c8-stream-rhel
imports/c8-stream-rhel/qemu-kvm-6.2.0-49.module+el8.10.0+21533+3df3c4b6
MSVSphere Packaging Team
7 months ago
parent
8deaa93206
commit
0dc1eaeade
@ -0,0 +1,181 @@
|
|||||||
|
From 440ee491240f2f02f9a6082d8aad98d88c1039dd Mon Sep 17 00:00:00 2001
|
||||||
|
From: Thomas Huth <thuth@redhat.com>
|
||||||
|
Date: Mon, 15 Jan 2024 14:00:04 +0100
|
||||||
|
Subject: [PATCH 1/5] MAINTAINERS: split out s390x sections
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 348: s390x: Provide some more useful information if decryption of a PV image fails
|
||||||
|
RH-Jira: RHEL-18214
|
||||||
|
RH-Acked-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [1/5] a71a3c11922481f97c36570e361088d17474e481
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-18214
|
||||||
|
|
||||||
|
commit 56e34834029c7c6862cb0095d95ad83c50485f88
|
||||||
|
Author: Cornelia Huck <cohuck@redhat.com>
|
||||||
|
Date: Wed Dec 22 11:55:48 2021 +0100
|
||||||
|
|
||||||
|
MAINTAINERS: split out s390x sections
|
||||||
|
|
||||||
|
Split out some more specialized devices etc., so that we can build
|
||||||
|
smarter lists of people to be put on cc: in the future.
|
||||||
|
|
||||||
|
Signed-off-by: Cornelia Huck <cohuck@redhat.com>
|
||||||
|
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
|
||||||
|
Acked-by: David Hildenbrand <david@redhat.com>
|
||||||
|
Acked-by: Christian Borntraeger <borntraeger@de.ibm.com>
|
||||||
|
Acked-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
Acked-by: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
Acked-by: Eric Farman <farman@linux.ibm.com>
|
||||||
|
Message-Id: <20211222105548.356852-1-cohuck@redhat.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
MAINTAINERS | 85 ++++++++++++++++++++++++++++++++++++++++++++++-------
|
||||||
|
1 file changed, 74 insertions(+), 11 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/MAINTAINERS b/MAINTAINERS
|
||||||
|
index 7543eb4d59..b893206fc3 100644
|
||||||
|
--- a/MAINTAINERS
|
||||||
|
+++ b/MAINTAINERS
|
||||||
|
@@ -297,7 +297,6 @@ M: David Hildenbrand <david@redhat.com>
|
||||||
|
S: Maintained
|
||||||
|
F: target/s390x/
|
||||||
|
F: target/s390x/tcg
|
||||||
|
-F: target/s390x/cpu_models_*.[ch]
|
||||||
|
F: hw/s390x/
|
||||||
|
F: disas/s390.c
|
||||||
|
F: tests/tcg/s390x/
|
||||||
|
@@ -396,16 +395,10 @@ M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
M: Christian Borntraeger <borntraeger@de.ibm.com>
|
||||||
|
S: Supported
|
||||||
|
F: target/s390x/kvm/
|
||||||
|
-F: target/s390x/ioinst.[ch]
|
||||||
|
F: target/s390x/machine.c
|
||||||
|
F: target/s390x/sigp.c
|
||||||
|
-F: target/s390x/cpu_features*.[ch]
|
||||||
|
-F: target/s390x/cpu_models.[ch]
|
||||||
|
F: hw/s390x/pv.c
|
||||||
|
F: include/hw/s390x/pv.h
|
||||||
|
-F: hw/intc/s390_flic.c
|
||||||
|
-F: hw/intc/s390_flic_kvm.c
|
||||||
|
-F: include/hw/s390x/s390_flic.h
|
||||||
|
F: gdb-xml/s390*.xml
|
||||||
|
T: git https://github.com/borntraeger/qemu.git s390-next
|
||||||
|
L: qemu-s390x@nongnu.org
|
||||||
|
@@ -1529,12 +1522,8 @@ S390 Virtio-ccw
|
||||||
|
M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
M: Christian Borntraeger <borntraeger@de.ibm.com>
|
||||||
|
S: Supported
|
||||||
|
-F: hw/char/sclp*.[hc]
|
||||||
|
-F: hw/char/terminal3270.c
|
||||||
|
F: hw/s390x/
|
||||||
|
F: include/hw/s390x/
|
||||||
|
-F: hw/watchdog/wdt_diag288.c
|
||||||
|
-F: include/hw/watchdog/wdt_diag288.h
|
||||||
|
F: configs/devices/s390x-softmmu/default.mak
|
||||||
|
F: tests/avocado/machine_s390_ccw_virtio.py
|
||||||
|
T: git https://github.com/borntraeger/qemu.git s390-next
|
||||||
|
@@ -1559,6 +1548,37 @@ F: hw/s390x/s390-pci*
|
||||||
|
F: include/hw/s390x/s390-pci*
|
||||||
|
L: qemu-s390x@nongnu.org
|
||||||
|
|
||||||
|
+S390 channel subsystem
|
||||||
|
+M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
+M: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
+S: Supported
|
||||||
|
+F: hw/s390x/ccw-device.[ch]
|
||||||
|
+F: hw/s390x/css.c
|
||||||
|
+F: hw/s390x/css-bridge.c
|
||||||
|
+F: include/hw/s390x/css.h
|
||||||
|
+F: include/hw/s390x/css-bridge.h
|
||||||
|
+F: include/hw/s390x/ioinst.h
|
||||||
|
+F: target/s390x/ioinst.c
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
+S390 CPU models
|
||||||
|
+M: David Hildenbrand <david@redhat.com>
|
||||||
|
+S: Maintained
|
||||||
|
+F: target/s390x/cpu_features*.[ch]
|
||||||
|
+F: target/s390x/cpu_models.[ch]
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
+S390 SCLP-backed devices
|
||||||
|
+M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
+M: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
+S: Supported
|
||||||
|
+F: include/hw/s390x/event-facility.h
|
||||||
|
+F: include/hw/s390x/sclp.h
|
||||||
|
+F: hw/char/sclp*.[hc]
|
||||||
|
+F: hw/s390x/event-facility.c
|
||||||
|
+F: hw/s390x/sclp*.c
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
X86 Machines
|
||||||
|
------------
|
||||||
|
PC
|
||||||
|
@@ -1956,6 +1976,7 @@ M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
S: Supported
|
||||||
|
F: hw/s390x/virtio-ccw*.[hc]
|
||||||
|
F: hw/s390x/vhost-vsock-ccw.c
|
||||||
|
+F: hw/s390x/vhost-user-fs-ccw.c
|
||||||
|
T: git https://gitlab.com/cohuck/qemu.git s390-next
|
||||||
|
T: git https://github.com/borntraeger/qemu.git s390-next
|
||||||
|
L: qemu-s390x@nongnu.org
|
||||||
|
@@ -2294,6 +2315,48 @@ F: hw/timer/mips_gictimer.c
|
||||||
|
F: include/hw/intc/mips_gic.h
|
||||||
|
F: include/hw/timer/mips_gictimer.h
|
||||||
|
|
||||||
|
+S390 3270 device
|
||||||
|
+M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
+M: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
+S: Odd fixes
|
||||||
|
+F: include/hw/s390x/3270-ccw.h
|
||||||
|
+F: hw/char/terminal3270.c
|
||||||
|
+F: hw/s390x/3270-ccw.c
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
+S390 diag 288 watchdog
|
||||||
|
+M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
+M: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
+S: Supported
|
||||||
|
+F: hw/watchdog/wdt_diag288.c
|
||||||
|
+F: include/hw/watchdog/wdt_diag288.h
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
+S390 storage key device
|
||||||
|
+M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
+M: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
+S: Supported
|
||||||
|
+F: hw/s390x/storage-keys.h
|
||||||
|
+F: hw/390x/s390-skeys*.c
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
+S390 storage attribute device
|
||||||
|
+M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
+M: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
+S: Supported
|
||||||
|
+F: hw/s390x/storage-attributes.h
|
||||||
|
+F: hw/s390/s390-stattrib*.c
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
+S390 floating interrupt controller
|
||||||
|
+M: Halil Pasic <pasic@linux.ibm.com>
|
||||||
|
+M: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
+M: David Hildenbrand <david@redhat.com>
|
||||||
|
+S: Supported
|
||||||
|
+F: hw/intc/s390_flic*.c
|
||||||
|
+F: include/hw/s390x/s390_flic.h
|
||||||
|
+L: qemu-s390x@nongnu.org
|
||||||
|
+
|
||||||
|
Subsystems
|
||||||
|
----------
|
||||||
|
Overall Audio backends
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,105 @@
|
|||||||
|
From 939c75ab92ac608893cad0e46f55527950518a57 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
Date: Tue, 5 Mar 2024 11:36:15 -0500
|
||||||
|
Subject: [PATCH 1/3] glib-compat: Introduce g_memdup2() wrapper
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-MergeRequest: 353: ui/clipboard: mark type as not available when there is no data
|
||||||
|
RH-Jira: RHEL-19628
|
||||||
|
RH-Acked-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
RH-Acked-by: Gerd Hoffmann <None>
|
||||||
|
RH-Commit: [1/2] f401c63303ef558bfcbb36e4c8fcc8bf2b1c3eb4 (redhat/rhel/src/qemu-kvm/jons-qemu-kvm-2)
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-19628
|
||||||
|
CVE: CVE-2023-6683
|
||||||
|
Upstream: Merged
|
||||||
|
|
||||||
|
commit 2c674fada72079583a3f2cc1790b16a0259c4fa0
|
||||||
|
Author: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
Date: Fri Sep 3 19:44:44 2021 +0200
|
||||||
|
|
||||||
|
glib-compat: Introduce g_memdup2() wrapper
|
||||||
|
When experimenting raising GLIB_VERSION_MIN_REQUIRED to 2.68
|
||||||
|
(Fedora 34 provides GLib 2.68.1) we get:
|
||||||
|
|
||||||
|
hw/virtio/virtio-crypto.c:245:24: error: 'g_memdup' is deprecated: Use 'g_memdup2' instead [-Werror,-Wdeprecated-declarations]
|
||||||
|
...
|
||||||
|
|
||||||
|
g_memdup() has been updated by g_memdup2() to fix eventual security
|
||||||
|
issues (size argument is 32-bit and could be truncated / wrapping).
|
||||||
|
GLib recommends to copy their static inline version of g_memdup2():
|
||||||
|
https://discourse.gnome.org/t/port-your-module-from-g-memdup-to-g-memdup2-now/5538
|
||||||
|
|
||||||
|
Our glib-compat.h provides a comment explaining how to deal with
|
||||||
|
these deprecated declarations (see commit e71e8cc0355
|
||||||
|
"glib: enforce the minimum required version and warn about old APIs").
|
||||||
|
|
||||||
|
Following this comment suggestion, implement the g_memdup2_qemu()
|
||||||
|
wrapper to g_memdup2(), and use the safer equivalent inlined when
|
||||||
|
we are using pre-2.68 GLib.
|
||||||
|
|
||||||
|
Reported-by: Eric Blake <eblake@redhat.com>
|
||||||
|
Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>
|
||||||
|
Reviewed-by: Eric Blake <eblake@redhat.com>
|
||||||
|
Message-Id: <20210903174510.751630-3-philmd@redhat.com>
|
||||||
|
Signed-off-by: Laurent Vivier <laurent@vivier.eu>
|
||||||
|
|
||||||
|
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
---
|
||||||
|
include/glib-compat.h | 37 +++++++++++++++++++++++++++++++++++++
|
||||||
|
1 file changed, 37 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/include/glib-compat.h b/include/glib-compat.h
|
||||||
|
index 9e95c888f5..8d01a8c01f 100644
|
||||||
|
--- a/include/glib-compat.h
|
||||||
|
+++ b/include/glib-compat.h
|
||||||
|
@@ -68,6 +68,43 @@
|
||||||
|
* without generating warnings.
|
||||||
|
*/
|
||||||
|
|
||||||
|
+/*
|
||||||
|
+ * g_memdup2_qemu:
|
||||||
|
+ * @mem: (nullable): the memory to copy.
|
||||||
|
+ * @byte_size: the number of bytes to copy.
|
||||||
|
+ *
|
||||||
|
+ * Allocates @byte_size bytes of memory, and copies @byte_size bytes into it
|
||||||
|
+ * from @mem. If @mem is %NULL it returns %NULL.
|
||||||
|
+ *
|
||||||
|
+ * This replaces g_memdup(), which was prone to integer overflows when
|
||||||
|
+ * converting the argument from a #gsize to a #guint.
|
||||||
|
+ *
|
||||||
|
+ * This static inline version is a backport of the new public API from
|
||||||
|
+ * GLib 2.68, kept internal to GLib for backport to older stable releases.
|
||||||
|
+ * See https://gitlab.gnome.org/GNOME/glib/-/issues/2319.
|
||||||
|
+ *
|
||||||
|
+ * Returns: (nullable): a pointer to the newly-allocated copy of the memory,
|
||||||
|
+ * or %NULL if @mem is %NULL.
|
||||||
|
+ */
|
||||||
|
+static inline gpointer g_memdup2_qemu(gconstpointer mem, gsize byte_size)
|
||||||
|
+{
|
||||||
|
+#if GLIB_CHECK_VERSION(2, 68, 0)
|
||||||
|
+ return g_memdup2(mem, byte_size);
|
||||||
|
+#else
|
||||||
|
+ gpointer new_mem;
|
||||||
|
+
|
||||||
|
+ if (mem && byte_size != 0) {
|
||||||
|
+ new_mem = g_malloc(byte_size);
|
||||||
|
+ memcpy(new_mem, mem, byte_size);
|
||||||
|
+ } else {
|
||||||
|
+ new_mem = NULL;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ return new_mem;
|
||||||
|
+#endif
|
||||||
|
+}
|
||||||
|
+#define g_memdup2(m, s) g_memdup2_qemu(m, s)
|
||||||
|
+
|
||||||
|
#if defined(G_OS_UNIX)
|
||||||
|
/*
|
||||||
|
* Note: The fallback implementation is not MT-safe, and it returns a copy of
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,119 @@
|
|||||||
|
From 4f6f881de10e31cac4636d5fde4b7ed4c8affadb Mon Sep 17 00:00:00 2001
|
||||||
|
From: Eric Auger <eric.auger@redhat.com>
|
||||||
|
Date: Thu, 4 Jan 2024 12:02:31 +0100
|
||||||
|
Subject: [PATCH 3/3] hw/arm/virt: Do not load efi-virtio.rom for all
|
||||||
|
virtio-net-pci variants
|
||||||
|
|
||||||
|
RH-Author: Eric Auger <eric.auger@redhat.com>
|
||||||
|
RH-MergeRequest: 344: hw/arm/virt: Do not load efi-virtio.rom for any virtio-net-pci variants
|
||||||
|
RH-Jira: RHEL-14870
|
||||||
|
RH-Acked-by: Gerd Hoffmann <None>
|
||||||
|
RH-Acked-by: Sebastian Ott <None>
|
||||||
|
RH-Commit: [1/1] ffeaa78ad0a1cff5b49009dfb32d25e5cadc0e05
|
||||||
|
|
||||||
|
Upstream: RHEL-only
|
||||||
|
Brew: http://brewweb.engineering.redhat.com/brew/taskinfo?taskID=5785640
|
||||||
|
|
||||||
|
Currently arm_rhel_compat just sets the romfile to "" for
|
||||||
|
virtio-net-pci and not for transitional and non transitional
|
||||||
|
variants. However, on aarch64 RHEL, efi-virtio.rom is not
|
||||||
|
shipped so transitional and non-transitional variants cannot
|
||||||
|
be used and the following error is obeserved:
|
||||||
|
|
||||||
|
"Could not open option rom 'efi-virtio.rom': No such file or directory"
|
||||||
|
|
||||||
|
In practice, we do not need any rom file for those virtio-net-pci
|
||||||
|
variants either because edk2 already brings the full functionality.
|
||||||
|
|
||||||
|
So let's change the applied compat to cover all the variants. While
|
||||||
|
at it also change the way arm_rhel_compat is applied. Instead of
|
||||||
|
applying it from the latest _virt_options(), which is error prone
|
||||||
|
when upgrading the machine type, let's apply it before calling
|
||||||
|
*virt_options in the non abstract machine class. That way the setting
|
||||||
|
will apply to any machine type without any need to add it in any
|
||||||
|
future machine types.
|
||||||
|
|
||||||
|
We don't really care keeping non void romfiles for transitional and
|
||||||
|
non transitional devices on previous machine types because this
|
||||||
|
was not working anyway.
|
||||||
|
|
||||||
|
Signed-off-by: Eric Auger <eric.auger@redhat.com>
|
||||||
|
---
|
||||||
|
hw/arm/virt.c | 42 ++++++++++++++++++++++++++++--------------
|
||||||
|
1 file changed, 28 insertions(+), 14 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/hw/arm/virt.c b/hw/arm/virt.c
|
||||||
|
index dbf0a6d62f..46c72a9611 100644
|
||||||
|
--- a/hw/arm/virt.c
|
||||||
|
+++ b/hw/arm/virt.c
|
||||||
|
@@ -108,11 +108,39 @@
|
||||||
|
DEFINE_VIRT_MACHINE_LATEST(major, minor, false)
|
||||||
|
#endif /* disabled for RHEL */
|
||||||
|
|
||||||
|
+/*
|
||||||
|
+ * This variable is for changes to properties that are RHEL specific,
|
||||||
|
+ * different to the current upstream and to be applied to the latest
|
||||||
|
+ * machine type. They may be overriden by older machine compats.
|
||||||
|
+ *
|
||||||
|
+ * virtio-net-pci variant romfiles are not needed because edk2 does
|
||||||
|
+ * fully support the pxe boot. Besides virtio romfiles are not shipped
|
||||||
|
+ * on rhel/aarch64.
|
||||||
|
+ */
|
||||||
|
+GlobalProperty arm_rhel_compat[] = {
|
||||||
|
+ {"virtio-net-pci", "romfile", "" },
|
||||||
|
+ {"virtio-net-pci-transitional", "romfile", "" },
|
||||||
|
+ {"virtio-net-pci-non-transitional", "romfile", "" },
|
||||||
|
+};
|
||||||
|
+const size_t arm_rhel_compat_len = G_N_ELEMENTS(arm_rhel_compat);
|
||||||
|
+
|
||||||
|
+/*
|
||||||
|
+ * This cannot be called from the rhel_virt_class_init() because
|
||||||
|
+ * TYPE_RHEL_MACHINE is abstract and mc->compat_props g_ptr_array_new()
|
||||||
|
+ * only is called on virt-rhelm.n.s non abstract class init.
|
||||||
|
+ */
|
||||||
|
+static void arm_rhel_compat_set(MachineClass *mc)
|
||||||
|
+{
|
||||||
|
+ compat_props_add(mc->compat_props, arm_rhel_compat,
|
||||||
|
+ arm_rhel_compat_len);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
#define DEFINE_RHEL_MACHINE_LATEST(m, n, s, latest) \
|
||||||
|
static void rhel##m##n##s##_virt_class_init(ObjectClass *oc, \
|
||||||
|
void *data) \
|
||||||
|
{ \
|
||||||
|
MachineClass *mc = MACHINE_CLASS(oc); \
|
||||||
|
+ arm_rhel_compat_set(mc); \
|
||||||
|
rhel##m##n##s##_virt_options(mc); \
|
||||||
|
mc->desc = "RHEL " # m "." # n "." # s " ARM Virtual Machine"; \
|
||||||
|
if (latest) { \
|
||||||
|
@@ -136,19 +164,6 @@
|
||||||
|
#define DEFINE_RHEL_MACHINE(major, minor, subminor) \
|
||||||
|
DEFINE_RHEL_MACHINE_LATEST(major, minor, subminor, false)
|
||||||
|
|
||||||
|
-/* This variable is for changes to properties that are RHEL specific,
|
||||||
|
- * different to the current upstream and to be applied to the latest
|
||||||
|
- * machine type.
|
||||||
|
- */
|
||||||
|
-GlobalProperty arm_rhel_compat[] = {
|
||||||
|
- {
|
||||||
|
- .driver = "virtio-net-pci",
|
||||||
|
- .property = "romfile",
|
||||||
|
- .value = "",
|
||||||
|
- },
|
||||||
|
-};
|
||||||
|
-const size_t arm_rhel_compat_len = G_N_ELEMENTS(arm_rhel_compat);
|
||||||
|
-
|
||||||
|
/* Number of external interrupt lines to configure the GIC with */
|
||||||
|
#define NUM_IRQS 256
|
||||||
|
|
||||||
|
@@ -3240,7 +3255,6 @@ type_init(rhel_machine_init);
|
||||||
|
|
||||||
|
static void rhel860_virt_options(MachineClass *mc)
|
||||||
|
{
|
||||||
|
- compat_props_add(mc->compat_props, arm_rhel_compat, arm_rhel_compat_len);
|
||||||
|
}
|
||||||
|
DEFINE_RHEL_MACHINE_AS_LATEST(8, 6, 0)
|
||||||
|
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,128 @@
|
|||||||
|
From 2308abf0c5da2fe35a0721318c31d22e077663c2 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
Date: Fri, 24 Nov 2023 12:17:11 -0500
|
||||||
|
Subject: [PATCH 1/2] hw/ide: reset: cancel async DMA operation before
|
||||||
|
resetting state
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-MergeRequest: 335: hw/ide: reset: cancel async DMA operation before resetting state
|
||||||
|
RH-Jira: RHEL-15437
|
||||||
|
RH-Acked-by: Hanna Czenczek <hreitz@redhat.com>
|
||||||
|
RH-Acked-by: Paolo Bonzini <pbonzini@redhat.com>
|
||||||
|
RH-Commit: [1/2] b0f5f7f888559a210f1c6b3c545e337dbbc9cf22 (redhat/rhel/src/qemu-kvm/jons-qemu-kvm-2)
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-15437
|
||||||
|
CVE: CVE-2023-5088
|
||||||
|
Upstream: Merged
|
||||||
|
|
||||||
|
commit 7d7512019fc40c577e2bdd61f114f31a9eb84a8e
|
||||||
|
Author: Fiona Ebner <f.ebner@proxmox.com>
|
||||||
|
Date: Wed Sep 6 15:09:21 2023 +0200
|
||||||
|
|
||||||
|
hw/ide: reset: cancel async DMA operation before resetting state
|
||||||
|
|
||||||
|
If there is a pending DMA operation during ide_bus_reset(), the fact
|
||||||
|
that the IDEState is already reset before the operation is canceled
|
||||||
|
can be problematic. In particular, ide_dma_cb() might be called and
|
||||||
|
then use the reset IDEState which contains the signature after the
|
||||||
|
reset. When used to construct the IO operation this leads to
|
||||||
|
ide_get_sector() returning 0 and nsector being 1. This is particularly
|
||||||
|
bad, because a write command will thus destroy the first sector which
|
||||||
|
often contains a partition table or similar.
