1 | The following changes since commit 812b835fb4d23dd108b2f9802158472d50b73579: | 1 | The following changes since commit 23919ddfd56135cad3cb468a8f54d5a595f024f4: |
---|---|---|---|
2 | 2 | ||
3 | Merge remote-tracking branch 'remotes/maxreitz/tags/pull-block-2019-05-07' into staging (2019-05-09 16:31:12 +0100) | 3 | Merge remote-tracking branch 'remotes/aperard/tags/pull-xen-20190827' into staging (2019-08-27 15:52:36 +0100) |
4 | 4 | ||
5 | are available in the Git repository at: | 5 | are available in the Git repository at: |
6 | 6 | ||
7 | https://github.com/stefanha/qemu.git tags/block-pull-request | 7 | https://github.com/XanClic/qemu.git tags/pull-block-2019-08-27 |
8 | 8 | ||
9 | for you to fetch changes up to e84125761f78919fe63616d9888ea45e72dc956f: | 9 | for you to fetch changes up to bb043c056cffcc2f3ce88bfdaf2e76e455c09e2c: |
10 | 10 | ||
11 | docs: add Security chapter to the documentation (2019-05-10 10:53:52 +0100) | 11 | iotests: Unify cache mode quoting (2019-08-27 19:48:44 +0200) |
12 | 12 | ||
13 | ---------------------------------------------------------------- | 13 | ---------------------------------------------------------------- |
14 | Pull request | 14 | Block patches: |
15 | - qemu-io now accepts a file to read a write pattern from | ||
16 | - Ensure that raw files have their first block allocated so we can probe | ||
17 | the O_DIRECT alignment if necessary | ||
18 | - Various fixes | ||
15 | 19 | ||
16 | ---------------------------------------------------------------- | 20 | ---------------------------------------------------------------- |
21 | Denis Plotnikov (1): | ||
22 | qemu-io: add pattern file for write command | ||
17 | 23 | ||
18 | Andrey Shinkevich (1): | 24 | Max Reitz (7): |
19 | block/io.c: fix for the allocation failure | 25 | iotests: Fix _filter_img_create() |
26 | vmdk: Use bdrv_dirname() for relative extent paths | ||
27 | iotests: Keep testing broken relative extent paths | ||
28 | vmdk: Reject invalid compressed writes | ||
29 | iotests: Disable broken streamOptimized tests | ||
30 | iotests: Disable 110 for vmdk.twoGbMaxExtentSparse | ||
31 | iotests: Disable 126 for flat vmdk subformats | ||
20 | 32 | ||
21 | Jules Irenge (3): | 33 | Nir Soffer (3): |
22 | util/readline: add a space to fix errors by checkpatch tool | 34 | block: posix: Always allocate the first block |
23 | util: readline: replace tab indent by four spaces to fix checkpatch | 35 | iotests: Test allocate_first_block() with O_DIRECT |
24 | errors | 36 | iotests: Unify cache mode quoting |
25 | util/readline: Add braces to fix checkpatch errors | ||
26 | 37 | ||
27 | Nikita Alekseev (1): | 38 | Stefan Hajnoczi (1): |
28 | block: Add coroutine_fn to bdrv_check_co_entry | 39 | file-posix: fix request_alignment typo |
29 | 40 | ||
30 | Paolo Bonzini (1): | 41 | Thomas Huth (2): |
31 | aio-posix: ensure poll mode is left when aio_notify is called | 42 | iotests: Check for enabled drivers before testing them |
43 | tests/check-block: Skip iotests when sanitizers are enabled | ||
32 | 44 | ||
33 | Stefan Hajnoczi (2): | 45 | Vladimir Sementsov-Ogievskiy (1): |
34 | docs: add Secure Coding Practices to developer docs | 46 | block: fix permission update in bdrv_replace_node |
35 | docs: add Security chapter to the documentation | ||
36 | 47 | ||
37 | Makefile | 2 +- | 48 | block.c | 5 +- |
38 | block.c | 2 +- | 49 | block/file-posix.c | 53 +++++++++- |
39 | block/io.c | 2 +- | 50 | block/vmdk.c | 64 ++++++++---- |
40 | util/aio-posix.c | 12 +- | 51 | qemu-io-cmds.c | 99 +++++++++++++++++-- |
41 | util/readline.c | 174 ++++++++++++++----------- | 52 | tests/check-block.sh | 5 + |
42 | docs/devel/index.rst | 1 + | 53 | tests/qemu-iotests/002 | 1 + |
43 | docs/devel/secure-coding-practices.rst | 106 +++++++++++++++ | 54 | tests/qemu-iotests/003 | 1 + |
44 | docs/security.texi | 131 +++++++++++++++++++ | 55 | tests/qemu-iotests/005 | 3 +- |
45 | qemu-doc.texi | 3 + | 56 | tests/qemu-iotests/009 | 1 + |
46 | 9 files changed, 347 insertions(+), 86 deletions(-) | 57 | tests/qemu-iotests/010 | 1 + |
47 | create mode 100644 docs/devel/secure-coding-practices.rst | 58 | tests/qemu-iotests/011 | 1 + |
48 | create mode 100644 docs/security.texi | 59 | tests/qemu-iotests/017 | 3 +- |
60 | tests/qemu-iotests/018 | 3 +- | ||
61 | tests/qemu-iotests/019 | 3 +- | ||
62 | tests/qemu-iotests/020 | 3 +- | ||
63 | tests/qemu-iotests/026 | 4 +- | ||
64 | tests/qemu-iotests/027 | 1 + | ||
65 | tests/qemu-iotests/032 | 1 + | ||
66 | tests/qemu-iotests/033 | 1 + | ||
67 | tests/qemu-iotests/034 | 3 +- | ||
68 | tests/qemu-iotests/037 | 3 +- | ||
69 | tests/qemu-iotests/039 | 4 +- | ||
70 | tests/qemu-iotests/052 | 2 +- | ||
71 | tests/qemu-iotests/059 | 34 ++++++- | ||
72 | tests/qemu-iotests/059.out | 26 +++-- | ||
73 | tests/qemu-iotests/063 | 3 +- | ||
74 | tests/qemu-iotests/071 | 1 + | ||
75 | tests/qemu-iotests/072 | 1 + | ||
76 | tests/qemu-iotests/081 | 4 +- | ||
77 | tests/qemu-iotests/091 | 4 +- | ||
78 | tests/qemu-iotests/099 | 1 + | ||
79 | tests/qemu-iotests/105 | 3 +- | ||
80 | tests/qemu-iotests/110 | 3 +- | ||
81 | tests/qemu-iotests/120 | 1 + | ||
82 | tests/qemu-iotests/126 | 2 + | ||
83 | tests/qemu-iotests/{150.out => 150.out.qcow2} | 0 | ||
84 | tests/qemu-iotests/150.out.raw | 12 +++ | ||
85 | tests/qemu-iotests/162 | 4 +- | ||
86 | tests/qemu-iotests/175 | 47 +++++++-- | ||
87 | tests/qemu-iotests/175.out | 16 ++- | ||
88 | tests/qemu-iotests/178.out.qcow2 | 4 +- | ||
89 | tests/qemu-iotests/184 | 1 + | ||
90 | tests/qemu-iotests/186 | 1 + | ||
91 | tests/qemu-iotests/197 | 1 + | ||
92 | tests/qemu-iotests/215 | 1 + | ||
93 | tests/qemu-iotests/221.out | 12 ++- | ||
94 | tests/qemu-iotests/251 | 1 + | ||
95 | tests/qemu-iotests/253.out | 12 ++- | ||
96 | tests/qemu-iotests/common.filter | 4 +- | ||
97 | tests/qemu-iotests/common.rc | 14 +++ | ||
98 | 50 files changed, 391 insertions(+), 87 deletions(-) | ||
99 | rename tests/qemu-iotests/{150.out => 150.out.qcow2} (100%) | ||
100 | create mode 100644 tests/qemu-iotests/150.out.raw | ||
49 | 101 | ||
50 | -- | 102 | -- |
51 | 2.21.0 | 103 | 2.21.0 |
52 | 104 | ||
53 | 105 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Denis Plotnikov <dplotnikov@virtuozzo.com> | ||
1 | 2 | ||
3 | The patch allows to provide a pattern file for write | ||
4 | command. There was no similar ability before. | ||
5 | |||
6 | Signed-off-by: Denis Plotnikov <dplotnikov@virtuozzo.com> | ||
7 | Message-id: 20190820164616.4072-1-dplotnikov@virtuozzo.com | ||
8 | Reviewed-by: Eric Blake <eblake@redhat.com> | ||
9 | [mreitz: Keep optstring in alphabetical order] | ||
10 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
11 | --- | ||
12 | qemu-io-cmds.c | 99 +++++++++++++++++++++++++++++++++++++++++++++++--- | ||
13 | 1 file changed, 93 insertions(+), 6 deletions(-) | ||
14 | |||
15 | diff --git a/qemu-io-cmds.c b/qemu-io-cmds.c | ||
16 | index XXXXXXX..XXXXXXX 100644 | ||
17 | --- a/qemu-io-cmds.c | ||
18 | +++ b/qemu-io-cmds.c | ||
19 | @@ -XXX,XX +XXX,XX @@ static void qemu_io_free(void *p) | ||
20 | qemu_vfree(p); | ||
21 | } | ||
22 | |||
23 | +/* | ||
24 | + * qemu_io_alloc_from_file() | ||
25 | + * | ||
26 | + * Allocates the buffer and populates it with the content of the given file | ||
27 | + * up to @len bytes. If the file length is less than @len, then the buffer | ||
28 | + * is populated with the file content cyclically. | ||
29 | + * | ||
30 | + * @blk - the block backend where the buffer content is going to be written to | ||
31 | + * @len - the buffer length | ||
32 | + * @file_name - the file to read the content from | ||
33 | + * | ||
34 | + * Returns: the buffer pointer on success | ||
35 | + * NULL on error | ||
36 | + */ | ||
37 | +static void *qemu_io_alloc_from_file(BlockBackend *blk, size_t len, | ||
38 | + const char *file_name) | ||
39 | +{ | ||
40 | + char *buf, *buf_origin; | ||
41 | + FILE *f = fopen(file_name, "r"); | ||
42 | + int pattern_len; | ||
43 | + | ||
44 | + if (!f) { | ||
45 | + perror(file_name); | ||
46 | + return NULL; | ||
47 | + } | ||
48 | + | ||
49 | + if (qemuio_misalign) { | ||
50 | + len += MISALIGN_OFFSET; | ||
51 | + } | ||
52 | + | ||
53 | + buf_origin = buf = blk_blockalign(blk, len); | ||
54 | + | ||
55 | + if (qemuio_misalign) { | ||
56 | + buf_origin += MISALIGN_OFFSET; | ||
57 | + buf += MISALIGN_OFFSET; | ||
58 | + len -= MISALIGN_OFFSET; | ||
59 | + } | ||
60 | + | ||
61 | + pattern_len = fread(buf_origin, 1, len, f); | ||
62 | + | ||
63 | + if (ferror(f)) { | ||
64 | + perror(file_name); | ||
65 | + goto error; | ||
66 | + } | ||
67 | + | ||
68 | + if (pattern_len == 0) { | ||
69 | + fprintf(stderr, "%s: file is empty\n", file_name); | ||
70 | + goto error; | ||
71 | + } | ||
72 | + | ||
73 | + fclose(f); | ||
74 | + | ||
75 | + if (len > pattern_len) { | ||
76 | + len -= pattern_len; | ||
77 | + buf += pattern_len; | ||
78 | + | ||
79 | + while (len > 0) { | ||
80 | + size_t len_to_copy = MIN(pattern_len, len); | ||
81 | + | ||
82 | + memcpy(buf, buf_origin, len_to_copy); | ||
83 | + | ||
84 | + len -= len_to_copy; | ||
85 | + buf += len_to_copy; | ||
86 | + } | ||
87 | + } | ||
88 | + | ||
89 | + return buf_origin; | ||
90 | + | ||
91 | +error: | ||
92 | + qemu_io_free(buf_origin); | ||
93 | + return NULL; | ||
94 | +} | ||
95 | + | ||
96 | static void dump_buffer(const void *buffer, int64_t offset, int64_t len) | ||
97 | { | ||
98 | uint64_t i; | ||
99 | @@ -XXX,XX +XXX,XX @@ static void write_help(void) | ||
100 | " -n, -- with -z, don't allow slow fallback\n" | ||
101 | " -p, -- ignored for backwards compatibility\n" | ||
102 | " -P, -- use different pattern to fill file\n" | ||
103 | +" -s, -- use a pattern file to fill the write buffer\n" | ||
104 | " -C, -- report statistics in a machine parsable format\n" | ||
105 | " -q, -- quiet mode, do not show I/O statistics\n" | ||
106 | " -u, -- with -z, allow unmapping\n" | ||
107 | @@ -XXX,XX +XXX,XX @@ static const cmdinfo_t write_cmd = { | ||
108 | .perm = BLK_PERM_WRITE, | ||
109 | .argmin = 2, | ||
110 | .argmax = -1, | ||
111 | - .args = "[-bcCfnquz] [-P pattern] off len", | ||
112 | + .args = "[-bcCfnquz] [-P pattern | -s source_file] off len", | ||
113 | .oneline = "writes a number of bytes at a specified offset", | ||
114 | .help = write_help, | ||
115 | }; | ||
116 | @@ -XXX,XX +XXX,XX @@ static int write_f(BlockBackend *blk, int argc, char **argv) | ||
117 | { | ||
118 | struct timespec t1, t2; | ||
119 | bool Cflag = false, qflag = false, bflag = false; | ||
120 | - bool Pflag = false, zflag = false, cflag = false; | ||
121 | + bool Pflag = false, zflag = false, cflag = false, sflag = false; | ||
122 | int flags = 0; | ||
123 | int c, cnt, ret; | ||
124 | char *buf = NULL; | ||
125 | @@ -XXX,XX +XXX,XX @@ static int write_f(BlockBackend *blk, int argc, char **argv) | ||
126 | /* Some compilers get confused and warn if this is not initialized. */ | ||
127 | int64_t total = 0; | ||
128 | int pattern = 0xcd; | ||
129 | + const char *file_name = NULL; | ||
130 | |||
131 | - while ((c = getopt(argc, argv, "bcCfnpP:quz")) != -1) { | ||
132 | + while ((c = getopt(argc, argv, "bcCfnpP:qs:uz")) != -1) { | ||
133 | switch (c) { | ||
134 | case 'b': | ||
135 | bflag = true; | ||
136 | @@ -XXX,XX +XXX,XX @@ static int write_f(BlockBackend *blk, int argc, char **argv) | ||
137 | case 'q': | ||
138 | qflag = true; | ||
139 | break; | ||
140 | + case 's': | ||
141 | + sflag = true; | ||
142 | + file_name = optarg; | ||
143 | + break; | ||
144 | case 'u': | ||
145 | flags |= BDRV_REQ_MAY_UNMAP; | ||
146 | break; | ||
147 | @@ -XXX,XX +XXX,XX @@ static int write_f(BlockBackend *blk, int argc, char **argv) | ||
148 | return -EINVAL; | ||
149 | } | ||
150 | |||
151 | - if (zflag && Pflag) { | ||
152 | - printf("-z and -P cannot be specified at the same time\n"); | ||
153 | + if (zflag + Pflag + sflag > 1) { | ||
154 | + printf("Only one of -z, -P, and -s " | ||
155 | + "can be specified at the same time\n"); | ||
156 | return -EINVAL; | ||
157 | } | ||
158 | |||
159 | @@ -XXX,XX +XXX,XX @@ static int write_f(BlockBackend *blk, int argc, char **argv) | ||
160 | } | ||
161 | |||
162 | if (!zflag) { | ||
163 | - buf = qemu_io_alloc(blk, count, pattern); | ||
164 | + if (sflag) { | ||
165 | + buf = qemu_io_alloc_from_file(blk, count, file_name); | ||
166 | + if (!buf) { | ||
167 | + return -EINVAL; | ||
168 | + } | ||
169 | + } else { | ||
170 | + buf = qemu_io_alloc(blk, count, pattern); | ||
171 | + } | ||
172 | } | ||
173 | |||
174 | clock_gettime(CLOCK_MONOTONIC, &t1); | ||
175 | -- | ||
176 | 2.21.0 | ||
177 | |||
178 | diff view generated by jsdifflib |
1 | From: Nikita Alekseev <n.alekseev2104@gmail.com> | 1 | From: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com> |
---|---|---|---|
2 | 2 | ||
3 | bdrv_check_co_entry calls bdrv_co_check, which is a coroutine function. | 3 | It's wrong to OR shared permissions. It may lead to crash on further |
4 | Thus, it also needs to be marked as a coroutine. | 4 | permission updates. |
5 | Also, no needs to consider previously calculated permissions, as at | ||
6 | this point we already bind all new parents and bdrv_get_cumulative_perm | ||
7 | result is enough. So fix the bug by just set permissions by | ||
8 | bdrv_get_cumulative_perm result. | ||
5 | 9 | ||
6 | Signed-off-by: Nikita Alekseev <n.alekseev2104@gmail.com> | 10 | Bug was introduced in long ago 234ac1a9025, in 2.9. |
7 | Message-id: 20190401093051.16488-1-n.alekseev2104@gmail.com | 11 | |
8 | Message-Id: <20190401093051.16488-1-n.alekseev2104@gmail.com> | 12 | Signed-off-by: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com> |
9 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 13 | Message-id: 20190824100740.61635-1-vsementsov@virtuozzo.com |
14 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
10 | --- | 15 | --- |
11 | block.c | 2 +- | 16 | block.c | 5 ++--- |
12 | 1 file changed, 1 insertion(+), 1 deletion(-) | 17 | 1 file changed, 2 insertions(+), 3 deletions(-) |
13 | 18 | ||
14 | diff --git a/block.c b/block.c | 19 | diff --git a/block.c b/block.c |
15 | index XXXXXXX..XXXXXXX 100644 | 20 | index XXXXXXX..XXXXXXX 100644 |
16 | --- a/block.c | 21 | --- a/block.c |
17 | +++ b/block.c | 22 | +++ b/block.c |
18 | @@ -XXX,XX +XXX,XX @@ typedef struct CheckCo { | 23 | @@ -XXX,XX +XXX,XX @@ void bdrv_replace_node(BlockDriverState *from, BlockDriverState *to, |
24 | { | ||
25 | BdrvChild *c, *next; | ||
26 | GSList *list = NULL, *p; | ||
27 | - uint64_t old_perm, old_shared; | ||
28 | uint64_t perm = 0, shared = BLK_PERM_ALL; | ||
19 | int ret; | 29 | int ret; |
20 | } CheckCo; | 30 | |
21 | 31 | @@ -XXX,XX +XXX,XX @@ void bdrv_replace_node(BlockDriverState *from, BlockDriverState *to, | |
22 | -static void bdrv_check_co_entry(void *opaque) | 32 | bdrv_unref(from); |
23 | +static void coroutine_fn bdrv_check_co_entry(void *opaque) | 33 | } |
24 | { | 34 | |
25 | CheckCo *cco = opaque; | 35 | - bdrv_get_cumulative_perm(to, &old_perm, &old_shared); |
26 | cco->ret = bdrv_co_check(cco->bs, cco->res, cco->fix); | 36 | - bdrv_set_perm(to, old_perm | perm, old_shared | shared); |
37 | + bdrv_get_cumulative_perm(to, &perm, &shared); | ||
38 | + bdrv_set_perm(to, perm, shared); | ||
39 | |||
40 | out: | ||
41 | g_slist_free(list); | ||
27 | -- | 42 | -- |
28 | 2.21.0 | 43 | 2.21.0 |
