On 4/1/19 10:58 PM, Michael Roth wrote:
> Hi everyone,
>
> The following new patches are queued for QEMU stable v3.0.1:
>
> https://github.com/mdroth/qemu/commits/stable-3.0-staging
>
> The release is planned for 2019-04-11:
>
> https://wiki.qemu.org/Planning/3.0
>
> Please respond here or CC qemu-stable@nongnu.org on any patches you
> think should be included in the release.
>
> Note that this update falls outside the normal stable release support
> window (~1 development cycle), but is being release now since it was
> delayed from its intended release date.
>
> Thanks!
>
> ----------------------------------------------------------------
> Alberto Garcia (1):
> block: Fix use after free error in bdrv_open_inherit()
>
> BALATON Zoltan (1):
> i2c: Move typedef of bitbang_i2c_interface to i2c.h
>
> Bharata B Rao (1):
> spapr_cpu_core: vmstate_[un]register per-CPU data from (un)realizefn
>
> Christian Borntraeger (1):
> iotests: make 235 work on s390 (and others)
>
> Corey Minyard (2):
> i2c: Add a length check to the SMBus write handling
> pc:piix4: Update smbus I/O space after a migration
>
> Daniel Henrique Barboza (1):
> qga: update docs with systemd suspend support info
>
> Daniel P. Berrangé (1):
> qemu-img: fix regression copying secrets during convert
>
> Denis V. Lunev (1):
> nbd: fix NBD_FLAG_SEND_CACHE value
>
> Eduardo Habkost (1):
> i386: Disable TOPOEXT by default on "-cpu host"
>
> Eric Blake (4):
> nbd/server: Advertise all contexts in response to bare LIST
> nbd/client: Make x-dirty-bitmap more reliable
> nbd/client: Send NBD_CMD_DISC if open fails after connect
> bitmap: Update count after a merge
>
> Fam Zheng (5):
> nvme: Fix nvme_init error handling
> aio-posix: Don't count ctx->notifier as progress when polling
> aio: Do aio_notify_accept only during blocking aio_poll
> slirp: Add sanity check for str option length
> job: Fix nested aio_poll() hanging in job_txn_apply
>
> Gerd Hoffmann (3):
> fmops: fix off-by-one in AR_TABLE and DR_TABLE array size
> usb-mtp: outlaw slashes in filenames
> usb-mtp: use O_NOFOLLOW and O_CLOEXEC.
>
> Greg Kurz (1):
> 9p: fix QEMU crash when renaming files
>
> Igor Mammedov (1):
> pc: acpi: revert back to 1 SRAT entry for hotpluggable area
>
> Ilya Maximets (1):
> migration: Stop postcopy fault thread before notifying
>
> Janosch Frank (1):
> s390x: Return specification exception for unimplemented diag 308 subcodes
>
> Jason Wang (5):
> ne2000: fix possible out of bound access in ne2000_receive
> rtl8139: fix possible out of bound access
> pcnet: fix possible buffer overflow
> net: ignore packet size greater than INT_MAX
> net: drop too large packet early
>
> Jeff Cody (6):
> block: for jobs, do not clear user_paused until after the resume
> block: iotest to catch abort on forced blockjob cancel
> block/rbd: pull out qemu_rbd_convert_options
> block/rbd: Attempt to parse legacy filenames
> block/rbd: add iotest for rbd legacy keyvalue filename parsing
> block/rbd: add deprecation documentation for filename keyvalue pairs
>
> Kevin Wolf (4):
> block/qapi: Fix memory leak in qmp_query_blockstats()
> mirror: Fail gracefully for source == target
> block-backend: Set werror/rerror defaults in blk_new()
> block: Fix invalidate_cache error path for parent activation
>
> Liam Merwick (1):
> tpm_tis: fix loop that cancels any seizure by a lower locality
>
> Marc-André Lureau (1):
> monitor: fix oob command leak
>
> Marcel Apfelbaum (1):
> hw/rdma: another clang compilation fix
>
> Mark Cave-Ayland (1):
> fdc: fix segfault in fdctrl_stop_transfer() when DMA is disabled
>
> Markus Armbruster (1):
> vfio-helpers: Fix qemu_vfio_open_pci() crash
>
> Max Filippov (3):
> target/xtensa: fix FPU2000 bugs
> target/xtensa: fix s32c1i TCGMemOp flags
