Branch: refs/heads/staging-7.2
Home: https://github.com/qemu/qemu
Commit: 861fca8ce0c0837a3244d29be2cb15565852bf86
https://github.com/qemu/qemu/commit/861fca8ce0c0837a3244d29be2cb15565852bf86
Author: Philippe Mathieu-Daudé <phi...@linaro.org>
Date: 2024-04-24 (Wed, 24 Apr 2024)
Changed paths:
R .gitlab-ci.d/edk2.yml
R .gitlab-ci.d/edk2/Dockerfile
M .gitlab-ci.d/qemu-project.yml
M MAINTAINERS
Log Message:
-----------
gitlab-ci: Remove job building EDK2 firmware binaries
When we introduced this Gitlab-CI job in commit 71920809ce
("gitlab-ci.yml: Add jobs to build EDK2 firmware binaries"),
the naive plan was to have reproducible binaries by downloading
what this job would build, testing it and eventually committing
it. With retrospective, nothing happened 3 years later and this
job is just bitrotting:
Step 1/3 : FROM ubuntu:18.04
18.04: Pulling from library/ubuntu
mediaType in manifest should be
'application/vnd.docker.distribution.manifest.v2+json' not
'application/vnd.oci.image.manifest.v1+json'
Remove this job to avoid wasting maintenance and CI ressources.
Reported-by: Palmer Dabbelt <pal...@rivosinc.com>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Message-Id: <20230310133247.39268-1-phi...@linaro.org>
Signed-off-by: Thomas Huth <th...@redhat.com>
(cherry picked from commit 690ceb71936f9037f6e11580709e26b62d83c17c)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 6ea6863f215c7f1f3cf7756dc5876a67ba2b90fc
https://github.com/qemu/qemu/commit/6ea6863f215c7f1f3cf7756dc5876a67ba2b90fc
Author: Palmer Dabbelt <pal...@rivosinc.com>
Date: 2024-04-24 (Wed, 24 Apr 2024)
Changed paths:
M .gitlab-ci.d/opensbi.yml
M .gitlab-ci.d/opensbi/Dockerfile
Log Message:
-----------
gitlab/opensbi: Move to docker:stable
The OpenSBI build has been using docker:19.03.1, which appears to be old
enough that v2 of the manifest is no longer supported. Something has
started serving us those manifests, resulting in errors along the lines
of
$ docker build --cache-from $IMAGE_TAG --tag
$CI_REGISTRY_IMAGE:$CI_COMMIT_SHA --tag $IMAGE_TAG .gitlab-ci.d/opensbi
Step 1/7 : FROM ubuntu:18.04
18.04: Pulling from library/ubuntu
mediaType in manifest should be
'application/vnd.docker.distribution.manifest.v2+json' not
'application/vnd.oci.image.manifest.v1+json'
This moves to docker:stable, as was suggested by the template. It also
adds the python3 package via apt, as OpenSBI requires that to build.
Reviewed-by: Bin Meng <bm...@tinylab.org>
Message-ID: <20230303202448.11911-2-pal...@rivosinc.com>
Signed-off-by: Palmer Dabbelt <pal...@rivosinc.com>
(cherry picked from commit 7bc1286b81d4e8380b3083beed1771c67ce87af3)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 51cc8762a0c2f8b08d1fc4957c0c309c73241812
https://github.com/qemu/qemu/commit/51cc8762a0c2f8b08d1fc4957c0c309c73241812
Author: Michael Tokarev <m...@tls.msk.ru>
Date: 2024-04-25 (Thu, 25 Apr 2024)
Changed paths:
M linux-user/syscall.c
Log Message:
-----------
linux-user: do_setsockopt: fix SOL_ALG.ALG_SET_KEY
This setsockopt accepts zero-lengh optlen (current qemu implementation
does not allow this). Also, there's no need to make a copy of the key,
it is enough to use lock_user() (which accepts zero length already).
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2197
Fixes: f31dddd2fc "linux-user: Add support for setsockopt() option SOL_ALG"
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Message-Id: <20240331100737.2724186-2-...@tls.msk.ru>
Signed-off-by: Richard Henderson <richard.hender...@linaro.org>
(cherry picked from commit 04f6fb897a5aeb3e356a7b889869c9962f9c16c7)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: a0823c276671b0253f77cf5a1550995c3d06050f
https://github.com/qemu/qemu/commit/a0823c276671b0253f77cf5a1550995c3d06050f
Author: Zhu Yangyang <zhuyangyan...@huawei.com>
Date: 2024-04-28 (Sun, 28 Apr 2024)
Changed paths:
M nbd/client.c
M nbd/common.c
M nbd/nbd-internal.h
M nbd/server.c
Log Message:
-----------
nbd/server: do not poll within a coroutine context
Coroutines are not supposed to block. Instead, they should yield.
