Statistics
| Branch: | Revision:

root @ 7830cf78

# Date Author Comment
7830cf78 03/11/2013 02:26 am Blue Swirl

baum: fix build

08744c98115cfa144ed3493556024e400b2e2573 removed hw/baum.h
but did not adjust hw/baum.c, breaking build. Fix.

Signed-off-by: Blue Swirl <>
Message-id: ...
fcfb4d6a 03/08/2013 09:57 pm Anthony Liguori

serial: add flow control to transmit

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
7df4d457 03/08/2013 09:57 pm Amit Shah

virtio: console: add flow control

The virtio-serial-bus already has the logic to make flow control work
properly. Hook into the char layer's new ability to signal a backend is
writable again.

Signed-off-by: Amit Shah <>
Message-id: ...
d6258c93 03/08/2013 09:57 pm Amit Shah

virtio-serial: make flow control explicit in virtio-console

virtio-console.c used to return a value less than the number of bytes
asked to be written out to a chardev backend in case the backend is not
writable. virtio-serial-bus.c then implicitly enabled flow control for...
08744c98 03/08/2013 09:57 pm Anthony Liguori

qemu-char: move baum registration to baum.c

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
5ab8211b 03/08/2013 09:57 pm Anthony Liguori

qemu-char: move msmouse registeration to msmouse.c

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
01f45d98 03/08/2013 09:57 pm Anthony Liguori

qemu-char: move text console init to console.c

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
23673ca7 03/08/2013 09:57 pm Anthony Liguori

qemu-char: add watch support

This allows a front-end to request for a callback when the backend
is writable again.

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id: ...
e6a87ed8 03/08/2013 09:57 pm Anthony Liguori

qemu-char: add pty watch

This lets ptys support adding front end watchs.

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id: ...
d3cc5bc4 03/08/2013 09:57 pm Amit Shah

char: add gio watch fn for tcp backends

Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
8aa33caf 03/08/2013 09:57 pm Anthony Liguori

qemu-char: use a glib timeout instead of qemu-timer

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
9f939df9 03/08/2013 09:57 pm Anthony Liguori

qemu-char: remove use of QEMUTimer in favor of glib idle function

qemu-char is now independent of the QEMU main loop.

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id: ...
d654f34e 03/08/2013 09:57 pm Anthony Liguori

qemu-char: make char drivers dynamically registerable

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
26c60614 03/08/2013 09:57 pm Anthony Liguori

qemu-char: move spice registration to spice-qemu-char.c

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
2ea5a7af 03/08/2013 09:57 pm Anthony Liguori

qemu-char: tcp: make use GIOChannel

I didn't bother switching to g_io_channel_read/write because we need to use
sendmsg on Unix. No problem though since we're using an unbuffered channel.

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>...
a29753f8 03/08/2013 09:57 pm Anthony Liguori

qemu-char: convert fd_chr to use a GIOChannel

This uses the newly introduced IOWatchPoll source.

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id: ...
093d3a20 03/08/2013 09:57 pm Anthony Liguori

qemu-char: convert pty to GIOChannel

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
76a9644b 03/08/2013 09:57 pm Anthony Liguori

qemu-char: convert UDP to GIOChannel

Signed-off-by: Anthony Liguori <>
Signed-off-by: Amit Shah <>
Message-id:
Signed-off-by: Anthony Liguori <>
baca6f18 03/08/2013 09:57 pm Anthony Liguori

char-socket: fix error reporting

Right now the inet connect code tries all available addresses but until one
doesn't fail. It passes local_err each time without clearing it from the
previous failure. This can trigger an assert since the inet connect code...
ed7a1540 03/08/2013 09:57 pm Anthony Liguori

qemu-char: remove dead/confusing logic with nb_stdio_clients

This code is very old dating back to 2007. What is puzzling is that
STDIO_MAX_CLIENTS was always #define to 1 meaning that all of the code to deal
with more than one client was unreachable.

Just remove the whole mess of it....
96c63847 03/08/2013 09:57 pm Anthony Liguori

char: add IOWatchPoll support

This is a special GSource that supports CharDriverState style
poll callbacks.

For reviewability and bisectability, this code is #if 0'd out in this
patch to avoid unused warnings since all of the functions are static.

