Statistics
| Branch: | Revision:

root @ 45724d6d

# Date Author Comment
1f7a48de 09/12/2012 04:50 pm MORITA Kazutaka

sheepdog: fix savevm and loadvm

This patch sets data to be sent to Sheepdog correctly and fixes savevm
and loadvm operations on a Sheepdog image.

Signed-off-by: MORITA Kazutaka <>
Signed-off-by: Kevin Wolf <>

ce560dcf 09/12/2012 04:50 pm Ronnie Sahlberg

ATAPI: STARTSTOPUNIT only eject/load media if powercondition is 0

The START STOP UNIT command will only eject/load media if
power condition is zero.

If power condition is !0 then LOEJ and START will be ignored.

From MMC (sbc contains similar wordings too)...

1e53537f 09/12/2012 04:50 pm Stefan Weil

ide: Fix error messages from static code analysis (no real error)

Report from smatch:
hw/ide/core.c:1472 ide_exec_cmd(423) error: buffer overflow 'smart_attributes' 8 <= 29
hw/ide/core.c:1474 ide_exec_cmd(425) error: buffer overflow 'smart_attributes' 8 <= 29...

45724d6d 09/12/2012 04:50 pm Stefan Weil

block/curl: Fix wrong free statement

Report from smatch:
block/curl.c:546 curl_close(21) info: redundant null check on s->url calling free()

The check was redundant, and free was also wrong because the memory
was allocated using g_strdup.

Signed-off-by: Stefan Weil <>...

e0a1e32d 09/11/2012 07:06 pm Aurelien Jarno

Merge branch 'usb.64' of git://git.kraxel.org/qemu

  • 'usb.64' of git://git.kraxel.org/qemu: (54 commits)
    xhci: allow bytewise capability register reads
    xhci: kill xhci_mem_{read,write} dispatcher functions
    xhci: support multiple interrupters
    xhci: pick target interrupter...
fedc0da2 09/11/2012 07:06 pm Aurelien Jarno

tcg/optimize: fix if/else/break coding style

optimizer.c contains some cases were the break is appearing in both the
if and the else parts. Fix that by moving it to the outer part. Also
move some common code there.

Reviewed-by: Richard Henderson <>...

fbeaa26c 09/11/2012 07:06 pm Aurelien Jarno

tcg/optimize: add constant folding for brcond

Reviewed-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>

f8dd19e5 09/11/2012 07:06 pm Aurelien Jarno

tcg/optimize: add constant folding for setcond

Reviewed-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>

65a7cce1 09/11/2012 07:05 pm Aurelien Jarno

tcg/optimize: swap brcond/setcond arguments when possible

brcond and setcond ops are not commutative, but it's easy to compute the
new condition after swapping the arguments. Try to always put the constant
argument in second position like for commutative ops, to help backends to...

01ee5282 09/11/2012 07:05 pm Aurelien Jarno

tcg/optimize: simplify shift/rot r, 0, a => movi r, 0 cases

shift/rot r, 0, a is equivalent to movi r, 0.

Reviewed-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>

61251c0c 09/11/2012 07:05 pm Aurelien Jarno

tcg/optimize: simplify and r, a, 0 cases

and r, a, 0 is equivalent to a movi r, 0.

Reviewed-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>

38ee188b 09/11/2012 07:05 pm Aurelien Jarno

tcg/optimize: simplify or/xor r, a, 0 cases

or/xor r, a, 0 is equivalent to a mov r, a.

Reviewed-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>

56e49438 09/11/2012 07:05 pm Aurelien Jarno

tcg/optimize: split expression simplification

Split expression simplification in multiple parts so that a given op
can appear multiple times. This patch should not change anything.

Reviewed-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>

c5cc28ff 09/11/2012 07:05 pm Aurelien Jarno

tcg: improve profiler

Now that there are two passes of optimization (optimize.c, liveness)
there is no point of outputing the statistics of the liveness part
only. Update the code to take into account both optimizations.

Reviewed-by: Richard Henderson <>...

