Statistics
| Branch: | Revision:

root / hw @ 95669e69

# Date Author Comment
11a5e482 06/03/2013 07:17 pm Igor Mitsyanko

hw/arm/exynos4210.c: convert chipid_and_omr to an mmio region

Exynos SoC was misusing memory_region_init_ram_ptr(): this interface can safely
be used only for memory regions which size is a multiple of target page size.
Change chipid_and_omr memory to an mmio region to fix this....

6539ed21 06/03/2013 07:17 pm Igor Mitsyanko

exynos4210.c: register rom_mem for memory migration

Even if we do not register newly created RAM MemoryRegion for migration with
vmstate_register_ram_global() function, ram_save_setup() still saves this region
to snapshot file with empty idstr=="". Consequently this results in error during...

95669e69 06/03/2013 07:17 pm Jean-Christophe DUBOIS

i.MX: Improve EPIT timer code.

  • Unify function and type naming
  • use dynamic cast whenever possible
  • simplify Debug printf.
  • use new style device intialization.

Signed-off-by: Jean-Christophe DUBOIS <>
Reviewed-by: Peter Chubb <>...

677ff2ae 06/03/2013 07:17 pm Peter Crosthwaite

sd/sdhci.c: Fix bdata_read DPRINT message

This message was printing out the data in decimal only, which is not
very friendly to the debugging developer. Add hex variant in
parenthesis to make it consistent with other similar messages in this
module.

Signed-off-by: Peter Crosthwaite <>...

1d32c26f 06/03/2013 07:17 pm Peter Crosthwaite

sd/sdhci:ADMA: fix interrupt

The end of transfer check was occurring and potentially returning before
the interrupt flag was checked. This means the interrupt will be missed
if it occurs on the last packet. Fix by checking for the interrupt
before checking for the end of transfer....

37ab4a56 06/03/2013 07:17 pm Peter Crosthwaite

sd/sd.c: Fix "inquiry" ACMD41

QEMU models two (of the three) ACMD41 has two modes, "inquiry" and
"first". The selection logic for which of the two is incorrect - it
compares != 0 for the entire argument value rather than only bits 23:0
as per the spec. Fix....

a50c0d6f 06/03/2013 07:17 pm Jean-Christophe DUBOIS

i.MX: split GPT and EPIT timer implementation

There is no common code between these 2 timer implementation.
So it is better to split them.

Signed-off-by: Jean-Christophe DUBOIS <>
Message-id: ...

a66418f6 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: lqspi: Push more data to tx-fifo

Do 16 words per fifo flush. Increases performance and decreases
debug verbosity. This data depth has no real hardware analogue,
so just go with something that has reasonable performance.

Signed-off-by: Peter Crosthwaite <>...

b0b7ae62 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: lqspi: Fix byte/misaligned access

The LQSPI bus attachment supports byte/halfword and misaligned
accesses. Fixed. Refactored the LQSPI cache to be byte-wise
instead of word wise accordingly.

Signed-off-by: Peter Crosthwaite <>...

656f416c 06/03/2013 07:17 pm Peter Crosthwaite

sd/sdhci.c: Only reset data_count on new commands

The data_count variable was being reset on every transfer, including
DMA transfer resumptions. This is incorrect, it should only be set
on a new command.

Manifests as a bug when using ADMA and there is a timer delay between...

dcdb4cd8 06/03/2013 07:17 pm Peter Crosthwaite

sd/sdhci: Fix Buffer Write Ready interrupt

This interrupt is not risen after the last block is written to sd. It
is mutually exclusive with the end of transfer conditions. Fix.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Igor Mitsyanko <>...

15408b42 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: lqspi: Dont touch config register

The LQSPI mode is supposed to work via the automatic CS mode feature
rather than manipulate CS lines itself. Now that auto CS is implemented
remove LQSPIs CS mode override logic. There is still a need to
manipulate the U_PAGE bit in LQSPI config register to implement...

2133a5f6 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Fix CTRL register RW bits

The CTRL register was RAZ/WI on some of the RW bits. Even though the
function behind these bits is invalid in QEMU, they should still be
guest accessible. Fix.