Signed-off-by: Anthony Liguori <>...
0bc472a9 03/07/2013 10:27 am Kuo-Jung Su

hw/nand.c: correct the sense of the BUSY/READY status bit

The BIT6 of Status Register(SR):

SR6 behaves the same as R/B# pin
SR6 = 0 indicates the device is busy;
SR6 = 1 means the device is ready

Some NAND flash controller (i.e. ftnandc021) relies on the SR6...
76c48503 03/05/2013 04:11 pm Aurelien Jarno

Merge branch 'target-arm.next' of git://git.linaro.org/people/pmaydell/qemu-arm

  • 'target-arm.next' of git://git.linaro.org/people/pmaydell/qemu-arm:
    MAINTAINERS: add entry for ARM KVM guest cores
    configure: Enable KVM on ARM
    hw/kvm/arm_gic: Implement support for KVM in-kernel ARM GIC...
597e2cec 03/05/2013 04:04 pm Richard Henderson

mipsn32-linux-user: Configure the architecture properly

N32 is a 64-bit cpu with a 32-bit address space. We have
existing cpp defines for this situation, but weren't using them.

This does mean that the linux-user/mipsn32 directory must be
merged with the linux-user/mips64 directory, and differences...
084d0497 03/05/2013 12:58 pm Richard Henderson

mips-linux-user: Save and restore fpu and dsp from sigcontext

Signed-off-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>
ff4f7382 03/05/2013 12:58 pm Richard Henderson

mips-linux-user: Fix n32 and n64 syscalls

Signed-off-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>
68473f15 03/05/2013 12:58 pm Richard Henderson

mips64-linux-user: Enable 64-bit address mode and fpu

Signed-off-by: Richard Henderson <>
Signed-off-by: Aurelien Jarno <>
51cd14d3 03/05/2013 02:58 am Richard Henderson

mips-linux-user: Enable mips64 and mipsn32 linux-user targets

At this point we can enable compilation, though things
still don't work.

Signed-off-by: Richard Henderson <>
Reviewed-by: Peter Maydell <>
Signed-off-by: Aurelien Jarno <>
ff970904 03/05/2013 02:56 am Richard Henderson

mips-linux-user: Share o32 code for n32 and n64 signals

Signed-off-by: Richard Henderson <>
Reviewed-by: Peter Maydell <>
Signed-off-by: Aurelien Jarno <>
2c3c6689 03/05/2013 02:55 am Richard Henderson

mips-linux-user: Delete n32 and n64 signal stubs

Deleting these first makes the next patch much easier to read.
This doesn't cause any sort of compilation failure because we
have not yet enabled n32/n64 compilation. This is dead code.

Signed-off-by: Richard Henderson <>...
ed4659d1 03/05/2013 02:45 am Peter Maydell

MAINTAINERS: add entry for ARM KVM guest cores

Add an entry indicating maintainer status for the ARM KVM code.

Signed-off-by: Peter Maydell <>
68b05c42 03/05/2013 02:45 am Peter Maydell

configure: Enable KVM on ARM

Enable KVM on ARM hosts, now that all the necessary components
for it exist.

Signed-off-by: Peter Maydell <>
Reviewed-by: Paolo Bonzini <>
ed466761 03/05/2013 02:45 am Peter Maydell

hw/kvm/arm_gic: Implement support for KVM in-kernel ARM GIC

Implement support for using the KVM in-kernel GIC for ARM.

Signed-off-by: Peter Maydell <>
Reviewed-by: Andreas Färber <>
eb035b48 03/05/2013 02:45 am Peter Maydell

target-arm: Use MemoryListener to identify GIC base address for KVM

When using an in-kernel GIC with KVM, we need to tell the kernel where
the GIC's memory mapped registers live. Do this by registering a
MemoryListener which tracks where the board model maps the A15's...
53111180 03/05/2013 02:45 am Peter Maydell

hw/arm_gic: Convert ARM GIC classes to use init/realize

Convert the ARM GIC classes to use init/realize rather than
SysBusDevice::init. (We have to do them all in one patch to
avoid unconverted subclasses calling a nonexistent SysBusDevice
init function in the base class and crashing.)...
9ecb9926 03/05/2013 02:45 am Peter Maydell

hw/arm_gic: Add presave/postload hooks

Add presave/postload hooks to the ARM GIC common base class.
These will be used by the KVM in-kernel GIC subclass to sync
state between kernel and userspace when migrating.

