{"push_id":887465513,"size":5,"distinct_size":5,"ref":"refs/heads/master","head":"30a9fd5d13b0a4290382adc4c1bf619677066b89","before":"9d7b969ea6d9663a94760c6c131481b366f4d38a","commits":[{"sha":"55b4e80b047300e1512df02887b7448ba3786b62","author":{"email":"826f35dc530284b0816e3c5a7820d70f7d61c2ba@gmail.com","name":"Don Slutz"},"message":"exec: Stop using memory after free\n\nmemory_region_unref(mr) can free memory.\n\nFor example I got:\n\nProgram received signal SIGSEGV, Segmentation fault.\n[Switching to Thread 0x7f43280d4700 (LWP 4462)]\n0x00007f43323283c0 in phys_section_destroy (mr=0x7f43259468b0)\n    at /home/don/xen/tools/qemu-xen-dir/exec.c:1023\n1023        if (mr->subpage) {\n(gdb) bt\n    at /home/don/xen/tools/qemu-xen-dir/exec.c:1023\n    at /home/don/xen/tools/qemu-xen-dir/exec.c:1034\n    at /home/don/xen/tools/qemu-xen-dir/exec.c:2205\n(gdb) p mr\n$1 = (MemoryRegion *) 0x7f43259468b0\n\nAnd this change prevents this.\n\nSigned-off-by: Don Slutz <Don.Slutz@Gmail.com>\nMessage-Id: <1448921464-21845-1-git-send-email-Don.Slutz@Gmail.com>\nCc: qemu-stable@nongnu.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>","distinct":true,"url":"https://api.github.com/repos/qemu/qemu/commits/55b4e80b047300e1512df02887b7448ba3786b62"},{"sha":"c1f2448998062f25df395cd239169400a4c41ed6","author":{"email":"69d3ebcf5ee4e7f05a50dc23cd96655b730804b4@redhat.com","name":"Paolo Bonzini"},"message":"qemu-char: retry g_poll on EINTR\n\nThis is a case where pty_chr_update_read_handler_locked's lack\nof error checking can produce incorrect values.  We are not using\nSIGUSR1 anymore, so this is quite theoretical, but easy to fix.\n\nReported-by: Markus Armbruster <armbru@redhat.com>\nReviewed-by: Markus Armbruster <armbru@redhat.com>\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>","distinct":true,"url":"https://api.github.com/repos/qemu/qemu/commits/c1f2448998062f25df395cd239169400a4c41ed6"},{"sha":"21a24302e85024dd7b2a151158adbc1f5dc5c4dd","author":{"email":"255103e50249e3d658441816e0597170ebfc16ef@redhat.com","name":"Michael S. Tsirkin"},"message":"main-loop: suppress warnings under qtest\n\ncommit 01c22f2cdd4fcf02276ea10f48253850a5fd7259 (\"main-loop: Suppress\n\"I/O thread spun\" warnings for qtest\") doesn't actually disable the\nwarning for everyone since some tests don't run under the qtest\naccelerator.\n\nCheck qtest_driver instead.\n\nCc: Peter Maydell <peter.maydell@linaro.org>\nSigned-off-by: Michael S. Tsirkin <mst@redhat.com>\nMessage-Id: <1448882964-22433-1-git-send-email-mst@redhat.com>\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>","distinct":true,"url":"https://api.github.com/repos/qemu/qemu/commits/21a24302e85024dd7b2a151158adbc1f5dc5c4dd"},{"sha":"0c2d70c448b7853a91cfa63659aa3cc6630fb9be","author":{"email":"69d3ebcf5ee4e7f05a50dc23cd96655b730804b4@redhat.com","name":"Paolo Bonzini"},"message":"translate-all: ensure host page mask is always extended with 1's\n\nAnthony reported that >4GB guests on Xen with 32bit QEMU broke after\ncommit 4ed023c (\"Round up RAMBlock sizes to host page sizes\", 2015-11-05).\n\nIn that patch sizes are masked against qemu_host_page_size/mask which\nare uintptr_t, and thus 32bit on a 32bit QEMU, even though the ram space\nmight be bigger than 4GB on Xen.\n\nSince ram_addr_t is not available on user-mode emulation targets, ensure\nthat we get a sign extension when masking away the low bits of the address.\nRemove the ~10 year old scary comment that the type of these variables\nis probably wrong, with another equally scary comment.  The new comment\nhowever does not have \"???\" in it, which is arguably an improvement.\n\nFor completeness use the alignment macros in linux-user and bsd-user\ninstead of manually doing an &.  linux-user and bsd-user are not affected\nby the Xen issue, however.\n\nReviewed-by: Juan Quintela <quintela@redhat.com>\nReported-by: Anthony PERARD <anthony.perard@citrix.com>\nFixes: 4ed023ce2a39ab5812d33cf4d819def168965a7f\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>","distinct":true,"url":"https://api.github.com/repos/qemu/qemu/commits/0c2d70c448b7853a91cfa63659aa3cc6630fb9be"},{"sha":"30a9fd5d13b0a4290382adc4c1bf619677066b89","author":{"email":"313afa09ce093b19ae1dd74f57c1ebd94508584c@linaro.org","name":"Peter Maydell"},"message":"Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging\n\n* exec.c use after free\n* Xen 32-on-64 breakage\n* missing EINTR\n* naughty warning under qtest\n\n# gpg: Signature made Wed 02 Dec 2015 12:13:55 GMT using RSA key ID 78C7AE83\n# gpg: Good signature from \"Paolo Bonzini <bonzini@gnu.org>\"\n# gpg:                 aka \"Paolo Bonzini <pbonzini@redhat.com>\"\n\n* remotes/bonzini/tags/for-upstream:\n  translate-all: ensure host page mask is always extended with 1's\n  main-loop: suppress warnings under qtest\n  qemu-char: retry g_poll on EINTR\n  exec: Stop using memory after free\n\nSigned-off-by: Peter Maydell <peter.maydell@linaro.org>","distinct":true,"url":"https://api.github.com/repos/qemu/qemu/commits/30a9fd5d13b0a4290382adc4c1bf619677066b89"}]}