From xen-announce-bounces@lists.xen.org Tue May 03 08:24:01 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 03 May 2016 08:24:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1axVbL-0005cd-VJ; Tue, 03 May 2016 08:22:39 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1axVaX-0005ZO-BS for xen-announce@lists.xenproject.org; Tue, 03 May 2016 08:21:49 +0000 Received: from [85.158.137.68] by server-12.bemta-3.messagelabs.com id 29/1C-19343-C9F58275; Tue, 03 May 2016 08:21:48 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrFIsWRWlGSWpSXmKPExsXiVRtkojs7XiP c4HyPuMXsjW3MDowehz9cYQlgjGLNzEvKr0hgzfi5dD5TwSSBiv1bd7M3MO7h7WLk4hASmM0o 0fj+PhuIwyIwnVWio+kDI4gjIbCZVeLqkmtADieQEyPx9sUdZgi7SqLhwEt2EFtIQF3i3qLb7 BCjljBJHHrRyQKSYBbQkrjx7yUTiM0roCfx6tZl1i5GDg5hATuJtjP2IGE2AW2JTTceMIOEOQ VsJSZ/dAIJswioSBzb/J0NYoq2xLKFr5khpthIbOlcxgSx1kZi/uFvYJtEBEwkTt87C3WmrMT u34+YJjAKzUJyxCwkR8xCMnYBI/MqRvXi1KKy1CJdU72kosz0jJLcxMwcXUMDY73c1OLixPTU nMSkYr3k/NxNjMBwrmdgYNzBePmr0yFGSQ4mJVFeibvq4UJ8SfkplRmJxRnxRaU5qcWHGGU4O JQkeK3iNMKFBItS01Mr0jJzgJEFk5bg4FES4eUHSfMWFyTmFmemQ6ROMepybJl6by2TEEtefl 6qlDivIUiRAEhRRmke3AhYlF9ilJUS5mVkYGAQ4ilILcrNLEGVf8UozsGoJMzrBzKFJzOvBG7 TK6AjmICOyF6vCnJESSJCSqqBcfLe9vtnpSY/TFw4qYPZbNZfjsI064/Cx18k2Ahnm+pIs0q5 +oTJ5+vFvLwdZZVUevik7tEr20I/Z2VdMtqh6hIY6v/i3dc7Us4n2usWRQe5nb+0JUnnUHCmq kmb6dP53jN/Vumv6nvwySD0TEnR0XO/oz0M+IuLXiilR4d9Tjv/6kNsxhJRJZbijERDLeai4k QA2/8nC+0CAAA= X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-13.tower-31.messagelabs.com!1462263707!37543173!1 X-Originating-IP: [74.125.82.52] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 17253 invoked from network); 3 May 2016 08:21:47 -0000 Received: from mail-wm0-f52.google.com (HELO mail-wm0-f52.google.com) (74.125.82.52) by server-13.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 3 May 2016 08:21:47 -0000 Received: by mail-wm0-f52.google.com with SMTP id a17so24662508wme.0 for ; Tue, 03 May 2016 01:21:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=ZY6j0SaNdAOoHK2XlkSpK2QXNkg6GZOy/+Fw8wPKaFg=; b=Tb/bqKVvUEuwMjCPtcVU8WjimiRohFTLCjmpVGjChYViNdpPSlmNZLSssnWUzmOs68 9k9himYfze+3tyrPucO+0sfdmig4Vug9Uh84K0qwyxs6tsTLGrwxsv27bOHhsSBXfann FWYr0nJtfyHj5i5uv4FGW4PKP0LNUUR67c9JKOIRBkyZhdxZwd20y5o1ZPbrka6pygGi EKFl4IIzVYw/+wbpTriHjyPgZJOKvT+BOSI41OBMyvBma2GkTk5IqR9uveCQTE2C3ZQt VWZD3jbTRL3V3/AW9v7s9w7dbZVOFZD8HPaVQAQb6O00lhXRLcFr9PPHbPyaWi4hAWpc 7dww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=ZY6j0SaNdAOoHK2XlkSpK2QXNkg6GZOy/+Fw8wPKaFg=; b=OgTGrCbWArqwB8yAxkiHbTyt0aqh2oU/gtXhqcwVE/aU7hqM376Vk/2k9JErhFq7/N 1bGWWRiLUoTC9iWYeAI4Fa1CGWu5MC7Jwyu7WalsK2ZfcASBGEdk7lPs/AuYogl+H4ll gXtsVpl8mtLL73UCoY9MIX/pFeXxzNMfePXGR3YB5xp7ExFZZh8S9n1jKxkTkH1B7tUE P3/uxVRJ9s+ygz6PMR3uCC1GD7ImedGxmeLeReHXicF6QYe4MCIWg6nVbxSu3mjzL693 4Cu+1gUDtuQ+R7pNt+URLLc1q7LxBvRQey0PTF+yUREJ0G7WB+56wZp1w3wHAyG9avOC 4UGA== X-Gm-Message-State: AOPr4FWbJ1/kd50Q5Jy6insLrZxxqoIJ2VxVPGUyHHzX721OiLqxwGW4BG8H9H6IR4INiw== X-Received: by 10.28.139.129 with SMTP id n123mr1856240wmd.13.1462263706726; Tue, 03 May 2016 01:21:46 -0700 (PDT) Received: from [192.168.0.12] (bcde049e.skybroadband.com. [188.222.4.158]) by smtp.gmail.com with ESMTPSA id o4sm2422636wjx.45.2016.05.03.01.21.45 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 03 May 2016 01:21:46 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Lars Kurth In-Reply-To: <437295A3-A1DE-4259-8C2C-0A77A4A14546@gmail.com> Date: Tue, 3 May 2016 09:21:44 +0100 Message-Id: <06A8FCCE-44CD-4861-B40D-EC019CFD2883@gmail.com> References: <437295A3-A1DE-4259-8C2C-0A77A4A14546@gmail.com> To: xen-announce X-Mailer: Apple Mail (2.2104) X-Mailman-Approved-At: Tue, 03 May 2016 08:22:39 +0000 Subject: Re: [Xen-announce] Xen Project Developer Summit (CfP closes May 6th) X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" Q29ycmVjdGlvbjogdGhlIHRleHQgYmVsb3cgc2hvdWxkIHNheSAiWGVuIFByb2plY3QgRGV2ZWxv cGVyIFN1bW1pdCB3aGljaCBpcyBoZWxkIGluIFRvcm9udG8gZnJvbSBBdWd1c3QgMjUtMjZ0aCIg aW5zdGVhZCBvZiBNYXQKTGFycwoKPiBPbiAyOSBBcHIgMjAxNiwgYXQgMTc6MzUsIExhcnMgS3Vy dGggPGxhcnMua3VydGgueGVuQGdtYWlsLmNvbT4gd3JvdGU6Cj4gCj4gRGVhciBYZW4gUHJvamVj dCBDb21tdW5pdHkgTWVtYmVycywgCj4gCj4gdGhpcyBpcyBqdXN0IGEgcXVpY2sgcmVtaW5kZXIg dGhhdCB0aGUgQ2ZQIGZvciB0aGUgWGVuIFByb2plY3QgRGV2ZWxvcGVyIFN1bW1pdCB3aGljaCBp cyBoZWxkIGluIFRvcm9udG8gZnJvbSBNYXkgMjUtMjZ0aCBjbG9zZXMgb24gTWF5IHRoZSA2dGgs IDIwMTYgYXQgMTE6NTkgcG0gUFNULiBXaGljaCBpcyBhIHdlZWsgZnJvbSBub3cuIEJlc2lkZXMg ZGV2ZWxvcGVyIHRhbGtzLCB3ZSBhcmUgYWx3YXlzIGFsc28gbG9va2luZyBmb3IgdXNlciBzdG9y aWVzIChob3cgeW91IHVzZSBYZW4pIGFuZCBjaGFsbGVuZ2VzIHRoYXQgb3VyIHVzZXJzIG1heSBm YWNlLiBJZiB5b3UgaGF2ZSBhbiBpZGVhIHJlbGF0ZWQgdG8gYSB0YWxrLCBidXQgYXJlIG5vdCBz dXJlIGFib3V0IGl0LCBmZWVsIGZyZWUgdG8gZHJvcCBtZSBhIGxpbmUuCj4gCj4gRm9yIHRoZSBD ZlAgc3VibWlzc2lvbiBsaW5rLCBmb2xsb3cgaHR0cDovL2V2ZW50cy5saW51eGZvdW5kYXRpb24u b3JnL2V2ZW50cy94ZW4tcHJvamVjdC1kZXZlbG9wZXItc3VtbWl0L3Byb2dyYW0vY2ZwIAo+IAo+ IFR5cGljYWxseSB3ZSBhcmUgbG9va2luZyBmb3IgdGFsa3MgdGhhdCBjb3ZlciBzdWJqZWN0cyBz dWNoIGFzIHRob3NlIGxpc3RlZCBiZWxvdywgYnV0IG90aGVyIHJlbGV2YW50IHRvcGljcyBhcmUg YWx3YXlzIGFsc28gd2VsY29tZSAKPiAKPiBYZW4sIFFFTVUsIExpbnV4IGFuZCBvdGhlciBvcGVy YXRpbmcgc3lzdGVtcwo+IAo+IC0gU2VjdXJpdHkgRmVhdHVyZXMKPiAtIFNlY3VyaXR5IFByYWN0 aWNlcwo+IC0gSGFyZGVuaW5nIGFuZCBzZWN1cml0eQo+IC0gU2NhbGluZyBhbmQgb3B0aW1pemF0 aW9ucwo+IC0gTmVzdGVkIHZpcnR1YWxpemF0aW9uCj4gLSBLZXJuZWwgcGVyZm9ybWFuY2UgYW5k IG90aGVyIGltcHJvdmVtZW50cwo+IC0gUmVzb3VyY2UgbWFuYWdlbWVudCAoQ1BVLCBJL08sIG1l bW9yeSkKPiAtIEFyY2hpdGVjdHVyZSBwb3J0cwo+IC0gRGVza3RvcCB2aXJ0dWFsaXphdGlvbiAK PiAtIEdyYXBoaWNzIHZpcnR1YWxpemF0aW9uCj4gLSBOZXcgc3RvcmFnZSBmZWF0dXJlcwo+IC0g TGl2ZSBtaWdyYXRpb24gYW5kIGZhdWx0IHRvbGVyYW5jZQo+IC0gSGlnaCBhdmFpbGFiaWxpdHkg YW5kIGNvbnRpbnVvdXMgYmFja3VwCj4gLSBSZWFsLXRpbWUgZ3Vlc3Qgc3VwcG9ydAo+IC0gU2No ZWR1bGVycwo+IC0gRmlybXdhcmU6IEFDUEksIFVFRkksIGNvcmVib290LCB1LUJvb3QsIGV0Yy4K PiAtIFRlc3RpbmcgYW5kIFF1YWxpdHkKPiAtIENvbW11bml0eSByZWxhdGVkIHRvcGljcwo+IAo+ IE1hbmFnZW1lbnQgYW5kIGluZnJhc3RydWN0dXJlCj4gCj4gLSBNYW5hZ2luZyBYZW46IFhML0xp YlhMLCBYQVBJLCBMaWJ2aXJ0LCBPcGVuU3RhY2ssIGV0Yy4KPiAtIFVuaWtlcm5lbHMgYW5kIHJl bGF0ZWQgdGVjaG5vbG9naWVzIAo+IC0gU29mdHdhcmUgZGVmaW5lZCBuZXR3b3JraW5nOiBPcGVu IHZTd2l0Y2gsIE9wZW5EYXlsaWdodCwgZXRjLgo+IC0gTmV0d29yayBGdW5jdGlvbiBWaXJ0dWFs aXphdGlvbgo+IC0gU2VjdXJpdHkKPiAtIFByb3Zpc2lvbmluZwo+IC0gUGVyZm9ybWFuY2UgdHVu aW5nCj4gCj4gRmVlbCBmcmVlIHRvIGFsc28gY2hlY2sgb3V0IGxhc3QgeWVhcidzIHRhbGsgcmVj b3JkaW5ncyBhdCBodHRwczovL3d3dy55b3V0dWJlLmNvbS9wbGF5bGlzdD9saXN0PVBMWXl3N0lR akwtekhkeHFsX3J2Z0NfUGp6TlZmb3ZvZ1UgZm9yIGluc3BpcmF0aW9uCj4gCj4gQmVzdCBSZWdh cmRzIAo+IExhcnMKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpYZW4tYW5ub3VuY2UgbWFpbGluZyBsaXN0Clhlbi1hbm5vdW5jZUBsaXN0cy54ZW4ub3Jn Cmh0dHA6Ly9saXN0cy54ZW4ub3JnL3hlbi1hbm5vdW5jZQ== From xen-announce-bounces@lists.xen.org Tue May 03 08:24:01 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 03 May 2016 08:24:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1axVbL-0005cd-VJ; Tue, 03 May 2016 08:22:39 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1axVaX-0005ZO-BS for xen-announce@lists.xenproject.org; Tue, 03 May 2016 08:21:49 +0000 Received: from [85.158.137.68] by server-12.bemta-3.messagelabs.com id 29/1C-19343-C9F58275; Tue, 03 May 2016 08:21:48 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrFIsWRWlGSWpSXmKPExsXiVRtkojs7XiP c4HyPuMXsjW3MDowehz9cYQlgjGLNzEvKr0hgzfi5dD5TwSSBiv1bd7M3MO7h7WLk4hASmM0o 0fj+PhuIwyIwnVWio+kDI4gjIbCZVeLqkmtADieQEyPx9sUdZgi7SqLhwEt2EFtIQF3i3qLb7 BCjljBJHHrRyQKSYBbQkrjx7yUTiM0roCfx6tZl1i5GDg5hATuJtjP2IGE2AW2JTTceMIOEOQ VsJSZ/dAIJswioSBzb/J0NYoq2xLKFr5khpthIbOlcxgSx1kZi/uFvYJtEBEwkTt87C3WmrMT u34+YJjAKzUJyxCwkR8xCMnYBI/MqRvXi1KKy1CJdU72kosz0jJLcxMwcXUMDY73c1OLixPTU nMSkYr3k/NxNjMBwrmdgYNzBePmr0yFGSQ4mJVFeibvq4UJ8SfkplRmJxRnxRaU5qcWHGGU4O JQkeK3iNMKFBItS01Mr0jJzgJEFk5bg4FES4eUHSfMWFyTmFmemQ6ROMepybJl6by2TEEtefl 6qlDivIUiRAEhRRmke3AhYlF9ilJUS5mVkYGAQ4ilILcrNLEGVf8UozsGoJMzrBzKFJzOvBG7 TK6AjmICOyF6vCnJESSJCSqqBcfLe9vtnpSY/TFw4qYPZbNZfjsI064/Cx18k2Ahnm+pIs0q5 +oTJ5+vFvLwdZZVUevik7tEr20I/Z2VdMtqh6hIY6v/i3dc7Us4n2usWRQe5nb+0JUnnUHCmq kmb6dP53jN/Vumv6nvwySD0TEnR0XO/oz0M+IuLXiilR4d9Tjv/6kNsxhJRJZbijERDLeai4k QA2/8nC+0CAAA= X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-13.tower-31.messagelabs.com!1462263707!37543173!1 X-Originating-IP: [74.125.82.52] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 17253 invoked from network); 3 May 2016 08:21:47 -0000 Received: from mail-wm0-f52.google.com (HELO mail-wm0-f52.google.com) (74.125.82.52) by server-13.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 3 May 2016 08:21:47 -0000 Received: by mail-wm0-f52.google.com with SMTP id a17so24662508wme.0 for ; Tue, 03 May 2016 01:21:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=ZY6j0SaNdAOoHK2XlkSpK2QXNkg6GZOy/+Fw8wPKaFg=; b=Tb/bqKVvUEuwMjCPtcVU8WjimiRohFTLCjmpVGjChYViNdpPSlmNZLSssnWUzmOs68 9k9himYfze+3tyrPucO+0sfdmig4Vug9Uh84K0qwyxs6tsTLGrwxsv27bOHhsSBXfann FWYr0nJtfyHj5i5uv4FGW4PKP0LNUUR67c9JKOIRBkyZhdxZwd20y5o1ZPbrka6pygGi EKFl4IIzVYw/+wbpTriHjyPgZJOKvT+BOSI41OBMyvBma2GkTk5IqR9uveCQTE2C3ZQt VWZD3jbTRL3V3/AW9v7s9w7dbZVOFZD8HPaVQAQb6O00lhXRLcFr9PPHbPyaWi4hAWpc 7dww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=ZY6j0SaNdAOoHK2XlkSpK2QXNkg6GZOy/+Fw8wPKaFg=; b=OgTGrCbWArqwB8yAxkiHbTyt0aqh2oU/gtXhqcwVE/aU7hqM376Vk/2k9JErhFq7/N 1bGWWRiLUoTC9iWYeAI4Fa1CGWu5MC7Jwyu7WalsK2ZfcASBGEdk7lPs/AuYogl+H4ll gXtsVpl8mtLL73UCoY9MIX/pFeXxzNMfePXGR3YB5xp7ExFZZh8S9n1jKxkTkH1B7tUE P3/uxVRJ9s+ygz6PMR3uCC1GD7ImedGxmeLeReHXicF6QYe4MCIWg6nVbxSu3mjzL693 4Cu+1gUDtuQ+R7pNt+URLLc1q7LxBvRQey0PTF+yUREJ0G7WB+56wZp1w3wHAyG9avOC 4UGA== X-Gm-Message-State: AOPr4FWbJ1/kd50Q5Jy6insLrZxxqoIJ2VxVPGUyHHzX721OiLqxwGW4BG8H9H6IR4INiw== X-Received: by 10.28.139.129 with SMTP id n123mr1856240wmd.13.1462263706726; Tue, 03 May 2016 01:21:46 -0700 (PDT) Received: from [192.168.0.12] (bcde049e.skybroadband.com. [188.222.4.158]) by smtp.gmail.com with ESMTPSA id o4sm2422636wjx.45.2016.05.03.01.21.45 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 03 May 2016 01:21:46 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Lars Kurth In-Reply-To: <437295A3-A1DE-4259-8C2C-0A77A4A14546@gmail.com> Date: Tue, 3 May 2016 09:21:44 +0100 Message-Id: <06A8FCCE-44CD-4861-B40D-EC019CFD2883@gmail.com> References: <437295A3-A1DE-4259-8C2C-0A77A4A14546@gmail.com> To: xen-announce X-Mailer: Apple Mail (2.2104) X-Mailman-Approved-At: Tue, 03 May 2016 08:22:39 +0000 Subject: Re: [Xen-announce] Xen Project Developer Summit (CfP closes May 6th) X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" Q29ycmVjdGlvbjogdGhlIHRleHQgYmVsb3cgc2hvdWxkIHNheSAiWGVuIFByb2plY3QgRGV2ZWxv cGVyIFN1bW1pdCB3aGljaCBpcyBoZWxkIGluIFRvcm9udG8gZnJvbSBBdWd1c3QgMjUtMjZ0aCIg aW5zdGVhZCBvZiBNYXQKTGFycwoKPiBPbiAyOSBBcHIgMjAxNiwgYXQgMTc6MzUsIExhcnMgS3Vy dGggPGxhcnMua3VydGgueGVuQGdtYWlsLmNvbT4gd3JvdGU6Cj4gCj4gRGVhciBYZW4gUHJvamVj dCBDb21tdW5pdHkgTWVtYmVycywgCj4gCj4gdGhpcyBpcyBqdXN0IGEgcXVpY2sgcmVtaW5kZXIg dGhhdCB0aGUgQ2ZQIGZvciB0aGUgWGVuIFByb2plY3QgRGV2ZWxvcGVyIFN1bW1pdCB3aGljaCBp cyBoZWxkIGluIFRvcm9udG8gZnJvbSBNYXkgMjUtMjZ0aCBjbG9zZXMgb24gTWF5IHRoZSA2dGgs IDIwMTYgYXQgMTE6NTkgcG0gUFNULiBXaGljaCBpcyBhIHdlZWsgZnJvbSBub3cuIEJlc2lkZXMg ZGV2ZWxvcGVyIHRhbGtzLCB3ZSBhcmUgYWx3YXlzIGFsc28gbG9va2luZyBmb3IgdXNlciBzdG9y aWVzIChob3cgeW91IHVzZSBYZW4pIGFuZCBjaGFsbGVuZ2VzIHRoYXQgb3VyIHVzZXJzIG1heSBm YWNlLiBJZiB5b3UgaGF2ZSBhbiBpZGVhIHJlbGF0ZWQgdG8gYSB0YWxrLCBidXQgYXJlIG5vdCBz dXJlIGFib3V0IGl0LCBmZWVsIGZyZWUgdG8gZHJvcCBtZSBhIGxpbmUuCj4gCj4gRm9yIHRoZSBD ZlAgc3VibWlzc2lvbiBsaW5rLCBmb2xsb3cgaHR0cDovL2V2ZW50cy5saW51eGZvdW5kYXRpb24u b3JnL2V2ZW50cy94ZW4tcHJvamVjdC1kZXZlbG9wZXItc3VtbWl0L3Byb2dyYW0vY2ZwIAo+IAo+ IFR5cGljYWxseSB3ZSBhcmUgbG9va2luZyBmb3IgdGFsa3MgdGhhdCBjb3ZlciBzdWJqZWN0cyBz dWNoIGFzIHRob3NlIGxpc3RlZCBiZWxvdywgYnV0IG90aGVyIHJlbGV2YW50IHRvcGljcyBhcmUg YWx3YXlzIGFsc28gd2VsY29tZSAKPiAKPiBYZW4sIFFFTVUsIExpbnV4IGFuZCBvdGhlciBvcGVy YXRpbmcgc3lzdGVtcwo+IAo+IC0gU2VjdXJpdHkgRmVhdHVyZXMKPiAtIFNlY3VyaXR5IFByYWN0 aWNlcwo+IC0gSGFyZGVuaW5nIGFuZCBzZWN1cml0eQo+IC0gU2NhbGluZyBhbmQgb3B0aW1pemF0 aW9ucwo+IC0gTmVzdGVkIHZpcnR1YWxpemF0aW9uCj4gLSBLZXJuZWwgcGVyZm9ybWFuY2UgYW5k IG90aGVyIGltcHJvdmVtZW50cwo+IC0gUmVzb3VyY2UgbWFuYWdlbWVudCAoQ1BVLCBJL08sIG1l bW9yeSkKPiAtIEFyY2hpdGVjdHVyZSBwb3J0cwo+IC0gRGVza3RvcCB2aXJ0dWFsaXphdGlvbiAK PiAtIEdyYXBoaWNzIHZpcnR1YWxpemF0aW9uCj4gLSBOZXcgc3RvcmFnZSBmZWF0dXJlcwo+IC0g TGl2ZSBtaWdyYXRpb24gYW5kIGZhdWx0IHRvbGVyYW5jZQo+IC0gSGlnaCBhdmFpbGFiaWxpdHkg YW5kIGNvbnRpbnVvdXMgYmFja3VwCj4gLSBSZWFsLXRpbWUgZ3Vlc3Qgc3VwcG9ydAo+IC0gU2No ZWR1bGVycwo+IC0gRmlybXdhcmU6IEFDUEksIFVFRkksIGNvcmVib290LCB1LUJvb3QsIGV0Yy4K PiAtIFRlc3RpbmcgYW5kIFF1YWxpdHkKPiAtIENvbW11bml0eSByZWxhdGVkIHRvcGljcwo+IAo+ IE1hbmFnZW1lbnQgYW5kIGluZnJhc3RydWN0dXJlCj4gCj4gLSBNYW5hZ2luZyBYZW46IFhML0xp YlhMLCBYQVBJLCBMaWJ2aXJ0LCBPcGVuU3RhY2ssIGV0Yy4KPiAtIFVuaWtlcm5lbHMgYW5kIHJl bGF0ZWQgdGVjaG5vbG9naWVzIAo+IC0gU29mdHdhcmUgZGVmaW5lZCBuZXR3b3JraW5nOiBPcGVu IHZTd2l0Y2gsIE9wZW5EYXlsaWdodCwgZXRjLgo+IC0gTmV0d29yayBGdW5jdGlvbiBWaXJ0dWFs aXphdGlvbgo+IC0gU2VjdXJpdHkKPiAtIFByb3Zpc2lvbmluZwo+IC0gUGVyZm9ybWFuY2UgdHVu aW5nCj4gCj4gRmVlbCBmcmVlIHRvIGFsc28gY2hlY2sgb3V0IGxhc3QgeWVhcidzIHRhbGsgcmVj b3JkaW5ncyBhdCBodHRwczovL3d3dy55b3V0dWJlLmNvbS9wbGF5bGlzdD9saXN0PVBMWXl3N0lR akwtekhkeHFsX3J2Z0NfUGp6TlZmb3ZvZ1UgZm9yIGluc3BpcmF0aW9uCj4gCj4gQmVzdCBSZWdh cmRzIAo+IExhcnMKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpYZW4tYW5ub3VuY2UgbWFpbGluZyBsaXN0Clhlbi1hbm5vdW5jZUBsaXN0cy54ZW4ub3Jn Cmh0dHA6Ly9saXN0cy54ZW4ub3JnL3hlbi1hbm5vdW5jZQ== From xen-announce-bounces@lists.xen.org Mon May 09 12:01:25 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 09 May 2016 12:01:25 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1azjrK-0007Yg-Mn; Mon, 09 May 2016 12:00:22 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1azjrJ-0007YT-Ch; Mon, 09 May 2016 12:00:21 +0000 Received: from [85.158.139.211] by server-1.bemta-5.messagelabs.com id F7/C6-32266-4DB70375; Mon, 09 May 2016 12:00:20 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpkl+JIrShJLcpLzFFi42LJaLquqnux2iD cYNktTYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmLNlzlLHg7HuOiredhQ2M 765ydDFycQgJHGeU2Pilgw3CWcQo8fjYLuYuRk4OZgFXiRv7NrNB2IoSF+41sIDYvAKCEidnP gGzJQQ0Je68WcUOYosIFEnsPPcSzGYT0JOYe3YSE0SvjsTL/auZQBYIC3QzSrS1fAZq5gAaZC Yx7YYTSA2LgKrE08k7WSYw8sxCsnoWktWzkKyeBdTNDLR6/S59CFNaYvk/DohqeYntb+cwzwJ axizQwihxbd9BKKeRUWLng24mmJlTuh+yQ9jZEv82/GSEsDMkJpw4xYqppkhi773PLBB2vsTS rw2MmGpqJf5enw81v0ri17JNLJhqWhkl+lqiIQ5qYpSY/vgCM6aieoklTx5ANddIzPr9EotBa RKb/i2AOiJZYsqLV+yYanIlVp89DjU/S2LylS9Y1FRIvJ60EsoulTj6/ijjAsaEVYwaxalFZa lFuoZmeklFmekZJbmJmTm6hgamermpxcWJ6ak5iUnFesn5uZsYgQmRAQh2MJ4/7XmIUZKDSUm U15VRL1yILyk/pTIjsTgjvqg0J7X4EKMMB4eSBO+rKoNwIcGi1PTUirTMHGBqhklLcPAoifAK gKR5iwsSc4sz0yFSpxiNOZZMv7aWiWPRzcf7mYRY8vLzUqXEeX+BlAqAlGaU5sENguWMS4yyU sK8jECnCfEUpBblZpagyr9iFOdgVBLmPQAyhSczrwRu3yugU5iATpFj0wc5pSQRISXVwLhi64 sl8VHOW5efYWk/ELL5ltzF4yoNM6/NmHcxaM/iyVpNsk8+qQdmu9k5bbjJtlr1QKD4Z5mOwhU HZse0boq+HRCvr/NCmPuwX+7pYpsNJ062XNYKLznUutHS/XDsZUmHsDilBPWLhSyRa2O/Lpz1 pOmq9nWhy5K/pOOKbmT6rnyeHzmzwVKJpTgj0VCLuag4EQBd2FMrFAQAAA== X-Env-Sender: iwj@xenbits.xen.org X-Msg-Ref: server-5.tower-206.messagelabs.com!1462795216!38626463!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 31885 invoked from network); 9 May 2016 12:00:17 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-5.tower-206.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 9 May 2016 12:00:17 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1azjr5-0005R1-6E; Mon, 09 May 2016 12:00:07 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1azjr0-0002Rj-4I; Mon, 09 May 2016 12:00:02 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Mon, 09 May 2016 12:00:02 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 179 (CVE-2016-3710, CVE-2016-3712) - QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2016-3710,CVE-2016-3712 / XSA-179 version 4 QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks UPDATES IN VERSION 4 ==================== Public release. Also include CVE and description of both issues. (All advisories sent have included patches for both issues, but only the description and CVE for the first issue.) ISSUE DESCRIPTION ================= Qemu VGA module allows banked access to video memory using the window at 0xa00000 and it supports different access modes with different address calculations. But an attacker can easily change access modes after setting the bank register. This is CVE-2016-3710. Qemu VGA module allows guest to edit certain registers in 'vbe' and 'vga' modes. ie. guest could set certain 'VGA' registers while in 'VBE' mode. This is CVE-2016-3712. IMPACT ====== A privileged guest user could use CVE-2016-3710 to exceed the bank address window and write beyond the said memory area, potentially leading to arbitrary code execution with privileges of the Qemu process. If the system is not using stubdomains, this will be in domain 0. A privileged guest user could use CVE-2016-3712 to cause potential integer overflow or OOB read access issues in Qemu, resulting in a DoS of the guest itself. More dangerous effect, such as data leakage or code execution, are not known but cannot be ruled out. VULNERABLE SYSTEMS ================== Versions of qemu shipped with all Xen versions are vulnerable. Xen systems running on x86 with HVM guests, with the qemu process running in dom0 are vulnerable. Only guests provided with the "stdvga" emulated video card can exploit the vulnerability. The default "cirrus" emulated video card is not vulnerable. (With xl the emulated video card is controlled by the "stdvga=" and "vga=" domain configuration options.) ARM systems are not vulnerable. Systems using only PV guests are not vulnerable. For VMs whose qemu process is running in a stub domain, a successful attacker will only gain the privileges of that stubdom, which should be only over the guest itself. Both upstream-based versions of qemu (device_model_version="qemu-xen") and `traditional' qemu (device_model_version="qemu-xen-traditional") are vulnerable. MITIGATION ========== Running only PV guests will avoid the issue. Running HVM guests with the device model in a stubdomain will mitigate the issue. Changing the video card emulation to cirrus (stdvga=0, vga="cirrus", in the xl domain configuraton) will avoid the vulnerability. CREDITS ======= CVE-2016-3710 was discovered and reported by "Wei Xiao and Qinghao Tang of 360 Marvel Team" of 360.cn Inc. CVE-2016-3710 was discovered and reported by Zuozhi Fzz of Alibaba Inc. RESOLUTION ========== Applying the appropriate attached patch resolves this issue for systems using upstream-based versions of qemu. Patch 0001 addresses CVE-2016-3710, and patches 0002-0005 address CVE-2016-3712. qemu-upstream, xen-unstable: xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.6: xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.5: xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.4: xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.3: xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-xen-traditional, unstable: xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ sha256sum xsa179* e216959d099ed807b282026e1e4d558ce0c0e8ead284ddd9d0581cef5fcef0ad xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 708e40d85866540567d2d915731c6e9876cd0d6754bc6696650ed71d8e48d710 xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch 767007028189bce54df9769ff6cb9db7cd37b5c2afaac86787b30c8f2a03f342 xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch 1fb507c307b093e5e4471d4a5e567db419adecbfe772a68bf91722836bcba4cd xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch ff4327d598d2e0912dc3a22ab9ba14d6c79bfa5a154714b6c5da761d5ded403f xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 059bfa59f39222ad6991e6c0c8338385f2a317e379d02d0c2cb0e5a8138cb329 xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch c6dfe50d694b75670bbdec78a3ce6293a8da46d5ff8b47f1e0d7e4fac22260bf xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch f57e31e8b81f1161537277a0934013c1fb3bbf57319543dfd10a5dc5fdfb927b xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch 14900af2b13d362ffb98c061e76b13965965284399dd9b9f1a4e41b41f34a3a3 xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2b2e7d306fd95fa74490ee1694af1af9438d7ff738d8c6aecc7d99d4eb96dcb2 xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch e6108266bf0abada5fc6e0a3ca65c2702fcae610826ead6a215d622ec3ed973a xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 05bdfae312078b22542e9f18db98fae11dbfd9785184b0b3c8de8c94797e1427 xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch 56dee9d0f54357391d5249a01ab28a1879dd7d1a36b4d147d68c62688d8af22b xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch 10603f5ffe317de328dc46139a6b5ff6081040ca6368ee1642b5343db9bcfda1 xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch e0dbc47086f0346a9554b98468256bc325d67440f5d786c5825390d293896509 xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 9b0cfdba369437a3e3da86690cd0c6d9d05e39d1168065e4d11ff2de4e546feb xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3c56f255d2ff3e5ae24f15de69cbd4abf3ff0d2dbb63a686937d5e2ab1989d59 xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch b1ddabf50720635efa17a7c57778acd2e1d9fd6a6424038455163991afecb044 xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch 0f34eeda817f39d3b5e484d535aa29bae16e7e36b4dc042bc41ef0e1844bf3cb xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch c24b3401a7ed45f853de7c96b998d50461254e9082a706753b814ddcbc285b17 xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch de59a098a39c1adbc86f3857dbb2b655479f97756d46e017e83b41c1390a98b9 xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3686d0b5c3603819fe0eca65ed62161c676e6abd8e676e513f6d4b3d46e7a997 xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch 18d01083e2f4000816ecf26d85da5cb337f540da447e6252f348a5b538cc7fa4 xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch 811ce206293b54ad601eb0a0e59bee502277c642f73f1ea0bad712efc528f82d xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2097c9e4eac66a65e07607664d1aaec288c4c8b0f147c73636c1b2532cdd20dd xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 132fd7f7d1f7bee4d934daefc24ec65080ae09b7d0e07a86edc3b683cad8156a xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch b83c29c3737415bf05da14c0b856abeb3bdbb77fba7d538956535ed67160abe8 xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch 834266af0499167e6d8e2e87bb770b79c0e8480ab5ea72064298656ccdd36741 xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch a5c3c38340261c7ff44047289aad6276e501930e214c40350056a364469965cd xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch 4869ad504cba52f537dae102e226b020422e3b6494ffba3b865eb2893bee0e9e xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXMHkhAAoJEIP+FMlX6CvZ4J4IAKgEIz12GbtunUY4H3EY+bye qtpFfPIvE8933HCNG4c2e8VR/PehOlDhUWMDlkyFJ3jBja7VPeqOm9jnHWlsxaCz x7nix3PbbcconeUMn5JMf9i2ocY0wNvrD+wYBVCnSvLjvnBpKXEKgCIrAZ2bLLa8 TfcqCC3R5z15r2GoJ801lP9ts3/tQLketBefBUznGYaZreVgGF73g7tyK6bsFQAz PFVzBb2lSx2XwfWNC1Ya/a456WUmuDFpcfRVfdKi4yEh/xPOlKj1kKvx8GpSDm0m 3+5h04pp5Znu+ORVztfqcRPx4v4LXT33bM5mjBytJRc05//DIsHuC3GKOoBu9rQ= =faLY -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAzYmYxODE3MDc5YmIwZDgwYzBkOGE4NmE3YzdkZDBiZmU5MGViODJl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3 L2Rpc3BsYXkvdmdhLmMgfCAyNCArKysrKysrKysrKysrKysrKystLS0tLS0K IDEgZmlsZSBjaGFuZ2VkLCAxOCBpbnNlcnRpb25zKCspLCA2IGRlbGV0aW9u cygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IDY1N2U5ZjEuLmI5MTkxY2EgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTc5LDYgKzE3OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKICAgICAgICAgICAgIHNpemUg PSAweDgwMDA7CiAgICAgICAgICAgICBicmVhazsKICAgICAgICAgfQorICAg ICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6ZSA8PSBzLT52cmFtX3NpemUpOwog