4c47f800 09/11/2012 08:43 am Gerd Hoffmann

xhci: add msix support

Signed-off-by: Gerd Hoffmann <>

2cae4119 09/11/2012 08:43 am Gerd Hoffmann

xhci: move register update into xhci_intr_raise

Now that we have a separate function to raise an IRQ we can move
some comon code into the function.

Signed-off-by: Gerd Hoffmann <>

962d11e1 09/11/2012 08:43 am Gerd Hoffmann

xhci: add XHCIInterrupter

Move all state belonging to the (single) interrupter into a separate
struct. First step in adding support for multiple interrupters.

Signed-off-by: Gerd Hoffmann <>

43d9d604 09/11/2012 08:43 am Gerd Hoffmann

xhci: prepare xhci_runtime_{read,write} for multiple interrupters

Prepare xhci runtime register access function for multiple interrupters.

Signed-off-by: Gerd Hoffmann <>

2d1de850 09/11/2012 08:43 am Gerd Hoffmann

xhci: pick target interrupter

Pick the correct interrupter when queuing an event.

Signed-off-by: Gerd Hoffmann <>

fa8ee89e 09/11/2012 08:43 am Gerd Hoffmann

xhci: support multiple interrupters

Everything is in place, flip the big switch now
and enable support for multiple interrupters.

Signed-off-by: Gerd Hoffmann <>

1b067564 09/11/2012 08:43 am Gerd Hoffmann

xhci: kill xhci_mem_{read,write} dispatcher functions

... and register subregions instead, so we offload the dispatching
to the the memory subsystem which is designed to handle it.

Signed-off-by: Gerd Hoffmann <>

6ee021d4 09/11/2012 08:43 am Gerd Hoffmann

xhci: allow bytewise capability register reads

Some guests need this according to
Alejandro Martinez Ruiz <>

Signed-off-by: Gerd Hoffmann <>

d5a15814 09/11/2012 08:43 am Gerd Hoffmann

xhci: drop buffering

This patch splits the xhci_xfer_data function into three.
The xhci_xfer_data function used to do does two things:

(1) copy transfer data between guest memory and a temporary buffer.
(2) report transfer results to the guest using events....
5c08106f 09/11/2012 08:43 am Gerd Hoffmann

xhci: move device lookup into xhci_setup_packet

Signed-off-by: Gerd Hoffmann <>

01546fa6 09/11/2012 08:43 am Gerd Hoffmann

xhci: implement mfindex

Implement mfindex register and mfindex wrap event.

Signed-off-by: Gerd Hoffmann <>

3d139684 09/11/2012 08:43 am Gerd Hoffmann

xhci: iso xfer support

Add support for iso transfers.

Signed-off-by: Gerd Hoffmann <>

873123fe 09/11/2012 08:43 am Gerd Hoffmann

xhci: trace cc codes in cleartext

Signed-off-by: Gerd Hoffmann <>

d829fde9 09/11/2012 08:43 am Gerd Hoffmann

xhci: add trace_usb_xhci_ep_set_dequeue

Signed-off-by: Gerd Hoffmann <>

8e9f18b6 09/11/2012 08:43 am Gerd Hoffmann

xhci: fix runtime write tracepoint

Signed-off-by: Gerd Hoffmann <>

106b214c 09/11/2012 08:43 am Gerd Hoffmann

xhci: update register layout

Change the register layout to be a bit more sparse and also not depend
on the number of ports. Useful when for making the number of ports
runtime-configurable.

0846e635 09/11/2012 08:43 am Gerd Hoffmann

xhci: update port handling

This patch changes the way xhci ports are linked to USBPorts. The fixed
1:1 relationship between xhci ports and USBPorts is gone. Now each
USBPort represents a physical plug which has usually two xhci ports
assigned: one usb2 and ond usb3 port. usb devices show up at one or the...

6d51b2bb 09/11/2012 08:43 am Gerd Hoffmann

usb3: superspeed descriptors

Add superspeed descriptor entry to USBDesc,
advertise superspeed support when present.