Signed-off-by: Peter Maydell <>...
81635574 03/05/2013 02:45 am Peter Maydell

ARM KVM: save and load VFP registers from kernel

Add support for saving and restoring VFP register state from the
kernel. This includes a check that the KVM-created CPU has full
VFP support (as the TCG Cortex-A15 model always does), since for
the moment ARM QEMU doesn't have any way to tweak optional features...
494b00c7 03/05/2013 02:45 am Christoffer Dall

ARM: KVM: Add support for KVM on ARM architecture

Add basic support for KVM on ARM architecture.

Signed-off-by: Christoffer Dall <>
[PMM: Minor tweaks and code cleanup, switch to ONE_REG]
Signed-off-by: Peter Maydell <>...
2e07b297 03/05/2013 02:34 am Peter Maydell

oslib-posix: Align to permit transparent hugepages on ARM Linux

ARM Linux (like x86-64 Linux) can use transparent hugepages for
KVM if memory blocks are 2MiB aligned; set QEMU_VMALLOC_ALIGN
accordingly.

Signed-off-by: Peter Maydell <>...
eadd0e44 03/05/2013 02:34 am Peter Maydell

linux-headers: resync from mainline to add ARM KVM headers

Resync QEMU's copy of the Linux kernel headers from
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
commit 2ef14f4. This adds the ARM KVM headers, since ARM KVM
support has just hit mainline via Russell's ARM tree....
f5206413 03/05/2013 02:34 am Peter Maydell

target-arm: Drop CPUARMState* argument from bank_number()

Drop the CPUARMState* argument from bank_number(), since we only
use it for passing to cpu_abort(). Use hw_error() instead.
This avoids propagating further interfaces using env pointers.

In the long term this function's callers need auditing to fix...
81465888 03/05/2013 02:31 am Peter Maydell

target-arm: Factor out handling of SRS instruction

Factor out the handling of the SRS instruction rather than
duplicating it between the Thumb and ARM decoders. This in
passing fixes two bugs in the Thumb decoder's SRS handling
which didn't exist in the ARM decoder:...
00115976 03/05/2013 02:31 am Peter Maydell

target-arm: Don't decode RFE or SRS on M profile cores

M profile cores do not have the RFE or SRS instructions, so
correctly UNDEF these insn patterns on those cores.

Signed-off-by: Peter Maydell <>
26135ead 03/05/2013 02:02 am Richard Sandiford

target-mips: Fix accumulator selection for MIPS16 and microMIPS

Add accumulator arguments to gen_HILO and gen_muldiv, rather than
extracting the accumulator directly from ctx->opcode. The extraction
was only right for the standard encoding: MIPS16 doesn't have access...
54b2f42c 03/04/2013 08:03 pm Meador Inge

target-mips: Translate breaks and traps into the appropriate signal

GCC and GAS are capable of generating traps or breaks to check for
division by zero. Additionally, GAS is capable of generating traps
or breaks to check for overflow on certain division and multiplication...
20c334a7 03/04/2013 07:15 pm Petar Jovanovic

target-mips: fix DSP overflow macro and affected routines

The previous implementation incorrectly used same macro to detect overflow
for addition and subtraction. This patch makes distinction between these
two, and creates separate macros. The affected routines are changed...
71df81af 03/04/2013 04:22 pm Anthony Liguori

Merge remote-tracking branch 'stefanha/block' into staging

  1. By MORITA Kazutaka (5) and others
  2. Via Stefan Hajnoczi
    • stefanha/block:
      block: for HMP commit() operations on 'all', skip non-COW drives
      sheepdog: add support for connecting to unix domain socket...
a6900601 03/04/2013 04:22 pm Anthony Liguori

Merge remote-tracking branch 'mst/tags/for_anthony' into staging

virtio,vhost,pci,e1000

Mostly bugfixes, but also some ICH work by Laszlo.

