Skip to content
Snippets Groups Projects
  1. Feb 03, 2021
  2. Feb 02, 2021
  3. Feb 01, 2021
  4. Jan 29, 2021
    • Peter Maydell's avatar
      Merge remote-tracking branch 'remotes/berrange-gitlab/tags/misc-fixes-pull-request' into staging · 74208cd2
      Peter Maydell authored
      
      * Replace --enable/disable-git-update with --with-git-submodules
        to allow improved control over use of git submodules
      * Deprecate the -enable-fips option
      * Ensure docs use prefer format for bool options
      * Clarify platform support rules
      * Misc fixes to keymap conversions
      * Fix misc problems on macOS
      
      # gpg: Signature made Fri 29 Jan 2021 17:10:13 GMT
      # gpg:                using RSA key DAF3A6FDB26B62912D0E8E3FBE86EBB415104FDF
      # gpg: Good signature from "Daniel P. Berrange <dan@berrange.com>" [full]
      # gpg:                 aka "Daniel P. Berrange <berrange@redhat.com>" [full]
      # Primary key fingerprint: DAF3 A6FD B26B 6291 2D0E  8E3F BE86 EBB4 1510 4FDF
      
      * remotes/berrange-gitlab/tags/misc-fixes-pull-request:
        tests: Replace deprecated ASN1 code
        tests: Fix runtime error in test-authz-pam
        ui: update keycodemapdb submodule commit
        crypto: Add spaces around operator
        configure: replace --enable/disable-git-update with --with-git-submodules
        docs: fix missing backslash in certtool shell example
        docs: simplify and clarify the platform support rules
        Prefer 'on' | 'off' over 'yes' | 'no' for bool options
        os: deprecate the -enable-fips option and QEMU's FIPS enforcement
        crypto: Fix memory leaks in set_loaded for tls-*
        crypto: Forbid broken unloading of secrets
        crypto: Move USER_CREATABLE to secret_common base class
        crypto: Fix some code style problems, add spaces around operator
      
      Signed-off-by: default avatarPeter Maydell <peter.maydell@linaro.org>
      74208cd2
    • Peter Maydell's avatar
      Merge remote-tracking branch 'remotes/pmaydell/tags/pull-target-arm-20210129-1' into staging · 9df52f58
      Peter Maydell authored
      
      target-arm queue:
       * Implement ID_PFR2
       * Conditionalize DBGDIDR
       * rename xlnx-zcu102.canbusN properties
       * provide powerdown/reset mechanism for secure firmware on 'virt' board
       * hw/misc: Fix arith overflow in NPCM7XX PWM module
       * target/arm: Replace magic value by MMU_DATA_LOAD definition
       * configure: fix preadv errors on Catalina macOS with new XCode
       * Various configure and other cleanups in preparation for iOS support
       * hvf: Add hypervisor entitlement to output binaries (needed for Big Sur)
       * Implement pvpanic-pci device
       * Convert the CMSDK timer devices to the Clock framework
      
      # gpg: Signature made Fri 29 Jan 2021 16:08:02 GMT
      # gpg:                using RSA key E1A5C593CD419DE28E8315CF3C2525ED14360CDE
      # gpg:                issuer "peter.maydell@linaro.org"
      # gpg: Good signature from "Peter Maydell <peter.maydell@linaro.org>" [ultimate]
      # gpg:                 aka "Peter Maydell <pmaydell@gmail.com>" [ultimate]
      # gpg:                 aka "Peter Maydell <pmaydell@chiark.greenend.org.uk>" [ultimate]
      # Primary key fingerprint: E1A5 C593 CD41 9DE2 8E83  15CF 3C25 25ED 1436 0CDE
      
