import QEMU 5.0.0-rc2 and rebase patches

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.2.0-2

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patches: move upstream cherry picked to extra folder, like we did in the past

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

add bitmap drive-mirror patches

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

vma_writer: Display more error information

Also print the reason why the function vma_writer_register_stream failed to
help debug errors like in [0].

[0] https://forum.proxmox.com/threads/backup-error-vma_writer_register_stream-drive-scsi0-failed-pve-6-1-7.65925/

Signed-off-by: Dominic Jäger <d.jaeger@proxmox.com>
Reviewed-by: Stefan Reiter <s.reiter@proxmox.com>

slirp: re-add security patches

the first two patches were mistakenly left out during the 4.2 qemu
rebase.

also adds another patch for issue CVE-2019-14378 (heap-based BOF)

Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>

fixup backup with io-threads

bump version to 4.2.0-1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update submodule and patches for 4.2.0

The long overdue nice rebase+cleanup was done by Dietmar

Originally-by: Dietmar Maurer <dietmar@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.1.1-4

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

security patches for libslirp CVE-2020-8608

original commits and email can be found here[0]

A out-of-bounds heap buffer access issue was found in the SLiRP
networking implementation of the QEMU emulator. It occurs in tcp_emu()
routine while emulating IRC and other protocols due to unsafe usage of
snprintf(3) function.

A user/process could use this flaw to crash the Qemu process on the host
resulting in DoS or potentially execute arbitrary code with privileges
of the QEMU process on the host.

[0]: https://seclists.org/oss-sec/2020/q1/64

Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

add patch for CVE-2019-20382 (vnc disconnect memory leak)

oss-security email can be found here[0]

upstream commit here[1]

this effects our vncproxy. dominik and me tested if the issue is present
on our branch and it appears that it is.
in essence when we disconnect from a vnc connection, the memory isn't
free'd afterwards which causes the qemu process to use more and more
memory with each disconnect, which could lead to a dos scenario.

we tested the patch and it seems to mitigate the problem.

[0]: https://seclists.org/oss-sec/2020/q1/105
[1]: https://git.qemu.org/?p=qemu.git;a=commitdiff;h=6bf21f3d83e95bcc4ba35a7a07cc6655e8b010b0

Tested-by: Dominik Csapak <d.csapak@proxmox.com>
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>

fix changelog release

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.1.1-3

improve qemu backup by reducing lock contention

- reducing lock contention by using CoRwLock
- correctly call aio_wait_kick()

followup: fix indentation

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix hmp info backup command

Signed-off-by: Tim Marx <t.marx@proxmox.com>

correct link to vma spec to new repository url

Signed-off-by: Tim Marx <t.marx@proxmox.com>

grammar fix: s/does not exists/does not exist/g

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.1.1-2

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix #2478: record python3-minimal as build dependency

Suggested-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix #2486: include fix for disk hot-resize regression (w/ iothread=1)

See: https://lists.nongnu.org/archive/html/qemu-devel/2019-09/msg03201.html

Signed-off-by: Stefan Reiter <s.reiter@proxmox.com>

fixup patch author

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.1.1-1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

allow to pass PVE version to machine

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

handle virtio-balloon cfg size compat with our 4.0 machines

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update diffs/indexes from patches

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

Update and rebase to QEMU 4.1.1

Signed-off-by: Stefan Reiter <s.reiter@proxmox.com>

Apply fixups for 4.1

* Fix VMA tool build
* Change PVE code to new blockjob API
* Acquire missing lock for block_job_add_bdrv

Signed-off-by: Stefan Reiter <s.reiter@proxmox.com>

Update and rebase to QEMU 4.1

Signed-off-by: Stefan Reiter <s.reiter@proxmox.com>

bump version to 4.0.1-5

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

fix backup speed regression

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 4.0.1-4

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

various small pve backup co-routine related fixes

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.0.1-3

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

backup: add various cleanups

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.0.1-2

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

run backup related code inside co-routines and improve locking

Patches-by: Dietmar Maurer <dietmar@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.0.1-1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update sources for v4.0.1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix #1071: use correct AioContext to cope with IOThreads

Signed-off-by: Dietmar Maurer <dietmar@proxmox.com>

Write recognized CPUID flags into static file

located at /usr/share/kvm/recognized-CPUID-flags-x86_64

It's a simple one flag per line list of all flags the build of QEMU
can understand for x86_64 CPUs.

It will be used in qemu-server for the custom CPU model feature.

For now, only x86_64 is implemented, since aarch64 doesn't print any flags when
called this way.