ICAgICAgICBtZW1vcnlfcmVnaW9uX2luaXRfYWxpYXMoJnMtPmNoYWluNF9h bGlhcywgbWVtb3J5X3JlZ2lvbl9vd25lcigmcy0+dnJhbSksCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAidmdhLmNoYWluNCIsICZzLT52 cmFtLCBvZmZzZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2Fk ZF9zdWJyZWdpb25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwg YmFzZSwKQEAgLTcxNiwxMSArNzE3LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dy aXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAg ICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9C QU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9J TkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52 YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAg ICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAg ICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsK ICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7 CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwog ICAgICAgICAgICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAt ODE5LDEzICs4MTYsMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FD b21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3Jb VkdBX1NFUV9NRU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAg ICAgICAgLyogY2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisg ICAgICAgIGFzc2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAg cmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5n cltWR0FfR0ZYX01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZl biBtb2RlIChha2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBs YW5lID0gKHMtPmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRy ICYgMSk7Ci0gICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFt X3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9 CisgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSB7CiAgICAgICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAq LworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+ dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAg ICAgfQogICAgICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFt X3B0cilbYWRkcl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9N T0RFXSAmIDB4MDgpKSB7CkBAIC04ODIsNiArODg3LDcgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAg ICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZH QV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNz ZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJh bV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAg ICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1U X3BseCAiXVxuIiwgYWRkcik7CkBAIC04OTUsNiArOTAxLDkgQEAgdm9pZCB2 Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIs IHVpbnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgewogICAgICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQog ICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYg REVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9l dmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTk2 OCw2ICs5NzcsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0 YXRlICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBt YXNrID0gcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV07CiAgICAgICAgIHMt PnBsYW5lX3VwZGF0ZWQgfD0gbWFzazsgLyogb25seSB1c2VkIHRvIGRldGVj dCBmb250IGNoYW5nZSAqLwogICAgICAgICB3cml0ZV9tYXNrID0gbWFzazE2 W21hc2tdOworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkg Pj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm47CisgICAg ICAgIH0KICAgICAgICAgKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRy XSA9CiAgICAgICAgICAgICAoKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVth ZGRyXSAmIH53cml0ZV9tYXNrKSB8CiAgICAgICAgICAgICAodmFsICYgd3Jp dGVfbWFzayk7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBiZmEwZjE1MWE1NjRhODNiNWEyNmYzZTkxN2RhOTg2NzRiZjNjZjYy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMgfCAxMyArKysr KysrKystLS0tCiAxIGZpbGUgY2hhbmdlZCwgOSBpbnNlcnRpb25zKCspLCA0 IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMg Yi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IGI5MTkxY2EuLjBjMWM1YjUgMTAw NjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92 Z2EuYwpAQCAtMTQyLDYgKzE0MiwxMSBAQCBzdGF0aWMgdWludDMyX3QgZXhw YW5kNFsyNTZdOwogc3RhdGljIHVpbnQxNl90IGV4cGFuZDJbMjU2XTsKIHN0 YXRpYyB1aW50OF90IGV4cGFuZDR0bzhbMTZdOwogCitzdGF0aWMgaW5saW5l IGJvb2wgdmJlX2VuYWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCit7CisgICAg cmV0dXJuIHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQ7Cit9CisKIHN0YXRpYyB2b2lkIHZnYV91cGRh dGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBo d2FkZHIgYmFzZSwgb2Zmc2V0LCBzaXplOwpAQCAtNTY0LDcgKzU2OSw3IEBA IHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNvbW1vblN0YXRlICpz KQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3JlZ3M7CiAgICAgdWludDMy X3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zmc2V0OwogCi0gICAgaWYg KCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFC TEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKICAgICAgICAg LyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLwogICAg ICAgICByZXR1cm47CiAgICAgfQpAQCAtMTA1OCw3ICsxMDYzLDcgQEAgc3Rh dGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNvbW1vblN0YXRlICpzLAog ewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxpbmVfb2Zmc2V0LCBsaW5l X2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkgeworICAgIGlmICh2 YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZi ZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9z dGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAg LTEzODMsNyArMTM4OCw3IEBAIHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdB Q29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJldDsKIAotICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQ SV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAg ICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdOwog ICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7CkBAIC0xMzk1LDcgKzE0 MDAsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jlc29sdXRpb24oVkdBQ29t bW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQgKnBoZWlnaHQpCiB7CiAg ICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkg eworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0aCA9 IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAgICAg aGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdOwog ICAgIH0gZWxzZSB7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA3ZmE1YzJjNWRjOWY5YmY4NzhjMWU4NjY5ZWI5NjQ0ZDcwYTcxZTcx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3Bs YXkvdmdhLmMgfCA3OCArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQ0 IGluc2VydGlvbnMoKyksIDM0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IDBj MWM1YjUuLmUxMmY1YWMgMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMK KysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNjQ0LDYgKzY0NCw0OSBAQCBz dGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICBzLT52YmVfc3RhcnRfYWRkciAgPSBvZmZzZXQgLyA0OwogfQogCisv KiB3ZSBpbml0aWFsaXplIHRoZSBWR0EgZ3JhcGhpYyBtb2RlICovCitzdGF0 aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdBQ29tbW9uU3RhdGUgKnMp Cit7CisgICAgaW50IGgsIHNoaWZ0X2NvbnRyb2w7CisKKyAgICBpZiAoIXZi ZV9lbmFibGVkKHMpKSB7CisgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2Zm IC0tIG5vdGhpbmcgdG8gZG8gKi8KKyAgICAgICAgcmV0dXJuOworICAgIH0K KworICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLworICAg IHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdBX0dGWF9NSVNDXSAm IH4weDBjKSB8IDB4MDQgfAorICAgICAgICBWR0FfR1IwNl9HUkFQSElDU19N T0RFOworICAgIHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENH QSBtb2RlcyAqLworICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBzLT52 YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAgICAvKiB3aWR0aCAqLworICAgIHMt PmNyW1ZHQV9DUlRDX0hfRElTUF0gPQorICAgICAgICAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKKyAgICAvKiBoZWln aHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCisgICAgaCA9IHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAtIDE7CisgICAgcy0+ Y3JbVkdBX0NSVENfVl9ESVNQX0VORF0gPSBoOworICAgIHMtPmNyW1ZHQV9D UlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+ MHg0MikgfAorICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAz KSAmIDB4NDApOworICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCisg ICAgcy0+Y3JbVkdBX0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7CisgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7CisgICAgcy0+Y3Jb VkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7CisKKyAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgeworICAgICAgICBz aGlmdF9jb250cm9sID0gMDsKKyAgICAgICAgcy0+c3JbVkdBX1NFUV9DTE9D S19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KKyAgICB9IGVs c2UgeworICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKKyAgICAgICAgLyog c2V0IGNoYWluIDQgbW9kZSAqLworICAgICAgICBzLT5zcltWR0FfU0VRX01F TU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07CisgICAgICAgIC8qIGFj dGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gfD0gVkdBX1NSMDJfQUxMX1BMQU5FUzsKKyAgICB9Cisg ICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0FfR0ZYX01PREVd ICYgfjB4NjApIHwKKyAgICAgICAgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Cisg ICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBk b3VibGUgc2NhbiAqLworfQorCiBzdGF0aWMgdWludDMyX3QgdmJlX2lvcG9y dF9yZWFkX2luZGV4KHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkcikKIHsK ICAgICBWR0FDb21tb25TdGF0ZSAqcyA9IG9wYXF1ZTsKQEAgLTczMCw1MiAr NzczLDE5IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9w YXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAo KHZhbCAmIFZCRV9ESVNQSV9FTkFCTEVEKSAmJgogICAgICAgICAgICAgICAg ICEocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKLSAgICAgICAgICAgICAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKIAogICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9WSVJUX1dJRFRIXSA9IDA7CiAgICAgICAgICAgICAg ICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hfT0ZGU0VUXSA9IDA7 CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X1lfT0ZGU0VUXSA9IDA7CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gfD0gVkJFX0RJU1BJX0VOQUJMRUQ7 CiAgICAgICAgICAgICAgICAgdmJlX2ZpeHVwX3JlZ3Mocyk7CisgICAgICAg ICAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAgICAg ICAgICAgLyogY2xlYXIgdGhlIHNjcmVlbiAqLwogICAgICAgICAgICAgICAg IGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAg ICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAg ICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFw aGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBz LT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+ MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZf R1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JU Q19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zm c2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAg ICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVT XSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5 IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGgg PSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAg ICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsK LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAo cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAg ICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAw eDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAy MyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09N UEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAg aWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAg ICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0g fjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7 Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8K LSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9E RV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAv KiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAg IHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9Q TEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMt PmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4w eDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8 IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FO XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAg IH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgcy0+YmFua19vZmZzZXQgPSAw OwogICAgICAgICAgICAgfQotLSAKMS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSAyMDY4MTkyZGNjY2Q4YTgwZGRkZmNjOGRmNjE2NGNmOWMyNmUwZmM0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMg fCAxICsKIDEgZmlsZSBjaGFuZ2VkLCAxIGluc2VydGlvbigrKQoKZGlmZiAt LWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmlu ZGV4IGUxMmY1YWMuLmVlZWI5YzggMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkv dmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNzYzLDYgKzc2Myw3 IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwg dWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZC RV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAgICAgIHMtPnZiZV9y ZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICB2YmVfZml4 dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5r X21hc2s7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmZDNjMTM2YjNlMTQ4MmNkMGVjNzI4NWQ2YmMyYTNlNmE2MmMzOGQ3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkv dmdhLmMgfCA2ICsrKysrKwogMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9u cygrKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IGVlZWI5YzguLjRhNTVlYzYgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTQyLDYgKzE0Miw4IEBAIHN0YXRpYyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07 CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4 X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcyk7CisKIHN0YXRpYyBpbmxpbmUg Ym9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKQEAgLTQ4NCw2ICs0ODYsNyBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBTUiV4 ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwgdmFsKTsKICNlbmRpZgogICAg ICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2YWwgJiBzcl9tYXNrW3MtPnNy X2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogICAg ICAgICBpZiAocy0+c3JfaW5kZXggPT0gVkdBX1NFUV9DTE9DS19NT0RFKSB7 CiAgICAgICAgICAgICBzLT51cGRhdGVfcmV0cmFjZV9pbmZvKHMpOwogICAg ICAgICB9CkBAIC01MTUsNiArNTE4LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgR1IleCA9IDB4JTAyeFxu Iiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+Z3Jb cy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tzLT5ncl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgdmdhX3Vw ZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwogICAgICAgICBicmVhazsKICAgICBj YXNlIFZHQV9DUlRfSU06CkBAIC01MzMsMTAgKzUzNywxMiBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgICAgICBpZiAocy0+Y3JfaW5kZXggPT0g VkdBX0NSVENfT1ZFUkZMT1cpIHsKICAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1dd ICYgfjB4MTApIHwKICAgICAgICAgICAgICAgICAgICAgKHZhbCAmIDB4MTAp OworICAgICAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAg ICAgICAgICAgIH0KICAgICAgICAgICAgIHJldHVybjsKICAgICAgICAgfQog ICAgICAgICBzLT5jcltzLT5jcl9pbmRleF0gPSB2YWw7CisgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3Jf aW5kZXgpIHsKICAgICAgICAgY2FzZSBWR0FfQ1JUQ19IX1RPVEFMOgotLSAK MS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSA2NzMwNWZjZjQ3MzNmYjRmYjllYWNjMzM0MzZlYzY2YTdjMDM1MmVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQwOjU4ICswMTAwClN1YmplY3Q6IFtQQVRDSCAxLzVdIHZnYTogZml4IGJh bmtlZCBhY2Nlc3MgYm91bmRzIGNoZWNraW5nIChDVkUtMjAxNi0zNzEwKQoK dmdhIGFsbG93cyBiYW5rZWQgYWNjZXNzIHRvIHZpZGVvIG1lbW9yeSB1c2lu ZyB0aGUgd2luZG93IGF0IDB4YTAwMDAwCmFuZCBpdCBzdXBwb3J0cyBhIGRp ZmZlcmVudCBhY2Nlc3MgbW9kZXMgd2l0aCBkaWZmZXJlbnQgYWRkcmVzcwpj YWxjdWxhdGlvbnMuCgpUaGUgVkJFIGJvY2hzIGV4dGVudGlvbnMgc3VwcG9y dCBiYW5rZWQgYWNjZXNzIHRvbywgdXNpbmcgdGhlClZCRV9ESVNQSV9JTkRF WF9CQU5LIHJlZ2lzdGVyLiAgVGhlIGNvZGUgdHJpZXMgdG8gdGFrZSB0aGUg ZGlmZmVyZW50CmFkZHJlc3MgY2FsY3VsYXRpb25zIGludG8gYWNjb3VudCBh bmQgYXBwbGllcyBkaWZmZXJlbnQgbGltaXRzIHRvClZCRV9ESVNQSV9JTkRF WF9CQU5LIGRlcGVuZGluZyBvbiB0aGUgY3VycmVudCBhY2Nlc3MgbW9kZS4K CldoaWNoIGlzIHByb2JhYmx5IGVmZmVjdGl2ZSBpbiBzdG9wcGluZyBtaXNw cm9ncmFtbWluZyBieSBhY2NpZGVudC4KQnV0IGZyb20gYSBzZWN1cml0eSBw b2ludCBvZiB2aWV3IGNvbXBsZXRlbHkgdXNlbGVzcyBhcyBhbiBhdHRhY2tl cgpjYW4gZWFzaWx5IGNoYW5nZSBhY2Nlc3MgbW9kZXMgYWZ0ZXIgc2V0dGlu ZyB0aGUgYmFuayByZWdpc3Rlci4KCkRyb3AgdGhlIGJvZ3VzIGNoZWNrLCBh ZGQgcmFuZ2UgY2hlY2tzIHRvIHZnYV9tZW1fe3JlYWRiLHdyaXRlYn0KaW5z dGVhZC4KCkZpeGVzOiBDVkUtMjAxNi0zNzEwClJlcG9ydGVkLWJ5OiBRaW5n aGFvIFRhbmcgPGx1b2RhbG9uZ2RlQGdtYWlsLmNvbT4KU2lnbmVkLW9mZi1i eTogR2VyZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1v ZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVs Lm9yZz4KLS0tCiBody92Z2EuYyB8IDI0ICsrKysrKysrKysrKysrKysrKy0t LS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMoKyksIDYgZGVs ZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCA2OTM5OWRiLi5jZDdlN2FhIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMjAwLDYgKzIwMCw3IEBAIHN0YXRpYyB2b2lk IHZnYV91cGRhdGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CiAgICAgICAgIGJhc2Ug Kz0gaXNhX21lbV9iYXNlOworICAgICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6 ZSA8PSBzLT52cmFtX3NpemUpOwogICAgICAgICByZWdpb24gPSBnX21hbGxv YyhzaXplb2YoKnJlZ2lvbikpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2lu aXRfYWxpYXMocmVnaW9uLCAidmdhLmNoYWluNCIsICZzLT52cmFtLCBvZmZz ZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2FkZF9zdWJyZWdp b25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwgYmFzZSwKQEAg LTc0NywxMSArNzQ4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJy ZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAg ICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBd ID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19t YXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAg ICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9Cisg ICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAg ICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUyLDEzICs4 NDksMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9N RU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyog Y2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFz c2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+ dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZY X01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChh a2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMt PmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0g ICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsK KyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAg IHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAg ICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAg ICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAg ICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRk cl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4 MDgpKSB7CkBAIC05MTUsNiArOTIwLDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRl YihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9 ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIg PCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRk cl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAg cHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxu IiwgYWRkcik7CkBAIC05MjgsNiArOTM0LDkgQEAgdm9pZCB2Z2FfbWVtX3dy aXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAg aWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAg ICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQogICAgICAgICAg ICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdB X01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgi IFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTEwMDEsNiArMTAx MCw5IEBAIHZvaWQgdmdhX21lbV93cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMs IGh3YWRkciBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIG1hc2sgPSBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXTsKICAgICAgICAgcy0+cGxhbmVf dXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQg Y2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFza107 CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52 cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAgfQog ICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0KICAg ICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdICYg fndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9tYXNr KTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlN2Q3YzA5Njg5YzcyNWJlNGYwYjQ4OWI0YmEzYjc0MWM1ZDlhYjMx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQxOjM5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzVdIHZnYTogYWRkIHZi ZV9lbmFibGVkKCkgaGVscGVyCgpNYWtlcyBjb2RlIGEgYml0IGVhc2llciB0 byByZWFkLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFubiA8a3JheGVs QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGlu aSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92Z2EuYyB8IDEz ICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGluc2VydGlvbnMo KyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9o dy92Z2EuYwppbmRleCBjZDdlN2FhLi5jYjFjMTRkIDEwMDY0NAotLS0gYS9o dy92Z2EuYworKysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSwxMSBAQCBz dGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIHN0YXRpYyB2b2lkIHZn YV9zY3JlZW5fZHVtcCh2b2lkICpvcGFxdWUsIGNvbnN0IGNoYXIgKmZpbGVu YW1lLCBib29sIGNzd2l0Y2gsCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgRXJyb3IgKiplcnJwKTsKIAorc3RhdGljIGlubGluZSBib29sIHZiZV9l bmFibGVkKFZHQUNvbW1vblN0YXRlICpzKQoreworICAgIHJldHVybiBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9F TkFCTEVEOworfQorCiBzdGF0aWMgdm9pZCB2Z2FfdXBkYXRlX21lbW9yeV9h Y2Nlc3MoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgTWVtb3J5UmVnaW9u ICpyZWdpb24sICpvbGRfcmVnaW9uID0gcy0+Y2hhaW40X2FsaWFzOwpAQCAt NTk1LDcgKzYwMCw3IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZH QUNvbW1vblN0YXRlICpzKQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3Jl Z3M7CiAgICAgdWludDMyX3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zm c2V0OwogCi0gICAgaWYgKCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAm IFZCRV9ESVNQSV9FTkFCTEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQo cykpIHsKICAgICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGlu ZyB0byBkbyAqLwogICAgICAgICByZXR1cm47CiAgICAgfQpAQCAtMTE3Niw3 ICsxMTgxLDcgQEAgc3RhdGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNv bW1vblN0YXRlICpzLAogewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxp bmVfb2Zmc2V0LCBsaW5lX2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5l X29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRf YWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBh cmUgPSA2NTUzNTsKQEAgLTE2MjYsNyArMTYzMSw3IEBAIHN0YXRpYyBpbnQg dmdhX2dldF9icHAoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJl dDsKIAotICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFi bGVkKHMpKSB7CiAgICAgICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQ SV9JTkRFWF9CUFBdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7 CkBAIC0xNjM4LDcgKzE2NDMsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jl c29sdXRpb24oVkdBQ29tbW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQg KnBoZWlnaHQpCiB7CiAgICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICB3aWR0aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Y UkVTXTsKICAgICAgICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdOwogICAgIH0gZWxzZSB7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSAyNzAwMjUwYzZiMjgyNDhiNzBiMTVmZDZlMGI0YzlkYjhiMmRkZmI3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjI0ICswMTAwClN1YmplY3Q6IFtQQVRDSCAzLzVdIHZnYTogZmFjdG9y IG91dCB2Z2EgcmVnaXN0ZXIgc2V0dXAKCldoZW4gZW5hYmxpbmcgdmJlIG1v ZGUgcWVtdSB3aWxsIHNldHVwIGEgYnVuY2ggb2YgdmdhIHJlZ2lzdGVycyB0 byBtYWtlCnN1cmUgdGhlIHZnYSBlbXVsYXRpb24gb3BlcmF0ZXMgaW4gY29y cmVjdCBtb2RlIGZvciBhIGxpbmVhcgpmcmFtZWJ1ZmZlci4gIE1vdmUgdGhh dCBjb2RlIHRvIGEgc2VwYXJhdGUgZnVuY3Rpb24gc28gd2UgY2FuIGNhbGwg