qemu-commits
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Qemu-commits] [qemu/qemu] d06a9d: 9pfs: fix regression regarding CVE-20


From: Peter Maydell
Subject: [Qemu-commits] [qemu/qemu] d06a9d: 9pfs: fix regression regarding CVE-2023-2861
Date: Wed, 11 Dec 2024 10:14:32 -0800

  Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: d06a9d843fb65351e0e4dc42ba0c404f01ea92b3
      
https://github.com/qemu/qemu/commit/d06a9d843fb65351e0e4dc42ba0c404f01ea92b3
  Author: Christian Schoenebeck <qemu_oss@crudebyte.com>
  Date:   2024-12-10 (Tue, 10 Dec 2024)

  Changed paths:
    M hw/9pfs/9p-util.h

  Log Message:
  -----------
  9pfs: fix regression regarding CVE-2023-2861

The released fix for this CVE:

  f6b0de53fb8 ("9pfs: prevent opening special files (CVE-2023-2861)")

caused a regression with security_model=passthrough. When handling a
'Tmknod' request there was a side effect that 'Tmknod' request could fail
as 9p server was trying to adjust permissions:

  #6  close_if_special_file (fd=30) at ../hw/9pfs/9p-util.h:140
  #7  openat_file (mode=<optimized out>, flags=2228224,
      name=<optimized out>, dirfd=<optimized out>) at
      ../hw/9pfs/9p-util.h:181
  #8  fchmodat_nofollow (dirfd=dirfd@entry=31,
      name=name@entry=0x5555577ea6e0 "mysocket", mode=493) at
      ../hw/9pfs/9p-local.c:360
  #9  local_set_cred_passthrough (credp=0x7ffbbc4ace10, name=0x5555577ea6e0
      "mysocket", dirfd=31, fs_ctx=0x55555811f528) at
      ../hw/9pfs/9p-local.c:457
  #10 local_mknod (fs_ctx=0x55555811f528, dir_path=<optimized out>,
      name=0x5555577ea6e0 "mysocket", credp=0x7ffbbc4ace10) at
      ../hw/9pfs/9p-local.c:702
  #11 v9fs_co_mknod (pdu=pdu@entry=0x555558121140,
      fidp=fidp@entry=0x5555574c46c0, name=name@entry=0x7ffbbc4aced0,
      uid=1000, gid=1000, dev=<optimized out>, mode=49645,
      stbuf=0x7ffbbc4acef0) at ../hw/9pfs/cofs.c:205
  #12 v9fs_mknod (opaque=0x555558121140) at ../hw/9pfs/9p.c:3711

That's because server was opening the special file to adjust permissions,
however it was using O_PATH and it would have not returned the file
descriptor to guest. So the call to close_if_special_file() on that branch
was incorrect.

Let's lift the restriction introduced by f6b0de53fb8 such that it would
allow to open special files on host if O_PATH flag is supplied, not only
for 9p server's own operations as described above, but also for any client
'Topen' request.

It is safe to allow opening special files with O_PATH on host, because
O_PATH only allows path based operations on the resulting file descriptor
and prevents I/O such as read() and write() on that file descriptor.

Fixes: f6b0de53fb8 ("9pfs: prevent opening special files (CVE-2023-2861)")
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2337
Reported-by: Dirk Herrendorfer <d.herrendoerfer@de.ibm.com>
Signed-off-by: Christian Schoenebeck <qemu_oss@crudebyte.com>
Reviewed-by: Greg Kurz <groug@kaod.org>
Tested-by: Dirk Herrendorfer <d.herrendoerfer@de.ibm.com>
Message-Id: <E1tJWbk-007BH4-OB@kylie.crudebyte.com>


  Commit: 2b1b66e01f95b07ca72ebcfab3d43df8fbc26f2b
      
https://github.com/qemu/qemu/commit/2b1b66e01f95b07ca72ebcfab3d43df8fbc26f2b
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M docs/about/deprecated.rst
    M docs/about/removed-features.rst
    M docs/system/arm/aspeed.rst
    M hw/arm/aspeed.c

  Log Message:
  -----------
  arm: Remove tacoma-bmc machine

Removal was scheduled for 10.0. Use the rainier-bmc machine or the
ast2600-evb as a replacement.

Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Link: https://lore.kernel.org/r/20241119071352.515790-1-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: b00ca20440e081a45f5c0a65faf97267a3c5446a
      
https://github.com/qemu/qemu/commit/b00ca20440e081a45f5c0a65faf97267a3c5446a
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M hw/sd/aspeed_sdhci.c

  Log Message:
  -----------
  hw/sd/aspeed_sdhci: Fix coding style

Fix coding style issues from checkpatch.pl.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: https://lore.kernel.org/r/20241204084453.610660-2-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 0178d1198fa225c8ecce7ae52dee5854c2d13213
      
https://github.com/qemu/qemu/commit/0178d1198fa225c8ecce7ae52dee5854c2d13213
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M hw/arm/aspeed_ast2600.c

  Log Message:
  -----------
  hw/arm/aspeed: Fix coding style

Fix coding style issues from checkpatch.pl.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: https://lore.kernel.org/r/20241204084453.610660-3-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 6a0238a4731eaf26ec28f2f7b1d624375135f00c
      
https://github.com/qemu/qemu/commit/6a0238a4731eaf26ec28f2f7b1d624375135f00c
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M hw/arm/aspeed_ast2400.c
    M hw/arm/aspeed_ast2600.c
    M hw/sd/aspeed_sdhci.c
    M include/hw/sd/aspeed_sdhci.h

  Log Message:
  -----------
  hw:sdhci: Introduce a new "capareg" class member to set the different 
Capability Registers

Currently, it set the hardcode value of capability registers to all ASPEED SOCs
However, the value of capability registers should be different for all ASPEED
SOCs. For example: the bit 28 of the Capability Register 1 should be 1 for
64-bits System Bus support for AST2700.

Introduce a new "capareg" class member whose data type is uint_64 to set the
different Capability Registers to all ASPEED SOCs.

The value of Capability Register is "0x0000000001e80080" for AST2400 and
AST2500. The value of Capability Register is "0x0000000701f80080" for AST2600.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: https://lore.kernel.org/r/20241204084453.610660-4-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 83991b9104b68b82a8506fc48b58a799a6e97d10
      
https://github.com/qemu/qemu/commit/83991b9104b68b82a8506fc48b58a799a6e97d10
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M hw/sd/aspeed_sdhci.c
    M include/hw/sd/aspeed_sdhci.h

  Log Message:
  -----------
  hw/sd/aspeed_sdhci: Add AST2700 Support

Introduce a new ast2700 class to support AST2700. Add a new ast2700 SDHCI class
init function and set the value of capability register to "0x0000000719f80080".

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: https://lore.kernel.org/r/20241204084453.610660-5-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 0696e9b00e998e7a44546f2046f49ecbc21e8d8b
      
https://github.com/qemu/qemu/commit/0696e9b00e998e7a44546f2046f49ecbc21e8d8b
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M hw/arm/aspeed_ast27x0.c

  Log Message:
  -----------
  aspeed/soc: Support SDHCI for AST2700

Add SDHCI model for AST2700 SDHCI support. The SDHCI controller only support 1
slot and registers base address is start at 0x1408_0000 and its interrupt is
connected to GICINT133_INTC at bit 1.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: https://lore.kernel.org/r/20241204084453.610660-6-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: c38c53f22c3d0169ae0f663bb6a55f06f9f9c19b
      
https://github.com/qemu/qemu/commit/c38c53f22c3d0169ae0f663bb6a55f06f9f9c19b
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M hw/arm/aspeed_ast27x0.c

  Log Message:
  -----------
  aspeed/soc: Support eMMC for AST2700

Add SDHCI model for AST2700 eMMC support. The eMMC controller only support 1
slot and registers base address is start at 0x1209_0000 and its interrupt is
connected to GICINT 15.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: https://lore.kernel.org/r/20241204084453.610660-7-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: e50c72858da7d38790a2931f98c1f9cfd59f325a
      
https://github.com/qemu/qemu/commit/e50c72858da7d38790a2931f98c1f9cfd59f325a
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/functional/meson.build
    M tests/functional/test_arm_aspeed.py
    A tests/functional/test_arm_aspeed_ast1030.py

  Log Message:
  -----------
  tests/functional: Introduce a specific test for ast1030 SoC

This simply moves the ast1030 tests to a new test file. No changes.