|
||||||
|
|
||||||
|
Traces showing the unsolicited write happening with IDEState
|
||||||
|
0x5595af6949d0 being used after reset:
|
||||||
|
|
||||||
|
> ahci_port_write ahci(0x5595af6923f0)[0]: port write [reg:PxSCTL] @ 0x2c: 0x00000300
|
||||||
|
> ahci_reset_port ahci(0x5595af6923f0)[0]: reset port
|
||||||
|
> ide_reset IDEstate 0x5595af6949d0
|
||||||
|
> ide_reset IDEstate 0x5595af694da8
|
||||||
|
> ide_bus_reset_aio aio_cancel
|
||||||
|
> dma_aio_cancel dbs=0x7f64600089a0
|
||||||
|
> dma_blk_cb dbs=0x7f64600089a0 ret=0
|
||||||
|
> dma_complete dbs=0x7f64600089a0 ret=0 cb=0x5595acd40b30
|
||||||
|
> ahci_populate_sglist ahci(0x5595af6923f0)[0]
|
||||||
|
> ahci_dma_prepare_buf ahci(0x5595af6923f0)[0]: prepare buf limit=512 prepared=512
|
||||||
|
> ide_dma_cb IDEState 0x5595af6949d0; sector_num=0 n=1 cmd=DMA WRITE
|
||||||
|
> dma_blk_io dbs=0x7f6420802010 bs=0x5595ae2c6c30 offset=0 to_dev=1
|
||||||
|
> dma_blk_cb dbs=0x7f6420802010 ret=0
|
||||||
|
|
||||||
|
> (gdb) p *qiov
|
||||||
|
> $11 = {iov = 0x7f647c76d840, niov = 1, {{nalloc = 1, local_iov = {iov_base = 0x0,
|
||||||
|
> iov_len = 512}}, {__pad = "\001\000\000\000\000\000\000\000\000\000\000",
|
||||||
|
> size = 512}}}
|
||||||
|
> (gdb) bt
|
||||||
|
> #0 blk_aio_pwritev (blk=0x5595ae2c6c30, offset=0, qiov=0x7f6420802070, flags=0,
|
||||||
|
> cb=0x5595ace6f0b0 <dma_blk_cb>, opaque=0x7f6420802010)
|
||||||
|
> at ../block/block-backend.c:1682
|
||||||
|
> #1 0x00005595ace6f185 in dma_blk_cb (opaque=0x7f6420802010, ret=<optimized out>)
|
||||||
|
> at ../softmmu/dma-helpers.c:179
|
||||||
|
> #2 0x00005595ace6f778 in dma_blk_io (ctx=0x5595ae0609f0,
|
||||||
|
> sg=sg@entry=0x5595af694d00, offset=offset@entry=0, align=align@entry=512,
|
||||||
|
> io_func=io_func@entry=0x5595ace6ee30 <dma_blk_write_io_func>,
|
||||||
|
> io_func_opaque=io_func_opaque@entry=0x5595ae2c6c30,
|
||||||
|
> cb=0x5595acd40b30 <ide_dma_cb>, opaque=0x5595af6949d0,
|
||||||
|
> dir=DMA_DIRECTION_TO_DEVICE) at ../softmmu/dma-helpers.c:244
|
||||||
|
> #3 0x00005595ace6f90a in dma_blk_write (blk=0x5595ae2c6c30,
|
||||||
|
> sg=sg@entry=0x5595af694d00, offset=offset@entry=0, align=align@entry=512,
|
||||||
|
> cb=cb@entry=0x5595acd40b30 <ide_dma_cb>, opaque=opaque@entry=0x5595af6949d0)
|
||||||
|
> at ../softmmu/dma-helpers.c:280
|
||||||
|
> #4 0x00005595acd40e18 in ide_dma_cb (opaque=0x5595af6949d0, ret=<optimized out>)
|
||||||
|
> at ../hw/ide/core.c:953
|
||||||
|
> #5 0x00005595ace6f319 in dma_complete (ret=0, dbs=0x7f64600089a0)
|
||||||
|
> at ../softmmu/dma-helpers.c:107
|
||||||
|
> #6 dma_blk_cb (opaque=0x7f64600089a0, ret=0) at ../softmmu/dma-helpers.c:127
|
||||||
|
> #7 0x00005595ad12227d in blk_aio_complete (acb=0x7f6460005b10)
|
||||||
|
> at ../block/block-backend.c:1527
|
||||||
|
> #8 blk_aio_complete (acb=0x7f6460005b10) at ../block/block-backend.c:1524
|
||||||
|
> #9 blk_aio_write_entry (opaque=0x7f6460005b10) at ../block/block-backend.c:1594
|
||||||
|
> #10 0x00005595ad258cfb in coroutine_trampoline (i0=<optimized out>,
|
||||||
|
> i1=<optimized out>) at ../util/coroutine-ucontext.c:177
|
||||||
|
|
||||||
|
Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
|
||||||
|
Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
Tested-by: simon.rowe@nutanix.com
|
||||||
|
Message-ID: <20230906130922.142845-1-f.ebner@proxmox.com>
|
||||||
|
|
||||||
|
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
---
|
||||||
|
hw/ide/core.c | 14 +++++++-------
|
||||||
|
1 file changed, 7 insertions(+), 7 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/hw/ide/core.c b/hw/ide/core.c
|
||||||
|
index 05a32d0a99..fd50c123e8 100644
|
||||||
|
--- a/hw/ide/core.c
|
||||||
|
+++ b/hw/ide/core.c
|
||||||
|
@@ -2456,19 +2456,19 @@ static void ide_dummy_transfer_stop(IDEState *s)
|
||||||
|
|
||||||
|
void ide_bus_reset(IDEBus *bus)
|
||||||
|
{
|
||||||
|
- bus->unit = 0;
|
||||||
|
- bus->cmd = 0;
|
||||||
|
- ide_reset(&bus->ifs[0]);
|
||||||
|
- ide_reset(&bus->ifs[1]);
|
||||||
|
- ide_clear_hob(bus);
|
||||||
|
-
|
||||||
|
- /* pending async DMA */
|
||||||
|
+ /* pending async DMA - needs the IDEState before it is reset */
|
||||||
|
if (bus->dma->aiocb) {
|
||||||
|
trace_ide_bus_reset_aio();
|
||||||
|
blk_aio_cancel(bus->dma->aiocb);
|
||||||
|
bus->dma->aiocb = NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
+ bus->unit = 0;
|
||||||
|
+ bus->cmd = 0;
|
||||||
|
+ ide_reset(&bus->ifs[0]);
|
||||||
|
+ ide_reset(&bus->ifs[1]);
|
||||||
|
+ ide_clear_hob(bus);
|
||||||
|
+
|
||||||
|
/* reset dma provider too */
|
||||||
|
if (bus->dma->ops->reset) {
|
||||||
|
bus->dma->ops->reset(bus->dma);
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,283 @@
|
|||||||
|
From 59f02a421ecdba6e856597367020926fc0cb5177 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Thomas Huth <thuth@redhat.com>
|
||||||
|
Date: Mon, 15 Jan 2024 18:52:30 +0100
|
||||||
|
Subject: [PATCH 4/5] hw/s390x: Move KVM specific PV from hw/ to
|
||||||
|
target/s390x/kvm/
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 348: s390x: Provide some more useful information if decryption of a PV image fails
|
||||||
|
RH-Jira: RHEL-18214
|
||||||
|
RH-Acked-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [4/5] f6095bfdb89268007a0741665284955db4752d46
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-18214
|
||||||
|
|
||||||
|
commit f5f9c6ea11bc807664fdeb9354915c2c9cdcbd89
|
||||||
|
Author: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
Date: Sat Jun 24 22:06:44 2023 +0200
|
||||||
|
|
||||||
|
hw/s390x: Move KVM specific PV from hw/ to target/s390x/kvm/
|
||||||
|
|
||||||
|
Protected Virtualization (PV) is not a real hardware device:
|
||||||
|
it is a feature of the firmware on s390x that is exposed to
|
||||||
|
userspace via the KVM interface.
|
||||||
|
|
||||||
|
Move the pv.c/pv.h files to target/s390x/kvm/ to make this clearer.
|
||||||
|
|
||||||
|
Suggested-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
Message-Id: <20230624200644.23931-1-philmd@linaro.org>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Conflicts:
|
||||||
|
hw/s390x/ipl.c
|
||||||
|
hw/s390x/s390-virtio-ccw.c
|
||||||
|
target/s390x/diag.c
|
||||||
|
(simple contextual conflict due to differce with #include statements)
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
MAINTAINERS | 2 --
|
||||||
|
hw/s390x/ipl.c | 2 +-
|
||||||
|
hw/s390x/meson.build | 1 -
|
||||||
|
hw/s390x/s390-pci-kvm.c | 2 +-
|
||||||
|
hw/s390x/s390-virtio-ccw.c | 2 +-
|
||||||
|
hw/s390x/tod-kvm.c | 2 +-
|
||||||
|
target/s390x/arch_dump.c | 2 +-
|
||||||
|
target/s390x/cpu-sysemu.c | 2 +-
|
||||||
|
target/s390x/cpu_features.c | 2 +-
|
||||||
|
target/s390x/cpu_models.c | 2 +-
|
||||||
|
target/s390x/diag.c | 2 +-
|
||||||
|
target/s390x/helper.c | 2 +-
|
||||||
|
target/s390x/ioinst.c | 2 +-
|
||||||
|
target/s390x/kvm/kvm.c | 2 +-
|
||||||
|
target/s390x/kvm/meson.build | 1 +
|
||||||
|
{hw/s390x => target/s390x/kvm}/pv.c | 2 +-
|
||||||
|
{include/hw/s390x => target/s390x/kvm}/pv.h | 0
|
||||||
|
17 files changed, 14 insertions(+), 16 deletions(-)
|
||||||
|
rename {hw/s390x => target/s390x/kvm}/pv.c (99%)
|
||||||
|
rename {include/hw/s390x => target/s390x/kvm}/pv.h (100%)
|
||||||
|
|
||||||
|
diff --git a/MAINTAINERS b/MAINTAINERS
|
||||||
|
index b893206fc3..d74ca51154 100644
|
||||||
|
--- a/MAINTAINERS
|
||||||
|
+++ b/MAINTAINERS
|
||||||
|
@@ -397,8 +397,6 @@ S: Supported
|
||||||
|
F: target/s390x/kvm/
|
||||||
|
F: target/s390x/machine.c
|
||||||
|
F: target/s390x/sigp.c
|
||||||
|
-F: hw/s390x/pv.c
|
||||||
|
-F: include/hw/s390x/pv.h
|
||||||
|
F: gdb-xml/s390*.xml
|
||||||
|
T: git https://github.com/borntraeger/qemu.git s390-next
|
||||||
|
L: qemu-s390x@nongnu.org
|
||||||
|
diff --git a/hw/s390x/ipl.c b/hw/s390x/ipl.c
|
||||||
|
index 9051d8652d..c25e247426 100644
|
||||||
|
--- a/hw/s390x/ipl.c
|
||||||
|
+++ b/hw/s390x/ipl.c
|
||||||
|
@@ -27,7 +27,7 @@
|
||||||
|
#include "hw/s390x/vfio-ccw.h"
|
||||||
|
#include "hw/s390x/css.h"
|
||||||
|
#include "hw/s390x/ebcdic.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#include "ipl.h"
|
||||||
|
#include "qemu/error-report.h"
|
||||||
|
#include "qemu/config-file.h"
|
||||||
|
diff --git a/hw/s390x/meson.build b/hw/s390x/meson.build
|
||||||
|
index 6e6e47fcda..bb3b42f613 100644
|
||||||
|
--- a/hw/s390x/meson.build
|
||||||
|
+++ b/hw/s390x/meson.build
|
||||||
|
@@ -22,7 +22,6 @@ s390x_ss.add(when: 'CONFIG_KVM', if_true: files(
|
||||||
|
'tod-kvm.c',
|
||||||
|
's390-skeys-kvm.c',
|
||||||
|
's390-stattrib-kvm.c',
|
||||||
|
- 'pv.c',
|
||||||
|
's390-pci-kvm.c',
|
||||||
|
))
|
||||||
|
s390x_ss.add(when: 'CONFIG_TCG', if_true: files(
|
||||||
|
diff --git a/hw/s390x/s390-pci-kvm.c b/hw/s390x/s390-pci-kvm.c
|
||||||
|
index 9134fe185f..ff41e4106d 100644
|
||||||
|
--- a/hw/s390x/s390-pci-kvm.c
|
||||||
|
+++ b/hw/s390x/s390-pci-kvm.c
|
||||||
|
@@ -14,7 +14,7 @@
|
||||||
|
#include <linux/kvm.h>
|
||||||
|
|
||||||
|
#include "kvm/kvm_s390x.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#include "hw/s390x/s390-pci-bus.h"
|
||||||
|
#include "hw/s390x/s390-pci-kvm.h"
|
||||||
|
#include "hw/s390x/s390-pci-inst.h"
|
||||||
|
diff --git a/hw/s390x/s390-virtio-ccw.c b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
index 17146469ee..7bfa5b4e8f 100644
|
||||||
|
--- a/hw/s390x/s390-virtio-ccw.c
|
||||||
|
+++ b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
@@ -40,7 +40,7 @@
|
||||||
|
#include "hw/qdev-properties.h"
|
||||||
|
#include "hw/s390x/tod.h"
|
||||||
|
#include "sysemu/sysemu.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#include "migration/blocker.h"
|
||||||
|
#include "qapi/visitor.h"
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/tod-kvm.c b/hw/s390x/tod-kvm.c
|
||||||
|
index c804c979b5..9776cda50a 100644
|
||||||
|
--- a/hw/s390x/tod-kvm.c
|
||||||
|
+++ b/hw/s390x/tod-kvm.c
|
||||||
|
@@ -13,7 +13,7 @@
|
||||||
|
#include "qemu/module.h"
|
||||||
|
#include "sysemu/runstate.h"
|
||||||
|
#include "hw/s390x/tod.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#include "kvm/kvm_s390x.h"
|
||||||
|
|
||||||
|
static void kvm_s390_get_tod_raw(S390TOD *tod, Error **errp)
|
||||||
|
diff --git a/target/s390x/arch_dump.c b/target/s390x/arch_dump.c
|
||||||
|
index 3b1f178dc3..2554238c16 100644
|
||||||
|
--- a/target/s390x/arch_dump.c
|
||||||
|
+++ b/target/s390x/arch_dump.c
|
||||||
|
@@ -17,8 +17,8 @@
|
||||||
|
#include "s390x-internal.h"
|
||||||
|
#include "elf.h"
|
||||||
|
#include "sysemu/dump.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
#include "kvm/kvm_s390x.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
|
||||||
|
struct S390xUserRegsStruct {
|
||||||
|
uint64_t psw[2];
|
||||||
|
diff --git a/target/s390x/cpu-sysemu.c b/target/s390x/cpu-sysemu.c
|
||||||
|
index 5471e01ee8..547287a949 100644
|
||||||
|
--- a/target/s390x/cpu-sysemu.c
|
||||||
|
+++ b/target/s390x/cpu-sysemu.c
|
||||||
|
@@ -32,7 +32,7 @@
|
||||||
|
#include "qapi/qapi-visit-run-state.h"
|
||||||
|
#include "sysemu/hw_accel.h"
|
||||||
|
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#include "hw/boards.h"
|
||||||
|
#include "sysemu/sysemu.h"
|
||||||
|
#include "sysemu/tcg.h"
|
||||||
|
diff --git a/target/s390x/cpu_features.c b/target/s390x/cpu_features.c
|
||||||
|
index 2e4e11d264..ebb155ce1c 100644
|
||||||
|
--- a/target/s390x/cpu_features.c
|
||||||
|
+++ b/target/s390x/cpu_features.c
|
||||||
|
@@ -15,7 +15,7 @@
|
||||||
|
#include "qemu/module.h"
|
||||||
|
#include "cpu_features.h"
|
||||||
|
#ifndef CONFIG_USER_ONLY
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#define DEF_FEAT(_FEAT, _NAME, _TYPE, _BIT, _DESC) \
|
||||||
|
diff --git a/target/s390x/cpu_models.c b/target/s390x/cpu_models.c
|
||||||
|
index e7c586c76e..100c5e7b3a 100644
|
||||||
|
--- a/target/s390x/cpu_models.c
|
||||||
|
+++ b/target/s390x/cpu_models.c
|
||||||
|
@@ -22,7 +22,7 @@
|
||||||
|
#include "qemu/qemu-print.h"
|
||||||
|
#ifndef CONFIG_USER_ONLY
|
||||||
|
#include "sysemu/sysemu.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#define CPUDEF_INIT(_type, _gen, _ec_ga, _mha_pow, _hmfai, _name, _desc) \
|
||||||
|
diff --git a/target/s390x/diag.c b/target/s390x/diag.c
|
||||||
|
index 76b01dcd68..7c8714cc27 100644
|
||||||
|
--- a/target/s390x/diag.c
|
||||||
|
+++ b/target/s390x/diag.c
|
||||||
|
@@ -19,9 +19,9 @@
|
||||||
|
#include "sysemu/cpus.h"
|
||||||
|
#include "hw/s390x/ipl.h"
|
||||||
|
#include "hw/s390x/s390-virtio-ccw.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
#include "sysemu/kvm.h"
|
||||||
|
#include "kvm/kvm_s390x.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
|
||||||
|
int handle_diag_288(CPUS390XState *env, uint64_t r1, uint64_t r3)
|
||||||
|
{
|
||||||
|
diff --git a/target/s390x/helper.c b/target/s390x/helper.c
|
||||||
|
index 6e35473c7f..860977126a 100644
|
||||||
|
--- a/target/s390x/helper.c
|
||||||
|
+++ b/target/s390x/helper.c
|
||||||
|
@@ -24,7 +24,7 @@
|
||||||
|
#include "exec/gdbstub.h"
|
||||||
|
#include "qemu/timer.h"
|
||||||
|
#include "hw/s390x/ioinst.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
#include "sysemu/hw_accel.h"
|
||||||
|
#include "sysemu/runstate.h"
|
||||||
|
#include "sysemu/tcg.h"
|
||||||
|
diff --git a/target/s390x/ioinst.c b/target/s390x/ioinst.c
|
||||||
|
index bdae5090bc..409f3e3e63 100644
|
||||||
|
--- a/target/s390x/ioinst.c
|
||||||
|
+++ b/target/s390x/ioinst.c
|
||||||
|
@@ -16,7 +16,7 @@
|
||||||
|
#include "hw/s390x/ioinst.h"
|
||||||
|
#include "trace.h"
|
||||||
|
#include "hw/s390x/s390-pci-bus.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
|
||||||
|
/* All I/O instructions but chsc use the s format */
|
||||||
|
static uint64_t get_address_from_regs(CPUS390XState *env, uint32_t ipb,
|
||||||
|
diff --git a/target/s390x/kvm/kvm.c b/target/s390x/kvm/kvm.c
|
||||||
|
index a963866ef4..6d1a6324b9 100644
|
||||||
|
--- a/target/s390x/kvm/kvm.c
|
||||||
|
+++ b/target/s390x/kvm/kvm.c
|
||||||
|
@@ -51,7 +51,7 @@
|
||||||
|
#include "exec/memattrs.h"
|
||||||
|
#include "hw/s390x/s390-virtio-ccw.h"
|
||||||
|
#include "hw/s390x/s390-virtio-hcall.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
|
||||||
|
#ifndef DEBUG_KVM
|
||||||
|
#define DEBUG_KVM 0
|
||||||
|
diff --git a/target/s390x/kvm/meson.build b/target/s390x/kvm/meson.build
|
||||||
|
index aef52b6686..739d5b9f54 100644
|
||||||
|
--- a/target/s390x/kvm/meson.build
|
||||||
|
+++ b/target/s390x/kvm/meson.build
|
||||||
|
@@ -1,5 +1,6 @@
|
||||||
|
|
||||||
|
s390x_ss.add(when: 'CONFIG_KVM', if_true: files(
|
||||||
|
+ 'pv.c',
|
||||||
|
'kvm.c'
|
||||||
|
), if_false: files(
|
||||||
|
'stubs.c'
|
||||||
|
diff --git a/hw/s390x/pv.c b/target/s390x/kvm/pv.c
|
||||||
|
similarity index 99%
|
||||||
|
rename from hw/s390x/pv.c
|
||||||
|
rename to target/s390x/kvm/pv.c
|
||||||
|
index 8a1c71436b..e14db4f41a 100644
|
||||||
|
--- a/hw/s390x/pv.c
|
||||||
|
+++ b/target/s390x/kvm/pv.c
|
||||||
|
@@ -19,9 +19,9 @@
|
||||||
|
#include "qom/object_interfaces.h"
|
||||||
|
#include "exec/confidential-guest-support.h"
|
||||||
|
#include "hw/s390x/ipl.h"
|
||||||
|
-#include "hw/s390x/pv.h"
|
||||||
|
#include "hw/s390x/sclp.h"
|
||||||
|
#include "target/s390x/kvm/kvm_s390x.h"
|
||||||
|
+#include "target/s390x/kvm/pv.h"
|
||||||
|
|
||||||
|
static bool info_valid;
|
||||||
|
static struct kvm_s390_pv_info_vm info_vm;
|
||||||
|
diff --git a/include/hw/s390x/pv.h b/target/s390x/kvm/pv.h
|
||||||
|
similarity index 100%
|
||||||
|
rename from include/hw/s390x/pv.h
|
||||||
|
rename to target/s390x/kvm/pv.h
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,100 @@
|
|||||||
|
From 053faafcf523b0ea4d841c0af8e7e26a2cddd5e8 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Thomas Huth <thuth@redhat.com>
|
||||||
|
Date: Mon, 15 Jan 2024 14:00:04 +0100
|
||||||
|
Subject: [PATCH 3/5] hw/s390x/pv: Restrict Protected Virtualization to sysemu
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 348: s390x: Provide some more useful information if decryption of a PV image fails
|
||||||
|
RH-Jira: RHEL-18214
|
||||||
|
RH-Acked-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [3/5] 17b11f9fd2b53c7d33c09a62f28cfca19b18e798
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-18214
|
||||||
|
|
||||||
|
commit 3ea7e312671686e616efa1b8caa5f5ce2d06543a
|
||||||
|
Author: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
Date: Sat Dec 17 16:24:52 2022 +0100
|
||||||
|
|
||||||
|
hw/s390x/pv: Restrict Protected Virtualization to sysemu
|
||||||
|
|
||||||
|
Protected Virtualization is irrelevant in user emulation.