Signed-off-by: Peter Crosthwaite <>...

9151da25 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Fix striping behaviour

The QSPI controller was using byte-wide stripes when striping across
the two flashes in dual parallel mode. The real hardware however uses
individual bit striping. QEMU misbehaves in the (corner) case where
data is written/read in dual-parallel mode and read/written back in...

c37fc509 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Debug msgs for Snoop state

This is worth keeping track of when debugging the device model.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>
Reviewed-by: Edgar E. Iglesias <>...

4a5b6fa8 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Multiple debug verbosity levels

The debug printfs on every SPI operation is extremely verbose. Add
a second level of debug for this.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>...

10e60b35 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Fix QSPI FIFO size

QSPI has a bigger FIFO than the regular SPI controller. Differentiate
between the two with correct FIFO sizes for each.

This is the first piece of class data for SPIPS, so this patch sees
the creation of the XilinxSPIPSClass definition and assoicated QOM...

b5cd9143 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Trash LQ page cache on mode change

Invalidate the LQSPI cached page when transitioning into LQSPI mode.
Otherwise there is a possibility that the controller will return stale
data to the guest when transitioning back to LQ_MODE after a page...

e100f3be 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Add automatic start support

SPI has a mode where it automatically starts based on tx fifo
occupancy. Implemented.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>
Reviewed-by: Edgar E. Iglesias <>...

c4f08ffe 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Implement automatic CS

Implement the automatic CS control feature. If the MANUAL_CS bit is
cleared then the chip select stay de-asserted as long as the tx FIFO
is empty.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>...

6b91f015 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: seperate SPI and QSPI as two classes

Make SPI and QSPI different classes. QSPIPS is setup as a child of SPIPS.
Only QSPI has the LQSPI functionality, so move all that to the child class.

Signed-off-by: Peter Crosthwaite <>...

87920b44 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Make interrupts clear on read

By default these interrupts are clear on read.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>
Reviewed-by: Edgar E. Iglesias <>...

3ea728d0 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Inhibit interrupts in LQSPI mode

The real hardware does not produce interrupts in LQSPI mode. Inhibit
generation of interrupts when the LQ_MODE bit is set.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>...

abef5fa6 06/03/2013 07:17 pm Peter Crosthwaite

xilinx_spips: Add verbose LQSPI debug output

You really need this is you want to track a guest banging on LQSPI.

Signed-off-by: Peter Crosthwaite <>
Reviewed-by: Peter Maydell <>
Reviewed-by: Edgar E. Iglesias <>...

40459a03 06/03/2013 04:37 pm Anthony Liguori

Merge remote-tracking branch 'kraxel/usb.83' into staging

  1. By Gerd Hoffmann (5) and others
  2. Via Gerd Hoffmann
    • kraxel/usb.83:
      xhci: add live migration support
      xhci: add xhci_init_epctx
      xhci: add xhci_alloc_epctx
      xhci: add XHCISlot->addressed
      pci: add VMSTATE_MSIX...
7087d3df 06/03/2013 04:37 pm Anthony Liguori

Merge remote-tracking branch 'mjt/trivial-patches' into staging

  1. By Ed Maste (3) and others
  2. Via Michael Tokarev
    • mjt/trivial-patches:
      do not check pointers after dereferencing them
      m25p80: Add Micron n25q032a
      qemu: fix out of tree cross compile...
37352df3 06/03/2013 12:38 pm Gerd Hoffmann

xhci: add live migration support

With all preparing pieces in place we can finally drop in
the vmstate structs and the postload function.

Signed-off-by: Gerd Hoffmann <>

4034e693 06/03/2013 12:37 pm Gerd Hoffmann

xhci: add XHCISlot->addressed

Preparing for live-migration support, post_load will need that.

Signed-off-by: Gerd Hoffmann <>

492b21f6 06/03/2013 12:37 pm Gerd Hoffmann

xhci: add xhci_alloc_epctx

Factor out endpoint context allocation to a separate function.
xhci live migration will need that too, in post_load.