Signed-off-by: Michael S. Tsirkin <>

  1. gpg: Signature made Thu 28 Feb 2013 07:13:56 AM CST using RSA key ID D28D5469...
e482dedc 03/04/2013 04:20 pm Anthony Liguori

Merge remote-tracking branch 'kraxel/seabios-1.7.2.1' into staging

  1. By Gerd Hoffmann
  2. Via Gerd Hoffmann
    • kraxel/seabios-1.7.2.1:
      update seabios to 1.7.2.1
bf5363ef 03/04/2013 04:20 pm Anthony Liguori

Merge remote-tracking branch 'stefanha/net' into staging

  1. By Jason Wang (2) and others
  2. Via Stefan Hajnoczi
    • stefanha/net:
      qmp: netdev_add is like -netdev, not -net, fix documentation
      doc: document -netdev hubport
      net: reduce the unnecessary memory allocation of multiqueue...
2c20e711 03/04/2013 10:54 am Paolo Bonzini

dataplane: remove EventPoll in favor of AioContext

During the review of the dataplane code, the EventPoll API morphed itself
(not concidentially) into something very very similar to an AioContext.
Thus, it is trivial to convert virtio-blk-dataplane to use AioContext,...
4ef7b894 03/04/2013 10:54 am MORITA Kazutaka

slirp/tcp_subr.c: fix coding style in tcp_connect

Fix coding style in tcp_connect before the next patch.

Signed-off-by: MORITA Kazutaka <>
Signed-off-by: Stefan Hajnoczi <>
bf1c852a 03/04/2013 10:54 am MORITA Kazutaka

move socket_set_nodelay to osdep.c

Signed-off-by: MORITA Kazutaka <>
Signed-off-by: Stefan Hajnoczi <>
5d6768e3 03/04/2013 10:54 am MORITA Kazutaka

sheepdog: accept URIs

The URI syntax is consistent with the NBD and Gluster syntax. The
syntax is

sheepdog[+tcp]://[host:port]/vdiname[#snapid|#tag]

Signed-off-by: MORITA Kazutaka <>
Signed-off-by: Stefan Hajnoczi <>
25af257d 03/04/2013 10:54 am MORITA Kazutaka

sheepdog: use inet_connect to simplify connect code

This uses the form "<host>:<port>" for the representation of the
sheepdog server to use inet_connect.

Signed-off-by: MORITA Kazutaka <>
Signed-off-by: Stefan Hajnoczi <>
1b8bbb46 03/04/2013 10:54 am MORITA Kazutaka

sheepdog: add support for connecting to unix domain socket

This patch adds support for a unix domain socket for a connection
between qemu and local sheepdog server. You can use the unix domain
socket with the following syntax:

$ qemu sheepdog+unix:///&lt;vdiname&gt;?socket=&lt;socket path&gt;[#snapid]...
272d2d8e 03/04/2013 10:54 am Jeff Cody

block: for HMP commit() operations on 'all', skip non-COW drives

During a commit of 'all' using the HMP non-live commit, the operation
is aborted and returns error on the first error enountered. When
non-COW drives are in use (e.g. ejected floppy, cdrom, or drives without...
02d583c7 03/04/2013 10:54 am Mark Cave-Ayland

ide/macio: Fix macio DMA initialisation.

Commit 07a7484e5d713f1eb7c1c37b18a8ab0d56d88875 accidentally introduced a bug
in the initialisation of the second macio DMA device which could cause some
DMA operations to segfault QEMU.

CC: Andreas Färber <>...
69b302b2 03/04/2013 10:54 am Christian Borntraeger

virtio-blk: fix unplug + virsh reboot

virtio-blk registers a vmstate change handler. Unfortunately this
handler is not unregistered on unplug, leading to some random
crashes if the system is restarted, e.g. via virsh reboot.
Lets unregister the vmstate change handler if the device is removed....
806f352d 03/03/2013 04:29 pm Peter Maydell

gen-icount.h: Rename gen_icount_start/end to gen_tb_start/end

The gen_icount_start/end functions are now somewhat misnamed since they
are useful for generic "start/end of TB" code, used for more than just
icount. Rename them to gen_tb_start/end.