29 | 44 | ||
30 | 45 | diff view generated by jsdifflib |
1 | This new chapter in the QEMU documentation covers the security | 1 | From: Nir Soffer <nirsof@gmail.com> |
---|---|---|---|
2 | requirements that QEMU is designed to meet and principles for securely | 2 | |
3 | deploying QEMU. | 3 | When creating an image with preallocation "off" or "falloc", the first |
4 | 4 | block of the image is typically not allocated. When using Gluster | |
5 | It is just a starting point that can be extended in the future with more | 5 | storage backed by XFS filesystem, reading this block using direct I/O |
6 | information. | 6 | succeeds regardless of request length, fooling alignment detection. |
7 | 7 | ||
8 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 8 | In this case we fallback to a safe value (4096) instead of the optimal |
9 | Acked-by: Stefano Garzarella <sgarzare@redhat.com> | 9 | value (512), which may lead to unneeded data copying when aligning |
10 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 10 | requests. Allocating the first block avoids the fallback. |
11 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | 11 | |
12 | Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> | 12 | Since we allocate the first block even with preallocation=off, we no |
13 | Reviewed-by: Li Qiang <liq3ea@gmail.com> | 13 | longer create images with zero disk size: |
14 | Message-id: 20190509121820.16294-3-stefanha@redhat.com | 14 | |
15 | Message-Id: <20190509121820.16294-3-stefanha@redhat.com> | 15 | $ ./qemu-img create -f raw test.raw 1g |
16 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 16 | Formatting 'test.raw', fmt=raw size=1073741824 |
17 | |||
18 | $ ls -lhs test.raw | ||
19 | 4.0K -rw-r--r--. 1 nsoffer nsoffer 1.0G Aug 16 23:48 test.raw | ||
20 | |||
21 | And converting the image requires additional cluster: | ||
22 | |||
23 | $ ./qemu-img measure -f raw -O qcow2 test.raw | ||
24 | required size: 458752 | ||
25 | fully allocated size: 1074135040 | ||
26 | |||
27 | When using format like vmdk with multiple files per image, we allocate | ||
28 | one block per file: | ||
29 | |||
30 | $ ./qemu-img create -f vmdk -o subformat=twoGbMaxExtentFlat test.vmdk 4g | ||
31 | Formatting 'test.vmdk', fmt=vmdk size=4294967296 compat6=off hwversion=undefined subformat=twoGbMaxExtentFlat | ||
32 | |||
33 | $ ls -lhs test*.vmdk | ||
34 | 4.0K -rw-r--r--. 1 nsoffer nsoffer 2.0G Aug 27 03:23 test-f001.vmdk | ||
35 | 4.0K -rw-r--r--. 1 nsoffer nsoffer 2.0G Aug 27 03:23 test-f002.vmdk | ||
36 | 4.0K -rw-r--r--. 1 nsoffer nsoffer 353 Aug 27 03:23 test.vmdk | ||
37 | |||
38 | I did quick performance test for copying disks with qemu-img convert to | ||
39 | new raw target image to Gluster storage with sector size of 512 bytes: | ||
40 | |||
41 | for i in $(seq 10); do | ||
42 | rm -f dst.raw | ||
43 | sleep 10 | ||
44 | time ./qemu-img convert -f raw -O raw -t none -T none src.raw dst.raw | ||
45 | done | ||
46 | |||
47 | Here is a table comparing the total time spent: | ||
48 | |||
49 | Type Before(s) After(s) Diff(%) | ||
50 | --------------------------------------- | ||
51 | real 530.028 469.123 -11.4 | ||
52 | user 17.204 10.768 -37.4 | ||
53 | sys 17.881 7.011 -60.7 | ||
54 | |||
55 | We can see very clear improvement in CPU usage. | ||
56 | |||
57 | Signed-off-by: Nir Soffer <nsoffer@redhat.com> | ||
58 | Message-id: 20190827010528.8818-2-nsoffer@redhat.com | ||
59 | Reviewed-by: Max Reitz <mreitz@redhat.com> | ||
60 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
17 | --- | 61 | --- |
18 | Makefile | 2 +- | 62 | block/file-posix.c | 51 +++++++++++++++++++ |
19 | docs/security.texi | 131 +++++++++++++++++++++++++++++++++++++++++++++ | 63 | tests/qemu-iotests/059.out | 2 +- |
20 | qemu-doc.texi | 3 ++ | 64 | tests/qemu-iotests/{150.out => 150.out.qcow2} | 0 |
21 | 3 files changed, 135 insertions(+), 1 deletion(-) | 65 | tests/qemu-iotests/150.out.raw | 12 +++++ |
22 | create mode 100644 docs/security.texi | 66 | tests/qemu-iotests/175 | 19 ++++--- |
23 | 67 | tests/qemu-iotests/175.out | 8 +-- | |
24 | diff --git a/Makefile b/Makefile | 68 | tests/qemu-iotests/178.out.qcow2 | 4 +- |
25 | index XXXXXXX..XXXXXXX 100644 | 69 | tests/qemu-iotests/221.out | 12 +++-- |
26 | --- a/Makefile | 70 | tests/qemu-iotests/253.out | 12 +++-- |
27 | +++ b/Makefile | 71 | 9 files changed, 99 insertions(+), 21 deletions(-) |
28 | @@ -XXX,XX +XXX,XX @@ qemu-doc.html qemu-doc.info qemu-doc.pdf qemu-doc.txt: \ | 72 | rename tests/qemu-iotests/{150.out => 150.out.qcow2} (100%) |
29 | qemu-img.texi qemu-nbd.texi qemu-options.texi qemu-option-trace.texi \ | 73 | create mode 100644 tests/qemu-iotests/150.out.raw |
30 | qemu-deprecated.texi qemu-monitor.texi qemu-img-cmds.texi qemu-ga.texi \ | 74 | |
31 | qemu-monitor-info.texi docs/qemu-block-drivers.texi \ | 75 | diff --git a/block/file-posix.c b/block/file-posix.c |
32 | - docs/qemu-cpu-models.texi | 76 | index XXXXXXX..XXXXXXX 100644 |
33 | + docs/qemu-cpu-models.texi docs/security.texi | 77 | --- a/block/file-posix.c |
34 | 78 | +++ b/block/file-posix.c | |
35 | docs/interop/qemu-ga-ref.dvi docs/interop/qemu-ga-ref.html \ | 79 | @@ -XXX,XX +XXX,XX @@ static int handle_aiocb_discard(void *opaque) |
36 | docs/interop/qemu-ga-ref.info docs/interop/qemu-ga-ref.pdf \ | 80 | return ret; |
37 | diff --git a/docs/security.texi b/docs/security.texi | 81 | } |
82 | |||
83 | +/* | ||
84 | + * Help alignment probing by allocating the first block. | ||
85 | + * | ||
86 | + * When reading with direct I/O from unallocated area on Gluster backed by XFS, | ||
87 | + * reading succeeds regardless of request length. In this case we fallback to | ||
88 | + * safe alignment which is not optimal. Allocating the first block avoids this | ||
89 | + * fallback. | ||
90 | + * | ||
91 | + * fd may be opened with O_DIRECT, but we don't know the buffer alignment or | ||
92 | + * request alignment, so we use safe values. | ||
93 | + * | ||
94 | + * Returns: 0 on success, -errno on failure. Since this is an optimization, | ||
95 | + * caller may ignore failures. | ||
96 | + */ | ||
97 | +static int allocate_first_block(int fd, size_t max_size) | ||
98 | +{ | ||
99 | + size_t write_size = (max_size < MAX_BLOCKSIZE) | ||
100 | + ? BDRV_SECTOR_SIZE | ||
101 | + : MAX_BLOCKSIZE; | ||
102 | + size_t max_align = MAX(MAX_BLOCKSIZE, getpagesize()); | ||
103 | + void *buf; | ||
104 | + ssize_t n; | ||
105 | + int ret; | ||
106 | + | ||
107 | + buf = qemu_memalign(max_align, write_size); | ||
108 | + memset(buf, 0, write_size); | ||
109 | + | ||
110 | + do { | ||
111 | + n = pwrite(fd, buf, write_size, 0); | ||
112 | + } while (n == -1 && errno == EINTR); | ||
113 | + | ||
114 | + ret = (n == -1) ? -errno : 0; | ||
115 | + | ||
116 | + qemu_vfree(buf); | ||
117 | + return ret; | ||
118 | +} | ||
119 | + | ||
120 | static int handle_aiocb_truncate(void *opaque) | ||
121 | { | ||
122 | RawPosixAIOData *aiocb = opaque; | ||
123 | @@ -XXX,XX +XXX,XX @@ static int handle_aiocb_truncate(void *opaque) | ||
124 | /* posix_fallocate() doesn't set errno. */ | ||
125 | error_setg_errno(errp, -result, | ||
126 | "Could not preallocate new data"); | ||
127 | + } else if (current_length == 0) { | ||
128 | + /* | ||
129 | + * posix_fallocate() uses fallocate() if the filesystem | ||
130 | + * supports it, or fallback to manually writing zeroes. If | ||
131 | + * fallocate() was used, unaligned reads from the fallocated | ||
132 | + * area in raw_probe_alignment() will succeed, hence we need to | ||
133 | + * allocate the first block. | ||
134 | + * | ||
135 | + * Optimize future alignment probing; ignore failures. | ||
136 | + */ | ||
137 | + allocate_first_block(fd, offset); | ||
138 | } | ||
139 | } else { | ||
140 | result = 0; | ||
141 | @@ -XXX,XX +XXX,XX @@ static int handle_aiocb_truncate(void *opaque) | ||
142 | if (ftruncate(fd, offset) != 0) { | ||
143 | result = -errno; | ||
144 | error_setg_errno(errp, -result, "Could not resize file"); | ||
145 | + } else if (current_length == 0 && offset > current_length) { | ||
146 | + /* Optimize future alignment probing; ignore failures. */ | ||
147 | + allocate_first_block(fd, offset); | ||
148 | } | ||
149 | return result; | ||
150 | default: | ||
151 | diff --git a/tests/qemu-iotests/059.out b/tests/qemu-iotests/059.out | ||
152 | index XXXXXXX..XXXXXXX 100644 | ||
153 | --- a/tests/qemu-iotests/059.out | ||
154 | +++ b/tests/qemu-iotests/059.out | ||
155 | @@ -XXX,XX +XXX,XX @@ Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1073741824000 subformat=twoGbMax | ||
156 | image: TEST_DIR/t.vmdk | ||
157 | file format: vmdk | ||
158 | virtual size: 0.977 TiB (1073741824000 bytes) | ||
159 | -disk size: 16 KiB | ||
160 | +disk size: 1.97 MiB | ||
161 | Format specific information: | ||
162 | cid: XXXXXXXX | ||
163 | parent cid: XXXXXXXX | ||
164 | diff --git a/tests/qemu-iotests/150.out b/tests/qemu-iotests/150.out.qcow2 | ||
165 | similarity index 100% | ||
166 | rename from tests/qemu-iotests/150.out | ||
167 | rename to tests/qemu-iotests/150.out.qcow2 | ||
168 | diff --git a/tests/qemu-iotests/150.out.raw b/tests/qemu-iotests/150.out.raw | ||
38 | new file mode 100644 | 169 | new file mode 100644 |
39 | index XXXXXXX..XXXXXXX | 170 | index XXXXXXX..XXXXXXX |
40 | --- /dev/null | 171 | --- /dev/null |
41 | +++ b/docs/security.texi | 172 | +++ b/tests/qemu-iotests/150.out.raw |
42 | @@ -XXX,XX +XXX,XX @@ | 173 | @@ -XXX,XX +XXX,XX @@ |
43 | +@node Security | 174 | +QA output created by 150 |
44 | +@chapter Security | 175 | + |
45 | + | 176 | +=== Mapping sparse conversion === |
46 | +@section Overview | 177 | + |
47 | + | 178 | +Offset Length File |
48 | +This chapter explains the security requirements that QEMU is designed to meet | 179 | +0 0x1000 TEST_DIR/t.IMGFMT |
49 | +and principles for securely deploying QEMU. | 180 | + |
50 | + | 181 | +=== Mapping non-sparse conversion === |
51 | +@section Security Requirements | 182 | + |
52 | + | 183 | +Offset Length File |
53 | +QEMU supports many different use cases, some of which have stricter security | 184 | +0 0x100000 TEST_DIR/t.IMGFMT |
54 | +requirements than others. The community has agreed on the overall security | 185 | +*** done |
55 | +requirements that users may depend on. These requirements define what is | 186 | diff --git a/tests/qemu-iotests/175 b/tests/qemu-iotests/175 |
56 | +considered supported from a security perspective. | 187 | index XXXXXXX..XXXXXXX 100755 |
57 | + | 188 | --- a/tests/qemu-iotests/175 |
58 | +@subsection Virtualization Use Case | 189 | +++ b/tests/qemu-iotests/175 |
59 | + | 190 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 |
60 | +The virtualization use case covers cloud and virtual private server (VPS) | 191 | # the file size. This function hides the resulting difference in the |
61 | +hosting, as well as traditional data center and desktop virtualization. These | 192 | # stat -c '%b' output. |
62 | +use cases rely on hardware virtualization extensions to execute guest code | 193 | # Parameter 1: Number of blocks an empty file occupies |
63 | +safely on the physical CPU at close-to-native speed. | 194 | -# Parameter 2: Image size in bytes |
64 | + | 195 | +# Parameter 2: Minimal number of blocks in an image |
65 | +The following entities are untrusted, meaning that they may be buggy or | 196 | +# Parameter 3: Image size in bytes |
66 | +malicious: | 197 | _filter_blocks() |
67 | + | 198 | { |
68 | +@itemize | 199 | extra_blocks=$1 |
69 | +@item Guest | 200 | - img_size=$2 |
70 | +@item User-facing interfaces (e.g. VNC, SPICE, WebSocket) | 201 | + min_blocks=$2 |
71 | +@item Network protocols (e.g. NBD, live migration) | 202 | + img_size=$3 |
72 | +@item User-supplied files (e.g. disk images, kernels, device trees) | 203 | |
73 | +@item Passthrough devices (e.g. PCI, USB) | 204 | - sed -e "s/blocks=$extra_blocks\\(\$\\|[^0-9]\\)/nothing allocated/" \ |
74 | +@end itemize | 205 | - -e "s/blocks=$((extra_blocks + img_size / 512))\\(\$\\|[^0-9]\\)/everything allocated/" |
75 | + | 206 | + sed -e "s/blocks=$min_blocks\\(\$\\|[^0-9]\\)/min allocation/" \ |
76 | +Bugs affecting these entities are evaluated on whether they can cause damage in | 207 | + -e "s/blocks=$((extra_blocks + img_size / 512))\\(\$\\|[^0-9]\\)/max allocation/" |
77 | +real-world use cases and treated as security bugs if this is the case. | 208 | } |
78 | + | 209 | |
79 | +@subsection Non-virtualization Use Case | 210 | # get standard environment, filters and checks |
80 | + | 211 | @@ -XXX,XX +XXX,XX @@ size=$((1 * 1024 * 1024)) |
81 | +The non-virtualization use case covers emulation using the Tiny Code Generator | 212 | touch "$TEST_DIR/empty" |
82 | +(TCG). In principle the TCG and device emulation code used in conjunction with | 213 | extra_blocks=$(stat -c '%b' "$TEST_DIR/empty") |
83 | +the non-virtualization use case should meet the same security requirements as | 214 | |
84 | +the virtualization use case. However, for historical reasons much of the | 215 | +# We always write the first byte; check how many blocks this filesystem |
85 | +non-virtualization use case code was not written with these security | 216 | +# allocates to match empty image alloation. |
86 | +requirements in mind. | 217 | +printf "\0" > "$TEST_DIR/empty" |
87 | + | 218 | +min_blocks=$(stat -c '%b' "$TEST_DIR/empty") |
88 | +Bugs affecting the non-virtualization use case are not considered security | 219 | + |
89 | +bugs at this time. Users with non-virtualization use cases must not rely on | 220 | echo |
90 | +QEMU to provide guest isolation or any security guarantees. | 221 | echo "== creating image with default preallocation ==" |
91 | + | 222 | _make_test_img $size | _filter_imgfmt |
92 | +@section Architecture | 223 | -stat -c "size=%s, blocks=%b" $TEST_IMG | _filter_blocks $extra_blocks $size |
93 | + | 224 | +stat -c "size=%s, blocks=%b" $TEST_IMG | _filter_blocks $extra_blocks $min_blocks $size |
94 | +This section describes the design principles that ensure the security | 225 | |
95 | +requirements are met. | 226 | for mode in off full falloc; do |
96 | + | 227 | echo |
97 | +@subsection Guest Isolation | 228 | echo "== creating image with preallocation $mode ==" |
98 | + | 229 | IMGOPTS=preallocation=$mode _make_test_img $size | _filter_imgfmt |
99 | +Guest isolation is the confinement of guest code to the virtual machine. When | 230 | - stat -c "size=%s, blocks=%b" $TEST_IMG | _filter_blocks $extra_blocks $size |
100 | +guest code gains control of execution on the host this is called escaping the | 231 | + stat -c "size=%s, blocks=%b" $TEST_IMG | _filter_blocks $extra_blocks $min_blocks $size |
101 | +virtual machine. Isolation also includes resource limits such as throttling of | 232 | done |
102 | +CPU, memory, disk, or network. Guests must be unable to exceed their resource | 233 | |
103 | +limits. | 234 | # success, all done |
104 | + | 235 | diff --git a/tests/qemu-iotests/175.out b/tests/qemu-iotests/175.out |
105 | +QEMU presents an attack surface to the guest in the form of emulated devices. | 236 | index XXXXXXX..XXXXXXX 100644 |
106 | +The guest must not be able to gain control of QEMU. Bugs in emulated devices | 237 | --- a/tests/qemu-iotests/175.out |
107 | +could allow malicious guests to gain code execution in QEMU. At this point the | 238 | +++ b/tests/qemu-iotests/175.out |