The client performs TLS upgrade outside of an AIOContext, during
synchronous handshake; this still requires g_main_loop. But the
server responds to TLS upgrade inside a coroutine, so a nested
g_main_loop is wrong. Since the two callbacks no longer share more
than the setting of data.complete and data.error, it's just as easy to
use static helpers instead of trying to share a common code path. It
is also possible to add assertions that no other code is interfering
with the eventual path to qio reaching the callback, whether or not it
required a yield or main loop.
Fixes: f95910f ("nbd: implement TLS support in the protocol negotiation")
Signed-off-by: Zhu Yangyang <zhuyangyan...@huawei.com>
[eblake: move callbacks to their use point, add assertions]
Signed-off-by: Eric Blake <ebl...@redhat.com>
Message-ID: <20240408160214.1200629-5-ebl...@redhat.com>
Reviewed-by: Vladimir Sementsov-Ogievskiy <vsement...@yandex-team.ru>
(cherry picked from commit ae6d91a7e9b77abb029ed3fa9fad461422286942)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: f7b46e82cec023597da0e2cc65d911626bae9d6c
https://github.com/qemu/qemu/commit/f7b46e82cec023597da0e2cc65d911626bae9d6c
Author: Eric Blake <ebl...@redhat.com>
Date: 2024-04-28 (Sun, 28 Apr 2024)
Changed paths:
M nbd/server.c
Log Message:
-----------
nbd/server: Mark negotiation functions as coroutine_fn
nbd_negotiate() is already marked coroutine_fn. And given the fix in
the previous patch to have nbd_negotiate_handle_starttls not create
and wait on a g_main_loop (as that would violate coroutine
constraints), it is worth marking the rest of the related static
functions reachable only during option negotiation as also being
coroutine_fn.
Suggested-by: Vladimir Sementsov-Ogievskiy <vsement...@yandex-team.ru>
Signed-off-by: Eric Blake <ebl...@redhat.com>
Message-ID: <20240408160214.1200629-6-ebl...@redhat.com>
Reviewed-by: Vladimir Sementsov-Ogievskiy <vsement...@yandex-team.ru>
[eblake: drop one spurious coroutine_fn marking]
Signed-off-by: Eric Blake <ebl...@redhat.com>
(cherry picked from commit 4fa333e08dd96395a99ea8dd9e4c73a29dd23344)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
(Mjt: fixups in nbd/server.c for v8.1.0-1366-gfd358d83901d
"nbd/server: Refactor list of negotiated meta contexts")
Commit: 39a0961d0a202a8b436b273c89ba8ad8f61dff57
https://github.com/qemu/qemu/commit/39a0961d0a202a8b436b273c89ba8ad8f61dff57
Author: Li Zhijian <lizhij...@fujitsu.com>
Date: 2024-04-30 (Tue, 30 Apr 2024)
Changed paths:
M backends/cryptodev-builtin.c
Log Message:
-----------
backends/cryptodev-builtin: Fix local_error leaks
It seems that this error does not need to be propagated to the upper,
directly output the error to avoid the leaks
Closes: https://gitlab.com/qemu-project/qemu/-/issues/2283
Fixes: 2fda101de07 ("virtio-crypto: Support asynchronous mode")
Signed-off-by: Li Zhijian <lizhij...@fujitsu.com>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Reviewed-by: zhenwei pi <pizhen...@bytedance.com>
Reviewed-by: Michael Tokarev <m...@tls.msk.ru>
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
(cherry picked from commit 06479dbf3d7d245572c4b3016e5a1d923ff04d66)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: e00c9b475839959adf147610e796648cf6d4525f
https://github.com/qemu/qemu/commit/e00c9b475839959adf147610e796648cf6d4525f
Author: Peter Maydell <peter.mayd...@linaro.org>
Date: 2024-05-01 (Wed, 01 May 2024)
Changed paths:
M tests/avocado/boot_linux_console.py
M tests/avocado/replay_kernel.py
Log Message:
-----------
tests/avocado: update sunxi kernel from armbian to 6.6.16
The Linux kernel 5.10.16 binary for sunxi has been removed from
apt.armbian.com. This means that the avocado tests for these machines
will be skipped (status CANCEL) if the old binary isn't present in
the avocado cache.