Signed-off-by: Gerd Hoffmann <>

b43a2851 09/11/2012 08:43 am Gerd Hoffmann

usb3: superspeed endpoint companion

Add support for building superspeed endpoint companion descriptors,
create them for superspeed usb devices.

Signed-off-by: Gerd Hoffmann <>

2077469b 09/11/2012 08:43 am Gerd Hoffmann

usb3: bos decriptor

Add support for creating BOS descriptor and
device cappability descriptors.

Signed-off-by: Gerd Hoffmann <>

79b40459 09/11/2012 08:43 am Gerd Hoffmann

usb-storage: usb3 support

Add usb3 descriptors to usb-storage, so it shows up as superspeed
device when connected to xhci.

Signed-off-by: Gerd Hoffmann <>

c5e9b02d 09/11/2012 08:43 am Gerd Hoffmann

xhci: fix & cleanup msi.

Drop custom write_config function which isn't needed any more.
Make the msi property a bit property so it accepts 'on' & 'off'.
Enable MSI by default.

TODO: add compat property to disable on old machine types.

Signed-off-by: Gerd Hoffmann <>

4c4abe7c 09/11/2012 08:43 am Gerd Hoffmann

xhci: rework interrupt handling

Split xhci_irq_update into a function which handles intx updates
(including lowering the irq line once the guests acks the interrupt)
and one which is used for raising an irq only.

Signed-off-by: Gerd Hoffmann <>

ed9873bf 09/11/2012 08:43 am Hans de Goede

usb-redir: Don't delay handling of open events to a bottom half

There is no need for this, and doing so means that a backend trying to
write immediately after an open event will see qemu_chr_be_can_write
returning 0, which not all backends handle well as there is no wakeup...

cb897117 09/11/2012 08:43 am Hans de Goede

usb-redir: Get rid of async-struct get member

This is a preparation patch for completely getting rid of the async-packet
struct in usb-redir, instead relying on the (new) per ep queues in the
qemu usb core.

Signed-off-by: Hans de Goede <>...

104981d5 09/11/2012 08:43 am Hans de Goede

usb-redir: Get rid of local shadow copy of packet headers

The shadow copy only serves as an extra check (besides the packet-id) to
ensure the packet we get back is a reply to the packet we think it is.

This check has never triggered in all the time usb-redir is in use now,...

206e7f20 09/11/2012 08:43 am Hans de Goede

usb-redir: Get rid of unused async-struct dev member

This is a preparation patch for completely getting rid of the async-packet
struct in usb-redir, instead relying on the (new) per ep queues in the
qemu usb core.

Signed-off-by: Hans de Goede <>...

de550a6a 09/11/2012 08:43 am Hans de Goede

usb-redir: Move to core packet id and queue handling

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

2979a361 09/11/2012 08:43 am Hans de Goede

usb-redir: Return babble when getting more bulk data then requested

Babble is the appropriate error in this case (rather then signalling a stall).

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

be4a8928 09/11/2012 08:43 am Hans de Goede

usb-redir: Convert to new libusbredirparser 0.5 API

This gives us support for 64 bit ids which is needed for using XHCI with
the new hcd generated ids.

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

0fde3b7a 09/11/2012 08:43 am Hans de Goede

usb-redir: Set ep max_packet_size if available

This is needed for usb-redir to work properly with the xhci emulation.

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

910c1e6b 09/11/2012 08:43 am Hans de Goede

usb-redir: Add a usbredir_reject_device helper function

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

a508cc42 09/11/2012 08:43 am Hans de Goede

usb-redir: Ensure our peer has the necessary caps when redirecting to XHCI

In order for redirection to work properly when redirecting to an emulated
XHCI controller, the usb-redir-host must support both
usb_redir_cap_ep_info_max_packet_size and usb_redir_cap_64bits_ids,...

6c67446a 09/11/2012 08:43 am Hans de Goede

usb-redir: Enable pipelining for bulk endpoints

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

2964cd9b 09/11/2012 08:43 am Samuel Thibault

Better name usb braille device

Windows users need to know that they have to use the Baum driver to make
the qemu braille device work.

