3.0.1

1. a4a5021 vhost-user: Fix userfaultfd leak by Ilya Maximets · 7 years ago
2. a0380bd vhost-user: Don't ask for reply on postcopy mem table set by Ilya Maximets · 7 years ago
3. 8d25276 ppc/pnv: check size before data buffer access by Prasad J Pandit · 7 years ago
4. bd6dd4e lsi53c895a: check message length value is valid by Prasad J Pandit · 7 years ago
5. 7347a04 usb-mtp: use O_NOFOLLOW and O_CLOEXEC. by Gerd Hoffmann · 7 years ago
6. 61f8738 usb-mtp: outlaw slashes in filenames by Gerd Hoffmann · 7 years ago
7. d086829 9p: fix QEMU crash when renaming files by Greg Kurz · 7 years ago
8. e49f868 nvme: fix out-of-bounds access to the CMB by Paolo Bonzini · 7 years ago
9. 7b8e8ff tpm_tis: fix loop that cancels any seizure by a lower locality by Liam Merwick · 7 years ago
10. f3200c4 hw/rdma: another clang compilation fix by Marcel Apfelbaum · 7 years ago
11. 2251d74 acpi: Make TPM 2.0 with TIS available as MSFT0101 by Stefan Berger · 7 years ago
12. 4afb037 tpm: Make sure the locality received from backend is valid by Stefan Berger · 7 years ago
13. 66160b7 tpm: Make sure new locality passed to tpm_tis_prep_abort() is valid by Stefan Berger · 7 years ago
14. 3fd9215 tpm: use loop iterator to set sts data field by Prasad J Pandit · 7 years ago
15. 69ec5ee tpm: Zero-init structure to avoid uninitialized variables in valgrind log by Stefan Berger · 7 years ago
16. 02db603 pc:piix4: Update smbus I/O space after a migration by Corey Minyard · 7 years ago
17. 9d61bea pcie: set link state inactive/active after hot unplug/plug by Zheng Xiang · 7 years ago
18. a69e904 i2c: Add a length check to the SMBus write handling by Corey Minyard · 7 years ago
19. 22acdb9 i2c: Move typedef of bitbang_i2c_interface to i2c.h by BALATON Zoltan · 7 years ago
20. e31de8e fmops: fix off-by-one in AR_TABLE and DR_TABLE array size by Gerd Hoffmann · 7 years ago
21. 81e38ad fdc: fix segfault in fdctrl_stop_transfer() when DMA is disabled by Mark Cave-Ayland · 7 years ago
22. ca1b426 vhost-scsi: prevent using uninitialized vqs by yuchenlin · 7 years ago
23. b7fce72 intel_iommu: better handling of dmar state switch by Peter Xu · 7 years ago
24. 0a818f8 intel_iommu: introduce vtd_reset_caches() by Peter Xu · 7 years ago
25. ce2c15f virtio: do not take address of packed members by Paolo Bonzini · 7 years ago
26. 15f40e2 virt: Suppress external aborts on virt-2.10 and earlier by Peter Maydell · 7 years ago
27. 9d9430b pcnet: fix possible buffer overflow by Jason Wang · 7 years ago
28. b3f1083 rtl8139: fix possible out of bound access by Jason Wang · 7 years ago
29. 9971a3f ne2000: fix possible out of bound access in ne2000_receive by Jason Wang · 7 years ago
30. 481be11 clean up callback when del virtqueue by liujunjie · 7 years ago
31. f8d4616 pc: acpi: revert back to 1 SRAT entry for hotpluggable area by Igor Mammedov · 7 years ago
32. bda7545 vhost: fix invalid downcast by Yury Kotov · 7 years ago
33. a40e718 virtio: update MemoryRegionCaches when guest negotiates features by Paolo Bonzini · 7 years ago
34. b7f525b spapr_cpu_core: vmstate_[un]register per-CPU data from (un)realizefn by Bharata B Rao · 7 years ago
35. 93f874f virtio-gpu: fix crashes upon warm reboot with vga mode by Marc-André Lureau · 7 years ago