|
||||||
|
|
||||||
|
Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
Message-Id: <20221217152454.96388-4-philmd@linaro.org>
|
||||||
|
Reviewed-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
target/s390x/cpu_features.c | 4 ++++
|
||||||
|
target/s390x/cpu_models.c | 4 +++-
|
||||||
|
2 files changed, 7 insertions(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/target/s390x/cpu_features.c b/target/s390x/cpu_features.c
|
||||||
|
index 5528acd082..2e4e11d264 100644
|
||||||
|
--- a/target/s390x/cpu_features.c
|
||||||
|
+++ b/target/s390x/cpu_features.c
|
||||||
|
@@ -14,7 +14,9 @@
|
||||||
|
#include "qemu/osdep.h"
|
||||||
|
#include "qemu/module.h"
|
||||||
|
#include "cpu_features.h"
|
||||||
|
+#ifndef CONFIG_USER_ONLY
|
||||||
|
#include "hw/s390x/pv.h"
|
||||||
|
+#endif
|
||||||
|
|
||||||
|
#define DEF_FEAT(_FEAT, _NAME, _TYPE, _BIT, _DESC) \
|
||||||
|
[S390_FEAT_##_FEAT] = { \
|
||||||
|
@@ -107,6 +109,7 @@ void s390_fill_feat_block(const S390FeatBitmap features, S390FeatType type,
|
||||||
|
feat = find_next_bit(features, S390_FEAT_MAX, feat + 1);
|
||||||
|
}
|
||||||
|
|
||||||
|
+#ifndef CONFIG_USER_ONLY
|
||||||
|
if (!s390_is_pv()) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
@@ -147,6 +150,7 @@ void s390_fill_feat_block(const S390FeatBitmap features, S390FeatType type,
|
||||||
|
default:
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
+#endif
|
||||||
|
}
|
||||||
|
|
||||||
|
void s390_add_from_feat_block(S390FeatBitmap features, S390FeatType type,
|
||||||
|
diff --git a/target/s390x/cpu_models.c b/target/s390x/cpu_models.c
|
||||||
|
index 454485e706..e7c586c76e 100644
|
||||||
|
--- a/target/s390x/cpu_models.c
|
||||||
|
+++ b/target/s390x/cpu_models.c
|
||||||
|
@@ -22,8 +22,8 @@
|
||||||
|
#include "qemu/qemu-print.h"
|
||||||
|
#ifndef CONFIG_USER_ONLY
|
||||||
|
#include "sysemu/sysemu.h"
|
||||||
|
-#endif
|
||||||
|
#include "hw/s390x/pv.h"
|
||||||
|
+#endif
|
||||||
|
|
||||||
|
#define CPUDEF_INIT(_type, _gen, _ec_ga, _mha_pow, _hmfai, _name, _desc) \
|
||||||
|
{ \
|
||||||
|
@@ -236,6 +236,7 @@ bool s390_has_feat(S390Feat feat)
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
+#ifndef CONFIG_USER_ONLY
|
||||||
|
if (s390_is_pv()) {
|
||||||
|
switch (feat) {
|
||||||
|
case S390_FEAT_DIAG_318:
|
||||||
|
@@ -259,6 +260,7 @@ bool s390_has_feat(S390Feat feat)
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
+#endif
|
||||||
|
return test_bit(feat, cpu->model->features);
|
||||||
|
}
|
||||||
|
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -1,101 +0,0 @@
|
|||||||
From b96215922bdc4c408f4ba5ac89db17f3855b8620 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Jon Maloy <jmaloy@redhat.com>
|
|
||||||
Date: Tue, 15 Aug 2023 00:08:55 +0000
|
|
||||||
Subject: [PATCH] io: remove io watch if TLS channel is closed during handshake
|
|
||||||
MIME-Version: 1.0
|
|
||||||
Content-Type: text/plain; charset=UTF-8
|
|
||||||
Content-Transfer-Encoding: 8bit
|
|
||||||
|
|
||||||
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
|
||||||
RH-MergeRequest: 320: io: remove io watch if TLS channel is closed during handshake
|
|
||||||
RH-Jira: RHEL-7339
|
|
||||||
RH-Acked-by: Peter Xu <peterx@redhat.com>
|
|
||||||
RH-Acked-by: Miroslav Rezanina <mrezanin@redhat.com>
|
|
||||||
RH-Commit: [1/1] c120fc5e97f76ab4729cef5e3e0e02055928849a (redhat/rhel/src/qemu-kvm/jons-qemu-kvm-2)
|
|
||||||
|
|
||||||
CVE: CVE-2023-3354
|
|
||||||
Upstream: Merged
|
|
||||||
|
|
||||||
commit 10be627d2b5ec2d6b3dce045144aa739eef678b4
|
|
||||||
Author: Daniel P. Berrangé <berrange@redhat.com>
|
|
||||||
Date: Tue Jun 20 09:45:34 2023 +0100
|
|
||||||
|
|
||||||
io: remove io watch if TLS channel is closed during handshake
|
|
||||||
|
|
||||||
The TLS handshake make take some time to complete, during which time an
|
|
||||||
I/O watch might be registered with the main loop. If the owner of the
|
|
||||||
I/O channel invokes qio_channel_close() while the handshake is waiting
|
|
||||||
to continue the I/O watch must be removed. Failing to remove it will
|
|
||||||
later trigger the completion callback which the owner is not expecting
|
|
||||||
to receive. In the case of the VNC server, this results in a SEGV as
|
|
||||||
vnc_disconnect_start() tries to shutdown a client connection that is
|
|
||||||
already gone / NULL.
|
|
||||||
|
|
||||||
CVE-2023-3354
|
|
||||||
Reported-by: jiangyegen <jiangyegen@huawei.com>
|
|
||||||
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
|
|
||||||
|
|
||||||
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
|
||||||
---
|
|
||||||
include/io/channel-tls.h | 1 +
|
|
||||||
io/channel-tls.c | 18 ++++++++++++------
|
|
||||||
2 files changed, 13 insertions(+), 6 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/include/io/channel-tls.h b/include/io/channel-tls.h
|
|
||||||
index 5672479e9e..26c67f17e2 100644
|
|
||||||
--- a/include/io/channel-tls.h
|
|
||||||
+++ b/include/io/channel-tls.h
|
|
||||||
@@ -48,6 +48,7 @@ struct QIOChannelTLS {
|
|
||||||
QIOChannel *master;
|
|
||||||
QCryptoTLSSession *session;
|
|
||||||
QIOChannelShutdown shutdown;
|
|
||||||
+ guint hs_ioc_tag;
|
|
||||||
};
|
|
||||||
|
|
||||||
/**
|
|
||||||
diff --git a/io/channel-tls.c b/io/channel-tls.c
|
|
||||||
index c730cb8ec5..bd79e78837 100644
|
|
||||||
--- a/io/channel-tls.c
|
|
||||||
+++ b/io/channel-tls.c
|
|
||||||
@@ -195,12 +195,13 @@ static void qio_channel_tls_handshake_task(QIOChannelTLS *ioc,
|
|
||||||
}
|
|
||||||
|
|
||||||
trace_qio_channel_tls_handshake_pending(ioc, status);
|
|
||||||
- qio_channel_add_watch_full(ioc->master,
|
|
||||||
- condition,
|
|
||||||
- qio_channel_tls_handshake_io,
|
|
||||||
- data,
|
|
||||||
- NULL,
|
|
||||||
- context);
|
|
||||||
+ ioc->hs_ioc_tag =
|
|
||||||
+ qio_channel_add_watch_full(ioc->master,
|
|
||||||
+ condition,
|
|
||||||
+ qio_channel_tls_handshake_io,
|
|
||||||
+ data,
|
|
||||||
+ NULL,
|
|
||||||
+ context);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -215,6 +216,7 @@ static gboolean qio_channel_tls_handshake_io(QIOChannel *ioc,
|
|
||||||
QIOChannelTLS *tioc = QIO_CHANNEL_TLS(
|
|
||||||
qio_task_get_source(task));
|
|
||||||
|
|
||||||
+ tioc->hs_ioc_tag = 0;
|
|
||||||
g_free(data);
|
|
||||||
qio_channel_tls_handshake_task(tioc, task, context);
|
|
||||||
|
|
||||||
@@ -375,6 +377,10 @@ static int qio_channel_tls_close(QIOChannel *ioc,
|
|
||||||
{
|
|
||||||
QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
|
|
||||||
|
|
||||||
+ if (tioc->hs_ioc_tag) {
|
|
||||||
+ g_clear_handle_id(&tioc->hs_ioc_tag, g_source_remove);
|
|
||||||
+ }
|
|
||||||
+
|
|
||||||
return qio_channel_close(tioc->master, errp);
|
|
||||||
}
|
|
||||||
|
|
||||||
--
|
|
||||||
2.39.3
|
|
||||||
|
|
||||||
@ -0,0 +1,82 @@
|
|||||||
|
From 9b5e69ce5f4ba9541e55d801af16ece4969379e9 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
Date: Fri, 9 Feb 2024 18:31:03 +0100
|
||||||
|
Subject: [PATCH 4/4] iotests: Make 144 deterministic again
|
||||||
|
|
||||||
|
RH-Author: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
RH-MergeRequest: 352: monitor: only run coroutine commands in qemu_aio_context
|
||||||
|
RH-Jira: RHEL-7353
|
||||||
|
RH-Acked-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
RH-Acked-by: Hanna Czenczek <hreitz@redhat.com>
|
||||||
|
RH-Commit: [4/4] 4974a32174abefb509b7c46671a364b4b991449e
|
||||||
|
|
||||||
|
Since commit effd60c8 changed how QMP commands are processed, the order
|
||||||
|
of the block-commit return value and job events in iotests 144 wasn't
|
||||||
|
fixed and more and caused the test to fail intermittently.
|
||||||
|
|
||||||
|
Change the test to cache events first and then print them in a
|
||||||
|
predefined order.
|
||||||
|
|
||||||
|
Waiting three times for JOB_STATUS_CHANGE is a bit uglier than just
|
||||||
|
waiting for the JOB_STATUS_CHANGE that has "status": "ready", but the
|
||||||
|
tooling we have doesn't seem to allow the latter easily.
|
||||||
|
|
||||||
|
Fixes: effd60c878176bcaf97fa7ce2b12d04bb8ead6f7
|
||||||
|
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2126
|
||||||
|
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
Message-id: 20240209173103.239994-1-kwolf@redhat.com
|
||||||
|
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
|
||||||
|
(cherry picked from commit cc29c12ec629ba68a4a6cb7d165c94cc8502815a)
|
||||||
|
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
---
|
||||||
|
tests/qemu-iotests/144 | 12 +++++++++++-
|
||||||
|
tests/qemu-iotests/144.out | 2 +-
|
||||||
|
2 files changed, 12 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/tests/qemu-iotests/144 b/tests/qemu-iotests/144
|
||||||
|
index 60e9ddd75f..8c50d6487e 100755
|
||||||
|
--- a/tests/qemu-iotests/144
|
||||||
|
+++ b/tests/qemu-iotests/144
|
||||||
|
@@ -83,12 +83,22 @@ echo
|
||||||
|
echo === Performing block-commit on active layer ===
|
||||||
|
echo
|
||||||
|
|
||||||
|
+capture_events="BLOCK_JOB_READY JOB_STATUS_CHANGE"
|
||||||
|
+
|
||||||
|
# Block commit on active layer, push the new overlay into base
|
||||||
|
_send_qemu_cmd $h "{ 'execute': 'block-commit',
|
||||||
|
'arguments': {
|
||||||
|
'device': 'virtio0'
|
||||||
|
}
|
||||||
|
- }" "READY"
|
||||||
|
+ }" "return"
|
||||||
|
+
|
||||||
|
+_wait_event $h "JOB_STATUS_CHANGE"
|
||||||
|
+_wait_event $h "JOB_STATUS_CHANGE"
|
||||||
|
+_wait_event $h "JOB_STATUS_CHANGE"
|
||||||
|
+
|
||||||
|
+_wait_event $h "BLOCK_JOB_READY"
|
||||||
|
+
|
||||||
|
+capture_events=
|
||||||
|
|
||||||
|
_send_qemu_cmd $h "{ 'execute': 'block-job-complete',
|
||||||
|
'arguments': {
|
||||||
|
diff --git a/tests/qemu-iotests/144.out b/tests/qemu-iotests/144.out
|
||||||
|
index b3b4812015..2245ddfa10 100644
|
||||||
|
--- a/tests/qemu-iotests/144.out
|
||||||
|
+++ b/tests/qemu-iotests/144.out
|
||||||
|
@@ -25,9 +25,9 @@ Formatting 'TEST_DIR/tmp.qcow2', fmt=qcow2 cluster_size=65536 extended_l2=off co
|
||||||
|
'device': 'virtio0'
|
||||||
|
}
|
||||||
|
}
|
||||||
|
+{"return": {}}
|
||||||
|
{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "created", "id": "virtio0"}}
|
||||||
|
{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "running", "id": "virtio0"}}
|
||||||
|
-{"return": {}}
|
||||||
|
{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "ready", "id": "virtio0"}}
|
||||||
|
{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_READY", "data": {"device": "virtio0", "len": 0, "offset": 0, "speed": 0, "type": "commit"}}
|
||||||
|
{ 'execute': 'block-job-complete',
|
||||||
|
--
|
||||||
|
2.39.3
|
||||||
|
|
||||||
@ -0,0 +1,49 @@
|
|||||||
|
From f164083416a9d09712b8cb8c654dd3b8988e6c5c Mon Sep 17 00:00:00 2001
|
||||||
|
From: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
Date: Thu, 18 Jan 2024 09:48:21 -0500
|
||||||
|
Subject: [PATCH 1/4] iotests: add filter_qmp_generated_node_ids()
|
||||||
|
|
||||||
|
RH-Author: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
RH-MergeRequest: 352: monitor: only run coroutine commands in qemu_aio_context
|
||||||
|
RH-Jira: RHEL-7353
|
||||||
|
RH-Acked-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
RH-Acked-by: Hanna Czenczek <hreitz@redhat.com>
|
||||||
|
RH-Commit: [1/4] cc276c8ef9e140203afc19fcd8b5b8e20577054d
|
||||||
|
|
||||||
|
Add a filter function for QMP responses that contain QEMU's
|
||||||
|
automatically generated node ids. The ids change between runs and must
|
||||||
|
be masked in the reference output.
|
||||||
|
|
||||||
|
The next commit will use this new function.
|
||||||
|
|
||||||
|
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
Message-ID: <20240118144823.1497953-2-stefanha@redhat.com>
|
||||||
|
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
(cherry picked from commit da62b507a20510d819bcfbe8f5e573409b954006)
|
||||||
|
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
---
|
||||||
|
tests/qemu-iotests/iotests.py | 7 +++++++
|
||||||
|
1 file changed, 7 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/tests/qemu-iotests/iotests.py b/tests/qemu-iotests/iotests.py
|
||||||
|
index 2ef493755c..fd41f93421 100644
|
||||||
|
--- a/tests/qemu-iotests/iotests.py
|
||||||
|
+++ b/tests/qemu-iotests/iotests.py
|
||||||
|
@@ -521,6 +521,13 @@ def _filter(_key, value):
|
||||||
|
def filter_generated_node_ids(msg):
|
||||||
|
return re.sub("#block[0-9]+", "NODE_NAME", msg)
|
||||||
|
|
||||||
|
+def filter_qmp_generated_node_ids(qmsg):
|
||||||
|
+ def _filter(_key, value):
|
||||||
|
+ if is_str(value):
|
||||||
|
+ return filter_generated_node_ids(value)
|
||||||
|
+ return value
|
||||||
|
+ return filter_qmp(qmsg, _filter)
|
||||||
|
+
|
||||||
|
def filter_img_info(output, filename):
|
||||||
|
lines = []
|
||||||
|
for line in output.split('\n'):
|
||||||
|
--
|
||||||
|
2.39.3
|
||||||
|
|
||||||
@ -0,0 +1,601 @@
|
|||||||
|
From 968c8ff7ea7d43bf29d8e5f6e9e17f84168c22c4 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
Date: Thu, 18 Jan 2024 09:48:22 -0500
|
||||||
|
Subject: [PATCH 2/4] iotests: port 141 to Python for reliable QMP testing
|
||||||
|
|
||||||
|
RH-Author: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
RH-MergeRequest: 352: monitor: only run coroutine commands in qemu_aio_context
|
||||||
|
RH-Jira: RHEL-7353
|
||||||
|
RH-Acked-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
RH-Acked-by: Hanna Czenczek <hreitz@redhat.com>
|
||||||
|
RH-Commit: [2/4] ff0899262544b1b61b4c7de2eb798b664fe5202e
|
||||||
|
|
||||||
|
The common.qemu bash functions allow tests to interact with the QMP
|
||||||
|
monitor of a QEMU process. I spent two days trying to update 141 when
|
||||||
|
the order of the test output changed, but found it would still fail
|
||||||
|
occassionally because printf() and QMP events race with synchronous QMP
|
||||||
|
communication.
|
||||||
|
|
||||||
|
I gave up and ported 141 to the existing Python API for QMP tests. The
|
||||||
|
Python API is less affected by the order in which QEMU prints output
|
||||||
|
because it does not print all QMP traffic by default.
|
||||||
|
|
||||||
|
The next commit changes the order in which QMP messages are received.
|
||||||
|
Make 141 reliable first.
|
||||||
|
|
||||||
|
Cc: Hanna Czenczek <hreitz@redhat.com>
|
||||||
|
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
Message-ID: <20240118144823.1497953-3-stefanha@redhat.com>
|
||||||
|
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
|
||||||
|
(cherry picked from commit 9ee2dd4c22a3639c5462b3fc20df60c005c3de64)
|
||||||
|
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
|
||||||
|
Conflicts:
|
||||||
|
tests/qemu-iotests/141
|
||||||
|
tests/qemu-iotests/141.out
|
||||||
|
|
||||||
|
This commit replaces these files anyway, so apply our changes instead
|
||||||
|
of dragging in more dependencies to resolve context conflicts.
|
||||||
|
---
|
||||||
|
tests/qemu-iotests/141 | 307 ++++++++++++++++---------------------
|
||||||
|
tests/qemu-iotests/141.out | 204 ++++++------------------
|
||||||
|
2 files changed, 178 insertions(+), 333 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/tests/qemu-iotests/141 b/tests/qemu-iotests/141
|
||||||
|
index 115cc1691e..a7d3985a02 100755
|
||||||
|
--- a/tests/qemu-iotests/141
|
||||||
|
+++ b/tests/qemu-iotests/141
|
||||||
|
@@ -1,9 +1,12 @@
|
||||||
|
-#!/usr/bin/env bash
|
||||||
|
+#!/usr/bin/env python3
|
||||||
|
# group: rw auto quick
|
||||||
|
#
|
||||||
|
# Test case for ejecting BDSs with block jobs still running on them
|
||||||
|
#
|
||||||
|
-# Copyright (C) 2016 Red Hat, Inc.
|
||||||
|
+# Originally written in bash by Hanna Czenczek, ported to Python by Stefan
|
||||||
|
+# Hajnoczi.
|
||||||
|
+#
|
||||||
|
+# Copyright Red Hat
|
||||||
|
#
|
||||||
|
# This program is free software; you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU General Public License as published by
|
||||||
|
@@ -19,177 +22,129 @@
|
||||||
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
#
|
||||||
|
|
||||||
|
-# creator
|
||||||
|
-owner=mreitz@redhat.com
|
||||||
|
-
|
||||||
|
-seq="$(basename $0)"
|
||||||
|
-echo "QA output created by $seq"
|
||||||
|
-
|
||||||
|
-status=1 # failure is the default!
|
||||||
|
-
|
||||||
|
-_cleanup()
|
||||||
|
-{
|
||||||
|
- _cleanup_qemu
|
||||||
|
- _cleanup_test_img
|
||||||
|
- for img in "$TEST_DIR"/{b,m,o}.$IMGFMT; do
|
||||||
|
- _rm_test_img "$img"
|
||||||
|
- done
|
||||||
|
-}
|
||||||
|
-trap "_cleanup; exit \$status" 0 1 2 3 15
|
||||||
|
-
|
||||||
|
-# get standard environment, filters and checks
|
||||||
|
-. ./common.rc
|
||||||
|
-. ./common.filter
|
||||||
|
-. ./common.qemu
|
||||||
|
-
|
||||||
|
-# Needs backing file and backing format support
|
||||||
|
-_supported_fmt qcow2 qed
|
||||||
|
-_supported_proto file
|
||||||
|
-_supported_os Linux
|
||||||
|
-
|
||||||
|
-
|
||||||
|
-test_blockjob()
|
||||||
|
-{
|
||||||
|
- _send_qemu_cmd $QEMU_HANDLE \
|
||||||
|
- "{'execute': 'blockdev-add',
|
||||||
|
- 'arguments': {
|
||||||
|
- 'node-name': 'drv0',
|
||||||
|
- 'driver': '$IMGFMT',
|
||||||
|
- 'file': {
|
||||||
|
- 'driver': 'file',
|
||||||
|
- 'filename': '$TEST_IMG'
|
||||||
|
- }}}" \
|
||||||
|
- 'return'
|
||||||
|
-
|
||||||
|
- # If "$2" is an event, we may or may not see it before the
|
||||||
|
- # {"return": {}}. Therefore, filter the {"return": {}} out both
|
||||||
|
- # here and in the next command. (Naturally, if we do not see it
|
||||||
|
- # here, we will see it before the next command can be executed,
|
||||||
|
- # so it will appear in the next _send_qemu_cmd's output.)
|
||||||
|
- _send_qemu_cmd $QEMU_HANDLE \
|
||||||
|
- "$1" \
|
||||||
|
- "$2" \
|
||||||
|
- | _filter_img_create | _filter_qmp_empty_return
|
||||||
|
-
|
||||||
|
- # We want this to return an error because the block job is still running
|
||||||
|
- _send_qemu_cmd $QEMU_HANDLE \
|
||||||
|
- "{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}" \
|
||||||
|
- 'error' | _filter_generated_node_ids | _filter_qmp_empty_return
|
||||||
|
-
|
||||||
|
- _send_qemu_cmd $QEMU_HANDLE \
|
||||||
|
- "{'execute': 'block-job-cancel',
|
||||||
|
- 'arguments': {'device': 'job0'}}" \
|
||||||
|
- "$3"
|
||||||
|
-
|
||||||
|
- _send_qemu_cmd $QEMU_HANDLE \
|
||||||
|
- "{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}" \
|
||||||
|
- 'return'
|
||||||
|
-}
|
||||||
|
-
|
||||||
|
-
|
||||||
|
-TEST_IMG="$TEST_DIR/b.$IMGFMT" _make_test_img 1M
|
||||||
|
-TEST_IMG="$TEST_DIR/m.$IMGFMT" _make_test_img -b "$TEST_DIR/b.$IMGFMT" -F $IMGFMT 1M
|
||||||
|
-_make_test_img -b "$TEST_DIR/m.$IMGFMT" 1M -F $IMGFMT
|
||||||
|
-
|
||||||
|
-_launch_qemu -nodefaults
|
||||||
|
-
|
||||||
|
-_send_qemu_cmd $QEMU_HANDLE \
|
||||||
|
- "{'execute': 'qmp_capabilities'}" \
|
||||||
|
- 'return'
|
||||||
|
-
|
||||||
|
-echo
|
||||||
|
-echo '=== Testing drive-backup ==='
|
||||||
|
-echo
|
||||||
|
-
|
||||||
|
-# drive-backup will not send BLOCK_JOB_READY by itself, and cancelling the job
|
||||||
|
-# will consequently result in BLOCK_JOB_CANCELLED being emitted.