Signed-off-by: Gerd Hoffmann <>

003e15a1 06/03/2013 12:37 pm Gerd Hoffmann

xhci: add xhci_init_epctx

Factor out endpoint context initialization to a separate function.
xhci live migration will need that too, in post_load.

Signed-off-by: Gerd Hoffmann <>

340b50c7 06/03/2013 12:37 pm Gerd Hoffmann

pci: add VMSTATE_MSIX

Using a trick cut+pasted from vmstate_scsi_device
to wind up msix_save and msix_load.

Signed-off-by: Gerd Hoffmann <>
Acked-by: Michael S. Tsirkin <>

75633529 06/03/2013 08:17 am Michael Marineau

Fix usage of USB_DEV_FLAG_IS_HOST flag.

USB_DEV_FLAG_IS_HOST is the bit number, not value. Booting with a
"Fitbit Base Station" USB dongle was triggering this assert.

Signed-off-by: Michael Marineau <>
Cc:
Signed-off-by: Gerd Hoffmann <>

45ec2671 06/03/2013 08:17 am Ed Maste

host-libusb: Correct test for USB packet state

USB_RET_ASYNC is -6, so inflight was always false.

Signed-off-by: Ed Maste <>
Cc:
Signed-off-by: Gerd Hoffmann <>

f10acc8b 06/02/2013 07:45 pm Mark Cave-Ayland

tcx: Fix 24-bit display mode

Commit d08151bf (conversion of tcx to the memory API) broke the 24-bit mode of
the tcx display adapter by accidentally passing in the final address of the
dirty region to memory_region_reset_dirty() instead of its size.

Signed-off-by: Mark Cave-Ayland <>...

cd2e64ce 06/01/2013 01:25 pm Ed Maste

m25p80: Add Micron n25q032a

Based on the datasheet at
http://www.micron.com/~/media/Documents/Products/Data%20Sheet/NOR%20Flash/Serial%20NOR/N25Q/n25q_32mb_1_8v_65nm.pdf

Signed-off-by: Ed Maste <>
Signed-off-by: Michael Tokarev <>

6681fca3 06/01/2013 01:25 pm Stefan Weil

Remove unnecessary break statements

Fix these warnings from cppcheck:

hw/display/cirrus_vga.c:2603:
hw/sd/sd.c:348:
hw/timer/exynos4210_mct.c:1033:
target-arm/translate.c:9886:
target-s390x/mem_helper.c:518:
target-unicore32/translate.c:1936:
style: Consecutive return, break, continue, goto or throw statements are unnecessary....

8c1f72da 06/01/2013 01:25 pm liguang

debugcon: fix always print "addr=0x0, val=0x0" bug when use DEBUG_DEBUGCON

when use DEBUG_DEBUGCON, screen spits:
debugcon: write addr=0x0000 val=0x00
Rdebugcon: write addr=0x0000 val=0x00
udebugcon: write addr=0x0000 val=0x00
ndebugcon: write addr=0x0000 val=0x00...

e6ee2846 06/01/2013 01:25 pm liguang

debugcon: make debug message more readable

before change:
Bdebugcon: write addr=0x0000 val=0x6f
odebugcon: write addr=0x0000 val=0x6f
odebugcon: write addr=0x0000 val=0x74
tdebugcon: write addr=0x0000 val=0x69
idebugcon: write addr=0x0000 val=0x6e
ndebugcon: write addr=0x0000 val=0x67...

668fca91 06/01/2013 01:25 pm liguang

debugcon: fix compiler warning when open DEBUG_DEBUGCON

compiler warnings:
CC hw/char/debugcon.o
hw/char/debugcon.c: In function ‘debugcon_ioport_write’:
hw/char/debugcon.c:58: warning: format ‘%02x’ expects type ‘unsigned int’, but argument 3 has type ‘uint64_t’...

bbfa18fc 05/30/2013 07:44 pm Amos Kong

qdev: fix get_fw_dev_path to support to add nothing to fw_dev_path

Recent virtio refactoring in QEMU made virtio-bus become the parent bus
of scsi-bus, and virtio-bus doesn't have get_fw_dev_path implementation,
typename will be added to fw_dev_path by default, the new fw_dev_path...