108 | +guest has escaped the virtual machine and is able to act in the context of the | 239 | @@ -XXX,XX +XXX,XX @@ QA output created by 175 |
109 | +QEMU process on the host. | 240 | |
110 | + | 241 | == creating image with default preallocation == |
111 | +Guests often interact with other guests and share resources with them. A | 242 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1048576 |
112 | +malicious guest must not gain control of other guests or access their data. | 243 | -size=1048576, nothing allocated |
113 | +Disk image files and network traffic must be protected from other guests unless | 244 | +size=1048576, min allocation |
114 | +explicitly shared between them by the user. | 245 | |
115 | + | 246 | == creating image with preallocation off == |
116 | +@subsection Principle of Least Privilege | 247 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1048576 preallocation=off |
117 | + | 248 | -size=1048576, nothing allocated |
118 | +The principle of least privilege states that each component only has access to | 249 | +size=1048576, min allocation |
119 | +the privileges necessary for its function. In the case of QEMU this means that | 250 | |
120 | +each process only has access to resources belonging to the guest. | 251 | == creating image with preallocation full == |
121 | + | 252 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1048576 preallocation=full |
122 | +The QEMU process should not have access to any resources that are inaccessible | 253 | -size=1048576, everything allocated |
123 | +to the guest. This way the guest does not gain anything by escaping into the | 254 | +size=1048576, max allocation |
124 | +QEMU process since it already has access to those same resources from within | 255 | |
125 | +the guest. | 256 | == creating image with preallocation falloc == |
126 | + | 257 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1048576 preallocation=falloc |
127 | +Following the principle of least privilege immediately fulfills guest isolation | 258 | -size=1048576, everything allocated |
128 | +requirements. For example, guest A only has access to its own disk image file | 259 | +size=1048576, max allocation |
129 | +@code{a.img} and not guest B's disk image file @code{b.img}. | 260 | *** done |
130 | + | 261 | diff --git a/tests/qemu-iotests/178.out.qcow2 b/tests/qemu-iotests/178.out.qcow2 |
131 | +In reality certain resources are inaccessible to the guest but must be | 262 | index XXXXXXX..XXXXXXX 100644 |
132 | +available to QEMU to perform its function. For example, host system calls are | 263 | --- a/tests/qemu-iotests/178.out.qcow2 |
133 | +necessary for QEMU but are not exposed to guests. A guest that escapes into | 264 | +++ b/tests/qemu-iotests/178.out.qcow2 |
134 | +the QEMU process can then begin invoking host system calls. | 265 | @@ -XXX,XX +XXX,XX @@ converted image file size in bytes: 196608 |
135 | + | 266 | == raw input image with data (human) == |
136 | +New features must be designed to follow the principle of least privilege. | 267 | |
137 | +Should this not be possible for technical reasons, the security risk must be | 268 | Formatting 'TEST_DIR/t.qcow2', fmt=IMGFMT size=1073741824 |
138 | +clearly documented so users are aware of the trade-off of enabling the feature. | 269 | -required size: 393216 |
139 | + | 270 | +required size: 458752 |
140 | +@subsection Isolation mechanisms | 271 | fully allocated size: 1074135040 |
141 | + | 272 | wrote 512/512 bytes at offset 512 |
142 | +Several isolation mechanisms are available to realize this architecture of | 273 | 512 bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) |
143 | +guest isolation and the principle of least privilege. With the exception of | 274 | @@ -XXX,XX +XXX,XX @@ converted image file size in bytes: 196608 |
144 | +Linux seccomp, these mechanisms are all deployed by management tools that | 275 | |
145 | +launch QEMU, such as libvirt. They are also platform-specific so they are only | 276 | Formatting 'TEST_DIR/t.qcow2', fmt=IMGFMT size=1073741824 |
146 | +described briefly for Linux here. | 277 | { |
147 | + | 278 | - "required": 393216, |
148 | +The fundamental isolation mechanism is that QEMU processes must run as | 279 | + "required": 458752, |
149 | +unprivileged users. Sometimes it seems more convenient to launch QEMU as | 280 | "fully-allocated": 1074135040 |
150 | +root to give it access to host devices (e.g. @code{/dev/net/tun}) but this poses a | 281 | } |
151 | +huge security risk. File descriptor passing can be used to give an otherwise | 282 | wrote 512/512 bytes at offset 512 |
152 | +unprivileged QEMU process access to host devices without running QEMU as root. | 283 | diff --git a/tests/qemu-iotests/221.out b/tests/qemu-iotests/221.out |
153 | +It is also possible to launch QEMU as a non-root user and configure UNIX groups | 284 | index XXXXXXX..XXXXXXX 100644 |
154 | +for access to @code{/dev/kvm}, @code{/dev/net/tun}, and other device nodes. | 285 | --- a/tests/qemu-iotests/221.out |
155 | +Some Linux distros already ship with UNIX groups for these devices by default. | 286 | +++ b/tests/qemu-iotests/221.out |
156 | + | 287 | @@ -XXX,XX +XXX,XX @@ QA output created by 221 |
157 | +@itemize | 288 | === Check mapping of unaligned raw image === |
158 | +@item SELinux and AppArmor make it possible to confine processes beyond the | 289 | |
159 | +traditional UNIX process and file permissions model. They restrict the QEMU | 290 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=65537 |
160 | +process from accessing processes and files on the host system that are not | 291 | -[{ "start": 0, "length": 66048, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
161 | +needed by QEMU. | 292 | -[{ "start": 0, "length": 66048, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
162 | + | 293 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, |
163 | +@item Resource limits and cgroup controllers provide throughput and utilization | 294 | +{ "start": 4096, "length": 61952, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
164 | +limits on key resources such as CPU time, memory, and I/O bandwidth. | 295 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, |
165 | + | 296 | +{ "start": 4096, "length": 61952, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
166 | +@item Linux namespaces can be used to make process, file system, and other system | 297 | wrote 1/1 bytes at offset 65536 |
167 | +resources unavailable to QEMU. A namespaced QEMU process is restricted to only | 298 | 1 bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) |
168 | +those resources that were granted to it. | 299 | -[{ "start": 0, "length": 65536, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, |
169 | + | 300 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, |
170 | +@item Linux seccomp is available via the QEMU @option{--sandbox} option. It disables | 301 | +{ "start": 4096, "length": 61440, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, |
171 | +system calls that are not needed by QEMU, thereby reducing the host kernel | 302 | { "start": 65536, "length": 1, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, |
172 | +attack surface. | 303 | { "start": 65537, "length": 511, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
173 | +@end itemize | 304 | -[{ "start": 0, "length": 65536, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, |
174 | diff --git a/qemu-doc.texi b/qemu-doc.texi | 305 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, |
175 | index XXXXXXX..XXXXXXX 100644 | 306 | +{ "start": 4096, "length": 61440, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, |
176 | --- a/qemu-doc.texi | 307 | { "start": 65536, "length": 1, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, |
177 | +++ b/qemu-doc.texi | 308 | { "start": 65537, "length": 511, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
178 | @@ -XXX,XX +XXX,XX @@ | 309 | *** done |
179 | * QEMU Guest Agent:: | 310 | diff --git a/tests/qemu-iotests/253.out b/tests/qemu-iotests/253.out |
180 | * QEMU User space emulator:: | 311 | index XXXXXXX..XXXXXXX 100644 |
181 | * System requirements:: | 312 | --- a/tests/qemu-iotests/253.out |
182 | +* Security:: | 313 | +++ b/tests/qemu-iotests/253.out |
183 | * Implementation notes:: | 314 | @@ -XXX,XX +XXX,XX @@ QA output created by 253 |
184 | * Deprecated features:: | 315 | === Check mapping of unaligned raw image === |
185 | * Supported build platforms:: | 316 | |
186 | @@ -XXX,XX +XXX,XX @@ added with Linux 4.5 which is supported by the major distros. And even | 317 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1048575 |
187 | if RHEL7 has kernel 3.10, KVM there has the required functionality there | 318 | -[{ "start": 0, "length": 1048576, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
188 | to make it close to a 4.5 or newer kernel. | 319 | -[{ "start": 0, "length": 1048576, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
189 | 320 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, | |
190 | +@include docs/security.texi | 321 | +{ "start": 4096, "length": 1044480, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
191 | + | 322 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, |
192 | @include qemu-tech.texi | 323 | +{ "start": 4096, "length": 1044480, "depth": 0, "zero": true, "data": false, "offset": OFFSET}] |
193 | 324 | wrote 65535/65535 bytes at offset 983040 | |
194 | @include qemu-deprecated.texi | 325 | 63.999 KiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) |
326 | -[{ "start": 0, "length": 983040, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, | ||
327 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, | ||
328 | +{ "start": 4096, "length": 978944, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, | ||
329 | { "start": 983040, "length": 65536, "depth": 0, "zero": false, "data": true, "offset": OFFSET}] | ||
330 | -[{ "start": 0, "length": 983040, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, | ||
331 | +[{ "start": 0, "length": 4096, "depth": 0, "zero": false, "data": true, "offset": OFFSET}, | ||
332 | +{ "start": 4096, "length": 978944, "depth": 0, "zero": true, "data": false, "offset": OFFSET}, | ||
333 | { "start": 983040, "length": 65536, "depth": 0, "zero": false, "data": true, "offset": OFFSET}] | ||
334 | *** done | ||
195 | -- | 335 | -- |
196 | 2.21.0 | 336 | 2.21.0 |
197 | 337 | ||
198 | 338 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Nir Soffer <nirsof@gmail.com> | ||
1 | 2 | ||
3 | Using block_resize we can test allocate_first_block() with file | ||
4 | descriptor opened with O_DIRECT, ensuring that it works for any size | ||
5 | larger than 4096 bytes. | ||
6 | |||
7 | Testing smaller sizes is tricky as the result depends on the filesystem | ||
8 | used for testing. For example on NFS any size will work since O_DIRECT | ||
9 | does not require any alignment. | ||
10 | |||
11 | Signed-off-by: Nir Soffer <nsoffer@redhat.com> | ||
12 | Reviewed-by: Max Reitz <mreitz@redhat.com> | ||
13 | Message-id: 20190827010528.8818-3-nsoffer@redhat.com | ||
14 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
15 | --- | ||
16 | tests/qemu-iotests/175 | 28 ++++++++++++++++++++++++++++ | ||
17 | tests/qemu-iotests/175.out | 8 ++++++++ | ||
18 | 2 files changed, 36 insertions(+) | ||
19 | |||
20 | diff --git a/tests/qemu-iotests/175 b/tests/qemu-iotests/175 | ||
21 | index XXXXXXX..XXXXXXX 100755 | ||
22 | --- a/tests/qemu-iotests/175 | ||
23 | +++ b/tests/qemu-iotests/175 | ||
24 | @@ -XXX,XX +XXX,XX @@ _filter_blocks() | ||
25 | -e "s/blocks=$((extra_blocks + img_size / 512))\\(\$\\|[^0-9]\\)/max allocation/" | ||
26 | } | ||
27 | |||
28 | +# Resize image using block_resize. | ||
29 | +# Parameter 1: image path | ||
30 | +# Parameter 2: new size | ||
31 | +_block_resize() | ||
32 | +{ | ||
33 | + local path=$1 | ||
34 | + local size=$2 | ||
35 | + | ||
36 | + $QEMU -qmp stdio -nographic -nodefaults \ | ||
37 | + -blockdev file,node-name=file,filename=$path,cache.direct=on \ | ||
38 | + <<EOF | ||
39 | +{'execute': 'qmp_capabilities'} | ||
40 | +{'execute': 'block_resize', 'arguments': {'node-name': 'file', 'size': $size}} | ||
41 | +{'execute': 'quit'} | ||
42 | +EOF | ||
43 | +} | ||
44 | + | ||
45 | # get standard environment, filters and checks | ||
46 | . ./common.rc | ||
47 | . ./common.filter | ||
48 | @@ -XXX,XX +XXX,XX @@ _supported_fmt raw | ||
49 | _supported_proto file | ||
50 | _supported_os Linux | ||
51 | |||
52 | +_default_cache_mode none | ||
53 | +_supported_cache_modes none directsync | ||
54 | + | ||
55 | size=$((1 * 1024 * 1024)) | ||
56 | |||
57 | touch "$TEST_DIR/empty" | ||
58 | @@ -XXX,XX +XXX,XX @@ for mode in off full falloc; do | ||
59 | stat -c "size=%s, blocks=%b" $TEST_IMG | _filter_blocks $extra_blocks $min_blocks $size | ||
60 | done | ||
61 | |||
62 | +for new_size in 4096 1048576; do | ||
63 | + echo | ||
64 | + echo "== resize empty image with block_resize ==" | ||
65 | + _make_test_img 0 | _filter_imgfmt | ||
66 | + _block_resize $TEST_IMG $new_size >/dev/null | ||
67 | + stat -c "size=%s, blocks=%b" $TEST_IMG | _filter_blocks $extra_blocks $min_blocks $new_size | ||
68 | +done | ||
69 | + | ||
70 | # success, all done | ||
71 | echo "*** done" | ||
72 | rm -f $seq.full | ||
73 | diff --git a/tests/qemu-iotests/175.out b/tests/qemu-iotests/175.out | ||
74 | index XXXXXXX..XXXXXXX 100644 | ||
75 | --- a/tests/qemu-iotests/175.out | ||
76 | +++ b/tests/qemu-iotests/175.out | ||
77 | @@ -XXX,XX +XXX,XX @@ size=1048576, max allocation | ||
78 | == creating image with preallocation falloc == | ||
79 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1048576 preallocation=falloc | ||
80 | size=1048576, max allocation | ||
81 | + | ||
82 | +== resize empty image with block_resize == | ||
83 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=0 | ||
84 | +size=4096, min allocation | ||
85 | + | ||
86 | +== resize empty image with block_resize == | ||
87 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=0 | ||
88 | +size=1048576, min allocation | ||
89 | *** done | ||
90 | -- | ||
91 | 2.21.0 | ||
92 | |||
93 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | fe646693acc changed qemu-img create's output so that it no longer prints | ||
2 | single quotes around parameter values. The subformat and adapter_type | ||
3 | filters in _filter_img_create() have never been adapted to that change. | ||
1 | 4 | ||
5 | Fixes: fe646693acc13ac48b98435d14149ab04dc597bc | ||
6 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
7 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
8 | Message-id: 20190815153638.4600-2-mreitz@redhat.com | ||
9 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
10 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
11 | --- | ||
12 | tests/qemu-iotests/059.out | 16 ++++++++-------- | ||
13 | tests/qemu-iotests/common.filter | 4 ++-- | ||
14 | 2 files changed, 10 insertions(+), 10 deletions(-) | ||
15 | |||
16 | diff --git a/tests/qemu-iotests/059.out b/tests/qemu-iotests/059.out | ||
17 | index XXXXXXX..XXXXXXX 100644 | ||
18 | --- a/tests/qemu-iotests/059.out | ||
19 | +++ b/tests/qemu-iotests/059.out | ||
20 | @@ -XXX,XX +XXX,XX @@ Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=67108864 | ||