Update to 6.6.16, in the same way we did in commit e384db41d8661
when we moved to 5.10.16 in 2021.
Cc: qemu-sta...@nongnu.org
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2284
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
Reviewed-by: Strahinja Jankovic <strahinja.p.janko...@gmail.com>
Reviewed-by: Niek Linnenbank <nieklinnenb...@gmail.com>
Tested-by: Niek Linnenbank <nieklinnenb...@gmail.com>
Message-id: 20240415151845.1564201-1-peter.mayd...@linaro.org
(cherry picked from commit dcc5c018c7e6acddf81951bcbdf1019b9ab45f56)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
(Mjt: drop changes for tests which does not exists in 7.2)
Commit: 9a005e30f5596d1903d531e243b986a2fd5c162e
https://github.com/qemu/qemu/commit/9a005e30f5596d1903d531e243b986a2fd5c162e
Author: Thomas Huth <th...@redhat.com>
Date: 2024-05-01 (Wed, 01 May 2024)
Changed paths:
M .gitlab-ci.d/cirrus.yml
Log Message:
-----------
.gitlab-ci.d/cirrus.yml: Shorten the runtime of the macOS and FreeBSD jobs
Cirrus-CI introduced limitations to the free CI minutes. To avoid that
we are consuming them too fast, let's drop the usual targets that are
not that important since they are either a subset of another target
(like i386 or ppc being a subset of x86_64 or ppc64 respectively), or
since there is still a similar target with the opposite endianness
(like xtensa/xtensael, microblaze/microblazeel etc.).
Message-ID: <20240429100113.53357-1-th...@redhat.com>
Signed-off-by: Thomas Huth <th...@redhat.com>
(cherry picked from commit a88a04906b966ffdcda23a5a456abe10aa8c826e)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: a004dfabeaf6b3c3b400f7e263d2e9995f9a2d37
https://github.com/qemu/qemu/commit/a004dfabeaf6b3c3b400f7e263d2e9995f9a2d37
Author: Alexandra Diupina <adiup...@astralinux.ru>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M hw/dma/xlnx_dpdma.c
Log Message:
-----------
hw/dmax/xlnx_dpdma: fix handling of address_extension descriptor fields
The DMA descriptor structures for this device have
a set of "address extension" fields which extend the 32
bit source addresses with an extra 16 bits to give a
48 bit address:
https://docs.amd.com/r/en-US/ug1085-zynq-ultrascale-trm/ADDR_EXT-Field
However, we misimplemented this address extension in several ways:
* we only extracted 12 bits of the extension fields, not 16
* we didn't shift the extension field up far enough
* we accidentally did the shift as 32-bit arithmetic, which
meant that we would have an overflow instead of setting
bits [47:32] of the resulting 64-bit address
Add a type cast and use extract64() instead of extract32()
to avoid integer overflow on addition. Fix bit fields
extraction according to documentation.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Cc: qemu-sta...@nongnu.org
Fixes: d3c6369a96 ("introduce xlnx-dpdma")
Signed-off-by: Alexandra Diupina <adiup...@astralinux.ru>
Message-id: 20240428181131.23801-1-adiup...@astralinux.ru
[PMM: adjusted commit message]
Reviewed-by: Peter Maydell <peter.mayd...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
(cherry picked from commit 4b00855f0ee2e2eee8fd2500ffef27c108be6dc3)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 2e3e5138d60e8d43a8554e9b1728163f87569e1a
https://github.com/qemu/qemu/commit/2e3e5138d60e8d43a8554e9b1728163f87569e1a
Author: Philippe Mathieu-Daudé <phi...@linaro.org>
Date: 2024-05-02 (Thu, 02 May 2024)
Changed paths:
M hw/arm/npcm7xx.c
Log Message:
-----------
hw/arm/npcm7xx: Store derivative OTP fuse key in little endian
Use little endian for derivative OTP fuse key.