|
||||||
|
-
|
||||||
|
-test_blockjob \
|
||||||
|
- "{'execute': 'drive-backup',
|
||||||
|
- 'arguments': {'job-id': 'job0',
|
||||||
|
- 'device': 'drv0',
|
||||||
|
- 'target': '$TEST_DIR/o.$IMGFMT',
|
||||||
|
- 'format': '$IMGFMT',
|
||||||
|
- 'sync': 'none'}}" \
|
||||||
|
- 'return' \
|
||||||
|
- '"status": "null"'
|
||||||
|
-
|
||||||
|
-echo
|
||||||
|
-echo '=== Testing drive-mirror ==='
|
||||||
|
-echo
|
||||||
|
-
|
||||||
|
-# drive-mirror will send BLOCK_JOB_READY basically immediately, and cancelling
|
||||||
|
-# the job will consequently result in BLOCK_JOB_COMPLETED being emitted.
|
||||||
|
-
|
||||||
|
-test_blockjob \
|
||||||
|
- "{'execute': 'drive-mirror',
|
||||||
|
- 'arguments': {'job-id': 'job0',
|
||||||
|
- 'device': 'drv0',
|
||||||
|
- 'target': '$TEST_DIR/o.$IMGFMT',
|
||||||
|
- 'format': '$IMGFMT',
|
||||||
|
- 'sync': 'none'}}" \
|
||||||
|
- 'BLOCK_JOB_READY' \
|
||||||
|
- '"status": "null"'
|
||||||
|
-
|
||||||
|
-echo
|
||||||
|
-echo '=== Testing active block-commit ==='
|
||||||
|
-echo
|
||||||
|
-
|
||||||
|
-# An active block-commit will send BLOCK_JOB_READY basically immediately, and
|
||||||
|
-# cancelling the job will consequently result in BLOCK_JOB_COMPLETED being
|
||||||
|
-# emitted.
|
||||||
|
-
|
||||||
|
-test_blockjob \
|
||||||
|
- "{'execute': 'block-commit',
|
||||||
|
- 'arguments': {'job-id': 'job0', 'device': 'drv0'}}" \
|
||||||
|
- 'BLOCK_JOB_READY' \
|
||||||
|
- '"status": "null"'
|
||||||
|
-
|
||||||
|
-echo
|
||||||
|
-echo '=== Testing non-active block-commit ==='
|
||||||
|
-echo
|
||||||
|
-
|
||||||
|
-# Give block-commit something to work on, otherwise it would be done
|
||||||
|
-# immediately, send a BLOCK_JOB_COMPLETED and ejecting the BDS would work just
|
||||||
|
-# fine without the block job still running.
|
||||||
|
-
|
||||||
|
-$QEMU_IO -c 'write 0 1M' "$TEST_DIR/m.$IMGFMT" | _filter_qemu_io
|
||||||
|
-
|
||||||
|
-test_blockjob \
|
||||||
|
- "{'execute': 'block-commit',
|
||||||
|
- 'arguments': {'job-id': 'job0',
|
||||||
|
- 'device': 'drv0',
|
||||||
|
- 'top': '$TEST_DIR/m.$IMGFMT',
|
||||||
|
- 'speed': 1}}" \
|
||||||
|
- 'return' \
|
||||||
|
- '"status": "null"'
|
||||||
|
-
|
||||||
|
-echo
|
||||||
|
-echo '=== Testing block-stream ==='
|
||||||
|
-echo
|
||||||
|
-
|
||||||
|
-# Give block-stream something to work on, otherwise it would be done
|
||||||
|
-# immediately, send a BLOCK_JOB_COMPLETED and ejecting the BDS would work just
|
||||||
|
-# fine without the block job still running.
|
||||||
|
-
|
||||||
|
-$QEMU_IO -c 'write 0 1M' "$TEST_DIR/b.$IMGFMT" | _filter_qemu_io
|
||||||
|
-
|
||||||
|
-# With some data to stream (and @speed set to 1), block-stream will not complete
|
||||||
|
-# until we send the block-job-cancel command.
|
||||||
|
-
|
||||||
|
-test_blockjob \
|
||||||
|
- "{'execute': 'block-stream',
|
||||||
|
- 'arguments': {'job-id': 'job0',
|
||||||
|
- 'device': 'drv0',
|
||||||
|
- 'speed': 1}}" \
|
||||||
|
- 'return' \
|
||||||
|
- '"status": "null"'
|
||||||
|
-
|
||||||
|
-_cleanup_qemu
|
||||||
|
-
|
||||||
|
-# success, all done
|
||||||
|
-echo "*** done"
|
||||||
|
-rm -f $seq.full
|
||||||
|
-status=0
|
||||||
|
+import iotests
|
||||||
|
+
|
||||||
|
+# Common filters to mask values that vary in the test output
|
||||||
|
+QMP_FILTERS = [iotests.filter_qmp_testfiles, \
|
||||||
|
+ iotests.filter_qmp_imgfmt]
|
||||||
|
+
|
||||||
|
+
|
||||||
|
+class TestCase:
|
||||||
|
+ def __init__(self, name, vm, image_path, cancel_event):
|
||||||
|
+ self.name = name
|
||||||
|
+ self.vm = vm
|
||||||
|
+ self.image_path = image_path
|
||||||
|
+ self.cancel_event = cancel_event
|
||||||
|
+
|
||||||
|
+ def __enter__(self):
|
||||||
|
+ iotests.log(f'=== Testing {self.name} ===')
|
||||||
|
+ self.vm.qmp_log('blockdev-add', \
|
||||||
|
+ node_name='drv0', \
|
||||||
|
+ driver=iotests.imgfmt, \
|
||||||
|
+ file={'driver': 'file', 'filename': self.image_path}, \
|
||||||
|
+ filters=QMP_FILTERS)
|
||||||
|
+
|
||||||
|
+ def __exit__(self, *exc_details):
|
||||||
|
+ # This is expected to fail because the job still exists
|
||||||
|
+ self.vm.qmp_log('blockdev-del', node_name='drv0', \
|
||||||
|
+ filters=[iotests.filter_qmp_generated_node_ids])
|
||||||
|
+
|
||||||
|
+ self.vm.qmp_log('block-job-cancel', device='job0')
|
||||||
|
+ event = self.vm.event_wait(self.cancel_event)
|
||||||
|
+ iotests.log(event, filters=[iotests.filter_qmp_event])
|
||||||
|
+
|
||||||
|
+ # This time it succeeds
|
||||||
|
+ self.vm.qmp_log('blockdev-del', node_name='drv0')
|
||||||
|
+
|
||||||
|
+ # Separate test cases in output
|
||||||
|
+ iotests.log('')
|
||||||
|
+
|
||||||
|
+
|
||||||
|
+def main() -> None:
|
||||||
|
+ with iotests.FilePath('bottom', 'middle', 'top', 'target') as \
|
||||||
|
+ (bottom_path, middle_path, top_path, target_path), \
|
||||||
|
+ iotests.VM() as vm:
|
||||||
|
+
|
||||||
|
+ iotests.log('Creating bottom <- middle <- top backing file chain...')
|
||||||
|
+ IMAGE_SIZE='1M'
|
||||||
|
+ iotests.qemu_img_create('-f', iotests.imgfmt, bottom_path, IMAGE_SIZE)
|
||||||
|
+ iotests.qemu_img_create('-f', iotests.imgfmt, \
|
||||||
|
+ '-F', iotests.imgfmt, \
|
||||||
|
+ '-b', bottom_path, \
|
||||||
|
+ middle_path, \
|
||||||
|
+ IMAGE_SIZE)
|
||||||
|
+ iotests.qemu_img_create('-f', iotests.imgfmt, \
|
||||||
|
+ '-F', iotests.imgfmt, \
|
||||||
|
+ '-b', middle_path, \
|
||||||
|
+ top_path, \
|
||||||
|
+ IMAGE_SIZE)
|
||||||
|
+
|
||||||
|
+ iotests.log('Starting VM...')
|
||||||
|
+ vm.add_args('-nodefaults')
|
||||||
|
+ vm.launch()
|
||||||
|
+
|
||||||
|
+ # drive-backup will not send BLOCK_JOB_READY by itself, and cancelling
|
||||||
|
+ # the job will consequently result in BLOCK_JOB_CANCELLED being
|
||||||
|
+ # emitted.
|
||||||
|
+ with TestCase('drive-backup', vm, top_path, 'BLOCK_JOB_CANCELLED'):
|
||||||
|
+ vm.qmp_log('drive-backup', \
|
||||||
|
+ job_id='job0', \
|
||||||
|
+ device='drv0', \
|
||||||
|
+ target=target_path, \
|
||||||
|
+ format=iotests.imgfmt, \
|
||||||
|
+ sync='none', \
|
||||||
|
+ filters=QMP_FILTERS)
|
||||||
|
+
|
||||||
|
+ # drive-mirror will send BLOCK_JOB_READY basically immediately, and
|
||||||
|
+ # cancelling the job will consequently result in BLOCK_JOB_COMPLETED
|
||||||
|
+ # being emitted.
|
||||||
|
+ with TestCase('drive-mirror', vm, top_path, 'BLOCK_JOB_COMPLETED'):
|
||||||
|
+ vm.qmp_log('drive-mirror', \
|
||||||
|
+ job_id='job0', \
|
||||||
|
+ device='drv0', \
|
||||||
|
+ target=target_path, \
|
||||||
|
+ format=iotests.imgfmt, \
|
||||||
|
+ sync='none', \
|
||||||
|
+ filters=QMP_FILTERS)
|
||||||
|
+ event = vm.event_wait('BLOCK_JOB_READY')
|
||||||
|
+ assert event is not None # silence mypy
|
||||||
|
+ iotests.log(event, filters=[iotests.filter_qmp_event])
|
||||||
|
+
|
||||||
|
+ # An active block-commit will send BLOCK_JOB_READY basically
|
||||||
|
+ # immediately, and cancelling the job will consequently result in
|
||||||
|
+ # BLOCK_JOB_COMPLETED being emitted.
|
||||||
|
+ with TestCase('active block-commit', vm, top_path, \
|
||||||
|
+ 'BLOCK_JOB_COMPLETED'):
|
||||||
|
+ vm.qmp_log('block-commit', \
|
||||||
|
+ job_id='job0', \
|
||||||
|
+ device='drv0')
|
||||||
|
+ event = vm.event_wait('BLOCK_JOB_READY')
|
||||||
|
+ assert event is not None # silence mypy
|
||||||
|
+ iotests.log(event, filters=[iotests.filter_qmp_event])
|
||||||
|
+
|
||||||
|
+ # Give block-commit something to work on, otherwise it would be done
|
||||||
|
+ # immediately, send a BLOCK_JOB_COMPLETED and ejecting the BDS would
|
||||||
|
+ # work just fine without the block job still running.
|
||||||
|
+ iotests.qemu_io(middle_path, '-c', f'write 0 {IMAGE_SIZE}')
|
||||||
|
+ with TestCase('non-active block-commit', vm, top_path, \
|
||||||
|
+ 'BLOCK_JOB_CANCELLED'):
|
||||||
|
+ vm.qmp_log('block-commit', \
|
||||||
|
+ job_id='job0', \
|
||||||
|
+ device='drv0', \
|
||||||
|
+ top=middle_path, \
|
||||||
|
+ speed=1, \
|
||||||
|
+ filters=[iotests.filter_qmp_testfiles])
|
||||||
|
+
|
||||||
|
+ # Give block-stream something to work on, otherwise it would be done
|
||||||
|
+ # immediately, send a BLOCK_JOB_COMPLETED and ejecting the BDS would
|
||||||
|
+ # work just fine without the block job still running.
|
||||||
|
+ iotests.qemu_io(bottom_path, '-c', f'write 0 {IMAGE_SIZE}')
|
||||||
|
+ with TestCase('block-stream', vm, top_path, 'BLOCK_JOB_CANCELLED'):
|
||||||
|
+ vm.qmp_log('block-stream', \
|
||||||
|
+ job_id='job0', \
|
||||||
|
+ device='drv0', \
|
||||||
|
+ speed=1)
|
||||||
|
+
|
||||||
|
+if __name__ == '__main__':
|
||||||
|
+ iotests.script_main(main, supported_fmts=['qcow2', 'qed'],
|
||||||
|
+ supported_protocols=['file'])
|
||||||
|
diff --git a/tests/qemu-iotests/141.out b/tests/qemu-iotests/141.out
|
||||||
|
index c4c15fb275..91b7ba50af 100644
|
||||||
|
--- a/tests/qemu-iotests/141.out
|
||||||
|
+++ b/tests/qemu-iotests/141.out
|
||||||
|
@@ -1,179 +1,69 @@
|
||||||
|
-QA output created by 141
|
||||||
|
-Formatting 'TEST_DIR/b.IMGFMT', fmt=IMGFMT size=1048576
|
||||||
|
-Formatting 'TEST_DIR/m.IMGFMT', fmt=IMGFMT size=1048576 backing_file=TEST_DIR/b.IMGFMT backing_fmt=IMGFMT
|
||||||
|
-Formatting 'TEST_DIR/t.IMGFMT', fmt=IMGFMT size=1048576 backing_file=TEST_DIR/m.IMGFMT backing_fmt=IMGFMT
|
||||||
|
-{'execute': 'qmp_capabilities'}
|
||||||
|
-{"return": {}}
|
||||||
|
-
|
||||||
|
+Creating bottom <- middle <- top backing file chain...
|
||||||
|
+Starting VM...
|
||||||
|
=== Testing drive-backup ===
|
||||||
|
-
|
||||||
|
-{'execute': 'blockdev-add',
|
||||||
|
- 'arguments': {
|
||||||
|
- 'node-name': 'drv0',
|
||||||
|
- 'driver': 'IMGFMT',
|
||||||
|
- 'file': {
|
||||||
|
- 'driver': 'file',
|
||||||
|
- 'filename': 'TEST_DIR/t.IMGFMT'
|
||||||
|
- }}}
|
||||||
|
-{"return": {}}
|
||||||
|
-{'execute': 'drive-backup',
|
||||||
|
-'arguments': {'job-id': 'job0',
|
||||||
|
-'device': 'drv0',
|
||||||
|
-'target': 'TEST_DIR/o.IMGFMT',
|
||||||
|
-'format': 'IMGFMT',
|
||||||
|
-'sync': 'none'}}
|
||||||
|
-Formatting 'TEST_DIR/o.IMGFMT', fmt=IMGFMT size=1048576 backing_file=TEST_DIR/t.IMGFMT backing_fmt=IMGFMT
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "created", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "running", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "paused", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "running", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"execute": "blockdev-add", "arguments": {"driver": "IMGFMT", "file": {"driver": "file", "filename": "TEST_DIR/PID-top"}, "node-name": "drv0"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "drive-backup", "arguments": {"device": "drv0", "format": "IMGFMT", "job-id": "job0", "sync": "none", "target": "TEST_DIR/PID-target"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"error": {"class": "GenericError", "desc": "Node 'drv0' is busy: node is used as backing hd of 'NODE_NAME'"}}
|
||||||
|
-{'execute': 'block-job-cancel',
|
||||||
|
- 'arguments': {'device': 'job0'}}
|
||||||
|
+{"execute": "block-job-cancel", "arguments": {"device": "job0"}}
|
||||||
|
{"return": {}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "aborting", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_CANCELLED", "data": {"device": "job0", "len": 1048576, "offset": 0, "speed": 0, "type": "backup"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "concluded", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "null", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"data": {"device": "job0", "len": 1048576, "offset": 0, "speed": 0, "type": "backup"}, "event": "BLOCK_JOB_CANCELLED", "timestamp": {"microseconds": "USECS", "seconds": "SECS"}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"return": {}}
|
||||||
|
|
||||||
|
=== Testing drive-mirror ===
|
||||||
|
-
|
||||||
|
-{'execute': 'blockdev-add',
|
||||||
|
- 'arguments': {
|
||||||
|
- 'node-name': 'drv0',
|
||||||
|
- 'driver': 'IMGFMT',
|
||||||
|
- 'file': {
|
||||||
|
- 'driver': 'file',
|
||||||
|
- 'filename': 'TEST_DIR/t.IMGFMT'
|
||||||
|
- }}}
|
||||||
|
-{"return": {}}
|
||||||
|
-{'execute': 'drive-mirror',
|
||||||
|
-'arguments': {'job-id': 'job0',
|
||||||
|
-'device': 'drv0',
|
||||||
|
-'target': 'TEST_DIR/o.IMGFMT',
|
||||||
|
-'format': 'IMGFMT',
|
||||||
|
-'sync': 'none'}}
|
||||||
|
-Formatting 'TEST_DIR/o.IMGFMT', fmt=IMGFMT size=1048576 backing_file=TEST_DIR/t.IMGFMT backing_fmt=IMGFMT
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "created", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "running", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "ready", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_READY", "data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "mirror"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"execute": "blockdev-add", "arguments": {"driver": "IMGFMT", "file": {"driver": "file", "filename": "TEST_DIR/PID-top"}, "node-name": "drv0"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "drive-mirror", "arguments": {"device": "drv0", "format": "IMGFMT", "job-id": "job0", "sync": "none", "target": "TEST_DIR/PID-target"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "mirror"}, "event": "BLOCK_JOB_READY", "timestamp": {"microseconds": "USECS", "seconds": "SECS"}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"error": {"class": "GenericError", "desc": "Node 'drv0' is busy: block device is in use by block job: mirror"}}
|
||||||
|
-{'execute': 'block-job-cancel',
|
||||||
|
- 'arguments': {'device': 'job0'}}
|
||||||
|
+{"execute": "block-job-cancel", "arguments": {"device": "job0"}}
|
||||||
|
{"return": {}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "waiting", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "pending", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_COMPLETED", "data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "mirror"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "concluded", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "null", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "mirror"}, "event": "BLOCK_JOB_COMPLETED", "timestamp": {"microseconds": "USECS", "seconds": "SECS"}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"return": {}}
|
||||||
|
|
||||||
|
=== Testing active block-commit ===
|
||||||
|
-
|
||||||
|
-{'execute': 'blockdev-add',
|
||||||
|
- 'arguments': {
|
||||||
|
- 'node-name': 'drv0',
|
||||||
|
- 'driver': 'IMGFMT',
|
||||||
|
- 'file': {
|
||||||
|
- 'driver': 'file',
|
||||||
|
- 'filename': 'TEST_DIR/t.IMGFMT'
|
||||||
|
- }}}
|
||||||
|
-{"return": {}}
|
||||||
|
-{'execute': 'block-commit',
|
||||||
|
-'arguments': {'job-id': 'job0', 'device': 'drv0'}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "created", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "running", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "ready", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_READY", "data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "commit"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"execute": "blockdev-add", "arguments": {"driver": "IMGFMT", "file": {"driver": "file", "filename": "TEST_DIR/PID-top"}, "node-name": "drv0"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "block-commit", "arguments": {"device": "drv0", "job-id": "job0"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "commit"}, "event": "BLOCK_JOB_READY", "timestamp": {"microseconds": "USECS", "seconds": "SECS"}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"error": {"class": "GenericError", "desc": "Node 'drv0' is busy: block device is in use by block job: commit"}}
|
||||||
|
-{'execute': 'block-job-cancel',
|
||||||
|
- 'arguments': {'device': 'job0'}}
|
||||||
|
+{"execute": "block-job-cancel", "arguments": {"device": "job0"}}
|
||||||
|
{"return": {}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "waiting", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "pending", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_COMPLETED", "data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "commit"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "concluded", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "null", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"data": {"device": "job0", "len": 0, "offset": 0, "speed": 0, "type": "commit"}, "event": "BLOCK_JOB_COMPLETED", "timestamp": {"microseconds": "USECS", "seconds": "SECS"}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"return": {}}
|
||||||
|
|
||||||
|
=== Testing non-active block-commit ===
|
||||||
|
-
|
||||||
|
-wrote 1048576/1048576 bytes at offset 0
|
||||||
|
-1 MiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec)
|
||||||
|
-{'execute': 'blockdev-add',
|
||||||
|
- 'arguments': {
|
||||||
|
- 'node-name': 'drv0',
|
||||||
|
- 'driver': 'IMGFMT',
|
||||||
|
- 'file': {
|
||||||
|
- 'driver': 'file',
|
||||||
|
- 'filename': 'TEST_DIR/t.IMGFMT'
|
||||||
|
- }}}
|
||||||
|
-{"return": {}}
|
||||||
|
-{'execute': 'block-commit',
|
||||||
|
-'arguments': {'job-id': 'job0',
|
||||||
|
-'device': 'drv0',
|
||||||
|
-'top': 'TEST_DIR/m.IMGFMT',
|
||||||
|
-'speed': 1}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "created", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "running", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
-{"error": {"class": "GenericError", "desc": "Node drv0 is in use"}}
|
||||||
|
-{'execute': 'block-job-cancel',
|
||||||
|
- 'arguments': {'device': 'job0'}}
|
||||||
|
-{"return": {}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "aborting", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_CANCELLED", "data": {"device": "job0", "len": 1048576, "offset": 524288, "speed": 1, "type": "commit"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "concluded", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "null", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"execute": "blockdev-add", "arguments": {"driver": "IMGFMT", "file": {"driver": "file", "filename": "TEST_DIR/PID-top"}, "node-name": "drv0"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "block-commit", "arguments": {"device": "drv0", "job-id": "job0", "speed": 1, "top": "TEST_DIR/PID-middle"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
+{"error": {"class": "GenericError", "desc": "Node 'drv0' is busy: block device is in use by block job: commit"}}
|
||||||
|
+{"execute": "block-job-cancel", "arguments": {"device": "job0"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"data": {"device": "job0", "len": 1048576, "offset": 524288, "speed": 1, "type": "commit"}, "event": "BLOCK_JOB_CANCELLED", "timestamp": {"microseconds": "USECS", "seconds": "SECS"}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"return": {}}
|
||||||
|
|
||||||
|
=== Testing block-stream ===
|
||||||
|
-
|
||||||
|
-wrote 1048576/1048576 bytes at offset 0
|
||||||
|
-1 MiB, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec)
|
||||||
|
-{'execute': 'blockdev-add',
|
||||||
|
- 'arguments': {
|
||||||
|
- 'node-name': 'drv0',
|
||||||
|
- 'driver': 'IMGFMT',
|
||||||
|
- 'file': {
|
||||||
|
- 'driver': 'file',
|
||||||
|
- 'filename': 'TEST_DIR/t.IMGFMT'
|
||||||
|
- }}}
|
||||||
|
-{"return": {}}
|
||||||
|
-{'execute': 'block-stream',
|
||||||
|
-'arguments': {'job-id': 'job0',
|
||||||
|
-'device': 'drv0',
|
||||||
|
-'speed': 1}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "created", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "running", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"execute": "blockdev-add", "arguments": {"driver": "IMGFMT", "file": {"driver": "file", "filename": "TEST_DIR/PID-top"}, "node-name": "drv0"}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "block-stream", "arguments": {"device": "drv0", "job-id": "job0", "speed": 1}}
|
||||||
|
+{"return": {}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"error": {"class": "GenericError", "desc": "Node 'drv0' is busy: block device is in use by block job: stream"}}
|
||||||
|
-{'execute': 'block-job-cancel',
|
||||||
|
- 'arguments': {'device': 'job0'}}
|
||||||
|
+{"execute": "block-job-cancel", "arguments": {"device": "job0"}}
|
||||||
|
{"return": {}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "aborting", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "BLOCK_JOB_CANCELLED", "data": {"device": "job0", "len": 1048576, "offset": 524288, "speed": 1, "type": "stream"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "concluded", "id": "job0"}}
|
||||||
|
-{"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event": "JOB_STATUS_CHANGE", "data": {"status": "null", "id": "job0"}}
|
||||||
|
-{'execute': 'blockdev-del',
|
||||||
|
- 'arguments': {'node-name': 'drv0'}}
|
||||||
|
+{"data": {"device": "job0", "len": 1048576, "offset": 524288, "speed": 1, "type": "stream"}, "event": "BLOCK_JOB_CANCELLED", "timestamp": {"microseconds": "USECS", "seconds": "SECS"}}
|
||||||
|
+{"execute": "blockdev-del", "arguments": {"node-name": "drv0"}}
|
||||||
|
{"return": {}}
|
||||||
|
-*** done
|
||||||
|
+
|
||||||
|
--
|
||||||
|
2.39.3
|
||||||
|
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,56 @@
|
|||||||
|
From 76e75a129e59a33103aa7d1d92074ddcef556980 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Thomas Huth <thuth@redhat.com>
|
||||||
|
Date: Tue, 12 Sep 2023 11:24:40 +0200
|
||||||
|
Subject: [PATCH 3/5] redhat: Update linux-headers for kvm_s390_vm_cpu_uv_feat
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 321: Enable Secure Execution Crypto Passthrough for KVM on s390x
|
||||||
|
RH-Bugzilla: 2111390
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [3/5] f1329f5ce5f66033ead7777384dcc1613cad1226
|
||||||
|
|
||||||
|
Upstream Status: rhel-only
|
||||||
|
|
||||||
|
This hunk is part of upstream commit da3c22c74a3c
|
||||||
|
("linux-headers: Update to Linux v6.6-rc1"), but since that
|
||||||
|
commit updates a lot of files and does not apply cleanly,
|
||||||
|
we only focus on the necessary change here.
