Jan Beulich 81b23ef82c xen: limit guest control of PCI command register ... Otherwise the guest can abuse that control to cause e.g. PCIe Unsupported Request responses (by disabling memory and/or I/O decoding and subsequently causing [CPU side] accesses to the respective address ranges), which (depending on system configuration) may be fatal to the host. This is CVE-2015-2756 / XSA-126. Signed-off-by: Jan Beulich <jbeulich@suse.com> Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com> Acked-by: Ian Campbell <ian.campbell@citrix.com> Message-id: alpine.DEB.2.02.1503311510300.7690@kaball.uk.xensource.com Signed-off-by: Peter Maydell <peter.maydell@linaro.org>		2015-04-09 23:37:21 +01:00
..
9pfs	9pfs: Fix warnings from Sparse	2015-03-19 11:11:55 +03:00
acpi	acpi: Add missing GCC_FMT_ATTR to local function	2015-03-25 13:39:24 +01:00
alpha
arm	arm: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory	2015-04-08 17:30:36 +01:00
audio	pcspk: Fix I/O port name	2015-04-04 09:45:59 +03:00
block	virtio-blk: correctly dirty guest memory	2015-04-08 10:39:18 +01:00
bt
char	sysbus: Make devices picking up backends unavailable with -device	2015-04-02 15:30:44 +02:00
core	powerpc: fix -machine usb=no for newworld and pseries machines	2015-03-25 22:49:47 +01:00
cpu
cris
display	Fix remaining warnings from Sparse (void return)	2015-03-19 11:11:55 +03:00
dma	omap: Fix warnings from Sparse	2015-03-19 11:11:55 +03:00
gpio	omap: Fix warnings from Sparse	2015-03-19 11:11:55 +03:00
i2c
i386	pc: acpi: fix pvpanic regression	2015-04-01 10:06:38 +02:00
ide	AHCI: Protect cmd register	2015-03-27 15:48:11 -04:00
input
intc	target-i386: clear bsp bit when designating bsp	2015-04-02 15:57:27 +02:00
ipack
isa	hw: Mark devices picking up char backends actively FIXME	2015-04-02 15:30:28 +02:00
lm32
m68k	m68k: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory	2015-03-25 14:35:24 +01:00
mem	pc-dimm: Add description for device list.	2015-03-19 11:17:36 +03:00
microblaze
mips	mips: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory	2015-03-25 14:35:31 +01:00
misc	omap: Fix warnings from Sparse	2015-03-19 11:11:55 +03:00
moxie
net	hw/net/e1000: fix integer endianness	2015-03-27 10:23:50 +00:00
nvram	fw_cfg: factor out initialization of FW_CFG_ID (rev. number)	2015-03-25 13:37:10 +01:00
openrisc
pci	pcie_aer: fix comment to match pcie spec	2015-03-18 12:48:21 +01:00
pci-bridge
pci-host
pcmcia
ppc	Bugfixes and making SCSI adapters IOMMU-friendly.	2015-03-26 17:33:35 +00:00
s390x	s390x/ipl: avoid sign extension	2015-03-30 09:25:17 +02:00
scsi	virtio-scsi-dataplane: fix memory leak for VirtIOSCSIVring	2015-03-26 14:23:16 +01:00
sd	sysbus: Make devices picking up backends unavailable with -device	2015-04-02 15:30:44 +02:00
sh4
sparc	sparc: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory	2015-03-25 14:36:14 +01:00
sparc64	fw_cfg: factor out initialization of FW_CFG_ID (rev. number)	2015-03-25 13:37:10 +01:00
ssi	omap: Fix warnings from Sparse	2015-03-19 11:11:55 +03:00
timer	Fix remaining warnings from Sparse (void return)	2015-03-19 11:11:55 +03:00
tpm	Fix remaining warnings from Sparse (void return)	2015-03-19 11:11:55 +03:00
tricore
unicore32
usb	usb: bugfix collection.	2015-03-20 09:50:08 +00:00
vfio
virtio	virtio: validate the existence of handle_output before calling it	2015-03-16 15:29:51 +01:00
watchdog	i6300esb: Fix signed integer overflow	2015-03-25 13:38:05 +01:00
xen	xen: limit guest control of PCI command register	2015-04-09 23:37:21 +01:00
xenpv
xtensa
Makefile.objs