21 | qemu-io: can't open device TEST_DIR/t.vmdk: L1 size too big | ||
22 | |||
23 | === Testing monolithicFlat creation and opening === | ||
24 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=2147483648 subformat=monolithicFlat | ||
25 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=2147483648 | ||
26 | image: TEST_DIR/t.IMGFMT | ||
27 | file format: IMGFMT | ||
28 | virtual size: 2 GiB (2147483648 bytes) | ||
29 | |||
30 | === Testing monolithicFlat with zeroed_grain === | ||
31 | qemu-img: TEST_DIR/t.IMGFMT: Flat image can't enable zeroed grain | ||
32 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=2147483648 subformat=monolithicFlat | ||
33 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=2147483648 | ||
34 | |||
35 | === Testing big twoGbMaxExtentFlat === | ||
36 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1073741824000 subformat=twoGbMaxExtentFlat | ||
37 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1073741824000 | ||
38 | image: TEST_DIR/t.vmdk | ||
39 | file format: vmdk | ||
40 | virtual size: 0.977 TiB (1073741824000 bytes) | ||
41 | @@ -XXX,XX +XXX,XX @@ Format specific information: | ||
42 | qemu-img: Could not open 'TEST_DIR/t.IMGFMT': Invalid extent line: RW 12582912 VMFS "dummy.IMGFMT" 1 | ||
43 | |||
44 | === Testing truncated sparse === | ||
45 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=107374182400 subformat=monolithicSparse | ||
46 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=107374182400 | ||
47 | qemu-img: Could not open 'TEST_DIR/t.IMGFMT': File truncated, expecting at least 13172736 bytes | ||
48 | |||
49 | === Converting to streamOptimized from image with small cluster size=== | ||
50 | @@ -XXX,XX +XXX,XX @@ wrote 512/512 bytes at offset 10240 | ||
51 | 512 bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) | ||
52 | |||
53 | === Testing monolithicFlat with internally generated JSON file name === | ||
54 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=67108864 subformat=monolithicFlat | ||
55 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=67108864 | ||
56 | qemu-io: can't open: Cannot use relative extent paths with VMDK descriptor file 'json:{"image": {"driver": "file", "filename": "TEST_DIR/t.IMGFMT"}, "driver": "blkdebug", "inject-error.0.event": "read_aio"}' | ||
57 | |||
58 | === Testing version 3 === | ||
59 | @@ -XXX,XX +XXX,XX @@ read 512/512 bytes at offset 64931328 | ||
60 | 512 bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) | ||
61 | |||
62 | === Testing 4TB monolithicFlat creation and IO === | ||
63 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=4398046511104 subformat=monolithicFlat | ||
64 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=4398046511104 | ||
65 | image: TEST_DIR/t.IMGFMT | ||
66 | file format: IMGFMT | ||
67 | virtual size: 4 TiB (4398046511104 bytes) | ||
68 | @@ -XXX,XX +XXX,XX @@ read 1024/1024 bytes at offset 966367641600 | ||
69 | 1 KiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) | ||
70 | |||
71 | === Testing qemu-img map on extents === | ||
72 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=33285996544 subformat=monolithicSparse | ||
73 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=33285996544 | ||
74 | wrote 1024/1024 bytes at offset 65024 | ||
75 | 1 KiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) | ||
76 | wrote 1024/1024 bytes at offset 2147483136 | ||
77 | @@ -XXX,XX +XXX,XX @@ Offset Length Mapped to File | ||
78 | 0 0x20000 0x3f0000 TEST_DIR/t.vmdk | ||
79 | 0x7fff0000 0x20000 0x410000 TEST_DIR/t.vmdk | ||
80 | 0x140000000 0x10000 0x430000 TEST_DIR/t.vmdk | ||
81 | -Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=33285996544 subformat=twoGbMaxExtentSparse | ||
82 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=33285996544 | ||
83 | wrote 1024/1024 bytes at offset 65024 | ||
84 | 1 KiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) | ||
85 | wrote 1024/1024 bytes at offset 2147483136 | ||
86 | diff --git a/tests/qemu-iotests/common.filter b/tests/qemu-iotests/common.filter | ||
87 | index XXXXXXX..XXXXXXX 100644 | ||
88 | --- a/tests/qemu-iotests/common.filter | ||
89 | +++ b/tests/qemu-iotests/common.filter | ||
90 | @@ -XXX,XX +XXX,XX @@ _filter_img_create() | ||
91 | -e "s# compat6=\\(on\\|off\\)##g" \ | ||
92 | -e "s# static=\\(on\\|off\\)##g" \ | ||
93 | -e "s# zeroed_grain=\\(on\\|off\\)##g" \ | ||
94 | - -e "s# subformat='[^']*'##g" \ | ||
95 | - -e "s# adapter_type='[^']*'##g" \ | ||
96 | + -e "s# subformat=[^ ]*##g" \ | ||
97 | + -e "s# adapter_type=[^ ]*##g" \ | ||
98 | -e "s# hwversion=[^ ]*##g" \ | ||
99 | -e "s# lazy_refcounts=\\(on\\|off\\)##g" \ | ||
100 | -e "s# block_size=[0-9]\\+##g" \ | ||
101 | -- | ||
102 | 2.21.0 | ||
103 | |||
104 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | This makes iotest 033 pass with e.g. subformat=monolithicFlat. It also | ||
2 | turns a former error in 059 into success. | ||
1 | 3 | ||
4 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
5 | Message-id: 20190815153638.4600-3-mreitz@redhat.com | ||
6 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
7 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
8 | --- | ||
9 | block/vmdk.c | 54 ++++++++++++++++++++++++-------------- | ||
10 | tests/qemu-iotests/059 | 7 +++-- | ||
11 | tests/qemu-iotests/059.out | 4 ++- | ||
12 | 3 files changed, 42 insertions(+), 23 deletions(-) | ||
13 | |||
14 | diff --git a/block/vmdk.c b/block/vmdk.c | ||
15 | index XXXXXXX..XXXXXXX 100644 | ||
16 | --- a/block/vmdk.c | ||
17 | +++ b/block/vmdk.c | ||
18 | @@ -XXX,XX +XXX,XX @@ static const char *next_line(const char *s) | ||
19 | } | ||
20 | |||
21 | static int vmdk_parse_extents(const char *desc, BlockDriverState *bs, | ||
22 | - const char *desc_file_path, QDict *options, | ||
23 | - Error **errp) | ||
24 | + QDict *options, Error **errp) | ||
25 | { | ||
26 | int ret; | ||
27 | int matches; | ||
28 | @@ -XXX,XX +XXX,XX @@ static int vmdk_parse_extents(const char *desc, BlockDriverState *bs, | ||
29 | const char *p, *np; | ||
30 | int64_t sectors = 0; | ||
31 | int64_t flat_offset; | ||
32 | + char *desc_file_dir = NULL; | ||
33 | char *extent_path; | ||
34 | BdrvChild *extent_file; | ||
35 | BDRVVmdkState *s = bs->opaque; | ||
36 | @@ -XXX,XX +XXX,XX @@ static int vmdk_parse_extents(const char *desc, BlockDriverState *bs, | ||
37 | continue; | ||
38 | } | ||
39 | |||
40 | - if (!path_is_absolute(fname) && !path_has_protocol(fname) && | ||
41 | - !desc_file_path[0]) | ||
42 | - { | ||
43 | - bdrv_refresh_filename(bs->file->bs); | ||
44 | - error_setg(errp, "Cannot use relative extent paths with VMDK " | ||
45 | - "descriptor file '%s'", bs->file->bs->filename); | ||
46 | - return -EINVAL; | ||
47 | - } | ||
48 | + if (path_is_absolute(fname)) { | ||
49 | + extent_path = g_strdup(fname); | ||
50 | + } else { | ||
51 | + if (!desc_file_dir) { | ||
52 | + desc_file_dir = bdrv_dirname(bs->file->bs, errp); | ||
53 | + if (!desc_file_dir) { | ||
54 | + bdrv_refresh_filename(bs->file->bs); | ||
55 | + error_prepend(errp, "Cannot use relative paths with VMDK " | ||
56 | + "descriptor file '%s': ", | ||
57 | + bs->file->bs->filename); | ||
58 | + ret = -EINVAL; | ||
59 | + goto out; | ||
60 | + } | ||
61 | + } | ||
62 | |||
63 | - extent_path = path_combine(desc_file_path, fname); | ||
64 | + extent_path = g_strconcat(desc_file_dir, fname, NULL); | ||
65 | + } | ||
66 | |||
67 | ret = snprintf(extent_opt_prefix, 32, "extents.%d", s->num_extents); | ||
68 | assert(ret < 32); | ||
69 | @@ -XXX,XX +XXX,XX @@ static int vmdk_parse_extents(const char *desc, BlockDriverState *bs, | ||
70 | g_free(extent_path); | ||
71 | if (local_err) { | ||
72 | error_propagate(errp, local_err); | ||
73 | - return -EINVAL; | ||
74 | + ret = -EINVAL; | ||
75 | + goto out; | ||
76 | } | ||
77 | |||
78 | /* save to extents array */ | ||
79 | @@ -XXX,XX +XXX,XX @@ static int vmdk_parse_extents(const char *desc, BlockDriverState *bs, | ||
80 | 0, 0, 0, 0, 0, &extent, errp); | ||
81 | if (ret < 0) { | ||
82 | bdrv_unref_child(bs, extent_file); | ||
83 | - return ret; | ||
84 | + goto out; | ||
85 | } | ||
86 | extent->flat_start_offset = flat_offset << 9; | ||
87 | } else if (!strcmp(type, "SPARSE") || !strcmp(type, "VMFSSPARSE")) { | ||
88 | @@ -XXX,XX +XXX,XX @@ static int vmdk_parse_extents(const char *desc, BlockDriverState *bs, | ||
89 | g_free(buf); | ||
90 | if (ret) { | ||
91 | bdrv_unref_child(bs, extent_file); | ||
92 | - return ret; | ||
93 | + goto out; | ||
94 | } | ||
95 | extent = &s->extents[s->num_extents - 1]; | ||
96 | } else if (!strcmp(type, "SESPARSE")) { | ||
97 | ret = vmdk_open_se_sparse(bs, extent_file, bs->open_flags, errp); | ||
98 | if (ret) { | ||
99 | bdrv_unref_child(bs, extent_file); | ||
100 | - return ret; | ||
101 | + goto out; | ||
102 | } | ||
103 | extent = &s->extents[s->num_extents - 1]; | ||
104 | } else { | ||
105 | error_setg(errp, "Unsupported extent type '%s'", type); | ||
106 | bdrv_unref_child(bs, extent_file); | ||
107 | - return -ENOTSUP; | ||
108 | + ret = -ENOTSUP; | ||
109 | + goto out; | ||
110 | } | ||
111 | extent->type = g_strdup(type); | ||
112 | } | ||
113 | - return 0; | ||
114 | + | ||
115 | + ret = 0; | ||
116 | + goto out; | ||
117 | |||
118 | invalid: | ||
119 | np = next_line(p); | ||
120 | @@ -XXX,XX +XXX,XX @@ invalid: | ||
121 | np--; | ||
122 | } | ||
123 | error_setg(errp, "Invalid extent line: %.*s", (int)(np - p), p); | ||
124 | - return -EINVAL; | ||
125 | + ret = -EINVAL; | ||
126 | + | ||
127 | +out: | ||
128 | + g_free(desc_file_dir); | ||
129 | + return ret; | ||
130 | } | ||
131 | |||
132 | static int vmdk_open_desc_file(BlockDriverState *bs, int flags, char *buf, | ||
133 | @@ -XXX,XX +XXX,XX @@ static int vmdk_open_desc_file(BlockDriverState *bs, int flags, char *buf, | ||
134 | } | ||
135 | s->create_type = g_strdup(ct); | ||
136 | s->desc_offset = 0; | ||
137 | - ret = vmdk_parse_extents(buf, bs, bs->file->bs->exact_filename, options, | ||
138 | - errp); | ||
139 | + ret = vmdk_parse_extents(buf, bs, options, errp); | ||
140 | exit: | ||
141 | return ret; | ||
142 | } | ||
143 | diff --git a/tests/qemu-iotests/059 b/tests/qemu-iotests/059 | ||
144 | index XXXXXXX..XXXXXXX 100755 | ||
145 | --- a/tests/qemu-iotests/059 | ||
146 | +++ b/tests/qemu-iotests/059 | ||
147 | @@ -XXX,XX +XXX,XX @@ $QEMU_IMG convert -f qcow2 -O vmdk -o subformat=streamOptimized "$TEST_IMG.qcow2 | ||
148 | |||
149 | echo | ||
150 | echo "=== Testing monolithicFlat with internally generated JSON file name ===" | ||
151 | +# Should work, because bdrv_dirname() works fine with blkdebug | ||
152 | IMGOPTS="subformat=monolithicFlat" _make_test_img 64M | ||
153 | -$QEMU_IO -c "open -o driver=$IMGFMT,file.driver=blkdebug,file.image.filename=$TEST_IMG,file.inject-error.0.event=read_aio" 2>&1 \ | ||
154 | - | _filter_testdir | _filter_imgfmt | ||
155 | +$QEMU_IO -c "open -o driver=$IMGFMT,file.driver=blkdebug,file.image.filename=$TEST_IMG,file.inject-error.0.event=read_aio" \ | ||
156 | + -c info \ | ||
157 | + 2>&1 \ | ||
158 | + | _filter_testdir | _filter_imgfmt | _filter_img_info | ||
159 | _cleanup_test_img | ||
160 | |||
161 | echo | ||
162 | diff --git a/tests/qemu-iotests/059.out b/tests/qemu-iotests/059.out | ||
163 | index XXXXXXX..XXXXXXX 100644 | ||
164 | --- a/tests/qemu-iotests/059.out | ||
165 | +++ b/tests/qemu-iotests/059.out | ||
166 | @@ -XXX,XX +XXX,XX @@ wrote 512/512 bytes at offset 10240 | ||
167 | |||
168 | === Testing monolithicFlat with internally generated JSON file name === | ||
169 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=67108864 | ||
170 | -qemu-io: can't open: Cannot use relative extent paths with VMDK descriptor file 'json:{"image": {"driver": "file", "filename": "TEST_DIR/t.IMGFMT"}, "driver": "blkdebug", "inject-error.0.event": "read_aio"}' | ||
171 | +format name: IMGFMT | ||
172 | +cluster size: 0 bytes | ||
173 | +vm state offset: 0 bytes | ||
174 | |||
175 | === Testing version 3 === | ||
176 | image: TEST_DIR/iotest-version3.IMGFMT | ||
177 | -- | ||
178 | 2.21.0 | ||
179 | |||
180 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | We had a test for a case where relative extent paths did not work, but | ||
2 | unfortunately we just fixed the underlying problem, so it works now. | ||
3 | This patch adds a new test case that still fails. | ||
1 | 4 | ||
5 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
6 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
7 | Message-id: 20190815153638.4600-4-mreitz@redhat.com | ||
8 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
9 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
10 | --- | ||
11 | tests/qemu-iotests/059 | 27 +++++++++++++++++++++++++++ | ||
12 | tests/qemu-iotests/059.out | 4 ++++ | ||
13 | 2 files changed, 31 insertions(+) | ||
14 | |||
15 | diff --git a/tests/qemu-iotests/059 b/tests/qemu-iotests/059 | ||
16 | index XXXXXXX..XXXXXXX 100755 | ||
17 | --- a/tests/qemu-iotests/059 | ||
18 | +++ b/tests/qemu-iotests/059 | ||
19 | @@ -XXX,XX +XXX,XX @@ $QEMU_IMG convert -f qcow2 -O vmdk -o subformat=streamOptimized "$TEST_IMG.qcow2 | ||
20 | |||
21 | echo | ||
22 | echo "=== Testing monolithicFlat with internally generated JSON file name ===" | ||
23 | + | ||
24 | +echo '--- blkdebug ---' | ||
25 | # Should work, because bdrv_dirname() works fine with blkdebug | ||
26 | IMGOPTS="subformat=monolithicFlat" _make_test_img 64M | ||
27 | $QEMU_IO -c "open -o driver=$IMGFMT,file.driver=blkdebug,file.image.filename=$TEST_IMG,file.inject-error.0.event=read_aio" \ | ||
28 | @@ -XXX,XX +XXX,XX @@ $QEMU_IO -c "open -o driver=$IMGFMT,file.driver=blkdebug,file.image.filename=$TE | ||
29 | | _filter_testdir | _filter_imgfmt | _filter_img_info | ||
30 | _cleanup_test_img | ||
31 | |||
32 | +echo '--- quorum ---' | ||
33 | +# Should not work, because bdrv_dirname() does not work with quorum | ||
34 | +IMGOPTS="subformat=monolithicFlat" _make_test_img 64M | ||
35 | +cp "$TEST_IMG" "$TEST_IMG.orig" | ||
36 | + | ||
37 | +filename="json:{ | ||
38 | + \"driver\": \"$IMGFMT\", | ||
39 | + \"file\": { | ||
40 | + \"driver\": \"quorum\", | ||
41 | + \"children\": [ { | ||
42 | + \"driver\": \"file\", | ||
43 | + \"filename\": \"$TEST_IMG\" | ||
44 | + }, { | ||
45 | + \"driver\": \"file\", | ||
46 | + \"filename\": \"$TEST_IMG.orig\" | ||
47 | + } ], | ||
48 | + \"vote-threshold\": 1 | ||
49 | + } }" | ||
50 | + | ||
51 | +filename=$(echo "$filename" | tr '\n' ' ' | sed -e 's/\s\+/ /g') | ||
52 | +$QEMU_IMG info "$filename" 2>&1 \ | ||
53 | + | sed -e "s/'json:[^']*'/\$QUORUM_FILE/g" \ | ||
54 | + | _filter_testdir | _filter_imgfmt | _filter_img_info | ||
55 | + | ||
56 | + | ||
57 | echo | ||
58 | echo "=== Testing version 3 ===" | ||
59 | _use_sample_img iotest-version3.vmdk.bz2 | ||
60 | diff --git a/tests/qemu-iotests/059.out b/tests/qemu-iotests/059.out | ||
61 | index XXXXXXX..XXXXXXX 100644 | ||
62 | --- a/tests/qemu-iotests/059.out | ||
63 | +++ b/tests/qemu-iotests/059.out | ||
64 | @@ -XXX,XX +XXX,XX @@ wrote 512/512 bytes at offset 10240 | ||
65 | 512 bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec) | ||
66 | |||
67 | === Testing monolithicFlat with internally generated JSON file name === | ||
68 | +--- blkdebug --- | ||
69 | Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=67108864 | ||