> target/xtensa: drop num_[core_]regs from dc232b/dc233c configs
>
> Max Reitz (2):
> qemu-img: Fix typo
> qemu-img: Fix leak
>
> Michael Roth (1):
> make-release: add skiboot .version file
>
> Michael S. Tsirkin (1):
> tests: update acpi expected files
>
> Paolo Bonzini (3):
> virtio: update MemoryRegionCaches when guest negotiates features
> virtio: do not take address of packed members
> nvme: fix out-of-bounds access to the CMB
>
> Paul A. Clarke (1):
> Changes requirement for "vsubsbs" instruction
>
> Peter Maydell (4):
> virt: Suppress external aborts on virt-2.10 and earlier
> target/arm: Correct condition for v8M callee stack push
> linux-user: make pwrite64/pread64(fd, NULL, 0, offset) return 0
> exec.c: Don't reallocate IOMMUNotifiers that are in use
>
> Peter Wu (1):
> vnc: fix memleak of the "vnc-worker-output" name
>
> Peter Xu (2):
> intel_iommu: introduce vtd_reset_caches()
> intel_iommu: better handling of dmar state switch
>
> Prasad J Pandit (1):
> tpm: use loop iterator to set sts data field
>
> Prasad Singamsetty (1):
> kvm: add call to qemu_add_opts() for -overcommit option
>
> Richard Henderson (16):
> target/arm: Fix sign of sve_cmpeq_ppzw/sve_cmpne_ppzw
> target/arm: Fix typo in do_sat_addsub_64
> target/arm: Reorganize SVE WHILE
> target/arm: Fix typo in helper_sve_movz_d
> target/arm: Fix typo in helper_sve_ld1hss_r
> target/arm: Fix sign-extension in sve do_ldr/do_str
> target/arm: Fix offset for LD1R instructions
> target/arm: Fix offset scaling for LD_zprr and ST_zprr
> target/arm: Reformat integer register dump
> target/arm: Dump SVE state if enabled
> target/arm: Add sve-max-vq cpu property to -cpu max
> target/arm: Adjust FPCR_MASK for FZ16
> target/arm: Ignore float_flag_input_denormal from fp_status_f16
> target/arm: Use fp_status_fp16 for do_fmpa_zpzzz_h
> target/arm: Use FZ not FZ16 for SVE FCVT single-half and double-half
> target/arm: Fix cpu_get_tb_cpu_state() for non-SVE CPUs
>
> Stefan Berger (4):
> tpm: Zero-init structure to avoid uninitialized variables in valgrind log
> tpm: Make sure new locality passed to tpm_tis_prep_abort() is valid
> tpm: Make sure the locality received from backend is valid
> acpi: Make TPM 2.0 with TIS available as MSFT0101
>
> Thomas Huth (1):
> hw/s390x: Fix bad mask in time2tod()
>
> Tony Garnock-Jones (1):
> linux-user: write(fd, NULL, 0) parity with linux's treatment of same
>
> Vladimir Sementsov-Ogievskiy (4):
> nbd/server: fix bitmap export
> nbd/server: fix NBD_CMD_CACHE
> mirror: fix dead-lock
> iotests: simple mirror test with kvm on 1G image
>
> William Bowling (1):
> slirp: check sscanf result when emulating ident
>
> Yury Kotov (1):
> vhost: fix invalid downcast
>
> Zheng Xiang (1):
> pcie: set link state inactive/active after hot unplug/plug
>
> liujunjie (1):
> clean up callback when del virtqueue
>
> yuchenlin (1):
> vhost-scsi: prevent using uninitialized vqs
>
> block.c | 2 +
> block/block-backend.c | 3 +
> block/mirror.c | 18 ++---
> block/nbd-client.c | 22 +++++-
> block/nvme.c | 37 ++++------
> block/qapi.c | 3 +-
> block/rbd.c | 90 ++++++++++++++++++++----
> exec.c | 10 +--
> hw/9pfs/9p.c | 3 +
> hw/acpi/piix4.c | 1 +
> hw/arm/virt.c | 2 +
> hw/audio/fmopl.h | 4 +-
> hw/block/fdc.c | 2 +-
> hw/block/nvme.c | 2 +-
> hw/char/virtio-serial-bus.c | 6 +-
> hw/i2c/bitbang_i2c.h | 2 -
> hw/i2c/smbus.c | 6 +-
> hw/i386/acpi-build.c | 85 ++++++-----------------
> hw/i386/intel_iommu.c | 34 ++++++---
> hw/net/ne2000.c | 4 +-
> hw/net/pcnet.c | 4 +-
> hw/net/rtl8139.c | 8 +--
> hw/pci/pcie.c | 12 ++++
> hw/ppc/spapr_cpu_core.c | 62 +++++++++--------
> hw/rdma/rdma_rm_defs.h | 4 +-
> hw/scsi/vhost-scsi.c | 2 +-
> hw/tpm/tpm_emulator.c | 1 +
> hw/tpm/tpm_tis.c | 10 ++-
> hw/usb/dev-mtp.c | 19 ++++--
> hw/virtio/vhost.c | 4 +-