Cc: qemu-sta...@nongnu.org
Fixes: c752bb079b ("hw/nvram: NPCM7xx OTP device model")
Suggested-by: Avi Fishman <avi.fish...@nuvoton.com>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Message-id: 20240422125813.1403-1-phi...@linaro.org
Reviewed-by: Peter Maydell <peter.mayd...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
(cherry picked from commit eb656a60fd93262b1e519b3162888bf261df7f68)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 41e052fc05d20c171edf8ba16894871a4d1720f3
https://github.com/qemu/qemu/commit/41e052fc05d20c171edf8ba16894871a4d1720f3
Author: Ruihan Li <lrh2...@pku.edu.cn>
Date: 2024-05-09 (Thu, 09 May 2024)
Changed paths:
M target/i386/tcg/translate.c
Log Message:
-----------
target/i386: Give IRQs a chance when resetting HF_INHIBIT_IRQ_MASK
When emulated with QEMU, interrupts will never come in the following
loop. However, if the NOP instruction is uncommented, interrupts will
fire as normal.
loop:
cli
call do_sti
jmp loop
do_sti:
sti
# nop
ret
This behavior is different from that of a real processor. For example,
if KVM is enabled, interrupts will always fire regardless of whether the
NOP instruction is commented or not. Also, the Intel Software Developer
Manual states that after the STI instruction is executed, the interrupt
inhibit should end as soon as the next instruction (e.g., the RET
instruction if the NOP instruction is commented) is executed.
This problem is caused because the previous code may choose not to end
the TB even if the HF_INHIBIT_IRQ_MASK has just been reset (e.g., in the
case where the STI instruction is immediately followed by the RET
instruction), so that IRQs may not have a change to trigger. This commit
fixes the problem by always terminating the current TB to give IRQs a
chance to trigger when HF_INHIBIT_IRQ_MASK is reset.
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Signed-off-by: Ruihan Li <lrh2...@pku.edu.cn>
Message-ID: <20240415064518.4951-4-lrh2...@pku.edu.cn>
Signed-off-by: Paolo Bonzini <pbonz...@redhat.com>
(cherry picked from commit 6a5a63f74ba5c5355b7a8468d3d814bfffe928fb)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
(Mjt: context fixup due to missing-in-7.2
v8.1.0-1189-gad75a51e84 "tcg: Rename cpu_env to tcg_env")
Commit: 2b8be9cffb8caaa8377cdc30fe9c406e57d4ba82
https://github.com/qemu/qemu/commit/2b8be9cffb8caaa8377cdc30fe9c406e57d4ba82
Author: Mattias Nissler <mniss...@rivosinc.com>
Date: 2024-05-10 (Fri, 10 May 2024)
Changed paths:
M hw/remote/vfio-user-obj.c
Log Message:
-----------
hw/remote/vfio-user: Fix config space access byte order
PCI config space is little-endian, so on a big-endian host we need to
perform byte swaps for values as they are passed to and received from
the generic PCI config space access machinery.
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Reviewed-by: Stefan Hajnoczi <stefa...@redhat.com>
Reviewed-by: Jagannathan Raman <jag.ra...@oracle.com>
Signed-off-by: Mattias Nissler <mniss...@rivosinc.com>
Message-ID: <20240507094210.300566-6-mniss...@rivosinc.com>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>
(cherry picked from commit e6578f1f68a0e90789a841ada532c3e494c9a04c)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 76b96c053fe2c683aab8811449dd9b6aace1d94c
https://github.com/qemu/qemu/commit/76b96c053fe2c683aab8811449dd9b6aace1d94c
Author: Paolo Bonzini <pbonz...@redhat.com>
Date: 2024-05-27 (Mon, 27 May 2024)
Changed paths:
M target/i386/tcg/translate.c
Log Message:
-----------
target/i386: fix operand size for DATA16 REX.W POPCNT
According to the manual, 32-bit vs 64-bit is governed by REX.W
and REX ignores the 0x66 prefix. This can be confirmed with this
program:
#include <stdio.h>
int main()
{
int x = 0x12340000;
int y;
asm("popcntl %1, %0" : "=r" (y) : "r" (x)); printf("%x\n", y);
asm("mov $-1, %0; .byte 0x66; popcntl %1, %0" : "+r" (y) : "r" (x));
printf("%x\n", y);
asm("mov $-1, %0; .byte 0x66; popcntq %q1, %q0" : "+r" (y) : "r" (x));
printf("%x\n", y);
}
which prints 5/ffff0000/5 on real hardware and 5/ffff0000/ffff0000
on QEMU.
