xen.git
5 years agoMerge version 4.8.5+shim4.10.2+xsa282-1+deb9u11+rpi1 and 4.8.5.final+shim4.10.4-1... stretch-staging archive/raspbian/4.8.5.final+shim4.10.4-1+deb9u12+rpi1 raspbian/4.8.5.final+shim4.10.4-1+deb9u12+rpi1
Raspbian automatic forward porter [Mon, 13 Jan 2020 22:59:37 +0000 (22:59 +0000)]
Merge version 4.8.5+shim4.10.2+xsa282-1+deb9u11+rpi1 and 4.8.5.final+shim4.10.4-1+deb9u12 to produce 4.8.5.final+shim4.10.4-1+deb9u12+rpi1

5 years agoMerge xen (4.8.5.final+shim4.10.4-1+deb9u12) import into refs/heads/workingbranch
Ian Jackson [Fri, 10 Jan 2020 17:09:30 +0000 (17:09 +0000)]
Merge xen (4.8.5.final+shim4.10.4-1+deb9u12) import into refs/heads/workingbranch

5 years agoxenstore: Increase stack size for xs reader thread
Ian Jackson [Fri, 22 Feb 2019 13:38:13 +0000 (13:38 +0000)]
xenstore: Increase stack size for xs reader thread

Because of a glibc bug, PTHREAD_STACK_MIN can be too small for any
thread.  Especially on Intel machines with AVX, as reported in
Debian bug #900746.

In recent Xen this is worked around more comprehensively in:
   448c03b3cbe1487
   tools/xenstore: try to get minimum thread stack size for watch thread
but this is not a good candidate for an upstream stable
backport because it introduces new linking dependencies etc.

So bodge it by doubling the size.  This is almost entirely risk-free.
Even if in theory someone might be using libxenstore in a very highly
multithreaded program, we only steal one extra 16k of address space.

Closes: #900746
Reported-by: Christian Schwamborn <christian.schwamborn@nswit.de>
Suggested-by: Damian Pietras <damianp@daper.net>
Tested-by: Damian Pietras <damianp@daper.net>
Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0033-xenstore-Increase-stack-size-for-xs-reader-thread.patch

5 years agoREADME.comet: remove alinea about PVH support
Hans van Kranenburg [Wed, 23 Jan 2019 21:22:26 +0000 (22:22 +0100)]
README.comet: remove alinea about PVH support

Xen 4.8 does not support running guests as PVH, except for the shim.

(Closes: #908453)

[git-debrebase split: mixed commit: upstream part]

Gbp-Pq: Name 0032-README.comet-remove-alinea-about-PVH-support.patch

5 years agogitignore: add tools/misc/xen-diag to .gitignore
Dongli Zhang [Tue, 4 Jul 2017 14:35:28 +0000 (22:35 +0800)]
gitignore: add tools/misc/xen-diag to .gitignore

Signed-off-by: Dongli Zhang <dongli.zhang@oracle.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
(cherry picked from commit d23afa6399a78ca7d0ed3294119632535828c9d8)

Gbp-Pq: Name 0031-gitignore-add-tools-misc-xen-diag-to-.gitignore.patch

5 years agotools: utility to dump guest grant table info
Dongli Zhang [Sun, 2 Jul 2017 23:34:13 +0000 (07:34 +0800)]
tools: utility to dump guest grant table info

As both xen-netfront and xen-blkfront support multi-queue, they would
consume a lot of grant table references when there are many paravirtual
devices and vcpus assigned to guest. Guest domU might panic or hang due to
grant allocation failure when nr_grant_frames in guest has reached its max
value.

This utility would help the administrators to diagnose xen issue. There is
only one command gnttab_query_size so far to monitor the guest grant table
frame usage on dom0 side so that it is not required to debug on guest
kernel side for crash/hang analysis anymore.

It is extensible for adding new commands for more diagnostic functions and
the framework of xen-diag.c is from xen-livepatch.c.

Signed-off-by: Dongli Zhang <dongli.zhang@oracle.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
(cherry picked from commit df36d82e3fc91bee2ff1681fd438c815fa324b6a)

Gbp-Pq: Name 0030-tools-utility-to-dump-guest-grant-table-info.patch

5 years agoCopy README.pti and README.comet from the XSA-254 advisory
Ian Jackson [Wed, 7 Feb 2018 17:05:53 +0000 (17:05 +0000)]
Copy README.pti and README.comet from the XSA-254 advisory

We would like these to be installed with the Debian Xen packages
because they contain usage instructions too.

