summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2024-01-09block-backend: align max_transfer to request alignmentLin Ma1-3/+3
2024-01-09osdep: provide ROUND_DOWN macroLin Ma1-6/+22
2024-01-09scsi-generic: pass max_segments via max_iov field in BlockLimitsLin Ma2-4/+5
2024-01-09file-posix: fix max_iov for /dev/sg devicesLin Ma1-0/+11
2024-01-09xen: remove BlockBackend object reference in xen_block_unrealizeLin Ma1-0/+3
2024-01-09usbredir: fix free callGerd Hoffmann1-1/+1
2024-01-09usb: limit combined packets to 1 MiB (CVE-2021-3527)Gerd Hoffmann1-1/+3
2024-01-09usb/mtp: avoid dynamic stack allocationGerd Hoffmann1-1/+2
2024-01-09usb/redir: avoid dynamic stack allocation (CVE-2021-3527)Gerd Hoffmann1-3/+3
2024-01-09usb/hid: avoid dynamic stack allocationGerd Hoffmann2-2/+2
2024-01-09hw/usb/host-stub: Remove unused headerPhilippe Mathieu-Daudé1-1/+0
2024-01-09net: eepro100: validate various address valuesJose R Ziviani1-0/+11
2024-01-09hw/scsi/megasas: check for NULL frame in megasas_command_cancelled()Mauro Matteo Cascella1-1/+1
2024-01-09esp: ensure that do_cmd is set to zero before submitting an ESP select commandMark Cave-Ayland1-1/+4
2024-01-09esp: don't reset async_len directly in esp_select() if cancelling requestMark Cave-Ayland1-1/+1
2024-01-09esp: ensure cmdfifo is not empty and current_dev is non-NULLMark Cave-Ayland1-0/+5
2024-01-09esp: always check current_req is not NULL before use in DMA callbacksMark Cave-Ayland1-0/+8
2024-01-09pvrdma: Fix the ring init error flow (CVE-2021-3608)Marcel Apfelbaum1-1/+1
2024-01-09pvrdma: Ensure correct input on ring init (CVE-2021-3607)Marcel Apfelbaum1-0/+5
2024-01-09hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)Marcel Apfelbaum1-0/+7
2024-01-09qom: code hardening - have bound checking while looping with integer valueAni Sinha1-2/+3
2024-01-09qemu-iotests, qtest: rewrite test 067 as a qtestPaolo Bonzini6-596/+190
2024-01-09qtest: check that drives are really appearing and disappearingPaolo Bonzini1-1/+31
2024-01-09qtest: switch users back to qtest_qmp_receiveMaxim Levitsky5-22/+15
2024-01-09device-plug-test: use qtest_qmp to send the device_del commandPaolo Bonzini1-23/+9
2024-01-09qtest: remove qtest_qmp_receive_successMaxim Levitsky3-70/+25
2024-01-09qtest: Reintroduce qtest_qmp_receive with QMP event bufferingMaxim Levitsky2-1/+70
2024-01-09qtest: rename qtest_qmp_receive to qtest_qmp_receive_dictMaxim Levitsky7-24/+24
2024-01-09tests: add migration-helpers unitMarc-André Lureau4-166/+216
2024-01-09blockjob: Fix crash with IOthread when block commit after snapshotMichael Qiu1-2/+6
2024-01-09vhost-user-gpu: abstract vg_cleanup_mapping_iovLi Qiang3-9/+26
2024-01-09vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546)Li Qiang1-0/+4
2024-01-09vhost-user-gpu: fix leak in 'virgl_resource_attach_backing' (CVE-2021-3544)Li Qiang1-1/+4
2024-01-09vhost-user-gpu: fix leak in 'virgl_cmd_resource_unref' (CVE-2021-3544)Li Qiang1-0/+7
2024-01-09vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3...Li Qiang1-0/+1
2024-01-09vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)Li Qiang1-0/+5
2024-01-09vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)Li Qiang1-0/+1
2024-01-09vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-...Li Qiang1-0/+1
2024-01-09migration/migration.c: Fix hang in ram_save_host_pageLukas Straub1-0/+4
2024-01-09xen-block: Fix removal of backend instance via xenstoreAnthony PERARD1-0/+9
2024-01-09scsi/scsi_bus: fix races in REPORT LUNSMaxim Levitsky1-35/+33
2024-01-09virtio-scsi: use scsi_device_getMaxim Levitsky1-8/+13
2024-01-09scsi/scsi_bus: Add scsi_device_getMaxim Levitsky2-0/+12
2024-01-09scsi/scsi-bus: scsi_device_find: don't return unrealized devicesPaolo Bonzini1-30/+53
2024-01-09device-core: use atomic_set on .realized propertyMaxim Levitsky2-1/+20
2024-01-09scsi: switch to bus->check_addressPaolo Bonzini1-47/+75
2024-01-09device-core: use RCU for list of children of a busMaxim Levitsky5-30/+62
2024-01-09device_core: use drain_call_rcu in in qmp_device_addMaxim Levitsky1-0/+12
2024-01-09scsi/scsi_bus: switch search direction in scsi_device_findMaxim Levitsky1-2/+10
2024-01-09qdev: add "check if address free" callback for busesPaolo Bonzini48-54/+86