Signed-off-by: Peter Maydell <>...
3a808cc4 03/03/2013 04:28 pm Peter Maydell

translate-all.c: Remove cpu_unlink_tb()

The (unsafe) function cpu_unlink_tb() is now unused, so we can simply
remove it and any code that was only used by it.

Signed-off-by: Peter Maydell <>
Reviewed-by: Richard Henderson <>...
378df4b2 03/03/2013 04:28 pm Peter Maydell

Handle CPU interrupts by inline checking of a flag

Fix some of the nasty TCG race conditions and crashes by implementing
cpu_exit() as setting a flag which is checked at the start of each TB.
This avoids crashes if a thread or signal handler calls cpu_exit()...
77211379 03/03/2013 04:28 pm Peter Maydell

cpu-exec: wrap tcg_qemu_tb_exec() in a fn to restore the PC

If tcg_qemu_tb_exec() returns a value whose low bits don't indicate a
link to an indexed next TB, this means that the TB execution never
started (eg because the instruction counter hit zero). In this case the...
fadf9825 03/03/2013 04:28 pm Andreas Färber

cpu: Introduce ENV_OFFSET macros

Introduce ENV_OFFSET macros which can be used in non-target-specific
code that needs to generate TCG instructions which reference CPUState
fields given the cpu_env register that TCG targets set up with a
pointer to the CPUArchState struct....
0980011b 03/03/2013 04:28 pm Peter Maydell

tcg: Document tcg_qemu_tb_exec() and provide constants for low bit uses

Document tcg_qemu_tb_exec(). In particular, its return value is a
combination of a pointer to the next translation block and some
extra information in the low two bits. Provide some #defines for...
07ca08ba 03/03/2013 10:25 am Blue Swirl

tcg-sparc: fix build

Fix build breakage by 803d805bcef4ea7b7d6ef0b4929263e1160d6b3c:
make tcg_out_addsub2() always available.

Signed-off-by: Blue Swirl <>
a7fd6915 02/28/2013 08:49 pm Peter Crosthwaite

m25p80.c: Use QOM classes for part differentiation

Currently, M25P80 uses an object property to differentiate between flash parts.
Changed this over to use QOM sub-classes - the actual names of the different parts
are used to create a set of dynamic classes which passes the part info as class...
e3f9d31c 02/28/2013 08:49 pm Peter Crosthwaite

cadence_gem: Flush queued packets

The device needs to check for queued RX packets when the RX path is re-enabled.

Signed-off-by: Peter Crosthwaite <>
Message-id: ...
1c5d0790 02/28/2013 08:49 pm Peter Crosthwaite

cadence_gem: factor out can_rx() logic replication

The gem_receive() function replicates the logic for whether or not the device
can rx. Just call the actual gem_can_receive() function in place.

Signed-off-by: Peter Crosthwaite <>...
ae80a354 02/28/2013 08:49 pm Peter Crosthwaite

cadence_gem: fix interrupt events

Bits in the ISR were continually mirroring their corresponding TX/RX SR bits.
This is incorrect. The ISR bits are only ever set at the time their
corresponding event occurs.

Signed-off-by: Peter Crosthwaite <>...
5025388b 02/28/2013 08:49 pm Peter Crosthwaite

cadence_gem: Don't reset rx desc pointer on rx_en

This doesn't happen in the real hardware. The Zynq TRM explicitly states that
this bit has no effect on the rx descriptor pointer ("The receive queue
pointer register is unaffected").

Signed-off-by: Peter Crosthwaite <>...
288f1e3f 02/28/2013 08:49 pm Peter Crosthwaite

cadence_gem: Add debug msgs for rx desc movement

Add some helpful messages that show the rx descriptor pointer moving as packets
are rxed.

Signed-off-by: Peter Crosthwaite <>
Message-id: ...
80f4d9fc 02/28/2013 08:49 pm Peter Crosthwaite

vl.c: allow for repeated -sd arguments

Allows for repeating of -sd arguments in the same way as -pflash and -mtdblock.

Acked-by: Igor Mitsyanko <>
Reviewed-by: Peter Maydell <>
Signed-off-by: Peter Crosthwaite <>...
b972b4e2 02/28/2013 08:49 pm Peter Crosthwaite

xilinx_zynq: Added SD controllers

The Xilinx Zynq device has two SDHCI controllers. Added to the machine model.