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0029-Copy-README.pti-and-README.comet-from-the-XSA-254-ad.patch

5 years agotools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc on x86_32
Ian Jackson [Tue, 1 Nov 2016 16:20:27 +0000 (16:20 +0000)]
tools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc on x86_32

The current build fails with GCC6 on Debian sid i386 (unstable):

 /tmp/ccqjaueF.s: Assembler messages:
 /tmp/ccqjaueF.s:3713: Error: missing or invalid displacement expression `vmovd_to_reg_len@GOT'

This is due to the combination of GCC6, and Debian's decision to
enable some hardening flags by default (to try to make runtime
addresses less predictable):
  https://wiki.debian.org/Hardening/PIEByDefaultTransition

This is of no benefit for the x86 instruction emulator test, which is
a rebuild of the emulator code for testing purposes only.  So pass
options to disable this.

These options will be no-ops if they are the same as the compiler
default.

On amd64, the -fno-pic breaks the build in a different way.  So do
this only on i386.

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
CC: Jan Beulich <jbeulich@suse.com>
CC: Andrew Cooper <andrew.cooper3@citrix.com>
squash! tools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0028-tools-tests-x86_emulator-Pass-no-pie-fno-pic-to-gcc-.patch

5 years agoubuntu-tools-libs-abiname
Ubuntu Developers [Thu, 6 Oct 2016 13:24:46 +0000 (14:24 +0100)]
ubuntu-tools-libs-abiname

Gbp-Pq: Name ubuntu-tools-libs-abiname.diff

5 years agotools-xenstore-compatibility.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:36 +0000 (11:47 +0200)]
tools-xenstore-compatibility.diff

Patch-Name: tools-xenstore-compatibility.diff

Gbp-Pq: Name tools-xenstore-compatibility.diff

5 years agotools-xenmon-install.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:31 +0000 (11:47 +0200)]
tools-xenmon-install.diff

Patch-Name: tools-xenmon-install.diff

Gbp-Pq: Name tools-xenmon-install.diff

5 years agotools-include-install.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:30 +0000 (11:47 +0200)]
tools-include-install.diff

Patch-Name: tools-include-install.diff

Gbp-Pq: Name tools-include-install.diff

5 years agoRemove static solaris support from pygrub
Bastian Blank [Sat, 5 Jul 2014 09:47:29 +0000 (11:47 +0200)]
Remove static solaris support from pygrub

Patch-Name: tools-pygrub-remove-static-solaris-support

Gbp-Pq: Name tools-pygrub-remove-static-solaris-support

5 years agotools-xentrace-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:14 +0000 (11:47 +0200)]
tools-xentrace-prefix.diff

Patch-Name: tools-xentrace-prefix.diff

Gbp-Pq: Name tools-xentrace-prefix.diff

5 years agotools-xenstore-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:12 +0000 (11:47 +0200)]
tools-xenstore-prefix.diff

Patch-Name: tools-xenstore-prefix.diff

Gbp-Pq: Name tools-xenstore-prefix.diff

5 years agotools-xenstat-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:09 +0000 (11:47 +0200)]
tools-xenstat-prefix.diff

Patch-Name: tools-xenstat-prefix.diff

Gbp-Pq: Name tools-xenstat-prefix.diff

5 years agotools-xenpmd-prefix.diff
Bastian Blank [Sat, 13 Dec 2014 18:37:02 +0000 (19:37 +0100)]
tools-xenpmd-prefix.diff

Patch-Name: tools-xenpmd-prefix.diff

Gbp-Pq: Name tools-xenpmd-prefix.diff

5 years agotools-xenpaging-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:08 +0000 (11:47 +0200)]
tools-xenpaging-prefix.diff

Patch-Name: tools-xenpaging-prefix.diff

Gbp-Pq: Name tools-xenpaging-prefix.diff

5 years agotools-xenmon-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:06 +0000 (11:47 +0200)]
tools-xenmon-prefix.diff

Patch-Name: tools-xenmon-prefix.diff

Gbp-Pq: Name tools-xenmon-prefix.diff

5 years agotools-xcutils-rpath.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:05 +0000 (11:47 +0200)]
tools-xcutils-rpath.diff

Patch-Name: tools-xcutils-rpath.diff

Gbp-Pq: Name tools-xcutils-rpath.diff

5 years agotools-python-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:02 +0000 (11:47 +0200)]
tools-python-prefix.diff

Patch-Name: tools-python-prefix.diff

Gbp-Pq: Name tools-python-prefix.diff

5 years agotools-pygrub-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:01 +0000 (11:47 +0200)]
tools-pygrub-prefix.diff

Patch-Name: tools-pygrub-prefix.diff

Gbp-Pq: Name tools-pygrub-prefix.diff

5 years agotools-misc-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:59 +0000 (11:46 +0200)]
tools-misc-prefix.diff