87d23f78 05/29/2013 04:16 pm Michael S. Tsirkin

virtio-pci: drop unused wmb macro

The implementation is wrong for kvm, and it's unused anyway.
Drop it.

Signed-off-by: Michael S. Tsirkin <>
Message-id:
Signed-off-by: Anthony Liguori <>

dafb82e0 05/29/2013 04:15 pm Jordan Justen

pc_sysfw: allow flash (-pflash) memory to be used with KVM

When pc-sysfw.rom_only == 0, flash memory will be
usable with kvm. In order to enable flash memory mode,
a pflash device must be created. (For example, by
using the -pflash command line parameter.)...

dade922f 05/29/2013 04:15 pm Jordan Justen

isapc: Fix non-KVM qemu boot (read/write memory for isapc BIOS)

The isapc machine with seabios currently requires the BIOS region
to be read/write memory rather than read-only memory.

KVM currently cannot support the BIOS as a ROM region, but qemu
in non-KVM mode can. Based on this, isapc machine currently only...

338ea905 05/29/2013 04:13 pm Anthony Liguori

Merge remote-tracking branch 'aneesh/for-upstream' into staging

  1. By Aneesh Kumar K.V (3) and Gabriel de Perthuis (1)
  2. Via Aneesh Kumar K.V
    • aneesh/for-upstream:
      hw/9pfs: Be robust against paths without FS_IOC_GETVERSION
      hw/9pfs: Use O_NOFOLLOW when opening files on server...
c7e587b7 05/28/2013 12:53 pm Aneesh Kumar K.V

hw/9pfs: Fix segfault with 9p2000.u

When guest tries to chmod a block or char device file over 9pfs,
the qemu process segfaults. With 9p2000.u protocol we use wstat to
change mode bits and client don't send extension information for
chmod. We need to check for size field to check whether extension...

aed858ce 05/28/2013 12:53 pm Aneesh Kumar K.V

hw/9pfs: use O_NOFOLLOW for mapped readlink operation

With mapped security models like mapped-xattr and mapped-file, we save the
symlink target as file contents. Now if we ever expose a normal directory
with mapped security model and find real symlinks in export path, never...

0ceb092e 05/28/2013 12:53 pm Aneesh Kumar K.V

hw/9pfs: Use O_NOFOLLOW when opening files on server

9p server should never follow a symlink. So use O_NOFOLLOW with all open
syscall

Tested-by: "M. Mohan Kumar" <>
Signed-off-by: Aneesh Kumar K.V <>

db431f6a 05/28/2013 12:53 pm Gabriel de Perthuis

hw/9pfs: Be robust against paths without FS_IOC_GETVERSION

9P optionally uses the FS_IOC_GETVERSION ioctl to get information about
a file's version (sometimes called generation number).

The code checks for supported filesystems at mount time, but some paths...

6a4e1771 05/26/2013 02:37 pm Blue Swirl

Remove Sun4c, Sun4d and a few CPUs

Sun4c and Sun4d architectures and related CPUs are not fully implemented
(especially Sun4c MMU) and there has been no interest for them.

Likewise, a few CPUs (Cypress, Ross etc) are only half implemented.

Remove the machines and CPUs, they can be re-added if needed later....

fd469df9 05/24/2013 09:47 pm Anthony Liguori

Merge remote-tracking branch 'bonzini/iommu-for-anthony' into staging

  1. By Paolo Bonzini (11) and others
  2. Via Paolo Bonzini
    • bonzini/iommu-for-anthony:
      memory: clean up phys_page_find
      memory: populate FlatView for new address spaces
      memory: limit sections in the radix tree to the actual address space size...
5f9a5ea1 05/24/2013 07:42 pm Jan Kiszka

memory: Rename readable flag to romd_mode

"Readable" is a very unfortunate name for this flag because even a
rom_device region will always be readable from the guest POV. What
differs is the mapping, just like the comments had to explain already.
Also, readable could currently be understood as being a generic region...