|
||||||
|
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
linux-headers/asm-s390/kvm.h | 16 ++++++++++++++++
|
||||||
|
1 file changed, 16 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/linux-headers/asm-s390/kvm.h b/linux-headers/asm-s390/kvm.h
|
||||||
|
index f053b8304a..6706bdc5cc 100644
|
||||||
|
--- a/linux-headers/asm-s390/kvm.h
|
||||||
|
+++ b/linux-headers/asm-s390/kvm.h
|
||||||
|
@@ -158,6 +158,22 @@ struct kvm_s390_vm_cpu_subfunc {
|
||||||
|
__u8 reserved[1728];
|
||||||
|
};
|
||||||
|
|
||||||
|
+#define KVM_S390_VM_CPU_PROCESSOR_UV_FEAT_GUEST 6
|
||||||
|
+#define KVM_S390_VM_CPU_MACHINE_UV_FEAT_GUEST 7
|
||||||
|
+
|
||||||
|
+#define KVM_S390_VM_CPU_UV_FEAT_NR_BITS 64
|
||||||
|
+struct kvm_s390_vm_cpu_uv_feat {
|
||||||
|
+ union {
|
||||||
|
+ struct {
|
||||||
|
+ __u64 : 4;
|
||||||
|
+ __u64 ap : 1; /* bit 4 */
|
||||||
|
+ __u64 ap_intr : 1; /* bit 5 */
|
||||||
|
+ __u64 : 58;
|
||||||
|
+ };
|
||||||
|
+ __u64 feat;
|
||||||
|
+ };
|
||||||
|
+};
|
||||||
|
+
|
||||||
|
/* kvm attributes for crypto */
|
||||||
|
#define KVM_S390_VM_CRYPTO_ENABLE_AES_KW 0
|
||||||
|
#define KVM_S390_VM_CRYPTO_ENABLE_DEA_KW 1
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,44 @@
|
|||||||
|
From eb60b6cab9550a62f0b20a9e6d69547d651e3020 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Janosch Frank <frankja@linux.ibm.com>
|
||||||
|
Date: Wed, 23 Aug 2023 16:22:15 +0200
|
||||||
|
Subject: [PATCH 1/5] s390x/ap: fix missing subsystem reset registration
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 321: Enable Secure Execution Crypto Passthrough for KVM on s390x
|
||||||
|
RH-Bugzilla: 2111390
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [1/5] 4ebe81bb6cc4fc137ca4ebc9c0cebdedc421cc91
|
||||||
|
|
||||||
|
A subsystem reset contains a reset of AP resources which has been
|
||||||
|
missing. Adding the AP bridge to the list of device types that need
|
||||||
|
reset fixes this issue.
|
||||||
|
|
||||||
|
Reviewed-by: Jason J. Herne <jjherne@linux.ibm.com>
|
||||||
|
Reviewed-by: Tony Krowiak <akrowiak@linux.ibm.com>
|
||||||
|
Signed-off-by: Janosch Frank <frankja@linux.ibm.com>
|
||||||
|
Fixes: a51b3153 ("s390x/ap: base Adjunct Processor (AP) object model")
|
||||||
|
Message-ID: <20230823142219.1046522-2-seiden@linux.ibm.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
(cherry picked from commit 297ec01f0b9864ea8209ca0ddc6643b4c0574bdb)
|
||||||
|
---
|
||||||
|
hw/s390x/s390-virtio-ccw.c | 1 +
|
||||||
|
1 file changed, 1 insertion(+)
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/s390-virtio-ccw.c b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
index 4a7cd21cac..412d73715a 100644
|
||||||
|
--- a/hw/s390x/s390-virtio-ccw.c
|
||||||
|
+++ b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
@@ -100,6 +100,7 @@ static const char *const reset_dev_types[] = {
|
||||||
|
"s390-flic",
|
||||||
|
"diag288",
|
||||||
|
TYPE_S390_PCI_HOST_BRIDGE,
|
||||||
|
+ TYPE_AP_BRIDGE,
|
||||||
|
};
|
||||||
|
|
||||||
|
static void subsystem_reset(void)
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,68 @@
|
|||||||
|
From 05b145a8d5b1c2f796069cdd81826c00cf7c983e Mon Sep 17 00:00:00 2001
|
||||||
|
From: Janosch Frank <frankja@linux.ibm.com>
|
||||||
|
Date: Fri, 1 Sep 2023 11:48:51 +0000
|
||||||
|
Subject: [PATCH 2/5] s390x: do a subsystem reset before the unprotect on
|
||||||
|
reboot
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 321: Enable Secure Execution Crypto Passthrough for KVM on s390x
|
||||||
|
RH-Bugzilla: 2111390
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [2/5] ea430d236e1a20ddad7095d2e6d10f741f9a1907
|
||||||
|
|
||||||
|
Bound APQNs have to be reset before tearing down the secure config via
|
||||||
|
s390_machine_unprotect(). Otherwise the Ultravisor will return a error
|
||||||
|
code.
|
||||||
|
|
||||||
|
So let's do a subsystem_reset() which includes a AP reset before the
|
||||||
|
unprotect call. We'll do a full device_reset() afterwards which will
|
||||||
|
reset some devices twice. That's ok since we can't move the
|
||||||
|
device_reset() before the unprotect as it includes a CPU clear reset
|
||||||
|
which the Ultravisor does not expect at that point in time.
|
||||||
|
|
||||||
|
Signed-off-by: Janosch Frank <frankja@linux.ibm.com>
|
||||||
|
Message-ID: <20230901114851.154357-1-frankja@linux.ibm.com>
|
||||||
|
Tested-by: Viktor Mihajlovski <mihajlov@linux.ibm.com>
|
||||||
|
Acked-by: Christian Borntraeger <borntraeger@linux.ibm.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
(cherry picked from commit ef1535901a07f2e49fa25c8bcee7f0b73801d824)
|
||||||
|
|
||||||
|
Conflicts:
|
||||||
|
hw/s390x/s390-virtio-ccw.c
|
||||||
|
(contextual conflict due to missing commit 7966d70f6f6b)
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
hw/s390x/s390-virtio-ccw.c | 10 ++++++++++
|
||||||
|
1 file changed, 10 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/s390-virtio-ccw.c b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
index 412d73715a..17146469ee 100644
|
||||||
|
--- a/hw/s390x/s390-virtio-ccw.c
|
||||||
|
+++ b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
@@ -430,10 +430,20 @@ static void s390_machine_reset(MachineState *machine)
|
||||||
|
switch (reset_type) {
|
||||||
|
case S390_RESET_EXTERNAL:
|
||||||
|
case S390_RESET_REIPL:
|
||||||
|
+ /*
|
||||||
|
+ * Reset the subsystem which includes a AP reset. If a PV
|
||||||
|
+ * guest had APQNs attached the AP reset is a prerequisite to
|
||||||
|
+ * unprotecting since the UV checks if all APQNs are reset.
|
||||||
|
+ */
|
||||||
|
+ subsystem_reset();
|
||||||
|
if (s390_is_pv()) {
|
||||||
|
s390_machine_unprotect(ms);
|
||||||
|
}
|
||||||
|
|
||||||
|
+ /*
|
||||||
|
+ * Device reset includes CPU clear resets so this has to be
|
||||||
|
+ * done AFTER the unprotect call above.
|
||||||
|
+ */
|
||||||
|
qemu_devices_reset();
|
||||||
|
s390_crypto_reset();
|
||||||
|
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,106 @@
|
|||||||
|
From 52ad0cc8a82f7a4c3581146fb4d2046898163c4e Mon Sep 17 00:00:00 2001
|
||||||
|
From: =?UTF-8?q?C=C3=A9dric=20Le=20Goater?= <clg@redhat.com>
|
||||||
|
Date: Tue, 23 Jan 2024 13:59:24 +0100
|
||||||
|
Subject: [PATCH 1/3] s390x/pci: avoid double enable/disable of aif
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-MergeRequest: 349: s390x: Fix reset ordering of passthrough ISM devices
|
||||||
|
RH-Jira: RHEL-22411
|
||||||
|
RH-Acked-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-Acked-by: Cornelia Huck <cohuck@redhat.com>
|
||||||
|
RH-Commit: [1/3] 450e4ca607d801bce93415994250374d70fb72f6
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-22411
|
||||||
|
|
||||||
|
commit 07b2c8e034d80ff92e202405c494d2ff80fcf848
|
||||||
|
Author: Matthew Rosato <mjrosato@linux.ibm.com>
|
||||||
|
Date: Thu Jan 18 13:51:49 2024 -0500
|
||||||
|
|
||||||
|
s390x/pci: avoid double enable/disable of aif
|
||||||
|
|
||||||
|
Use a flag to keep track of whether AIF is currently enabled. This can be
|
||||||
|
used to avoid enabling/disabling AIF multiple times as well as to determine
|
||||||
|
whether or not it should be disabled during reset processing.
|
||||||
|
|
||||||
|
Fixes: d0bc7091c2 ("s390x/pci: enable adapter event notification for interpreted devices")
|
||||||
|
Reported-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
Reviewed-by: Eric Farman <farman@linux.ibm.com>
|
||||||
|
Signed-off-by: Matthew Rosato <mjrosato@linux.ibm.com>
|
||||||
|
Message-ID: <20240118185151.265329-2-mjrosato@linux.ibm.com>
|
||||||
|
Reviewed-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
---
|
||||||
|
hw/s390x/s390-pci-kvm.c | 25 +++++++++++++++++++++++--
|
||||||
|
include/hw/s390x/s390-pci-bus.h | 1 +
|
||||||
|
2 files changed, 24 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/s390-pci-kvm.c b/hw/s390x/s390-pci-kvm.c
|
||||||
|
index ff41e4106d..1ee510436c 100644
|
||||||
|
--- a/hw/s390x/s390-pci-kvm.c
|
||||||
|
+++ b/hw/s390x/s390-pci-kvm.c
|
||||||
|
@@ -27,6 +27,7 @@ bool s390_pci_kvm_interp_allowed(void)
|
||||||
|
|
||||||
|
int s390_pci_kvm_aif_enable(S390PCIBusDevice *pbdev, ZpciFib *fib, bool assist)
|
||||||
|
{
|
||||||
|
+ int rc;
|
||||||
|
struct kvm_s390_zpci_op args = {
|
||||||
|
.fh = pbdev->fh,
|
||||||
|
.op = KVM_S390_ZPCIOP_REG_AEN,
|
||||||
|
@@ -38,15 +39,35 @@ int s390_pci_kvm_aif_enable(S390PCIBusDevice *pbdev, ZpciFib *fib, bool assist)
|
||||||
|
.u.reg_aen.flags = (assist) ? 0 : KVM_S390_ZPCIOP_REGAEN_HOST
|
||||||
|
};
|
||||||
|
|
||||||
|
- return kvm_vm_ioctl(kvm_state, KVM_S390_ZPCI_OP, &args);
|
||||||
|
+ if (pbdev->aif) {
|
||||||
|
+ return -EINVAL;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ rc = kvm_vm_ioctl(kvm_state, KVM_S390_ZPCI_OP, &args);
|
||||||
|
+ if (rc == 0) {
|
||||||
|
+ pbdev->aif = true;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ return rc;
|
||||||
|
}
|
||||||
|
|
||||||
|
int s390_pci_kvm_aif_disable(S390PCIBusDevice *pbdev)
|
||||||
|
{
|
||||||
|
+ int rc;
|
||||||
|
+
|
||||||
|
struct kvm_s390_zpci_op args = {
|
||||||
|
.fh = pbdev->fh,
|
||||||
|
.op = KVM_S390_ZPCIOP_DEREG_AEN
|
||||||
|
};
|
||||||
|
|
||||||
|
- return kvm_vm_ioctl(kvm_state, KVM_S390_ZPCI_OP, &args);
|
||||||
|
+ if (!pbdev->aif) {
|
||||||
|
+ return -EINVAL;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ rc = kvm_vm_ioctl(kvm_state, KVM_S390_ZPCI_OP, &args);
|
||||||
|
+ if (rc == 0) {
|
||||||
|
+ pbdev->aif = false;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ return rc;
|
||||||
|
}
|
||||||
|
diff --git a/include/hw/s390x/s390-pci-bus.h b/include/hw/s390x/s390-pci-bus.h
|
||||||
|
index e0a9f9385b..7a658f5e30 100644
|
||||||
|
--- a/include/hw/s390x/s390-pci-bus.h
|
||||||
|
+++ b/include/hw/s390x/s390-pci-bus.h
|
||||||
|
@@ -361,6 +361,7 @@ struct S390PCIBusDevice {
|
||||||
|
bool unplug_requested;
|
||||||
|
bool interp;
|
||||||
|
bool forwarding_assist;
|
||||||
|
+ bool aif;
|
||||||
|
QTAILQ_ENTRY(S390PCIBusDevice) link;
|
||||||
|
};
|
||||||
|
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,137 @@
|
|||||||
|
From dda71c431be22772f3241af45b62737c988e85d4 Mon Sep 17 00:00:00 2001
|
||||||
|
From: =?UTF-8?q?C=C3=A9dric=20Le=20Goater?= <clg@redhat.com>
|
||||||
|
Date: Tue, 23 Jan 2024 13:59:24 +0100
|
||||||
|
Subject: [PATCH 3/3] s390x/pci: drive ISM reset from subsystem reset
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-MergeRequest: 349: s390x: Fix reset ordering of passthrough ISM devices
|
||||||
|
RH-Jira: RHEL-22411
|
||||||
|
RH-Acked-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-Acked-by: Cornelia Huck <cohuck@redhat.com>
|
||||||
|
RH-Commit: [3/3] 42e89595dd5e24538a2d3f075391b4534497eece
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-22411
|
||||||
|
|
||||||
|
commit 68c691ca99a2538d6a53a70ce8a9ce06ee307ff1
|
||||||
|
Author: Matthew Rosato <mjrosato@linux.ibm.com>
|
||||||
|
Date: Thu Jan 18 13:51:51 2024 -0500
|
||||||
|
|
||||||
|
s390x/pci: drive ISM reset from subsystem reset
|
||||||
|
|
||||||
|
ISM devices are sensitive to manipulation of the IOMMU, so the ISM device
|
||||||
|
needs to be reset before the vfio-pci device is reset (triggering a full
|
||||||
|
UNMAP). In order to ensure this occurs, trigger ISM device resets from
|
||||||
|
subsystem_reset before triggering the PCI bus reset (which will also
|
||||||
|
trigger vfio-pci reset). This only needs to be done for ISM devices
|
||||||
|
which were enabled for use by the guest.
|
||||||
|
Further, ensure that AIF is disabled as part of the reset event.
|
||||||
|
|
||||||
|
Fixes: ef1535901a ("s390x: do a subsystem reset before the unprotect on reboot")
|
||||||
|
Fixes: 03451953c7 ("s390x/pci: reset ISM passthrough devices on shutdown and system reset")
|
||||||
|
Reported-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
Signed-off-by: Matthew Rosato <mjrosato@linux.ibm.com>
|
||||||
|
Message-ID: <20240118185151.265329-4-mjrosato@linux.ibm.com>
|
||||||
|
Reviewed-by: Eric Farman <farman@linux.ibm.com>
|
||||||
|
Reviewed-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
---
|
||||||
|
hw/s390x/s390-pci-bus.c | 26 +++++++++++++++++---------
|
||||||
|
hw/s390x/s390-virtio-ccw.c | 8 ++++++++
|
||||||
|
include/hw/s390x/s390-pci-bus.h | 1 +
|
||||||
|
3 files changed, 26 insertions(+), 9 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/s390-pci-bus.c b/hw/s390x/s390-pci-bus.c
|
||||||
|
index 2d92848b0f..a8953693b9 100644
|
||||||
|
--- a/hw/s390x/s390-pci-bus.c
|
||||||
|
+++ b/hw/s390x/s390-pci-bus.c
|
||||||
|
@@ -160,20 +160,12 @@ static void s390_pci_shutdown_notifier(Notifier *n, void *opaque)
|
||||||
|
pci_device_reset(pbdev->pdev);
|
||||||
|
}
|
||||||
|
|
||||||
|
-static void s390_pci_reset_cb(void *opaque)
|
||||||
|
-{
|
||||||
|
- S390PCIBusDevice *pbdev = opaque;
|
||||||
|
-
|
||||||
|
- pci_device_reset(pbdev->pdev);
|
||||||
|
-}
|
||||||
|
-
|
||||||
|
static void s390_pci_perform_unplug(S390PCIBusDevice *pbdev)
|
||||||
|
{
|
||||||
|
HotplugHandler *hotplug_ctrl;
|
||||||
|
|
||||||
|
if (pbdev->pft == ZPCI_PFT_ISM) {
|
||||||
|
notifier_remove(&pbdev->shutdown_notifier);
|
||||||
|
- qemu_unregister_reset(s390_pci_reset_cb, pbdev);
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Unplug the PCI device */
|
||||||
|
@@ -1137,7 +1129,6 @@ static void s390_pcihost_plug(HotplugHandler *hotplug_dev, DeviceState *dev,
|
||||||
|
if (pbdev->pft == ZPCI_PFT_ISM) {
|
||||||
|
pbdev->shutdown_notifier.notify = s390_pci_shutdown_notifier;
|
||||||
|
qemu_register_shutdown_notifier(&pbdev->shutdown_notifier);
|
||||||
|
- qemu_register_reset(s390_pci_reset_cb, pbdev);
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
pbdev->fh |= FH_SHM_EMUL;
|
||||||
|
@@ -1284,6 +1275,23 @@ static void s390_pci_enumerate_bridge(PCIBus *bus, PCIDevice *pdev,
|
||||||
|
pci_default_write_config(pdev, PCI_SUBORDINATE_BUS, s->bus_no, 1);
|
||||||
|
}
|
||||||
|
|
||||||
|
+void s390_pci_ism_reset(void)
|
||||||
|
+{
|
||||||
|
+ S390pciState *s = s390_get_phb();
|
||||||
|
+
|
||||||
|
+ S390PCIBusDevice *pbdev, *next;
|
||||||
|
+
|
||||||
|
+ /* Trigger reset event for each passthrough ISM device currently in-use */
|
||||||
|
+ QTAILQ_FOREACH_SAFE(pbdev, &s->zpci_devs, link, next) {
|
||||||
|
+ if (pbdev->interp && pbdev->pft == ZPCI_PFT_ISM &&
|
||||||
|
+ pbdev->fh & FH_MASK_ENABLE) {
|
||||||
|
+ s390_pci_kvm_aif_disable(pbdev);
|
||||||
|
+
|
||||||
|
+ pci_device_reset(pbdev->pdev);
|
||||||
|
+ }
|
||||||
|
+ }
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
static void s390_pcihost_reset(DeviceState *dev)
|
||||||
|
{
|
||||||
|
S390pciState *s = S390_PCI_HOST_BRIDGE(dev);
|
||||||
|
diff --git a/hw/s390x/s390-virtio-ccw.c b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
index 94434c3bb1..51e5b39888 100644
|
||||||
|
--- a/hw/s390x/s390-virtio-ccw.c
|
||||||
|
+++ b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
@@ -108,6 +108,14 @@ static void subsystem_reset(void)
|
||||||
|
DeviceState *dev;
|
||||||
|
int i;
|
||||||
|
|
||||||
|
+ /*
|
||||||
|
+ * ISM firmware is sensitive to unexpected changes to the IOMMU, which can
|
||||||
|
+ * occur during reset of the vfio-pci device (unmap of entire aperture).
|
||||||
|
+ * Ensure any passthrough ISM devices are reset now, while CPUs are paused
|
||||||
|
+ * but before vfio-pci cleanup occurs.