Patch-Name: tools-misc-prefix.diff

Gbp-Pq: Name tools-misc-prefix.diff

5 years agotools-libxl-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:57 +0000 (11:46 +0200)]
tools-libxl-prefix.diff

Patch-Name: tools-libxl-prefix.diff

Gbp-Pq: Name tools-libxl-prefix.diff

5 years agotools-libfsimage-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:55 +0000 (11:46 +0200)]
tools-libfsimage-prefix.diff

Patch-Name: tools-libfsimage-prefix.diff

Gbp-Pq: Name tools-libfsimage-prefix.diff

5 years agotools-console-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:54 +0000 (11:46 +0200)]
tools-console-prefix.diff

Patch-Name: tools-console-prefix.diff

Gbp-Pq: Name tools-console-prefix.diff

5 years agotools-blktap2-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:53 +0000 (11:46 +0200)]
tools-blktap2-prefix.diff

Patch-Name: tools-blktap2-prefix.diff

Gbp-Pq: Name tools-blktap2-prefix.diff

5 years agotools-rpath.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:51 +0000 (11:46 +0200)]
tools-rpath.diff

Patch-Name: tools-rpath.diff

Gbp-Pq: Name tools-rpath.diff

5 years agotools-xenstat-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:50 +0000 (11:46 +0200)]
tools-xenstat-abiname.diff

Patch-Name: tools-xenstat-abiname.diff

Gbp-Pq: Name tools-xenstat-abiname.diff

5 years agotools-libxl-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:49 +0000 (11:46 +0200)]
tools-libxl-abiname.diff

Patch-Name: tools-libxl-abiname.diff

Gbp-Pq: Name tools-libxl-abiname.diff

5 years agotools-libxc-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:48 +0000 (11:46 +0200)]
tools-libxc-abiname.diff

Patch-Name: tools-libxc-abiname.diff

Gbp-Pq: Name tools-libxc-abiname.diff

5 years agotools-libfsimage-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:47 +0000 (11:46 +0200)]
tools-libfsimage-abiname.diff

Patch-Name: tools-libfsimage-abiname.diff

Gbp-Pq: Name tools-libfsimage-abiname.diff

5 years agoconfig-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:45 +0000 (11:46 +0200)]
config-prefix.diff

Patch-Name: config-prefix.diff

Gbp-Pq: Name config-prefix.diff

5 years agoversion
Bastian Blank [Sat, 5 Jul 2014 09:46:43 +0000 (11:46 +0200)]
version

Patch-Name: version.diff

Gbp-Pq: Name version.diff

5 years agoRerun autogen.sh (stretch)
Ian Jackson [Fri, 28 Oct 2016 13:52:13 +0000 (14:52 +0100)]
Rerun autogen.sh (stretch)

Using autoconf 2.69-10 (amd64)

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0001-Rerun-autogen.sh-stretch.patch

5 years agoxen (4.8.5.final+shim4.10.4-1+deb9u12) stretch-security; urgency=medium
Ian Jackson [Fri, 10 Jan 2020 17:09:30 +0000 (17:09 +0000)]
xen (4.8.5.final+shim4.10.4-1+deb9u12) stretch-security; urgency=medium

  * *NOTE* this will probably be the *LAST UPDATE* for Xen in Debian 9.x
    (stretch), since this is the last batch of security patches from
    upstream, where Xen 4.8 is out of security support.

  * Update to new upstream final tip of 4.8 stable branch, which I have
    dubbed upstream/stable-4.8.5.final.  And shim 4.10.4.
  * This includes fixes to:
       XSA-311  CVE-2019-19577
       XSA-310  CVE-2019-19580
       XSA-309  CVE-2019-19578
       XSA-308  CVE-2019-19583
       XSA-307  CVE-2019-19581 CVE-2019-19582
       XSA-306  CVE-2019-19579
       XSA-305  CVE-2019-11135
       XSA-304  CVE-2018-12207
       XSA-303  CVE-2019-18422
       XSA-302  CVE-2019-18424
       XSA-301  CVE-2019-18423
       XSA-299  CVE-2019-18421
       XSA-298  CVE-2019-18425
       XSA-297  CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091
       XSA-296  CVE-2019-18420
       XSA-295  CVE-2019-17349 CVE-2019-17350
       XSA-294  CVE-2019-17348
       XSA-293  CVE-2019-17347
       XSA-292  CVE-2019-17346
       XSA-291  CVE-2019-17345
       XSA-290  CVE-2019-17344
       XSA-288  CVE-2019-17343
       XSA-287  CVE-2019-17342
       XSA-285  CVE-2019-17341
       XSA-284  CVE-2019-17340
  * For completeness, the following are not applicable:
       XSA-300  CVE-2019-17351  Bug is in Linux
       XSA-289                  Spectre V1 + L1TF combo; no new fixes
       XSA-283                  Withdrawn XSA number
       XSA-281                  Withdrawn XSA number
  * The following is *not* fixed at this time:
       XSA-286                  Still embargoed.