Reviewed-by: Thomas Huth <thuth@redhat.com>
Link: https://lore.kernel.org/r/20241206131132.520911-2-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: e517cff70625c55e10e9e9b96b6f59865a7a1248
      
https://github.com/qemu/qemu/commit/e517cff70625c55e10e9e9b96b6f59865a7a1248
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    A tests/functional/aspeed.py
    M tests/functional/meson.build
    M tests/functional/test_arm_aspeed.py
    A tests/functional/test_arm_aspeed_palmetto.py

  Log Message:
  -----------
  tests/functional: Introduce a specific test for palmetto-bmc machine

This introduces a new aspeed module for sharing code between tests and
moves the palmetto test to a new test file. No changes in the test.

Reviewed-by: Thomas Huth <thuth@redhat.com>
Link: https://lore.kernel.org/r/20241206131132.520911-3-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 5f2b9738b281894d3fdc0affbdcada2f8c0cc19e
      
https://github.com/qemu/qemu/commit/5f2b9738b281894d3fdc0affbdcada2f8c0cc19e
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/functional/meson.build
    M tests/functional/test_arm_aspeed.py
    A tests/functional/test_arm_aspeed_romulus.py

  Log Message:
  -----------
  tests/functional: Introduce a specific test for romulus-bmc machine

This simply moves the romulus-bmc test to a new test file. No changes
in the test. The do_test_arm_aspeed routine is removed from the
test_arm_aspeed.py file because it is now unused.

Reviewed-by: Thomas Huth <thuth@redhat.com>
Link: https://lore.kernel.org/r/20241206131132.520911-4-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 08743dbaa12e0e3c1622bfcdd6cbb7eb03d51ffb
      
https://github.com/qemu/qemu/commit/08743dbaa12e0e3c1622bfcdd6cbb7eb03d51ffb
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/functional/aspeed.py
    M tests/functional/meson.build
    M tests/functional/test_arm_aspeed.py
    A tests/functional/test_arm_aspeed_ast2500.py

  Log Message:
  -----------
  tests/functional: Introduce a specific test for ast2500 SoC

This moves the ast2500-evb tests to a new test file and extends the
aspeed module with routines used to run the buildroot and sdk
tests. No changes in the test.

Reviewed-by: Thomas Huth <thuth@redhat.com>
Link: https://lore.kernel.org/r/20241206131132.520911-5-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: c7bc9cab3f5e2c0f807d801d09d0bbe95c4ce825
      
https://github.com/qemu/qemu/commit/c7bc9cab3f5e2c0f807d801d09d0bbe95c4ce825
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/functional/meson.build
    M tests/functional/test_arm_aspeed.py
    A tests/functional/test_arm_aspeed_ast2600.py

  Log Message:
  -----------
  tests/functional: Introduce a specific test for ast2600 SoC

This moves the ast2600-evb tests to a new test file. No changes in the
test. The routines used to run the buildroot and sdk tests are removed
from the test_arm_aspeed.py file because now unused.

Reviewed-by: Thomas Huth <thuth@redhat.com>
Link: https://lore.kernel.org/r/20241206131132.520911-6-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 38cd5c5235cb3bdca5a45f4b7fb4bf3d1c0ad3ca
      
https://github.com/qemu/qemu/commit/38cd5c5235cb3bdca5a45f4b7fb4bf3d1c0ad3ca
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/functional/meson.build
    R tests/functional/test_arm_aspeed.py
    A tests/functional/test_arm_aspeed_rainier.py

  Log Message:
  -----------
  tests/functional: Introduce a specific test for rainier-bmc machine

This simply moves the rainier-bmc test to a new test file. No changes
in the test. The test_arm_aspeed.py is deleted.