70 | format name: IMGFMT | ||
71 | cluster size: 0 bytes | ||
72 | vm state offset: 0 bytes | ||
73 | +--- quorum --- | ||
74 | +Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=67108864 | ||
75 | +qemu-img: Could not open $QUORUM_FILE: Cannot use relative paths with VMDK descriptor file $QUORUM_FILE: Cannot generate a base directory for quorum nodes | ||
76 | |||
77 | === Testing version 3 === | ||
78 | image: TEST_DIR/iotest-version3.IMGFMT | ||
79 | -- | ||
80 | 2.21.0 | ||
81 | |||
82 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | Compressed writes generally have to write full clusters, not just in | ||
2 | theory but also in practice when it comes to vmdk's streamOptimized | ||
3 | subformat. It currently is just silently broken for writes with | ||
4 | non-zero in-cluster offsets: | ||
1 | 5 | ||
6 | $ qemu-img create -f vmdk -o subformat=streamOptimized foo.vmdk 1M | ||
7 | $ qemu-io -c 'write 4k 4k' -c 'read 4k 4k' foo.vmdk | ||
8 | wrote 4096/4096 bytes at offset 4096 | ||
9 | 4 KiB, 1 ops; 00.01 sec (443.724 KiB/sec and 110.9309 ops/sec) | ||
10 | read failed: Invalid argument | ||
11 | |||
12 | (The technical reason is that vmdk_write_extent() just writes the | ||
13 | incomplete compressed data actually to offset 4k. When reading the | ||
14 | data, vmdk_read_extent() looks at offset 0 and finds the compressed data | ||
15 | size to be 0, because that is what it reads from there. This yields an | ||
16 | error.) | ||
17 | |||
18 | For incomplete writes with zero in-cluster offsets, the error path when | ||
19 | reading the rest of the cluster is a bit different, but the result is | ||
20 | the same: | ||
21 | |||
22 | $ qemu-img create -f vmdk -o subformat=streamOptimized foo.vmdk 1M | ||
23 | $ qemu-io -c 'write 0k 4k' -c 'read 4k 4k' foo.vmdk | ||
24 | wrote 4096/4096 bytes at offset 0 | ||
25 | 4 KiB, 1 ops; 00.01 sec (362.641 KiB/sec and 90.6603 ops/sec) | ||
26 | read failed: Invalid argument | ||
27 | |||
28 | (Here, vmdk_read_extent() finds the data and then sees that the | ||
29 | uncompressed data is short.) | ||
30 | |||
31 | It is better to reject invalid writes than to make the user believe they | ||
32 | might have succeeded and then fail when trying to read it back. | ||
33 | |||
34 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
35 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
36 | Message-id: 20190815153638.4600-5-mreitz@redhat.com | ||
37 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
38 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
39 | --- | ||
40 | block/vmdk.c | 10 ++++++++++ | ||
41 | 1 file changed, 10 insertions(+) | ||
42 | |||
43 | diff --git a/block/vmdk.c b/block/vmdk.c | ||
44 | index XXXXXXX..XXXXXXX 100644 | ||
45 | --- a/block/vmdk.c | ||
46 | +++ b/block/vmdk.c | ||
47 | @@ -XXX,XX +XXX,XX @@ static int vmdk_write_extent(VmdkExtent *extent, int64_t cluster_offset, | ||
48 | if (extent->compressed) { | ||
49 | void *compressed_data; | ||
50 | |||
51 | + /* Only whole clusters */ | ||
52 | + if (offset_in_cluster || | ||
53 | + n_bytes > (extent->cluster_sectors * SECTOR_SIZE) || | ||
54 | + (n_bytes < (extent->cluster_sectors * SECTOR_SIZE) && | ||
55 | + offset + n_bytes != extent->end_sector * SECTOR_SIZE)) | ||
56 | + { | ||
57 | + ret = -EINVAL; | ||
58 | + goto out; | ||
59 | + } | ||
60 | + | ||
61 | if (!extent->has_marker) { | ||
62 | ret = -EINVAL; | ||
63 | goto out; | ||
64 | -- | ||
65 | 2.21.0 | ||
66 | |||
67 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | streamOptimized does not support writes that do not span exactly one | ||
2 | cluster. Furthermore, it cannot rewrite already allocated clusters. | ||
3 | As such, many iotests do not work with it. Disable them. | ||
1 | 4 | ||
5 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
6 | Message-id: 20190815153638.4600-6-mreitz@redhat.com | ||
7 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
8 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
9 | --- | ||
10 | tests/qemu-iotests/002 | 1 + | ||
11 | tests/qemu-iotests/003 | 1 + | ||
12 | tests/qemu-iotests/005 | 3 ++- | ||
13 | tests/qemu-iotests/009 | 1 + | ||
14 | tests/qemu-iotests/010 | 1 + | ||
15 | tests/qemu-iotests/011 | 1 + | ||
16 | tests/qemu-iotests/017 | 3 ++- | ||
17 | tests/qemu-iotests/018 | 3 ++- | ||
18 | tests/qemu-iotests/019 | 3 ++- | ||
19 | tests/qemu-iotests/020 | 3 ++- | ||
20 | tests/qemu-iotests/027 | 1 + | ||
21 | tests/qemu-iotests/032 | 1 + | ||
22 | tests/qemu-iotests/033 | 1 + | ||
23 | tests/qemu-iotests/034 | 3 ++- | ||
24 | tests/qemu-iotests/037 | 3 ++- | ||
25 | tests/qemu-iotests/063 | 3 ++- | ||
26 | tests/qemu-iotests/072 | 1 + | ||
27 | tests/qemu-iotests/105 | 3 ++- | ||
28 | tests/qemu-iotests/197 | 1 + | ||
29 | tests/qemu-iotests/215 | 1 + | ||
30 | tests/qemu-iotests/251 | 1 + | ||
31 | 21 files changed, 30 insertions(+), 9 deletions(-) | ||
32 | |||
33 | diff --git a/tests/qemu-iotests/002 b/tests/qemu-iotests/002 | ||
34 | index XXXXXXX..XXXXXXX 100755 | ||
35 | --- a/tests/qemu-iotests/002 | ||
36 | +++ b/tests/qemu-iotests/002 | ||
37 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
38 | |||
39 | _supported_fmt generic | ||
40 | _supported_proto generic | ||
41 | +_unsupported_imgopts "subformat=streamOptimized" | ||
42 | |||
43 | |||
44 | size=128M | ||
45 | diff --git a/tests/qemu-iotests/003 b/tests/qemu-iotests/003 | ||
46 | index XXXXXXX..XXXXXXX 100755 | ||
47 | --- a/tests/qemu-iotests/003 | ||
48 | +++ b/tests/qemu-iotests/003 | ||
49 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
50 | |||
51 | _supported_fmt generic | ||
52 | _supported_proto generic | ||
53 | +_unsupported_imgopts "subformat=streamOptimized" | ||
54 | |||
55 | size=128M | ||
56 | offset=67M | ||
57 | diff --git a/tests/qemu-iotests/005 b/tests/qemu-iotests/005 | ||
58 | index XXXXXXX..XXXXXXX 100755 | ||
59 | --- a/tests/qemu-iotests/005 | ||
60 | +++ b/tests/qemu-iotests/005 | ||
61 | @@ -XXX,XX +XXX,XX @@ _supported_fmt generic | ||
62 | _supported_proto generic | ||
63 | _supported_os Linux | ||
64 | _unsupported_imgopts "subformat=twoGbMaxExtentFlat" \ | ||
65 | - "subformat=twoGbMaxExtentSparse" | ||
66 | + "subformat=twoGbMaxExtentSparse" \ | ||
67 | + "subformat=streamOptimized" | ||
68 | |||
69 | # vpc is limited to 127GB, so we can't test it here | ||
70 | if [ "$IMGFMT" = "vpc" ]; then | ||
71 | diff --git a/tests/qemu-iotests/009 b/tests/qemu-iotests/009 | ||
72 | index XXXXXXX..XXXXXXX 100755 | ||
73 | --- a/tests/qemu-iotests/009 | ||
74 | +++ b/tests/qemu-iotests/009 | ||
75 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
76 | |||
77 | _supported_fmt generic | ||
78 | _supported_proto generic | ||
79 | +_unsupported_imgopts "subformat=streamOptimized" | ||
80 | |||
81 | |||
82 | size=6G | ||
83 | diff --git a/tests/qemu-iotests/010 b/tests/qemu-iotests/010 | ||
84 | index XXXXXXX..XXXXXXX 100755 | ||
85 | --- a/tests/qemu-iotests/010 | ||
86 | +++ b/tests/qemu-iotests/010 | ||
87 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
88 | |||
89 | _supported_fmt generic | ||
90 | _supported_proto generic | ||
91 | +_unsupported_imgopts "subformat=streamOptimized" | ||
92 | |||
93 | |||
94 | size=6G | ||
95 | diff --git a/tests/qemu-iotests/011 b/tests/qemu-iotests/011 | ||
96 | index XXXXXXX..XXXXXXX 100755 | ||
97 | --- a/tests/qemu-iotests/011 | ||
98 | +++ b/tests/qemu-iotests/011 | ||
99 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
100 | |||
101 | _supported_fmt generic | ||
102 | _supported_proto generic | ||
103 | +_unsupported_imgopts "subformat=streamOptimized" | ||
104 | |||
105 | |||
106 | size=6G | ||
107 | diff --git a/tests/qemu-iotests/017 b/tests/qemu-iotests/017 | ||
108 | index XXXXXXX..XXXXXXX 100755 | ||
109 | --- a/tests/qemu-iotests/017 | ||
110 | +++ b/tests/qemu-iotests/017 | ||
111 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
112 | _supported_fmt qcow qcow2 vmdk qed | ||
113 | _supported_proto generic | ||
114 | _unsupported_proto vxhs | ||
115 | -_unsupported_imgopts "subformat=monolithicFlat" "subformat=twoGbMaxExtentFlat" | ||
116 | +_unsupported_imgopts "subformat=monolithicFlat" "subformat=twoGbMaxExtentFlat" \ | ||
117 | + "subformat=streamOptimized" | ||
118 | |||
119 | TEST_OFFSETS="0 4294967296" | ||
120 | |||
121 | diff --git a/tests/qemu-iotests/018 b/tests/qemu-iotests/018 | ||
122 | index XXXXXXX..XXXXXXX 100755 | ||
123 | --- a/tests/qemu-iotests/018 | ||
124 | +++ b/tests/qemu-iotests/018 | ||
125 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
126 | _supported_fmt qcow qcow2 vmdk qed | ||
127 | _supported_proto file | ||
128 | _supported_os Linux | ||
129 | -_unsupported_imgopts "subformat=monolithicFlat" "subformat=twoGbMaxExtentFlat" | ||
130 | +_unsupported_imgopts "subformat=monolithicFlat" "subformat=twoGbMaxExtentFlat" \ | ||
131 | + "streamOptimized" | ||
132 | |||
133 | TEST_OFFSETS="0 4294967296" | ||
134 | |||
135 | diff --git a/tests/qemu-iotests/019 b/tests/qemu-iotests/019 | ||
136 | index XXXXXXX..XXXXXXX 100755 | ||
137 | --- a/tests/qemu-iotests/019 | ||
138 | +++ b/tests/qemu-iotests/019 | ||
139 | @@ -XXX,XX +XXX,XX @@ _supported_proto file | ||
140 | _supported_os Linux | ||
141 | _unsupported_imgopts "subformat=monolithicFlat" \ | ||
142 | "subformat=twoGbMaxExtentFlat" \ | ||
143 | - "subformat=twoGbMaxExtentSparse" | ||
144 | + "subformat=twoGbMaxExtentSparse" \ | ||
145 | + "subformat=streamOptimized" | ||
146 | |||
147 | TEST_OFFSETS="0 4294967296" | ||
148 | CLUSTER_SIZE=65536 | ||
149 | diff --git a/tests/qemu-iotests/020 b/tests/qemu-iotests/020 | ||
150 | index XXXXXXX..XXXXXXX 100755 | ||
151 | --- a/tests/qemu-iotests/020 | ||
152 | +++ b/tests/qemu-iotests/020 | ||
153 | @@ -XXX,XX +XXX,XX @@ _supported_fmt qcow qcow2 vmdk qed | ||
154 | _supported_proto file | ||
155 | _unsupported_imgopts "subformat=monolithicFlat" \ | ||
156 | "subformat=twoGbMaxExtentFlat" \ | ||
157 | - "subformat=twoGbMaxExtentSparse" | ||
158 | + "subformat=twoGbMaxExtentSparse" \ | ||
159 | + "subformat=streamOptimized" | ||
160 | |||
161 | TEST_OFFSETS="0 4294967296" | ||
162 | |||
163 | diff --git a/tests/qemu-iotests/027 b/tests/qemu-iotests/027 | ||
164 | index XXXXXXX..XXXXXXX 100755 | ||
165 | --- a/tests/qemu-iotests/027 | ||
166 | +++ b/tests/qemu-iotests/027 | ||
167 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
168 | |||
169 | _supported_fmt vmdk qcow qcow2 qed | ||
170 | _supported_proto generic | ||
171 | +_unsupported_imgopts "subformat=streamOptimized" | ||
172 | |||
173 | |||
174 | size=128M | ||
175 | diff --git a/tests/qemu-iotests/032 b/tests/qemu-iotests/032 | ||
176 | index XXXXXXX..XXXXXXX 100755 | ||
177 | --- a/tests/qemu-iotests/032 | ||
178 | +++ b/tests/qemu-iotests/032 | ||
179 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
180 | # This works for any image format (though unlikely to segfault for raw) | ||
181 | _supported_fmt generic | ||
182 | _supported_proto generic | ||
183 | +_unsupported_imgopts "subformat=streamOptimized" | ||
184 | |||
185 | echo | ||
186 | echo === Prepare image === | ||
187 | diff --git a/tests/qemu-iotests/033 b/tests/qemu-iotests/033 | ||
188 | index XXXXXXX..XXXXXXX 100755 | ||
189 | --- a/tests/qemu-iotests/033 | ||
190 | +++ b/tests/qemu-iotests/033 | ||
191 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
192 | |||
193 | _supported_fmt generic | ||
194 | _supported_proto generic | ||
195 | +_unsupported_imgopts "subformat=streamOptimized" | ||
196 | |||
197 | |||
198 | size=128M | ||
199 | diff --git a/tests/qemu-iotests/034 b/tests/qemu-iotests/034 | ||
200 | index XXXXXXX..XXXXXXX 100755 | ||
201 | --- a/tests/qemu-iotests/034 | ||
202 | +++ b/tests/qemu-iotests/034 | ||
203 | @@ -XXX,XX +XXX,XX @@ _supported_proto file | ||
204 | _supported_os Linux | ||
205 | _unsupported_imgopts "subformat=monolithicFlat" \ | ||
206 | "subformat=twoGbMaxExtentFlat" \ | ||
207 | - "subformat=twoGbMaxExtentSparse" | ||
208 | + "subformat=twoGbMaxExtentSparse" \ | ||
209 | + "subformat=streamOptimized" | ||
210 | |||
211 | CLUSTER_SIZE=4k | ||
212 | size=128M | ||
213 | diff --git a/tests/qemu-iotests/037 b/tests/qemu-iotests/037 | ||
214 | index XXXXXXX..XXXXXXX 100755 | ||
215 | --- a/tests/qemu-iotests/037 | ||
216 | +++ b/tests/qemu-iotests/037 | ||
217 | @@ -XXX,XX +XXX,XX @@ _supported_fmt qcow qcow2 vmdk qed | ||
218 | _supported_proto file | ||
219 | _unsupported_imgopts "subformat=monolithicFlat" \ | ||
220 | "subformat=twoGbMaxExtentFlat" \ | ||
221 | - "subformat=twoGbMaxExtentSparse" | ||
222 | + "subformat=twoGbMaxExtentSparse" \ | ||
223 | + "subformat=streamOptimized" | ||
224 | |||
225 | CLUSTER_SIZE=4k | ||
226 | size=128M | ||
227 | diff --git a/tests/qemu-iotests/063 b/tests/qemu-iotests/063 | ||
228 | index XXXXXXX..XXXXXXX 100755 | ||
229 | --- a/tests/qemu-iotests/063 | ||
230 | +++ b/tests/qemu-iotests/063 | ||
231 | @@ -XXX,XX +XXX,XX @@ _supported_fmt qcow qcow2 vmdk qed raw | ||
232 | _supported_proto file | ||
233 | _unsupported_imgopts "subformat=monolithicFlat" \ | ||
234 | "subformat=twoGbMaxExtentFlat" \ | ||
235 | - "subformat=twoGbMaxExtentSparse" | ||
236 | + "subformat=twoGbMaxExtentSparse" \ | ||
237 | + "subformat=streamOptimized" | ||
238 | |||
239 | _make_test_img 4M | ||
240 | |||
241 | diff --git a/tests/qemu-iotests/072 b/tests/qemu-iotests/072 | ||
242 | index XXXXXXX..XXXXXXX 100755 | ||
243 | --- a/tests/qemu-iotests/072 | ||
244 | +++ b/tests/qemu-iotests/072 | ||
245 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
246 | |||
247 | _supported_fmt vpc vmdk vhdx vdi qed qcow2 qcow | ||
248 | _supported_proto file | ||
249 | +_unsupported_imgopts "subformat=streamOptimized" | ||
250 | |||
251 | IMG_SIZE=64M | ||
252 | |||
253 | diff --git a/tests/qemu-iotests/105 b/tests/qemu-iotests/105 | ||
254 | index XXXXXXX..XXXXXXX 100755 | ||
255 | --- a/tests/qemu-iotests/105 | ||
256 | +++ b/tests/qemu-iotests/105 | ||
257 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
258 | _supported_fmt qcow2 vmdk vhdx qed | ||
259 | _supported_proto generic | ||
260 | _unsupported_imgopts "subformat=twoGbMaxExtentFlat" \ | ||
261 | - "subformat=twoGbMaxExtentSparse" | ||
262 | + "subformat=twoGbMaxExtentSparse" \ | ||
263 | + "subformat=streamOptimized" | ||
264 | |||
265 | echo | ||
266 | echo "creating large image" | ||
267 | diff --git a/tests/qemu-iotests/197 b/tests/qemu-iotests/197 | ||
268 | index XXXXXXX..XXXXXXX 100755 | ||
269 | --- a/tests/qemu-iotests/197 | ||
270 | +++ b/tests/qemu-iotests/197 | ||
271 | @@ -XXX,XX +XXX,XX @@ _supported_fmt generic | ||
272 | _supported_proto generic | ||
273 | # LUKS support may be possible, but it complicates things. | ||
274 | _unsupported_fmt luks | ||
275 | +_unsupported_imgopts "subformat=streamOptimized" | ||
276 | |||
277 | echo | ||
278 | echo '=== Copy-on-read ===' | ||
279 | diff --git a/tests/qemu-iotests/215 b/tests/qemu-iotests/215 | ||
280 | index XXXXXXX..XXXXXXX 100755 | ||
281 | --- a/tests/qemu-iotests/215 | ||
282 | +++ b/tests/qemu-iotests/215 | ||
283 | @@ -XXX,XX +XXX,XX @@ _supported_fmt generic | ||
284 | _supported_proto generic | ||
285 | # LUKS support may be possible, but it complicates things. | ||
286 | _unsupported_fmt luks | ||
287 | +_unsupported_imgopts "subformat=streamOptimized" | ||
288 | |||
289 | echo | ||