  * README.comet: remove line about PVH support.
    [Hans van Kranenburg]  Closes:#908453.

[dgit import unpatched xen 4.8.5.final+shim4.10.4-1+deb9u12]

5 years agoImport xen_4.8.5.final+shim4.10.4.orig.tar.xz
Ian Jackson [Fri, 10 Jan 2020 17:09:30 +0000 (17:09 +0000)]
Import xen_4.8.5.final+shim4.10.4.orig.tar.xz

[dgit import orig xen_4.8.5.final+shim4.10.4.orig.tar.xz]

5 years agoImport xen_4.8.5.final+shim4.10.4.orig-shim.tar.xz
Ian Jackson [Fri, 10 Jan 2020 17:09:30 +0000 (17:09 +0000)]
Import xen_4.8.5.final+shim4.10.4.orig-shim.tar.xz

[dgit import orig xen_4.8.5.final+shim4.10.4.orig-shim.tar.xz]

5 years agoImport xen_4.8.5.final+shim4.10.4-1+deb9u12.debian.tar.xz
Ian Jackson [Fri, 10 Jan 2020 17:09:30 +0000 (17:09 +0000)]
Import xen_4.8.5.final+shim4.10.4-1+deb9u12.debian.tar.xz

[dgit import tarball xen 4.8.5.final+shim4.10.4-1+deb9u12 xen_4.8.5.final+shim4.10.4-1+deb9u12.debian.tar.xz]

6 years agoMerge version 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10+rpi1 and 4.8.5+shim4.10.2... archive/raspbian/4.8.5+shim4.10.2+xsa282-1+deb9u11+rpi1 raspbian/4.8.5+shim4.10.2+xsa282-1+deb9u11+rpi1
Raspbian automatic forward porter [Tue, 15 Jan 2019 09:56:20 +0000 (09:56 +0000)]
Merge version 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10+rpi1 and 4.8.5+shim4.10.2+xsa282-1+deb9u11 to produce 4.8.5+shim4.10.2+xsa282-1+deb9u11+rpi1

6 years agoMerge xen (4.8.5+shim4.10.2+xsa282-1+deb9u11) import into refs/heads/workingbranch
Ian Jackson [Fri, 11 Jan 2019 18:01:30 +0000 (18:01 +0000)]
Merge xen (4.8.5+shim4.10.2+xsa282-1+deb9u11) import into refs/heads/workingbranch

6 years agogitignore: add tools/misc/xen-diag to .gitignore
Dongli Zhang [Tue, 4 Jul 2017 14:35:28 +0000 (22:35 +0800)]
gitignore: add tools/misc/xen-diag to .gitignore

Signed-off-by: Dongli Zhang <dongli.zhang@oracle.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
(cherry picked from commit d23afa6399a78ca7d0ed3294119632535828c9d8)

Gbp-Pq: Name 0031-gitignore-add-tools-misc-xen-diag-to-.gitignore.patch

6 years agotools: utility to dump guest grant table info
Dongli Zhang [Sun, 2 Jul 2017 23:34:13 +0000 (07:34 +0800)]
tools: utility to dump guest grant table info

As both xen-netfront and xen-blkfront support multi-queue, they would
consume a lot of grant table references when there are many paravirtual
devices and vcpus assigned to guest. Guest domU might panic or hang due to
grant allocation failure when nr_grant_frames in guest has reached its max
value.

This utility would help the administrators to diagnose xen issue. There is
only one command gnttab_query_size so far to monitor the guest grant table
frame usage on dom0 side so that it is not required to debug on guest
kernel side for crash/hang analysis anymore.

It is extensible for adding new commands for more diagnostic functions and
the framework of xen-diag.c is from xen-livepatch.c.

Signed-off-by: Dongli Zhang <dongli.zhang@oracle.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
(cherry picked from commit df36d82e3fc91bee2ff1681fd438c815fa324b6a)

Gbp-Pq: Name 0030-tools-utility-to-dump-guest-grant-table-info.patch

6 years agoCopy README.pti and README.comet from the XSA-254 advisory
Ian Jackson [Wed, 7 Feb 2018 17:05:53 +0000 (17:05 +0000)]
Copy README.pti and README.comet from the XSA-254 advisory

We would like these to be installed with the Debian Xen packages
because they contain usage instructions too.