Reviewed-by: Thomas Huth <thuth@redhat.com>
Link: https://lore.kernel.org/r/20241206131132.520911-7-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 3cbbd9cb93d0f954e09478bcf72d177b893883af
      
https://github.com/qemu/qemu/commit/3cbbd9cb93d0f954e09478bcf72d177b893883af
  Author: Cédric Le Goater <clg@redhat.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/avocado/boot_linux_console.py
    M tests/functional/test_arm_aspeed_rainier.py

  Log Message:
  -----------
  tests/functional: Move debian boot test from avocado

This simply moves the debian boot test from the avocado testsuite to
the new functional testsuite. No changes in the test.

Reviewed-by: Thomas Huth <thuth@redhat.com>
Link: https://lore.kernel.org/r/20241206131132.520911-8-clg@redhat.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 755e984aa4af97070a3f63812e9ed33f729dda9b
      
https://github.com/qemu/qemu/commit/755e984aa4af97070a3f63812e9ed33f729dda9b
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Move testcases to test_palmetto_bmc function

So far, the test cases are used for testing SMC model with AST2400 BMC.
However, AST2400 is end off live and ASPEED is no longer support this SOC.
To test SMC model for AST2500, AST2600 and AST1030, move the test cases
from main to test_palmetto_bmc function.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-2-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 975d4baf686c1bf16daf0277c25cd6f494df0c68
      
https://github.com/qemu/qemu/commit/975d4baf686c1bf16daf0277c25cd6f494df0c68
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Introduce a new TestData to test different BMC 
SOCs

Currently, these test cases are only used for testing fmc_cs0 for AST2400.
To test others BMC SOCs, introduces a new TestData structure.
Users can set the spi base address, flash base address, jedesc id and so on
for different BMC SOCs and flash model testing.

Introduce new helper functions to make the test case more readable.

Set spi base address 0x1E620000, flash_base address 0x20000000
and jedec id 0x20ba19 for fmc_cs0 with n25q256a flash for AST2400
SMC model testing.

To pass the TestData into the test case, replace qtest_add_func with
qtest_add_data_func.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-3-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: dc32f5baf94e901e570e48d6244897c2418fe63c
      
https://github.com/qemu/qemu/commit/dc32f5baf94e901e570e48d6244897c2418fe63c
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Support to test all CE pins

Currently, these test cases only support to test CE0. To test all CE pins,
introduces new ce and node members in TestData structure. The ce member is used
for saving the ce index and node member is used for saving the node path,
respectively.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-4-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 369a47ae4b34379048728a3321163fc48fa109b1
      
https://github.com/qemu/qemu/commit/369a47ae4b34379048728a3321163fc48fa109b1
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Introducing a "page_addr" data field

Currently, these test cases used the hardcode offset 0x1400000 (0x14000 * 256)
which was beyond the 16MB flash size for flash page read/write command testing.
However, the default fmc flash model of ast1030-a1 EVB is "w25q80bl" whose size
is 1MB. To test SoC flash models, introduces a new page_addr member in TestData
structure, so users can set the offset for flash page read/write command
testing.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-5-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 658ebe13687a5069f907ec8ece040adeb56667cc
      
https://github.com/qemu/qemu/commit/658ebe13687a5069f907ec8ece040adeb56667cc
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Support to test AST2500

Add test_ast2500_evb function and reused testcases for AST2500 testing.
The spi base address, flash base address and ce index of fmc_cs0 are
0x1E620000, 0x20000000 and 0, respectively.
The default flash model of fmc_cs0 is "mx25l25635e" whose size is 32MB,
so set jedec_id 0xc22019.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-6-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 84f7ea6db7709c8378362c4a1af30a3e3e3932b1
      
https://github.com/qemu/qemu/commit/84f7ea6db7709c8378362c4a1af30a3e3e3932b1
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Support to test AST2600

Add test_ast2600_evb function and reused testcases for AST2600 testing.
The spi base address, flash base address and ce index of fmc_cs0 are
0x1E620000, 0x20000000 and 0, respectively.
The default flash model of fmc_cs0 is "mx66u51235f" whose size is 64MB,
so set jedec_id 0xc2253a.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-7-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 0f6e8aa4fc5431c7f8b3d0ac083c632512a9b7d4
      
https://github.com/qemu/qemu/commit/0f6e8aa4fc5431c7f8b3d0ac083c632512a9b7d4
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Support to test AST1030