290 | echo '=== Copy-on-read ===' | ||
291 | diff --git a/tests/qemu-iotests/251 b/tests/qemu-iotests/251 | ||
292 | index XXXXXXX..XXXXXXX 100755 | ||
293 | --- a/tests/qemu-iotests/251 | ||
294 | +++ b/tests/qemu-iotests/251 | ||
295 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
296 | _supported_fmt generic | ||
297 | _supported_proto file | ||
298 | _supported_os Linux | ||
299 | +_unsupported_imgopts "subformat=streamOptimized" | ||
300 | |||
301 | if [ "$IMGOPTSSYNTAX" = "true" ]; then | ||
302 | # We use json:{} filenames here, so we cannot work with additional options. | ||
303 | -- | ||
304 | 2.21.0 | ||
305 | |||
306 | diff view generated by jsdifflib |
1 | At KVM Forum 2018 I gave a presentation on security in QEMU: | 1 | The error message for the test case where we have a quorum node for |
---|---|---|---|
2 | https://www.youtube.com/watch?v=YAdRf_hwxU8 (video) | 2 | which no directory name can be generated is different: For |
3 | https://vmsplice.net/~stefan/stefanha-kvm-forum-2018.pdf (slides) | 3 | twoGbMaxExtentSparse, it complains that it cannot open the extent file. |
4 | For other (sub)formats, it just notes that it cannot determine the | ||
5 | backing file path. Both are fine, but just disable twoGbMaxExtentSparse | ||
6 | for simplicity's sake. | ||
4 | 7 | ||
5 | This patch adds a guide to secure coding practices. This document | 8 | Signed-off-by: Max Reitz <mreitz@redhat.com> |
6 | covers things that developers should know about security in QEMU. It is | 9 | Reviewed-by: John Snow <jsnow@redhat.com> |
7 | just a starting point that we can expand on later. I hope it will be | 10 | Message-id: 20190815153638.4600-7-mreitz@redhat.com |
8 | useful as a resource for new contributors and will save code reviewers | 11 | Reviewed-by: John Snow <jsnow@redhat.com> |
9 | from explaining the same concepts many times. | 12 | Signed-off-by: Max Reitz <mreitz@redhat.com> |
13 | --- | ||
14 | tests/qemu-iotests/110 | 3 ++- | ||
15 | 1 file changed, 2 insertions(+), 1 deletion(-) | ||
10 | 16 | ||
11 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 17 | diff --git a/tests/qemu-iotests/110 b/tests/qemu-iotests/110 |
12 | Acked-by: Stefano Garzarella <sgarzare@redhat.com> | 18 | index XXXXXXX..XXXXXXX 100755 |
13 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 19 | --- a/tests/qemu-iotests/110 |
14 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | 20 | +++ b/tests/qemu-iotests/110 |
15 | Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> | 21 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 |
16 | Reviewed-by: Li Qiang <liq3ea@gmail.com> | 22 | # Any format supporting backing files |
17 | Message-id: 20190509121820.16294-2-stefanha@redhat.com | 23 | _supported_fmt qed qcow qcow2 vmdk |
18 | Message-Id: <20190509121820.16294-2-stefanha@redhat.com> | 24 | _supported_proto file |
19 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 25 | -_unsupported_imgopts "subformat=monolithicFlat" "subformat=twoGbMaxExtentFlat" |
20 | --- | 26 | +_unsupported_imgopts "subformat=monolithicFlat" "subformat=twoGbMaxExtentFlat" \ |
21 | docs/devel/index.rst | 1 + | 27 | + "subformat=twoGbMaxExtentSparse" |
22 | docs/devel/secure-coding-practices.rst | 106 +++++++++++++++++++++++++ | 28 | |
23 | 2 files changed, 107 insertions(+) | 29 | TEST_IMG_REL=$(basename "$TEST_IMG") |
24 | create mode 100644 docs/devel/secure-coding-practices.rst | 30 | |
25 | |||
26 | diff --git a/docs/devel/index.rst b/docs/devel/index.rst | ||
27 | index XXXXXXX..XXXXXXX 100644 | ||
28 | --- a/docs/devel/index.rst | ||
29 | +++ b/docs/devel/index.rst | ||
30 | @@ -XXX,XX +XXX,XX @@ Contents: | ||
31 | stable-process | ||
32 | testing | ||
33 | decodetree | ||
34 | + secure-coding-practices | ||
35 | diff --git a/docs/devel/secure-coding-practices.rst b/docs/devel/secure-coding-practices.rst | ||
36 | new file mode 100644 | ||
37 | index XXXXXXX..XXXXXXX | ||
38 | --- /dev/null | ||
39 | +++ b/docs/devel/secure-coding-practices.rst | ||
40 | @@ -XXX,XX +XXX,XX @@ | ||
41 | +======================= | ||
42 | +Secure Coding Practices | ||
43 | +======================= | ||
44 | +This document covers topics that both developers and security researchers must | ||
45 | +be aware of so that they can develop safe code and audit existing code | ||
46 | +properly. | ||
47 | + | ||
48 | +Reporting Security Bugs | ||
49 | +----------------------- | ||
50 | +For details on how to report security bugs or ask questions about potential | ||
51 | +security bugs, see the `Security Process wiki page | ||
52 | +<https://wiki.qemu.org/SecurityProcess>`_. | ||
53 | + | ||
54 | +General Secure C Coding Practices | ||
55 | +--------------------------------- | ||
56 | +Most CVEs (security bugs) reported against QEMU are not specific to | ||
57 | +virtualization or emulation. They are simply C programming bugs. Therefore | ||
58 | +it's critical to be aware of common classes of security bugs. | ||
59 | + | ||
60 | +There is a wide selection of resources available covering secure C coding. For | ||
61 | +example, the `CERT C Coding Standard | ||
62 | +<https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Coding+Standard>`_ | ||
63 | +covers the most important classes of security bugs. | ||
64 | + | ||
65 | +Instead of describing them in detail here, only the names of the most important | ||
66 | +classes of security bugs are mentioned: | ||
67 | + | ||
68 | +* Buffer overflows | ||
69 | +* Use-after-free and double-free | ||
70 | +* Integer overflows | ||
71 | +* Format string vulnerabilities | ||
72 | + | ||
73 | +Some of these classes of bugs can be detected by analyzers. Static analysis is | ||
74 | +performed regularly by Coverity and the most obvious of these bugs are even | ||
75 | +reported by compilers. Dynamic analysis is possible with valgrind, tsan, and | ||
76 | +asan. | ||
77 | + | ||
78 | +Input Validation | ||
79 | +---------------- | ||
80 | +Inputs from the guest or external sources (e.g. network, files) cannot be | ||
81 | +trusted and may be invalid. Inputs must be checked before using them in a way | ||
82 | +that could crash the program, expose host memory to the guest, or otherwise be | ||
83 | +exploitable by an attacker. | ||
84 | + | ||
85 | +The most sensitive attack surface is device emulation. All hardware register | ||
86 | +accesses and data read from guest memory must be validated. A typical example | ||
87 | +is a device that contains multiple units that are selectable by the guest via | ||
88 | +an index register:: | ||
89 | + | ||
90 | + typedef struct { | ||
91 | + ProcessingUnit unit[2]; | ||
92 | + ... | ||
93 | + } MyDeviceState; | ||
94 | + | ||
95 | + static void mydev_writel(void *opaque, uint32_t addr, uint32_t val) | ||
96 | + { | ||
97 | + MyDeviceState *mydev = opaque; | ||
98 | + ProcessingUnit *unit; | ||
99 | + | ||
100 | + switch (addr) { | ||
101 | + case MYDEV_SELECT_UNIT: | ||
102 | + unit = &mydev->unit[val]; <-- this input wasn't validated! | ||
103 | + ... | ||
104 | + } | ||
105 | + } | ||
106 | + | ||
107 | +If ``val`` is not in range [0, 1] then an out-of-bounds memory access will take | ||
108 | +place when ``unit`` is dereferenced. The code must check that ``val`` is 0 or | ||
109 | +1 and handle the case where it is invalid. | ||
110 | + | ||
111 | +Unexpected Device Accesses | ||
112 | +-------------------------- | ||
113 | +The guest may access device registers in unusual orders or at unexpected | ||
114 | +moments. Device emulation code must not assume that the guest follows the | ||
115 | +typical "theory of operation" presented in driver writer manuals. The guest | ||
116 | +may make nonsense accesses to device registers such as starting operations | ||
117 | +before the device has been fully initialized. | ||
118 | + | ||
119 | +A related issue is that device emulation code must be prepared for unexpected | ||
120 | +device register accesses while asynchronous operations are in progress. A | ||
121 | +well-behaved guest might wait for a completion interrupt before accessing | ||
122 | +certain device registers. Device emulation code must handle the case where the | ||
123 | +guest overwrites registers or submits further requests before an ongoing | ||
124 | +request completes. Unexpected accesses must not cause memory corruption or | ||
125 | +leaks in QEMU. | ||
126 | + | ||
127 | +Invalid device register accesses can be reported with | ||
128 | +``qemu_log_mask(LOG_GUEST_ERROR, ...)``. The ``-d guest_errors`` command-line | ||
129 | +option enables these log messages. | ||
130 | + | ||
131 | +Live Migration | ||
132 | +-------------- | ||
133 | +Device state can be saved to disk image files and shared with other users. | ||
134 | +Live migration code must validate inputs when loading device state so an | ||
135 | +attacker cannot gain control by crafting invalid device states. Device state | ||
136 | +is therefore considered untrusted even though it is typically generated by QEMU | ||
137 | +itself. | ||
138 | + | ||
139 | +Guest Memory Access Races | ||
140 | +------------------------- | ||
141 | +Guests with multiple vCPUs may modify guest RAM while device emulation code is | ||
142 | +running. Device emulation code must copy in descriptors and other guest RAM | ||
143 | +structures and only process the local copy. This prevents | ||
144 | +time-of-check-to-time-of-use (TOCTOU) race conditions that could cause QEMU to | ||
145 | +crash when a vCPU thread modifies guest RAM while device emulation is | ||
146 | +processing it. | ||
147 | -- | 31 | -- |
148 | 2.21.0 | 32 | 2.21.0 |
149 | 33 | ||
150 | 34 | diff view generated by jsdifflib |
1 | From: Paolo Bonzini <pbonzini@redhat.com> | 1 | iotest 126 requires backing file support, which flat vmdks cannot offer. |
---|---|---|---|
2 | Skip this test for such subformats. | ||
2 | 3 | ||
3 | With aio=thread, adaptive polling makes latency worse rather than | 4 | Signed-off-by: Max Reitz <mreitz@redhat.com> |
4 | better, because it delays the execution of the ThreadPool's | 5 | Message-id: 20190815153638.4600-8-mreitz@redhat.com |
5 | completion bottom half. | 6 | Reviewed-by: John Snow <jsnow@redhat.com> |
7 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
8 | --- | ||
9 | tests/qemu-iotests/126 | 2 ++ | ||
10 | 1 file changed, 2 insertions(+) | ||
6 | 11 | ||
7 | event_notifier_poll() does run while polling, detecting that | 12 | diff --git a/tests/qemu-iotests/126 b/tests/qemu-iotests/126 |
8 | a bottom half was scheduled by a worker thread, but because | 13 | index XXXXXXX..XXXXXXX 100755 |
9 | ctx->notifier is explicitly ignored in run_poll_handlers_once(), | 14 | --- a/tests/qemu-iotests/126 |
10 | scheduling the BH does not count as making progress and | 15 | +++ b/tests/qemu-iotests/126 |
11 | run_poll_handlers() keeps running. Fix this by recomputing | 16 | @@ -XXX,XX +XXX,XX @@ status=1 # failure is the default! |
12 | the deadline after *timeout could have changed. | 17 | |
13 | 18 | # Needs backing file support | |
14 | With this change, ThreadPool still cannot participate in polling | 19 | _supported_fmt qcow qcow2 qed vmdk |
15 | but at least it does not suffer from extra latency. | 20 | +_unsupported_imgopts "subformat=monolithicFlat" \ |
16 | 21 | + "subformat=twoGbMaxExtentFlat" | |
17 | Reported-by: Sergio Lopez <slp@redhat.com> | 22 | # This is the default protocol (and we want to test the difference between |
18 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | 23 | # colons which separate a protocol prefix from the rest and colons which are |
19 | Message-id: 20190409122823.12416-1-pbonzini@redhat.com | 24 | # just part of the filename, so we cannot test protocols which require a prefix) |
20 | Cc: Stefan Hajnoczi <stefanha@gmail.com> | ||
21 | Cc: Kevin Wolf <kwolf@redhat.com> | ||
22 | Cc: qemu-block@nongnu.org | ||
23 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | ||
24 | Message-Id: <1553692145-86728-1-git-send-email-pbonzini@redhat.com> | ||
25 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | ||
26 | Message-Id: <20190409122823.12416-1-pbonzini@redhat.com> | ||
27 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | ||
28 | --- | ||
29 | util/aio-posix.c | 12 ++++++++---- | ||
30 | 1 file changed, 8 insertions(+), 4 deletions(-) | ||
31 | |||
32 | diff --git a/util/aio-posix.c b/util/aio-posix.c | ||
33 | index XXXXXXX..XXXXXXX 100644 | ||
34 | --- a/util/aio-posix.c | ||
35 | +++ b/util/aio-posix.c | ||
36 | @@ -XXX,XX +XXX,XX @@ static bool run_poll_handlers_once(AioContext *ctx, int64_t *timeout) | ||
37 | if (!node->deleted && node->io_poll && | ||
38 | aio_node_check(ctx, node->is_external) && | ||
39 | node->io_poll(node->opaque)) { | ||
40 | + /* | ||
41 | + * Polling was successful, exit try_poll_mode immediately | ||
42 | + * to adjust the next polling time. | ||
43 | + */ | ||
44 | *timeout = 0; | ||
45 | if (node->opaque != &ctx->notifier) { | ||
46 | progress = true; | ||
47 | @@ -XXX,XX +XXX,XX @@ static bool run_poll_handlers(AioContext *ctx, int64_t max_ns, int64_t *timeout) | ||
48 | do { | ||
49 | progress = run_poll_handlers_once(ctx, timeout); | ||
50 | elapsed_time = qemu_clock_get_ns(QEMU_CLOCK_REALTIME) - start_time; | ||
51 | - } while (!progress && elapsed_time < max_ns | ||
52 | - && !atomic_read(&ctx->poll_disable_cnt)); | ||
53 | + max_ns = qemu_soonest_timeout(*timeout, max_ns); | ||
54 | + assert(!(max_ns && progress)); | ||
55 | + } while (elapsed_time < max_ns && !atomic_read(&ctx->poll_disable_cnt)); | ||
56 | |||
57 | /* If time has passed with no successful polling, adjust *timeout to | ||
58 | * keep the same ending time. | ||
59 | @@ -XXX,XX +XXX,XX @@ static bool run_poll_handlers(AioContext *ctx, int64_t max_ns, int64_t *timeout) | ||
60 | */ | ||
61 | static bool try_poll_mode(AioContext *ctx, int64_t *timeout) | ||
62 | { | ||
63 | - /* See qemu_soonest_timeout() uint64_t hack */ | ||
64 | - int64_t max_ns = MIN((uint64_t)*timeout, (uint64_t)ctx->poll_ns); | ||
65 | + int64_t max_ns = qemu_soonest_timeout(*timeout, ctx->poll_ns); | ||
66 | |||
67 | if (max_ns && !atomic_read(&ctx->poll_disable_cnt)) { | ||
68 | poll_set_started(ctx, true); | ||
69 | -- | 25 | -- |
70 | 2.21.0 | 26 | 2.21.0 |
71 | 27 | ||
72 | 28 | diff view generated by jsdifflib |
1 | From: Andrey Shinkevich <andrey.shinkevich@virtuozzo.com> | 1 | From: Stefan Hajnoczi <stefanha@redhat.com> |
---|---|---|---|
2 | 2 | ||
3 | On a file system used by the customer, fallocate() returns an error | 3 | Fixes: a6b257a08e3d72219f03e461a52152672fec0612 |
4 | if the block is not properly aligned. So, bdrv_co_pwrite_zeroes() | 4 | ("file-posix: Handle undetectable alignment") |
5 | fails. We can handle that case the same way as it is done for the | ||
6 | unsupported cases, namely, call to bdrv_driver_pwritev() that writes | ||
7 | zeroes to an image for the unaligned chunk of the block. | ||
8 | |||
9 | Suggested-by: Denis V. Lunev <den@openvz.org> | ||
10 | Signed-off-by: Andrey Shinkevich <andrey.shinkevich@virtuozzo.com> | ||
11 | Reviewed-by: John Snow <jsnow@redhat.com> | ||
12 | Message-id: 1554474244-553661-1-git-send-email-andrey.shinkevich@virtuozzo.com | ||
13 | Message-Id: <1554474244-553661-1-git-send-email-andrey.shinkevich@virtuozzo.com> | ||
