aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2016-05-09cadence_uart: bounds check write offsetMichael S. Tsirkin
2016-05-08Revert "ehci: make idt processing more robust"Gerd Hoffmann
2016-05-08ehci: apply limit to iTD/sidt descriptorsGerd Hoffmann
2016-05-08vga: make sure vga register setup for vbe stays intact (CVE-2016-3712).Gerd Hoffmann
2016-05-08vga: update vga register setup on vbe changesGerd Hoffmann
2016-05-08vga: factor out vga register setupGerd Hoffmann
2016-05-08vga: add vbe_enabled() helperGerd Hoffmann
2016-05-08vga: fix banked access bounds checking (CVE-2016-3710)Gerd Hoffmann
2016-03-29Update version for 2.5.1 releasev2.5.1Michael Roth
2016-03-22hyperv: cpu hotplug fix with HyperV enabledDenis V. Lunev
2016-03-22vmdk: Fix converting to streamOptimizedFam Zheng
2016-03-22vmdk: Create streamOptimized as version 3Fam Zheng
2016-03-22usb: check USB configuration descriptor objectPrasad J Pandit
2016-03-22usb: check RNDIS message lengthPrasad J Pandit
2016-03-22usb: check RNDIS buffer offsets & lengthPrasad J Pandit
2016-03-22usb: check page select value while processing iTDPrasad J Pandit
2016-03-22net: ne2000: fix bounds check in ioport operationsPrasad J Pandit
2016-03-22net: check packet payload lengthPrasad J Pandit
2016-03-22ide: ahci: reset ncq object to unused on errorPrasad J Pandit
2016-03-22i386: avoid null pointer dereferenceP J P
2016-03-22hmp: fix sendkey out of bounds write (CVE-2015-8619)Wolfgang Bumiller
2016-03-22ahci: Do not unmap NULL addressesJohn Snow
2016-03-22migration: allow machine to enforce configuration section migrationGreg Kurz
2016-03-17vl.c: Fix regression in machine error messageMarcel Apfelbaum
2016-03-17quorum: Fix crash in quorum_aio_cb()Alberto Garcia
2016-03-17target-arm: Make reserved ranges in ID_AA64* spaces RAZ, not UNDEFPeter Maydell
2016-03-17vhost-user: don't merge regions with different fdsMichael S. Tsirkin
2016-03-17fw_cfg: unbreak migration compatibility for 2.4 and earlier machinesLaszlo Ersek
2016-03-17hw/virtio: group virtio flags into an enumMarcel Apfelbaum
2016-03-17hw/virtio: fix double use of a virtio flagMarcel Apfelbaum
2016-03-17spapr: skip configuration section during migration of older machinesGreg Kurz
2016-03-17e1000: eliminate infinite loops on out-of-bounds transfer startLaszlo Ersek
2016-03-17block: qemu-iotests - add test for snapshot, commit, snapshot bugJeff Cody
2016-03-17block: set device_list.tqe_prev to NULL on BDS removalJeff Cody
2016-03-17qmp: Fix reference-counting of qnull on empty output visitEric Blake
2016-03-17cpus: use broadcast on qemu_pause_condDr. David Alan Gilbert
2016-03-17fw_cfg: avoid calculating invalid current entry pointerGabriel L. Somlo
2016-03-17s390x/css: fix control flags during cschHalil Pasic
2016-03-17s390x/ioinst: set type and len for SEI responsePierre Morel
2016-03-17block/raw-posix: avoid bogus fixup for cylinders on DASD disksChristian Borntraeger
2016-03-17ehci: update irq on resetGerd Hoffmann
2016-03-17net: set endianness on all backend devicesLaurent Vivier
2016-03-17net: ne2000: check ring buffer control registersPrasad J Pandit
2016-03-17net/filter: fix nf->netdev_id leakLi Zhijian
2016-03-17net/dump: fix nfds->filename leakLi Zhijian
2016-03-17blockdev: Fix 'change' for slot devicesMax Reitz
2016-03-17block: Add blk_dev_has_tray()Max Reitz
2016-03-15net: rocker: fix an incorrect array bounds checkPrasad J Pandit
2016-03-15ivshmem: remove redundant assignment, fix crash with msi=offMarc-André Lureau
2016-03-15ivshmem: no need for opaque argumentMarc-André Lureau