Add test_ast1030_evb function and reused testcases for AST1030 testing.
The base address, flash base address and ce index of fmc_cs0 are
0x7E620000, 0x80000000 and 0, respectively.
The default flash model of fmc_cs0 is "w25q80bl" whose size is 1MB,
so set jedec_id 0xef4014.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-8-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 08479f0ca01414aadf513717ba3e1258321e6513
      
https://github.com/qemu/qemu/commit/08479f0ca01414aadf513717ba3e1258321e6513
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M tests/qtest/aspeed_smc-test.c

  Log Message:
  -----------
  test/qtest/aspeed_smc-test: Support write page command with QPI mode

Add a new testcase for write page command with QPI mode testing.
Currently, only run this testcase for AST2500, AST2600 and AST1030.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-9-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 3e62a32ddb89831c4a01b9526ae656f7fb802998
      
https://github.com/qemu/qemu/commit/3e62a32ddb89831c4a01b9526ae656f7fb802998
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    A tests/qtest/aspeed-smc-utils.c
    A tests/qtest/aspeed-smc-utils.h
    M tests/qtest/aspeed_smc-test.c
    M tests/qtest/meson.build

  Log Message:
  -----------
  test/qtest: Introduce a new aspeed-smc-utils.c to place common testcases

The testcases for ASPEED SMC model were placed in aspeed_smc-test.c.
However, this test file only supports for ARM32. To support all ASPEED SOCs
such as AST2700 whose CPU architecture is aarch64, introduces a new
aspeed-smc-utils source file and move all common APIs and testcases
from aspeed_smc-test.c to aspeed-smc-utils.c.

Finally, users are able to re-used these testcase for AST2700 and future
ASPEED SOCs testing.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-10-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: 124f4dc0d832c1bf3a4513c05a2b93bac0a5fac0
      
https://github.com/qemu/qemu/commit/124f4dc0d832c1bf3a4513c05a2b93bac0a5fac0
  Author: Jamin Lin <jamin_lin@aspeedtech.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    A tests/qtest/ast2700-smc-test.c
    M tests/qtest/meson.build

  Log Message:
  -----------
  test/qtest/ast2700-smc-test: Support to test AST2700

Add test_ast2700_evb function and reused testcases which are from
aspeed_smc-test.c for AST2700 testing. The base address, flash base address
and ce index of fmc_cs0 are 0x14000000, 0x100000000 and 0, respectively.
The default flash model of fmc_cs0 is "w25q01jvq" whose size is 128MB,
so set jedec_id 0xef4021.

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Reviewed-by: Cédric Le Goater <clg@redhat.com>
Link: 
https://lore.kernel.org/r/20241127091543.1243114-11-jamin_lin@aspeedtech.com
Signed-off-by: Cédric Le Goater <clg@redhat.com>


  Commit: b5e3f63a4a78e8c172507bf9853b7b638c5da44a
      
https://github.com/qemu/qemu/commit/b5e3f63a4a78e8c172507bf9853b7b638c5da44a
  Author: Peter Maydell <peter.maydell@linaro.org>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M hw/9pfs/9p-util.h

  Log Message:
  -----------
  Merge tag 'pull-9p-20241210' of https://github.com/cschoenebeck/qemu into 
staging

* Fix a regression regarding CVE-2023-2861 with security_model=passthrough
  which caused certain sockets on guest to fail.

