.travis.yml
trace: Multi-backend tracing
2014-06-09 15:43:40 +02:00
aio-posix.c
AioContext: speed up aio_notify
2014-07-09 15:50:11 +02:00
aio-win32.c
block: drop aio functions that operate on the main AioContext
2014-07-09 15:50:11 +02:00
arch_init.c
migration: catch unknown flags in ram_load
2014-06-16 04:55:27 +02:00
async.c
AioContext: speed up aio_notify
2014-07-09 15:50:11 +02:00
balloon.c
qapi event: convert BALLOON_CHANGE
2014-06-23 11:12:28 -04:00
block-migration.c
migration/block: fix pending() return value
2015-01-14 17:08:44 -06:00
block.c
block/vmdk: Support creation of SCSI VMDK images in qemu-img
2015-05-14 18:45:20 +02:00
blockdev-nbd.c
nbd: Shutdown socket before closing.
2014-06-30 12:50:12 +02:00
blockdev.c
block: add backing-file option to block-stream
2014-07-01 10:47:01 +02:00
blockjob.c
block: prefer aio_poll to qemu_aio_wait
2014-07-09 15:50:11 +02:00
bt-host.c
sysemu: avoid proliferation of include/ subdirectories
2013-04-15 18:19:25 +02:00
bt-vhci.c
sysemu: avoid proliferation of include/ subdirectories
2013-04-15 18:19:25 +02:00
Changelog
Use qemu-project.org domain name
2013-10-11 09:34:56 -07:00
CODING_STYLE
CODING_STYLE: Section about mixed declarations
2014-03-27 19:22:49 +04:00
configure
configure: Enable PIE for ppc and ppc64 hosts
2015-05-14 18:45:22 +02:00
COPYING
…
COPYING.LIB
…
coroutine-gthread.c
glib-compat.h: add new thread API emulation on top of pre-2.31 API
2014-06-10 07:44:01 +02:00
coroutine-sigaltstack.c
Merge remote-tracking branch 'kwolf/for-anthony' into staging
2013-02-26 07:44:39 -06:00
coroutine-ucontext.c
Fix warnings suppressors to honor --disable-werror
2013-04-17 10:28:04 -05:00
coroutine-win32.c
coroutine-win32.c: Add noinline attribute to work around gcc bug
2014-06-26 14:08:14 +01:00
cpu-exec.c
cpu: make CPU_INTERRUPT_RESET available on all targets
2014-05-13 13:21:51 +02:00
cpus.c
Introduce cpu_clean_all_dirty
2014-12-24 15:56:18 -06:00
cputlb.c
softmmu: introduce cpu_ldst.h
2014-06-05 16:10:33 +02:00
device_tree.c
device_tree: qemu_fdt_setprop: Rename val_array arg
2013-12-20 01:58:12 +01:00
device-hotplug.c
blockdev: Remove unused DriveInfo reference count
2014-06-16 17:23:19 +08:00
disas.c
monitor: QEMU Monitor Instruction Disassembly Incorrect for PowerPC LE Mode
2014-06-16 13:24:26 +02:00
dma-helpers.c
dma-helpers: Fix too long qiov
2014-07-14 12:03:21 +02:00
dump.c
dump: Make DumpState and endian conversion routines available for arch-specific dump code
2014-06-16 13:24:36 +02:00
exec.c
PPC: KVM: Disable mmu notifier check
2015-05-14 18:45:20 +02:00
gdbstub.c
gdbstub: init mon_chr through qemu_chr_alloc
2015-01-04 13:41:55 -06:00
HACKING
HACKING: Document vaddr type usage
2013-07-23 02:41:31 +02:00
hmp-commands.hx
Add the vhost-user netdev backend to the command line
2014-06-19 18:44:18 +03:00
hmp.c
block: add backing-file option to block-stream
2014-07-01 10:47:01 +02:00
hmp.h
hmp: add info memdev
2014-06-19 18:44:21 +03:00
iohandler.c
iohandler.c: Properly initialize sigaction struct
2014-05-24 00:07:29 +04:00
ioport.c
portio: Allow to mark portio lists as coalesced MMIO flushing
2013-10-17 17:24:15 +02:00
iothread.c
AioContext: do not rely on aio_poll(ctx, true) result to end a loop
2014-07-14 12:03:20 +02:00
kvm-all.c
kvm: Fix memory slot page alignment logic
2015-01-07 14:42:04 -06:00
kvm-stub.c
