1. 29 3月, 2009 2 次提交
  2. 21 3月, 2009 1 次提交
  3. 13 3月, 2009 2 次提交
  4. 06 3月, 2009 1 次提交
    • A
      monitor: Rework early disk password inquiry (Jan Kiszka) · c0f4ce77
      aliguori 提交于
      Reading the passwords for encrypted hard disks during early startup is
      broken (I guess for quiet a while now):
       - No monitor terminal is ready for input at this point
       - Forcing all mux'ed terminals into monitor mode can confuse other
         users of that channels
      
      To overcome these issues and to lay the ground for a clean decoupling of
      monitor terminals, this patch changes the initial password inquiry as
      follows:
       - Prevent autostart if there is some encrypted disk
       - Once the user tries to resume the VM, prompt for all missing
         passwords
       - Only resume if all passwords were accepted
      Signed-off-by: NJan Kiszka <jan.kiszka@siemens.com>
      Signed-off-by: NAnthony Liguori <aliguori@us.ibm.com>
      
      
      git-svn-id: svn://svn.savannah.nongnu.org/qemu/trunk@6707 c046a42c-6fe2-441c-8c8c-71466251a162
      c0f4ce77
  5. 04 3月, 2009 1 次提交
    • A
      Fix CVE-2008-0928 - insufficient block device address range checking (Anthony Liguori) · 71d0770c
      aliguori 提交于
      Introduce a growable flag that's set by bdrv_file_open().  Block devices should
      never be growable, only files that are being used by block devices.
      
      I went through Fabrice's early comments about the patch that was first applied.
      While I disagree with that patch, I also disagree with Fabrice's suggestion.
      
      There's no good reason to do the checks in the block drivers themselves.  It
      just increases the possibility that this bug could show up again.  Since we're
      calling bdrv_getlength() to determine the length, we're giving the block drivers
      a chance to chime in and let us know what range is valid.
      
      Basically, this patch makes the BlockDriver API guarantee that all requests are
      within 0..bdrv_getlength() which to me seems like a Good Thing.
      
      What do others think?
      Signed-off-by: NAnthony Liguori <aliguori@us.ibm.com>
      Signed-off-by: NAnthony Liguori <aliguori@us.ibm.com>
      
      
      git-svn-id: svn://svn.savannah.nongnu.org/qemu/trunk@6677 c046a42c-6fe2-441c-8c8c-71466251a162
      71d0770c
  6. 11 2月, 2009 1 次提交
  7. 09 11月, 2008 1 次提交
  8. 18 9月, 2008 1 次提交
  9. 12 3月, 2008 2 次提交
  10. 25 12月, 2007 1 次提交
  11. 02 12月, 2007 1 次提交
  12. 11 11月, 2007 1 次提交
  13. 17 9月, 2007 3 次提交
  14. 19 8月, 2006 1 次提交
  15. 07 8月, 2006 1 次提交
  16. 06 8月, 2006 2 次提交
  17. 02 8月, 2006 1 次提交
  18. 04 6月, 2006 1 次提交
  19. 19 12月, 2005 1 次提交
  20. 16 11月, 2004 1 次提交
  21. 19 9月, 2004 1 次提交
  22. 02 8月, 2004 1 次提交