      * remotes/pmaydell/tags/pull-target-arm-20210129-1: (46 commits)
        hw/arm/stellaris: Remove board-creation reset of STELLARIS_SYS
        arm: Remove frq properties on CMSDK timer, dualtimer, watchdog, ARMSSE
        arm: Don't set freq properties on CMSDK timer, dualtimer, watchdog, ARMSSE
        hw/arm/armsse: Use Clock to set system_clock_scale
        tests/qtest/cmsdk-apb-watchdog-test: Test clock changes
        hw/watchdog/cmsdk-apb-watchdog: Convert to use Clock input
        hw/timer/cmsdk-apb-dualtimer: Convert to use Clock input
        hw/timer/cmsdk-apb-timer: Convert to use Clock input
        hw/arm/stellaris: Create Clock input for watchdog
        hw/arm/stellaris: Convert SSYS to QOM device
        hw/arm/musca: Create and connect ARMSSE Clocks
        hw/arm/mps2-tz: Create and connect ARMSSE Clocks
        hw/arm/mps2: Create and connect SYSCLK Clock
        hw/arm/mps2: Inline CMSDK_APB_TIMER creation
        hw/arm/armsse: Wire up clocks
        hw/arm/armsse: Rename "MAINCLK" property to "MAINCLK_FRQ"
        hw/watchdog/cmsdk-apb-watchdog: Add Clock input
        hw/timer/cmsdk-apb-dualtimer: Add Clock input
        hw/timer/cmsdk-apb-timer: Add Clock input
        hw/timer/cmsdk-apb-timer: Rename CMSDKAPBTIMER struct to CMSDKAPBTimer
        ...
      
      Signed-off-by: default avatarPeter Maydell <peter.maydell@linaro.org>
      9df52f58
    • Stefan Weil's avatar
      tests: Replace deprecated ASN1 code · ecb98f5c
      Stefan Weil authored
      
      This fixes several compiler warnings on MacOS with Homebrew. The
      git development branch for forthcoming libtasn1 4.17.0 has introduced
      deprecation warnings for several macros/types that we use.
      
      Signed-off-by: default avatarStefan Weil <sw@weilnetz.de>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      ecb98f5c
    • Stefan Weil's avatar
      tests: Fix runtime error in test-authz-pam · a07e9fdd
      Stefan Weil authored
      
      A test with sanitizers on macOS shows this error:
      
          authz/pamacct.c:50:25: runtime error: null pointer passed as argument 1, which is declared to never be null
          /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/usr/include/security/pam_appl.h:56:2: note: nonnull attribute specified here
      
      Signed-off-by: default avatarStefan Weil <sw@weilnetz.de>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      a07e9fdd
    • Daniel P. Berrangé's avatar
      ui: update keycodemapdb submodule commit · f4d87ce4
      Daniel P. Berrangé authored
      
      Primarily this is to pull in a fix for Win32 keycodes. The other useful
      change is the removal of build timestamp from generated files which is
      desirable for reproducable builds.
      
      The make rules need updating due to slightly changed CLI syntax - more
      args must now come after the command name.
      
      6119e6e19a050df847418de7babe5166779955e4 Fix scan codes for Korean keys
      685684a8404301780714e8a89a871981e7cae988 Fix argument order in output headers
      b3774853042c951b200d767697285781cc59a83c Add HTML entries for Korean layout keys
      8e54850d800e4697a2798fb82ac740e760f8530b Add macOS entries for Japanese keyboards
      27acf0ef828bf719b2053ba398b195829413dbdd Fix win32 keycode for VK_OEM_102
      317d3eeb963a515e15a63fa356d8ebcda7041a51 Add support for generating RST formatted docs pages
      7381b9bfadd31c4c9e9a10b5bb5032f9189d4352 Introduce separate args for title & subtitle with docs generator
      6280c94f306df6a20bbc100ba15a5a81af0366e6 keymap-gen: Name sections in pod output
      df4e56f8fab65ba714ec18f4e7338a966a1620ad Add an empty meson project
      16e5b0787687d8904dad2c026107409eb9bfcb95 remove buildtime from generated files
      044f21dd0d4f62519aae9f1d53a026407a0b664f add header file generators
      7779876a6b06755e3bb2c94ee3ded50635bcb0fa c++: add extern declaration to the generated file
      0e0a317889464397d6f1ae03aad0d2ca593aab04 move CLanguageGenerator closer to CLanguageGenerator itself
      
      Reviewed-by: default avatarPhilippe Mathieu-Daudé <philmd@redhat.com>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      f4d87ce4
    • shiliyang's avatar
      crypto: Add spaces around operator · c93c7dc0
      shiliyang authored
      
      I am reading crypto related code, find some code style problems while
      using checkpatch.pl to check crypto folder. Fix the error style
      problems.
      