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0029-Copy-README.pti-and-README.comet-from-the-XSA-254-ad.patch

6 years agotools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc on x86_32
Ian Jackson [Tue, 1 Nov 2016 16:20:27 +0000 (16:20 +0000)]
tools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc on x86_32

The current build fails with GCC6 on Debian sid i386 (unstable):

 /tmp/ccqjaueF.s: Assembler messages:
 /tmp/ccqjaueF.s:3713: Error: missing or invalid displacement expression `vmovd_to_reg_len@GOT'

This is due to the combination of GCC6, and Debian's decision to
enable some hardening flags by default (to try to make runtime
addresses less predictable):
  https://wiki.debian.org/Hardening/PIEByDefaultTransition

This is of no benefit for the x86 instruction emulator test, which is
a rebuild of the emulator code for testing purposes only.  So pass
options to disable this.

These options will be no-ops if they are the same as the compiler
default.

On amd64, the -fno-pic breaks the build in a different way.  So do
this only on i386.

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
CC: Jan Beulich <jbeulich@suse.com>
CC: Andrew Cooper <andrew.cooper3@citrix.com>
squash! tools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0028-tools-tests-x86_emulator-Pass-no-pie-fno-pic-to-gcc-.patch

6 years agoubuntu-tools-libs-abiname
Ubuntu Developers [Thu, 6 Oct 2016 13:24:46 +0000 (14:24 +0100)]
ubuntu-tools-libs-abiname

Gbp-Pq: Name ubuntu-tools-libs-abiname.diff

6 years agotools-xenstore-compatibility.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:36 +0000 (11:47 +0200)]
tools-xenstore-compatibility.diff

Patch-Name: tools-xenstore-compatibility.diff

Gbp-Pq: Name tools-xenstore-compatibility.diff

6 years agotools-xenmon-install.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:31 +0000 (11:47 +0200)]
tools-xenmon-install.diff

Patch-Name: tools-xenmon-install.diff

Gbp-Pq: Name tools-xenmon-install.diff

6 years agotools-include-install.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:30 +0000 (11:47 +0200)]
tools-include-install.diff

Patch-Name: tools-include-install.diff

Gbp-Pq: Name tools-include-install.diff

6 years agoRemove static solaris support from pygrub
Bastian Blank [Sat, 5 Jul 2014 09:47:29 +0000 (11:47 +0200)]
Remove static solaris support from pygrub

Patch-Name: tools-pygrub-remove-static-solaris-support

Gbp-Pq: Name tools-pygrub-remove-static-solaris-support

6 years agotools-xentrace-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:14 +0000 (11:47 +0200)]
tools-xentrace-prefix.diff

Patch-Name: tools-xentrace-prefix.diff

Gbp-Pq: Name tools-xentrace-prefix.diff

6 years agotools-xenstore-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:12 +0000 (11:47 +0200)]
tools-xenstore-prefix.diff

Patch-Name: tools-xenstore-prefix.diff

Gbp-Pq: Name tools-xenstore-prefix.diff

6 years agotools-xenstat-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:09 +0000 (11:47 +0200)]
tools-xenstat-prefix.diff

Patch-Name: tools-xenstat-prefix.diff

Gbp-Pq: Name tools-xenstat-prefix.diff

6 years agotools-xenpmd-prefix.diff
Bastian Blank [Sat, 13 Dec 2014 18:37:02 +0000 (19:37 +0100)]
tools-xenpmd-prefix.diff

Patch-Name: tools-xenpmd-prefix.diff

Gbp-Pq: Name tools-xenpmd-prefix.diff

6 years agotools-xenpaging-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:08 +0000 (11:47 +0200)]
tools-xenpaging-prefix.diff

Patch-Name: tools-xenpaging-prefix.diff

Gbp-Pq: Name tools-xenpaging-prefix.diff

6 years agotools-xenmon-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:06 +0000 (11:47 +0200)]
tools-xenmon-prefix.diff

Patch-Name: tools-xenmon-prefix.diff

Gbp-Pq: Name tools-xenmon-prefix.diff

6 years agotools-xcutils-rpath.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:05 +0000 (11:47 +0200)]
tools-xcutils-rpath.diff

Patch-Name: tools-xcutils-rpath.diff

Gbp-Pq: Name tools-xcutils-rpath.diff

6 years agotools-python-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:02 +0000 (11:47 +0200)]
tools-python-prefix.diff

Patch-Name: tools-python-prefix.diff

Gbp-Pq: Name tools-python-prefix.diff

6 years agotools-pygrub-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:01 +0000 (11:47 +0200)]
tools-pygrub-prefix.diff

Patch-Name: tools-pygrub-prefix.diff

Gbp-Pq: Name tools-pygrub-prefix.diff

6 years agotools-misc-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:59 +0000 (11:46 +0200)]
tools-misc-prefix.diff

