Pranith Kumar 30663fd26c tcg/i386: Check the size of instruction being translated ...

This fixes the bug: 'user-to-root privesc inside VM via bad translation
caching' reported by Jann Horn here:
https://bugs.chromium.org/p/project-zero/issues/detail?id=1122

Reviewed-by: Richard Henderson <rth@twiddle.net>
CC: Peter Maydell <peter.maydell@linaro.org>
CC: Paolo Bonzini <pbonzini@redhat.com>
Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Pranith Kumar <bobby.prani@gmail.com>
Message-Id: <20170323175851.14342-1-bobby.prani@gmail.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

2017-03-24 11:49:38 +01:00

..

alpha

qemu-timer: do not include sysemu/cpus.h from util/qemu-timer.h

2017-03-14 13:28:18 +01:00

arm

arm: Fix APSR writes via M profile MSR

2017-03-20 12:41:44 +00:00

cris

qom/cpu: move tlb_flush to cpu_common_reset

2017-01-13 14:24:31 +00:00

hppa

hppa: avoid anonymous unions in designated initializers.

2017-03-04 12:52:01 +00:00

i386

tcg/i386: Check the size of instruction being translated

2017-03-24 11:49:38 +01:00

lm32

qom/cpu: move tlb_flush to cpu_common_reset

2017-01-13 14:24:31 +00:00

m68k

Merge remote-tracking branch 'remotes/stsquad/tags/pull-tcg-common-tlb-reset-20170113-r1' into staging

2017-01-16 18:23:02 +00:00

microblaze

cputlb: drop flush_global flag from tlb_flush

2017-01-13 14:24:37 +00:00

mips

target/mips: fix delay slot detection in gen_msa_branch()

2017-03-20 11:19:14 +00:00

moxie

qom/cpu: move tlb_flush to cpu_common_reset

2017-01-13 14:24:31 +00:00

nios2

target/nios2: take BQL around interrupt check

2017-03-14 13:26:37 +01:00

openrisc

target/openrisc: Optimize for r0 being zero

2017-02-14 08:15:00 +11:00

ppc

target/ppc: fix cpu_ov setting for 32-bit

2017-03-14 11:27:23 +11:00

s390x

target/s390x: Fix broken user mode

2017-03-23 10:49:13 +01:00

sh4

monitor: Fix crashes when using HMP commands without CPU

2017-02-21 18:29:01 +00:00

sparc

sparc/sparc64: grab BQL before calling cpu_check_irqs

2017-03-09 10:41:38 +00:00

tilegx

qom/cpu: move tlb_flush to cpu_common_reset

2017-01-13 14:24:31 +00:00

tricore

qom/cpu: move tlb_flush to cpu_common_reset

2017-01-13 14:24:31 +00:00

unicore32

cputlb: drop flush_global flag from tlb_flush

2017-01-13 14:24:37 +00:00

xtensa

Merge remote-tracking branch 'remotes/xtensa/tags/20170317-xtensa' into staging

2017-03-18 17:24:49 +00:00