[Qemu-devel] qemu/rtl8139: Max transmit frame size

2006-11-14 Thread Herbert Xu
Hi: I noticed a bug in the realloc error checking code in the QEMU backend for RealTek8139. However, what's worse is that there is no cap on the total size of the transmit buffer at all. So a guest can keep extending it until memory runs out. CP_TX_BUFFER_SIZE is already 64K. So it seems to me

Re: [Qemu-devel] Recursion in cpu_physical_memory_rw

2006-11-14 Thread Herbert Xu
On Wed, Nov 15, 2006 at 12:57:24AM +, Paul Brook wrote: > > It isn't always system memory. Some DMA controllers deliberately write to > device FIFOs. There are also several devices which map areas of onboard RAM. > At minimum you need to make those to use RAM mappings rather than MMIO. I'm

Re: [Qemu-devel] ARM Versatile/Realview reset

2006-11-14 Thread Aurelien Jarno
On Wed, Nov 15, 2006 at 01:26:59AM +0100, Aurelien Jarno wrote: > The ARM Versatile and Realview platforms support reset (but not halt), > howvever it is not implemented in QEMU. The patch below adds this > support. It is very similar to the patch from Daniel Jacobowitz > concerning the MIPS pl

Re: [Qemu-devel] Recursion in cpu_physical_memory_rw

2006-11-14 Thread Paul Brook
On Wednesday 15 November 2006 00:43, Herbert Xu wrote: > Hi: > > A number of qemu driver backends (such as rtl8139) call the function > cpu_physical_memory_rw to read/write guest memory. The target guest > memory address is often supplied by the guest. This opens up the > possibility of a guest g

[Qemu-devel] Recursion in cpu_physical_memory_rw

2006-11-14 Thread Herbert Xu
Hi: A number of qemu driver backends (such as rtl8139) call the function cpu_physical_memory_rw to read/write guest memory. The target guest memory address is often supplied by the guest. This opens up the possibility of a guest giving an address which happens to be an MMIO address which can pot

[Qemu-devel] ARM Versatile/Realview reset

2006-11-14 Thread Aurelien Jarno
The ARM Versatile and Realview platforms support reset (but not halt), howvever it is not implemented in QEMU. The patch below adds this support. It is very similar to the patch from Daniel Jacobowitz concerning the MIPS platform. Note that you need a kernel >= 2.6.19-rc1 (or a patched kernel)

[Qemu-devel] Exit on Reboot

2006-11-14 Thread Ricardo Almeida
Hi, On the 6th of November (http://lists.gnu.org/archive/html/qemu-devel/2006-11/msg00064.html) a trivial patch was sent to the list so that qemu would exit on reboot. I believe it's a great feature that should be available on official qemu. I believe (I haven't seen any mail with that commit) i

[Qemu-devel] qemu/hw arm_timer.c

2006-11-14 Thread Paul Brook
CVSROOT:/sources/qemu Module name:qemu Changes by: Paul Brook 06/11/14 21:13:53 Modified files: hw : arm_timer.c Log message: ARM timer counts down, not up. CVSWeb URLs: http://cvs.savannah.gnu.org/viewcvs/qemu/hw/arm_timer.c?cvsroot=qemu&r1=1.1&