      Signed-off-by: default avatarLiyang Shi <shiliyang@huawei.com>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      c93c7dc0
    • Dan Streetman's avatar
      configure: replace --enable/disable-git-update with --with-git-submodules · 7d7dbf9d
      Dan Streetman authored
      
      Replace the --enable-git-update and --disable-git-update configure params
      with the param --with-git-submodules=(update|validate|ignore) to
      allow 3 options for building from a git repo.
      
      This is needed because downstream packagers, e.g. Debian, Ubuntu, etc,
      also keep the source code in git, but do not want to enable the
      'git_update' mode; with the current code, that's not possible even
      if the downstream package specifies --disable-git-update.
      
      The previous parameters are deprecated but still available; the
      --enable-git-update parameter maps to --with-git-submodules=update and
      --disable-git-update parameter maps to --with-git-submodules=validate.
      
      The configure script behavior is slightly modified, where previously
      the dtc, capstone, and slirp submodules were not validated when
      --disable-git-update was specified (but were updated with git-update
      enabled), now they are validated when using --with-git-submodules=validate
      and are only ignored when using --with-git-submodules=ignore.
      
      Signed-off-by: default avatarDan Streetman <ddstreet@canonical.com>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      7d7dbf9d
    • Daniel P. Berrangé's avatar
    • Daniel P. Berrangé's avatar
      docs: simplify and clarify the platform support rules · e6e80fcf
      Daniel P. Berrangé authored
      
      The distinction between short life and long life Linux distributions
      turned out to be redundant. They can both be covered in a simple way
      by noting support will target the current release, and the previous
      release for a period of two years or until its EOL. This rule can also
      apply to the other UNIX based distros, leaving only Windows needing a
      different set of rules.
      
      This also clarifies that Debian LTS is out of scope, because the LTS
      support is provided by a separate group from the main Debian maintainer
      team.
      
      Reviewed-by: default avatarEduardo Habkost <ehabkost@redhat.com>
      Reviewed-by: default avatarThomas Huth <thuth@redhat.com>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      e6e80fcf
    • Daniel P. Berrangé's avatar
      Prefer 'on' | 'off' over 'yes' | 'no' for bool options · 4d7beeab
      Daniel P. Berrangé authored
      
      Update some docs and test cases to use 'on' | 'off' as the preferred
      value for bool options.
      
      Reviewed-by: default avatarThomas Huth <thuth@redhat.com>
      Reviewed-by: default avatarPhilippe Mathieu-Daudé <philmd@redhat.com>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      4d7beeab
    • Daniel P. Berrangé's avatar
      os: deprecate the -enable-fips option and QEMU's FIPS enforcement · 16631029
      Daniel P. Berrangé authored
      
      The -enable-fips option was added a long time ago to prevent the use of
      single DES when VNC when FIPS mode is enabled. It should never have been
      added, because apps are supposed to unconditionally honour FIPS mode
      based on the '/proc/sys/crypto/fips_enabled' file contents.
      
      In addition there is more to achieving FIPS compliance than merely
      blocking use of certain algorithms. Those algorithms which are used
      need to perform self-tests at runtime.
      
      QEMU's built-in cryptography provider has no support for self-tests,
      and neither does the nettle library.
      
      If QEMU is required to be used in a FIPS enabled host, then it must be
      built with the libgcrypt library enabled, which will unconditionally
      enforce FIPS compliance in any algorithm usage.
      
      Thus there is no need to keep either the -enable-fips option in QEMU, or
      QEMU's internal FIPS checking methods.
      
      Reviewed-by: default avatarJohn Snow <jsnow@redhat.com>
      Reviewed-by: default avatarThomas Huth <thuth@redhat.com>
      Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
      16631029
Loading