Patch-Name: tools-misc-prefix.diff

Gbp-Pq: Name tools-misc-prefix.diff

6 years agotools-libxl-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:57 +0000 (11:46 +0200)]
tools-libxl-prefix.diff

Patch-Name: tools-libxl-prefix.diff

Gbp-Pq: Name tools-libxl-prefix.diff

6 years agotools-libfsimage-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:55 +0000 (11:46 +0200)]
tools-libfsimage-prefix.diff

Patch-Name: tools-libfsimage-prefix.diff

Gbp-Pq: Name tools-libfsimage-prefix.diff

6 years agotools-console-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:54 +0000 (11:46 +0200)]
tools-console-prefix.diff

Patch-Name: tools-console-prefix.diff

Gbp-Pq: Name tools-console-prefix.diff

6 years agotools-blktap2-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:53 +0000 (11:46 +0200)]
tools-blktap2-prefix.diff

Patch-Name: tools-blktap2-prefix.diff

Gbp-Pq: Name tools-blktap2-prefix.diff

6 years agotools-rpath.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:51 +0000 (11:46 +0200)]
tools-rpath.diff

Patch-Name: tools-rpath.diff

Gbp-Pq: Name tools-rpath.diff

6 years agotools-xenstat-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:50 +0000 (11:46 +0200)]
tools-xenstat-abiname.diff

Patch-Name: tools-xenstat-abiname.diff

Gbp-Pq: Name tools-xenstat-abiname.diff

6 years agotools-libxl-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:49 +0000 (11:46 +0200)]
tools-libxl-abiname.diff

Patch-Name: tools-libxl-abiname.diff

Gbp-Pq: Name tools-libxl-abiname.diff

6 years agotools-libxc-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:48 +0000 (11:46 +0200)]
tools-libxc-abiname.diff

Patch-Name: tools-libxc-abiname.diff

Gbp-Pq: Name tools-libxc-abiname.diff

6 years agotools-libfsimage-abiname.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:47 +0000 (11:46 +0200)]
tools-libfsimage-abiname.diff

Patch-Name: tools-libfsimage-abiname.diff

Gbp-Pq: Name tools-libfsimage-abiname.diff

6 years agoconfig-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:45 +0000 (11:46 +0200)]
config-prefix.diff

Patch-Name: config-prefix.diff

Gbp-Pq: Name config-prefix.diff

6 years agoversion
Bastian Blank [Sat, 5 Jul 2014 09:46:43 +0000 (11:46 +0200)]
version

Patch-Name: version.diff

Gbp-Pq: Name version.diff

6 years agoRerun autogen.sh (stretch)
Ian Jackson [Fri, 28 Oct 2016 13:52:13 +0000 (14:52 +0100)]
Rerun autogen.sh (stretch)

Using autoconf 2.69-10 (amd64)

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0001-Rerun-autogen.sh-stretch.patch

6 years agoxen (4.8.5+shim4.10.2+xsa282-1+deb9u11) stretch-security; urgency=medium
Ian Jackson [Fri, 11 Jan 2019 18:01:30 +0000 (18:01 +0000)]
xen (4.8.5+shim4.10.2+xsa282-1+deb9u11) stretch-security; urgency=medium

  * Update to new upstream versions:
     * Main tree updated to Xen 4.8.5
     * Shim updated to current upstream stable-4.10 branch, to
       avoid errors trying to cherry-pick security patches.
  * This includes fixes to:
       XSA-282  CVE-2018-19967                 Xen 4.8 and 4.10 shim
       XSA-280  CVE-2018-19966                 Xen 4.8 and 4.10 shim
       XSA-279  CVE-2018-19965                 Xen 4.8 and 4.10 shim
       XSA-275  CVE-2018-19961 CVE-2018-19962  Xen 4.8 and 4.10 shim
       XSA-278  CVE-2018-18883                 Xen 4.10 shim only
  * For completeness, the following fixes are not applicable:
       XSA-274  CVE-2018-14678        Bug is in Linux
       XSA-270  CVE-2018-15471        Bug is in Linux
       XSA-271  CVE-2018-14007        Bug is in XAPI (not in Debian)
       XSA-277  CVE-2018-19964        Bug not in either 4.8 or 4.10
       XSA-276  CVE-2018-19963        Bug not in either 4.8 or 4.10
  * Added CVEs to previous changelog entries:
       4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10
       4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u9

[dgit import unpatched xen 4.8.5+shim4.10.2+xsa282-1+deb9u11]

6 years agoImport xen_4.8.5+shim4.10.2+xsa282.orig.tar.xz
Ian Jackson [Fri, 11 Jan 2019 18:01:30 +0000 (18:01 +0000)]
Import xen_4.8.5+shim4.10.2+xsa282.orig.tar.xz