4f39178b 05/24/2013 07:42 pm Paolo Bonzini

exec: eliminate qemu_put_ram_ptr

Reviewed-by: Peter Maydell <>
Signed-off-by: Paolo Bonzini <>

00b7ade8 05/24/2013 05:34 pm Stefan Hajnoczi

rtl8139: flush queued packets when RxBufPtr is written

Net queues support efficient "receive disable". For example, tap's file
descriptor will not be polled while its peer has receive disabled. This
saves CPU cycles for needlessly copying and then dropping packets which...

95de21a4 05/22/2013 04:22 pm Anthony Liguori

Merge remote-tracking branch 'mjt/trivial-patches' into staging

  1. By Christophe Lyon (1) and others
  2. Via Michael Tokarev
    • mjt/trivial-patches:
      target-moxie: replace target_phys_addr_t with hwaddr
      Rename hexdump to avoid FreeBSD libutil conflict
      remove some double-includes...
644c9858 05/22/2013 03:40 pm Dmitry Fleytman

virtio-net: dynamic network offloads configuration

Virtio-net driver currently negotiates network offloads
on startup via features mechanism and have no ability to
disable and re-enable offloads later.
This patch introduced a new control command that allows...

3459f01b 05/22/2013 03:40 pm Alex Williamson

pci-assign: Add MSI affinity support

To support guest MSI affinity changes update the MSI message any time
the guest writes to the address or data fields.

Signed-off-by: Alex Williamson <>
Acked-by: Michael S. Tsirkin <>...

3d1bba20 05/22/2013 03:40 pm Peter Crosthwaite

glib: Fix some misuses of gsize/size_t types

This unbreaks cross compile builds:

configure --target-list="i386-softmmu" --cpu=i386

When building on a 64bit machine.

Reported-by: David Holsgrove <>
Signed-off-by: Peter Crosthwaite <>...

3568ac2a 05/20/2013 04:20 pm Ed Maste

Rename hexdump to avoid FreeBSD libutil conflict

On FreeBSD libutil is used for openpty(), but it also provides a hexdump()
which conflicts with QEMU's.

Signed-off-by: Ed Maste <>
Reviewed-by: Paolo Bonzini <>
Message-id: ...

b9b5df6f 05/20/2013 02:54 am Aurelien Jarno

ide/macio: fix wrong opaque with TRIM support

Commit 215e47b9 enabled TRIM by default, which revealed a bug in TRIM
support for the IDE macio emulation driver, introduced in d353fb72.

The call to dma_bdrv_io() is using a wrong opaque of type IDEState
instead of DBDMA_io. This patch fixes that....

997aba8e 05/18/2013 03:35 pm Michael Tokarev

remove some double-includes

Some source files #include the same header more than
once for no good reason. Remove second #includes in
such cases.

Signed-off-by: Michael Tokarev <>

3a8ae21b 05/18/2013 03:35 pm Ed Maste

Rename hexdump to avoid FreeBSD libutil conflict

On FreeBSD libutil is used for openpty(), but it also provides a hexdump()
which conflicts with QEMU's.

Signed-off-by: Ed Maste <>
Reviewed-by: Paolo Bonzini <>
Signed-off-by: Michael Tokarev <>

6d46895b 05/16/2013 10:18 pm KONRAD Frederic

virtio: add virtio_bus_get_dev_path.

This adds virtio_bus_get_dev_path to fix migration id string which is wrong
since the virtio refactoring.

Signed-off-by: KONRAD Frederic <>
Reviewed-by: Paolo Bonzini <>
Message-id: ...