Co-developed-by: Stefan Reiter <s.reiter@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.0.0-7

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

disable oob again

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 4.0.0-6

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

merge monitor oob fixup

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 4.0.0-5

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

fix #2269: build: adapt to glusterfs changes

build-depend on Buster's re-introduced libglusterfs-dev, and depend on
either libglusterfs0 / libgfFOO (Debian repos) or glusterfs-common
(upstream community repos), until the latter gets fixed upstream.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

bump version to 4.0.0-4

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

merge fix for CVE-2019-14378

merge: slirp: Fix heap overflow in ip_reass on big packet input

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 4.0.0-3

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

update live migration patches

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 4.0.0-2

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

virtio-balloon: use smaller config on older guests

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix qemu PKGVERSION

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 4.0.0-1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: ensure docs (man pages) are build

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

debian/rules: disable building with SDL integration

This was added once by accident, we do not really need it for Proxmox
VE, it could bring some value for testing but here one can build qemu
oneself too.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update patches for v4.0.0

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update qemu submodule to v4.0.0

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.0.1-62

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: add libcurl4-gnutls-dev to build dependencies

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/rules: enable curl support

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/rules: disable libxml2 support

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: add libseccomp-dev to build dependencies

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: run wrap-and-sort -tkn

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/rules: ensure QEMU gets compiled with seccomp on

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/rules: split and sort configure flags

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: recursively init submodule and correct its path

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

add fixes for intel MDS CVEs

fixes for:
* CVE-2018-12126
* CVE-2018-12127
* CVE-2018-12130
* CVE-2019-11091

adds the md-clear cpuflag.

Not included by default in any Intel CPU model.

Must be explicitly turned on for all Intel CPU models.

Requires the host CPU microcode to support this feature before it
can be used for guest CPUs.

Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>

remove outdated postinst, cruft from old times

It was for the switch from doing our QEMU/KVM build as 'qemu' to
'kvm', see
https://git.proxmox.com/?p=pve-qemu-kvm.git;a=commitdiff;h=8b7e35182aba87372ba5da5d322791557b744c15

Based on:
https://pve.proxmox.com/pipermail/pve-devel/2019-May/037153.html

Co-developed-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: switch upload dist over to buster

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.0.1-61

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fixup libspice* dependencies

we only corrected the build-dep, but not the installation one,
so fix this up and bump the version while we're at it - ensures we
have relevant security fixes available

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: cleanup also older .deb files from prev. builds

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.0.1-60

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

add lintian overrides for shipped strange BLOBs

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

disable capstone support for now

would either need another submodule or a extra dependency, for now
disable.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: record missing build dependency libpixman

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: use libspice-server-dev

we dropped the pve maintained version of this in spiceterm, the only
real user - which used a small patch to allow enabling SASL with this
libary - as it bring much more headache then it brings use we dropped
that support for PVE 6.0 and thus can use the Debian upstream version
here just fine.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: fix priority-extra-is-replaced-by-priority-optional

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: use dpkg-dev makefile helpers for pkg info

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.0.1-2

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

merge: make file locking optional also on creation

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 3.0.1-1

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

build qemu multithreaded

same as in pve-kernel where we have --jobs=auto

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>

build and include qemu-system-aarch64

Signed-off-by: Dietmar Maurer <dietmar@proxmox.com>

bump version to 3.0.0-1

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

remove efi-roms-1182.tar.xz

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 2.11.2-1

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 2.11.1-5

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

merge: vma & rbd changes

vma: remove forced NO_FLUSH option
rbd: fix cache mode behavior
vma: add cache option to device map

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bump version to 2.11.1-4

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

qemu-img : add -n option to dd to skip destination image create

build: use 3.0 source format

instead of manually including and calling quilt. resulting binary debs
are identical.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

buildsys: remove new PPC specific files

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

debian/rules: don't disable Flat Device Tree

I don't know why fdt, Flat Device Tree, is disabled,
but that disabling blocks building e.g. qemu-system-aarch64.
It stops the build and yields this:

 ERROR: fdt disabled but some requested targets require it.
        You can turn off fdt only if you also disable all the system
        emulation targets which need it
        (by specifying a cut down --target-list).

Signed-off-by: Geert Stappers <stappers@stappers.it>

Makefile: git repository is moved

Signed-off-by: Geert Stappers <stappers@stappers.it>

bump version to 2.11.1-3

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

merge: qemu-img dd: add isize parameter

to write small images from stdin to bigger destinations

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>