aboutsummaryrefslogtreecommitdiff
path: root/hw
AgeCommit message (Expand)Author
2016-05-08Revert "ehci: make idt processing more robust"Gerd Hoffmann
2016-05-08ehci: apply limit to iTD/sidt descriptorsGerd Hoffmann
2016-05-08vga: make sure vga register setup for vbe stays intact (CVE-2016-3712).Gerd Hoffmann
2016-05-08vga: update vga register setup on vbe changesGerd Hoffmann
2016-05-08vga: factor out vga register setupGerd Hoffmann
2016-05-08vga: add vbe_enabled() helperGerd Hoffmann
2016-05-08vga: fix banked access bounds checking (CVE-2016-3710)Gerd Hoffmann
2016-03-22usb: check USB configuration descriptor objectPrasad J Pandit
2016-03-22usb: check RNDIS message lengthPrasad J Pandit
2016-03-22usb: check RNDIS buffer offsets & lengthPrasad J Pandit
2016-03-22usb: check page select value while processing iTDPrasad J Pandit
2016-03-22net: ne2000: fix bounds check in ioport operationsPrasad J Pandit
2016-03-22ide: ahci: reset ncq object to unused on errorPrasad J Pandit
2016-03-22i386: avoid null pointer dereferenceP J P
2016-03-22ahci: Do not unmap NULL addressesJohn Snow
2016-03-22migration: allow machine to enforce configuration section migrationGreg Kurz
2016-03-17vhost-user: don't merge regions with different fdsMichael S. Tsirkin
2016-03-17fw_cfg: unbreak migration compatibility for 2.4 and earlier machinesLaszlo Ersek
2016-03-17hw/virtio: group virtio flags into an enumMarcel Apfelbaum
2016-03-17hw/virtio: fix double use of a virtio flagMarcel Apfelbaum
2016-03-17spapr: skip configuration section during migration of older machinesGreg Kurz
2016-03-17e1000: eliminate infinite loops on out-of-bounds transfer startLaszlo Ersek
2016-03-17fw_cfg: avoid calculating invalid current entry pointerGabriel L. Somlo
2016-03-17s390x/css: fix control flags during cschHalil Pasic
2016-03-17ehci: update irq on resetGerd Hoffmann
2016-03-17net: set endianness on all backend devicesLaurent Vivier
2016-03-17net: ne2000: check ring buffer control registersPrasad J Pandit
2016-03-15net: rocker: fix an incorrect array bounds checkPrasad J Pandit
2016-03-15ivshmem: remove redundant assignment, fix crash with msi=offMarc-André Lureau
2016-03-15ivshmem: no need for opaque argumentMarc-André Lureau
2016-03-15scsi: initialise info object with appropriate sizeP J P
2016-03-15virtio-9p: use accessor to get thread_poolGreg Kurz
2016-03-15xenfb: avoid reading twice the same fields from the shared pageStefano Stabellini
2016-03-15xen/blkif: Avoid double access to src->nr_segmentsStefano Stabellini
2016-03-15net: vmxnet3: avoid memory leakage in activate_deviceP J P
2016-03-15ehci: make idt processing more robustGerd Hoffmann
2015-12-10virtio-9p-device: add minimal unrealize handlerGreg Kurz
2015-12-07sd: Mark brittle abuse of blk_attach_dev() FIXMEMarkus Armbruster
2015-12-07sdhci: Sanitize "sdhci-pci" properties for future qomificationMarkus Armbruster
2015-12-07virtio-blk: Drop x-data-plane optionFam Zheng
2015-12-07Merge remote-tracking branch 'remotes/jasowang/tags/net-pull-request' into st...Peter Maydell
2015-12-07lan9118: log and ignore access to invalid registers, rather than abortingAndrew Baumann
2015-12-07lan9118: fix emulation of MAC address loaded bit in E2P_CMD registerAndrew Baumann
2015-12-07vmxnet3: silence warningMichael S. Tsirkin
2015-12-07pcnet: fix rx buffer overflow(CVE-2015-7512)Jason Wang
2015-12-07net: pcnet: add check to validate receive data size(CVE-2015-7504)Prasad J Pandit
2015-12-07e1000: fix hang of win2k12 shutdown with flood pingDenis V. Lunev
2015-12-04Merge remote-tracking branch 'remotes/mjt/tags/pull-trivial-patches-2015-12-0...Peter Maydell
2015-12-04gt64xxx: fix decoding of ISD registerPaolo Bonzini
2015-12-04bt: avoid unintended sign extensionPaolo Bonzini