33201b51 05/15/2013 04:49 pm Peter Maydell

Revert "versatile_pci: Put the host bridge PCI device at slot 29"

This reverts commit 5f37ef92b7690423ac6311d3c597e182fc5f8fe6.
It turns out that some kernels incorrectly depend on the
old QEMU behaviour of not putting the host PCI bridge device
where the hardware puts it, because they use a swizzling IRQ...

bc04d891 05/15/2013 04:49 pm Peter Maydell

hw/pci-host/versatile.c: Update autodetect to detect newer kernels

Newer versatilepb kernels still don't get the IRQ mapping right
for the PCI controller, but they get it differently wrong (they add
a fixed +64 offset to everything they write to PCI_INTERRUPT_LINE)....

913b4b6b 05/15/2013 04:49 pm Peter Maydell

hw/pci-host/versatile.c: Provide property for forcing broken IRQ mapping

Although we try our best to automatically detect broken versions
of Linux which assume the old broken IRQ mapping we used to implement
for our model of the Versatile PCI controller, it turns out that...

8a253ec2 05/15/2013 04:48 pm KONRAD Frederic

virtio-net: add virtio_net_set_netclient_name.

This adds virtio_net_set_netclient_name, which is used to set the
name and type shown in "info network" command.

Signed-off-by: KONRAD Frederic <>
Message-id: ...

800ced8c 05/15/2013 04:48 pm KONRAD Frederic

virtio-net-x: forward the netclient name and type.

This forwards the name and the type of virtio-net-x to fix the bad
behaviour of "info network" command.

Signed-off-by: KONRAD Frederic <>
Message-id: ...

d8e846e1 05/14/2013 04:53 pm Paolo Bonzini

spitz: fix compilation failure due to pty.h namespace pollution

pty.h is polluting the global namespace with a CTRL macro. spitz
thus fails compilation with the patch at
http://article.gmane.org/gmane.comp.emulators.qemu/211337 and
this patch fixes it.
...

2d3b9895 05/14/2013 04:53 pm Gerd Hoffmann

acpi: add dummy write function for acpi timer

Otherwise the guest can crash qemu (NULL pointer dereference).

https://bugzilla.redhat.com/show_bug.cgi?id=947691

Signed-off-by: Gerd Hoffmann <>
Reviewed-by: Laszlo Ersek <>...

9e1c2ec8 05/13/2013 05:52 pm Paolo Bonzini

Revert "pc: Kill the "use flash device for BIOS unless KVM" misfeature"

This reverts commit 9953f8822cc316eec9962f0a2858c3439a80adec.
While Markus's analysis is entirely correct, there are 1.6 patches
that fix the bug for real and without requiring machine type hacks....

f6e136e4 05/13/2013 05:44 pm Anthony Liguori

Merge remote-tracking branch 'mjt/trivial-patches-next' into staging

  1. By Dong Xu Wang (2) and others
  2. Via Michael Tokarev
    • mjt/trivial-patches-next:
      osdep.h: include sys/types.h for ssize_t definition
      remove double semicolons
      clean unnecessary code: don't check g_strdup arg for NULL...
3e758c1d 05/12/2013 12:25 pm Ed Maste

m25p80.c: Sync Flash chip list with Linux

Add new devices for various manufacturers, and re-sort Spansion list to
match the order in Linux, which requires chips with a non-zero extended ID
to come first.

With this commit the outstanding differences to Linux rev 55bf75b are:...

c7e775e4 05/12/2013 12:25 pm Dong Xu Wang

remove double semicolons

Signed-off-by: Dong Xu Wang <>
Signed-off-by: Michael Tokarev <>

0a2b5e3a 05/09/2013 12:46 pm Hans de Goede

qxl: Call spice_qxl_driver_unload from qxl_enter_vga_mode

With a SPICE_DISPLAY_CAP_MONITORS_CONFIG capable client, the client needs to
know what part of the primary to use for each monitor. If the guest driver
does not support this, the server sends messages to the client for a...

cad2b59c 05/08/2013 11:54 pm Anthony Liguori

Merge remote-tracking branch 'kwolf/for-anthony' into staging

  1. By Kevin Wolf (7) and Fam Zheng (3)
  2. Via Kevin Wolf
    • kwolf/for-anthony:
      qemu-iotests: fix 017 018 for vmdk
      qemu-iotests: exclude vmdk and qcow from 043
      qemu-iotests: exclude vmdk for test 042...
62c96360 05/08/2013 11:54 pm Michael S. Tsirkin

virtio-pci: fix level interrupts

mask notifiers are never called without msix,
so devices with backend masking like vhost don't work.
Call mask notifiers explicitly at
startup/cleanup to make it work.