[dgit import orig xen_4.8.5+shim4.10.2+xsa282.orig.tar.xz]

6 years agoImport xen_4.8.5+shim4.10.2+xsa282.orig-shim.tar.xz
Ian Jackson [Fri, 11 Jan 2019 18:01:30 +0000 (18:01 +0000)]
Import xen_4.8.5+shim4.10.2+xsa282.orig-shim.tar.xz

[dgit import orig xen_4.8.5+shim4.10.2+xsa282.orig-shim.tar.xz]

6 years agoImport xen_4.8.5+shim4.10.2+xsa282-1+deb9u11.debian.tar.xz
Ian Jackson [Fri, 11 Jan 2019 18:01:30 +0000 (18:01 +0000)]
Import xen_4.8.5+shim4.10.2+xsa282-1+deb9u11.debian.tar.xz

[dgit import tarball xen 4.8.5+shim4.10.2+xsa282-1+deb9u11 xen_4.8.5+shim4.10.2+xsa282-1+deb9u11.debian.tar.xz]

7 years agoMerge version 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u9+rpi1 and 4.8.4+xsa273+shim4... archive/raspbian/4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10+rpi1 raspbian/4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10+rpi1
Raspbian forward pporter [Thu, 16 Aug 2018 23:20:32 +0000 (00:20 +0100)]
Merge version 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u9+rpi1 and 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10 to produce 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10+rpi1

7 years agoMerge xen (4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10) import into refs/heads/workingbranch
Wolodja Wentland [Wed, 15 Aug 2018 22:51:28 +0000 (23:51 +0100)]
Merge xen (4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10) import into refs/heads/workingbranch

7 years agogitignore: add tools/misc/xen-diag to .gitignore
Dongli Zhang [Tue, 4 Jul 2017 14:35:28 +0000 (22:35 +0800)]
gitignore: add tools/misc/xen-diag to .gitignore

Signed-off-by: Dongli Zhang <dongli.zhang@oracle.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
(cherry picked from commit d23afa6399a78ca7d0ed3294119632535828c9d8)

Gbp-Pq: Name 0031-gitignore-add-tools-misc-xen-diag-to-.gitignore.patch

7 years agotools: utility to dump guest grant table info
Dongli Zhang [Sun, 2 Jul 2017 23:34:13 +0000 (07:34 +0800)]
tools: utility to dump guest grant table info

As both xen-netfront and xen-blkfront support multi-queue, they would
consume a lot of grant table references when there are many paravirtual
devices and vcpus assigned to guest. Guest domU might panic or hang due to
grant allocation failure when nr_grant_frames in guest has reached its max
value.

This utility would help the administrators to diagnose xen issue. There is
only one command gnttab_query_size so far to monitor the guest grant table
frame usage on dom0 side so that it is not required to debug on guest
kernel side for crash/hang analysis anymore.

It is extensible for adding new commands for more diagnostic functions and
the framework of xen-diag.c is from xen-livepatch.c.

Signed-off-by: Dongli Zhang <dongli.zhang@oracle.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
(cherry picked from commit df36d82e3fc91bee2ff1681fd438c815fa324b6a)

Gbp-Pq: Name 0030-tools-utility-to-dump-guest-grant-table-info.patch

7 years agoCopy README.pti and README.comet from the XSA-254 advisory
Ian Jackson [Wed, 7 Feb 2018 17:05:53 +0000 (17:05 +0000)]
Copy README.pti and README.comet from the XSA-254 advisory

We would like these to be installed with the Debian Xen packages
because they contain usage instructions too.

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0029-Copy-README.pti-and-README.comet-from-the-XSA-254-ad.patch

7 years agotools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc on x86_32
Ian Jackson [Tue, 1 Nov 2016 16:20:27 +0000 (16:20 +0000)]
tools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc on x86_32

The current build fails with GCC6 on Debian sid i386 (unstable):

 /tmp/ccqjaueF.s: Assembler messages:
 /tmp/ccqjaueF.s:3713: Error: missing or invalid displacement expression `vmovd_to_reg_len@GOT'

This is due to the combination of GCC6, and Debian's decision to
enable some hardening flags by default (to try to make runtime
addresses less predictable):
  https://wiki.debian.org/Hardening/PIEByDefaultTransition

This is of no benefit for the x86 instruction emulator test, which is
a rebuild of the emulator code for testing purposes only.  So pass
options to disable this.

These options will be no-ops if they are the same as the compiler
default.

On amd64, the -fno-pic breaks the build in a different way.  So do
this only on i386.