Add kvm_eventfds_enabled function
2014-06-19 16:41:54 +03:00
LICENSE
LICENSE: clarify
2013-08-12 09:15:12 -05:00
main-loop.c
block: drop aio functions that operate on the main AioContext
2014-07-09 15:50:11 +02:00
MAINTAINERS
MAINTAINERS: add Stefan Hajnoczi to IDE maintainers
2014-07-07 09:15:29 +02:00
Makefile
PPC: e500: Actually install u-boot.e500
2014-07-08 12:10:37 +02:00
Makefile.objs
qapi script: add event support
2014-06-23 11:01:25 -04:00
Makefile.target
linux-user: add binfmt wrapper for argv[0] handling
2015-05-14 18:45:20 +02:00
memory_mapping.c
cpu: Use QTAILQ for CPU list
2013-09-03 12:25:55 +02:00
memory.c
memory: MemoryRegion: Add size property
2014-07-01 10:20:41 +02:00
migration-exec.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
migration-fd.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
migration-rdma.c
rdma: bug fixes
2014-06-23 19:09:50 +02:00
migration-tcp.c
Coverity: Fix failure path for qemu_accept in migration
2014-05-05 22:15:03 +02:00
migration-unix.c
Coverity: Fix failure path for qemu_accept in migration
2014-05-05 22:15:03 +02:00
migration.c
migration: catch unknown flags in ram_load
2014-06-16 04:55:27 +02:00
module-common.c
module: implement module loading
2014-02-20 13:14:18 +01:00
monitor.c
monitor: Reset HMP mon->rs in CHR_EVENT_OPEN
2015-01-05 09:46:07 -06:00
nbd.c
nbd: Handle NBD_OPT_LIST option.
2014-06-30 12:50:17 +02:00
numa.c
numa: show hex number in error message for consistency and prefix them with 0x
2014-09-08 11:23:04 -05:00
os-posix.c
oslib-posix: Fix build on FreeBSD
2014-03-13 14:34:16 +00:00
os-win32.c
util: Split out exec_dir from os_find_datadir
2014-02-20 13:12:54 +01:00
page_cache.c
migration: Plug memory leak in migrate-set-cache-size command
2014-06-10 19:54:43 +04:00
qapi-schema.json
mc146818rtc: add rtc-reset-reinjection QMP command
2014-06-29 18:59:35 +03:00
qdev-monitor.c
qdev-monitor: include QOM properties in -device FOO, help output
2014-08-26 16:46:19 -05:00
qdict-test-data.txt
…
qemu-bridge-helper.c
qemu-bridge-helper: Fix fd leak in main()
2014-06-27 10:39:10 +02:00
qemu-char.c
Make char muxer more robust wrt small FIFOs
2015-05-14 18:45:22 +02:00
qemu-coroutine-io.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
qemu-coroutine-lock.c
coroutine: remove qemu_co_queue_wait_insert_head
2013-12-02 17:11:49 +01:00
qemu-coroutine-sleep.c
coroutine: add co_aio_sleep_ns() to allow sleep in block drivers
2013-10-30 12:22:09 +01:00
qemu-coroutine.c
coroutine: add ./configure --disable-coroutine-pool
2013-09-12 10:12:48 +02:00
qemu-doc.texi
doc: slirp supports ICMP echo if enabled in Linux
2014-07-18 17:45:37 +04:00
qemu-file.c
Make qemu_peek_buffer loop until it gets it's data
2014-05-05 22:15:03 +02:00
qemu-img-cmds.hx
qemu-img: add -l for snapshot in convert
2013-12-04 15:19:00 +01:00
qemu-img.c
block/vmdk: Support creation of SCSI VMDK images in qemu-img
2015-05-14 18:45:20 +02:00
qemu-img.texi
Fix nocow typos in manpage
2014-07-07 09:15:29 +02:00
qemu-io-cmds.c
block: prefer aio_poll to qemu_aio_wait
2014-07-09 15:50:11 +02:00
qemu-io.c
trace: Multi-backend tracing
2014-06-09 15:43:40 +02:00
qemu-log.c
qemu-log: default to stderr for logging output
2013-02-26 13:31:47 -06:00
qemu-nbd.c
nbd: Shutdown socket before closing.
2014-06-30 12:50:12 +02:00
qemu-nbd.texi
nbd: Miscellaneous typo fixes.