|
||||||
|
+ */
|
||||||
|
+ s390_pci_ism_reset();
|
||||||
|
+
|
||||||
|
for (i = 0; i < ARRAY_SIZE(reset_dev_types); i++) {
|
||||||
|
dev = DEVICE(object_resolve_path_type("", reset_dev_types[i], NULL));
|
||||||
|
if (dev) {
|
||||||
|
diff --git a/include/hw/s390x/s390-pci-bus.h b/include/hw/s390x/s390-pci-bus.h
|
||||||
|
index 7a658f5e30..2bfad5563a 100644
|
||||||
|
--- a/include/hw/s390x/s390-pci-bus.h
|
||||||
|
+++ b/include/hw/s390x/s390-pci-bus.h
|
||||||
|
@@ -401,5 +401,6 @@ S390PCIBusDevice *s390_pci_find_dev_by_target(S390pciState *s,
|
||||||
|
const char *target);
|
||||||
|
S390PCIBusDevice *s390_pci_find_next_avail_dev(S390pciState *s,
|
||||||
|
S390PCIBusDevice *pbdev);
|
||||||
|
+void s390_pci_ism_reset(void);
|
||||||
|
|
||||||
|
#endif
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,71 @@
|
|||||||
|
From fe70e87ef8d2f7e538867052e06012051919083f Mon Sep 17 00:00:00 2001
|
||||||
|
From: =?UTF-8?q?C=C3=A9dric=20Le=20Goater?= <clg@redhat.com>
|
||||||
|
Date: Tue, 23 Jan 2024 13:59:24 +0100
|
||||||
|
Subject: [PATCH 2/3] s390x/pci: refresh fh before disabling aif
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-MergeRequest: 349: s390x: Fix reset ordering of passthrough ISM devices
|
||||||
|
RH-Jira: RHEL-22411
|
||||||
|
RH-Acked-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-Acked-by: Cornelia Huck <cohuck@redhat.com>
|
||||||
|
RH-Commit: [2/3] 4a7d3fccdac508253bd7e5765973a08482022edb
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-22411
|
||||||
|
|
||||||
|
commit 30e35258e25c75c9d799c34fd89afcafffb37084
|
||||||
|
Author: Matthew Rosato <mjrosato@linux.ibm.com>
|
||||||
|
Date: Thu Jan 18 13:51:50 2024 -0500
|
||||||
|
|
||||||
|
s390x/pci: refresh fh before disabling aif
|
||||||
|
|
||||||
|
Typically we refresh the host fh during CLP enable, however it's possible
|
||||||
|
that the device goes through multiple reset events before the guest
|
||||||
|
performs another CLP enable. Let's handle this for now by refreshing the
|
||||||
|
host handle from vfio before disabling aif.
|
||||||
|
|
||||||
|
Fixes: 03451953c7 ("s390x/pci: reset ISM passthrough devices on shutdown and system reset")
|
||||||
|
Reported-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
Reviewed-by: Eric Farman <farman@linux.ibm.com>
|
||||||
|
Signed-off-by: Matthew Rosato <mjrosato@linux.ibm.com>
|
||||||
|
Message-ID: <20240118185151.265329-3-mjrosato@linux.ibm.com>
|
||||||
|
Reviewed-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
---
|
||||||
|
hw/s390x/s390-pci-kvm.c | 9 +++++++++
|
||||||
|
1 file changed, 9 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/s390-pci-kvm.c b/hw/s390x/s390-pci-kvm.c
|
||||||
|
index 1ee510436c..9eef4fc3ec 100644
|
||||||
|
--- a/hw/s390x/s390-pci-kvm.c
|
||||||
|
+++ b/hw/s390x/s390-pci-kvm.c
|
||||||
|
@@ -18,6 +18,7 @@
|
||||||
|
#include "hw/s390x/s390-pci-bus.h"
|
||||||
|
#include "hw/s390x/s390-pci-kvm.h"
|
||||||
|
#include "hw/s390x/s390-pci-inst.h"
|
||||||
|
+#include "hw/s390x/s390-pci-vfio.h"
|
||||||
|
#include "cpu_models.h"
|
||||||
|
|
||||||
|
bool s390_pci_kvm_interp_allowed(void)
|
||||||
|
@@ -64,6 +65,14 @@ int s390_pci_kvm_aif_disable(S390PCIBusDevice *pbdev)
|
||||||
|
return -EINVAL;
|
||||||
|
}
|
||||||
|
|
||||||
|
+ /*
|
||||||
|
+ * The device may have already been reset but we still want to relinquish
|
||||||
|
+ * the guest ISC, so always be sure to use an up-to-date host fh.
|
||||||
|
+ */
|
||||||
|
+ if (!s390_pci_get_host_fh(pbdev, &args.fh)) {
|
||||||
|
+ return -EPERM;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
rc = kvm_vm_ioctl(kvm_state, KVM_S390_ZPCI_OP, &args);
|
||||||
|
if (rc == 0) {
|
||||||
|
pbdev->aif = false;
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,51 @@
|
|||||||
|
From 52969f8a75ac7ba115e044cd94208984c18eee41 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Thomas Huth <thuth@redhat.com>
|
||||||
|
Date: Mon, 15 Jan 2024 14:00:04 +0100
|
||||||
|
Subject: [PATCH 2/5] s390x/pv: remove semicolon from macro definition
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 348: s390x: Provide some more useful information if decryption of a PV image fails
|
||||||
|
RH-Jira: RHEL-18214
|
||||||
|
RH-Acked-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [2/5] 52a04c945a584746ff30bed516ad97bab75ac821
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-18214
|
||||||
|
|
||||||
|
commit 36c182bbe680d64f0868522bb9256b5b8eccf280
|
||||||
|
Author: Claudio Imbrenda <imbrenda@linux.ibm.com>
|
||||||
|
Date: Mon Oct 10 17:10:41 2022 +0200
|
||||||
|
|
||||||
|
s390x/pv: remove semicolon from macro definition
|
||||||
|
|
||||||
|
Remove spurious semicolon at the end of the macro s390_pv_cmd
|
||||||
|
|
||||||
|
Signed-off-by: Claudio Imbrenda <imbrenda@linux.ibm.com>
|
||||||
|
Acked-by: Cornelia Huck <cohuck@redhat.com>
|
||||||
|
Message-Id: <20221010151041.89071-1-imbrenda@linux.ibm.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
hw/s390x/pv.c | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/pv.c b/hw/s390x/pv.c
|
||||||
|
index 749e5db1ce..8a1c71436b 100644
|
||||||
|
--- a/hw/s390x/pv.c
|
||||||
|
+++ b/hw/s390x/pv.c
|
||||||
|
@@ -51,7 +51,7 @@ static int __s390_pv_cmd(uint32_t cmd, const char *cmdname, void *data)
|
||||||
|
* This macro lets us pass the command as a string to the function so
|
||||||
|
* we can print it on an error.
|
||||||
|
*/
|
||||||
|
-#define s390_pv_cmd(cmd, data) __s390_pv_cmd(cmd, #cmd, data);
|
||||||
|
+#define s390_pv_cmd(cmd, data) __s390_pv_cmd(cmd, #cmd, data)
|
||||||
|
#define s390_pv_cmd_exit(cmd, data) \
|
||||||
|
{ \
|
||||||
|
int rc; \
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,194 @@
|
|||||||
|
From 885d04faf5edb787341aab6917fd2de743e029ac Mon Sep 17 00:00:00 2001
|
||||||
|
From: Steffen Eiden <seiden@linux.ibm.com>
|
||||||
|
Date: Wed, 23 Aug 2023 16:22:19 +0200
|
||||||
|
Subject: [PATCH 5/5] target/s390x: AP-passthrough for PV guests
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 321: Enable Secure Execution Crypto Passthrough for KVM on s390x
|
||||||
|
RH-Bugzilla: 2111390
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [5/5] 9bf3dfd78fb030a22db7bb756a2cb7f54a0a8d82
|
||||||
|
|
||||||
|
Enabling AP-passthrough(AP-pt) for PV-guest by using the new CPU
|
||||||
|
features for PV-AP-pt of KVM.
|
||||||
|
|
||||||
|
As usual QEMU first checks which CPU features are available and then
|
||||||
|
sets them if available and selected by user. An additional check is done
|
||||||
|
to verify that PV-AP can only be enabled if "regular" AP-pt is enabled
|
||||||
|
as well. Note that KVM itself does not enforce this restriction.
|
||||||
|
|
||||||
|
Reviewed-by: Michael Mueller <mimu@linux.ibm.com>
|
||||||
|
Reviewed-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>
|
||||||
|
Message-ID: <20230823142219.1046522-6-seiden@linux.ibm.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
(cherry picked from commit 5ac951519c23d9eaf7dc9e2dcbcbc7d9a745ffe7)
|
||||||
|
|
||||||
|
Conflicts:
|
||||||
|
target/s390x/gen-features.c
|
||||||
|
(simple contextual conflict due to missing S390_FEAT_PAIE)
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
target/s390x/cpu_features.h | 1 +
|
||||||
|
target/s390x/cpu_features_def.h.inc | 4 ++
|
||||||
|
target/s390x/cpu_models.c | 2 +
|
||||||
|
target/s390x/gen-features.c | 2 +
|
||||||
|
target/s390x/kvm/kvm.c | 70 +++++++++++++++++++++++++++++
|
||||||
|
5 files changed, 79 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/target/s390x/cpu_features.h b/target/s390x/cpu_features.h
|
||||||
|
index 87463f064d..a9bd68a2e1 100644
|
||||||
|
--- a/target/s390x/cpu_features.h
|
||||||
|
+++ b/target/s390x/cpu_features.h
|
||||||
|
@@ -43,6 +43,7 @@ typedef enum {
|
||||||
|
S390_FEAT_TYPE_KDSA,
|
||||||
|
S390_FEAT_TYPE_SORTL,
|
||||||
|
S390_FEAT_TYPE_DFLTCC,
|
||||||
|
+ S390_FEAT_TYPE_UV_FEAT_GUEST,
|
||||||
|
} S390FeatType;
|
||||||
|
|
||||||
|
/* Definition of a CPU feature */
|
||||||
|
diff --git a/target/s390x/cpu_features_def.h.inc b/target/s390x/cpu_features_def.h.inc
|
||||||
|
index e86662bb3b..aa1f51f2a8 100644
|
||||||
|
--- a/target/s390x/cpu_features_def.h.inc
|
||||||
|
+++ b/target/s390x/cpu_features_def.h.inc
|
||||||
|
@@ -378,3 +378,7 @@ DEF_FEAT(DEFLATE_GHDT, "dfltcc-gdht", DFLTCC, 1, "DFLTCC GDHT")
|
||||||
|
DEF_FEAT(DEFLATE_CMPR, "dfltcc-cmpr", DFLTCC, 2, "DFLTCC CMPR")
|
||||||
|
DEF_FEAT(DEFLATE_XPND, "dfltcc-xpnd", DFLTCC, 4, "DFLTCC XPND")
|
||||||
|
DEF_FEAT(DEFLATE_F0, "dfltcc-f0", DFLTCC, 192, "DFLTCC format 0 parameter-block")
|
||||||
|
+
|
||||||
|
+/* Features exposed via the UV-CALL instruction */
|
||||||
|
+DEF_FEAT(UV_FEAT_AP, "appv", UV_FEAT_GUEST, 4, "AP instructions installed for secure guests")
|
||||||
|
+DEF_FEAT(UV_FEAT_AP_INTR, "appvi", UV_FEAT_GUEST, 5, "AP instructions interruption support for secure guests")
|
||||||
|
diff --git a/target/s390x/cpu_models.c b/target/s390x/cpu_models.c
|
||||||
|
index 11e06cc51f..454485e706 100644
|
||||||
|
--- a/target/s390x/cpu_models.c
|
||||||
|
+++ b/target/s390x/cpu_models.c
|
||||||
|
@@ -467,6 +467,8 @@ static void check_consistency(const S390CPUModel *model)
|
||||||
|
{ S390_FEAT_DIAG_318, S390_FEAT_EXTENDED_LENGTH_SCCB },
|
||||||
|
{ S390_FEAT_NNPA, S390_FEAT_VECTOR },
|
||||||
|
{ S390_FEAT_RDP, S390_FEAT_LOCAL_TLB_CLEARING },
|
||||||
|
+ { S390_FEAT_UV_FEAT_AP, S390_FEAT_AP },
|
||||||
|
+ { S390_FEAT_UV_FEAT_AP_INTR, S390_FEAT_UV_FEAT_AP },
|
||||||
|
};
|
||||||
|
int i;
|
||||||
|
|
||||||
|
diff --git a/target/s390x/gen-features.c b/target/s390x/gen-features.c
|
||||||
|
index 7cb1a6ec10..b789288c82 100644
|
||||||
|
--- a/target/s390x/gen-features.c
|
||||||
|
+++ b/target/s390x/gen-features.c
|
||||||
|
@@ -575,6 +575,8 @@ static uint16_t full_GEN16_GA1[] = {
|
||||||
|
S390_FEAT_BEAR_ENH,
|
||||||
|
S390_FEAT_RDP,
|
||||||
|
S390_FEAT_PAI,
|
||||||
|
+ S390_FEAT_UV_FEAT_AP,
|
||||||
|
+ S390_FEAT_UV_FEAT_AP_INTR,
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
|
diff --git a/target/s390x/kvm/kvm.c b/target/s390x/kvm/kvm.c
|
||||||
|
index eb8ca4c780..a963866ef4 100644
|
||||||
|
--- a/target/s390x/kvm/kvm.c
|
||||||
|
+++ b/target/s390x/kvm/kvm.c
|
||||||
|
@@ -2308,6 +2308,42 @@ static bool ap_enabled(const S390FeatBitmap features)
|
||||||
|
return test_bit(S390_FEAT_AP, features);
|
||||||
|
}
|
||||||
|
|
||||||
|
+static bool uv_feat_supported(void)
|
||||||
|
+{
|
||||||
|
+ return kvm_vm_check_attr(kvm_state, KVM_S390_VM_CPU_MODEL,
|
||||||
|
+ KVM_S390_VM_CPU_PROCESSOR_UV_FEAT_GUEST);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
+static int query_uv_feat_guest(S390FeatBitmap features)
|
||||||
|
+{
|
||||||
|
+ struct kvm_s390_vm_cpu_uv_feat prop = {};
|
||||||
|
+ struct kvm_device_attr attr = {
|
||||||
|
+ .group = KVM_S390_VM_CPU_MODEL,
|
||||||
|
+ .attr = KVM_S390_VM_CPU_MACHINE_UV_FEAT_GUEST,
|
||||||
|
+ .addr = (uint64_t) &prop,
|
||||||
|
+ };
|
||||||
|
+ int rc;
|
||||||
|
+
|
||||||
|
+ /* AP support check is currently the only user of the UV feature test */
|
||||||
|
+ if (!(uv_feat_supported() && ap_available())) {
|
||||||
|
+ return 0;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ rc = kvm_vm_ioctl(kvm_state, KVM_GET_DEVICE_ATTR, &attr);
|
||||||
|
+ if (rc) {
|
||||||
|
+ return rc;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ if (prop.ap) {
|
||||||
|
+ set_bit(S390_FEAT_UV_FEAT_AP, features);
|
||||||
|
+ }
|
||||||
|
+ if (prop.ap_intr) {
|
||||||
|
+ set_bit(S390_FEAT_UV_FEAT_AP_INTR, features);
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ return 0;
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
static int kvm_to_feat[][2] = {
|
||||||
|
{ KVM_S390_VM_CPU_FEAT_ESOP, S390_FEAT_ESOP },
|
||||||
|
{ KVM_S390_VM_CPU_FEAT_SIEF2, S390_FEAT_SIE_F2 },
|
||||||
|
@@ -2502,11 +2538,38 @@ void kvm_s390_get_host_cpu_model(S390CPUModel *model, Error **errp)
|
||||||
|
set_bit(S390_FEAT_DIAG_318, model->features);
|
||||||
|
}
|
||||||
|
|
||||||
|
+ /* Test for Ultravisor features that influence secure guest behavior */
|
||||||
|
+ query_uv_feat_guest(model->features);
|
||||||
|
+
|
||||||
|
/* strip of features that are not part of the maximum model */
|
||||||
|
bitmap_and(model->features, model->features, model->def->full_feat,
|
||||||
|
S390_FEAT_MAX);
|
||||||
|
}
|
||||||
|
|
||||||
|
+static int configure_uv_feat_guest(const S390FeatBitmap features)
|
||||||
|
+{
|
||||||
|
+ struct kvm_s390_vm_cpu_uv_feat uv_feat = {};
|
||||||
|
+ struct kvm_device_attr attribute = {
|
||||||
|
+ .group = KVM_S390_VM_CPU_MODEL,
|
||||||
|
+ .attr = KVM_S390_VM_CPU_PROCESSOR_UV_FEAT_GUEST,
|
||||||
|
+ .addr = (__u64) &uv_feat,
|
||||||
|
+ };
|
||||||
|
+
|
||||||
|
+ /* AP support check is currently the only user of the UV feature test */
|
||||||
|
+ if (!(uv_feat_supported() && ap_enabled(features))) {
|
||||||
|
+ return 0;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ if (test_bit(S390_FEAT_UV_FEAT_AP, features)) {
|
||||||
|
+ uv_feat.ap = 1;
|
||||||
|
+ }
|
||||||
|
+ if (test_bit(S390_FEAT_UV_FEAT_AP_INTR, features)) {
|
||||||
|
+ uv_feat.ap_intr = 1;
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ return kvm_vm_ioctl(kvm_state, KVM_SET_DEVICE_ATTR, &attribute);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
static void kvm_s390_configure_apie(bool interpret)
|
||||||
|
{
|
||||||
|
uint64_t attr = interpret ? KVM_S390_VM_CRYPTO_ENABLE_APIE :
|
||||||
|
@@ -2578,6 +2641,13 @@ void kvm_s390_apply_cpu_model(const S390CPUModel *model, Error **errp)
|
||||||
|
if (ap_enabled(model->features)) {
|
||||||
|
kvm_s390_configure_apie(true);
|
||||||
|
}
|
||||||
|
+
|
||||||
|
+ /* configure UV-features for the guest indicated via query / test_bit */
|
||||||
|
+ rc = configure_uv_feat_guest(model->features);
|
||||||
|
+ if (rc) {
|
||||||
|
+ error_setg(errp, "KVM: Error configuring CPU UV features %d", rc);
|
||||||
|
+ return;
|
||||||
|
+ }
|
||||||
|
}
|
||||||
|
|
||||||
|
void kvm_s390_restart_interrupt(S390CPU *cpu)
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,111 @@
|
|||||||
|
From 57bcc768ac7d0614472e60cc2833b74a2a198d29 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Steffen Eiden <seiden@linux.ibm.com>
|
||||||
|
Date: Wed, 23 Aug 2023 16:22:18 +0200
|
||||||
|
Subject: [PATCH 4/5] target/s390x/kvm: Refactor AP functionalities
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 321: Enable Secure Execution Crypto Passthrough for KVM on s390x
|
||||||
|
RH-Bugzilla: 2111390
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [4/5] 8ab2f8766931fb65a391aab590d0ccabd8ba8909
|
||||||
|
|
||||||
|
kvm_s390_set_attr() is a misleading name as it only sets attributes for
|
||||||
|
the KVM_S390_VM_CRYPTO group. Therefore, rename it to
|
||||||
|
kvm_s390_set_crypto_attr().
|
||||||
|
|
||||||
|
Add new functions ap_available() and ap_enabled() to avoid code
|
||||||
|
duplication later.
|
||||||
|
|
||||||
|
Reviewed-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
Reviewed-by: Michael Mueller <mimu@linux.ibm.com>
|
||||||
|
Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>
|
||||||
|
Message-ID: <20230823142219.1046522-5-seiden@linux.ibm.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
(cherry picked from commit 354383c12294f2ee510204cfdc5aaed9f0c42171)
|
||||||
|
---
|
||||||
|
target/s390x/kvm/kvm.c | 24 +++++++++++++++++-------
|
||||||
|
1 file changed, 17 insertions(+), 7 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/target/s390x/kvm/kvm.c b/target/s390x/kvm/kvm.c
|
||||||
|
index 8d36c377b5..eb8ca4c780 100644
|
||||||
|
--- a/target/s390x/kvm/kvm.c
|
||||||
|
+++ b/target/s390x/kvm/kvm.c
|
||||||
|
@@ -251,7 +251,7 @@ static void kvm_s390_enable_cmma(void)
|
||||||
|
trace_kvm_enable_cmma(rc);
|
||||||
|
}
|
||||||
|
|
||||||
|
-static void kvm_s390_set_attr(uint64_t attr)
|
||||||
|
+static void kvm_s390_set_crypto_attr(uint64_t attr)
|
||||||
|
{
|
||||||
|
struct kvm_device_attr attribute = {
|
||||||
|
.group = KVM_S390_VM_CRYPTO,
|
||||||
|
@@ -276,7 +276,7 @@ static void kvm_s390_init_aes_kw(void)
|
||||||
|
}
|
||||||
|
|
||||||
|
if (kvm_vm_check_attr(kvm_state, KVM_S390_VM_CRYPTO, attr)) {
|
||||||
|
- kvm_s390_set_attr(attr);
|
||||||
|
+ kvm_s390_set_crypto_attr(attr);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
@@ -290,7 +290,7 @@ static void kvm_s390_init_dea_kw(void)
|
||||||
|
}
|
||||||
|
|
||||||
|
if (kvm_vm_check_attr(kvm_state, KVM_S390_VM_CRYPTO, attr)) {
|
||||||
|
- kvm_s390_set_attr(attr);
|
||||||
|
+ kvm_s390_set_crypto_attr(attr);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
@@ -2297,6 +2297,17 @@ static int configure_cpu_subfunc(const S390FeatBitmap features)
|
||||||
|
return kvm_vm_ioctl(kvm_state, KVM_SET_DEVICE_ATTR, &attr);
|
||||||
|
}
|
||||||
|
|
||||||
|
+static bool ap_available(void)
|
||||||
|
+{
|
||||||
|
+ return kvm_vm_check_attr(kvm_state, KVM_S390_VM_CRYPTO,
|
||||||
|
+ KVM_S390_VM_CRYPTO_ENABLE_APIE);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
+static bool ap_enabled(const S390FeatBitmap features)
|
||||||
|
+{
|
||||||
|
+ return test_bit(S390_FEAT_AP, features);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
static int kvm_to_feat[][2] = {
|
||||||
|
{ KVM_S390_VM_CPU_FEAT_ESOP, S390_FEAT_ESOP },
|
||||||
|
{ KVM_S390_VM_CPU_FEAT_SIEF2, S390_FEAT_SIE_F2 },
|
||||||
|
@@ -2476,8 +2487,7 @@ void kvm_s390_get_host_cpu_model(S390CPUModel *model, Error **errp)
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
/* for now, we can only provide the AP feature with HW support */
|
||||||
|
- if (kvm_vm_check_attr(kvm_state, KVM_S390_VM_CRYPTO,
|
||||||
|
- KVM_S390_VM_CRYPTO_ENABLE_APIE)) {
|
||||||
|
+ if (ap_available()) {
|
||||||
|
set_bit(S390_FEAT_AP, model->features);
|
||||||
|
}
|
||||||
|
|
||||||
|
@@ -2503,7 +2513,7 @@ static void kvm_s390_configure_apie(bool interpret)
|
||||||
|
KVM_S390_VM_CRYPTO_DISABLE_APIE;
|
||||||
|
|
||||||
|
if (kvm_vm_check_attr(kvm_state, KVM_S390_VM_CRYPTO, attr)) {
|
||||||
|
- kvm_s390_set_attr(attr);
|
||||||
|
+ kvm_s390_set_crypto_attr(attr);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
@@ -2565,7 +2575,7 @@ void kvm_s390_apply_cpu_model(const S390CPUModel *model, Error **errp)
|
||||||
|
kvm_s390_enable_cmma();
|
||||||
|
}
|
||||||
|
|
||||||
|
- if (test_bit(S390_FEAT_AP, model->features)) {
|
||||||
|
+ if (ap_enabled(model->features)) {
|
||||||
|
kvm_s390_configure_apie(true);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,207 @@
|
|||||||
|
From c1273f9e38f81f912cd2bd1dd4a43f9652766f76 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Thomas Huth <thuth@redhat.com>
|
||||||
|
Date: Wed, 10 Jan 2024 15:29:16 +0100
|
||||||
|
Subject: [PATCH 5/5] target/s390x/kvm/pv: Provide some more useful information
|
||||||
|
if decryption fails
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
RH-MergeRequest: 348: s390x: Provide some more useful information if decryption of a PV image fails
|
||||||
|
RH-Jira: RHEL-18214
|
||||||
|
RH-Acked-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-Acked-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
RH-Commit: [5/5] 087acaecfaa5921b409beb212123214fa79fe50c
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-18214
|
||||||
|
|
||||||
|
commit 7af51621b16ae86646cc2dc9dee30de8176ff761
|
||||||
|
Author: Thomas Huth <thuth@redhat.com>
|
||||||
|
Date: Wed Jan 10 15:29:16 2024 +0100
|
||||||
|
|
||||||
|
target/s390x/kvm/pv: Provide some more useful information if decryption fails
|
||||||
|
|
||||||
|
It's a common scenario to copy guest images from one host to another
|
||||||
|
to run the guest on the other machine. This (of course) does not work
|
||||||
|
with "secure execution" guests since they are encrypted with one certain
|
||||||
|
host key. However, if you still (accidentally) do it, you only get a
|
||||||
|
very user-unfriendly error message that looks like this:
|
||||||
|
|
||||||
|
qemu-system-s390x: KVM PV command 2 (KVM_PV_SET_SEC_PARMS) failed:
|
||||||
|
header rc 108 rrc 5 IOCTL rc: -22
|
||||||
|
|
||||||
|
Let's provide at least a somewhat nicer hint to the users so that they
|
||||||
|
are able to figure out what might have gone wrong.