Signed-off-by: Samuel Thibault <>
Signed-off-by: Gerd Hoffmann <>

2bbd086c 09/11/2012 08:43 am Gerd Hoffmann

usb-audio: fix usb version

usb-audio is a full speed (1.1) device,
but bcdUSB claims it is usb 2.0. Fix it.

Signed-off-by: Gerd Hoffmann <>

331e9406 09/11/2012 08:43 am Gerd Hoffmann

xhci: rip out background transfer code

original xhci code (the one which used libusb directly) used to use
'background transfers' for iso streams. In upstream qemu the iso
stream buffering is handled by usb-host & usb-redir, so we will
never ever need this. It has been left in as reference, but is dead...

c13a9e61 09/11/2012 08:42 am Hans de Goede

usb-core: Add a usb_ep_find_packet_by_id() helper function

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

9c1f6765 09/11/2012 08:42 am Hans de Goede

usb-core: Allow the first packet of a pipelined ep to complete immediately

This can happen with usb-redir live-migration when the packet gets re-queued
after the migration and the original queuing from the migration source side
has already finished.

Signed-off-by: Hans de Goede <>...

66f092d2 09/11/2012 08:42 am Hans de Goede

Revert "ehci: don't flush cache on doorbell rings."

This reverts commit 9bc3a3a216e2689bfcdd36c3e079333bbdbf3ba0, which got
added to fix an issue where the real, underlying cause was not stopping
the ep queue on an error.

Now that the underlying cause is fixed by the "usb: Halt ep queue and...

dafe31fc 09/11/2012 08:42 am Hans de Goede

ehci: Validate qh is not changed unexpectedly by the guest

-combine the qh check with the check for devaddr changes
-also ensure that p gets set to NULL when the queue gets cancelled on
devaddr change, which was not done properly before this patch

Signed-off-by: Hans de Goede <>

522079dd 09/11/2012 08:42 am Hans de Goede

ehci: Update copyright headers to reflect recent work

Update copyright headers to reflect all the work Gerd and I have been doing
on the EHCI emulation.

Signed-off-by: Hans de Goede <>

0e795352 09/11/2012 08:42 am Hans de Goede

ehci: Properly cleanup packets on cancel

Signed-off-by: Hans de Goede <>

4b63a0df 09/11/2012 08:42 am Hans de Goede

ehci: Properly report completed but not yet processed packets to the guest

Reported packets which have completed before being cancelled as such to the
host. Note that the new code path this patch adds is untested since it I've
been unable to actually trigger the race which needs this code path....

616789cd 09/11/2012 08:42 am Gerd Hoffmann

ehci: check for EHCI_ASYNC_FINISHED first in ehci_free_packet

Otherwise we'll see the packet free twice in the trace log even though
it actually happens only once.

Signed-off-by: Gerd Hoffmann <>

5c514681 09/11/2012 08:42 am Gerd Hoffmann

ehci: trace guest bugs

make qemu_queue_{cancel,reset} return the number of packets released,
so the caller can figure whenever there have been active packets even
though there shouldn't have been any. Add tracepoint to log this.

Signed-off-by: Gerd Hoffmann <>

1defcbd1 09/11/2012 08:42 am Gerd Hoffmann

ehci: add doorbell trace events

Signed-off-by: Gerd Hoffmann <>

3a8ca08e 09/11/2012 08:42 am Hans de Goede

ehci: Add some additional ehci_trace_guest_bug() calls

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

ef5b2344 09/11/2012 08:42 am Hans de Goede

ehci: Fix memory leak in handling of NAK-ed packets

Currently each time we try to execute a NAK-ed packet we redo
ehci_init_transfer, and usb_packet_map, re-allocing (without freeing) the
sg list every time.

This patch fixes this, it does this by introducing another async state, so...

eff6dce7 09/11/2012 08:42 am Hans de Goede

ehci: Handle USB_RET_PROCERR in ehci_fill_queue

USB_RET_PROCERR can be triggered by the guest (by for example requesting more
then BUFFSIZE bytes), so don't assert on it.