Cc: qemu-sta...@nongnu.org
Reviewed-by: Zhao Liu <zhao1....@intel.com>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Signed-off-by: Paolo Bonzini <pbonz...@redhat.com>
(cherry picked from commit 41c685dc59bb611096f3bb6a663cfa82e4cba97b)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
(Mjt: drop removal of mo_64_32() helper function in target/i386/tcg/translate.c
due to missing-in-7.2 v9.0.0-542-gaef4f4affde2
"target/i386: remove now-converted opcodes from old decoder"
which removed other user of it)
Commit: e6000bd7c7cfdd0fc224531e2971e482bbecd1ad
https://github.com/qemu/qemu/commit/e6000bd7c7cfdd0fc224531e2971e482bbecd1ad
Author: Paolo Bonzini <pbonz...@redhat.com>
Date: 2024-05-27 (Mon, 27 May 2024)
Changed paths:
M target/i386/tcg/translate.c
Log Message:
-----------
target/i386: rdpkru/wrpkru are no-prefix instructions
Reject 0x66/0xf3/0xf2 in front of them.
Cc: qemu-sta...@nongnu.org
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Signed-off-by: Paolo Bonzini <pbonz...@redhat.com>
(cherry picked from commit 40a3ec7b5ffde500789d016660a171057d6b467c)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 659835d24baf6ceeb0d96a61cd86483f719ab093
https://github.com/qemu/qemu/commit/659835d24baf6ceeb0d96a61cd86483f719ab093
Author: hikalium <hikal...@hikalium.com>
Date: 2024-05-27 (Mon, 27 May 2024)
Changed paths:
M ui/gtk.c
Log Message:
-----------
ui/gtk: Fix mouse/motion event scaling issue with GTK display backend
Remove gtk_widget_get_scale_factor() usage from the calculation of
the motion events in the GTK backend to make it work correctly on
environments that have `gtk_widget_get_scale_factor() != 1`.
This scale factor usage had been introduced in the commit f14aab420c and
at that time the window size was used for calculating the things and it
was working correctly. However, in the commit 2f31663ed4 the logic
switched to use the widget size instead of window size and because of
the change the usage of scale factor becomes invalid (since widgets use
`vc->gfx.scale_{x, y}` for scaling).
Tested on Crostini on ChromeOS (15823.51.0) with an external display.
Fixes: 2f31663ed4 ("ui/gtk: use widget size for cursor motion event")
Fixes: f14aab420c ("ui: fix incorrect pointer position on highdpi with
gtk")
(f14aab420c is 95c9059e66 in stable-7.2)
Signed-off-by: hikalium <hikal...@hikalium.com>
Acked-by: Marc-André Lureau <marcandre.lur...@redhat.com>
Message-Id: <20240512111435.30121-3-hikal...@hikalium.com>
(cherry picked from commit 37e91415018db3656b46cdea8f9e4d47b3ff130d)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 5ec422a9584db3782b3cb884522b3542c1abd7d4
https://github.com/qemu/qemu/commit/5ec422a9584db3782b3cb884522b3542c1abd7d4
Author: Dongwon Kim <dongwon....@intel.com>
Date: 2024-05-27 (Mon, 27 May 2024)
Changed paths:
M ui/gtk-egl.c
M ui/gtk-gl-area.c
M ui/gtk.c
Log Message:
-----------
ui/gtk: Check if fence_fd is equal to or greater than 0
'fence_fd' needs to be validated always before being referenced
And the passing condition should include '== 0' as 0 is a valid
value for the file descriptor.
Suggested-by: Marc-André Lureau <marcandre.lur...@redhat.com>
Reviewed-by: Daniel P. Berrangé <berra...@redhat.com>
Cc: Philippe Mathieu-Daudé <phi...@linaro.org>
Cc: Daniel P. Berrangé <berra...@redhat.com>
Cc: Vivek Kasireddy <vivek.kasire...@intel.com>
Signed-off-by: Dongwon Kim <dongwon....@intel.com>
Message-Id: <20240508175403.3399895-2-dongwon....@intel.com>
(cherry picked from commit e4e62514e3cc2fc9dbae44af8b80f61c730beab4)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: ddc13a3c422533d5736c4e5f66e2263a496991e5
https://github.com/qemu/qemu/commit/ddc13a3c422533d5736c4e5f66e2263a496991e5
Author: donsheng <dongsheng.x.zh...@intel.com>
Date: 2024-05-27 (Mon, 27 May 2024)
Changed paths:
M target/i386/kvm/hyperv.c
Log Message:
-----------
target-i386: hyper-v: Correct kvm_hv_handle_exit return value
This bug fix addresses the incorrect return value of kvm_hv_handle_exit for
KVM_EXIT_HYPERV_SYNIC, which should be EXCP_INTERRUPT.