Reviewed-by: Peter Maydell <>
Signed-off-by: Peter Crosthwaite <>
Signed-off-by: Peter Maydell <>
353575f0 02/28/2013 08:23 pm Peter Crosthwaite

arm: a9mpcore: Coreify the SCU

Split the SCU in a9mpcore out into its own object definition. mpcore is now
just a container for the mpcore components.

Signed-off-by: Peter Crosthwaite <>
Signed-off-by: Peter Maydell <>
d7dfca08 02/28/2013 08:23 pm Igor Mitsyanko

hw/sdhci: introduce standard SD host controller

Device model for standard SD Host Controller Interface (SDHCI) compliant with
version 2.00 of SD association specification.

Signed-off-by: Peter Crosthwaite <>
Signed-off-by: Igor Mitsyanko <>...
c6205ddf 02/28/2013 08:23 pm Peter Crosthwaite

arm: mptimer: CamelCased type names

Trivial find replace on type names "timerblock" and "arm_mptimer_state" to
conform with QEMU coding style.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>...
845769fc 02/28/2013 08:23 pm Peter Crosthwaite

arm: arm11mpcore, a9mpcore: CamelCased type names

To conform with QEMU coding style.

Signed-off-by: Peter Crosthwaite <>
Signed-off-by: Peter Maydell <>
cde4577f 02/28/2013 08:23 pm Peter Crosthwaite

arm: mptimer: Remove WDT distinction

In QEMU emulation, there is no functional difference between the ARM mpcore
private timers and watchdogs. Removed all the distinction between the two from
arm_mptimer.c and converted it to be just the mptimer. a9mpcore and arm11mpcore...
95959782 02/28/2013 08:23 pm Peter Crosthwaite

arm: a9mpcore: remove old_timer_status field

This field was write only and thus unused. Removed.

Signed-off-by: Peter Crosthwaite <>
Signed-off-by: Peter Maydell <>
5c78d6a8 02/28/2013 08:23 pm Antoine Mathys

hw/ds1338: Fix conversion between 12 hours and 24 hours modes.

The proper mapping between 24 hours and 12 hours modes is:
0 12 AM
1-11 1-11 AM
12 12 PM
13-23 1-11 PM
Fix code accordingly.

Signed-off-by: Antoine Mathys <>...
6e392787 02/28/2013 08:23 pm Peter Maydell

hw/pflash_cfi01: Make read after byte-write or erase return status

The Intel flash command set requires that a read operation after
doing a 'single byte write' command returns the status register;
add this case to pflash_read() so we return the correct information....
1be97bf2 02/28/2013 08:23 pm Peter Maydell

hw/pflash_cfi01: Treat read in unknown command state as read

The code for handling the default "unknown command state" case in
pflash_read in pflash_cfi01.c comments "reset state & treat it as
a read". However the code doesn't actually do this. Moving the...
5c75fb10 02/28/2013 10:19 am Gerd Hoffmann

update seabios to 1.7.2.1

Alex Williamson (3):
seabios q35: Enable all PIRQn IRQs at startup
seabios q35: Add new PCI slot to irq routing function
seabios: Add a dummy PCI slot to irq mapping function

Avik Sil (1):
USB-EHCI: Fix null pointer assignment...
a4bcea3d 02/27/2013 09:06 pm Richard Henderson

target-i386: Use mulu2 and muls2

These correspond very closely to the insns that we're emulating.

Signed-off-by: Richard Henderson <>
Signed-off-by: Blue Swirl <>
554f1997 02/27/2013 05:24 pm Gal Hammer

Set virtio-serial device to have a default of 2 MSI vectors.

The virtio-serial device is expected to use 2 MSI vectors, one for
control queue and a second shared for all queues.