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

cf1f8169 09/11/2012 08:42 am Hans de Goede

ehci: Correct a comment in fetchqtd packet processing

Since my previous comment said "Should never happen", I tried changing the
next line to an assert(0), which did not go well, which as the new comments
explains is logical if you think about it for a moment....

18113340 09/11/2012 08:42 am Hans de Goede

usb-redir: Never return USB_RET_NAK for async handled packets

USB_RET_NAK is not a valid response for async handled packets (and will
trigger an assert as such).

Also drop the warning when receiving a status of cancelled for packets not
cancelled by qemu itself, this can happen when a device gets unredirected...

45b339b1 09/11/2012 08:42 am Hans de Goede

usb: controllers do not need to check for babble themselves

If an (emulated) usb-device tries to write more data to a packet then
its iov len, this will trigger an assert in usb_packet_copy(), and if
a driver somehow circumvents that check and writes more data to the...

cc409974 09/11/2012 08:42 am Hans de Goede

usb-core: Don't set packet state to complete on a nak

This way the hcd can re-use the same packet to retry without needing
to re-init it.

Signed-off-by: Hans de Goede <>
Signed-off-by: Gerd Hoffmann <>

4b1c11fd 09/10/2012 09:53 pm Daniel P. Berrange

Add ability to force enable/disable of tools build

The qemu-img, qemu-nbd and qemu-io tools are built conditionally
based on whether any softmmu target is enabled. These are useful
self-contained tools which can be used in many other scenarios.
Add new --enable-tools/--disable-tools args to configure to allow...

66d5499b 09/10/2012 09:53 pm Daniel P. Berrange

Add ability to disable build of all targets

Allow passing of '--target-list=' to configure to request that
all targets are to be disabled. This allows for doing a very
fast tools-only build of things like qemu-img, qemu-io, qemu-nbd.

Signed-off-by: Daniel P. Berrange <>...

bedc572e 09/10/2012 09:52 pm Yang Zhang

RTC: Remove the logic to update time format when DM bit changed

Changing the DM (binary/BCD) and 24/12 control bit doesn't affect the internal
registers. It only indicates what format is used for those registers.

Signed-off-by: Yang Zhang <>...

c4c18e24 09/10/2012 09:52 pm Yang Zhang

RTC: Rename rtc_timer_update

Signed-off-by: Yang Zhang <>
Signed-off-by: Paolo Bonzini <>
Signed-off-by: Anthony Liguori <>

e46deaba 09/10/2012 09:52 pm Paolo Bonzini

RTC: introduce RTC_CLOCK_RATE

Signed-off-by: Paolo Bonzini <>
Signed-off-by: Anthony Liguori <>

9324cc50 09/10/2012 09:52 pm Yang Zhang

RTC: Update interrupt state when interrupts are masked/unmasked

If an interrupt flag is already set when the interrupt becomes enabled,
raise an interrupt immediately, and vice versa if interrupts become
disabled.

Signed-off-by: Yang Zhang <>...

0281518a 09/10/2012 09:52 pm Paolo Bonzini

vmstate: add VMSTATE_TIMER_V

Also, for consistency with other occurrences, implement VMSTATE_TIMER
as a special case of VMSTATE_TIMER_V rather than VMSTATE_TIMER_TEST.

Signed-off-by: Paolo Bonzini <>
Signed-off-by: Anthony Liguori <>

56038ef6 09/10/2012 09:52 pm Yang Zhang

RTC: Update the RTC clock only when reading it

Calculate guest RTC based on the time of the last update, instead of
using timers. The formula is

(base_rtc + guest_time_now - guest_time_last_update + offset)

Base_rtc is the RTC value when the RTC was last updated....

41a9b8b2 09/10/2012 09:52 pm Yang Zhang

RTC: Add divider reset support

The first update cycle begins one-half seconds after divider
reset is removed. This feature is useful for testing.