Signed-off-by: Michael S. Tsirkin <>
Tested-by: Alexander Graf <>...

5f5a1318 05/08/2013 11:54 pm Jason Wang

virtio: properly validate address before accessing config

There are several several issues in the current checking:

- The check was based on the minus of unsigned values which can overflow
- It was done after .{set|get}_config() which can lead crash when config_len...

0ee20e66 05/08/2013 04:28 pm Kevin Wolf

ahci: Don't allow creating slave drives

An IDE bus provided by AHCI can only take a single IDE drive. If you add
a drive as slave, qemu used to accept the command line but the device
wouldn't be actually usable. Catch the situation instead and error out....

b39f9612 05/08/2013 04:28 pm Kevin Wolf

ide: Reset BMIDEA bit when the bus master is stopped

The device is supposed to reset the Bus Master IDE Active bit in the
status register when 0 is written to the Start/Stop Bus Master bit in
the command register.

In the common cases this happens automatically because bdrv_drain_all()...

b174de51 05/07/2013 02:48 pm Anthony Liguori

Merge remote-tracking branch 'kraxel/usb.82' into staging

  1. By Gerd Hoffmann (3) and Hans de Goede (1)
  2. Via Gerd Hoffmann
    • kraxel/usb.82:
      xhci: handle USB_RET_BABBLE
      uhci: Use an intermediate buffer for usb packet data
      usb-host: add usb_host_full_speed_compat...
d7108d90 05/07/2013 02:43 pm Jason Wang

virtio-net: properly check the vhost status during status set

Commit 32993698 (vhost: disable on tap link down) tries to disable the vhost
also when the peer's link is down. But the check was not done properly, the
vhost were only started when:

1) peer's link is not down...

fd8192a5 05/07/2013 02:32 pm Anthony Liguori

Merge remote-tracking branch 'afaerber/qom-cpu' into staging

  1. By Eduardo Habkost (6) and others
  2. Via Andreas Färber
    • afaerber/qom-cpu:
      target-i386: n270 can MOVBE
      target-i386: Introduce generic CPUID feature compat function
      target-i386: Change CPUID model of 486 to 8...
9822261c 05/07/2013 12:34 pm Hans de Goede

uhci: Use an intermediate buffer for usb packet data

Due to various unfortunate reasons we cannot reliable detect a guest
cancelling a packet as soon as it happens, instead we detect cancels
with some delay.

When packets are handled async, and we directly pass the guest memory for...

4e906d56 05/07/2013 12:34 pm Gerd Hoffmann

xhci: handle USB_RET_BABBLE

Signed-off-by: Gerd Hoffmann <>

c3268cc1 05/07/2013 12:34 pm Gerd Hoffmann

usb-host: add usb_host_full_speed_compat

Alloes to pass through usb2 devices on usb1 host controllers if possible.
Brings the libusb implementation to feature-parity with the linux usbfs
code, so the usb-host implementation in 1.5 (libusb) doesn't regress...

95efb20c 05/07/2013 09:19 am Gerd Hoffmann

usb-host: live migration support for the libusb version

Signed-off-by: Gerd Hoffmann <>

b5803aa3 05/06/2013 11:45 pm Anthony Liguori

Merge remote-tracking branch 'qemu-kvm/uq/master' into staging

  1. By Marcelo Tosatti
  2. Via Gleb Natapov
    • qemu-kvm/uq/master:
      kvmvapic: add ioport read accessor

Message-id:
Signed-off-by: Anthony Liguori <>

4458c236 05/06/2013 11:27 pm Borislav Petkov

target-i386: n270 can MOVBE

The Atom core (cpu name "n270" in QEMU speak) supports MOVBE. This is
needed when booting 3.8 and later linux kernels built with the MATOM
target because we require MOVBE in order to boot properly now.