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
CC: Jan Beulich <jbeulich@suse.com>
CC: Andrew Cooper <andrew.cooper3@citrix.com>
squash! tools/tests/x86_emulator: Pass -no-pie -fno-pic to gcc

Signed-off-by: Ian Jackson <ian.jackson@citrix.com>
Gbp-Pq: Name 0028-tools-tests-x86_emulator-Pass-no-pie-fno-pic-to-gcc-.patch

7 years agoubuntu-tools-libs-abiname
Ubuntu Developers [Thu, 6 Oct 2016 13:24:46 +0000 (14:24 +0100)]
ubuntu-tools-libs-abiname

Gbp-Pq: Name ubuntu-tools-libs-abiname.diff

7 years agotools-xenstore-compatibility.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:36 +0000 (11:47 +0200)]
tools-xenstore-compatibility.diff

Patch-Name: tools-xenstore-compatibility.diff

Gbp-Pq: Name tools-xenstore-compatibility.diff

7 years agotools-xenmon-install.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:31 +0000 (11:47 +0200)]
tools-xenmon-install.diff

Patch-Name: tools-xenmon-install.diff

Gbp-Pq: Name tools-xenmon-install.diff

7 years agotools-include-install.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:30 +0000 (11:47 +0200)]
tools-include-install.diff

Patch-Name: tools-include-install.diff

Gbp-Pq: Name tools-include-install.diff

7 years agoRemove static solaris support from pygrub
Bastian Blank [Sat, 5 Jul 2014 09:47:29 +0000 (11:47 +0200)]
Remove static solaris support from pygrub

Patch-Name: tools-pygrub-remove-static-solaris-support

Gbp-Pq: Name tools-pygrub-remove-static-solaris-support

7 years agotools-xentrace-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:14 +0000 (11:47 +0200)]
tools-xentrace-prefix.diff

Patch-Name: tools-xentrace-prefix.diff

Gbp-Pq: Name tools-xentrace-prefix.diff

7 years agotools-xenstore-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:12 +0000 (11:47 +0200)]
tools-xenstore-prefix.diff

Patch-Name: tools-xenstore-prefix.diff

Gbp-Pq: Name tools-xenstore-prefix.diff

7 years agotools-xenstat-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:09 +0000 (11:47 +0200)]
tools-xenstat-prefix.diff

Patch-Name: tools-xenstat-prefix.diff

Gbp-Pq: Name tools-xenstat-prefix.diff

7 years agotools-xenpmd-prefix.diff
Bastian Blank [Sat, 13 Dec 2014 18:37:02 +0000 (19:37 +0100)]
tools-xenpmd-prefix.diff

Patch-Name: tools-xenpmd-prefix.diff

Gbp-Pq: Name tools-xenpmd-prefix.diff

7 years agotools-xenpaging-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:08 +0000 (11:47 +0200)]
tools-xenpaging-prefix.diff

Patch-Name: tools-xenpaging-prefix.diff

Gbp-Pq: Name tools-xenpaging-prefix.diff

7 years agotools-xenmon-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:06 +0000 (11:47 +0200)]
tools-xenmon-prefix.diff

Patch-Name: tools-xenmon-prefix.diff

Gbp-Pq: Name tools-xenmon-prefix.diff

7 years agotools-xcutils-rpath.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:05 +0000 (11:47 +0200)]
tools-xcutils-rpath.diff

Patch-Name: tools-xcutils-rpath.diff

Gbp-Pq: Name tools-xcutils-rpath.diff

7 years agotools-python-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:02 +0000 (11:47 +0200)]
tools-python-prefix.diff

Patch-Name: tools-python-prefix.diff

Gbp-Pq: Name tools-python-prefix.diff

7 years agotools-pygrub-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:47:01 +0000 (11:47 +0200)]
tools-pygrub-prefix.diff

Patch-Name: tools-pygrub-prefix.diff

Gbp-Pq: Name tools-pygrub-prefix.diff

7 years agotools-misc-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:59 +0000 (11:46 +0200)]
tools-misc-prefix.diff

Patch-Name: tools-misc-prefix.diff

Gbp-Pq: Name tools-misc-prefix.diff

7 years agotools-libxl-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:57 +0000 (11:46 +0200)]
tools-libxl-prefix.diff

Patch-Name: tools-libxl-prefix.diff

Gbp-Pq: Name tools-libxl-prefix.diff

7 years agotools-libfsimage-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:55 +0000 (11:46 +0200)]
tools-libfsimage-prefix.diff

Patch-Name: tools-libfsimage-prefix.diff

Gbp-Pq: Name tools-libfsimage-prefix.diff

7 years agotools-console-prefix.diff
Bastian Blank [Sat, 5 Jul 2014 09:46:54 +0000 (11:46 +0200)]
tools-console-prefix.diff

Patch-Name: tools-console-prefix.diff

Gbp-Pq: Name tools-console-prefix.diff