> hw/virtio/virtio.c | 17 ++++-
> include/block/nbd.h | 4 +-
> include/hw/i2c/i2c.h | 2 +
> include/hw/i2c/ppc4xx_i2c.h | 3 -
> include/hw/s390x/tod.h | 2 +-
> include/net/net.h | 6 --
> job.c | 20 ++----
> linux-user/syscall.c | 44 +++++++++---
> migration/postcopy-ram.c | 11 +--
> monitor.c | 2 +
> nbd/server.c | 9 ++-
> net/net.c | 23 +++++--
> net/slirp.c | 9 +++
> qemu-deprecated.texi | 15 ++++
> qemu-img.c | 35 +++++-----
> qga/qapi-schema.json | 25 ++++---
> scripts/make-release | 1 +
> slirp/bootp.c | 32 ++++++---
> slirp/tcp_subr.c | 10 +--
> target/arm/cpu.c | 6 +-
> target/arm/cpu.h | 5 +-
> target/arm/cpu64.c | 29 ++++++++
> target/arm/helper.c | 55 +++++++++------
> target/arm/sve_helper.c | 23 +++----
> target/arm/translate-a64.c | 106 ++++++++++++++++++++++++-----
> target/arm/translate-sve.c | 81 +++++++++++++---------
> target/i386/cpu.c | 6 ++
> target/ppc/translate/vmx-ops.inc.c | 2 +-
> target/s390x/diag.c | 2 +-
> target/xtensa/core-dc232b.c | 2 -
> target/xtensa/core-dc232b/gdb-config.inc.c | 1 +
> target/xtensa/core-dc233c.c | 2 -
> target/xtensa/core-dc233c/gdb-config.inc.c | 1 +
> target/xtensa/translate.c | 8 +--
> tests/Makefile.include | 2 +-
> tests/acpi-test-data/pc/DSDT | Bin 5144 -> 5131 bytes
> tests/acpi-test-data/pc/DSDT.bridge | Bin 7003 -> 6990 bytes
> tests/acpi-test-data/pc/DSDT.cphp | Bin 5607 -> 5594 bytes
> tests/acpi-test-data/pc/DSDT.dimmpxm | Bin 6803 -> 6790 bytes
> tests/acpi-test-data/pc/DSDT.ipmikcs | Bin 5216 -> 5203 bytes
> tests/acpi-test-data/pc/DSDT.memhp | Bin 6509 -> 6496 bytes
> tests/acpi-test-data/pc/DSDT.numamem | Bin 5150 -> 5137 bytes
> tests/acpi-test-data/pc/SRAT.dimmpxm | Bin 472 -> 392 bytes
> tests/acpi-test-data/pc/SRAT.memhp | Bin 264 -> 264 bytes
> tests/acpi-test-data/q35/DSDT | Bin 7828 -> 7815 bytes
> tests/acpi-test-data/q35/DSDT.bridge | Bin 7845 -> 7832 bytes
> tests/acpi-test-data/q35/DSDT.cphp | Bin 8291 -> 8278 bytes
> tests/acpi-test-data/q35/DSDT.dimmpxm | Bin 9487 -> 9474 bytes
> tests/acpi-test-data/q35/DSDT.ipmibt | Bin 7903 -> 7890 bytes
> tests/acpi-test-data/q35/DSDT.memhp | Bin 9193 -> 9180 bytes
> tests/acpi-test-data/q35/DSDT.numamem | Bin 7834 -> 7821 bytes
> tests/acpi-test-data/q35/SRAT.dimmpxm | Bin 472 -> 392 bytes
> tests/acpi-test-data/q35/SRAT.memhp | Bin 264 -> 264 bytes
> tests/nvme-test.c | 68 +++++++++++++++---
> tests/qemu-iotests/041 | 6 ++
> tests/qemu-iotests/041.out | 4 +-
> tests/qemu-iotests/067.out | 1 +
> tests/qemu-iotests/229 | 95 ++++++++++++++++++++++++++
> tests/qemu-iotests/229.out | 23 +++++++
> tests/qemu-iotests/231 | 62 +++++++++++++++++
> tests/qemu-iotests/231.out | 9 +++
> tests/qemu-iotests/235 | 78 +++++++++++++++++++++
> tests/qemu-iotests/235.out | 3 +
> tests/qemu-iotests/group | 3 +
> ui/vnc-jobs.c | 3 +-
> util/aio-posix.c | 7 +-
> util/aio-win32.c | 3 +-
> util/hbitmap.c | 3 +
> util/vfio-helpers.c | 2 +-
> vl.c | 1 +
> 100 files changed, 1033 insertions(+), 401 deletions(-)
> create mode 100755 tests/qemu-iotests/229
> create mode 100644 tests/qemu-iotests/229.out
> create mode 100755 tests/qemu-iotests/231
> create mode 100644 tests/qemu-iotests/231.out
> create mode 100755 tests/qemu-iotests/235
> create mode 100644 tests/qemu-iotests/235.out
I'm not sure about 4c257911dcc7c4189768e9651755c849ce9db4e8
"i386: remove the 'INTEL_PT' CPUID bit from named CPU models"
What about 334c43e2c342e878311c66b4e62343f0a7c2c6be?
"qemu-img: fix error reporting for -object"
Also ade0075523478fa015afd5c6f6cc70681687818d:
"contrib/rdmacm-mux: Fix out-of-bounds risk"
And 3fd2092fd11b9e4220a08eca0663cc59178a6c3f:
"hw/usb: fix mistaken de-initialization of CCID state"
Eventually:
https://lists.gnu.org/archive/html/qemu-devel/2019-04/msg00843.html
"megasas: fix mapped frame size"
Regards,
Phil.