Signed-off-by: Borislav Petkov <>...

fe677fd1 05/06/2013 08:56 pm Aurelien Jarno

Merge branch 's390-for-upstream' of git://github.com/agraf/qemu

  • 's390-for-upstream' of git://github.com/agraf/qemu:
    s390: update s390-ccw.img
    S390: BIOS boot from given device
    S390: Add virtio-blk boot
    S390: Merging s390_ipl_cpu and s390_ipl_reset...
868d378b 05/06/2013 08:50 pm Andreas Färber

qdev: Introduce qdev_prop_set_globals_for_type()

Reuse it in qdev_prop_set_globals().

Reviewed-by: Eduardo Habkost <>
[AF: Renamed from qdev_prop_set_custom_globals()]
Signed-off-by: Andreas Färber <>

b1fe9bcb 05/06/2013 08:40 pm Andreas Färber

qdev: Let qdev_prop_parse() pass through Error

Move error reporting to callers.

Reviewed-by: Eduardo Habkost <>
Signed-off-by: Andreas Färber <>

2c4c71ee 05/06/2013 06:30 pm Dominik Dingel

S390: Merging s390_ipl_cpu and s390_ipl_reset

There is no use in have this splitted in two functions.

Signed-off-by: Dominik Dingel <>
Signed-off-by: Alexander Graf <>

ba1509c0 05/06/2013 06:30 pm Dominik Dingel

S390: Add virtio-blk boot

If no kernel IPL entry is specified, boot the bios and pass if available
device information for the first boot device (as given by the boot index).

The provided information will be used in the next commit from the BIOS.

Signed-off-by: Dominik Dingel <>...

1f7de853 05/06/2013 06:30 pm Dominik Dingel

S390: BIOS check for file

Add a check if the BIOS blob exists before trying to load.

Signed-off-by: Dominik Dingel <>
Signed-off-by: Alexander Graf <>

43d03f29 05/06/2013 06:22 pm Tiejun Chen

PPC: e500: correct params->ram_size with ram_size

We should sync params->ram_size after we fixup memory size on
a alignment boundary. Otherwise Guest would exceed the actual
memory region.

Signed-off-by: Tiejun Chen <>
Signed-off-by: Alexander Graf <>

e0ff466c 05/06/2013 06:22 pm Alexey Kardashevskiy

spapr_llan: fix device reenabling

Normally, the "tap" device is polled by QEMU if a guest NIC can
receive packets. If a guest NIC is stopped during transfer (rmmod or
ifdown), it may still have packets in a queue which have to be send
to the guest before QEMU enables polling of a "tap" interface via...

d4261662 05/06/2013 06:22 pm David Gibson

pseries: Factor out check for out-of-bounds LIOBN

PAPR defines LIOBNs (Logical IO Bus Numbers) to be 32-bit, and we check for
values that aren't in the code for H_PUT_TCE. This patch factors the check
into spapr_tce_find_by_liobn(), which already checks if a 32-bit LIOBN...

b55519a0 05/06/2013 06:22 pm David Gibson

pseries: Fix debug message for out-of-bounds address in H_PUT_TCE

Due to a brain outage, this message says "out-of-boards" instead of
"out-of-bounds".

Signed-off-by: David Gibson <>
Signed-off-by: Alexey Kardashevskiy <>...

cefd3cdb 05/06/2013 06:22 pm Bharat Bhushan

PPC: e500: initialize GPRs as per epapr

ePAPR defines the initial values of cpu registers.
This patch initialize the GPRs as per ePAPR specification.

This resolves the issue of guest reboot/reset (guest hang on reboot).

Signed-off-by: Bharat Bhushan <>...

0c1cd0ae 05/06/2013 02:52 pm Marcelo Tosatti

kvmvapic: add ioport read accessor

Necessary since memory region accessor assumes read and write
methods are registered. Otherwise reading I/O port 0x7e segfaults.

https://bugzilla.redhat.com/show_bug.cgi?id=954306

Signed-off-by: Marcelo Tosatti <>...