Signed-off-by: Yang Zhang <>
Signed-off-by: Paolo Bonzini <>
Signed-off-by: Anthony Liguori <>

00cf5774 09/10/2012 09:52 pm Paolo Bonzini

RTC: Do not fire timer periodically to catch next alarm

This patch limits further the usage of a periodic timer. It computes the
time of the next alarm, and uses it to skip all intermediate occurrences
of the timer.

Cc: Yang Zhang <>...

e2826cf4 09/10/2012 09:52 pm Paolo Bonzini

RTC: Get and set time without going through s->current_tm

This patch makes rtc_set_time and rtc_set_cmos work without reading
s->current_tm. In the case of rtc_set_time I introduce a new
function that retrieves the time and stores into a given struct tm...

89166459 09/10/2012 09:52 pm Paolo Bonzini

RTC: Remove the current_tm field

This is not used anymore and only written to.

Signed-off-by: Paolo Bonzini <>
Signed-off-by: Anthony Liguori <>

6a38e0dc 09/10/2012 08:51 pm Anthony Liguori

Merge remote-tracking branch 'qemu-kvm/uq/master' into staging

  • qemu-kvm/uq/master:
    kvm: i386: Add classic PCI device assignment
    kvm: i386: Add services required for PCI device assignment
    kvm: Introduce kvm_has_intx_set_mask
    kvm: Introduce kvm_irqchip_update_msi_route...
14df77a6 09/10/2012 08:48 pm Anthony Liguori

Merge remote-tracking branch 'mst/tags/for_anthony' into staging

  • mst/tags/for_anthony:
    vhost: Pass device path to vhost_dev_init()
    monitor: Rename+move net_handle_fd_param -> monitor_handle_fd_param
    pcie_aer: clear cmask for Advanced Error Interrupt Message Number...
8bf188aa 09/10/2012 06:57 pm Michael Tokarev

use --libexecdir instead of ignoring it first and reinventing it later

Commit 7b93fadf3a38d1ed65ea5536a52efc2772c6e3b8 "Add basic version
of bridge helper" put the bridge helper executable into a fixed
${prefix}/libexec/ location, instead of using ${libexecdir} for...

455aa1e0 09/10/2012 06:57 pm Anthony Liguori

socket: don't attempt to reconnect a TCP socket in server mode

Commit c3767ed0eb5d0bb25fe409ae5dec06e3411ff1b6 introduced a possible SEGV when
using a socket chardev with server=on because it assumes that all TCP sockets
are in client mode.

This patch adds a check to only reconnect when in client mode....

69fc2553 09/10/2012 04:32 pm Aurelien Jarno

Merge branch 'spice.v59' of git://anongit.freedesktop.org/spice/qemu

  • 'spice.v59' of git://anongit.freedesktop.org/spice/qemu:
    Remove #ifdef QXL_COMMAND_FLAG_COMPAT_16BPP
    qxl: Add set_client_capabilities() interface to QXLInterface
    spice: make number of surfaces runtime-configurable....
e22b1e99 09/10/2012 04:04 pm Aurelien Jarno

Merge branch 'queue/qmp' of git://repo.or.cz/qemu/qmp-unstable

  • 'queue/qmp' of git://repo.or.cz/qemu/qmp-unstable:
    tcx: tcx_screen_dump(): add error handling
    tcx: tcx24_screen_dump(): add error handling
    g364fb: g364fb_screen_dump(): add error handling...
a32354e2 09/10/2012 04:03 pm Stefan Weil

hw/mcf5206: Fix buffer overflow for MBAR read / write

Report from smatch:

mcf5206.c:384 m5206_mbar_readb(7) error: buffer overflow 'm5206_mbar_width' 128 <= 128
mcf5206.c:403 m5206_mbar_readw(8) error: buffer overflow 'm5206_mbar_width' 128 <= 128
mcf5206.c:427 m5206_mbar_readl(8) error: buffer overflow 'm5206_mbar_width' 128 <= 128...

599d64f6 09/10/2012 04:00 pm Stefan Weil

target-arm: Fix potential buffer overflow

Report from smatch:

target-arm/helper.c:651 arm946_prbs_read(6) error:
buffer overflow 'env->cp15.c6_region' 8 <= 8
target-arm/helper.c:661 arm946_prbs_write(6) error:
buffer overflow 'env->cp15.c6_region' 8 <= 8...

