linux/poky.git/meta/recipes-devtools/qemu, branch sumo

qemu: CVE-2018-12617

2018-08-29T14:23:51+00:00

qga: check bytes count read by guest-file-read While reading file content via 'guest-file-read' command, 'qmp_guest_file_read' routine allocates buffer of count+1 bytes. It could overflow for large values of 'count'. Add check to avoid it. Affects qemu < v3.0.0 (From OE-Core rev: a11c8ee86007f7f7a34b9dc29d01acc323b71873) Signed-off-by: Jagadeesh Krishnanjanappa Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: CVE-2018-7550

2018-08-29T14:23:51+00:00

multiboot: bss_end_addr can be zero The multiboot spec (https://www.gnu.org/software/grub/manual/multiboot/), section 3.1.3, allows for bss_end_addr to be zero. A zero bss_end_addr signifies there is no .bss section. Affects qemu < v2.12.0 (From OE-Core rev: 9f1d026168956e7bf45135577c123f7679a6ebba) Signed-off-by: Jagadeesh Krishnanjanappa Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

Qemu: CVE-2018-11806 slirp-heap-buffer-overflow

2018-07-02T10:41:26+00:00

(From OE-Core rev: d3d0798086177c463142e33f1493be6e34536c64) Signed-off-by: Jeremy Puhlman [Fixed up for Sumo context] Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: refresh patches with devtool and make them applicable with git

2018-07-02T10:41:25+00:00

(From OE-Core rev: e8fb42f3a54e8b8d68ae216a48534fa745ea99f1) (From OE-Core rev: 0c0f1849ea0e40296117510b4d87a2505fe18e16) Signed-off-by: Martin Jansa Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: fix CVE-2017-16845

2018-06-15T16:56:57+00:00

During Qemu guest migration, a destination process invokes ps2 post_load function. In that, if 'rptr' and 'count' values were invalid, it could lead to OOB access or infinite loop issue. Add check to avoid it. (From OE-Core rev: 0d8f68fe43b4da1a0d356fe6bedb52b8f2a02081) (From OE-Core rev: cdfceda098aa1a864cbb794065b9f555810c5c71) Signed-off-by: Hongxu Jia Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu_2.11.1.bb: support mingw build

2018-04-18T17:57:06+00:00

The patch chardev-connect-socket-to-a-spawned-command.patch calls "socketpair". This function is missing in mingw, so the patch needs to be modified accordingly (by conditional compilation using _WIN32 macro where appropriate), otherwise we end up with a broken mingw build. While it is possible to simply remove the whole patch for mingw build (via a .bbappend file in meta-mingw), it makes more sense to modify the patch itself. (From OE-Core rev: 2d955bb53a8ee36c0a648c23293139612f33f97b) Signed-off-by: Juro Bystricky Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

qemu: do not hardcode python2.7 path

2018-04-03T22:53:20+00:00

It can be installed to some non standard path in which case build will be broken. As python2.7 is specified in HOSTTOOLS we can rely that it is present in the PATH, so no need to hardcode it to /usr/bin. (From OE-Core rev: a200d22b26aded093289cb9150b3f05f76578c83) Signed-off-by: Ruslan Ruslichenko Signed-off-by: Richard Purdie

qemu: actually use the aarch64 patch

2018-03-29T23:31:18+00:00

(From OE-Core rev: 590c2f13325c3f8906850c6e3b71f2fac8ed6336) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

qemu: fix qemuarm64 intermediate kernel hang in raid6_select_algo func

2018-03-28T11:09:52+00:00

Backport fix from qemu mainline for intermediate qemuarm64 hang issue. Root caused in OE environment, issue with aarch64 qemu logic of executing instructions that reenabe interrupts. See patch commit message for more details. Upstream-Status: Backport (From OE-Core rev: aa33945fc7cf7bfa859c4091bcfa2695c422849b) Signed-off-by: Victor Kamensky Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

qemu: drop already applied glibc-2.25.patch

2018-03-11T13:27:00+00:00

Due to patch fuzz it was applied again in a different place. (From OE-Core rev: c1596c6a26bc099a5f27f8a7f9feb7d07bd30cd5) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie