Original Xbox Emulator for Windows, macOS, and Linux (Active Development)
Go to file
Alex Williamson 567d7d3e6b vfio/common: Work around kernel overflow bug in DMA unmap
A kernel bug was introduced in v4.15 via commit 71a7d3d78e3c which
adds a test for address space wrap-around in the vfio DMA unmap path.
Unfortunately due to overflow, the kernel detects an unmap of the last
page in the 64-bit address space as a wrap-around.  In QEMU, a Q35
guest with VT-d emulation and guest IOMMU enabled will attempt to make
such an unmap request during VM system reset, triggering an error:

  qemu-kvm: VFIO_UNMAP_DMA: -22
  qemu-kvm: vfio_dma_unmap(0x561f059948f0, 0xfef00000, 0xffffffff01100000) = -22 (Invalid argument)

Here the IOVA start address (0xfef00000) and the size parameter
(0xffffffff01100000) add to exactly 2^64, triggering the bug.  A
kernel fix is queued for the Linux v5.0 release to address this.

This patch implements a workaround to retry the unmap, excluding the
final page of the range when we detect an unmap failing which matches
the requirements for this issue.  This is expected to be a safe and
complete workaround as the VT-d address space does not extend to the
full 64-bit space and therefore the last page should never be mapped.

This workaround can be removed once all kernels with this bug are
sufficiently deprecated.

Link: https://bugzilla.redhat.com/show_bug.cgi?id=1662291
Reported-by: Pei Zhang <pezhang@redhat.com>
Debugged-by: Peter Xu <peterx@redhat.com>
Reviewed-by: Peter Xu <peterx@redhat.com>
Reviewed-by: Cornelia Huck <cohuck@redhat.com>
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
2019-02-21 21:07:03 -07:00
accel kvm: Add kvm_set_ioeventfd* traces 2019-02-14 11:46:30 +01:00
audio wavcapture: Convert to error_report 2019-02-14 11:46:30 +01:00
backends hostmem: add more information in error messages 2019-01-28 15:52:05 -02:00
block block/dirty-bitmap: Documentation and Comment fixups 2019-02-19 17:49:43 -05:00
bsd-user avoid TABs in files that only contain a few 2019-01-11 15:46:56 +01:00
capstone@22ead3e0bf
chardev char-pty: remove write_lock usage 2019-02-13 16:46:39 +01:00
contrib * cpu-exec fixes (Emilio, Laurent) 2019-02-05 19:39:22 +00:00
crypto crypto: finish removing TABs 2019-02-05 16:50:18 +01:00
default-configs hw/vfio/Makefile.objs: Create new CONFIG_* variables for VFIO core and PCI 2019-02-05 16:50:21 +01:00
disas disas: nanoMIPS: Amend DSP instructions related comments 2019-01-24 17:48:33 +01:00
docs qapi: Generate QAPIEvent stuff into separate files 2019-02-18 14:44:04 +01:00
dtc@88f18909db Update dtc/libfdt submodule to v1.4.7 2018-10-02 13:53:26 +10:00
fpu softfloat: enforce softfloat if the host's FMA is broken 2019-01-22 20:48:17 +00:00
fsdev qemu/queue.h: leave head structs anonymous unless necessary 2019-01-11 15:46:55 +01:00
gdb-xml gdbstub: Fix i386/x86_64 machine description and add control registers 2019-02-05 16:50:18 +01:00
hw vfio/common: Work around kernel overflow bug in DMA unmap 2019-02-21 21:07:03 -07:00
include ppc patch queue 2019-02-19 2019-02-18 16:20:13 +00:00
io io: add qio_task_wait_thread to join with a background thread 2019-02-12 17:35:56 +01:00
libdecnumber
linux-headers include: update Linux headers to 4.21-rc1/5.0-rc1 2019-02-04 00:08:58 -05:00
linux-user s390x: Fix the confusing contributions-after-2012 license statements 2019-02-18 11:25:43 +01:00
migration migration: introduce pages-per-second 2019-01-23 15:51:47 +00:00
nbd nbd/server: Kill pointless shadowed variable 2019-02-11 14:35:43 -06:00
net char: allow specifying a GMainContext at opening time 2019-02-13 14:23:39 +01:00
pc-bios Update OpenBIOS images to 3464681b built from submodule. 2019-02-15 10:07:40 +00:00
po po/Makefile: Modern shell scripting (use $() instead of ``) 2018-10-24 07:39:10 +01:00
qapi block/dirty-bitmap: Documentation and Comment fixups 2019-02-19 17:49:43 -05:00
qga qemu/queue.h: simplify reverse access to QTAILQ 2019-01-11 15:46:55 +01:00
qobject json: Fix % handling when not interpolating 2019-01-24 15:20:59 +01:00
qom qom/cpu: Add cluster_index to CPUState 2019-01-29 11:46:05 +00:00
replay replay: Exit on errors reading from replay log 2018-11-08 13:24:35 +00:00
roms Update OpenBIOS images to 3464681b built from submodule. 2019-02-15 10:07:40 +00:00
scripts Revert "qapi-events: add 'if' condition to implicit event enum" 2019-02-18 14:44:05 +01:00
scsi file-posix: Switch to .bdrv_co_ioctl 2018-12-14 11:52:41 +01:00
slirp slirp: wrap the remaining socket functions 2019-02-12 20:49:13 +01:00
stubs qapi: make query-cpu-definitions depend on specific targets 2019-02-18 14:44:05 +01:00
target ppc patch queue 2019-02-19 2019-02-18 16:20:13 +00:00
tcg tcg/i386: fix unsigned vector saturating arithmetic 2019-02-11 08:52:44 -08:00
tests dirty-bitmap: Expose persistent flag to 'query-block' 2019-02-19 17:49:43 -05:00
trace trace: simple style changes 2018-12-12 10:04:59 +00:00
ui qapi: Generate QAPIEvent stuff into separate files 2019-02-18 14:44:04 +01:00
util slirp: replace global polling with per-instance & notifier 2019-02-07 15:49:08 +02:00
.cirrus.yml .cirrus.yml: basic compile and test for FreeBSD 2019-02-08 17:32:35 +00:00
.dir-locals.el
.editorconfig editorconfig: set emacs mode 2018-11-01 12:13:12 +04:00
.exrc
.gdbinit
.gitignore qapi: Generate QAPIEvent stuff into separate files 2019-02-18 14:44:04 +01:00
.gitmodules gitmodules: use 'https://' instead of 'git://' 2018-11-12 11:26:02 +00:00
.gitpublish
.mailmap maint: Grammar fix to mailmap 2018-12-11 18:35:54 +01:00
.shippable.yml .shippable.yml: disable the win cross tests 2018-12-17 13:02:12 +00:00
.travis.yml .travis.yml: fold --disable-tcg into alternate coroutine builds 2019-02-08 17:32:35 +00:00
arch_init.c
balloon.c balloon: Allow multiple inhibit users 2018-08-17 09:27:15 -06:00
block.c bdrv_query_image_info Error parameter added 2019-02-11 14:35:43 -06:00
blockdev-nbd.c nbd/server: Hoist length check to qmp_nbd_server_add 2019-01-21 15:49:51 -06:00
blockdev.c blockdev: acquire aio_context for bitmap add/remove 2019-02-19 17:49:43 -05:00
blockjob.c block: Use a single global AioWait 2018-09-25 15:50:15 +02:00
bootdevice.c fw_cfg: ignore suffixes in the bootdevice list dependent on machine class 2018-08-16 22:27:43 -03:00
bt-host.c
bt-vhci.c
Changelog
CODING_STYLE
configure MIPS queue for February 14th, 2019 2019-02-14 18:33:00 +00:00
COPYING
COPYING.LIB COPYING.LIB: Synchronize the LGPL 2.1 with the version from gnu.org 2019-01-30 11:01:22 +01:00
cpus-common.c qemu/queue.h: simplify reverse access to QTAILQ 2019-01-11 15:46:55 +01:00
cpus.c cpus: ignore ESRCH in qemu_cpu_kick_thread() 2019-02-05 16:50:16 +01:00
device_tree.c device_tree.c: Don't use load_image() 2018-12-14 13:30:52 +00:00
device-hotplug.c blockdev: Convert drive_new() to Error 2018-10-19 14:51:34 +02:00
disas.c disas: Add RISC-V support 2018-12-26 06:40:02 +11:00
dma-helpers.c
dump.c dump: Set correct vaddr for ELF dump 2019-02-06 15:51:12 +01:00
exec.c mmap-alloc: fix hugetlbfs misaligned length in ppc64 2019-02-05 10:58:33 -05:00
gdbstub.c gdbstub: Send a reply to the vKill packet. 2019-02-15 09:56:41 +00:00
gitdm.config contrib: add a basic gitdm config 2018-12-17 08:25:10 +00:00
HACKING
hmp-commands-info.hx hmp-commands-info: add sync-profile 2018-08-23 18:46:25 +02:00
hmp-commands.hx Deprecate HMP cpu-add 2018-12-11 15:45:22 -02:00
hmp.c - some configure updates (HAX/NetBSD, remove "wav", -Waddress-of-packed-member) 2019-02-14 17:42:25 +00:00
hmp.h hmp-commands: add sync-profile 2018-08-23 18:46:25 +02:00
ioport.c
iothread.c iothread: fix iothread hang when stop too soon 2019-02-12 11:49:17 +08:00
job-qmp.c jobs: canonize Error object 2018-08-31 16:28:33 +02:00
job.c job: Fix off-by-one assert checks for JobSTT and JobVerbTable 2018-11-12 17:49:21 +01:00
LICENSE
MAINTAINERS s390x: upgrade status of KVM cores to "supported" 2019-02-18 12:00:44 +01:00
Makefile build: Deal with all of QAPI's .o in qapi/Makefile.objs 2019-02-18 14:44:04 +01:00
Makefile.objs build: Deal with all of QAPI's .o in qapi/Makefile.objs 2019-02-18 14:44:04 +01:00
Makefile.target build: Deal with all of QAPI's .o in qapi/Makefile.objs 2019-02-18 14:44:04 +01:00
memory_ldst.inc.c
memory_mapping.c qemu/queue.h: simplify reverse access to QTAILQ 2019-01-11 15:46:55 +01:00
memory.c qemu/queue.h: simplify reverse access to QTAILQ 2019-01-11 15:46:55 +01:00
module-common.c
monitor.c qmp: Deprecate query-events in favor of query-qmp-schema 2019-02-18 14:44:05 +01:00
numa.c numa: Fixed the memory leak of numa error message 2019-01-28 15:52:05 -02:00
os-posix.c util: add qemu_write_pidfile() 2018-10-02 18:47:55 +02:00
os-win32.c util: add qemu_write_pidfile() 2018-10-02 18:47:55 +02:00
qdev-monitor.c qdev-monitor: Make device options help nicer 2018-11-05 15:18:04 +01:00
qdict-test-data.txt
qemu-bridge-helper.c
qemu-deprecated.texi qmp: Deprecate query-events in favor of query-qmp-schema 2019-02-18 14:44:05 +01:00
qemu-doc.texi qemu-doc: Add nanoMIPS ISA information 2019-01-24 17:48:33 +01:00
qemu-edid.c display/edid: add edid generator to qemu. 2018-09-27 08:07:51 +02:00
qemu-ga.texi
qemu-img-cmds.hx qemu-img: Add -C option for convert with copy offloading 2018-07-30 15:35:37 +02:00
qemu-img.c qemu-io: Add generic function for reinitializing optind. 2019-01-31 00:38:19 +01:00
qemu-img.texi qemu-img: Add -C option for convert with copy offloading 2018-07-30 15:35:37 +02:00
qemu-io-cmds.c bdrv_query_image_info Error parameter added 2019-02-11 14:35:43 -06:00
qemu-io.c qom: Clean up error reporting in user_creatable_add_opts_foreach() 2018-10-19 14:51:34 +02:00
qemu-keymap.c ui: use enum to string helpers 2018-08-24 08:40:10 +02:00
qemu-nbd.c qemu-nbd: Deprecate qemu-nbd --partition 2019-02-04 15:11:27 -06:00
qemu-nbd.texi qemu-nbd: Deprecate qemu-nbd --partition 2019-02-04 15:11:27 -06:00
qemu-option-trace.texi
qemu-options-wrapper.h
qemu-options.h
qemu-options.hx qemu-options: Remove deprecated option -clock 2019-02-14 10:40:50 +01:00
qemu-seccomp.c seccomp: Work-around GCC 4.x bug in gnu99 mode 2019-01-22 06:26:32 +01:00
qemu-tech.texi
qemu.nsi
qemu.sasl
qmp.c qapi: make query-cpu-definitions depend on specific targets 2019-02-18 14:44:05 +01:00
qtest.c char: allow specifying a GMainContext at opening time 2019-02-13 14:23:39 +01:00
README README: use 'https://' instead of 'git://' 2018-11-12 11:26:02 +00:00
replication.c
replication.h
rules.mak test: replace gtester with a TAP driver 2019-01-11 15:46:52 +01:00
thunk.c
tpm.c tpm: Clean up error reporting in tpm_init_tpmdev() 2018-10-19 14:51:34 +02:00
trace-events trace: improve runstate tracing 2019-01-25 10:21:27 +00:00
VERSION Open 4.0 development tree 2018-12-11 17:27:58 +00:00
version.rc
vl.c - some configure updates (HAX/NetBSD, remove "wav", -Waddress-of-packed-member) 2019-02-14 17:42:25 +00:00
win_dump.c dump: fix Windows dump memory run mapping 2018-10-02 18:47:55 +02:00
win_dump.h dump: move Windows dump structures definitions 2018-10-02 19:09:12 +02:00