36. 341823c hw/intc/arm_gicv3_common: Move gicd shift bug handling to gicv3_post_load by Peter Maydell · 7 years ago
37. 326049c hw/intc/arm_gicv3_common: Move post_load hooks to top-level VMSD by Peter Maydell · 7 years ago
38. adc4fda hw/intc/arm_gicv3_common: Combine duplicate .subsections in vmstate_gicv3_cpu by Peter Maydell · 7 years ago
39. 78e9ddd hw/intc/arm_gicv3_common: Give no-migration-shift-bug subsection a needed function by Peter Maydell · 7 years ago
40. 896b63d Merge remote-tracking branch 'remotes/dgibson/tags/ppc-for-3.0-20180801' into staging by Peter Maydell · 7 years ago
41. 10efd7e pc: acpi: fix memory hotplug regression by reducing stub SRAT entry size by Igor Mammedov · 7 years ago
42. 16b4226 hw/acpi-build: Add a check for memory-less NUMA nodes by Dou Liyang · 7 years ago
43. 388a86d vhost: check region type before casting by Tiwei Bie · 7 years ago
44. 6484ab3 sam460ex: Fix PCI interrupts with multiple devices by BALATON Zoltan · 7 years ago
45. 1069a3c hw/misc/macio: Fix device introspection problems in macio devices by Thomas Huth · 7 years ago
46. fd76fef Merge remote-tracking branch 'remotes/cohuck/tags/s390x-20180731' into staging by Peter Maydell · 7 years ago
47. 408e5ac s390x/sclp: fix maxram calculation by Christian Borntraeger · 7 years ago
48. 218fe5c hw/misc/tz-mpc: Zero the LUT on initialization, not just reset by Peter Maydell · 7 years ago
49. 984b0c1 hw/arm/iotkit: Fix IRQ number for timer1 by Peter Maydell · 7 years ago
50. 942566f armv7m_nvic: Fix m-security subsection name by Peter Maydell · 7 years ago
51. d1fb710 hw/arm/sysbus-fdt: Fix assertion in copy_properties_from_host() by Geert Uytterhoeven · 7 years ago
52. 758b71f arm/smmuv3: Fix missing VMSD terminator by Dr. David Alan Gilbert · 7 years ago
53. 67fa1f5 audio/hda: Fix migration by Dr. David Alan Gilbert · 7 years ago
54. 1a5182c target/arm: Escalate to correct HardFault when AIRCR.BFHFNMINS is set by Peter Maydell · 7 years ago
55. 042374c hw/intc/arm_gicv3: Check correct HCR_EL2 bit when routing IRQ by Peter Maydell · 7 years ago
56. 1ddc9b9 hw/intc/exynos4210_gic: Turn instance_init into realize function by Thomas Huth · 7 years ago
57. 07bc425 hw/arm/spitz: Move problematic nand_init() code to realize function by Thomas Huth · 7 years ago
58. 03a3177 hw/sd/bcm2835_sdhost: Fix PIO mode writes by Guenter Roeck · 7 years ago
59. 7b6d7b8 hw/microblaze/xlnx-zynqmp-pmu: Fix introspection problem in 'xlnx, zynqmp-pmu-soc' by Thomas Huth · 7 years ago
60. 4712c15 e1000e: Prevent MSI/MSI-X storms by Jan Kiszka · 7 years ago
61. 8ff62f6 spike: Fix crash when introspecting the device by Alistair Francis · 7 years ago
62. 5657c3f riscv_hart: Fix crash when introspecting the device by Alistair Francis · 7 years ago
63. a993cb1 virt: Fix crash when introspecting the device by Alistair Francis · 7 years ago
64. 4eea9d7 sifive_u: Fix crash when introspecting the device by Alistair Francis · 7 years ago
65. 54f3141 sifive_e: Fix crash when introspecting the device by Alistair Francis · 7 years ago
66. 59b5552 Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging by Peter Maydell · 7 years ago
67. f8da93a i386: only parse the initrd_filename once for multiboot modules by Daniel P. Berrangé · 7 years ago
68. 6e3ad3f i386: fix regression parsing multiboot initrd modules by Daniel P. Berrangé · 7 years ago