Handling of KVM_EXIT_HYPERV_SYNIC in QEMU needs to be synchronous.
This means that async_synic_update should run in the current QEMU vCPU
thread before returning to KVM, returning EXCP_INTERRUPT to guarantee this.
Returning 0 can cause async_synic_update to run asynchronously.
One problem (kvm-unit-tests's hyperv_synic test fails with timeout error)
caused by this bug:
When a guest VM writes to the HV_X64_MSR_SCONTROL MSR to enable Hyper-V SynIC,
a VM exit is triggered and processed by the kvm_hv_handle_exit function of the
QEMU vCPU. This function then calls the async_synic_update function to set
synic->sctl_enabled to true. A true value of synic->sctl_enabled is required
before creating SINT routes using the hyperv_sint_route_new() function.
If kvm_hv_handle_exit returns 0 for KVM_EXIT_HYPERV_SYNIC, the current QEMU
vCPU thread may return to KVM and enter the guest VM before running
async_synic_update. In such case, the hyperv_synic test’s subsequent call to
synic_ctl(HV_TEST_DEV_SINT_ROUTE_CREATE, ...) immediately after writing to
HV_X64_MSR_SCONTROL can cause QEMU’s hyperv_sint_route_new() function to return
prematurely (because synic->sctl_enabled is false).
If the SINT route is not created successfully, the SINT interrupt will not be
fired, resulting in a timeout error in the hyperv_synic test.
Fixes: 267e071bd6d6 (“hyperv: make overlay pages for SynIC”)
Suggested-by: Chao Gao <chao....@intel.com>
Signed-off-by: Dongsheng Zhang <dongsheng.x.zh...@intel.com>
Message-ID: <20240521200114.11588-1-dongsheng.x.zh...@intel.com>
Cc: qemu-sta...@nongnu.org
Signed-off-by: Paolo Bonzini <pbonz...@redhat.com>
(cherry picked from commit 84d4b72854869821eb89813c195927fdd3078c12)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: 9abcd968e77f257abedb327eb3109ec30a0ba9a7
https://github.com/qemu/qemu/commit/9abcd968e77f257abedb327eb3109ec30a0ba9a7
Author: Paolo Bonzini <pbonz...@redhat.com>
Date: 2024-05-27 (Mon, 27 May 2024)
Changed paths:
M target/i386/tcg/translate.c
Log Message:
-----------
target/i386: disable jmp_opt if EFLAGS.RF is 1
If EFLAGS.RF is 1, special processing in gen_eob_worker() is needed and
therefore goto_tb cannot be used.
Suggested-by: Richard Henderson <richard.hender...@linaro.org>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Cc: qemu-sta...@nongnu.org
Signed-off-by: Paolo Bonzini <pbonz...@redhat.com>
(cherry picked from commit 8225bff7c5db504f50e54ef66b079854635dba70)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Commit: f417712ef156235b96c2c15a1ad7e3dfe5542695
https://github.com/qemu/qemu/commit/f417712ef156235b96c2c15a1ad7e3dfe5542695
Author: Paolo Bonzini <pbonz...@redhat.com>
Date: 2024-05-27 (Mon, 27 May 2024)
Changed paths:
M target/i386/tcg/translate.c
Log Message:
-----------
target/i386: no single-step exception after MOV or POP SS
Intel SDM 18.3.1.4 "If an occurrence of the MOV or POP instruction
loads the SS register executes with EFLAGS.TF = 1, no single-step debug
exception occurs following the MOV or POP instruction."
Cc: qemu-sta...@nongnu.org
Signed-off-by: Paolo Bonzini <pbonz...@redhat.com>
(cherry picked from commit f0f0136abba688a6516647a79cc91e03fad6d5d7)
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
(Mjt: context fixup for v8.1.0-1189-gad75a51e84af "tcg: Rename cpu_env to
tcg_env")
Compare: https://github.com/qemu/qemu/compare/c6fe0f315cfa...f417712ef156
To unsubscribe from these emails, change your notification settings at
https://github.com/qemu/qemu/settings/notifications