aXQKZnJvbSBvdGhlciBwbGFjZXMgdG9vLgoKU2lnbmVkLW9mZi1ieTogR2Vy ZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6 IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4K LS0tCiBody92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIDEgZmls ZSBjaGFuZ2VkLCA0NCBpbnNlcnRpb25zKCspLCAzNSBkZWxldGlvbnMoLSkK CmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGNiMWMx NGQuLmFkN2NhNDkgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3Zn YS5jCkBAIC02NzUsNiArNjc1LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1 cF9yZWdzKFZHQUNvbW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9h ZGRyICA9IG9mZnNldCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKKworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAg ICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAq LworICAgICAgICByZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBt b2RlICsgbWVtb3J5IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVND XSA9IChzLT5ncltWR0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8Cisg ICAgICAgIFZHQV9HUjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdB X0NSVENfTU9ERV0gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+ Y3JbVkdBX0NSVENfT0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAz OworICAgIC8qIHdpZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQ XSA9CisgICAgICAgIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJF U10gPj4gMykgLSAxOworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdIC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1Bf RU5EXSA9IGg7CisgICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMt PmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgo aCA+PiA3KSAmIDB4MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyog bGluZSBjb21wYXJlIHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19M SU5FX0NPTVBBUkVdID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVS RkxPV10gfD0gMHgxMDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0g fD0gMHg0MDsKKworICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfQlBQXSA9PSA0KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwor ICAgICAgICBzLT5zcltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBu byBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0 X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICov CisgICAgICAgIHMtPnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9T UjA0X0NITl80TTsKKyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAq LworICAgICAgICBzLT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0Ff U1IwMl9BTExfUExBTkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01P REVdID0gKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAg ICAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19N QVhfU0NBTl0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisK IHN0YXRpYyB1aW50MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAq b3BhcXVlLCB1aW50MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRl ICpzID0gb3BhcXVlOwpAQCAtNzYxLDUzICs4MDQsMTkgQEAgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVY X0VOQUJMRToKICAgICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VO QUJMRUQpICYmCiAgICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewot ICAgICAgICAgICAgICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAg ICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRf V0lEVEhdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfWF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSB8PSBWQkVfRElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2 YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUg c2NyZWVuIChzaG91bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAg ICAgICAgIGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewog ICAgICAgICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElT UElfSU5ERVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAg ICAgICAgICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxp emUgdGhlIFZHQSBncmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAg ICAgICAgICAgICAgICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAv KiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAg ICAgICBzLT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlT Q10gJiB+MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdB X0dSMDZfR1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xp bmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8K LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAg ICAgICAgICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRF WF9YUkVTXSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0 IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAg ICAgIGggPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAx OwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRd ID0gaDsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxP V10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAg ICAgICAgICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4g MykgJiAweDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUg dG8gMTAyMyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJ TkVfQ09NUEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMt PmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAg ICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09 IDQpIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7 Ci0gICAgICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9E RV0gJj0gfjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAg ICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJv bCA9IDI7Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1v ZGUgKi8KLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1P UllfTU9ERV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAg ICAgICAvKiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAg ICAgICAgIHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAy X0FMTF9QTEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAg ICAgIHMtPmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RF XSAmIH4weDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250 cm9sIDw8IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01B WF9TQ0FOXSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAg ICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUg YmlvcyBzaG91bGQgZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJh bmtfb2Zmc2V0ID0gMDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA5OGJlMWZiNmVhMzFjMTMwMjY0MDI1ZGU4ZWM4N2FkMmM3NTMyZjIx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCA0LzVdIHZnYTogdXBkYXRl IHZnYSByZWdpc3RlciBzZXR1cCBvbiB2YmUgY2hhbmdlcwoKQ2FsbCB0aGUg bmV3IHZiZV91cGRhdGVfdmdhcmVncygpIGZ1bmN0aW9uIG9uIHZiZSBjb25m aWd1cmF0aW9uCmNoYW5nZXMsIHRvIG1ha2Ugc3VyZSB2Z2EgcmVnaXN0ZXJz IGFyZSB1cC10by1kYXRlLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFu biA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8g U3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92 Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0aW9uKCspCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBhZDdjYTQ5 Li4xYWM4MDgzIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtNzk0LDYgKzc5NCw3IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9k YXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAg ICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAg dmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwZjJlOWU2YjNjNzVhODdlOWVjOWE4MGQ3YmM5MTQ4MTBlM2YzZGEy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQzOjM2ICswMTAwClN1YmplY3Q6IFtQQVRDSCA1LzVdIHZnYTogbWFrZSBz dXJlIHZnYSByZWdpc3RlciBzZXR1cCBmb3IgdmJlIHN0YXlzIGludGFjdAog KENWRS0yMDE2LTM3MTIpLgoKQ2FsbCB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSB3 aGVuIHRoZSBndWVzdCB0b3VjaGVzIEdGWCwgU0VRIG9yIENSVApyZWdpc3Rl cnMsIHRvIG1ha2Ugc3VyZSB0aGUgdmdhIHJlZ2lzdGVycyB3aWxsIGFsd2F5 cyBoYXZlIHRoZQp2YWx1ZXMgbmVlZGVkIGJ5IHZiZSBtb2RlLiAgVGhpcyBt YWtlcyBzdXJlIHRoZSBzYW5pdHkgY2hlY2tzCmFwcGxpZWQgYnkgdmJlX2Zp eHVwX3JlZ3MoKSBhcmUgZWZmZWN0aXZlLgoKV2l0aG91dCB0aGlzIGd1ZXN0 cyBjYW4gbXVjayB3aXRoIHNoaWZ0X2NvbnRyb2wsIGNhbiB0dXJuIG9uIHBs YW5hcgp2Z2EgbW9kZXMgb3IgdGV4dCBtb2RlIGVtdWxhdGlvbiB3aGlsZSBW QkUgaXMgYWN0aXZlLCBtYWtpbmcgcWVtdQp0YWtlIGNvZGUgcGF0aHMgbWVh bnQgZm9yIENHQSBjb21wYXRpYmlsaXR5LCBidXQgd2l0aCB0aGUgdmVyeQps YXJnZSBkaXNwbGF5IHdpZHRocyBhbmQgaGVpZ3RzIHNldHRhYmxlIHVzaW5n IFZCRSByZWdpc3RlcnMuCgpXaGljaCBpcyBnb29kIGZvciBvbmUgb3IgYW5v dGhlciBidWZmZXIgb3ZlcmZsb3cuICBOb3QgdGhhdApjcml0aWNhbCBhcyB0 aGV5IHR5cGljYWxseSByZWFkIG92ZXJmbG93cyBoYXBwZW5pbmcgc29tZXdo ZXJlCmluIHRoZSBkaXNwbGF5IGNvZGUuICBTbyBndWVzdHMgY2FuIERvUyBi eSBjcmFzaGluZyBxZW11IHdpdGggYQpzZWdmYXVsdCwgYnV0IGl0IGlzIHBy b2JhYmx5IG5vdCBwb3NzaWJsZSB0byBicmVhayBvdXQgb2YgdGhlIFZNLgoK Rml4ZXM6IENWRS0yMDE2LTM3MTIKUmVwb3J0ZWQtYnk6IFp1b3poaSBGenog PHp1b3poaS5menpAYWxpYmFiYS1pbmMuY29tPgpSZXBvcnRlZC1ieTogUCBK IFAgPHBwYW5kaXRAcmVkaGF0LmNvbT4KU2lnbmVkLW9mZi1ieTogR2VyZCBI b2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0 ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0t CiBody92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdlZCwgNiBpbnNl cnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCAxYWM4MDgzLi4xN2IzODllIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSw4IEBAIHN0YXRpYyB1aW50 OF90IGV4cGFuZDR0bzhbMTZdOwogc3RhdGljIHZvaWQgdmdhX3NjcmVlbl9k dW1wKHZvaWQgKm9wYXF1ZSwgY29uc3QgY2hhciAqZmlsZW5hbWUsIGJvb2wg Y3N3aXRjaCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICBFcnJvciAq KmVycnApOwogCitzdGF0aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpOworCiBzdGF0aWMgaW5saW5lIGJvb2wgdmJlX2Vu YWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgcmV0dXJuIHMtPnZi ZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VO QUJMRUQ7CkBAIC01MTUsNiArNTE3LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgU1IleCA9IDB4JTAyeFxu Iiwgcy0+c3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+c3Jb cy0+c3JfaW5kZXhdID0gdmFsICYgc3JfbWFza1tzLT5zcl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgaWYgKHMt PnNyX2luZGV4ID09IFZHQV9TRVFfQ0xPQ0tfTU9ERSkgewogICAgICAgICAg ICAgcy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgfQpAQCAt NTQ2LDYgKzU0OSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpv cGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg cHJpbnRmKCJ2Z2E6IHdyaXRlIEdSJXggPSAweCUwMnhcbiIsIHMtPmdyX2lu ZGV4LCB2YWwpOwogI2VuZGlmCiAgICAgICAgIHMtPmdyW3MtPmdyX2luZGV4 XSA9IHZhbCAmIGdyX21hc2tbcy0+Z3JfaW5kZXhdOworICAgICAgICB2YmVf dXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhzKTsKICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSBWR0FfQ1JU X0lNOgpAQCAtNTY0LDEwICs1NjgsMTIgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IFZHQV9DUlRDX09W RVJGTE9XKSB7CiAgICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfT1ZF UkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDEwKSB8 CiAgICAgICAgICAgICAgICAgICAgICh2YWwgJiAweDEwKTsKKyAgICAgICAg ICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgICAgICB9 CiAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgIH0KICAgICAgICAgcy0+ Y3Jbcy0+Y3JfaW5kZXhdID0gdmFsOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAKICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7CiAg ICAgICAgIGNhc2UgVkdBX0NSVENfSF9UT1RBTDoKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAyNTkzNWZkMWVkM2M0MzM3YWE0YjYxOTAyZWM1ODBlMTdiMTMwYjYz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNDMwZTdlZC4uNjllMjU1 NCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0NSwxMSArNzQ2LDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUwLDEzICs4NDcsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MTMs NiArOTE4LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjYsNiArOTMyLDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5OSw2ICsxMDA4LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAyOTRhNmMxNWEzODY2OWY4MDkyMGI4ODUyODcxOTE1MTRhYjdkOWZm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjllMjU1 NC4uZGExZWI0YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU5Myw3ICs1OTgsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzQsNyArMTE3OSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjI3 LDcgKzE2MzIsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzOSw3ICsxNjQ0LDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkMzc3OTE4YzIzZDg1ZjY0ZDAxOTE0YjQzYmZhYmMwYTQ2ZmU5NzRh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZGExZWI0YS4uY2Y1Zjk3ZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NzMs NiArNjczLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU5LDUzICs4MDIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBmYmNmZjgyY2Q3OTk4ZjkzNTU2YzI4ZGZjNjNiYmJkN2IyMDZjOGNl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggY2Y1Zjk3ZS4uNjNkMWE3MCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03OTIsNiArNzkyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmNzkyNmM3MzY4NWMyYmM3MTI0MjY1ZjU2N2JhZmI1MDI4NjRjNWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjNkMWE3MC4uZGQ2MTI0 NiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTEzLDYgKzUx NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0NCw2ICs1NDcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU2MiwxMCArNTY2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBjOWExYTJkN2JmM2RiNTRiNzk2MWRmNGI4YTMwOTQ2YTc2N2I0ODUz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMmJiODVhZS4uZjcxNDJi YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0MSwxMSArNzQyLDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODQ2LDEzICs4NDMsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MDks NiArOTE0LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjIsNiArOTI4LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5NSw2ICsxMDA0LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBmY2QyNjJhOTY2YzcyZGFjNDEyN2Q1ZmM0YTlkYTNjZjI0MjM5NWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjcxNDJi YS4uZDQ5M2IwYSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU4OSw3ICs1OTQsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzAsNyArMTE3NSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjIz LDcgKzE2MjgsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzNSw3ICsxNjQwLDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA2MGM4N2Q0MjVjNDFmNDNhYzgxY2IzM2IyN2FmNjg0NmYwMjJiNDVj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZDQ5M2IwYS4uM2U0YzUyZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02Njks NiArNjY5LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU1LDUzICs3OTgsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA0OTQ4NGViYjc5ZTRlNGVkYWMyNjA5ZmRhYTZlZjNhYzFhNGVlNmQw IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggM2U0YzUyZS4uZjI2NWI5NyAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03ODgsNiArNzg4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAxMTA5YjhiZDA1OTQ3YWMwOWI2ZjI0ZjQ2YTlmNzg0YzM5Y2FjNDZl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjI2NWI5Ny4uYTNmZWIy ZCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTA5LDYgKzUx MSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0MCw2ICs1NDMsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU1OCwxMCArNTYy LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiMTZkYjVhYjJkMGM1ZmY3NTVlMDg5NDJmNGM4ZThmOWY4NjE4ZWFl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNTJlYWYwNS4uYjU3Nzcx MiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNzgsNiArMTc4LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcygmcy0+Y2hhaW40X2FsaWFzLCBtZW1vcnlfcmVnaW9uX293bmVyKCZz LT52cmFtKSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJ2 Z2EuY2hhaW40IiwgJnMtPnZyYW0sIG9mZnNldCwgc2l6ZSk7CiAgICAgICAg IG1lbW9yeV9yZWdpb25fYWRkX3N1YnJlZ2lvbl9vdmVybGFwKHMtPmxlZ2Fj eV9hZGRyZXNzX3NwYWNlLCBiYXNlLApAQCAtNzE1LDExICs3MTYsNyBAQCB2 b2lkIHZiZV9pb3BvcnRfd3JpdGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQz Ml90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIHZiZV9maXh1 cF9yZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIGNhc2Ug VkJFX0RJU1BJX0lOREVYX0JBTks6Ci0gICAgICAgICAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgewotICAgICAgICAg ICAgICB2YWwgJj0gKHMtPnZiZV9iYW5rX21hc2sgPj4gMik7Ci0gICAgICAg ICAgICB9IGVsc2UgewotICAgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKLSAgICAgICAgICAgIH0KKyAgICAgICAgICAgIHZhbCAmPSBz LT52YmVfYmFua19tYXNrOwogICAgICAgICAgICAgcy0+dmJlX3JlZ3Nbcy0+ dmJlX2luZGV4XSA9IHZhbDsKICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0 ID0gKHZhbCA8PCAxNik7CiAgICAgICAgICAgICB2Z2FfdXBkYXRlX21lbW9y eV9hY2Nlc3Mocyk7CkBAIC04MTgsMTMgKzgxNSwyMSBAQCB1aW50MzJfdCB2 Z2FfbWVtX3JlYWRiKFZHQUNvbW1vblN0YXRlICpzLCBod2FkZHIgYWRkcikK IAogICAgIGlmIChzLT5zcltWR0FfU0VRX01FTU9SWV9NT0RFXSAmIFZHQV9T UjA0X0NITl80TSkgewogICAgICAgICAvKiBjaGFpbiA0IG1vZGUgOiBzaW1w bGVzdCBhY2Nlc3MgKi8KKyAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFt X3NpemUpOwogICAgICAgICByZXQgPSBzLT52cmFtX3B0clthZGRyXTsKICAg ICB9IGVsc2UgaWYgKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiAweDEwKSB7CiAg ICAgICAgIC8qIG9kZC9ldmVuIG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGlu ZykgKi8KICAgICAgICAgcGxhbmUgPSAocy0+Z3JbVkdBX0dGWF9QTEFORV9S RUFEXSAmIDIpIHwgKGFkZHIgJiAxKTsKLSAgICAgICAgcmV0ID0gcy0+dnJh bV9wdHJbKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmVdOworICAgICAgICBh ZGRyID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgIGlm IChhZGRyID49IHMtPnZyYW1fc2l6ZSkgeworICAgICAgICAgICAgcmV0dXJu IDB4ZmY7CisgICAgICAgIH0KKyAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJb YWRkcl07CiAgICAgfSBlbHNlIHsKICAgICAgICAgLyogc3RhbmRhcmQgVkdB IGxhdGNoZWQgYWNjZXNzICovCisgICAgICAgIGlmIChhZGRyICogc2l6ZW9m KHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CiAgICAgICAgIHMtPmxhdGNoID0gKCh1 aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRyXTsKIAogICAgICAgICBpZiAo IShzLT5ncltWR0FfR0ZYX01PREVdICYgMHgwOCkpIHsKQEAgLTg4MSw2ICs4 ODYsNyBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRlICpz LCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBwbGFuZSA9 IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gJiBtYXNrKSB7 CisgICAgICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAg ICAgICAgICAgICBzLT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBE RUJVR19WR0FfTUVNCiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40 OiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTg5NCw2 ICs5MDAsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRl ICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBtYXNr ID0gKDEgPDwgcGxhbmUpOwogICAgICAgICBpZiAocy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRyID0gKChh ZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBpZiAoYWRk ciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICByZXR1cm47 CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0clthZGRy XSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAgICAgICBw cmludGYoInZnYTogb2RkL2V2ZW46IFsweCIgVEFSR0VUX0ZNVF9wbHggIl1c biIsIGFkZHIpOwpAQCAtOTY3LDYgKzk3Niw5IEBAIHZvaWQgdmdhX21lbV93 cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMsIGh3YWRkciBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zcltWR0FfU0VRX1BMQU5FX1dS SVRFXTsKICAgICAgICAgcy0+cGxhbmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBv bmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQgY2hhbmdlICovCiAgICAgICAgIHdy aXRlX21hc2sgPSBtYXNrMTZbbWFza107CisgICAgICAgIGlmIChhZGRyICog c2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybjsKKyAgICAgICAgfQogICAgICAgICAoKHVpbnQzMl90ICop cy0+dnJhbV9wdHIpW2FkZHJdID0KICAgICAgICAgICAgICgoKHVpbnQzMl90 ICopcy0+dnJhbV9wdHIpW2FkZHJdICYgfndyaXRlX21hc2spIHwKICAgICAg ICAgICAgICh2YWwgJiB3cml0ZV9tYXNrKTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlMDI2ODU5ZTlhZWNmODYzNWRhZjA2ZTlmYzIzMjUyMzlmNDU4OTU5 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggYjU3Nzcx Mi4uZWJmNjNmZiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIGh3YWRkciBiYXNlLCBvZmZzZXQsIHNpemU7CkBAIC01 NjMsNyArNTY4LDcgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpCiAgICAgdWludDE2X3QgKnIgPSBzLT52YmVfcmVn czsKICAgICB1aW50MzJfdCBiaXRzLCBsaW5lbGVuZ3RoLCBtYXh5LCBvZmZz ZXQ7CiAKLSAgICBpZiAoIShyW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQpKSB7CisgICAgaWYgKCF2YmVfZW5hYmxlZChz KSkgewogICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9mZiAtLSBub3RoaW5n IHRvIGRvICovCiAgICAgICAgIHJldHVybjsKICAgICB9CkBAIC0xMDU3LDcg KzEwNjIsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X29mZnNldHMoVkdBQ29t bW9uU3RhdGUgKnMsCiB7CiAgICAgdWludDMyX3Qgc3RhcnRfYWRkciwgbGlu ZV9vZmZzZXQsIGxpbmVfY29tcGFyZTsKIAotICAgIGlmIChzLT52YmVfcmVn c1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVE KSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIGxpbmVf b2Zmc2V0ID0gcy0+dmJlX2xpbmVfb2Zmc2V0OwogICAgICAgICBzdGFydF9h ZGRyID0gcy0+dmJlX3N0YXJ0X2FkZHI7CiAgICAgICAgIGxpbmVfY29tcGFy ZSA9IDY1NTM1OwpAQCAtMTM4Miw3ICsxMzg3LDcgQEAgc3RhdGljIGludCB2 Z2FfZ2V0X2JwcChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBpbnQgcmV0 OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFC TEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJs ZWQocykpIHsKICAgICAgICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX0JQUF07CiAgICAgfSBlbHNlIHsKICAgICAgICAgcmV0ID0gMDsK QEAgLTEzOTQsNyArMTM5OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfcmVz b2x1dGlvbihWR0FDb21tb25TdGF0ZSAqcywgaW50ICpwd2lkdGgsIGludCAq cGhlaWdodCkKIHsKICAgICBpbnQgd2lkdGgsIGhlaWdodDsKIAotICAgIGlm IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9E SVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAg ICAgICAgIHdpZHRoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hS RVNdOwogICAgICAgICBoZWlnaHQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWVJFU107CiAgICAgfSBlbHNlIHsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBiMzZhNGUyNmNhZjdhMDUwYTZlODU5MzUyN2MyNmJmYTRmNDdhNzU4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc4ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzQgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZWJmNjNmZi4uZmI4MjJmNCAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NDMs NiArNjQzLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzI5LDUyICs3NzIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuICovCiAg ICAgICAgICAgICAgICAgaWYgKCEodmFsICYgVkJFX0RJU1BJX05PQ0xFQVJN RU0pKSB7CiAgICAgICAgICAgICAgICAgICAgIG1lbXNldChzLT52cmFtX3B0 ciwgMCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAqIHMtPnZiZV9saW5lX29mZnNldCk7 CiAgICAgICAgICAgICAgICAgfQotCi0gICAgICAgICAgICAgICAgLyogd2Ug aW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAqLwotICAgICAgICAg ICAgICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLwotICAg ICAgICAgICAgICAgIHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdB X0dGWF9NSVNDXSAmIH4weDBjKSB8IDB4MDQgfAotICAgICAgICAgICAgICAg ICAgICBWR0FfR1IwNl9HUkFQSElDU19NT0RFOwotICAgICAgICAgICAgICAg IHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENHQSBtb2RlcyAq LwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBz LT52YmVfbGluZV9vZmZzZXQgPj4gMzsKLSAgICAgICAgICAgICAgICAvKiB3 aWR0aCAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0hfRElT UF0gPQotICAgICAgICAgICAgICAgICAgICAocy0+dmJlX3JlZ3NbVkJFX0RJ U1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKLSAgICAgICAgICAgICAgICAv KiBoZWlnaHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCi0gICAg ICAgICAgICAgICAgaCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Z UkVTXSAtIDE7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfVl9E SVNQX0VORF0gPSBoOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+MHg0 MikgfAotICAgICAgICAgICAgICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8 ICgoaCA+PiAzKSAmIDB4NDApOwotICAgICAgICAgICAgICAgIC8qIGxpbmUg Y29tcGFyZSB0byAxMDIzICovCi0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7Ci0gICAgICAgICAg ICAgICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7Ci0KLSAg ICAgICAgICAgICAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X0JQUF0gPT0gNCkgewotICAgICAgICAgICAgICAgICAgICBzaGlmdF9jb250 cm9sID0gMDsKLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9D TE9DS19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KLSAgICAg ICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAgICAgICAgICBzaGlm dF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAgICAgLyogc2V0IGNo YWluIDQgbW9kZSAqLwotICAgICAgICAgICAgICAgICAgICBzLT5zcltWR0Ff U0VRX01FTU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07Ci0gICAgICAg ICAgICAgICAgICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gfD0g VkdBX1NSMDJfQUxMX1BMQU5FUzsKLSAgICAgICAgICAgICAgICB9Ci0gICAg ICAgICAgICAgICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0Ff R0ZYX01PREVdICYgfjB4NjApIHwKLSAgICAgICAgICAgICAgICAgICAgKHNo aWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBkb3VibGUgc2NhbiAq LwogICAgICAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7CiAgICAgICAgICAgICB9Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBlZjhiZDFiMjZhNTk3YWU3YzMwNjIyNzY1NTYyNjY0MDA5M2NiN2Ey IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggZmI4MjJmNC4uMzczOTc1OCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03NjIsNiArNzYyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSA5MjQ1NmMwYzM2MWQ1ZGE4NThkNTQ0NjQ3YzYyNDZlYzc4ZWQ5MjJi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMzczOTc1OC4uZTdiZTk3 ZSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDgzLDYgKzQ4 NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTUxNCw2ICs1MTcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTUzMiwxMCArNTM2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiZWJiNGY1ODA5MDFmYjYzODAxNmQ5ODUxYTI4ZGJiODNkNDRiM2E2 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3Bv cnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRy ZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3 L3ZnYS5jIHwgMjUgKysrKysrKysrKysrKysrKysrKy0tLS0tLQogMSBmaWxl IGNoYW5nZWQsIDE5IGluc2VydGlvbnMoKyksIDYgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBlOGIxY2Uw Li43MjI1NmYxIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtMzQsNiArMzQsOCBAQAogCiAjaW5jbHVkZSAicWVtdS10aW1lci5o IgogCisjaW5jbHVkZSA8YXNzZXJ0Lmg+CisKIC8vI2RlZmluZSBERUJVR19W R0EKIC8vI2RlZmluZSBERUJVR19WR0FfTUVNCiAvLyNkZWZpbmUgREVCVUdf VkdBX1JFRwpAQCAtNjg0LDExICs2ODYsNyBAQCBzdGF0aWMgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFs ICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7 Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRl eF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwg PDwgMTYpOwogICAgICAgICAgICAgYnJlYWs7CkBAIC03ODcsMTMgKzc4NSwy MSBAQCB1aW50MzJfdCB2Z2FfbWVtX3JlYWRiKHZvaWQgKm9wYXF1ZSwgdGFy Z2V0X3BoeXNfYWRkcl90IGFkZHIpCiAKICAgICBpZiAocy0+c3JbNF0gJiAw eDA4KSB7CiAgICAgICAgIC8qIGNoYWluIDQgbW9kZSA6IHNpbXBsZXN0IGFj Y2VzcyAqLworICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7 CiAgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSBpZiAocy0+Z3JbNV0gJiAweDEwKSB7CiAgICAgICAgIC8qIG9kZC9ldmVu IG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGluZykgKi8KICAgICAgICAgcGxh bmUgPSAocy0+Z3JbNF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJl dCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsK KyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMt PnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0 YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRk ciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5s YXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAg ICAgICAgaWYgKCEocy0+Z3JbNV0gJiAweDA4KSkgewpAQCAtODgwLDYgKzg4 Niw3IEBAIHZvaWQgdmdhX21lbV93cml0ZWIodm9pZCAqb3BhcXVlLCB0YXJn ZXRfcGh5c19hZGRyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBw bGFuZSA9IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUp OwogICAgICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CisgICAgICAgICAg ICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgICAgICBz LT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVN CiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40OiBbMHgleF1cbiIs IGFkZHIpOwpAQCAtODkzLDYgKzkwMCw5IEBAIHZvaWQgdmdhX21lbV93cml0 ZWIodm9pZCAqb3BhcXVlLCB0YXJnZXRfcGh5c19hZGRyX3QgYWRkciwgdWlu dDMyX3QgdmFsKQogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRy ID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBp ZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICBy ZXR1cm47CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0 clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAg ICAgICBwcmludGYoInZnYTogb2RkL2V2ZW46IFsweCV4XVxuIiwgYWRkcik7 CkBAIC05NjUsNiArOTc1LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYih2b2lk ICpvcGFxdWUsIHRhcmdldF9waHlzX2FkZHJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zclsyXTsKICAgICAgICAgcy0+cGxh bmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZv bnQgY2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFz a107CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBz LT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAg fQogICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0K ICAgICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJd ICYgfndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9t YXNrKTsKLS0gCjIuMS40Cgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAzNGRiMDlmYjk5Njc0NDE0MDhhMWZmMDU3OWQ1NTMyMjJjZjE3NDQx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9u XQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMTMgKysrKysrKysrLS0t LQogMSBmaWxlIGNoYW5nZWQsIDkgaW5zZXJ0aW9ucygrKSwgNCBkZWxldGlv bnMoLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4 IDcyMjU2ZjEuLmYzOWEyZWQgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBi L2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDExIEBAIHN0YXRpYyB1aW50MzJf dCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZd Owogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyBp bmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FTdGF0ZSAqcykKK3sKKyAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGljIHZvaWQgdmdhX2Jpb3Nf aW5pdChWR0FTdGF0ZSAqcyk7CiBzdGF0aWMgdm9pZCB2Z2Ffc2NyZWVuX2R1 bXAodm9pZCAqb3BhcXVlLCBjb25zdCBjaGFyICpmaWxlbmFtZSk7CiAKQEAg LTUzNSw3ICs1NDAsNyBAQCBzdGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhW R0FTdGF0ZSAqcykKICAgICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwog ICAgIHVpbnQzMl90IGJpdHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsK IAotICAgIGlmICghKHJbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7 CiAgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8g ZG8gKi8KICAgICAgICAgcmV0dXJuOwogICAgIH0KQEAgLTExNjUsNyArMTE3 MCw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FTdGF0ZSAq cywKIHsKICAgICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwg bGluZV9jb21wYXJlOwogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAg ICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAg ICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAgLTE1NTEsNyArMTU1Niw3IEBA IHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdBU3RhdGUgKnMpCiB7CiAgICAg aW50IHJldDsKICNpZmRlZiBDT05GSUdfQk9DSFNfVkJFCi0gICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJ X0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAg ICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF07CiAg ICAgfSBlbHNlCiAjZW5kaWYKQEAgLTE1NjYsNyArMTU3MSw3IEBAIHN0YXRp YyB2b2lkIHZnYV9nZXRfcmVzb2x1dGlvbihWR0FTdGF0ZSAqcywgaW50ICpw d2lkdGgsIGludCAqcGhlaWdodCkKICAgICBpbnQgd2lkdGgsIGhlaWdodDsK IAogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0 aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAg ICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd OwogICAgIH0gZWxzZQotLSAKMi4xLjQKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkZjIyODAyM2NlMzllOGI3MmJkNWExOThiODcwMzMxOWI4YjljYTIz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8g cWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29v cGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5j IHwgNzAgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQx IGluc2VydGlvbnMoKyksIDI5IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L3ZnYS5jIGIvaHcvdmdhLmMKaW5kZXggZjM5YTJlZC4uZGJhOTNkNyAx MDA2NDQKLS0tIGEvaHcvdmdhLmMKKysrIGIvaHcvdmdhLmMKQEAgLTYxNSw2 ICs2MTUsNDYgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdBU3Rh dGUgKnMpCiAgICAgcy0+dmJlX3N0YXJ0X2FkZHIgID0gb2Zmc2V0IC8gNDsK IH0KIAorLyogd2UgaW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAq Lworc3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpz KQoreworICAgIGludCBoLCBzaGlmdF9jb250cm9sOworCisgICAgaWYgKCF2 YmVfZW5hYmxlZChzKSkgeworICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9m ZiAtLSBub3RoaW5nIHRvIGRvICovCisgICAgICAgIHJldHVybjsKKyAgICB9 CisKKyAgICAvKiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KKyAg ICBzLT5nclsweDA2XSA9IChzLT5nclsweDA2XSAmIH4weDBjKSB8IDB4MDU7 CisgICAgcy0+Y3JbMHgxN10gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisg ICAgcy0+Y3JbMHgxM10gPSBzLT52YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAg ICAvKiB3aWR0aCAqLworICAgIHMtPmNyWzB4MDFdID0gKHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAzKSAtIDE7CisgICAgLyogaGVp Z2h0IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLworICAgIGggPSBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOworICAgIHMt PmNyWzB4MTJdID0gaDsKKyAgICBzLT5jclsweDA3XSA9IChzLT5jclsweDA3 XSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4MDIpIHwgKCho ID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJlIHRvIDEwMjMg Ki8KKyAgICBzLT5jclsweDE4XSA9IDB4ZmY7CisgICAgcy0+Y3JbMHgwN10g fD0gMHgxMDsKKyAgICBzLT5jclsweDA5XSB8PSAweDQwOworCisgICAgaWYg KHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKKyAg ICAgICAgc2hpZnRfY29udHJvbCA9IDA7CisgICAgICAgIHMtPnNyWzB4MDFd ICY9IH44OyAvKiBubyBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7Cisg ICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hh aW4gNCBtb2RlICovCisgICAgICAgIHMtPnNyWzRdIHw9IDB4MDg7CisgICAg ICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3Jb Ml0gfD0gMHgwZjsKKyAgICB9CisgICAgcy0+Z3JbMHgwNV0gPSAocy0+Z3Jb MHgwNV0gJiB+MHg2MCkgfCAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBz LT5jclsweDA5XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KK30K Kwogc3RhdGljIHVpbnQzMl90IHZiZV9pb3BvcnRfcmVhZF9pbmRleCh2b2lk ICpvcGFxdWUsIHVpbnQzMl90IGFkZHIpCiB7CiAgICAgVkdBU3RhdGUgKnMg PSBvcGFxdWU7CkBAIC02OTgsNyArNzM4LDYgQEAgc3RhdGljIHZvaWQgdmJl X2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRF WF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAoKHZhbCAmIFZCRV9ESVNQSV9F TkFCTEVEKSAmJgogICAgICAgICAgICAgICAgICEocy0+dmJlX3JlZ3NbVkJF X0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkpIHsK LSAgICAgICAgICAgICAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsKICAgICAg ICAgICAgICAgICAKICAgICAgICAgICAgICAgICBpZiAocy0+dnJhbV9nbWZu ICE9IHMtPmxmYl9hZGRyKSB7CiAgICAgICAgICAgICAgICAgICAgICBzZXRf dnJhbV9tYXBwaW5nKHMsIHMtPmxmYl9hZGRyLCBzLT5sZmJfZW5kKTsKQEAg LTcwOSw0MCArNzQ4LDEzIEBAIHN0YXRpYyB2b2lkIHZiZV9pb3BvcnRfd3Jp dGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVf cmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVfRElTUElfRU5B QkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAg ICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAKICAgICAg ICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91bGQgYmUgZG9u ZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICghKHZhbCAmIFZC RV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAgICAgICAgICBt ZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gKiBzLT52 YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0KLQotICAgICAg ICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGljIG1v ZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAgICAgaW4gQklP UykgKi8KLSAgICAgICAgICAgICAgICBzLT5nclsweDA2XSA9IChzLT5nclsw eDA2XSAmIH4weDBjKSB8IDB4MDU7IC8qIGdyYXBoaWMgbW9kZSArIG1lbW9y eSBtYXAgMSAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4MTddIHw9IDM7 IC8qIG5vIENHQSBtb2RlcyAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4 MTNdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAg ICAgLyogd2lkdGggKi8KLSAgICAgICAgICAgICAgICBzLT5jclsweDAxXSA9 IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OwotICAgICAgICAgICAgICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KLSAgICAgICAgICAgICAgICBoID0gcy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdIC0gMTsKLSAgICAgICAgICAgICAg ICBzLT5jclsweDEyXSA9IGg7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbMHgw N10gPSAocy0+Y3JbMHgwN10gJiB+MHg0MikgfAotICAgICAgICAgICAgICAg ICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAzKSAmIDB4NDApOwot ICAgICAgICAgICAgICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCi0g ICAgICAgICAgICAgICAgcy0+Y3JbMHgxOF0gPSAweGZmOwotICAgICAgICAg ICAgICAgIHMtPmNyWzB4MDddIHw9IDB4MTA7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbMHgwOV0gfD0gMHg0MDsKLQotICAgICAgICAgICAgICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0KSB7Ci0gICAg ICAgICAgICAgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwotICAgICAgICAg ICAgICAgICAgICBzLT5zclsweDAxXSAmPSB+ODsgLyogbm8gZG91YmxlIGxp bmUgKi8KLSAgICAgICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAg ICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAg ICAgcy0+c3JbNF0gfD0gMHgwODsgLyogc2V0IGNoYWluIDQgbW9kZSAqLwot ICAgICAgICAgICAgICAgICAgICBzLT5zclsyXSB8PSAweDBmOyAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgfQotICAgICAg ICAgICAgICAgIHMtPmdyWzB4MDVdID0gKHMtPmdyWzB4MDVdICYgfjB4NjAp IHwgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+ Y3JbMHgwOV0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCiAgICAg ICAgICAgICB9IGVsc2UgewogICAgICAgICAgICAgICAgIC8qIFhYWDogdGhl IGJpb3Mgc2hvdWxkIGRvIHRoYXQgKi8KICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA1ZTg0MGU2MjkyODI1ZmNhZTkwZjY3NTBhOGY1N2JjOTg5ZTI4YzVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4t dHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRy ZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMSArCiAx IGZpbGUgY2hhbmdlZCwgMSBpbnNlcnRpb24oKykKCmRpZmYgLS1naXQgYS9o dy92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGRiYTkzZDcuLmIxYjUwMWIgMTAw NjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3ZnYS5jCkBAIC03MjksNiAr NzI5LDcgQEAgc3RhdGljIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZv aWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9 IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwYjBjZjgxMTBlOTdiMGNiZDBkYTczZDExMTYzZTI2OTc4ODIyNzU3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVt dS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVy IDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwg OSArKysrKysrKy0KIDEgZmlsZSBjaGFuZ2VkLCA4IGluc2VydGlvbnMoKyks IDEgZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3Zn YS5jCmluZGV4IGIxYjUwMWIuLjU3NzhjN2QgMTAwNjQ0Ci0tLSBhL2h3L3Zn YS5jCisrKyBiL2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDggQEAgc3RhdGlj IHVpbnQzMl90IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBh bmQyWzI1Nl07CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAor c3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpzKTsK Kwogc3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQVN0YXRlICpz KQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDQ5LDYgKzQ1MSw3 IEBAIHN0YXRpYyB2b2lkIHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVl LCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50 ZigidmdhOiB3cml0ZSBTUiV4ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwg dmFsKTsKICNlbmRpZgogICAgICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2 YWwgJiBzcl9tYXNrW3MtPnNyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0 ZV92Z2FyZWdzKHMpOwogICAgICAgICBpZiAocy0+c3JfaW5kZXggPT0gMSkg cy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgYnJlYWs7CiAg ICAgY2FzZSAweDNjNzoKQEAgLTQ3Nyw2ICs0ODAsNyBAQCBzdGF0aWMgdm9p ZCB2Z2FfaW9wb3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUg R1IleCA9IDB4JTAyeFxuIiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYK ICAgICAgICAgcy0+Z3Jbcy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tz LT5ncl9pbmRleF07CisgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsK ICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSAweDNiNDoKICAgICBjYXNlIDB4 M2Q0OgpAQCAtNDkwLDggKzQ5NCwxMCBAQCBzdGF0aWMgdm9pZCB2Z2FfaW9w b3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMy X3QgdmFsKQogICAgICAgICAvKiBoYW5kbGUgQ1IwLTcgcHJvdGVjdGlvbiAq LwogICAgICAgICBpZiAoKHMtPmNyWzB4MTFdICYgMHg4MCkgJiYgcy0+Y3Jf aW5kZXggPD0gNykgewogICAgICAgICAgICAgLyogY2FuIGFsd2F5cyB3cml0 ZSBiaXQgNCBvZiBDUjcgKi8KLSAgICAgICAgICAgIGlmIChzLT5jcl9pbmRl eCA9PSA3KQorICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IDcpIHsK ICAgICAgICAgICAgICAgICBzLT5jcls3XSA9IChzLT5jcls3XSAmIH4weDEw KSB8ICh2YWwgJiAweDEwKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CisgICAgICAgICAgICB9CiAgICAgICAgICAgICByZXR1 cm47CiAgICAgICAgIH0KICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7 CkBAIC01MDcsNiArNTEzLDcgQEAgc3RhdGljIHZvaWQgdmdhX2lvcG9ydF93 cml0ZSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZhbDsKICAg ICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CisgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3JfaW5kZXgp IHsKICAgICAgICAgY2FzZSAweDAwOgotLSAKMi4xLjQKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Mon May 09 12:01:25 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 09 May 2016 12:01:25 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1azjrK-0007Yg-Mn; Mon, 09 May 2016 12:00:22 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1azjrJ-0007YT-Ch; Mon, 09 May 2016 12:00:21 +0000 Received: from [85.158.139.211] by server-1.bemta-5.messagelabs.com id F7/C6-32266-4DB70375; Mon, 09 May 2016 12:00:20 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpkl+JIrShJLcpLzFFi42LJaLquqnux2iD cYNktTYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmLNlzlLHg7HuOiredhQ2M 765ydDFycQgJHGeU2Pilgw3CWcQo8fjYLuYuRk4OZgFXiRv7NrNB2IoSF+41sIDYvAKCEidnP gGzJQQ0Je68WcUOYosIFEnsPPcSzGYT0JOYe3YSE0SvjsTL/auZQBYIC3QzSrS1fAZq5gAaZC Yx7YYTSA2LgKrE08k7WSYw8sxCsnoWktWzkKyeBdTNDLR6/S59CFNaYvk/DohqeYntb+cwzwJ axizQwihxbd9BKKeRUWLng24mmJlTuh+yQ9jZEv82/GSEsDMkJpw4xYqppkhi773PLBB2vsTS rw2MmGpqJf5enw81v0ri17JNLJhqWhkl+lqiIQ5qYpSY/vgCM6aieoklTx5ANddIzPr9EotBa RKb/i2AOiJZYsqLV+yYanIlVp89DjU/S2LylS9Y1FRIvJ60EsoulTj6/ijjAsaEVYwaxalFZa lFuoZmeklFmekZJbmJmTm6hgamermpxcWJ6ak5iUnFesn5uZsYgQmRAQh2MJ4/7XmIUZKDSUm U15VRL1yILyk/pTIjsTgjvqg0J7X4EKMMB4eSBO+rKoNwIcGi1PTUirTMHGBqhklLcPAoifAK gKR5iwsSc4sz0yFSpxiNOZZMv7aWiWPRzcf7mYRY8vLzUqXEeX+BlAqAlGaU5sENguWMS4yyU sK8jECnCfEUpBblZpagyr9iFOdgVBLmPQAyhSczrwRu3yugU5iATpFj0wc5pSQRISXVwLhi64 sl8VHOW5efYWk/ELL5ltzF4yoNM6/NmHcxaM/iyVpNsk8+qQdmu9k5bbjJtlr1QKD4Z5mOwhU HZse0boq+HRCvr/NCmPuwX+7pYpsNJ062XNYKLznUutHS/XDsZUmHsDilBPWLhSyRa2O/Lpz1 pOmq9nWhy5K/pOOKbmT6rnyeHzmzwVKJpTgj0VCLuag4EQBd2FMrFAQAAA== X-Env-Sender: iwj@xenbits.xen.org X-Msg-Ref: server-5.tower-206.messagelabs.com!1462795216!38626463!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 31885 invoked from network); 9 May 2016 12:00:17 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-5.tower-206.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 9 May 2016 12:00:17 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1azjr5-0005R1-6E; Mon, 09 May 2016 12:00:07 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1azjr0-0002Rj-4I; Mon, 09 May 2016 12:00:02 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Mon, 09 May 2016 12:00:02 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 179 (CVE-2016-3710, CVE-2016-3712) - QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2016-3710,CVE-2016-3712 / XSA-179 version 4 QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks UPDATES IN VERSION 4 ==================== Public release. Also include CVE and description of both issues. (All advisories sent have included patches for both issues, but only the description and CVE for the first issue.) ISSUE DESCRIPTION ================= Qemu VGA module allows banked access to video memory using the window at 0xa00000 and it supports different access modes with different address calculations. But an attacker can easily change access modes after setting the bank register. This is CVE-2016-3710. Qemu VGA module allows guest to edit certain registers in 'vbe' and 'vga' modes. ie. guest could set certain 'VGA' registers while in 'VBE' mode. This is CVE-2016-3712. IMPACT ====== A privileged guest user could use CVE-2016-3710 to exceed the bank address window and write beyond the said memory area, potentially leading to arbitrary code execution with privileges of the Qemu process. If the system is not using stubdomains, this will be in domain 0. A privileged guest user could use CVE-2016-3712 to cause potential integer overflow or OOB read access issues in Qemu, resulting in a DoS of the guest itself. More dangerous effect, such as data leakage or code execution, are not known but cannot be ruled out. VULNERABLE SYSTEMS ================== Versions of qemu shipped with all Xen versions are vulnerable. Xen systems running on x86 with HVM guests, with the qemu process running in dom0 are vulnerable. Only guests provided with the "stdvga" emulated video card can exploit the vulnerability. The default "cirrus" emulated video card is not vulnerable. (With xl the emulated video card is controlled by the "stdvga=" and "vga=" domain configuration options.) ARM systems are not vulnerable. Systems using only PV guests are not vulnerable. For VMs whose qemu process is running in a stub domain, a successful attacker will only gain the privileges of that stubdom, which should be only over the guest itself. Both upstream-based versions of qemu (device_model_version="qemu-xen") and `traditional' qemu (device_model_version="qemu-xen-traditional") are vulnerable. MITIGATION ========== Running only PV guests will avoid the issue. Running HVM guests with the device model in a stubdomain will mitigate the issue. Changing the video card emulation to cirrus (stdvga=0, vga="cirrus", in the xl domain configuraton) will avoid the vulnerability. CREDITS ======= CVE-2016-3710 was discovered and reported by "Wei Xiao and Qinghao Tang of 360 Marvel Team" of 360.cn Inc. CVE-2016-3710 was discovered and reported by Zuozhi Fzz of Alibaba Inc. RESOLUTION ========== Applying the appropriate attached patch resolves this issue for systems using upstream-based versions of qemu. Patch 0001 addresses CVE-2016-3710, and patches 0002-0005 address CVE-2016-3712. qemu-upstream, xen-unstable: xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.6: xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.5: xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.4: xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.3: xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-xen-traditional, unstable: xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ sha256sum xsa179* e216959d099ed807b282026e1e4d558ce0c0e8ead284ddd9d0581cef5fcef0ad xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 708e40d85866540567d2d915731c6e9876cd0d6754bc6696650ed71d8e48d710 xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch 767007028189bce54df9769ff6cb9db7cd37b5c2afaac86787b30c8f2a03f342 xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch 1fb507c307b093e5e4471d4a5e567db419adecbfe772a68bf91722836bcba4cd xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch ff4327d598d2e0912dc3a22ab9ba14d6c79bfa5a154714b6c5da761d5ded403f xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 059bfa59f39222ad6991e6c0c8338385f2a317e379d02d0c2cb0e5a8138cb329 xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch c6dfe50d694b75670bbdec78a3ce6293a8da46d5ff8b47f1e0d7e4fac22260bf xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch f57e31e8b81f1161537277a0934013c1fb3bbf57319543dfd10a5dc5fdfb927b xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch 14900af2b13d362ffb98c061e76b13965965284399dd9b9f1a4e41b41f34a3a3 xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2b2e7d306fd95fa74490ee1694af1af9438d7ff738d8c6aecc7d99d4eb96dcb2 xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch e6108266bf0abada5fc6e0a3ca65c2702fcae610826ead6a215d622ec3ed973a xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 05bdfae312078b22542e9f18db98fae11dbfd9785184b0b3c8de8c94797e1427 xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch 56dee9d0f54357391d5249a01ab28a1879dd7d1a36b4d147d68c62688d8af22b xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch 10603f5ffe317de328dc46139a6b5ff6081040ca6368ee1642b5343db9bcfda1 xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch e0dbc47086f0346a9554b98468256bc325d67440f5d786c5825390d293896509 xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 9b0cfdba369437a3e3da86690cd0c6d9d05e39d1168065e4d11ff2de4e546feb xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3c56f255d2ff3e5ae24f15de69cbd4abf3ff0d2dbb63a686937d5e2ab1989d59 xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch b1ddabf50720635efa17a7c57778acd2e1d9fd6a6424038455163991afecb044 xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch 0f34eeda817f39d3b5e484d535aa29bae16e7e36b4dc042bc41ef0e1844bf3cb xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch c24b3401a7ed45f853de7c96b998d50461254e9082a706753b814ddcbc285b17 xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch de59a098a39c1adbc86f3857dbb2b655479f97756d46e017e83b41c1390a98b9 xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3686d0b5c3603819fe0eca65ed62161c676e6abd8e676e513f6d4b3d46e7a997 xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch 18d01083e2f4000816ecf26d85da5cb337f540da447e6252f348a5b538cc7fa4 xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch 811ce206293b54ad601eb0a0e59bee502277c642f73f1ea0bad712efc528f82d xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2097c9e4eac66a65e07607664d1aaec288c4c8b0f147c73636c1b2532cdd20dd xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 132fd7f7d1f7bee4d934daefc24ec65080ae09b7d0e07a86edc3b683cad8156a xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch b83c29c3737415bf05da14c0b856abeb3bdbb77fba7d538956535ed67160abe8 xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch 834266af0499167e6d8e2e87bb770b79c0e8480ab5ea72064298656ccdd36741 xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch a5c3c38340261c7ff44047289aad6276e501930e214c40350056a364469965cd xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch 4869ad504cba52f537dae102e226b020422e3b6494ffba3b865eb2893bee0e9e xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXMHkhAAoJEIP+FMlX6CvZ4J4IAKgEIz12GbtunUY4H3EY+bye qtpFfPIvE8933HCNG4c2e8VR/PehOlDhUWMDlkyFJ3jBja7VPeqOm9jnHWlsxaCz x7nix3PbbcconeUMn5JMf9i2ocY0wNvrD+wYBVCnSvLjvnBpKXEKgCIrAZ2bLLa8 TfcqCC3R5z15r2GoJ801lP9ts3/tQLketBefBUznGYaZreVgGF73g7tyK6bsFQAz PFVzBb2lSx2XwfWNC1Ya/a456WUmuDFpcfRVfdKi4yEh/xPOlKj1kKvx8GpSDm0m 3+5h04pp5Znu+ORVztfqcRPx4v4LXT33bM5mjBytJRc05//DIsHuC3GKOoBu9rQ= =faLY -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAzYmYxODE3MDc5YmIwZDgwYzBkOGE4NmE3YzdkZDBiZmU5MGViODJl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3 L2Rpc3BsYXkvdmdhLmMgfCAyNCArKysrKysrKysrKysrKysrKystLS0tLS0K IDEgZmlsZSBjaGFuZ2VkLCAxOCBpbnNlcnRpb25zKCspLCA2IGRlbGV0aW9u cygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IDY1N2U5ZjEuLmI5MTkxY2EgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTc5LDYgKzE3OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKICAgICAgICAgICAgIHNpemUg PSAweDgwMDA7CiAgICAgICAgICAgICBicmVhazsKICAgICAgICAgfQorICAg ICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6ZSA8PSBzLT52cmFtX3NpemUpOwog ICAgICAgICBtZW1vcnlfcmVnaW9uX2luaXRfYWxpYXMoJnMtPmNoYWluNF9h bGlhcywgbWVtb3J5X3JlZ2lvbl9vd25lcigmcy0+dnJhbSksCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAidmdhLmNoYWluNCIsICZzLT52 cmFtLCBvZmZzZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2Fk ZF9zdWJyZWdpb25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwg YmFzZSwKQEAgLTcxNiwxMSArNzE3LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dy aXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAg ICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9C QU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9J TkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52 YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAg ICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAg ICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsK ICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7 CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwog ICAgICAgICAgICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAt ODE5LDEzICs4MTYsMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FD b21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3Jb VkdBX1NFUV9NRU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAg ICAgICAgLyogY2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisg ICAgICAgIGFzc2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAg cmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5n cltWR0FfR0ZYX01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZl biBtb2RlIChha2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBs YW5lID0gKHMtPmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRy ICYgMSk7Ci0gICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFt X3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9 CisgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSB7CiAgICAgICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAq LworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+ dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAg ICAgfQogICAgICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFt X3B0cilbYWRkcl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9N T0RFXSAmIDB4MDgpKSB7CkBAIC04ODIsNiArODg3LDcgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAg ICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZH QV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNz ZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJh bV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAg ICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1U X3BseCAiXVxuIiwgYWRkcik7CkBAIC04OTUsNiArOTAxLDkgQEAgdm9pZCB2 Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIs IHVpbnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgewogICAgICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQog ICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYg REVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9l dmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTk2 OCw2ICs5NzcsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0 YXRlICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBt YXNrID0gcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV07CiAgICAgICAgIHMt PnBsYW5lX3VwZGF0ZWQgfD0gbWFzazsgLyogb25seSB1c2VkIHRvIGRldGVj dCBmb250IGNoYW5nZSAqLwogICAgICAgICB3cml0ZV9tYXNrID0gbWFzazE2 W21hc2tdOworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkg Pj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm47CisgICAg ICAgIH0KICAgICAgICAgKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRy XSA9CiAgICAgICAgICAgICAoKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVth ZGRyXSAmIH53cml0ZV9tYXNrKSB8CiAgICAgICAgICAgICAodmFsICYgd3Jp dGVfbWFzayk7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBiZmEwZjE1MWE1NjRhODNiNWEyNmYzZTkxN2RhOTg2NzRiZjNjZjYy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMgfCAxMyArKysr KysrKystLS0tCiAxIGZpbGUgY2hhbmdlZCwgOSBpbnNlcnRpb25zKCspLCA0 IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMg Yi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IGI5MTkxY2EuLjBjMWM1YjUgMTAw NjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92 Z2EuYwpAQCAtMTQyLDYgKzE0MiwxMSBAQCBzdGF0aWMgdWludDMyX3QgZXhw YW5kNFsyNTZdOwogc3RhdGljIHVpbnQxNl90IGV4cGFuZDJbMjU2XTsKIHN0 YXRpYyB1aW50OF90IGV4cGFuZDR0bzhbMTZdOwogCitzdGF0aWMgaW5saW5l IGJvb2wgdmJlX2VuYWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCit7CisgICAg cmV0dXJuIHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQ7Cit9CisKIHN0YXRpYyB2b2lkIHZnYV91cGRh dGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBo d2FkZHIgYmFzZSwgb2Zmc2V0LCBzaXplOwpAQCAtNTY0LDcgKzU2OSw3IEBA IHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNvbW1vblN0YXRlICpz KQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3JlZ3M7CiAgICAgdWludDMy X3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zmc2V0OwogCi0gICAgaWYg KCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFC TEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKICAgICAgICAg LyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLwogICAg ICAgICByZXR1cm47CiAgICAgfQpAQCAtMTA1OCw3ICsxMDYzLDcgQEAgc3Rh dGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNvbW1vblN0YXRlICpzLAog ewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxpbmVfb2Zmc2V0LCBsaW5l X2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkgeworICAgIGlmICh2 YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZi ZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9z dGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAg LTEzODMsNyArMTM4OCw3IEBAIHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdB Q29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJldDsKIAotICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQ SV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAg ICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdOwog ICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7CkBAIC0xMzk1LDcgKzE0 MDAsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jlc29sdXRpb24oVkdBQ29t bW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQgKnBoZWlnaHQpCiB7CiAg ICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkg eworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0aCA9 IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAgICAg aGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdOwog ICAgIH0gZWxzZSB7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA3ZmE1YzJjNWRjOWY5YmY4NzhjMWU4NjY5ZWI5NjQ0ZDcwYTcxZTcx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3Bs YXkvdmdhLmMgfCA3OCArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQ0 IGluc2VydGlvbnMoKyksIDM0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IDBj MWM1YjUuLmUxMmY1YWMgMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMK KysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNjQ0LDYgKzY0NCw0OSBAQCBz dGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICBzLT52YmVfc3RhcnRfYWRkciAgPSBvZmZzZXQgLyA0OwogfQogCisv KiB3ZSBpbml0aWFsaXplIHRoZSBWR0EgZ3JhcGhpYyBtb2RlICovCitzdGF0 aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdBQ29tbW9uU3RhdGUgKnMp Cit7CisgICAgaW50IGgsIHNoaWZ0X2NvbnRyb2w7CisKKyAgICBpZiAoIXZi ZV9lbmFibGVkKHMpKSB7CisgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2Zm IC0tIG5vdGhpbmcgdG8gZG8gKi8KKyAgICAgICAgcmV0dXJuOworICAgIH0K KworICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLworICAg IHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdBX0dGWF9NSVNDXSAm IH4weDBjKSB8IDB4MDQgfAorICAgICAgICBWR0FfR1IwNl9HUkFQSElDU19N T0RFOworICAgIHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENH QSBtb2RlcyAqLworICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBzLT52 YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAgICAvKiB3aWR0aCAqLworICAgIHMt PmNyW1ZHQV9DUlRDX0hfRElTUF0gPQorICAgICAgICAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKKyAgICAvKiBoZWln aHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCisgICAgaCA9IHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAtIDE7CisgICAgcy0+ Y3JbVkdBX0NSVENfVl9ESVNQX0VORF0gPSBoOworICAgIHMtPmNyW1ZHQV9D UlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+ MHg0MikgfAorICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAz KSAmIDB4NDApOworICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCisg ICAgcy0+Y3JbVkdBX0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7CisgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7CisgICAgcy0+Y3Jb VkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7CisKKyAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgeworICAgICAgICBz aGlmdF9jb250cm9sID0gMDsKKyAgICAgICAgcy0+c3JbVkdBX1NFUV9DTE9D S19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KKyAgICB9IGVs c2UgeworICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKKyAgICAgICAgLyog c2V0IGNoYWluIDQgbW9kZSAqLworICAgICAgICBzLT5zcltWR0FfU0VRX01F TU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07CisgICAgICAgIC8qIGFj dGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gfD0gVkdBX1NSMDJfQUxMX1BMQU5FUzsKKyAgICB9Cisg ICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0FfR0ZYX01PREVd ICYgfjB4NjApIHwKKyAgICAgICAgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Cisg ICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBk b3VibGUgc2NhbiAqLworfQorCiBzdGF0aWMgdWludDMyX3QgdmJlX2lvcG9y dF9yZWFkX2luZGV4KHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkcikKIHsK ICAgICBWR0FDb21tb25TdGF0ZSAqcyA9IG9wYXF1ZTsKQEAgLTczMCw1MiAr NzczLDE5IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9w YXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAo KHZhbCAmIFZCRV9ESVNQSV9FTkFCTEVEKSAmJgogICAgICAgICAgICAgICAg ICEocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKLSAgICAgICAgICAgICAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKIAogICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9WSVJUX1dJRFRIXSA9IDA7CiAgICAgICAgICAgICAg ICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hfT0ZGU0VUXSA9IDA7 CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X1lfT0ZGU0VUXSA9IDA7CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gfD0gVkJFX0RJU1BJX0VOQUJMRUQ7 CiAgICAgICAgICAgICAgICAgdmJlX2ZpeHVwX3JlZ3Mocyk7CisgICAgICAg ICAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAgICAg ICAgICAgLyogY2xlYXIgdGhlIHNjcmVlbiAqLwogICAgICAgICAgICAgICAg IGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAg ICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAg ICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFw aGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBz LT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+ MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZf R1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JU Q19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zm c2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAg ICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVT XSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5 IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGgg PSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAg ICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsK LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAo cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAg ICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAw eDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAy MyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09N UEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAg aWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAg ICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0g fjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7 Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8K LSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9E RV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAv KiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAg IHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9Q TEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMt PmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4w eDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8 IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FO XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAg IH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgcy0+YmFua19vZmZzZXQgPSAw OwogICAgICAgICAgICAgfQotLSAKMS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSAyMDY4MTkyZGNjY2Q4YTgwZGRkZmNjOGRmNjE2NGNmOWMyNmUwZmM0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMg fCAxICsKIDEgZmlsZSBjaGFuZ2VkLCAxIGluc2VydGlvbigrKQoKZGlmZiAt LWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmlu ZGV4IGUxMmY1YWMuLmVlZWI5YzggMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkv dmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNzYzLDYgKzc2Myw3 IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwg dWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZC RV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAgICAgIHMtPnZiZV9y ZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICB2YmVfZml4 dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5r X21hc2s7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmZDNjMTM2YjNlMTQ4MmNkMGVjNzI4NWQ2YmMyYTNlNmE2MmMzOGQ3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkv dmdhLmMgfCA2ICsrKysrKwogMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9u cygrKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IGVlZWI5YzguLjRhNTVlYzYgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTQyLDYgKzE0Miw4IEBAIHN0YXRpYyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07 CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4 X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcyk7CisKIHN0YXRpYyBpbmxpbmUg Ym9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKQEAgLTQ4NCw2ICs0ODYsNyBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBTUiV4 ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwgdmFsKTsKICNlbmRpZgogICAg ICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2YWwgJiBzcl9tYXNrW3MtPnNy X2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogICAg ICAgICBpZiAocy0+c3JfaW5kZXggPT0gVkdBX1NFUV9DTE9DS19NT0RFKSB7 CiAgICAgICAgICAgICBzLT51cGRhdGVfcmV0cmFjZV9pbmZvKHMpOwogICAg ICAgICB9CkBAIC01MTUsNiArNTE4LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgR1IleCA9IDB4JTAyeFxu Iiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+Z3Jb cy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tzLT5ncl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgdmdhX3Vw ZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwogICAgICAgICBicmVhazsKICAgICBj YXNlIFZHQV9DUlRfSU06CkBAIC01MzMsMTAgKzUzNywxMiBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgICAgICBpZiAocy0+Y3JfaW5kZXggPT0g VkdBX0NSVENfT1ZFUkZMT1cpIHsKICAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1dd ICYgfjB4MTApIHwKICAgICAgICAgICAgICAgICAgICAgKHZhbCAmIDB4MTAp OworICAgICAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAg ICAgICAgICAgIH0KICAgICAgICAgICAgIHJldHVybjsKICAgICAgICAgfQog ICAgICAgICBzLT5jcltzLT5jcl9pbmRleF0gPSB2YWw7CisgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3Jf aW5kZXgpIHsKICAgICAgICAgY2FzZSBWR0FfQ1JUQ19IX1RPVEFMOgotLSAK MS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSA2NzMwNWZjZjQ3MzNmYjRmYjllYWNjMzM0MzZlYzY2YTdjMDM1MmVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQwOjU4ICswMTAwClN1YmplY3Q6IFtQQVRDSCAxLzVdIHZnYTogZml4IGJh bmtlZCBhY2Nlc3MgYm91bmRzIGNoZWNraW5nIChDVkUtMjAxNi0zNzEwKQoK dmdhIGFsbG93cyBiYW5rZWQgYWNjZXNzIHRvIHZpZGVvIG1lbW9yeSB1c2lu ZyB0aGUgd2luZG93IGF0IDB4YTAwMDAwCmFuZCBpdCBzdXBwb3J0cyBhIGRp ZmZlcmVudCBhY2Nlc3MgbW9kZXMgd2l0aCBkaWZmZXJlbnQgYWRkcmVzcwpj YWxjdWxhdGlvbnMuCgpUaGUgVkJFIGJvY2hzIGV4dGVudGlvbnMgc3VwcG9y dCBiYW5rZWQgYWNjZXNzIHRvbywgdXNpbmcgdGhlClZCRV9ESVNQSV9JTkRF WF9CQU5LIHJlZ2lzdGVyLiAgVGhlIGNvZGUgdHJpZXMgdG8gdGFrZSB0aGUg ZGlmZmVyZW50CmFkZHJlc3MgY2FsY3VsYXRpb25zIGludG8gYWNjb3VudCBh bmQgYXBwbGllcyBkaWZmZXJlbnQgbGltaXRzIHRvClZCRV9ESVNQSV9JTkRF WF9CQU5LIGRlcGVuZGluZyBvbiB0aGUgY3VycmVudCBhY2Nlc3MgbW9kZS4K CldoaWNoIGlzIHByb2JhYmx5IGVmZmVjdGl2ZSBpbiBzdG9wcGluZyBtaXNw cm9ncmFtbWluZyBieSBhY2NpZGVudC4KQnV0IGZyb20gYSBzZWN1cml0eSBw b2ludCBvZiB2aWV3IGNvbXBsZXRlbHkgdXNlbGVzcyBhcyBhbiBhdHRhY2tl cgpjYW4gZWFzaWx5IGNoYW5nZSBhY2Nlc3MgbW9kZXMgYWZ0ZXIgc2V0dGlu ZyB0aGUgYmFuayByZWdpc3Rlci4KCkRyb3AgdGhlIGJvZ3VzIGNoZWNrLCBh ZGQgcmFuZ2UgY2hlY2tzIHRvIHZnYV9tZW1fe3JlYWRiLHdyaXRlYn0KaW5z dGVhZC4KCkZpeGVzOiBDVkUtMjAxNi0zNzEwClJlcG9ydGVkLWJ5OiBRaW5n aGFvIFRhbmcgPGx1b2RhbG9uZ2RlQGdtYWlsLmNvbT4KU2lnbmVkLW9mZi1i eTogR2VyZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1v ZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVs Lm9yZz4KLS0tCiBody92Z2EuYyB8IDI0ICsrKysrKysrKysrKysrKysrKy0t LS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMoKyksIDYgZGVs ZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCA2OTM5OWRiLi5jZDdlN2FhIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMjAwLDYgKzIwMCw3IEBAIHN0YXRpYyB2b2lk IHZnYV91cGRhdGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CiAgICAgICAgIGJhc2Ug Kz0gaXNhX21lbV9iYXNlOworICAgICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6 ZSA8PSBzLT52cmFtX3NpemUpOwogICAgICAgICByZWdpb24gPSBnX21hbGxv YyhzaXplb2YoKnJlZ2lvbikpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2lu aXRfYWxpYXMocmVnaW9uLCAidmdhLmNoYWluNCIsICZzLT52cmFtLCBvZmZz ZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2FkZF9zdWJyZWdp b25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwgYmFzZSwKQEAg LTc0NywxMSArNzQ4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJy ZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAg ICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBd ID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19t YXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAg ICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9Cisg ICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAg ICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUyLDEzICs4 NDksMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9N RU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyog Y2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFz c2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+ dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZY X01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChh a2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMt PmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0g ICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsK KyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAg IHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAg ICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAg ICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAg ICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRk cl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4 MDgpKSB7CkBAIC05MTUsNiArOTIwLDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRl YihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9 ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIg PCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRk cl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAg cHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxu IiwgYWRkcik7CkBAIC05MjgsNiArOTM0LDkgQEAgdm9pZCB2Z2FfbWVtX3dy aXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAg aWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAg ICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQogICAgICAgICAg ICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdB X01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgi IFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTEwMDEsNiArMTAx MCw5IEBAIHZvaWQgdmdhX21lbV93cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMs IGh3YWRkciBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIG1hc2sgPSBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXTsKICAgICAgICAgcy0+cGxhbmVf dXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQg Y2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFza107 CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52 cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAgfQog ICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0KICAg ICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdICYg fndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9tYXNr KTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlN2Q3YzA5Njg5YzcyNWJlNGYwYjQ4OWI0YmEzYjc0MWM1ZDlhYjMx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQxOjM5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzVdIHZnYTogYWRkIHZi ZV9lbmFibGVkKCkgaGVscGVyCgpNYWtlcyBjb2RlIGEgYml0IGVhc2llciB0 byByZWFkLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFubiA8a3JheGVs QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGlu aSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92Z2EuYyB8IDEz ICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGluc2VydGlvbnMo KyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9o dy92Z2EuYwppbmRleCBjZDdlN2FhLi5jYjFjMTRkIDEwMDY0NAotLS0gYS9o dy92Z2EuYworKysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSwxMSBAQCBz dGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIHN0YXRpYyB2b2lkIHZn YV9zY3JlZW5fZHVtcCh2b2lkICpvcGFxdWUsIGNvbnN0IGNoYXIgKmZpbGVu YW1lLCBib29sIGNzd2l0Y2gsCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgRXJyb3IgKiplcnJwKTsKIAorc3RhdGljIGlubGluZSBib29sIHZiZV9l bmFibGVkKFZHQUNvbW1vblN0YXRlICpzKQoreworICAgIHJldHVybiBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9F TkFCTEVEOworfQorCiBzdGF0aWMgdm9pZCB2Z2FfdXBkYXRlX21lbW9yeV9h Y2Nlc3MoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgTWVtb3J5UmVnaW9u ICpyZWdpb24sICpvbGRfcmVnaW9uID0gcy0+Y2hhaW40X2FsaWFzOwpAQCAt NTk1LDcgKzYwMCw3IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZH QUNvbW1vblN0YXRlICpzKQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3Jl Z3M7CiAgICAgdWludDMyX3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zm c2V0OwogCi0gICAgaWYgKCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAm IFZCRV9ESVNQSV9FTkFCTEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQo cykpIHsKICAgICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGlu ZyB0byBkbyAqLwogICAgICAgICByZXR1cm47CiAgICAgfQpAQCAtMTE3Niw3 ICsxMTgxLDcgQEAgc3RhdGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNv bW1vblN0YXRlICpzLAogewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxp bmVfb2Zmc2V0LCBsaW5lX2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5l X29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRf YWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBh cmUgPSA2NTUzNTsKQEAgLTE2MjYsNyArMTYzMSw3IEBAIHN0YXRpYyBpbnQg dmdhX2dldF9icHAoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJl dDsKIAotICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFi bGVkKHMpKSB7CiAgICAgICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQ SV9JTkRFWF9CUFBdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7 CkBAIC0xNjM4LDcgKzE2NDMsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jl c29sdXRpb24oVkdBQ29tbW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQg KnBoZWlnaHQpCiB7CiAgICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICB3aWR0aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Y UkVTXTsKICAgICAgICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdOwogICAgIH0gZWxzZSB7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSAyNzAwMjUwYzZiMjgyNDhiNzBiMTVmZDZlMGI0YzlkYjhiMmRkZmI3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjI0ICswMTAwClN1YmplY3Q6IFtQQVRDSCAzLzVdIHZnYTogZmFjdG9y IG91dCB2Z2EgcmVnaXN0ZXIgc2V0dXAKCldoZW4gZW5hYmxpbmcgdmJlIG1v ZGUgcWVtdSB3aWxsIHNldHVwIGEgYnVuY2ggb2YgdmdhIHJlZ2lzdGVycyB0 byBtYWtlCnN1cmUgdGhlIHZnYSBlbXVsYXRpb24gb3BlcmF0ZXMgaW4gY29y cmVjdCBtb2RlIGZvciBhIGxpbmVhcgpmcmFtZWJ1ZmZlci4gIE1vdmUgdGhh dCBjb2RlIHRvIGEgc2VwYXJhdGUgZnVuY3Rpb24gc28gd2UgY2FuIGNhbGwg aXQKZnJvbSBvdGhlciBwbGFjZXMgdG9vLgoKU2lnbmVkLW9mZi1ieTogR2Vy ZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6 IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4K LS0tCiBody92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIDEgZmls ZSBjaGFuZ2VkLCA0NCBpbnNlcnRpb25zKCspLCAzNSBkZWxldGlvbnMoLSkK CmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGNiMWMx NGQuLmFkN2NhNDkgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3Zn YS5jCkBAIC02NzUsNiArNjc1LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1 cF9yZWdzKFZHQUNvbW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9h ZGRyICA9IG9mZnNldCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKKworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAg ICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAq LworICAgICAgICByZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBt b2RlICsgbWVtb3J5IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVND XSA9IChzLT5ncltWR0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8Cisg ICAgICAgIFZHQV9HUjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdB X0NSVENfTU9ERV0gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+ Y3JbVkdBX0NSVENfT0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAz OworICAgIC8qIHdpZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQ XSA9CisgICAgICAgIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJF U10gPj4gMykgLSAxOworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdIC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1Bf RU5EXSA9IGg7CisgICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMt PmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgo aCA+PiA3KSAmIDB4MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyog bGluZSBjb21wYXJlIHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19M SU5FX0NPTVBBUkVdID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVS RkxPV10gfD0gMHgxMDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0g fD0gMHg0MDsKKworICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfQlBQXSA9PSA0KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwor ICAgICAgICBzLT5zcltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBu byBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0 X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICov CisgICAgICAgIHMtPnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9T UjA0X0NITl80TTsKKyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAq LworICAgICAgICBzLT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0Ff U1IwMl9BTExfUExBTkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01P REVdID0gKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAg ICAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19N QVhfU0NBTl0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisK IHN0YXRpYyB1aW50MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAq b3BhcXVlLCB1aW50MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRl ICpzID0gb3BhcXVlOwpAQCAtNzYxLDUzICs4MDQsMTkgQEAgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVY X0VOQUJMRToKICAgICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VO QUJMRUQpICYmCiAgICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewot ICAgICAgICAgICAgICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAg ICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRf V0lEVEhdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfWF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSB8PSBWQkVfRElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2 YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUg c2NyZWVuIChzaG91bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAg ICAgICAgIGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewog ICAgICAgICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElT UElfSU5ERVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAg ICAgICAgICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxp emUgdGhlIFZHQSBncmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAg ICAgICAgICAgICAgICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAv KiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAg ICAgICBzLT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlT Q10gJiB+MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdB X0dSMDZfR1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xp bmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8K LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAg ICAgICAgICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRF WF9YUkVTXSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0 IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAg ICAgIGggPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAx OwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRd ID0gaDsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxP V10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAg ICAgICAgICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4g MykgJiAweDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUg dG8gMTAyMyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJ TkVfQ09NUEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMt PmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAg ICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09 IDQpIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7 Ci0gICAgICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9E RV0gJj0gfjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAg ICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJv bCA9IDI7Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1v ZGUgKi8KLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1P UllfTU9ERV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAg ICAgICAvKiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAg ICAgICAgIHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAy X0FMTF9QTEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAg ICAgIHMtPmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RF XSAmIH4weDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250 cm9sIDw8IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01B WF9TQ0FOXSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAg ICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUg YmlvcyBzaG91bGQgZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJh bmtfb2Zmc2V0ID0gMDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA5OGJlMWZiNmVhMzFjMTMwMjY0MDI1ZGU4ZWM4N2FkMmM3NTMyZjIx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCA0LzVdIHZnYTogdXBkYXRl IHZnYSByZWdpc3RlciBzZXR1cCBvbiB2YmUgY2hhbmdlcwoKQ2FsbCB0aGUg bmV3IHZiZV91cGRhdGVfdmdhcmVncygpIGZ1bmN0aW9uIG9uIHZiZSBjb25m aWd1cmF0aW9uCmNoYW5nZXMsIHRvIG1ha2Ugc3VyZSB2Z2EgcmVnaXN0ZXJz IGFyZSB1cC10by1kYXRlLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFu biA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8g U3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92 Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0aW9uKCspCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBhZDdjYTQ5 Li4xYWM4MDgzIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtNzk0LDYgKzc5NCw3IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9k YXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAg ICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAg dmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwZjJlOWU2YjNjNzVhODdlOWVjOWE4MGQ3YmM5MTQ4MTBlM2YzZGEy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQzOjM2ICswMTAwClN1YmplY3Q6IFtQQVRDSCA1LzVdIHZnYTogbWFrZSBz dXJlIHZnYSByZWdpc3RlciBzZXR1cCBmb3IgdmJlIHN0YXlzIGludGFjdAog KENWRS0yMDE2LTM3MTIpLgoKQ2FsbCB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSB3 aGVuIHRoZSBndWVzdCB0b3VjaGVzIEdGWCwgU0VRIG9yIENSVApyZWdpc3Rl cnMsIHRvIG1ha2Ugc3VyZSB0aGUgdmdhIHJlZ2lzdGVycyB3aWxsIGFsd2F5 cyBoYXZlIHRoZQp2YWx1ZXMgbmVlZGVkIGJ5IHZiZSBtb2RlLiAgVGhpcyBt YWtlcyBzdXJlIHRoZSBzYW5pdHkgY2hlY2tzCmFwcGxpZWQgYnkgdmJlX2Zp eHVwX3JlZ3MoKSBhcmUgZWZmZWN0aXZlLgoKV2l0aG91dCB0aGlzIGd1ZXN0 cyBjYW4gbXVjayB3aXRoIHNoaWZ0X2NvbnRyb2wsIGNhbiB0dXJuIG9uIHBs YW5hcgp2Z2EgbW9kZXMgb3IgdGV4dCBtb2RlIGVtdWxhdGlvbiB3aGlsZSBW QkUgaXMgYWN0aXZlLCBtYWtpbmcgcWVtdQp0YWtlIGNvZGUgcGF0aHMgbWVh bnQgZm9yIENHQSBjb21wYXRpYmlsaXR5LCBidXQgd2l0aCB0aGUgdmVyeQps YXJnZSBkaXNwbGF5IHdpZHRocyBhbmQgaGVpZ3RzIHNldHRhYmxlIHVzaW5n IFZCRSByZWdpc3RlcnMuCgpXaGljaCBpcyBnb29kIGZvciBvbmUgb3IgYW5v dGhlciBidWZmZXIgb3ZlcmZsb3cuICBOb3QgdGhhdApjcml0aWNhbCBhcyB0 aGV5IHR5cGljYWxseSByZWFkIG92ZXJmbG93cyBoYXBwZW5pbmcgc29tZXdo ZXJlCmluIHRoZSBkaXNwbGF5IGNvZGUuICBTbyBndWVzdHMgY2FuIERvUyBi eSBjcmFzaGluZyBxZW11IHdpdGggYQpzZWdmYXVsdCwgYnV0IGl0IGlzIHBy b2JhYmx5IG5vdCBwb3NzaWJsZSB0byBicmVhayBvdXQgb2YgdGhlIFZNLgoK Rml4ZXM6IENWRS0yMDE2LTM3MTIKUmVwb3J0ZWQtYnk6IFp1b3poaSBGenog PHp1b3poaS5menpAYWxpYmFiYS1pbmMuY29tPgpSZXBvcnRlZC1ieTogUCBK IFAgPHBwYW5kaXRAcmVkaGF0LmNvbT4KU2lnbmVkLW9mZi1ieTogR2VyZCBI b2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0 ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0t CiBody92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdlZCwgNiBpbnNl cnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCAxYWM4MDgzLi4xN2IzODllIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSw4IEBAIHN0YXRpYyB1aW50 OF90IGV4cGFuZDR0bzhbMTZdOwogc3RhdGljIHZvaWQgdmdhX3NjcmVlbl9k dW1wKHZvaWQgKm9wYXF1ZSwgY29uc3QgY2hhciAqZmlsZW5hbWUsIGJvb2wg Y3N3aXRjaCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICBFcnJvciAq KmVycnApOwogCitzdGF0aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpOworCiBzdGF0aWMgaW5saW5lIGJvb2wgdmJlX2Vu YWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgcmV0dXJuIHMtPnZi ZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VO QUJMRUQ7CkBAIC01MTUsNiArNTE3LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgU1IleCA9IDB4JTAyeFxu Iiwgcy0+c3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+c3Jb cy0+c3JfaW5kZXhdID0gdmFsICYgc3JfbWFza1tzLT5zcl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgaWYgKHMt PnNyX2luZGV4ID09IFZHQV9TRVFfQ0xPQ0tfTU9ERSkgewogICAgICAgICAg ICAgcy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgfQpAQCAt NTQ2LDYgKzU0OSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpv cGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg cHJpbnRmKCJ2Z2E6IHdyaXRlIEdSJXggPSAweCUwMnhcbiIsIHMtPmdyX2lu ZGV4LCB2YWwpOwogI2VuZGlmCiAgICAgICAgIHMtPmdyW3MtPmdyX2luZGV4 XSA9IHZhbCAmIGdyX21hc2tbcy0+Z3JfaW5kZXhdOworICAgICAgICB2YmVf dXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhzKTsKICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSBWR0FfQ1JU X0lNOgpAQCAtNTY0LDEwICs1NjgsMTIgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IFZHQV9DUlRDX09W RVJGTE9XKSB7CiAgICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfT1ZF UkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDEwKSB8 CiAgICAgICAgICAgICAgICAgICAgICh2YWwgJiAweDEwKTsKKyAgICAgICAg ICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgICAgICB9 CiAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgIH0KICAgICAgICAgcy0+ Y3Jbcy0+Y3JfaW5kZXhdID0gdmFsOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAKICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7CiAg ICAgICAgIGNhc2UgVkdBX0NSVENfSF9UT1RBTDoKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAyNTkzNWZkMWVkM2M0MzM3YWE0YjYxOTAyZWM1ODBlMTdiMTMwYjYz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNDMwZTdlZC4uNjllMjU1 NCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0NSwxMSArNzQ2LDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUwLDEzICs4NDcsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MTMs NiArOTE4LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjYsNiArOTMyLDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5OSw2ICsxMDA4LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAyOTRhNmMxNWEzODY2OWY4MDkyMGI4ODUyODcxOTE1MTRhYjdkOWZm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjllMjU1 NC4uZGExZWI0YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU5Myw3ICs1OTgsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzQsNyArMTE3OSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjI3 LDcgKzE2MzIsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzOSw3ICsxNjQ0LDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkMzc3OTE4YzIzZDg1ZjY0ZDAxOTE0YjQzYmZhYmMwYTQ2ZmU5NzRh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZGExZWI0YS4uY2Y1Zjk3ZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NzMs NiArNjczLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU5LDUzICs4MDIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBmYmNmZjgyY2Q3OTk4ZjkzNTU2YzI4ZGZjNjNiYmJkN2IyMDZjOGNl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggY2Y1Zjk3ZS4uNjNkMWE3MCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03OTIsNiArNzkyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmNzkyNmM3MzY4NWMyYmM3MTI0MjY1ZjU2N2JhZmI1MDI4NjRjNWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjNkMWE3MC4uZGQ2MTI0 NiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTEzLDYgKzUx NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0NCw2ICs1NDcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU2MiwxMCArNTY2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBjOWExYTJkN2JmM2RiNTRiNzk2MWRmNGI4YTMwOTQ2YTc2N2I0ODUz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMmJiODVhZS4uZjcxNDJi YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0MSwxMSArNzQyLDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODQ2LDEzICs4NDMsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MDks NiArOTE0LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjIsNiArOTI4LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5NSw2ICsxMDA0LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBmY2QyNjJhOTY2YzcyZGFjNDEyN2Q1ZmM0YTlkYTNjZjI0MjM5NWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjcxNDJi YS4uZDQ5M2IwYSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU4OSw3ICs1OTQsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzAsNyArMTE3NSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjIz LDcgKzE2MjgsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzNSw3ICsxNjQwLDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA2MGM4N2Q0MjVjNDFmNDNhYzgxY2IzM2IyN2FmNjg0NmYwMjJiNDVj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZDQ5M2IwYS4uM2U0YzUyZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02Njks NiArNjY5LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU1LDUzICs3OTgsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA0OTQ4NGViYjc5ZTRlNGVkYWMyNjA5ZmRhYTZlZjNhYzFhNGVlNmQw IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggM2U0YzUyZS4uZjI2NWI5NyAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03ODgsNiArNzg4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAxMTA5YjhiZDA1OTQ3YWMwOWI2ZjI0ZjQ2YTlmNzg0YzM5Y2FjNDZl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjI2NWI5Ny4uYTNmZWIy ZCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTA5LDYgKzUx MSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0MCw2ICs1NDMsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU1OCwxMCArNTYy LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiMTZkYjVhYjJkMGM1ZmY3NTVlMDg5NDJmNGM4ZThmOWY4NjE4ZWFl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNTJlYWYwNS4uYjU3Nzcx MiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNzgsNiArMTc4LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcygmcy0+Y2hhaW40X2FsaWFzLCBtZW1vcnlfcmVnaW9uX293bmVyKCZz LT52cmFtKSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJ2 Z2EuY2hhaW40IiwgJnMtPnZyYW0sIG9mZnNldCwgc2l6ZSk7CiAgICAgICAg IG1lbW9yeV9yZWdpb25fYWRkX3N1YnJlZ2lvbl9vdmVybGFwKHMtPmxlZ2Fj eV9hZGRyZXNzX3NwYWNlLCBiYXNlLApAQCAtNzE1LDExICs3MTYsNyBAQCB2 b2lkIHZiZV9pb3BvcnRfd3JpdGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQz Ml90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIHZiZV9maXh1 cF9yZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIGNhc2Ug VkJFX0RJU1BJX0lOREVYX0JBTks6Ci0gICAgICAgICAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgewotICAgICAgICAg ICAgICB2YWwgJj0gKHMtPnZiZV9iYW5rX21hc2sgPj4gMik7Ci0gICAgICAg ICAgICB9IGVsc2UgewotICAgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKLSAgICAgICAgICAgIH0KKyAgICAgICAgICAgIHZhbCAmPSBz LT52YmVfYmFua19tYXNrOwogICAgICAgICAgICAgcy0+dmJlX3JlZ3Nbcy0+ dmJlX2luZGV4XSA9IHZhbDsKICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0 ID0gKHZhbCA8PCAxNik7CiAgICAgICAgICAgICB2Z2FfdXBkYXRlX21lbW9y eV9hY2Nlc3Mocyk7CkBAIC04MTgsMTMgKzgxNSwyMSBAQCB1aW50MzJfdCB2 Z2FfbWVtX3JlYWRiKFZHQUNvbW1vblN0YXRlICpzLCBod2FkZHIgYWRkcikK IAogICAgIGlmIChzLT5zcltWR0FfU0VRX01FTU9SWV9NT0RFXSAmIFZHQV9T UjA0X0NITl80TSkgewogICAgICAgICAvKiBjaGFpbiA0IG1vZGUgOiBzaW1w bGVzdCBhY2Nlc3MgKi8KKyAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFt X3NpemUpOwogICAgICAgICByZXQgPSBzLT52cmFtX3B0clthZGRyXTsKICAg ICB9IGVsc2UgaWYgKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiAweDEwKSB7CiAg ICAgICAgIC8qIG9kZC9ldmVuIG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGlu ZykgKi8KICAgICAgICAgcGxhbmUgPSAocy0+Z3JbVkdBX0dGWF9QTEFORV9S RUFEXSAmIDIpIHwgKGFkZHIgJiAxKTsKLSAgICAgICAgcmV0ID0gcy0+dnJh bV9wdHJbKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmVdOworICAgICAgICBh ZGRyID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgIGlm IChhZGRyID49IHMtPnZyYW1fc2l6ZSkgeworICAgICAgICAgICAgcmV0dXJu IDB4ZmY7CisgICAgICAgIH0KKyAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJb YWRkcl07CiAgICAgfSBlbHNlIHsKICAgICAgICAgLyogc3RhbmRhcmQgVkdB IGxhdGNoZWQgYWNjZXNzICovCisgICAgICAgIGlmIChhZGRyICogc2l6ZW9m KHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CiAgICAgICAgIHMtPmxhdGNoID0gKCh1 aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRyXTsKIAogICAgICAgICBpZiAo IShzLT5ncltWR0FfR0ZYX01PREVdICYgMHgwOCkpIHsKQEAgLTg4MSw2ICs4 ODYsNyBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRlICpz LCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBwbGFuZSA9 IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gJiBtYXNrKSB7 CisgICAgICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAg ICAgICAgICAgICBzLT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBE RUJVR19WR0FfTUVNCiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40 OiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTg5NCw2 ICs5MDAsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRl ICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBtYXNr ID0gKDEgPDwgcGxhbmUpOwogICAgICAgICBpZiAocy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRyID0gKChh ZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBpZiAoYWRk ciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICByZXR1cm47 CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0clthZGRy XSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAgICAgICBw cmludGYoInZnYTogb2RkL2V2ZW46IFsweCIgVEFSR0VUX0ZNVF9wbHggIl1c biIsIGFkZHIpOwpAQCAtOTY3LDYgKzk3Niw5IEBAIHZvaWQgdmdhX21lbV93 cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMsIGh3YWRkciBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zcltWR0FfU0VRX1BMQU5FX1dS SVRFXTsKICAgICAgICAgcy0+cGxhbmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBv bmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQgY2hhbmdlICovCiAgICAgICAgIHdy aXRlX21hc2sgPSBtYXNrMTZbbWFza107CisgICAgICAgIGlmIChhZGRyICog c2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybjsKKyAgICAgICAgfQogICAgICAgICAoKHVpbnQzMl90ICop cy0+dnJhbV9wdHIpW2FkZHJdID0KICAgICAgICAgICAgICgoKHVpbnQzMl90 ICopcy0+dnJhbV9wdHIpW2FkZHJdICYgfndyaXRlX21hc2spIHwKICAgICAg ICAgICAgICh2YWwgJiB3cml0ZV9tYXNrKTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlMDI2ODU5ZTlhZWNmODYzNWRhZjA2ZTlmYzIzMjUyMzlmNDU4OTU5 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggYjU3Nzcx Mi4uZWJmNjNmZiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIGh3YWRkciBiYXNlLCBvZmZzZXQsIHNpemU7CkBAIC01 NjMsNyArNTY4LDcgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpCiAgICAgdWludDE2X3QgKnIgPSBzLT52YmVfcmVn czsKICAgICB1aW50MzJfdCBiaXRzLCBsaW5lbGVuZ3RoLCBtYXh5LCBvZmZz ZXQ7CiAKLSAgICBpZiAoIShyW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQpKSB7CisgICAgaWYgKCF2YmVfZW5hYmxlZChz KSkgewogICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9mZiAtLSBub3RoaW5n IHRvIGRvICovCiAgICAgICAgIHJldHVybjsKICAgICB9CkBAIC0xMDU3LDcg KzEwNjIsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X29mZnNldHMoVkdBQ29t bW9uU3RhdGUgKnMsCiB7CiAgICAgdWludDMyX3Qgc3RhcnRfYWRkciwgbGlu ZV9vZmZzZXQsIGxpbmVfY29tcGFyZTsKIAotICAgIGlmIChzLT52YmVfcmVn c1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVE KSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIGxpbmVf b2Zmc2V0ID0gcy0+dmJlX2xpbmVfb2Zmc2V0OwogICAgICAgICBzdGFydF9h ZGRyID0gcy0+dmJlX3N0YXJ0X2FkZHI7CiAgICAgICAgIGxpbmVfY29tcGFy ZSA9IDY1NTM1OwpAQCAtMTM4Miw3ICsxMzg3LDcgQEAgc3RhdGljIGludCB2 Z2FfZ2V0X2JwcChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBpbnQgcmV0 OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFC TEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJs ZWQocykpIHsKICAgICAgICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX0JQUF07CiAgICAgfSBlbHNlIHsKICAgICAgICAgcmV0ID0gMDsK QEAgLTEzOTQsNyArMTM5OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfcmVz b2x1dGlvbihWR0FDb21tb25TdGF0ZSAqcywgaW50ICpwd2lkdGgsIGludCAq cGhlaWdodCkKIHsKICAgICBpbnQgd2lkdGgsIGhlaWdodDsKIAotICAgIGlm IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9E SVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAg ICAgICAgIHdpZHRoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hS RVNdOwogICAgICAgICBoZWlnaHQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWVJFU107CiAgICAgfSBlbHNlIHsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBiMzZhNGUyNmNhZjdhMDUwYTZlODU5MzUyN2MyNmJmYTRmNDdhNzU4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc4ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzQgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZWJmNjNmZi4uZmI4MjJmNCAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NDMs NiArNjQzLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzI5LDUyICs3NzIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuICovCiAg ICAgICAgICAgICAgICAgaWYgKCEodmFsICYgVkJFX0RJU1BJX05PQ0xFQVJN RU0pKSB7CiAgICAgICAgICAgICAgICAgICAgIG1lbXNldChzLT52cmFtX3B0 ciwgMCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAqIHMtPnZiZV9saW5lX29mZnNldCk7 CiAgICAgICAgICAgICAgICAgfQotCi0gICAgICAgICAgICAgICAgLyogd2Ug aW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAqLwotICAgICAgICAg ICAgICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLwotICAg ICAgICAgICAgICAgIHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdB X0dGWF9NSVNDXSAmIH4weDBjKSB8IDB4MDQgfAotICAgICAgICAgICAgICAg ICAgICBWR0FfR1IwNl9HUkFQSElDU19NT0RFOwotICAgICAgICAgICAgICAg IHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENHQSBtb2RlcyAq LwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBz LT52YmVfbGluZV9vZmZzZXQgPj4gMzsKLSAgICAgICAgICAgICAgICAvKiB3 aWR0aCAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0hfRElT UF0gPQotICAgICAgICAgICAgICAgICAgICAocy0+dmJlX3JlZ3NbVkJFX0RJ U1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKLSAgICAgICAgICAgICAgICAv KiBoZWlnaHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCi0gICAg ICAgICAgICAgICAgaCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Z UkVTXSAtIDE7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfVl9E SVNQX0VORF0gPSBoOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+MHg0 MikgfAotICAgICAgICAgICAgICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8 ICgoaCA+PiAzKSAmIDB4NDApOwotICAgICAgICAgICAgICAgIC8qIGxpbmUg Y29tcGFyZSB0byAxMDIzICovCi0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7Ci0gICAgICAgICAg ICAgICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7Ci0KLSAg ICAgICAgICAgICAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X0JQUF0gPT0gNCkgewotICAgICAgICAgICAgICAgICAgICBzaGlmdF9jb250 cm9sID0gMDsKLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9D TE9DS19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KLSAgICAg ICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAgICAgICAgICBzaGlm dF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAgICAgLyogc2V0IGNo YWluIDQgbW9kZSAqLwotICAgICAgICAgICAgICAgICAgICBzLT5zcltWR0Ff U0VRX01FTU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07Ci0gICAgICAg ICAgICAgICAgICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gfD0g VkdBX1NSMDJfQUxMX1BMQU5FUzsKLSAgICAgICAgICAgICAgICB9Ci0gICAg ICAgICAgICAgICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0Ff R0ZYX01PREVdICYgfjB4NjApIHwKLSAgICAgICAgICAgICAgICAgICAgKHNo aWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBkb3VibGUgc2NhbiAq LwogICAgICAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7CiAgICAgICAgICAgICB9Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBlZjhiZDFiMjZhNTk3YWU3YzMwNjIyNzY1NTYyNjY0MDA5M2NiN2Ey IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggZmI4MjJmNC4uMzczOTc1OCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03NjIsNiArNzYyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSA5MjQ1NmMwYzM2MWQ1ZGE4NThkNTQ0NjQ3YzYyNDZlYzc4ZWQ5MjJi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMzczOTc1OC4uZTdiZTk3 ZSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDgzLDYgKzQ4 NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTUxNCw2ICs1MTcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTUzMiwxMCArNTM2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiZWJiNGY1ODA5MDFmYjYzODAxNmQ5ODUxYTI4ZGJiODNkNDRiM2E2 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3Bv cnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRy ZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3 L3ZnYS5jIHwgMjUgKysrKysrKysrKysrKysrKysrKy0tLS0tLQogMSBmaWxl IGNoYW5nZWQsIDE5IGluc2VydGlvbnMoKyksIDYgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBlOGIxY2Uw Li43MjI1NmYxIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtMzQsNiArMzQsOCBAQAogCiAjaW5jbHVkZSAicWVtdS10aW1lci5o IgogCisjaW5jbHVkZSA8YXNzZXJ0Lmg+CisKIC8vI2RlZmluZSBERUJVR19W R0EKIC8vI2RlZmluZSBERUJVR19WR0FfTUVNCiAvLyNkZWZpbmUgREVCVUdf VkdBX1JFRwpAQCAtNjg0LDExICs2ODYsNyBAQCBzdGF0aWMgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFs ICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7 Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRl eF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwg PDwgMTYpOwogICAgICAgICAgICAgYnJlYWs7CkBAIC03ODcsMTMgKzc4NSwy MSBAQCB1aW50MzJfdCB2Z2FfbWVtX3JlYWRiKHZvaWQgKm9wYXF1ZSwgdGFy Z2V0X3BoeXNfYWRkcl90IGFkZHIpCiAKICAgICBpZiAocy0+c3JbNF0gJiAw eDA4KSB7CiAgICAgICAgIC8qIGNoYWluIDQgbW9kZSA6IHNpbXBsZXN0IGFj Y2VzcyAqLworICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7 CiAgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSBpZiAocy0+Z3JbNV0gJiAweDEwKSB7CiAgICAgICAgIC8qIG9kZC9ldmVu IG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGluZykgKi8KICAgICAgICAgcGxh bmUgPSAocy0+Z3JbNF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJl dCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsK KyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMt PnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0 YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRk ciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5s YXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAg ICAgICAgaWYgKCEocy0+Z3JbNV0gJiAweDA4KSkgewpAQCAtODgwLDYgKzg4 Niw3IEBAIHZvaWQgdmdhX21lbV93cml0ZWIodm9pZCAqb3BhcXVlLCB0YXJn ZXRfcGh5c19hZGRyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBw bGFuZSA9IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUp OwogICAgICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CisgICAgICAgICAg ICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgICAgICBz LT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVN CiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40OiBbMHgleF1cbiIs IGFkZHIpOwpAQCAtODkzLDYgKzkwMCw5IEBAIHZvaWQgdmdhX21lbV93cml0 ZWIodm9pZCAqb3BhcXVlLCB0YXJnZXRfcGh5c19hZGRyX3QgYWRkciwgdWlu dDMyX3QgdmFsKQogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRy ID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBp ZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICBy ZXR1cm47CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0 clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAg ICAgICBwcmludGYoInZnYTogb2RkL2V2ZW46IFsweCV4XVxuIiwgYWRkcik7 CkBAIC05NjUsNiArOTc1LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYih2b2lk ICpvcGFxdWUsIHRhcmdldF9waHlzX2FkZHJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zclsyXTsKICAgICAgICAgcy0+cGxh bmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZv bnQgY2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFz a107CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBz LT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAg fQogICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0K ICAgICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJd ICYgfndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9t YXNrKTsKLS0gCjIuMS40Cgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAzNGRiMDlmYjk5Njc0NDE0MDhhMWZmMDU3OWQ1NTMyMjJjZjE3NDQx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9u XQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMTMgKysrKysrKysrLS0t LQogMSBmaWxlIGNoYW5nZWQsIDkgaW5zZXJ0aW9ucygrKSwgNCBkZWxldGlv bnMoLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4 IDcyMjU2ZjEuLmYzOWEyZWQgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBi L2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDExIEBAIHN0YXRpYyB1aW50MzJf dCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZd Owogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyBp bmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FTdGF0ZSAqcykKK3sKKyAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGljIHZvaWQgdmdhX2Jpb3Nf aW5pdChWR0FTdGF0ZSAqcyk7CiBzdGF0aWMgdm9pZCB2Z2Ffc2NyZWVuX2R1 bXAodm9pZCAqb3BhcXVlLCBjb25zdCBjaGFyICpmaWxlbmFtZSk7CiAKQEAg LTUzNSw3ICs1NDAsNyBAQCBzdGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhW R0FTdGF0ZSAqcykKICAgICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwog ICAgIHVpbnQzMl90IGJpdHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsK IAotICAgIGlmICghKHJbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7 CiAgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8g ZG8gKi8KICAgICAgICAgcmV0dXJuOwogICAgIH0KQEAgLTExNjUsNyArMTE3 MCw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FTdGF0ZSAq cywKIHsKICAgICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwg bGluZV9jb21wYXJlOwogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAg ICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAg ICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAgLTE1NTEsNyArMTU1Niw3IEBA IHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdBU3RhdGUgKnMpCiB7CiAgICAg aW50IHJldDsKICNpZmRlZiBDT05GSUdfQk9DSFNfVkJFCi0gICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJ X0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAg ICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF07CiAg ICAgfSBlbHNlCiAjZW5kaWYKQEAgLTE1NjYsNyArMTU3MSw3IEBAIHN0YXRp YyB2b2lkIHZnYV9nZXRfcmVzb2x1dGlvbihWR0FTdGF0ZSAqcywgaW50ICpw d2lkdGgsIGludCAqcGhlaWdodCkKICAgICBpbnQgd2lkdGgsIGhlaWdodDsK IAogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0 aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAg ICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd OwogICAgIH0gZWxzZQotLSAKMi4xLjQKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkZjIyODAyM2NlMzllOGI3MmJkNWExOThiODcwMzMxOWI4YjljYTIz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8g cWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29v cGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5j IHwgNzAgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQx IGluc2VydGlvbnMoKyksIDI5IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L3ZnYS5jIGIvaHcvdmdhLmMKaW5kZXggZjM5YTJlZC4uZGJhOTNkNyAx MDA2NDQKLS0tIGEvaHcvdmdhLmMKKysrIGIvaHcvdmdhLmMKQEAgLTYxNSw2 ICs2MTUsNDYgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdBU3Rh dGUgKnMpCiAgICAgcy0+dmJlX3N0YXJ0X2FkZHIgID0gb2Zmc2V0IC8gNDsK IH0KIAorLyogd2UgaW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAq Lworc3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpz KQoreworICAgIGludCBoLCBzaGlmdF9jb250cm9sOworCisgICAgaWYgKCF2 YmVfZW5hYmxlZChzKSkgeworICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9m ZiAtLSBub3RoaW5nIHRvIGRvICovCisgICAgICAgIHJldHVybjsKKyAgICB9 CisKKyAgICAvKiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KKyAg ICBzLT5nclsweDA2XSA9IChzLT5nclsweDA2XSAmIH4weDBjKSB8IDB4MDU7 CisgICAgcy0+Y3JbMHgxN10gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisg ICAgcy0+Y3JbMHgxM10gPSBzLT52YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAg ICAvKiB3aWR0aCAqLworICAgIHMtPmNyWzB4MDFdID0gKHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAzKSAtIDE7CisgICAgLyogaGVp Z2h0IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLworICAgIGggPSBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOworICAgIHMt PmNyWzB4MTJdID0gaDsKKyAgICBzLT5jclsweDA3XSA9IChzLT5jclsweDA3 XSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4MDIpIHwgKCho ID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJlIHRvIDEwMjMg Ki8KKyAgICBzLT5jclsweDE4XSA9IDB4ZmY7CisgICAgcy0+Y3JbMHgwN10g fD0gMHgxMDsKKyAgICBzLT5jclsweDA5XSB8PSAweDQwOworCisgICAgaWYg KHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKKyAg ICAgICAgc2hpZnRfY29udHJvbCA9IDA7CisgICAgICAgIHMtPnNyWzB4MDFd ICY9IH44OyAvKiBubyBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7Cisg ICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hh aW4gNCBtb2RlICovCisgICAgICAgIHMtPnNyWzRdIHw9IDB4MDg7CisgICAg ICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3Jb Ml0gfD0gMHgwZjsKKyAgICB9CisgICAgcy0+Z3JbMHgwNV0gPSAocy0+Z3Jb MHgwNV0gJiB+MHg2MCkgfCAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBz LT5jclsweDA5XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KK30K Kwogc3RhdGljIHVpbnQzMl90IHZiZV9pb3BvcnRfcmVhZF9pbmRleCh2b2lk ICpvcGFxdWUsIHVpbnQzMl90IGFkZHIpCiB7CiAgICAgVkdBU3RhdGUgKnMg PSBvcGFxdWU7CkBAIC02OTgsNyArNzM4LDYgQEAgc3RhdGljIHZvaWQgdmJl X2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRF WF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAoKHZhbCAmIFZCRV9ESVNQSV9F TkFCTEVEKSAmJgogICAgICAgICAgICAgICAgICEocy0+dmJlX3JlZ3NbVkJF X0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkpIHsK LSAgICAgICAgICAgICAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsKICAgICAg ICAgICAgICAgICAKICAgICAgICAgICAgICAgICBpZiAocy0+dnJhbV9nbWZu ICE9IHMtPmxmYl9hZGRyKSB7CiAgICAgICAgICAgICAgICAgICAgICBzZXRf dnJhbV9tYXBwaW5nKHMsIHMtPmxmYl9hZGRyLCBzLT5sZmJfZW5kKTsKQEAg LTcwOSw0MCArNzQ4LDEzIEBAIHN0YXRpYyB2b2lkIHZiZV9pb3BvcnRfd3Jp dGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVf cmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVfRElTUElfRU5B QkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAg ICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAKICAgICAg ICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91bGQgYmUgZG9u ZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICghKHZhbCAmIFZC RV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAgICAgICAgICBt ZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gKiBzLT52 YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0KLQotICAgICAg ICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGljIG1v ZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAgICAgaW4gQklP UykgKi8KLSAgICAgICAgICAgICAgICBzLT5nclsweDA2XSA9IChzLT5nclsw eDA2XSAmIH4weDBjKSB8IDB4MDU7IC8qIGdyYXBoaWMgbW9kZSArIG1lbW9y eSBtYXAgMSAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4MTddIHw9IDM7 IC8qIG5vIENHQSBtb2RlcyAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4 MTNdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAg ICAgLyogd2lkdGggKi8KLSAgICAgICAgICAgICAgICBzLT5jclsweDAxXSA9 IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OwotICAgICAgICAgICAgICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KLSAgICAgICAgICAgICAgICBoID0gcy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdIC0gMTsKLSAgICAgICAgICAgICAg ICBzLT5jclsweDEyXSA9IGg7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbMHgw N10gPSAocy0+Y3JbMHgwN10gJiB+MHg0MikgfAotICAgICAgICAgICAgICAg ICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAzKSAmIDB4NDApOwot ICAgICAgICAgICAgICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCi0g ICAgICAgICAgICAgICAgcy0+Y3JbMHgxOF0gPSAweGZmOwotICAgICAgICAg ICAgICAgIHMtPmNyWzB4MDddIHw9IDB4MTA7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbMHgwOV0gfD0gMHg0MDsKLQotICAgICAgICAgICAgICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0KSB7Ci0gICAg ICAgICAgICAgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwotICAgICAgICAg ICAgICAgICAgICBzLT5zclsweDAxXSAmPSB+ODsgLyogbm8gZG91YmxlIGxp bmUgKi8KLSAgICAgICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAg ICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAg ICAgcy0+c3JbNF0gfD0gMHgwODsgLyogc2V0IGNoYWluIDQgbW9kZSAqLwot ICAgICAgICAgICAgICAgICAgICBzLT5zclsyXSB8PSAweDBmOyAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgfQotICAgICAg ICAgICAgICAgIHMtPmdyWzB4MDVdID0gKHMtPmdyWzB4MDVdICYgfjB4NjAp IHwgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+ Y3JbMHgwOV0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCiAgICAg ICAgICAgICB9IGVsc2UgewogICAgICAgICAgICAgICAgIC8qIFhYWDogdGhl IGJpb3Mgc2hvdWxkIGRvIHRoYXQgKi8KICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA1ZTg0MGU2MjkyODI1ZmNhZTkwZjY3NTBhOGY1N2JjOTg5ZTI4YzVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4t dHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRy ZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMSArCiAx IGZpbGUgY2hhbmdlZCwgMSBpbnNlcnRpb24oKykKCmRpZmYgLS1naXQgYS9o dy92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGRiYTkzZDcuLmIxYjUwMWIgMTAw NjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3ZnYS5jCkBAIC03MjksNiAr NzI5LDcgQEAgc3RhdGljIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZv aWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9 IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwYjBjZjgxMTBlOTdiMGNiZDBkYTczZDExMTYzZTI2OTc4ODIyNzU3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVt dS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVy IDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwg OSArKysrKysrKy0KIDEgZmlsZSBjaGFuZ2VkLCA4IGluc2VydGlvbnMoKyks IDEgZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3Zn YS5jCmluZGV4IGIxYjUwMWIuLjU3NzhjN2QgMTAwNjQ0Ci0tLSBhL2h3L3Zn YS5jCisrKyBiL2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDggQEAgc3RhdGlj IHVpbnQzMl90IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBh bmQyWzI1Nl07CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAor c3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpzKTsK Kwogc3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQVN0YXRlICpz KQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDQ5LDYgKzQ1MSw3 IEBAIHN0YXRpYyB2b2lkIHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVl LCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50 ZigidmdhOiB3cml0ZSBTUiV4ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwg dmFsKTsKICNlbmRpZgogICAgICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2 YWwgJiBzcl9tYXNrW3MtPnNyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0 ZV92Z2FyZWdzKHMpOwogICAgICAgICBpZiAocy0+c3JfaW5kZXggPT0gMSkg cy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgYnJlYWs7CiAg ICAgY2FzZSAweDNjNzoKQEAgLTQ3Nyw2ICs0ODAsNyBAQCBzdGF0aWMgdm9p ZCB2Z2FfaW9wb3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUg R1IleCA9IDB4JTAyeFxuIiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYK ICAgICAgICAgcy0+Z3Jbcy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tz LT5ncl9pbmRleF07CisgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsK ICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSAweDNiNDoKICAgICBjYXNlIDB4 M2Q0OgpAQCAtNDkwLDggKzQ5NCwxMCBAQCBzdGF0aWMgdm9pZCB2Z2FfaW9w b3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMy X3QgdmFsKQogICAgICAgICAvKiBoYW5kbGUgQ1IwLTcgcHJvdGVjdGlvbiAq LwogICAgICAgICBpZiAoKHMtPmNyWzB4MTFdICYgMHg4MCkgJiYgcy0+Y3Jf aW5kZXggPD0gNykgewogICAgICAgICAgICAgLyogY2FuIGFsd2F5cyB3cml0 ZSBiaXQgNCBvZiBDUjcgKi8KLSAgICAgICAgICAgIGlmIChzLT5jcl9pbmRl eCA9PSA3KQorICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IDcpIHsK ICAgICAgICAgICAgICAgICBzLT5jcls3XSA9IChzLT5jcls3XSAmIH4weDEw KSB8ICh2YWwgJiAweDEwKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CisgICAgICAgICAgICB9CiAgICAgICAgICAgICByZXR1 cm47CiAgICAgICAgIH0KICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7 CkBAIC01MDcsNiArNTEzLDcgQEAgc3RhdGljIHZvaWQgdmdhX2lvcG9ydF93 cml0ZSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZhbDsKICAg ICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CisgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3JfaW5kZXgp IHsKICAgICAgICAgY2FzZSAweDAwOgotLSAKMi4xLjQKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Tue May 10 11:27:18 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 10 May 2016 11:27:18 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b05nr-0003PK-LF; Tue, 10 May 2016 11:26:15 +0000 Received: from mail6.bemta6.messagelabs.com ([85.158.143.247]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b05nq-0003P7-Aa; Tue, 10 May 2016 11:26:14 +0000 Received: from [85.158.143.35] by server-2.bemta-6.messagelabs.com id E6/48-09532-555C1375; Tue, 10 May 2016 11:26:13 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpil+JIrShJLcpLzFFi42LJaLquqht01DD cYMVZdYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmTO+YzFYw8z1HxZFFD5ka GI9d5ehi5OIQEjjNKHGoZT8zhLOKUeLqic9ADicHs4CrxI19m9kgbEWJC/caWEBsXgFBiZMzn 4DZEgKaEnferGIHsUUEiiR2nnsJZrMJ6EnMPTuJCaJXR+Ll/tVMIAuEBboZJdpaPkMNMpPY+G MpWAOLgKrE2SO9jBMYeWYh2T0Lye5ZSHbPYuQAimtKrN+lD2FKSyz/xwFRLS+x/e0c5llA25g FWhglru07COU0MkrsfNDNBDNzSvdDdgg7W+Lfhp+MEHaGxIQTp1gx1RRJ7L33mQXCzpdY+rWB EVNNrcTf6/Oh5ldJ/Fq2iQVTTSujRF9LNMRBTYwS0x9fYMZUVC+x5MkDqOYaiVm/X2IxKE1i0 78FUEckS0x58YodU02uxOqzx6HmZ0lMvvIFi5oKideTVkLZpRJH3x9lXMCYsIpRvTi1qCy1SN dQL6koMz2jJDcxM0fX0MBMLze1uDgxPTUnMalYLzk/dxMjMCUyAMEOxp3PnQ4xSnIwKYnyCk4 xDBfiS8pPqcxILM6ILyrNSS0+xCjDwaEkwRtzBCgnWJSanlqRlpkDTM4waQkOHiUR3vUgad7i gsTc4sx0iNQpRmOOJdOvrWXiWHTz8X4mIZa8/LxUKXHeySClAiClGaV5cINgWeMSo6yUMC8j0 GlCPAWpRbmZJajyrxjFORiVhHkDQKbwZOaVwO17BXQKE9Apcmz6IKeUJCKkpBoYPY2Opy53aZ KI6vvZWzrxak/Zlowz565aft132GKu0Mk+h9j9cQq97JFF1hUT5rj+uf/5Yc4vM3HW457Sass uNTDHTZo6+XTUW2ad7KmpKvaXK/f8dnoXllkz/RXTqrBabinnA78uMu9ZK+sj5fLsZaxzuR+D j9TlTs2w3Dl7ZjfnLXfUOeSlxFKckWioxVxUnAgAz65KchUEAAA= X-Env-Sender: gdunlap@xenbits.xen.org X-Msg-Ref: server-6.tower-21.messagelabs.com!1462879569!13429514!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 40017 invoked from network); 10 May 2016 11:26:10 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-6.tower-21.