14 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 5 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> |
6 | Message-id: 20190827101328.4062-1-stefanha@redhat.com | ||
7 | Reviewed-by: Thomas Huth <thuth@redhat.com> | ||
8 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
15 | --- | 9 | --- |
16 | block/io.c | 2 +- | 10 | block/file-posix.c | 2 +- |
17 | 1 file changed, 1 insertion(+), 1 deletion(-) | 11 | 1 file changed, 1 insertion(+), 1 deletion(-) |
18 | 12 | ||
19 | diff --git a/block/io.c b/block/io.c | 13 | diff --git a/block/file-posix.c b/block/file-posix.c |
20 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
21 | --- a/block/io.c | 15 | --- a/block/file-posix.c |
22 | +++ b/block/io.c | 16 | +++ b/block/file-posix.c |
23 | @@ -XXX,XX +XXX,XX @@ static int coroutine_fn bdrv_co_do_pwrite_zeroes(BlockDriverState *bs, | 17 | @@ -XXX,XX +XXX,XX @@ static void raw_probe_alignment(BlockDriverState *bs, int fd, Error **errp) |
24 | assert(!bs->supported_zero_flags); | 18 | for (i = 0; i < ARRAY_SIZE(alignments); i++) { |
25 | } | 19 | align = alignments[i]; |
26 | 20 | if (raw_is_io_aligned(fd, buf + align, max_align)) { | |
27 | - if (ret == -ENOTSUP && !(flags & BDRV_REQ_NO_FALLBACK)) { | 21 | - /* Fallback to request_aligment. */ |
28 | + if (ret < 0 && !(flags & BDRV_REQ_NO_FALLBACK)) { | 22 | + /* Fallback to request_alignment. */ |
29 | /* Fall back to bounce buffer if write zeroes is unsupported */ | 23 | s->buf_align = (align != 1) ? align : bs->bl.request_alignment; |
30 | BdrvRequestFlags write_flags = flags & ~BDRV_REQ_ZERO_WRITE; | 24 | break; |
31 | 25 | } | |
32 | -- | 26 | -- |
33 | 2.21.0 | 27 | 2.21.0 |
34 | 28 | ||
35 | 29 | diff view generated by jsdifflib |
1 | From: Jules Irenge <jbi.octave@gmail.com> | 1 | From: Thomas Huth <thuth@redhat.com> |
---|---|---|---|
2 | 2 | ||
3 | Replace tab indent by four spaces to fix errors issued by checkpatch.pl tool | 3 | It is possible to enable only a subset of the block drivers with the |
4 | "ERROR: code indent should never use tabs" within "util/readline.c" file. | 4 | "--block-drv-rw-whitelist" option of the "configure" script. All other |
5 | drivers are marked as unusable (or only included as read-only with the | ||
6 | "--block-drv-ro-whitelist" option). If an iotest is now using such a | ||
7 | disabled block driver, it is failing - which is bad, since at least the | ||
8 | tests in the "auto" group should be able to deal with this situation. | ||
9 | Thus let's introduce a "_require_drivers" function that can be used by | ||
10 | the shell tests to check for the availability of certain drivers first, | ||
11 | and marks the test as "not run" if one of the drivers is missing. | ||
5 | 12 | ||
6 | Signed-off-by: Jules Irenge <jbi.octave@gmail.com> | 13 | This patch mainly targets the test in the "auto" group which should |
7 | Reviewed-by: Thomas Huth <thuth@redhat.com> | 14 | never fail in such a case, but also improves some of the other tests |
8 | Message-id: 20190401024406.10819-3-jbi.octave@gmail.com | 15 | along the way. Note that we also assume that the "qcow2" and "file" |
9 | Message-Id: <20190401024406.10819-3-jbi.octave@gmail.com> | 16 | drivers are always available - otherwise it does not make sense to |
10 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 17 | run "make check-block" at all (which only tests with qcow2 by default). |
18 | |||
19 | Signed-off-by: Thomas Huth <thuth@redhat.com> | ||
20 | Message-id: 20190823133552.11680-1-thuth@redhat.com | ||
21 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
11 | --- | 22 | --- |
12 | util/readline.c | 98 ++++++++++++++++++++++++------------------------- | 23 | tests/qemu-iotests/071 | 1 + |
13 | 1 file changed, 49 insertions(+), 49 deletions(-) | 24 | tests/qemu-iotests/081 | 4 +--- |
25 | tests/qemu-iotests/099 | 1 + | ||
26 | tests/qemu-iotests/120 | 1 + | ||
27 | tests/qemu-iotests/162 | 4 +--- | ||
28 | tests/qemu-iotests/184 | 1 + | ||
29 | tests/qemu-iotests/186 | 1 + | ||
30 | tests/qemu-iotests/common.rc | 14 ++++++++++++++ | ||
31 | 8 files changed, 21 insertions(+), 6 deletions(-) | ||
14 | 32 | ||
15 | diff --git a/util/readline.c b/util/readline.c | 33 | diff --git a/tests/qemu-iotests/071 b/tests/qemu-iotests/071 |
34 | index XXXXXXX..XXXXXXX 100755 | ||
35 | --- a/tests/qemu-iotests/071 | ||
36 | +++ b/tests/qemu-iotests/071 | ||
37 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
38 | |||
39 | _supported_fmt qcow2 | ||
40 | _supported_proto file | ||
41 | +_require_drivers blkdebug blkverify | ||
42 | |||
43 | do_run_qemu() | ||
44 | { | ||
45 | diff --git a/tests/qemu-iotests/081 b/tests/qemu-iotests/081 | ||
46 | index XXXXXXX..XXXXXXX 100755 | ||
47 | --- a/tests/qemu-iotests/081 | ||
48 | +++ b/tests/qemu-iotests/081 | ||
49 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
50 | _supported_fmt raw | ||
51 | _supported_proto file | ||
52 | _supported_os Linux | ||
53 | +_require_drivers quorum | ||
54 | |||
55 | do_run_qemu() | ||
56 | { | ||
57 | @@ -XXX,XX +XXX,XX @@ run_qemu() | ||
58 | | _filter_qemu_io | _filter_generated_node_ids | ||
59 | } | ||
60 | |||
61 | -test_quorum=$($QEMU_IMG --help|grep quorum) | ||
62 | -[ "$test_quorum" = "" ] && _supported_fmt quorum | ||
63 | - | ||
64 | quorum="driver=raw,file.driver=quorum,file.vote-threshold=2" | ||
65 | quorum="$quorum,file.children.0.file.filename=$TEST_DIR/1.raw" | ||
66 | quorum="$quorum,file.children.1.file.filename=$TEST_DIR/2.raw" | ||
67 | diff --git a/tests/qemu-iotests/099 b/tests/qemu-iotests/099 | ||
68 | index XXXXXXX..XXXXXXX 100755 | ||
69 | --- a/tests/qemu-iotests/099 | ||
70 | +++ b/tests/qemu-iotests/099 | ||
71 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
72 | _supported_fmt qcow qcow2 qed vdi vhdx vmdk vpc | ||
73 | _supported_proto file | ||
74 | _supported_os Linux | ||
75 | +_require_drivers blkdebug blkverify | ||
76 | _unsupported_imgopts "subformat=monolithicFlat" "subformat=twoGbMaxExtentFlat" \ | ||
77 | "subformat=twoGbMaxExtentSparse" | ||
78 | |||
79 | diff --git a/tests/qemu-iotests/120 b/tests/qemu-iotests/120 | ||
80 | index XXXXXXX..XXXXXXX 100755 | ||
81 | --- a/tests/qemu-iotests/120 | ||
82 | +++ b/tests/qemu-iotests/120 | ||
83 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
84 | _supported_fmt generic | ||
85 | _supported_proto file | ||
86 | _unsupported_fmt luks | ||
87 | +_require_drivers raw | ||
88 | |||
89 | _make_test_img 64M | ||
90 | |||
91 | diff --git a/tests/qemu-iotests/162 b/tests/qemu-iotests/162 | ||
92 | index XXXXXXX..XXXXXXX 100755 | ||
93 | --- a/tests/qemu-iotests/162 | ||
94 | +++ b/tests/qemu-iotests/162 | ||
95 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
96 | . ./common.filter | ||
97 | |||
98 | _supported_fmt generic | ||
99 | - | ||
100 | -test_ssh=$($QEMU_IMG --help | grep '^Supported formats:.* ssh\( \|$\)') | ||
101 | -[ "$test_ssh" = "" ] && _notrun "ssh support required" | ||
102 | +_require_drivers ssh | ||
103 | |||
104 | echo | ||
105 | echo '=== NBD ===' | ||
106 | diff --git a/tests/qemu-iotests/184 b/tests/qemu-iotests/184 | ||
107 | index XXXXXXX..XXXXXXX 100755 | ||
108 | --- a/tests/qemu-iotests/184 | ||
109 | +++ b/tests/qemu-iotests/184 | ||
110 | @@ -XXX,XX +XXX,XX @@ trap "exit \$status" 0 1 2 3 15 | ||
111 | . ./common.filter | ||
112 | |||
113 | _supported_os Linux | ||
114 | +_require_drivers throttle | ||
115 | |||
116 | do_run_qemu() | ||
117 | { | ||
118 | diff --git a/tests/qemu-iotests/186 b/tests/qemu-iotests/186 | ||
119 | index XXXXXXX..XXXXXXX 100755 | ||
120 | --- a/tests/qemu-iotests/186 | ||
121 | +++ b/tests/qemu-iotests/186 | ||
122 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | ||
123 | |||
124 | _supported_fmt qcow2 | ||
125 | _supported_proto file | ||
126 | +_require_drivers null-co | ||
127 | |||
128 | if [ "$QEMU_DEFAULT_MACHINE" != "pc" ]; then | ||
129 | _notrun "Requires a PC machine" | ||
130 | diff --git a/tests/qemu-iotests/common.rc b/tests/qemu-iotests/common.rc | ||
16 | index XXXXXXX..XXXXXXX 100644 | 131 | index XXXXXXX..XXXXXXX 100644 |
17 | --- a/util/readline.c | 132 | --- a/tests/qemu-iotests/common.rc |
18 | +++ b/util/readline.c | 133 | +++ b/tests/qemu-iotests/common.rc |
19 | @@ -XXX,XX +XXX,XX @@ static void readline_up_char(ReadLineState *rs) | 134 | @@ -XXX,XX +XXX,XX @@ _require_command() |
20 | int idx; | 135 | [ -x "$c" ] || _notrun "$1 utility required, skipped this test" |
21 | |||
22 | if (rs->hist_entry == 0) | ||
23 | - return; | ||
24 | + return; | ||
25 | if (rs->hist_entry == -1) { | ||
26 | - /* Find latest entry */ | ||
27 | - for (idx = 0; idx < READLINE_MAX_CMDS; idx++) { | ||
28 | - if (rs->history[idx] == NULL) | ||
29 | - break; | ||
30 | - } | ||
31 | - rs->hist_entry = idx; | ||
32 | + /* Find latest entry */ | ||
33 | + for (idx = 0; idx < READLINE_MAX_CMDS; idx++) { | ||
34 | + if (rs->history[idx] == NULL) | ||
35 | + break; | ||
36 | + } | ||
37 | + rs->hist_entry = idx; | ||
38 | } | ||
39 | rs->hist_entry--; | ||
40 | if (rs->hist_entry >= 0) { | ||
41 | - pstrcpy(rs->cmd_buf, sizeof(rs->cmd_buf), | ||
42 | + pstrcpy(rs->cmd_buf, sizeof(rs->cmd_buf), | ||
43 | rs->history[rs->hist_entry]); | ||
44 | - rs->cmd_buf_index = rs->cmd_buf_size = strlen(rs->cmd_buf); | ||
45 | + rs->cmd_buf_index = rs->cmd_buf_size = strlen(rs->cmd_buf); | ||
46 | } | ||
47 | } | 136 | } |
48 | 137 | ||
49 | @@ -XXX,XX +XXX,XX @@ static void readline_down_char(ReadLineState *rs) | 138 | +# Check that a set of drivers has been whitelisted in the QEMU binary |
50 | return; | 139 | +# |
51 | if (rs->hist_entry < READLINE_MAX_CMDS - 1 && | 140 | +_require_drivers() |
52 | rs->history[++rs->hist_entry] != NULL) { | 141 | +{ |
53 | - pstrcpy(rs->cmd_buf, sizeof(rs->cmd_buf), | 142 | + available=$($QEMU -drive format=help | \ |
54 | + pstrcpy(rs->cmd_buf, sizeof(rs->cmd_buf), | 143 | + sed -e '/Supported formats:/!d' -e 's/Supported formats://') |
55 | rs->history[rs->hist_entry]); | 144 | + for driver |
56 | } else { | 145 | + do |
57 | rs->cmd_buf[0] = 0; | 146 | + if ! echo "$available" | grep -q " $driver\( \|$\)"; then |
58 | - rs->hist_entry = -1; | 147 | + _notrun "$driver not available" |
59 | + rs->hist_entry = -1; | 148 | + fi |
60 | } | 149 | + done |
61 | rs->cmd_buf_index = rs->cmd_buf_size = strlen(rs->cmd_buf); | 150 | +} |
62 | } | 151 | + |
63 | @@ -XXX,XX +XXX,XX @@ static void readline_hist_add(ReadLineState *rs, const char *cmdline) | 152 | # make sure this script returns success |
64 | int idx; | 153 | true |
65 | |||
66 | if (cmdline[0] == '\0') | ||
67 | - return; | ||
68 | + return; | ||
69 | new_entry = NULL; | ||
70 | if (rs->hist_entry != -1) { | ||
71 | - /* We were editing an existing history entry: replace it */ | ||
72 | - hist_entry = rs->history[rs->hist_entry]; | ||
73 | - idx = rs->hist_entry; | ||
74 | - if (strcmp(hist_entry, cmdline) == 0) { | ||
75 | - goto same_entry; | ||
76 | - } | ||
77 | + /* We were editing an existing history entry: replace it */ | ||
78 | + hist_entry = rs->history[rs->hist_entry]; | ||
79 | + idx = rs->hist_entry; | ||
80 | + if (strcmp(hist_entry, cmdline) == 0) { | ||
81 | + goto same_entry; | ||
82 | + } | ||
83 | } | ||
84 | /* Search cmdline in history buffers */ | ||
85 | for (idx = 0; idx < READLINE_MAX_CMDS; idx++) { | ||
86 | - hist_entry = rs->history[idx]; | ||
87 | - if (hist_entry == NULL) | ||
88 | - break; | ||
89 | - if (strcmp(hist_entry, cmdline) == 0) { | ||
90 | - same_entry: | ||
91 | - new_entry = hist_entry; | ||
92 | - /* Put this entry at the end of history */ | ||
93 | - memmove(&rs->history[idx], &rs->history[idx + 1], | ||
94 | - (READLINE_MAX_CMDS - (idx + 1)) * sizeof(char *)); | ||
95 | - rs->history[READLINE_MAX_CMDS - 1] = NULL; | ||
96 | - for (; idx < READLINE_MAX_CMDS; idx++) { | ||
97 | - if (rs->history[idx] == NULL) | ||
98 | - break; | ||
99 | - } | ||
100 | - break; | ||
101 | - } | ||
102 | + hist_entry = rs->history[idx]; | ||
103 | + if (hist_entry == NULL) | ||
104 | + break; | ||
105 | + if (strcmp(hist_entry, cmdline) == 0) { | ||
106 | + same_entry: | ||
107 | + new_entry = hist_entry; | ||
108 | + /* Put this entry at the end of history */ | ||
109 | + memmove(&rs->history[idx], &rs->history[idx + 1], | ||
110 | + (READLINE_MAX_CMDS - (idx + 1)) * sizeof(char *)); | ||
111 | + rs->history[READLINE_MAX_CMDS - 1] = NULL; | ||
112 | + for (; idx < READLINE_MAX_CMDS; idx++) { | ||
113 | + if (rs->history[idx] == NULL) | ||
114 | + break; | ||
115 | + } | ||
116 | + break; | ||
117 | + } | ||
118 | } | ||
119 | if (idx == READLINE_MAX_CMDS) { | ||
120 | - /* Need to get one free slot */ | ||
121 | + /* Need to get one free slot */ | ||
122 | g_free(rs->history[0]); | ||
123 | - memmove(rs->history, &rs->history[1], | ||
124 | - (READLINE_MAX_CMDS - 1) * sizeof(char *)); | ||
125 | - rs->history[READLINE_MAX_CMDS - 1] = NULL; | ||
126 | - idx = READLINE_MAX_CMDS - 1; | ||
127 | + memmove(rs->history, &rs->history[1], | ||
128 | + (READLINE_MAX_CMDS - 1) * sizeof(char *)); | ||
129 | + rs->history[READLINE_MAX_CMDS - 1] = NULL; | ||
130 | + idx = READLINE_MAX_CMDS - 1; | ||
131 | } | ||
132 | if (new_entry == NULL) | ||
133 | new_entry = g_strdup(cmdline); | ||
134 | @@ -XXX,XX +XXX,XX @@ void readline_handle_byte(ReadLineState *rs, int ch) | ||
135 | case 8: | ||
136 | readline_backspace(rs); | ||
137 | break; | ||
138 | - case 155: | ||
139 | + case 155: | ||
140 | rs->esc_state = IS_CSI; | ||
141 | - break; | ||
142 | + break; | ||
143 | default: | ||
144 | if (ch >= 32) { | ||
145 | readline_insert_char(rs, ch); | ||
146 | @@ -XXX,XX +XXX,XX @@ void readline_handle_byte(ReadLineState *rs, int ch) | ||
147 | break; | ||
148 | case IS_CSI: | ||
149 | switch (ch) { | ||
150 | - case 'A': | ||
151 | - case 'F': | ||
152 | - readline_up_char(rs); | ||
153 | - break; | ||
154 | - case 'B': | ||
155 | - case 'E': | ||
156 | - readline_down_char(rs); | ||
157 | - break; | ||
158 | + case 'A': | ||
159 | + case 'F': | ||
160 | + readline_up_char(rs); | ||
161 | + break; | ||
162 | + case 'B': | ||
163 | + case 'E': | ||
164 | + readline_down_char(rs); | ||
165 | + break; | ||
166 | case 'D': | ||
167 | readline_backward_char(rs); | ||
168 | break; | ||
169 | -- | 154 | -- |
170 | 2.21.0 | 155 | 2.21.0 |
171 | 156 | ||
172 | 157 | diff view generated by jsdifflib |
1 | From: Jules Irenge <jbi.octave@gmail.com> | 1 | From: Thomas Huth <thuth@redhat.com> |
---|---|---|---|
2 | 2 | ||
3 | util/readline: add a space to fix errors reported by checkpatch.pl tool | 3 | The sanitizers (especially the address sanitizer from Clang) are |
4 | "ERROR: space required before the open parenthesis" | 4 | sometimes printing out warnings or false positives - this spoils |
5 | "ERROR: space required after that ..." | 5 | the output of the iotests, causing some of the tests to fail. |
6 | within "util/redline.c" file | 6 | Thus let's skip the automatic iotests during "make check" when the |
7 | user configured QEMU with --enable-sanitizers. | ||
7 | 8 | ||
8 | Signed-off-by: Jules Irenge <jbi.octave@gmail.com> | 9 | Signed-off-by: Thomas Huth <thuth@redhat.com> |
9 | Reviewed-by: Thomas Huth <thuth@redhat.com> | 10 | Message-id: 20190823084203.29734-1-thuth@redhat.com |
10 | Message-id: 20190401024406.10819-2-jbi.octave@gmail.com | 11 | Signed-off-by: Max Reitz <mreitz@redhat.com> |