69. ccf02d7 hw/arm/xlnx-zynqmp: Fix crash when introspecting the "xlnx, zynqmp" device by Thomas Huth · 7 years ago
70. fe04f0b hw/display/xlnx_dp: Move problematic code from instance_init to realize by Paolo Bonzini · 7 years ago
71. a39ae81 hw/arm/stm32f205_soc: Fix introspection problem with 'stm32f205-soc' device by Thomas Huth · 7 years ago
72. cf3fccf hw/arm/allwinner-a10: Fix introspection problem with 'allwinner-a10' by Thomas Huth · 7 years ago
73. 32db1b5 hw/*/realview: Fix introspection problem with 'realview_mpcore' & 'realview_gic' by Thomas Huth · 7 years ago
74. b2bc349 hw/cpu/arm11mpcore: Fix introspection problem with 'arm11mpcore_priv' by Thomas Huth · 7 years ago
75. aac409c hw/arm/fsl-imx31: Fix introspection problem with the "fsl, imx31" device by Thomas Huth · 7 years ago
76. 51dd12a hw/arm/fsl-imx25: Fix introspection problem with the "fsl, imx25" device by Thomas Huth · 7 years ago
77. f8bf4b6 hw/arm/fsl-imx7: Fix introspection problems with the "fsl, imx7" device by Thomas Huth · 7 years ago
78. e9e4d4d hw/arm/fsl-imx6: Fix introspection problems with the "fsl, imx6" device by Thomas Huth · 7 years ago
79. 2ba486e hw/cpu/a9mpcore: Fix introspection problems with the "a9mpcore_priv" device by Thomas Huth · 7 years ago
80. d473a03 hw/arm/msf2-soc: Fix introspection problem with the "msf2-soc" device by Thomas Huth · 7 years ago
81. fd31701 hw/cpu/a15mpcore: Fix introspection problem with the a15mpcore_priv device by Thomas Huth · 7 years ago
82. 955cbc6 hw/arm/armv7: Fix crash when introspecting the "iotkit" device by Thomas Huth · 7 years ago
83. 14c520e hw/arm/bcm2836: Fix crash with device_add bcm2837 on unsupported machines by Thomas Huth · 7 years ago
84. 046f370 hw/core/sysbus: Add a function for creating and attaching an object by Thomas Huth · 7 years ago
85. 65e9f27 bcm2835_aux: Swap RX and TX interrupt assignments by Guenter Roeck · 7 years ago
86. cccf96c hw/arm/bcm2836: Mark the bcm2836 / bcm2837 devices with user_creatable = false by Thomas Huth · 7 years ago
87. 7995206 hw/intc/arm_gic: Fix handling of GICD_ITARGETSR by Peter Maydell · 7 years ago
88. ee03cca hw/intc/arm_gic: Check interrupt number in gic_deactivate_irq() by Peter Maydell · 7 years ago
89. 333b9c8 aspeed: Implement write-1-{set, clear} for AST2500 strapping by Andrew Jeffery · 7 years ago
90. 8449bcf virtio-scsi: fix hotplug ->reset() vs event race by Stefan Hajnoczi · 7 years ago
91. 25e8978 qdev: add HotplugHandler->post_plug() callback by Stefan Hajnoczi · 7 years ago
92. f3575af hw/char/serial: retry write if EAGAIN by Marc-André Lureau · 7 years ago
93. 0147883 PC Chipset: Improve serial divisor calculation by Calvin Lee · 7 years ago
94. e9688fa hyperv: ensure VP index equal to QEMU cpu_index by Roman Kagan · 7 years ago
95. 1b2013e hyperv: rename vcpu_id to vp_index by Roman Kagan · 7 years ago
96. 6730df0 sm501: Fix warning about unreachable code by BALATON Zoltan · 7 years ago
97. 3cc702d sam460ex: Correct use after free error by BALATON Zoltan · 7 years ago
98. fd8e338 etsec: fix IRQ (un)masking by Michael Davidsaver · 7 years ago
99. b585395 ppc/xics: fix ICP reset path by Greg Kurz · 7 years ago
100. ccc2cef spapr: Correct inverted test in spapr_pc_dimm_node() by David Gibson · 7 years ago