149eeb5f 09/10/2012 03:59 pm Stefan Weil

hw/wm8750: Fix potential buffer overflow

Report from smatch:

hw/wm8750.c:369 wm8750_tx(12) error: buffer overflow 's->i2c_data' 2 <= 2

It looks like the preprocessor statements were simply misplaced.

Replace also FUNCTION by func to please checkpatch.pl....

c3ebd3ba 09/10/2012 03:30 pm Jan Kiszka

kvm: i386: Add classic PCI device assignment

This adds PCI device assignment for i386 targets using the classic KVM
interfaces. This version is 100% identical to what is being maintained
in qemu-kvm for several years and is supported by libvirt as well. It is...

b139bd30 09/10/2012 03:29 pm Jan Kiszka

kvm: i386: Add services required for PCI device assignment

These helpers abstract the interaction of upcoming pci-assign with the
KVM kernel services. Put them under i386 only as other archs will
implement device pass-through via VFIO and not this classic interface....

3ab73842 09/10/2012 03:29 pm Jan Kiszka

kvm: Introduce kvm_has_intx_set_mask

Will be used by PCI device assignment code.

Signed-off-by: Jan Kiszka <>
Acked-by: Acked-by: Michael S. Tsirkin <>
Signed-off-by: Avi Kivity <>

cc57407e 09/10/2012 03:28 pm Jan Kiszka

kvm: Introduce kvm_irqchip_update_msi_route

This service allows to update an MSI route without releasing/reacquiring
the associated VIRQ. Will be used by PCI device assignment, later on
likely also by virtio/vhost and VFIO.

Signed-off-by: Jan Kiszka <>...

089f5c06 09/10/2012 02:38 pm Blue Swirl

target-s390x: avoid AREG0 for misc helpers

Make misc helpers take a parameter for CPUState instead
of relying on global env.

Signed-off-by: Blue Swirl <>
[agraf: fix conflict]
Signed-off-by: Alexander Graf <>

19b0516f 09/10/2012 02:38 pm Blue Swirl

target-s390x: switch to AREG0 free mode

Add an explicit CPUState parameter instead of relying on AREG0.

Remove temporary wrappers and switch to AREG0 free mode.

Signed-off-by: Blue Swirl <>
[agraf: fix conflicts]
Signed-off-by: Alexander Graf <>

6845df48 09/10/2012 02:38 pm Aurelien Jarno

tcg/s390: fix ld/st with CONFIG_TCG_PASS_AREG0

The load/store slow path has been broken in e141ab52d:
- We need to move 4 registers for store functions and 3 registers for
load functions and not the reverse.
- According to the s390x calling convention the arguments of a function...

aea1e885 09/10/2012 02:38 pm Blue Swirl

target-s390x: rename op_helper.c to misc_helper.c

Now op_helper.c contains miscellaneous helpers, rename
it to misc_helper.c.

Signed-off-by: Blue Swirl <>
[agraf: fix conflict]
Signed-off-by: Alexander Graf <>

449c0d70 09/10/2012 02:38 pm Blue Swirl

target-s390x: avoid AREG0 for FPU helpers

Make FPU helpers take a parameter for CPUState instead
of relying on global env.

Introduce temporary wrappers for FPU load and store ops.

Signed-off-by: Blue Swirl <>
Signed-off-by: Alexander Graf <>

4fda26a7 09/10/2012 02:38 pm Blue Swirl

target-s390x: avoid AREG0 for integer helpers

Make integer helpers take a parameter for CPUState instead
of relying on global env.

Signed-off-by: Blue Swirl <>
Signed-off-by: Alexander Graf <>

932385a3 09/10/2012 02:38 pm Blue Swirl

target-s390x: avoid AREG0 for condition code helpers

Make condition code helpers take a parameter for CPUState instead
of relying on global env.

Signed-off-by: Blue Swirl <>
Signed-off-by: Alexander Graf <>