|
||||||
|
|
||||||
|
Message-ID: <20240110142916.850605-1-thuth@redhat.com>
|
||||||
|
Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
Reviewed-by: Cédric Le Goater <clg@redhat.com>
|
||||||
|
Reviewed-by: Claudio Imbrenda <imbrenda@linux.ibm.com>
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
|
||||||
|
Conflicts:
|
||||||
|
target/s390x/kvm/pv.c
|
||||||
|
target/s390x/kvm/pv.h
|
||||||
|
(contextual conflict due to missing async-teardown in RHEL8)
|
||||||
|
Signed-off-by: Thomas Huth <thuth@redhat.com>
|
||||||
|
---
|
||||||
|
hw/s390x/ipl.c | 5 ++---
|
||||||
|
hw/s390x/ipl.h | 2 +-
|
||||||
|
hw/s390x/s390-virtio-ccw.c | 5 ++++-
|
||||||
|
target/s390x/kvm/pv.c | 25 ++++++++++++++++++++-----
|
||||||
|
target/s390x/kvm/pv.h | 5 +++--
|
||||||
|
5 files changed, 30 insertions(+), 12 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/hw/s390x/ipl.c b/hw/s390x/ipl.c
|
||||||
|
index c25e247426..c6cefdd3fe 100644
|
||||||
|
--- a/hw/s390x/ipl.c
|
||||||
|
+++ b/hw/s390x/ipl.c
|
||||||
|
@@ -709,7 +709,7 @@ static void s390_ipl_prepare_qipl(S390CPU *cpu)
|
||||||
|
cpu_physical_memory_unmap(addr, len, 1, len);
|
||||||
|
}
|
||||||
|
|
||||||
|
-int s390_ipl_prepare_pv_header(void)
|
||||||
|
+int s390_ipl_prepare_pv_header(Error **errp)
|
||||||
|
{
|
||||||
|
IplParameterBlock *ipib = s390_ipl_get_iplb_pv();
|
||||||
|
IPLBlockPV *ipib_pv = &ipib->pv;
|
||||||
|
@@ -718,8 +718,7 @@ int s390_ipl_prepare_pv_header(void)
|
||||||
|
|
||||||
|
cpu_physical_memory_read(ipib_pv->pv_header_addr, hdr,
|
||||||
|
ipib_pv->pv_header_len);
|
||||||
|
- rc = s390_pv_set_sec_parms((uintptr_t)hdr,
|
||||||
|
- ipib_pv->pv_header_len);
|
||||||
|
+ rc = s390_pv_set_sec_parms((uintptr_t)hdr, ipib_pv->pv_header_len, errp);
|
||||||
|
g_free(hdr);
|
||||||
|
return rc;
|
||||||
|
}
|
||||||
|
diff --git a/hw/s390x/ipl.h b/hw/s390x/ipl.h
|
||||||
|
index dfc6dfd89c..f9cce33330 100644
|
||||||
|
--- a/hw/s390x/ipl.h
|
||||||
|
+++ b/hw/s390x/ipl.h
|
||||||
|
@@ -107,7 +107,7 @@ typedef union IplParameterBlock IplParameterBlock;
|
||||||
|
|
||||||
|
int s390_ipl_set_loadparm(uint8_t *loadparm);
|
||||||
|
void s390_ipl_update_diag308(IplParameterBlock *iplb);
|
||||||
|
-int s390_ipl_prepare_pv_header(void);
|
||||||
|
+int s390_ipl_prepare_pv_header(Error **errp);
|
||||||
|
int s390_ipl_pv_unpack(void);
|
||||||
|
void s390_ipl_prepare_cpu(S390CPU *cpu);
|
||||||
|
IplParameterBlock *s390_ipl_get_iplb(void);
|
||||||
|
diff --git a/hw/s390x/s390-virtio-ccw.c b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
index 7bfa5b4e8f..94434c3bb1 100644
|
||||||
|
--- a/hw/s390x/s390-virtio-ccw.c
|
||||||
|
+++ b/hw/s390x/s390-virtio-ccw.c
|
||||||
|
@@ -374,7 +374,7 @@ static int s390_machine_protect(S390CcwMachineState *ms)
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Set SE header and unpack */
|
||||||
|
- rc = s390_ipl_prepare_pv_header();
|
||||||
|
+ rc = s390_ipl_prepare_pv_header(&local_err);
|
||||||
|
if (rc) {
|
||||||
|
goto out_err;
|
||||||
|
}
|
||||||
|
@@ -393,6 +393,9 @@ static int s390_machine_protect(S390CcwMachineState *ms)
|
||||||
|
return rc;
|
||||||
|
|
||||||
|
out_err:
|
||||||
|
+ if (local_err) {
|
||||||
|
+ error_report_err(local_err);
|
||||||
|
+ }
|
||||||
|
s390_machine_unprotect(ms);
|
||||||
|
return rc;
|
||||||
|
}
|
||||||
|
diff --git a/target/s390x/kvm/pv.c b/target/s390x/kvm/pv.c
|
||||||
|
index e14db4f41a..ae75063777 100644
|
||||||
|
--- a/target/s390x/kvm/pv.c
|
||||||
|
+++ b/target/s390x/kvm/pv.c
|
||||||
|
@@ -27,7 +27,8 @@ static bool info_valid;
|
||||||
|
static struct kvm_s390_pv_info_vm info_vm;
|
||||||
|
static struct kvm_s390_pv_info_dump info_dump;
|
||||||
|
|
||||||
|
-static int __s390_pv_cmd(uint32_t cmd, const char *cmdname, void *data)
|
||||||
|
+static int __s390_pv_cmd(uint32_t cmd, const char *cmdname, void *data,
|
||||||
|
+ int *pvrc)
|
||||||
|
{
|
||||||
|
struct kvm_pv_cmd pv_cmd = {
|
||||||
|
.cmd = cmd,
|
||||||
|
@@ -44,6 +45,9 @@ static int __s390_pv_cmd(uint32_t cmd, const char *cmdname, void *data)
|
||||||
|
"IOCTL rc: %d", cmd, cmdname, pv_cmd.rc, pv_cmd.rrc,
|
||||||
|
rc);
|
||||||
|
}
|
||||||
|
+ if (pvrc) {
|
||||||
|
+ *pvrc = pv_cmd.rc;
|
||||||
|
+ }
|
||||||
|
return rc;
|
||||||
|
}
|
||||||
|
|
||||||
|
@@ -51,12 +55,13 @@ static int __s390_pv_cmd(uint32_t cmd, const char *cmdname, void *data)
|
||||||
|
* This macro lets us pass the command as a string to the function so
|
||||||
|
* we can print it on an error.
|
||||||
|
*/
|
||||||
|
-#define s390_pv_cmd(cmd, data) __s390_pv_cmd(cmd, #cmd, data)
|
||||||
|
+#define s390_pv_cmd(cmd, data) __s390_pv_cmd(cmd, #cmd, data, NULL)
|
||||||
|
+#define s390_pv_cmd_pvrc(cmd, data, pvrc) __s390_pv_cmd(cmd, #cmd, data, pvrc)
|
||||||
|
#define s390_pv_cmd_exit(cmd, data) \
|
||||||
|
{ \
|
||||||
|
int rc; \
|
||||||
|
\
|
||||||
|
- rc = __s390_pv_cmd(cmd, #cmd, data);\
|
||||||
|
+ rc = __s390_pv_cmd(cmd, #cmd, data, NULL); \
|
||||||
|
if (rc) { \
|
||||||
|
exit(1); \
|
||||||
|
} \
|
||||||
|
@@ -108,14 +113,24 @@ void s390_pv_vm_disable(void)
|
||||||
|
s390_pv_cmd_exit(KVM_PV_DISABLE, NULL);
|
||||||
|
}
|
||||||
|
|
||||||
|
-int s390_pv_set_sec_parms(uint64_t origin, uint64_t length)
|
||||||
|
+int s390_pv_set_sec_parms(uint64_t origin, uint64_t length, Error **errp)
|
||||||
|
{
|
||||||
|
+ int ret, pvrc;
|
||||||
|
struct kvm_s390_pv_sec_parm args = {
|
||||||
|
.origin = origin,
|
||||||
|
.length = length,
|
||||||
|
};
|
||||||
|
|
||||||
|
- return s390_pv_cmd(KVM_PV_SET_SEC_PARMS, &args);
|
||||||
|
+ ret = s390_pv_cmd_pvrc(KVM_PV_SET_SEC_PARMS, &args, &pvrc);
|
||||||
|
+ if (ret) {
|
||||||
|
+ error_setg(errp, "Failed to set secure execution parameters");
|
||||||
|
+ if (pvrc == 0x108) {
|
||||||
|
+ error_append_hint(errp, "Please check whether the image is "
|
||||||
|
+ "correctly encrypted for this host\n");
|
||||||
|
+ }
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
diff --git a/target/s390x/kvm/pv.h b/target/s390x/kvm/pv.h
|
||||||
|
index 9360aa1091..6868c3f4ac 100644
|
||||||
|
--- a/target/s390x/kvm/pv.h
|
||||||
|
+++ b/target/s390x/kvm/pv.h
|
||||||
|
@@ -41,7 +41,7 @@ static inline bool s390_is_pv(void)
|
||||||
|
int s390_pv_query_info(void);
|
||||||
|
int s390_pv_vm_enable(void);
|
||||||
|
void s390_pv_vm_disable(void);
|
||||||
|
-int s390_pv_set_sec_parms(uint64_t origin, uint64_t length);
|
||||||
|
+int s390_pv_set_sec_parms(uint64_t origin, uint64_t length, Error **errp);
|
||||||
|
int s390_pv_unpack(uint64_t addr, uint64_t size, uint64_t tweak);
|
||||||
|
void s390_pv_prep_reset(void);
|
||||||
|
int s390_pv_verify(void);
|
||||||
|
@@ -60,7 +60,8 @@ static inline bool s390_is_pv(void) { return false; }
|
||||||
|
static inline int s390_pv_query_info(void) { return 0; }
|
||||||
|
static inline int s390_pv_vm_enable(void) { return 0; }
|
||||||
|
static inline void s390_pv_vm_disable(void) {}
|
||||||
|
-static inline int s390_pv_set_sec_parms(uint64_t origin, uint64_t length) { return 0; }
|
||||||
|
+static inline int s390_pv_set_sec_parms(uint64_t origin, uint64_t length,
|
||||||
|
+ Error **errp) { return 0; }
|
||||||
|
static inline int s390_pv_unpack(uint64_t addr, uint64_t size, uint64_t tweak) { return 0; }
|
||||||
|
static inline void s390_pv_prep_reset(void) {}
|
||||||
|
static inline int s390_pv_verify(void) { return 0; }
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,151 @@
|
|||||||
|
From b5a7e5e22a52d11034b997d2bd363c3f83f168e9 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
Date: Fri, 24 Nov 2023 12:17:53 -0500
|
||||||
|
Subject: [PATCH 2/2] tests/qtest: ahci-test: add test exposing reset issue
|
||||||
|
with pending callback
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-MergeRequest: 335: hw/ide: reset: cancel async DMA operation before resetting state
|
||||||
|
RH-Jira: RHEL-15437
|
||||||
|
RH-Acked-by: Hanna Czenczek <hreitz@redhat.com>
|
||||||
|
RH-Acked-by: Paolo Bonzini <pbonzini@redhat.com>
|
||||||
|
RH-Commit: [2/2] 364e0703d22d69a4c1cfcff250ad0a3c81ada7b2 (redhat/rhel/src/qemu-kvm/jons-qemu-kvm-2)
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-15437
|
||||||
|
CVE: CVE-2023-5088
|
||||||
|
Upstream: Merged
|
||||||
|
|
||||||
|
commit cc610857bbd3551f4b86ae2299336b5d9aa0db2b
|
||||||
|
Author: Fiona Ebner <f.ebner@proxmox.com>
|
||||||
|
Date: Wed Sep 6 15:09:22 2023 +0200
|
||||||
|
|
||||||
|
tests/qtest: ahci-test: add test exposing reset issue with pending callback
|
||||||
|
|
||||||
|
Before commit "hw/ide: reset: cancel async DMA operation before
|
||||||
|
resetting state", this test would fail, because a reset with a
|
||||||
|
pending write operation would lead to an unsolicited write to the
|
||||||
|
first sector of the disk.
|
||||||
|
|
||||||
|
The test writes a pattern to the beginning of the disk and verifies
|
||||||
|
that it is still intact after a reset with a pending operation. It
|
||||||
|
also checks that the pending operation actually completes correctly.
|
||||||
|
|
||||||
|
Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
|
||||||
|
Message-ID: <20230906130922.142845-2-f.ebner@proxmox.com>
|
||||||
|
Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org>
|
||||||
|
|
||||||
|
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
---
|
||||||
|
tests/qtest/ahci-test.c | 86 ++++++++++++++++++++++++++++++++++++++++-
|
||||||
|
1 file changed, 85 insertions(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/tests/qtest/ahci-test.c b/tests/qtest/ahci-test.c
|
||||||
|
index 8073ccc205..b4d15566e1 100644
|
||||||
|
--- a/tests/qtest/ahci-test.c
|
||||||
|
+++ b/tests/qtest/ahci-test.c
|
||||||
|
@@ -1425,6 +1425,89 @@ static void test_reset(void)
|
||||||
|
ahci_shutdown(ahci);
|
||||||
|
}
|
||||||
|
|
||||||
|
+static void test_reset_pending_callback(void)
|
||||||
|
+{
|
||||||
|
+ AHCIQState *ahci;
|
||||||
|
+ AHCICommand *cmd;
|
||||||
|
+ uint8_t port;
|
||||||
|
+ uint64_t ptr1;
|
||||||
|
+ uint64_t ptr2;
|
||||||
|
+
|
||||||
|
+ int bufsize = 4 * 1024;
|
||||||
|
+ int speed = bufsize + (bufsize / 2);
|
||||||
|
+ int offset1 = 0;
|
||||||
|
+ int offset2 = bufsize / AHCI_SECTOR_SIZE;
|
||||||
|
+
|
||||||
|
+ g_autofree unsigned char *tx1 = g_malloc(bufsize);
|
||||||
|
+ g_autofree unsigned char *tx2 = g_malloc(bufsize);
|
||||||
|
+ g_autofree unsigned char *rx1 = g_malloc0(bufsize);
|
||||||
|
+ g_autofree unsigned char *rx2 = g_malloc0(bufsize);
|
||||||
|
+
|
||||||
|
+ /* Uses throttling to make test independent of specific environment. */
|
||||||
|
+ ahci = ahci_boot_and_enable("-drive if=none,id=drive0,file=%s,"
|
||||||
|
+ "cache=writeback,format=%s,"
|
||||||
|
+ "throttling.bps-write=%d "
|
||||||
|
+ "-M q35 "
|
||||||
|
+ "-device ide-hd,drive=drive0 ",
|
||||||
|
+ tmp_path, imgfmt, speed);
|
||||||
|
+
|
||||||
|
+ port = ahci_port_select(ahci);
|
||||||
|
+ ahci_port_clear(ahci, port);
|
||||||
|
+
|
||||||
|
+ ptr1 = ahci_alloc(ahci, bufsize);
|
||||||
|
+ ptr2 = ahci_alloc(ahci, bufsize);
|
||||||
|
+
|
||||||
|
+ g_assert(ptr1 && ptr2);
|
||||||
|
+
|
||||||
|
+ /* Need two different patterns. */
|
||||||
|
+ do {
|
||||||
|
+ generate_pattern(tx1, bufsize, AHCI_SECTOR_SIZE);
|
||||||
|
+ generate_pattern(tx2, bufsize, AHCI_SECTOR_SIZE);
|
||||||
|
+ } while (memcmp(tx1, tx2, bufsize) == 0);
|
||||||
|
+
|
||||||
|
+ qtest_bufwrite(ahci->parent->qts, ptr1, tx1, bufsize);
|
||||||
|
+ qtest_bufwrite(ahci->parent->qts, ptr2, tx2, bufsize);
|
||||||
|
+
|
||||||
|
+ /* Write to beginning of disk to check it wasn't overwritten later. */
|
||||||
|
+ ahci_guest_io(ahci, port, CMD_WRITE_DMA_EXT, ptr1, bufsize, offset1);
|
||||||
|
+
|
||||||
|
+ /* Issue asynchronously to get a pending callback during reset. */
|
||||||
|
+ cmd = ahci_command_create(CMD_WRITE_DMA_EXT);
|
||||||
|
+ ahci_command_adjust(cmd, offset2, ptr2, bufsize, 0);
|
||||||
|
+ ahci_command_commit(ahci, cmd, port);
|
||||||
|
+ ahci_command_issue_async(ahci, cmd);
|
||||||
|
+
|
||||||
|
+ ahci_set(ahci, AHCI_GHC, AHCI_GHC_HR);
|
||||||
|
+
|
||||||
|
+ ahci_command_free(cmd);
|
||||||
|
+
|
||||||
|
+ /* Wait for throttled write to finish. */
|
||||||
|
+ sleep(1);
|
||||||
|
+
|
||||||
|
+ /* Start again. */
|
||||||
|
+ ahci_clean_mem(ahci);
|
||||||
|
+ ahci_pci_enable(ahci);
|
||||||
|
+ ahci_hba_enable(ahci);
|
||||||
|
+ port = ahci_port_select(ahci);
|
||||||
|
+ ahci_port_clear(ahci, port);
|
||||||
|
+
|
||||||
|
+ /* Read and verify. */
|
||||||
|
+ ahci_guest_io(ahci, port, CMD_READ_DMA_EXT, ptr1, bufsize, offset1);
|
||||||
|
+ qtest_bufread(ahci->parent->qts, ptr1, rx1, bufsize);
|
||||||
|
+ g_assert_cmphex(memcmp(tx1, rx1, bufsize), ==, 0);
|
||||||
|
+
|
||||||
|
+ ahci_guest_io(ahci, port, CMD_READ_DMA_EXT, ptr2, bufsize, offset2);
|
||||||
|
+ qtest_bufread(ahci->parent->qts, ptr2, rx2, bufsize);
|
||||||
|
+ g_assert_cmphex(memcmp(tx2, rx2, bufsize), ==, 0);
|
||||||
|
+
|
||||||
|
+ ahci_free(ahci, ptr1);
|
||||||
|
+ ahci_free(ahci, ptr2);
|
||||||
|
+
|
||||||
|
+ ahci_clean_mem(ahci);
|
||||||
|
+
|
||||||
|
+ ahci_shutdown(ahci);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
static void test_ncq_simple(void)
|
||||||
|
{
|
||||||
|
AHCIQState *ahci;
|
||||||
|
@@ -1929,7 +2012,8 @@ int main(int argc, char **argv)
|
||||||
|
qtest_add_func("/ahci/migrate/dma/halted", test_migrate_halted_dma);
|
||||||
|
|
||||||
|
qtest_add_func("/ahci/max", test_max);
|
||||||
|
- qtest_add_func("/ahci/reset", test_reset);
|
||||||
|
+ qtest_add_func("/ahci/reset/simple", test_reset);
|
||||||
|
+ qtest_add_func("/ahci/reset/pending_callback", test_reset_pending_callback);
|
||||||
|
|
||||||
|
qtest_add_func("/ahci/io/ncq/simple", test_ncq_simple);
|
||||||
|
qtest_add_func("/ahci/migrate/ncq/simple", test_migrate_ncq);
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,118 @@
|
|||||||
|
From 4069f8f55d070b5a1eb2bf894a517ea9fb648bbd Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
Date: Tue, 5 Mar 2024 11:36:15 -0500
|
||||||
|
Subject: [PATCH 2/3] ui/clipboard: mark type as not available when there is no
|
||||||
|
data
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-MergeRequest: 353: ui/clipboard: mark type as not available when there is no data
|
||||||
|
RH-Jira: RHEL-19628
|
||||||
|
RH-Acked-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
RH-Acked-by: Gerd Hoffmann <None>
|
||||||
|
RH-Commit: [2/2] fa0edf7a362a16978e2377cf61f36ff227d186b2 (redhat/rhel/src/qemu-kvm/jons-qemu-kvm-2)
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-19628
|
||||||
|
CVE: CVE-2023-6683
|
||||||
|
Upstream: Merged
|
||||||
|
Conflicts:
|
||||||
|
- The function g_memdup2() is used by this commit, but is not present in
|
||||||
|
this code version. It looks safe to introduce it in a preceding commit,
|
||||||
|
instead of reverting to the less safe g_memdup(), so that is what we do.