11 | Message-Id: <20190401024406.10819-2-jbi.octave@gmail.com> | ||
12 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | ||
13 | --- | 12 | --- |
14 | util/readline.c | 34 +++++++++++++++++----------------- | 13 | tests/check-block.sh | 5 +++++ |
15 | 1 file changed, 17 insertions(+), 17 deletions(-) | 14 | 1 file changed, 5 insertions(+) |
16 | 15 | ||
17 | diff --git a/util/readline.c b/util/readline.c | 16 | diff --git a/tests/check-block.sh b/tests/check-block.sh |
18 | index XXXXXXX..XXXXXXX 100644 | 17 | index XXXXXXX..XXXXXXX 100755 |
19 | --- a/util/readline.c | 18 | --- a/tests/check-block.sh |
20 | +++ b/util/readline.c | 19 | +++ b/tests/check-block.sh |
21 | @@ -XXX,XX +XXX,XX @@ static void readline_update(ReadLineState *rs) | 20 | @@ -XXX,XX +XXX,XX @@ if grep -q "TARGET_GPROF=y" *-softmmu/config-target.mak 2>/dev/null ; then |
22 | 21 | exit 0 | |
23 | if (rs->cmd_buf_size != rs->last_cmd_buf_size || | 22 | fi |
24 | memcmp(rs->cmd_buf, rs->last_cmd_buf, rs->cmd_buf_size) != 0) { | 23 | |
25 | - for(i = 0; i < rs->last_cmd_buf_index; i++) { | 24 | +if grep -q "CFLAGS.*-fsanitize" config-host.mak 2>/dev/null ; then |
26 | + for (i = 0; i < rs->last_cmd_buf_index; i++) { | 25 | + echo "Sanitizers are enabled ==> Not running the qemu-iotests." |
27 | rs->printf_func(rs->opaque, "\033[D"); | 26 | + exit 0 |
28 | } | 27 | +fi |
29 | rs->cmd_buf[rs->cmd_buf_size] = '\0'; | 28 | + |
30 | if (rs->read_password) { | 29 | if [ -z "$(find . -name 'qemu-system-*' -print)" ]; then |
31 | len = strlen(rs->cmd_buf); | 30 | echo "No qemu-system binary available ==> Not running the qemu-iotests." |
32 | - for(i = 0; i < len; i++) | 31 | exit 0 |
33 | + for (i = 0; i < len; i++) | ||
34 | rs->printf_func(rs->opaque, "*"); | ||
35 | } else { | ||
36 | rs->printf_func(rs->opaque, "%s", rs->cmd_buf); | ||
37 | @@ -XXX,XX +XXX,XX @@ static void readline_update(ReadLineState *rs) | ||
38 | if (rs->cmd_buf_index != rs->last_cmd_buf_index) { | ||
39 | delta = rs->cmd_buf_index - rs->last_cmd_buf_index; | ||
40 | if (delta > 0) { | ||
41 | - for(i = 0;i < delta; i++) { | ||
42 | + for (i = 0; i < delta; i++) { | ||
43 | rs->printf_func(rs->opaque, "\033[C"); | ||
44 | } | ||
45 | } else { | ||
46 | delta = -delta; | ||
47 | - for(i = 0;i < delta; i++) { | ||
48 | + for (i = 0; i < delta; i++) { | ||
49 | rs->printf_func(rs->opaque, "\033[D"); | ||
50 | } | ||
51 | } | ||
52 | @@ -XXX,XX +XXX,XX @@ static void readline_completion(ReadLineState *rs) | ||
53 | return; | ||
54 | if (rs->nb_completions == 1) { | ||
55 | len = strlen(rs->completions[0]); | ||
56 | - for(i = rs->completion_index; i < len; i++) { | ||
57 | + for (i = rs->completion_index; i < len; i++) { | ||
58 | readline_insert_char(rs, rs->completions[0][i]); | ||
59 | } | ||
60 | /* extra space for next argument. XXX: make it more generic */ | ||
61 | @@ -XXX,XX +XXX,XX @@ static void readline_completion(ReadLineState *rs) | ||
62 | completion_comp); | ||
63 | rs->printf_func(rs->opaque, "\n"); | ||
64 | max_width = 0; | ||
65 | - max_prefix = 0; | ||
66 | - for(i = 0; i < rs->nb_completions; i++) { | ||
67 | + max_prefix = 0; | ||
68 | + for (i = 0; i < rs->nb_completions; i++) { | ||
69 | len = strlen(rs->completions[i]); | ||
70 | - if (i==0) { | ||
71 | + if (i == 0) { | ||
72 | max_prefix = len; | ||
73 | } else { | ||
74 | if (len < max_prefix) | ||
75 | max_prefix = len; | ||
76 | - for(j=0; j<max_prefix; j++) { | ||
77 | + for (j = 0; j < max_prefix; j++) { | ||
78 | if (rs->completions[i][j] != rs->completions[0][j]) | ||
79 | max_prefix = j; | ||
80 | } | ||
81 | @@ -XXX,XX +XXX,XX @@ static void readline_completion(ReadLineState *rs) | ||
82 | if (len > max_width) | ||
83 | max_width = len; | ||
84 | } | ||
85 | - if (max_prefix > 0) | ||
86 | - for(i = rs->completion_index; i < max_prefix; i++) { | ||
87 | + if (max_prefix > 0) | ||
88 | + for (i = rs->completion_index; i < max_prefix; i++) { | ||
89 | readline_insert_char(rs, rs->completions[0][i]); | ||
90 | } | ||
91 | max_width += 2; | ||
92 | @@ -XXX,XX +XXX,XX @@ static void readline_completion(ReadLineState *rs) | ||
93 | max_width = 80; | ||
94 | nb_cols = 80 / max_width; | ||
95 | j = 0; | ||
96 | - for(i = 0; i < rs->nb_completions; i++) { | ||
97 | + for (i = 0; i < rs->nb_completions; i++) { | ||
98 | rs->printf_func(rs->opaque, "%-*s", max_width, rs->completions[i]); | ||
99 | if (++j == nb_cols || i == (rs->nb_completions - 1)) { | ||
100 | rs->printf_func(rs->opaque, "\n"); | ||
101 | @@ -XXX,XX +XXX,XX @@ static void readline_clear_screen(ReadLineState *rs) | ||
102 | /* return true if command handled */ | ||
103 | void readline_handle_byte(ReadLineState *rs, int ch) | ||
104 | { | ||
105 | - switch(rs->esc_state) { | ||
106 | + switch (rs->esc_state) { | ||
107 | case IS_NORM: | ||
108 | - switch(ch) { | ||
109 | + switch (ch) { | ||
110 | case 1: | ||
111 | readline_bol(rs); | ||
112 | break; | ||
113 | @@ -XXX,XX +XXX,XX @@ void readline_handle_byte(ReadLineState *rs, int ch) | ||
114 | } | ||
115 | break; | ||
116 | case IS_CSI: | ||
117 | - switch(ch) { | ||
118 | + switch (ch) { | ||
119 | case 'A': | ||
120 | case 'F': | ||
121 | readline_up_char(rs); | ||
122 | @@ -XXX,XX +XXX,XX @@ void readline_handle_byte(ReadLineState *rs, int ch) | ||
123 | rs->esc_param = rs->esc_param * 10 + (ch - '0'); | ||
124 | goto the_end; | ||
125 | case '~': | ||
126 | - switch(rs->esc_param) { | ||
127 | + switch (rs->esc_param) { | ||
128 | case 1: | ||
129 | readline_bol(rs); | ||
130 | break; | ||
131 | @@ -XXX,XX +XXX,XX @@ void readline_handle_byte(ReadLineState *rs, int ch) | ||
132 | the_end: | ||
133 | break; | ||
134 | case IS_SS3: | ||
135 | - switch(ch) { | ||
136 | + switch (ch) { | ||
137 | case 'F': | ||
138 | readline_eol(rs); | ||
139 | break; | ||
140 | -- | 32 | -- |
141 | 2.21.0 | 33 | 2.21.0 |
142 | 34 | ||
143 | 35 | diff view generated by jsdifflib |
1 | From: Jules Irenge <jbi.octave@gmail.com> | 1 | From: Nir Soffer <nirsof@gmail.com> |
---|---|---|---|
2 | 2 | ||
3 | Add braces to fix errors issued by checkpatch.pl tool | 3 | Quoting cache mode is not needed, and most tests use unquoted values. |
4 | "ERROR: braces {} are necessary for all arms of this statement" | 4 | Unify all test to use the same style. |
5 | Within "util/readline.c" file | ||
6 | Message-Id: <20190330112142.14082-1-jbi.octave@gmail.com> | ||
7 | 5 | ||
8 | Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> | 6 | Message-id: 20190827173432.7656-1-nsoffer@redhat.com |
7 | Signed-off-by: Nir Soffer <nsoffer@redhat.com> | ||
8 | Signed-off-by: Max Reitz <mreitz@redhat.com> | ||
9 | --- | 9 | --- |
10 | util/readline.c | 50 ++++++++++++++++++++++++++++++++----------------- | 10 | tests/qemu-iotests/026 | 4 ++-- |
11 | 1 file changed, 33 insertions(+), 17 deletions(-) | 11 | tests/qemu-iotests/039 | 4 ++-- |
12 | tests/qemu-iotests/052 | 2 +- | ||
13 | tests/qemu-iotests/091 | 4 ++-- | ||
14 | 4 files changed, 7 insertions(+), 7 deletions(-) | ||
12 | 15 | ||
13 | diff --git a/util/readline.c b/util/readline.c | 16 | diff --git a/tests/qemu-iotests/026 b/tests/qemu-iotests/026 |
14 | index XXXXXXX..XXXXXXX 100644 | 17 | index XXXXXXX..XXXXXXX 100755 |
15 | --- a/util/readline.c | 18 | --- a/tests/qemu-iotests/026 |
16 | +++ b/util/readline.c | 19 | +++ b/tests/qemu-iotests/026 |
17 | @@ -XXX,XX +XXX,XX @@ static void readline_update(ReadLineState *rs) | 20 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 |
18 | rs->cmd_buf[rs->cmd_buf_size] = '\0'; | 21 | # Currently only qcow2 supports rebasing |
19 | if (rs->read_password) { | 22 | _supported_fmt qcow2 |
20 | len = strlen(rs->cmd_buf); | 23 | _supported_proto file |
21 | - for (i = 0; i < len; i++) | 24 | -_default_cache_mode "writethrough" |
22 | + for (i = 0; i < len; i++) { | 25 | -_supported_cache_modes "writethrough" "none" |
23 | rs->printf_func(rs->opaque, "*"); | 26 | +_default_cache_mode writethrough |
24 | + } | 27 | +_supported_cache_modes writethrough none |
25 | } else { | 28 | # The refcount table tests expect a certain minimum width for refcount entries |
26 | rs->printf_func(rs->opaque, "%s", rs->cmd_buf); | 29 | # (so that the refcount table actually needs to grow); that minimum is 16 bits, |
27 | } | 30 | # being the default refcount entry width. |
28 | @@ -XXX,XX +XXX,XX @@ static void readline_up_char(ReadLineState *rs) | 31 | diff --git a/tests/qemu-iotests/039 b/tests/qemu-iotests/039 |
29 | { | 32 | index XXXXXXX..XXXXXXX 100755 |
30 | int idx; | 33 | --- a/tests/qemu-iotests/039 |
31 | 34 | +++ b/tests/qemu-iotests/039 | |
32 | - if (rs->hist_entry == 0) | 35 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 |
33 | + if (rs->hist_entry == 0) { | 36 | _supported_fmt qcow2 |
34 | return; | 37 | _supported_proto file |
35 | + } | 38 | _supported_os Linux |
36 | if (rs->hist_entry == -1) { | 39 | -_default_cache_mode "writethrough" |
37 | /* Find latest entry */ | 40 | -_supported_cache_modes "writethrough" |
38 | for (idx = 0; idx < READLINE_MAX_CMDS; idx++) { | 41 | +_default_cache_mode writethrough |
39 | - if (rs->history[idx] == NULL) | 42 | +_supported_cache_modes writethrough |
40 | + if (rs->history[idx] == NULL) { | 43 | |
41 | break; | 44 | size=128M |
42 | + } | 45 | |
43 | } | 46 | diff --git a/tests/qemu-iotests/052 b/tests/qemu-iotests/052 |
44 | rs->hist_entry = idx; | 47 | index XXXXXXX..XXXXXXX 100755 |
45 | } | 48 | --- a/tests/qemu-iotests/052 |
46 | @@ -XXX,XX +XXX,XX @@ static void readline_up_char(ReadLineState *rs) | 49 | +++ b/tests/qemu-iotests/052 |
47 | 50 | @@ -XXX,XX +XXX,XX @@ _supported_fmt generic | |
48 | static void readline_down_char(ReadLineState *rs) | 51 | _supported_proto file |
49 | { | 52 | |
50 | - if (rs->hist_entry == -1) | 53 | # Don't do O_DIRECT on tmpfs |
51 | + if (rs->hist_entry == -1) { | 54 | -_supported_cache_modes "writeback" "writethrough" "unsafe" |
52 | return; | 55 | +_supported_cache_modes writeback writethrough unsafe |
53 | + } | 56 | |
54 | if (rs->hist_entry < READLINE_MAX_CMDS - 1 && | 57 | size=128M |
55 | rs->history[++rs->hist_entry] != NULL) { | 58 | _make_test_img $size |
56 | pstrcpy(rs->cmd_buf, sizeof(rs->cmd_buf), | 59 | diff --git a/tests/qemu-iotests/091 b/tests/qemu-iotests/091 |
57 | @@ -XXX,XX +XXX,XX @@ static void readline_hist_add(ReadLineState *rs, const char *cmdline) | 60 | index XXXXXXX..XXXXXXX 100755 |
58 | char *hist_entry, *new_entry; | 61 | --- a/tests/qemu-iotests/091 |
59 | int idx; | 62 | +++ b/tests/qemu-iotests/091 |
60 | 63 | @@ -XXX,XX +XXX,XX @@ trap "_cleanup; exit \$status" 0 1 2 3 15 | |
61 | - if (cmdline[0] == '\0') | 64 | _supported_fmt qcow2 |
62 | + if (cmdline[0] == '\0') { | 65 | _supported_proto file |
63 | return; | 66 | _supported_os Linux |
64 | + } | 67 | -_default_cache_mode "none" |
65 | new_entry = NULL; | 68 | -_supported_cache_modes "writethrough" "none" "writeback" |
66 | if (rs->hist_entry != -1) { | 69 | +_default_cache_mode none |
67 | /* We were editing an existing history entry: replace it */ | 70 | +_supported_cache_modes writethrough none writeback |
68 | @@ -XXX,XX +XXX,XX @@ static void readline_hist_add(ReadLineState *rs, const char *cmdline) | 71 | |
69 | /* Search cmdline in history buffers */ | 72 | size=1G |
70 | for (idx = 0; idx < READLINE_MAX_CMDS; idx++) { | ||
71 | hist_entry = rs->history[idx]; | ||
72 | - if (hist_entry == NULL) | ||
73 | + if (hist_entry == NULL) { | ||
74 | break; | ||
75 | + } | ||
76 | if (strcmp(hist_entry, cmdline) == 0) { | ||
77 | same_entry: | ||
78 | new_entry = hist_entry; | ||
79 | @@ -XXX,XX +XXX,XX @@ static void readline_hist_add(ReadLineState *rs, const char *cmdline) | ||
80 | (READLINE_MAX_CMDS - (idx + 1)) * sizeof(char *)); | ||
81 | rs->history[READLINE_MAX_CMDS - 1] = NULL; | ||
82 | for (; idx < READLINE_MAX_CMDS; idx++) { | ||
83 | - if (rs->history[idx] == NULL) | ||
84 | + if (rs->history[idx] == NULL) { | ||
85 | break; | ||
86 | + } | ||
87 | } | ||
88 | break; | ||
89 | } | ||
90 | @@ -XXX,XX +XXX,XX @@ static void readline_hist_add(ReadLineState *rs, const char *cmdline) | ||
91 | rs->history[READLINE_MAX_CMDS - 1] = NULL; | ||
92 | idx = READLINE_MAX_CMDS - 1; | ||
93 | } | ||
94 | - if (new_entry == NULL) | ||
95 | + if (new_entry == NULL) { | ||
96 | new_entry = g_strdup(cmdline); | ||
97 | + } | ||
98 | rs->history[idx] = new_entry; | ||
99 | rs->hist_entry = -1; | ||
100 | } | ||
101 | @@ -XXX,XX +XXX,XX @@ static void readline_completion(ReadLineState *rs) | ||
102 | g_free(cmdline); | ||
103 | |||
104 | /* no completion found */ | ||
105 | - if (rs->nb_completions <= 0) | ||
106 | + if (rs->nb_completions <= 0) { | ||
107 | return; | ||
108 | + } | ||
109 | if (rs->nb_completions == 1) { | ||
110 | len = strlen(rs->completions[0]); | ||
111 | for (i = rs->completion_index; i < len; i++) { | ||
112 | readline_insert_char(rs, rs->completions[0][i]); | ||
113 | } | ||
114 | /* extra space for next argument. XXX: make it more generic */ | ||
115 | - if (len > 0 && rs->completions[0][len - 1] != '/') | ||
116 | + if (len > 0 && rs->completions[0][len - 1] != '/') { | ||
117 | readline_insert_char(rs, ' '); | ||
118 | + } | ||
119 | } else { | ||
120 | qsort(rs->completions, rs->nb_completions, sizeof(char *), | ||
121 | completion_comp); | ||
122 | @@ -XXX,XX +XXX,XX @@ static void readline_completion(ReadLineState *rs) | ||
123 | if (i == 0) { | ||
124 | max_prefix = len; | ||
125 | } else { | ||
126 | - if (len < max_prefix) | ||
127 | + if (len < max_prefix) { | ||
128 | max_prefix = len; | ||
129 | + } | ||
130 | for (j = 0; j < max_prefix; j++) { | ||
131 | - if (rs->completions[i][j] != rs->completions[0][j]) | ||
132 | + if (rs->completions[i][j] != rs->completions[0][j]) { | ||
133 | max_prefix = j; | ||
134 | + } | ||
135 | } | ||
136 | } | ||
137 | - if (len > max_width) | ||
138 | + if (len > max_width) { | ||
139 | max_width = len; | ||
140 | + } | ||
141 | } | ||
142 | if (max_prefix > 0) | ||
143 | for (i = rs->completion_index; i < max_prefix; i++) { | ||
144 | readline_insert_char(rs, rs->completions[0][i]); | ||
145 | } | ||
146 | max_width += 2; | ||
147 | - if (max_width < 10) | ||
148 | + if (max_width < 10) { | ||
149 | max_width = 10; | ||
150 | - else if (max_width > 80) | ||
151 | + } else if (max_width > 80) { | ||
152 | max_width = 80; | ||
153 | + } | ||
154 | nb_cols = 80 / max_width; | ||
155 | j = 0; | ||
156 | for (i = 0; i < rs->nb_completions; i++) { | ||
157 | @@ -XXX,XX +XXX,XX @@ void readline_handle_byte(ReadLineState *rs, int ch) | ||
158 | case 10: | ||
159 | case 13: | ||
160 | rs->cmd_buf[rs->cmd_buf_size] = '\0'; | ||
161 | - if (!rs->read_password) | ||
162 | + if (!rs->read_password) { | ||
163 | readline_hist_add(rs, rs->cmd_buf); | ||
164 | + } | ||
165 | rs->printf_func(rs->opaque, "\n"); | ||
166 | rs->cmd_buf_index = 0; | ||
167 | rs->cmd_buf_size = 0; | ||
168 | @@ -XXX,XX +XXX,XX @@ void readline_restart(ReadLineState *rs) | ||
169 | |||
170 | const char *readline_get_history(ReadLineState *rs, unsigned int index) | ||
171 | { | ||
172 | - if (index >= READLINE_MAX_CMDS) | ||
173 | + if (index >= READLINE_MAX_CMDS) { | ||
174 | return NULL; | ||
175 | + } | ||
176 | return rs->history[index]; | ||
177 | } | ||
178 | 73 | ||
179 | -- | 74 | -- |
180 | 2.21.0 | 75 | 2.21.0 |
181 | 76 | ||
182 | 77 | diff view generated by jsdifflib |