         QEMU README
         ===========

QEMU is a generic and open source machine & userspace emulator and
virtualizer.

QEMU is capable of emulating a complete machine in software without any
need for hardware virtualization support. By using dynamic translation,
it achieves very good performance. QEMU can also integrate with the Xen
and KVM hypervisors to provide emulated hardware while allowing the
hypervisor to manage the CPU. With hypervisor support, QEMU can achieve
near native performance for CPUs. When QEMU emulates CPUs directly it is
capable of running operating systems made for one machine (e.g. an ARMv7
board) on a different machine (e.g. an x86_64 PC board).

QEMU is also capable of providing userspace API virtualization for Linux
and BSD kernel interfaces. This allows binaries compiled against one
architecture ABI (e.g. the Linux PPC64 ABI) to be run on a host using a
different architecture ABI (e.g. the Linux x86_64 ABI). This does not
involve any hardware emulation, simply CPU and syscall emulation.

QEMU aims to fit into a variety of use cases. It can be invoked directly
by users wishing to have full control over its behaviour and settings.
It also aims to facilitate integration into higher level management
layers, by providing a stable command line interface and monitor API.
It is commonly invoked indirectly via the libvirt library when using
open source applications such as oVirt, OpenStack and virt-manager.

QEMU as a whole is released under the GNU General Public License,
version 2. For full licensing details, consult the LICENSE file.


Building
========

QEMU is multi-platform software intended to be buildable on all modern
Linux platforms, OS-X, Win32 (via the Mingw64 toolchain) and a variety
of other UNIX targets. The simple steps to build QEMU are:

  mkdir build
  cd build
  ../configure
  make

Additional information can also be found online via the QEMU website:

  https://qemu.org/Hosts/Linux
  https://qemu.org/Hosts/Mac
  https://qemu.org/Hosts/W32


Submitting patches
==================

The QEMU source code is maintained under the GIT version control system.

   git clone https://git.qemu.org/git/qemu.git

When submitting patches, one common approach is to use 'git
format-patch' and/or 'git send-email' to format & send the mail to the
qemu-devel@nongnu.org mailing list. All patches submitted must contain
a 'Signed-off-by' line from the author. Patches should follow the
guidelines set out in the HACKING and CODING_STYLE files.

Additional information on submitting patches can be found online via
the QEMU website

  https://qemu.org/Contribute/SubmitAPatch
  https://qemu.org/Contribute/TrivialPatches

The QEMU website is also maintained under source control.

  git clone https://git.qemu.org/git/qemu-web.git
  https://www.qemu.org/2017/02/04/the-new-qemu-website-is-up/

A 'git-publish' utility was created to make above process less
cumbersome, and is highly recommended for making regular contributions,
or even just for sending consecutive patch series revisions. It also
requires a working 'git send-email' setup, and by default doesn't
automate everything, so you may want to go through the above steps
manually for once.

For installation instructions, please go to

  https://github.com/stefanha/git-publish

The workflow with 'git-publish' is:

  $ git checkout master -b my-feature
  $ # work on new commits, add your 'Signed-off-by' lines to each
  $ git publish

Your patch series will be sent and tagged as my-feature-v1 if you need to refer
back to it in the future.

Sending v2:

  $ git checkout my-feature # same topic branch
  $ # making changes to the commits (using 'git rebase', for example)
  $ git publish

Your patch series will be sent with 'v2' tag in the subject and the git tip
will be tagged as my-feature-v2.

Bug reporting
=============

The QEMU project uses Launchpad as its primary upstream bug tracker. Bugs
found when running code built from QEMU git or upstream released sources
should be reported via:

  https://bugs.launchpad.net/qemu/

If using QEMU via an operating system vendor pre-built binary package, it
is preferable to report bugs to the vendor's own bug tracker first. If
the bug is also known to affect latest upstream code, it can also be
reported via launchpad.

For additional information on bug reporting consult:

  https://qemu.org/Contribute/ReportABug


Contact
=======

The QEMU community can be contacted in a number of ways, with the two
main methods being email and IRC

 - qemu-devel@nongnu.org
   https://lists.nongnu.org/mailman/listinfo/qemu-devel
 - #qemu on irc.oftc.net

Information on additional methods of contacting the community can be
found online via the QEMU website:

  https://qemu.org/Contribute/StartHere

-- End