2014-05-24 00:07:29 +04:00
qemu-options-wrapper.h
vl.c: In qemu -h output, only print options for the arch we are running as
2011-12-19 10:27:33 -06:00
qemu-options.h
vl.c: Move option generation logic into a wrapper file
2011-12-19 10:27:33 -06:00
qemu-options.hx
slirp: -nooutgoing
2015-05-14 18:45:21 +02:00
qemu-seccomp.c
seccomp: add shmctl(), mlock(), and munlock() to the syscall whitelist
2014-04-25 14:52:03 -03:00
qemu-tech.texi
qemu-tech.texi: update implemented xtensa features list
2012-11-29 13:00:52 -06:00
qemu-timer.c
vl.c: remove init_clocks call from main
2014-05-09 20:57:32 +02:00
qemu.nsi
nsis: Improved support for parallel installation of 32 and 64 bit code
2013-11-07 07:02:44 +01:00
qemu.sasl
sasl: Avoid 'Could not find keytab file' in syslog
2014-03-15 13:54:18 +04:00
qmp-commands.hx
block: add backing-file option to block-stream
2014-07-01 10:47:01 +02:00
qmp.c
qmp: hide "hotplugged" device property from device-list-properties
2014-08-26 16:46:01 -05:00
qtest.c
qtest: fix hex2nib for capital characters
2014-06-10 19:39:34 +04:00
README
Use qemu-project.org domain name
2013-10-11 09:34:56 -07:00
rules.mak
build-sys: introduce install-prog macro to install&strip binaries and use it
2014-06-24 20:01:24 +04:00
savevm.c
snapshot: fix referencing wrong variable in while loop in do_delvm
2015-01-06 15:55:00 -06:00
softmmu_template.h
softmmu: move softmmu_template.h out of include/
2014-06-05 16:10:33 +02:00
spice-qemu-char.c
qemu-char: introduce qemu_chr_alloc
2014-06-23 11:12:28 -04:00
tcg-runtime.c
tcg: Push tcg-runtime routines into exec/helper-*
2014-05-28 09:33:54 -07:00
tci.c
Merge remote-tracking branch 'remotes/bonzini/softmmu-smap' into staging
2014-06-05 21:06:14 +01:00
thread-pool.c
thread-pool: avoid deadlock in nested aio_poll() calls
2014-09-08 11:23:06 -05:00
thunk.c
qemu-cvs-alsa_bitfield
2015-05-14 18:45:19 +02:00
tpm.c
Use error_is_set() only when necessary
2014-02-17 11:57:23 -05:00
trace-events
trace: add qemu_system_powerdown_request and qemu_system_shutdown_request trace events
2014-07-01 10:56:13 +02:00
translate-all.c
linux-user: lock tb flushing too
2015-05-14 18:45:21 +02:00
translate-all.h
translate-all: Change tb_check_watchpoint() argument to CPUState
2014-03-13 19:20:48 +01:00
user-exec.c
linux-user: fix segfault deadlock
2015-05-14 18:45:20 +02:00
VERSION
Update version for v2.1.3 release
2015-01-21 19:16:38 -06:00
version.rc
Use qemu-project.org domain name
2013-10-11 09:34:56 -07:00
vl.c
slirp: -nooutgoing
2015-05-14 18:45:21 +02:00
vmstate.c
vmstate: Add preallocation for migrating arrays (VMS_ALLOC flag)
2014-06-27 13:48:27 +02:00
xbzrle.c
xbzrle.c: Avoid undefined behaviour with signed arithmetic
2014-04-18 10:33:36 +04:00
xen-common-stub.c
xen: factor out common functions
2014-05-07 16:16:43 +00:00
xen-common.c
xen: factor out common functions
2014-05-07 16:16:43 +00:00
xen-hvm-stub.c
xen-hvm: Fix xen_hvm_init() to adjust pc memory layout
2014-06-23 17:50:04 +03:00
xen-hvm.c
Fix new typos in comments (found by codespell)
2014-07-18 17:45:36 +04:00
xen-mapcache.c
xen: build on ARM
2014-07-07 10:37:40 +00:00

README 

Read the documentation in qemu-doc.html or on http://wiki.qemu-project.org

- QEMU team
Description
Mirror of https://github.com/openSUSE/qemu
Readme 658 MiB
Languages
C 82.6%
C++ 6.5%
Python 3.3%
Dylan 2.9%
Shell 1.6%
Other 2.9%