# -----BEGIN PGP SIGNATURE-----
#
# iQJLBAABCgA1FiEEltjREM96+AhPiFkBNMK1h2Wkc5UFAmdYErEXHHFlbXVfb3Nz
# QGNydWRlYnl0ZS5jb20ACgkQNMK1h2Wkc5UaYRAAiyQ/o1Ex7u2SpKzVs5VWSS9j
# AgtF9FD4S9m6XMY+7VvX2KrUK/r5zUzjDiZyKTBT+TqczFIWvV6N2bb9II+PS1if
# LwRCPk4jwl7ptk9r2/+jSLeQ9a1D58p8VsSaJCJWOwKuupy45L4iWQsyIhscdKve
# 13Zjc0SZOOcN3A5Q9HdMjDLuW1WXlxf+UzRnca1CpDLfx0ubMIL4YGYB7Rm0JG+A
# OaJT2Sd71JH7TU88j0sVhVFMy/TUY+zSrU2GJ/Y1ESK2w8MxYH2VyDvNnXd5tlqV
# RcBCY86cZfeDdxf1xu/WOGAhDbi++tlQtu+bSYZiMdlYDB7C4yZgtdMTVhSPstlK
# 1jndtbh4zUNeWpMA5LIwQ14JmjSUG/ea6EXN1i6xy6rCsFrhhEmG+MOxPm+SsnSv
# OtL9RwKfx3nuCuVhurjc/1JNxCSthYJPivzBN52B3Gh2zBvUCmHz5DL2YLI1fYYd
# YTxbSkMOBTxIL5tf7e2Zyfu1HezSNEMjJAX9wxu/GY7T+bWJBjIinMVBHEzBiAdB
# aHuScq37uxZH1B8NmddZvgitCP7m18K2jVutNE0GFy4VQkogKIUEh+2b5N2y0nUi
# eKS7iue/6CJyfQCrucN1hR60xPJXMtApi/7sNW9+b5H7fbIcdPzL93Xo58CfYZPt
# kdlqod3W+ivvKqjeGvY=
# =7A03
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue 10 Dec 2024 10:06:41 GMT
# gpg:                using RSA key 96D8D110CF7AF8084F88590134C2B58765A47395
# gpg:                issuer "qemu_oss@crudebyte.com"
# gpg: Good signature from "Christian Schoenebeck <qemu_oss@crudebyte.com>" 
[unknown]
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: ECAB 1A45 4014 1413 BA38  4926 30DB 47C3 A012 D5F4
#      Subkey fingerprint: 96D8 D110 CF7A F808 4F88  5901 34C2 B587 65A4 7395

* tag 'pull-9p-20241210' of https://github.com/cschoenebeck/qemu:
  9pfs: fix regression regarding CVE-2023-2861

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>


  Commit: a5ba0a7e4e150d1350a041f0d0ef9ca6c8d7c307
      
https://github.com/qemu/qemu/commit/a5ba0a7e4e150d1350a041f0d0ef9ca6c8d7c307
  Author: Peter Maydell <peter.maydell@linaro.org>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M docs/about/deprecated.rst
    M docs/about/removed-features.rst
    M docs/system/arm/aspeed.rst
    M hw/arm/aspeed.c
    M hw/arm/aspeed_ast2400.c
    M hw/arm/aspeed_ast2600.c
    M hw/arm/aspeed_ast27x0.c
    M hw/sd/aspeed_sdhci.c
    M include/hw/sd/aspeed_sdhci.h
    M tests/avocado/boot_linux_console.py
    A tests/functional/aspeed.py
    M tests/functional/meson.build
    R tests/functional/test_arm_aspeed.py
    A tests/functional/test_arm_aspeed_ast1030.py
    A tests/functional/test_arm_aspeed_ast2500.py
    A tests/functional/test_arm_aspeed_ast2600.py
    A tests/functional/test_arm_aspeed_palmetto.py
    A tests/functional/test_arm_aspeed_rainier.py
    A tests/functional/test_arm_aspeed_romulus.py
    A tests/qtest/aspeed-smc-utils.c
    A tests/qtest/aspeed-smc-utils.h
    M tests/qtest/aspeed_smc-test.c
    A tests/qtest/ast2700-smc-test.c
    M tests/qtest/meson.build

  Log Message:
  -----------
  Merge tag 'pull-aspeed-20241211' of https://github.com/legoater/qemu into 
staging

aspeed queue:

* Removed tacoma-bmc machine
* Added support for SDHCI on AST2700 SoC
* Improved functional tests
* Extended SMC qtest to all Aspeed SoCs