Signed-off-by: Gal Hammer <>
Signed-off-by: Michael S. Tsirkin <>
7feb640c 02/27/2013 05:23 pm Alexey Korolev

Fix guest OS hang when 64bit PCI bar present

This patch addresses the issue fully described here:
http://lists.nongnu.org/archive/html/qemu-devel/2013-02/msg01804.html

Linux kernels prior to 2.6.36 do not disable the PCI device during
enumeration process. Since lower and higher parts of a 64bit BAR...
0e98b436 02/27/2013 05:23 pm Laszlo Ersek

ICH9 LPC: Reset Control Register, basic implementation

This commit does the same for the ICH9 LPC as commit 1ec4ba74 for the
PIIX3. For the present we're ignoring the Full Reset (FULL_RST) and System
Reset (SYS_RST) bits; the guest can read them back but that's it....
2af234e6 02/27/2013 05:23 pm Michael S. Tsirkin

e1000: unbreak the guest network migration to 1.3

QEMU 1.3 does not emulate the link auto negotiation, so if migrate to a
1.3 machine during link auto negotiation, the guest link will be set to down.
Fix this by just disabling auto negotiation for 1.3 and older....
ce675a75 02/27/2013 05:10 pm Jason Wang

tap: forbid creating multiqueue tap when hub is used

Obviously, hub does not support multiqueue tap. So this patch forbids creating
multiple queue tap when hub is used to prevent the crash when command line such
as "-net tap,queues=2" is used.

Cc: ...
d26e445c 02/27/2013 05:10 pm Peter Lieven

tap: set IFF_ONE_QUEUE per default

historically the kernel queues packets two times. once
at the device and second in qdisc. this is believed to cause
interface stalls if one of these queues overruns.

setting IFF_ONE_QUEUE is the default in kernels >= 3.8. the...
f6b26cf2 02/27/2013 05:10 pm Jason Wang

net: reduce the unnecessary memory allocation of multiqueue

Edivaldo reports a problem that the array of NetClientState in NICState is too
large - MAX_QUEUE_NUM(1024) which will wastes memory even if multiqueue is not
used.

Instead of static arrays, solving this issue by allocating the queues on demand...
40e8c26d 02/27/2013 05:10 pm Stefan Hajnoczi

doc: document -netdev hubport

Reviewed-by: Markus Armbruster <>
Signed-off-by: Stefan Hajnoczi <>
af347aa5 02/27/2013 05:10 pm Markus Armbruster

qmp: netdev_add is like -netdev, not -net, fix documentation

Cc:
Signed-off-by: Markus Armbruster <>
Reviewed-by: Laszlo Ersek <>
Signed-off-by: Stefan Hajnoczi <>
7d91ddd2 02/27/2013 05:10 pm Luigi Rizzo

net: fix unbounded NetQueue

In the current implementation of qemu, running without a network
backend will cause the queue to grow unbounded when the guest is
transmitting traffic.

This patch fixes the problem by implementing bounded size NetQueue,
used with an arbitrary limit of 10000 packets, and dropping packets...
199ee608 02/27/2013 05:10 pm Luigi Rizzo

net: fix qemu_flush_queued_packets() in presence of a hub

When frontend and backend are connected through a hub as below
(showing only one direction), and the frontend (or in general, all
output ports of the hub) cannot accept more traffic, the backend
queues packets in queue-A....
6b37a23d 02/26/2013 11:59 pm Michael S. Tsirkin

vhost: memory sync fixes

This fixes two bugs related to memory sync during
migration:
- ram address calculation was missing the chunk
address, so the wrong page was dirtied
- one after last was used instead of the
end address of a region, which might overflow to 0...
ee24aaf3 02/26/2013 09:36 pm Anthony Liguori

Merge remote-tracking branch 'kiszka/queues/slirp' into staging

  1. By Jan Kiszka
  2. Via Jan Kiszka
    • kiszka/queues/slirp:
      slirp: Properly initialize pollfds_idx of new sockets
31e76f65 02/26/2013 09:35 pm Alexander Graf

glib: Add compat wrapper for g_poll on old glib

Older glib doesn't implement g_poll(). Most notably the glib version in use
on SLE11 is on 2.18 which is hit by this.

We do want to use g_poll() in the source however. So on older systems, just
wrap it with functions that do exist on older versions....
989b697d 02/26/2013 09:31 pm Peter Maydell

qemu-log: default to stderr for logging output

Switch the default for qemu_log logging output from "/tmp/qemu.log"
to stderr. This is an incompatible change in some sense, but logging
is mostly used for debugging purposes so it shouldn't affect production...