|
||||||
|
- There is a second upstream commit covering this CVE:
|
||||||
|
commit 9c416582611b ("ui/clipboard: add asserts for update and request")
|
||||||
|
which is based on several other previous commits not present in this version.
|
||||||
|
Re-applying these, or trying to adapt the code, is too intrusive and risky
|
||||||
|
given that it only introduces two diagnostic asserts which are not essential
|
||||||
|
for solving the CVE.
|
||||||
|
We therefore omit that commit.
|
||||||
|
|
||||||
|
commit 405484b29f6548c7b86549b0f961b906337aa68a
|
||||||
|
Author: Fiona Ebner <f.ebner@proxmox.com>
|
||||||
|
Date: Wed Jan 24 11:57:48 2024 +0100
|
||||||
|
|
||||||
|
ui/clipboard: mark type as not available when there is no data
|
||||||
|
|
||||||
|
With VNC, a client can send a non-extended VNC_MSG_CLIENT_CUT_TEXT
|
||||||
|
message with len=0. In qemu_clipboard_set_data(), the clipboard info
|
||||||
|
will be updated setting data to NULL (because g_memdup(data, size)
|
||||||
|
returns NULL when size is 0). If the client does not set the
|
||||||
|
VNC_ENCODING_CLIPBOARD_EXT feature when setting up the encodings, then
|
||||||
|
the 'request' callback for the clipboard peer is not initialized.
|
||||||
|
Later, because data is NULL, qemu_clipboard_request() can be reached
|
||||||
|
via vdagent_chr_write() and vdagent_clipboard_recv_request() and
|
||||||
|
there, the clipboard owner's 'request' callback will be attempted to
|
||||||
|
be called, but that is a NULL pointer.
|
||||||
|
|
||||||
|
In particular, this can happen when using the KRDC (22.12.3) VNC
|
||||||
|
client.
|
||||||
|
|
||||||
|
Another scenario leading to the same issue is with two clients (say
|
||||||
|
noVNC and KRDC):
|
||||||
|
|
||||||
|
The noVNC client sets the extension VNC_FEATURE_CLIPBOARD_EXT and
|
||||||
|
initializes its cbpeer.
|
||||||
|
|
||||||
|
The KRDC client does not, but triggers a vnc_client_cut_text() (note
|
||||||
|
it's not the _ext variant)). There, a new clipboard info with it as
|
||||||
|
the 'owner' is created and via qemu_clipboard_set_data() is called,
|
||||||
|
which in turn calls qemu_clipboard_update() with that info.
|
||||||
|
|
||||||
|
In qemu_clipboard_update(), the notifier for the noVNC client will be
|
||||||
|
called, i.e. vnc_clipboard_notify() and also set vs->cbinfo for the
|
||||||
|
noVNC client. The 'owner' in that clipboard info is the clipboard peer
|
||||||
|
for the KRDC client, which did not initialize the 'request' function.
|
||||||
|
That sounds correct to me, it is the owner of that clipboard info.
|
||||||
|
|
||||||
|
Then when noVNC sends a VNC_MSG_CLIENT_CUT_TEXT message (it did set
|
||||||
|
the VNC_FEATURE_CLIPBOARD_EXT feature correctly, so a check for it
|
||||||
|
passes), that clipboard info is passed to qemu_clipboard_request() and
|
||||||
|
the original segfault still happens.
|
||||||
|
|
||||||
|
Fix the issue by handling updates with size 0 differently. In
|
||||||
|
particular, mark in the clipboard info that the type is not available.
|
||||||
|
|
||||||
|
While at it, switch to g_memdup2(), because g_memdup() is deprecated.
|
||||||
|
|
||||||
|
Cc: qemu-stable@nongnu.org
|
||||||
|
Fixes: CVE-2023-6683
|
||||||
|
Reported-by: Markus Frank <m.frank@proxmox.com>
|
||||||
|
Suggested-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
|
||||||
|
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
Tested-by: Markus Frank <m.frank@proxmox.com>
|
||||||
|
Message-ID: <20240124105749.204610-1-f.ebner@proxmox.com>
|
||||||
|
|
||||||
|
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
---
|
||||||
|
ui/clipboard.c | 12 +++++++++---
|
||||||
|
1 file changed, 9 insertions(+), 3 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/ui/clipboard.c b/ui/clipboard.c
|
||||||
|
index d7b008d62a..b8c795f2e2 100644
|
||||||
|
--- a/ui/clipboard.c
|
||||||
|
+++ b/ui/clipboard.c
|
||||||
|
@@ -123,9 +123,15 @@ void qemu_clipboard_set_data(QemuClipboardPeer *peer,
|
||||||
|
}
|
||||||
|
|
||||||
|
g_free(info->types[type].data);
|
||||||
|
- info->types[type].data = g_memdup(data, size);
|
||||||
|
- info->types[type].size = size;
|
||||||
|
- info->types[type].available = true;
|
||||||
|
+ if (size) {
|
||||||
|
+ info->types[type].data = g_memdup2(data, size);
|
||||||
|
+ info->types[type].size = size;
|
||||||
|
+ info->types[type].available = true;
|
||||||
|
+ } else {
|
||||||
|
+ info->types[type].data = NULL;
|
||||||
|
+ info->types[type].size = 0;
|
||||||
|
+ info->types[type].available = false;
|
||||||
|
+ }
|
||||||
|
|
||||||
|
if (update) {
|
||||||
|
qemu_clipboard_update(info);
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,55 @@
|
|||||||
|
From 8a233fd50c4ab973ef4a3c4ac7daf83e5c90aabc Mon Sep 17 00:00:00 2001
|
||||||
|
From: =?UTF-8?q?Marc-Andr=C3=A9=20Lureau?= <marcandre.lureau@redhat.com>
|
||||||
|
Date: Mon, 11 Sep 2023 18:04:47 +0400
|
||||||
|
Subject: [PATCH 4/4] ui: fix crash when there are no active_console
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
RH-MergeRequest: 338: ui: fix crash when there are no active_console
|
||||||
|
RH-Jira: RHEL-2600
|
||||||
|
RH-Acked-by: Gerd Hoffmann <None>
|
||||||
|
RH-Acked-by: Vitaly Kuznetsov <vkuznets@redhat.com>
|
||||||
|
RH-Commit: [1/1] c58d1d76558dbc7ee2a8193a1e7a9b87a79ac385
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-2600
|
||||||
|
|
||||||
|
Thread 1 "qemu-system-x86" received signal SIGSEGV, Segmentation fault.
|
||||||
|
0x0000555555888630 in dpy_ui_info_supported (con=0x0) at ../ui/console.c:812
|
||||||
|
812 return con->hw_ops->ui_info != NULL;
|
||||||
|
(gdb) bt
|
||||||
|
#0 0x0000555555888630 in dpy_ui_info_supported (con=0x0) at ../ui/console.c:812
|
||||||
|
#1 0x00005555558a44b1 in protocol_client_msg (vs=0x5555578c76c0, data=0x5555581e93f0 <incomplete sequence \373>, len=24) at ../ui/vnc.c:2585
|
||||||
|
#2 0x00005555558a19ac in vnc_client_read (vs=0x5555578c76c0) at ../ui/vnc.c:1607
|
||||||
|
#3 0x00005555558a1ac2 in vnc_client_io (ioc=0x5555581eb0e0, condition=G_IO_IN, opaque=0x5555578c76c0) at ../ui/vnc.c:1635
|
||||||
|
|
||||||
|
Fixes:
|
||||||
|
https://issues.redhat.com/browse/RHEL-2600
|
||||||
|
|
||||||
|
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
Reviewed-by: Albert Esteve <aesteve@redhat.com>
|
||||||
|
|
||||||
|
(cherry picked from commit 48a35e12faf90a896c5aa4755812201e00d60316)
|
||||||
|
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
---
|
||||||
|
ui/console.c | 3 +++
|
||||||
|
1 file changed, 3 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/ui/console.c b/ui/console.c
|
||||||
|
index 29a3e3f0f5..df3426bd8a 100644
|
||||||
|
--- a/ui/console.c
|
||||||
|
+++ b/ui/console.c
|
||||||
|
@@ -1525,6 +1525,9 @@ bool dpy_ui_info_supported(QemuConsole *con)
|
||||||
|
if (con == NULL) {
|
||||||
|
con = active_console;
|
||||||
|
}
|
||||||
|
+ if (con == NULL) {
|
||||||
|
+ return false;
|
||||||
|
+ }
|
||||||
|
|
||||||
|
return con->hw_ops->ui_info != NULL;
|
||||||
|
}
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,76 @@
|
|||||||
|
From efbf51a42b51665fd70ea49b9c583a208cfd2deb Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
Date: Tue, 4 Jul 2023 10:41:22 +0200
|
||||||
|
Subject: [PATCH] ui/vnc-clipboard: fix infinite loop in inflate_buffer
|
||||||
|
(CVE-2023-3255)
|
||||||
|
MIME-Version: 1.0
|
||||||
|
Content-Type: text/plain; charset=UTF-8
|
||||||
|
Content-Transfer-Encoding: 8bit
|
||||||
|
|
||||||
|
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-MergeRequest: 316: ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
|
||||||
|
RH-Bugzilla: 2218488
|
||||||
|
RH-Acked-by: Mauro Matteo Cascella <None>
|
||||||
|
RH-Commit: [1/1] f3cb05fb6e40261da5fe10f003fa3e57920469bb (redhat/rhel/src/qemu-kvm/jons-qemu-kvm-2)
|
||||||
|
|
||||||
|
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2218488
|
||||||
|
CVE: CVE-2023-3255
|
||||||
|
Upstream: Merged
|
||||||
|
|
||||||
|
commit d921fea338c1059a27ce7b75309d7a2e485f710b
|
||||||
|
Author: Mauro Matteo Cascella <mcascell@redhat.com>
|
||||||
|
Date: Tue Jul 4 10:41:22 2023 +0200
|
||||||
|
|
||||||
|
ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
|
||||||
|
|
||||||
|
A wrong exit condition may lead to an infinite loop when inflating a
|
||||||
|
valid zlib buffer containing some extra bytes in the `inflate_buffer`
|
||||||
|
function. The bug only occurs post-authentication. Return the buffer
|
||||||
|
immediately if the end of the compressed data has been reached
|
||||||
|
(Z_STREAM_END).
|
||||||
|
|
||||||
|
Fixes: CVE-2023-3255
|
||||||
|
Fixes: 0bf41cab ("ui/vnc: clipboard support")
|
||||||
|
Reported-by: Kevin Denis <kevin.denis@synacktiv.com>
|
||||||
|
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
|
||||||
|
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
Tested-by: Marc-André Lureau <marcandre.lureau@redhat.com>
|
||||||
|
Message-ID: <20230704084210.101822-1-mcascell@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
---
|
||||||
|
ui/vnc-clipboard.c | 10 ++++------
|
||||||
|
1 file changed, 4 insertions(+), 6 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/ui/vnc-clipboard.c b/ui/vnc-clipboard.c
|
||||||
|
index 67284b556c..c84599cfdb 100644
|
||||||
|
--- a/ui/vnc-clipboard.c
|
||||||
|
+++ b/ui/vnc-clipboard.c
|
||||||
|
@@ -51,8 +51,11 @@ static uint8_t *inflate_buffer(uint8_t *in, uint32_t in_len, uint32_t *size)
|
||||||
|
ret = inflate(&stream, Z_FINISH);
|
||||||
|
switch (ret) {
|
||||||
|
case Z_OK:
|
||||||
|
- case Z_STREAM_END:
|
||||||
|
break;
|
||||||
|
+ case Z_STREAM_END:
|
||||||
|
+ *size = stream.total_out;
|
||||||
|
+ inflateEnd(&stream);
|
||||||
|
+ return out;
|
||||||
|
case Z_BUF_ERROR:
|
||||||
|
out_len <<= 1;
|
||||||
|
if (out_len > (1 << 20)) {
|
||||||
|
@@ -67,11 +70,6 @@ static uint8_t *inflate_buffer(uint8_t *in, uint32_t in_len, uint32_t *size)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
- *size = stream.total_out;
|
||||||
|
- inflateEnd(&stream);
|
||||||
|
-
|
||||||
|
- return out;
|
||||||
|
-
|
||||||
|
err_end:
|
||||||
|
inflateEnd(&stream);
|
||||||
|
err:
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,69 @@
|
|||||||
|
From a728c0b522997e8e63bf6b64b202a7ae48693d02 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Prasad Pandit <ppandit@redhat.com>
|
||||||
|
Date: Fri, 18 Aug 2023 16:38:12 +0530
|
||||||
|
Subject: [PATCH 3/4] vhost: release memory_listener object in error path
|
||||||
|
|
||||||
|
RH-Author: Prasad Pandit <None>
|
||||||
|
RH-MergeRequest: 337: vhost: release memory_listener object in error path
|
||||||
|
RH-Jira: RHEL-7567
|
||||||
|
RH-Acked-by: Peter Xu <peterx@redhat.com>
|
||||||
|
RH-Acked-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-Commit: [1/1] 1e377a2f6f148e11a452d11107d839521354e2ca
|
||||||
|
|
||||||
|
Jira: https://issues.redhat.com/browse/RHEL-7567
|
||||||
|
|
||||||
|
commit 1e3ffb34f764f8ac4c003b2b2e6a775b2b073a16
|
||||||
|
Author: Prasad J Pandit <pjp@fedoraproject.org>
|
||||||
|
Date: Mon May 29 17:13:32 2023 +0530
|
||||||
|
|
||||||
|
vhost: release memory_listener object in error path
|
||||||
|
|
||||||
|
vhost_dev_start function does not release memory_listener object
|
||||||
|
in case of an error. This may crash the guest when vhost is unable
|
||||||
|
to set memory table:
|
||||||
|
|
||||||
|
stack trace of thread 125653:
|
||||||
|
Program terminated with signal SIGSEGV, Segmentation fault
|
||||||
|
#0 memory_listener_register (qemu-kvm + 0x6cda0f)
|
||||||
|
#1 vhost_dev_start (qemu-kvm + 0x699301)
|
||||||
|
#2 vhost_net_start (qemu-kvm + 0x45b03f)
|
||||||
|
#3 virtio_net_set_status (qemu-kvm + 0x665672)
|
||||||
|
#4 qmp_set_link (qemu-kvm + 0x548fd5)
|
||||||
|
#5 net_vhost_user_event (qemu-kvm + 0x552c45)
|
||||||
|
#6 tcp_chr_connect (qemu-kvm + 0x88d473)
|
||||||
|
#7 tcp_chr_new_client (qemu-kvm + 0x88cf83)
|
||||||
|
#8 tcp_chr_accept (qemu-kvm + 0x88b429)
|
||||||
|
#9 qio_net_listener_channel_func (qemu-kvm + 0x7ac07c)
|
||||||
|
#10 g_main_context_dispatch (libglib-2.0.so.0 + 0x54e2f)
|
||||||
|
|
||||||
|
Release memory_listener objects in the error path.
|
||||||
|
|
||||||
|
Signed-off-by: Prasad Pandit <pjp@fedoraproject.org>
|
||||||
|
Message-Id: <20230529114333.31686-2-ppandit@redhat.com>
|
||||||
|
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
|
||||||
|
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
|
||||||
|
Reviewed-by: Peter Xu <peterx@redhat.com>
|
||||||
|
Fixes: c471ad0e9b ("vhost_net: device IOTLB support")
|
||||||
|
Cc: qemu-stable@nongnu.org
|
||||||
|
Acked-by: Jason Wang <jasowang@redhat.com>
|
||||||
|
---
|
||||||
|
hw/virtio/vhost.c | 3 +++
|
||||||
|
1 file changed, 3 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/hw/virtio/vhost.c b/hw/virtio/vhost.c
|
||||||
|
index 437347ad01..639029aa76 100644
|
||||||
|
--- a/hw/virtio/vhost.c
|
||||||
|
+++ b/hw/virtio/vhost.c
|
||||||
|
@@ -1818,6 +1818,9 @@ fail_vq:
|
||||||
|
}
|
||||||
|
|
||||||
|
fail_mem:
|
||||||
|
+ if (vhost_dev_has_iommu(hdev)) {
|
||||||
|
+ memory_listener_unregister(&hdev->iommu_listener);
|
||||||
|
+ }
|
||||||
|
fail_features:
|
||||||
|
|
||||||
|
hdev->started = false;
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
@ -0,0 +1,90 @@
|
|||||||
|
From c3146dd39fb274ffbd70d20f8ba9e13562fb21ad Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
Date: Tue, 5 Mar 2024 16:38:49 -0500
|
||||||
|
Subject: [PATCH 3/3] virtio-net: correctly copy vnet header when flushing TX
|
||||||
|
|
||||||
|
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
RH-MergeRequest: 354: virtio-net: correctly copy vnet header when flushing TX
|
||||||
|
RH-Jira: RHEL-19496
|
||||||
|
RH-Acked-by: Jason Wang <jasowang@redhat.com>
|
||||||
|
RH-Acked-by: Stefan Hajnoczi <stefanha@redhat.com>
|
||||||
|
RH-Commit: [1/1] 445b601da86a64298b776879fa0f30a4bf6c16f5 (redhat/rhel/src/qemu-kvm/jons-qemu-kvm-2)
|
||||||
|
|
||||||
|
JIRA: https://issues.redhat.com/browse/RHEL-19496
|
||||||
|
CVE: CVE-2023-6693
|
||||||
|
Upstream: Merged
|
||||||
|
|
||||||
|
commit 2220e8189fb94068dbad333228659fbac819abb0
|
||||||
|
Author: Jason Wang <jasowang@redhat.com>
|
||||||
|
Date: Tue Jan 2 11:29:01 2024 +0800
|
||||||
|
|
||||||
|
virtio-net: correctly copy vnet header when flushing TX
|
||||||
|
|
||||||
|
When HASH_REPORT is negotiated, the guest_hdr_len might be larger than
|
||||||
|
the size of the mergeable rx buffer header. Using
|
||||||
|
virtio_net_hdr_mrg_rxbuf during the header swap might lead a stack
|
||||||
|
overflow in this case. Fixing this by using virtio_net_hdr_v1_hash
|
||||||
|
instead.
|
||||||
|
|
||||||
|
Reported-by: Xiao Lei <leixiao.nop@zju.edu.cn>
|
||||||
|
Cc: Yuri Benditovich <yuri.benditovich@daynix.com>
|
||||||
|
Cc: qemu-stable@nongnu.org
|
||||||
|
Cc: Mauro Matteo Cascella <mcascell@redhat.com>
|
||||||
|
Fixes: CVE-2023-6693
|
||||||
|
Fixes: e22f0603fb2f ("virtio-net: reference implementation of hash report")
|
||||||
|
Reviewed-by: Michael Tokarev <mjt@tls.msk.ru>
|
||||||
|
Signed-off-by: Jason Wang <jasowang@redhat.com>
|
||||||
|
|
||||||
|
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
||||||
|
---
|
||||||
|
hw/net/virtio-net.c | 13 +++++++++----
|
||||||
|
1 file changed, 9 insertions(+), 4 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/hw/net/virtio-net.c b/hw/net/virtio-net.c
|
||||||
|
index f5f07f8e63..7d459726d4 100644
|
||||||
|
--- a/hw/net/virtio-net.c
|
||||||
|
+++ b/hw/net/virtio-net.c
|
||||||
|
@@ -602,6 +602,11 @@ static void virtio_net_set_mrg_rx_bufs(VirtIONet *n, int mergeable_rx_bufs,
|
||||||
|
|
||||||
|
n->mergeable_rx_bufs = mergeable_rx_bufs;
|
||||||
|
|
||||||
|
+ /*
|
||||||
|
+ * Note: when extending the vnet header, please make sure to
|
||||||
|
+ * change the vnet header copying logic in virtio_net_flush_tx()
|
||||||
|
+ * as well.
|
||||||
|
+ */
|
||||||
|
if (version_1) {
|
||||||
|
n->guest_hdr_len = hash_report ?
|
||||||
|
sizeof(struct virtio_net_hdr_v1_hash) :
|
||||||
|
@@ -2535,7 +2540,7 @@ static int32_t virtio_net_flush_tx(VirtIONetQueue *q)
|
||||||
|
ssize_t ret;
|
||||||
|
unsigned int out_num;
|
||||||
|
struct iovec sg[VIRTQUEUE_MAX_SIZE], sg2[VIRTQUEUE_MAX_SIZE + 1], *out_sg;
|
||||||
|
- struct virtio_net_hdr_mrg_rxbuf mhdr;
|
||||||
|
+ struct virtio_net_hdr_v1_hash vhdr;
|
||||||
|
|
||||||
|
elem = virtqueue_pop(q->tx_vq, sizeof(VirtQueueElement));
|
||||||
|
if (!elem) {
|
||||||
|
@@ -2552,7 +2557,7 @@ static int32_t virtio_net_flush_tx(VirtIONetQueue *q)
|
||||||
|
}
|
||||||
|
|
||||||
|
if (n->has_vnet_hdr) {
|
||||||
|
- if (iov_to_buf(out_sg, out_num, 0, &mhdr, n->guest_hdr_len) <
|
||||||
|
+ if (iov_to_buf(out_sg, out_num, 0, &vhdr, n->guest_hdr_len) <
|
||||||
|
n->guest_hdr_len) {
|
||||||
|
virtio_error(vdev, "virtio-net header incorrect");
|
||||||
|
virtqueue_detach_element(q->tx_vq, elem, 0);
|
||||||
|
@@ -2560,8 +2565,8 @@ static int32_t virtio_net_flush_tx(VirtIONetQueue *q)
|
||||||
|
return -EINVAL;
|
||||||
|
}
|
||||||
|
if (n->needs_vnet_hdr_swap) {
|
||||||
|
- virtio_net_hdr_swap(vdev, (void *) &mhdr);
|
||||||
|
- sg2[0].iov_base = &mhdr;
|
||||||
|
+ virtio_net_hdr_swap(vdev, (void *) &vhdr);
|
||||||
|
+ sg2[0].iov_base = &vhdr;
|
||||||
|
sg2[0].iov_len = n->guest_hdr_len;
|
||||||
|
out_num = iov_copy(&sg2[1], ARRAY_SIZE(sg2) - 1,
|
||||||
|
out_sg, out_num,
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
Loading…
Reference in new issue