# -----BEGIN PGP SIGNATURE-----
#
# iQIzBAABCAAdFiEEoPZlSPBIlev+awtgUaNDx8/77KEFAmdZMTQACgkQUaNDx8/7
# 7KE9dhAAw9xNULQ7KG9udSNqYPRGP2w8teO4b9YOfRlJlSJuCInbeLjg1Hw3b/bZ
# rEtnwjl18f+mpmHzvasQthN4vUtcR1UwrW6SvmAjAQV8iNw059ugxWdxV9VR72hc
# 1AlzsW/Hea8s448INTEUvEjosYeLRRxZQyiJt9Lf5IkU/6yLj98YssKKvRqPpkxP
# Ens7PapgGPqA7cPnPYofRn2WINtHNnvX2FGlWTnCoPVp85VJzjJVFcK14kBych2U
# fmNZAY7pPTBkwwqR/qoPOyqBBCLeu3Jimk7hR8VbBbfwMT/Zg3RO7TJfwJex9TEs
# PIViRuM8krEppL6fmJlpDTatU2t0ffQY1SSVRWCDxJDDRpQN7iDei3vuzXOfLVAe
# lLSXS5Q1f+sO6JzbqkYSufh5V7zR5De8rk4j5WszC3cko2godTZm3qyqUxEaQGcx
# kjG58R+a7qLLeNMcPed5qgGjYeCPmhHay80E3faXKOezktSIM5z5b822ZPZfw3oG
# gTddZ4hdTg0BxtEjSv19qqnJW0Hs+NZJQuyu34QS82dZqPeZ22dmfULtf9uQ/3oV
# A/jKfTncl3sW1otfLABj6/RPVH/Sr7IM70XBjlc1+p9Ci7Es17er8umFOAyek9WL
# pE/Lq23MnAPBUsPKOJRdDFClTGwdnemXJoymwY/NZS4SgV3GcD8=
# =BiCq
# -----END PGP SIGNATURE-----
# gpg: Signature made Wed 11 Dec 2024 06:29:08 GMT
# gpg:                using RSA key A0F66548F04895EBFE6B0B6051A343C7CFFBECA1
# gpg: Good signature from "Cédric Le Goater <clg@redhat.com>" [full]
# gpg:                 aka "Cédric Le Goater <clg@kaod.org>" [full]
# Primary key fingerprint: A0F6 6548 F048 95EB FE6B  0B60 51A3 43C7 CFFB ECA1

* tag 'pull-aspeed-20241211' of https://github.com/legoater/qemu: (24 commits)
  test/qtest/ast2700-smc-test: Support to test AST2700
  test/qtest: Introduce a new aspeed-smc-utils.c to place common testcases
  test/qtest/aspeed_smc-test: Support write page command with QPI mode
  test/qtest/aspeed_smc-test: Support to test AST1030
  test/qtest/aspeed_smc-test: Support to test AST2600
  test/qtest/aspeed_smc-test: Support to test AST2500
  test/qtest/aspeed_smc-test: Introducing a "page_addr" data field
  test/qtest/aspeed_smc-test: Support to test all CE pins
  test/qtest/aspeed_smc-test: Introduce a new TestData to test different BMC 
SOCs
  test/qtest/aspeed_smc-test: Move testcases to test_palmetto_bmc function
  tests/functional: Move debian boot test from avocado
  tests/functional: Introduce a specific test for rainier-bmc machine
  tests/functional: Introduce a specific test for ast2600 SoC
  tests/functional: Introduce a specific test for ast2500 SoC
  tests/functional: Introduce a specific test for romulus-bmc machine
  tests/functional: Introduce a specific test for palmetto-bmc machine
  tests/functional: Introduce a specific test for ast1030 SoC
  aspeed/soc: Support eMMC for AST2700
  aspeed/soc: Support SDHCI for AST2700
  hw/sd/aspeed_sdhci: Add AST2700 Support
  ...

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>


Compare: https://github.com/qemu/qemu/compare/97f2796a3736...a5ba0a7e4e15

To unsubscribe from these emails, change your notification settings at 
https://github.com/qemu/qemu/settings/notifications



reply via email to

[Prev in Thread] Current Thread [Next in Thread]