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 10 May 2016 11:26:10 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b05nb-00047L-JD; Tue, 10 May 2016 11:25:59 +0000 Received: from gdunlap by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1b05nb-0007wp-H4; Tue, 10 May 2016 11:25:59 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 10 May 2016 11:25:59 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 179 (CVE-2016-3710, CVE-2016-3712) - QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2016-3710,CVE-2016-3712 / XSA-179 version 5 QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks UPDATES IN VERSION 5 ==================== Fixed credits section. Zuozhi Fzz was mistakenly credited with CVE-2016-3710, but should have been credited with CVE-2016-3712. ISSUE DESCRIPTION ================= Qemu VGA module allows banked access to video memory using the window at 0xa00000 and it supports different access modes with different address calculations. But an attacker can easily change access modes after setting the bank register. This is CVE-2016-3710. Qemu VGA module allows guest to edit certain registers in 'vbe' and 'vga' modes. ie. guest could set certain 'VGA' registers while in 'VBE' mode. This is CVE-2016-3712. IMPACT ====== A privileged guest user could use CVE-2016-3710 to exceed the bank address window and write beyond the said memory area, potentially leading to arbitrary code execution with privileges of the Qemu process. If the system is not using stubdomains, this will be in domain 0. A privileged guest user could use CVE-2016-3712 to cause potential integer overflow or OOB read access issues in Qemu, resulting in a DoS of the guest itself. More dangerous effect, such as data leakage or code execution, are not known but cannot be ruled out. VULNERABLE SYSTEMS ================== Versions of qemu shipped with all Xen versions are vulnerable. Xen systems running on x86 with HVM guests, with the qemu process running in dom0 are vulnerable. Only guests provided with the "stdvga" emulated video card can exploit the vulnerability. The default "cirrus" emulated video card is not vulnerable. (With xl the emulated video card is controlled by the "stdvga=" and "vga=" domain configuration options.) ARM systems are not vulnerable. Systems using only PV guests are not vulnerable. For VMs whose qemu process is running in a stub domain, a successful attacker will only gain the privileges of that stubdom, which should be only over the guest itself. Both upstream-based versions of qemu (device_model_version="qemu-xen") and `traditional' qemu (device_model_version="qemu-xen-traditional") are vulnerable. MITIGATION ========== Running only PV guests will avoid the issue. Running HVM guests with the device model in a stubdomain will mitigate the issue. Changing the video card emulation to cirrus (stdvga=0, vga="cirrus", in the xl domain configuraton) will avoid the vulnerability. CREDITS ======= CVE-2016-3710 was discovered and reported by "Wei Xiao and Qinghao Tang of 360 Marvel Team" of 360.cn Inc. CVE-2016-3712 was discovered and reported by Zuozhi Fzz of Alibaba Inc. RESOLUTION ========== Applying the appropriate attached patch resolves this issue for systems using upstream-based versions of qemu. Patch 0001 addresses CVE-2016-3710, and patches 0002-0005 address CVE-2016-3712. qemu-upstream, xen-unstable: xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.6: xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.5: xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.4: xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.3: xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-xen-traditional, unstable: xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ sha256sum xsa179* e216959d099ed807b282026e1e4d558ce0c0e8ead284ddd9d0581cef5fcef0ad xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 708e40d85866540567d2d915731c6e9876cd0d6754bc6696650ed71d8e48d710 xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch 767007028189bce54df9769ff6cb9db7cd37b5c2afaac86787b30c8f2a03f342 xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch 1fb507c307b093e5e4471d4a5e567db419adecbfe772a68bf91722836bcba4cd xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch ff4327d598d2e0912dc3a22ab9ba14d6c79bfa5a154714b6c5da761d5ded403f xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 059bfa59f39222ad6991e6c0c8338385f2a317e379d02d0c2cb0e5a8138cb329 xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch c6dfe50d694b75670bbdec78a3ce6293a8da46d5ff8b47f1e0d7e4fac22260bf xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch f57e31e8b81f1161537277a0934013c1fb3bbf57319543dfd10a5dc5fdfb927b xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch 14900af2b13d362ffb98c061e76b13965965284399dd9b9f1a4e41b41f34a3a3 xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2b2e7d306fd95fa74490ee1694af1af9438d7ff738d8c6aecc7d99d4eb96dcb2 xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch e6108266bf0abada5fc6e0a3ca65c2702fcae610826ead6a215d622ec3ed973a xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 05bdfae312078b22542e9f18db98fae11dbfd9785184b0b3c8de8c94797e1427 xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch 56dee9d0f54357391d5249a01ab28a1879dd7d1a36b4d147d68c62688d8af22b xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch 10603f5ffe317de328dc46139a6b5ff6081040ca6368ee1642b5343db9bcfda1 xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch e0dbc47086f0346a9554b98468256bc325d67440f5d786c5825390d293896509 xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 9b0cfdba369437a3e3da86690cd0c6d9d05e39d1168065e4d11ff2de4e546feb xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3c56f255d2ff3e5ae24f15de69cbd4abf3ff0d2dbb63a686937d5e2ab1989d59 xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch b1ddabf50720635efa17a7c57778acd2e1d9fd6a6424038455163991afecb044 xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch 0f34eeda817f39d3b5e484d535aa29bae16e7e36b4dc042bc41ef0e1844bf3cb xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch c24b3401a7ed45f853de7c96b998d50461254e9082a706753b814ddcbc285b17 xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch de59a098a39c1adbc86f3857dbb2b655479f97756d46e017e83b41c1390a98b9 xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3686d0b5c3603819fe0eca65ed62161c676e6abd8e676e513f6d4b3d46e7a997 xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch 18d01083e2f4000816ecf26d85da5cb337f540da447e6252f348a5b538cc7fa4 xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch 811ce206293b54ad601eb0a0e59bee502277c642f73f1ea0bad712efc528f82d xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2097c9e4eac66a65e07607664d1aaec288c4c8b0f147c73636c1b2532cdd20dd xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 132fd7f7d1f7bee4d934daefc24ec65080ae09b7d0e07a86edc3b683cad8156a xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch b83c29c3737415bf05da14c0b856abeb3bdbb77fba7d538956535ed67160abe8 xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch 834266af0499167e6d8e2e87bb770b79c0e8480ab5ea72064298656ccdd36741 xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch a5c3c38340261c7ff44047289aad6276e501930e214c40350056a364469965cd xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch 4869ad504cba52f537dae102e226b020422e3b6494ffba3b865eb2893bee0e9e xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXMcStAAoJEIP+FMlX6CvZ8g4H/i3UdCtqBWhs5ZAa7arEzDLC GggGZ0MQDriujr+10MN6OyM7W493AxHC2+8Ck0jft1YrUh0ojlVt3/tqd+f4yI1I 1S5ueWQYS0vEqH4lxiftp4MRc9/wWpKnEGdo3437AyDuuZwqDfTjvt8yDrfMLCuI 2v3ofXfSOeBiNYqSSsz3Hbmlb9ZqohGRIGqc74C4D+RKYJlDBVO6GNDMv9lI5tdW LE5PqaCxndZVO+uFAgIg6tw+GOObk2IyEBi00R5FmkW5g9QP2i2em+/usKAb8l3v bFjBEuw0SkL/CZF3fpoBNjTej/5HHSJwhB2rDY2NFV1hwmt36G8NPKKwLrcQKdU= =O3qx -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAzYmYxODE3MDc5YmIwZDgwYzBkOGE4NmE3YzdkZDBiZmU5MGViODJl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3 L2Rpc3BsYXkvdmdhLmMgfCAyNCArKysrKysrKysrKysrKysrKystLS0tLS0K IDEgZmlsZSBjaGFuZ2VkLCAxOCBpbnNlcnRpb25zKCspLCA2IGRlbGV0aW9u cygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IDY1N2U5ZjEuLmI5MTkxY2EgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTc5LDYgKzE3OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKICAgICAgICAgICAgIHNpemUg PSAweDgwMDA7CiAgICAgICAgICAgICBicmVhazsKICAgICAgICAgfQorICAg ICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6ZSA8PSBzLT52cmFtX3NpemUpOwog ICAgICAgICBtZW1vcnlfcmVnaW9uX2luaXRfYWxpYXMoJnMtPmNoYWluNF9h bGlhcywgbWVtb3J5X3JlZ2lvbl9vd25lcigmcy0+dnJhbSksCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAidmdhLmNoYWluNCIsICZzLT52 cmFtLCBvZmZzZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2Fk ZF9zdWJyZWdpb25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwg YmFzZSwKQEAgLTcxNiwxMSArNzE3LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dy aXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAg ICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9C QU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9J TkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52 YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAg ICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAg ICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsK ICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7 CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwog ICAgICAgICAgICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAt ODE5LDEzICs4MTYsMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FD b21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3Jb VkdBX1NFUV9NRU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAg ICAgICAgLyogY2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisg ICAgICAgIGFzc2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAg cmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5n cltWR0FfR0ZYX01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZl biBtb2RlIChha2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBs YW5lID0gKHMtPmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRy ICYgMSk7Ci0gICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFt X3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9 CisgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSB7CiAgICAgICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAq LworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+ dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAg ICAgfQogICAgICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFt X3B0cilbYWRkcl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9N T0RFXSAmIDB4MDgpKSB7CkBAIC04ODIsNiArODg3LDcgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAg ICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZH QV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNz ZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJh bV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAg ICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1U X3BseCAiXVxuIiwgYWRkcik7CkBAIC04OTUsNiArOTAxLDkgQEAgdm9pZCB2 Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIs IHVpbnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgewogICAgICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQog ICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYg REVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9l dmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTk2 OCw2ICs5NzcsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0 YXRlICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBt YXNrID0gcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV07CiAgICAgICAgIHMt PnBsYW5lX3VwZGF0ZWQgfD0gbWFzazsgLyogb25seSB1c2VkIHRvIGRldGVj dCBmb250IGNoYW5nZSAqLwogICAgICAgICB3cml0ZV9tYXNrID0gbWFzazE2 W21hc2tdOworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkg Pj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm47CisgICAg ICAgIH0KICAgICAgICAgKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRy XSA9CiAgICAgICAgICAgICAoKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVth ZGRyXSAmIH53cml0ZV9tYXNrKSB8CiAgICAgICAgICAgICAodmFsICYgd3Jp dGVfbWFzayk7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBiZmEwZjE1MWE1NjRhODNiNWEyNmYzZTkxN2RhOTg2NzRiZjNjZjYy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMgfCAxMyArKysr KysrKystLS0tCiAxIGZpbGUgY2hhbmdlZCwgOSBpbnNlcnRpb25zKCspLCA0 IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMg Yi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IGI5MTkxY2EuLjBjMWM1YjUgMTAw NjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92 Z2EuYwpAQCAtMTQyLDYgKzE0MiwxMSBAQCBzdGF0aWMgdWludDMyX3QgZXhw YW5kNFsyNTZdOwogc3RhdGljIHVpbnQxNl90IGV4cGFuZDJbMjU2XTsKIHN0 YXRpYyB1aW50OF90IGV4cGFuZDR0bzhbMTZdOwogCitzdGF0aWMgaW5saW5l IGJvb2wgdmJlX2VuYWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCit7CisgICAg cmV0dXJuIHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQ7Cit9CisKIHN0YXRpYyB2b2lkIHZnYV91cGRh dGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBo d2FkZHIgYmFzZSwgb2Zmc2V0LCBzaXplOwpAQCAtNTY0LDcgKzU2OSw3IEBA IHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNvbW1vblN0YXRlICpz KQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3JlZ3M7CiAgICAgdWludDMy X3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zmc2V0OwogCi0gICAgaWYg KCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFC TEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKICAgICAgICAg LyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLwogICAg ICAgICByZXR1cm47CiAgICAgfQpAQCAtMTA1OCw3ICsxMDYzLDcgQEAgc3Rh dGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNvbW1vblN0YXRlICpzLAog ewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxpbmVfb2Zmc2V0LCBsaW5l X2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkgeworICAgIGlmICh2 YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZi ZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9z dGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAg LTEzODMsNyArMTM4OCw3IEBAIHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdB Q29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJldDsKIAotICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQ SV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAg ICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdOwog ICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7CkBAIC0xMzk1LDcgKzE0 MDAsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jlc29sdXRpb24oVkdBQ29t bW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQgKnBoZWlnaHQpCiB7CiAg ICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkg eworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0aCA9 IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAgICAg aGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdOwog ICAgIH0gZWxzZSB7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA3ZmE1YzJjNWRjOWY5YmY4NzhjMWU4NjY5ZWI5NjQ0ZDcwYTcxZTcx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3Bs YXkvdmdhLmMgfCA3OCArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQ0 IGluc2VydGlvbnMoKyksIDM0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IDBj MWM1YjUuLmUxMmY1YWMgMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMK KysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNjQ0LDYgKzY0NCw0OSBAQCBz dGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICBzLT52YmVfc3RhcnRfYWRkciAgPSBvZmZzZXQgLyA0OwogfQogCisv KiB3ZSBpbml0aWFsaXplIHRoZSBWR0EgZ3JhcGhpYyBtb2RlICovCitzdGF0 aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdBQ29tbW9uU3RhdGUgKnMp Cit7CisgICAgaW50IGgsIHNoaWZ0X2NvbnRyb2w7CisKKyAgICBpZiAoIXZi ZV9lbmFibGVkKHMpKSB7CisgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2Zm IC0tIG5vdGhpbmcgdG8gZG8gKi8KKyAgICAgICAgcmV0dXJuOworICAgIH0K KworICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLworICAg IHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdBX0dGWF9NSVNDXSAm IH4weDBjKSB8IDB4MDQgfAorICAgICAgICBWR0FfR1IwNl9HUkFQSElDU19N T0RFOworICAgIHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENH QSBtb2RlcyAqLworICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBzLT52 YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAgICAvKiB3aWR0aCAqLworICAgIHMt PmNyW1ZHQV9DUlRDX0hfRElTUF0gPQorICAgICAgICAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKKyAgICAvKiBoZWln aHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCisgICAgaCA9IHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAtIDE7CisgICAgcy0+ Y3JbVkdBX0NSVENfVl9ESVNQX0VORF0gPSBoOworICAgIHMtPmNyW1ZHQV9D UlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+ MHg0MikgfAorICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAz KSAmIDB4NDApOworICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCisg ICAgcy0+Y3JbVkdBX0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7CisgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7CisgICAgcy0+Y3Jb VkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7CisKKyAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgeworICAgICAgICBz aGlmdF9jb250cm9sID0gMDsKKyAgICAgICAgcy0+c3JbVkdBX1NFUV9DTE9D S19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KKyAgICB9IGVs c2UgeworICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKKyAgICAgICAgLyog c2V0IGNoYWluIDQgbW9kZSAqLworICAgICAgICBzLT5zcltWR0FfU0VRX01F TU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07CisgICAgICAgIC8qIGFj dGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gfD0gVkdBX1NSMDJfQUxMX1BMQU5FUzsKKyAgICB9Cisg ICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0FfR0ZYX01PREVd ICYgfjB4NjApIHwKKyAgICAgICAgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Cisg ICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBk b3VibGUgc2NhbiAqLworfQorCiBzdGF0aWMgdWludDMyX3QgdmJlX2lvcG9y dF9yZWFkX2luZGV4KHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkcikKIHsK ICAgICBWR0FDb21tb25TdGF0ZSAqcyA9IG9wYXF1ZTsKQEAgLTczMCw1MiAr NzczLDE5IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9w YXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAo KHZhbCAmIFZCRV9ESVNQSV9FTkFCTEVEKSAmJgogICAgICAgICAgICAgICAg ICEocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKLSAgICAgICAgICAgICAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKIAogICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9WSVJUX1dJRFRIXSA9IDA7CiAgICAgICAgICAgICAg ICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hfT0ZGU0VUXSA9IDA7 CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X1lfT0ZGU0VUXSA9IDA7CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gfD0gVkJFX0RJU1BJX0VOQUJMRUQ7 CiAgICAgICAgICAgICAgICAgdmJlX2ZpeHVwX3JlZ3Mocyk7CisgICAgICAg ICAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAgICAg ICAgICAgLyogY2xlYXIgdGhlIHNjcmVlbiAqLwogICAgICAgICAgICAgICAg IGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAg ICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAg ICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFw aGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBz LT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+ MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZf R1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JU Q19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zm c2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAg ICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVT XSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5 IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGgg PSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAg ICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsK LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAo cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAg ICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAw eDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAy MyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09N UEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAg aWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAg ICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0g fjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7 Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8K LSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9E RV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAv KiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAg IHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9Q TEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMt PmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4w eDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8 IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FO XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAg IH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgcy0+YmFua19vZmZzZXQgPSAw OwogICAgICAgICAgICAgfQotLSAKMS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSAyMDY4MTkyZGNjY2Q4YTgwZGRkZmNjOGRmNjE2NGNmOWMyNmUwZmM0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMg fCAxICsKIDEgZmlsZSBjaGFuZ2VkLCAxIGluc2VydGlvbigrKQoKZGlmZiAt LWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmlu ZGV4IGUxMmY1YWMuLmVlZWI5YzggMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkv dmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNzYzLDYgKzc2Myw3 IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwg dWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZC RV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAgICAgIHMtPnZiZV9y ZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICB2YmVfZml4 dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5r X21hc2s7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmZDNjMTM2YjNlMTQ4MmNkMGVjNzI4NWQ2YmMyYTNlNmE2MmMzOGQ3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkv dmdhLmMgfCA2ICsrKysrKwogMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9u cygrKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IGVlZWI5YzguLjRhNTVlYzYgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTQyLDYgKzE0Miw4IEBAIHN0YXRpYyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07 CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4 X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcyk7CisKIHN0YXRpYyBpbmxpbmUg Ym9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKQEAgLTQ4NCw2ICs0ODYsNyBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBTUiV4 ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwgdmFsKTsKICNlbmRpZgogICAg ICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2YWwgJiBzcl9tYXNrW3MtPnNy X2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogICAg ICAgICBpZiAocy0+c3JfaW5kZXggPT0gVkdBX1NFUV9DTE9DS19NT0RFKSB7 CiAgICAgICAgICAgICBzLT51cGRhdGVfcmV0cmFjZV9pbmZvKHMpOwogICAg ICAgICB9CkBAIC01MTUsNiArNTE4LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgR1IleCA9IDB4JTAyeFxu Iiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+Z3Jb cy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tzLT5ncl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgdmdhX3Vw ZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwogICAgICAgICBicmVhazsKICAgICBj YXNlIFZHQV9DUlRfSU06CkBAIC01MzMsMTAgKzUzNywxMiBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgICAgICBpZiAocy0+Y3JfaW5kZXggPT0g VkdBX0NSVENfT1ZFUkZMT1cpIHsKICAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1dd ICYgfjB4MTApIHwKICAgICAgICAgICAgICAgICAgICAgKHZhbCAmIDB4MTAp OworICAgICAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAg ICAgICAgICAgIH0KICAgICAgICAgICAgIHJldHVybjsKICAgICAgICAgfQog ICAgICAgICBzLT5jcltzLT5jcl9pbmRleF0gPSB2YWw7CisgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3Jf aW5kZXgpIHsKICAgICAgICAgY2FzZSBWR0FfQ1JUQ19IX1RPVEFMOgotLSAK MS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSA2NzMwNWZjZjQ3MzNmYjRmYjllYWNjMzM0MzZlYzY2YTdjMDM1MmVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQwOjU4ICswMTAwClN1YmplY3Q6IFtQQVRDSCAxLzVdIHZnYTogZml4IGJh bmtlZCBhY2Nlc3MgYm91bmRzIGNoZWNraW5nIChDVkUtMjAxNi0zNzEwKQoK dmdhIGFsbG93cyBiYW5rZWQgYWNjZXNzIHRvIHZpZGVvIG1lbW9yeSB1c2lu ZyB0aGUgd2luZG93IGF0IDB4YTAwMDAwCmFuZCBpdCBzdXBwb3J0cyBhIGRp ZmZlcmVudCBhY2Nlc3MgbW9kZXMgd2l0aCBkaWZmZXJlbnQgYWRkcmVzcwpj YWxjdWxhdGlvbnMuCgpUaGUgVkJFIGJvY2hzIGV4dGVudGlvbnMgc3VwcG9y dCBiYW5rZWQgYWNjZXNzIHRvbywgdXNpbmcgdGhlClZCRV9ESVNQSV9JTkRF WF9CQU5LIHJlZ2lzdGVyLiAgVGhlIGNvZGUgdHJpZXMgdG8gdGFrZSB0aGUg ZGlmZmVyZW50CmFkZHJlc3MgY2FsY3VsYXRpb25zIGludG8gYWNjb3VudCBh bmQgYXBwbGllcyBkaWZmZXJlbnQgbGltaXRzIHRvClZCRV9ESVNQSV9JTkRF WF9CQU5LIGRlcGVuZGluZyBvbiB0aGUgY3VycmVudCBhY2Nlc3MgbW9kZS4K CldoaWNoIGlzIHByb2JhYmx5IGVmZmVjdGl2ZSBpbiBzdG9wcGluZyBtaXNw cm9ncmFtbWluZyBieSBhY2NpZGVudC4KQnV0IGZyb20gYSBzZWN1cml0eSBw b2ludCBvZiB2aWV3IGNvbXBsZXRlbHkgdXNlbGVzcyBhcyBhbiBhdHRhY2tl cgpjYW4gZWFzaWx5IGNoYW5nZSBhY2Nlc3MgbW9kZXMgYWZ0ZXIgc2V0dGlu ZyB0aGUgYmFuayByZWdpc3Rlci4KCkRyb3AgdGhlIGJvZ3VzIGNoZWNrLCBh ZGQgcmFuZ2UgY2hlY2tzIHRvIHZnYV9tZW1fe3JlYWRiLHdyaXRlYn0KaW5z dGVhZC4KCkZpeGVzOiBDVkUtMjAxNi0zNzEwClJlcG9ydGVkLWJ5OiBRaW5n aGFvIFRhbmcgPGx1b2RhbG9uZ2RlQGdtYWlsLmNvbT4KU2lnbmVkLW9mZi1i eTogR2VyZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1v ZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVs Lm9yZz4KLS0tCiBody92Z2EuYyB8IDI0ICsrKysrKysrKysrKysrKysrKy0t LS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMoKyksIDYgZGVs ZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCA2OTM5OWRiLi5jZDdlN2FhIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMjAwLDYgKzIwMCw3IEBAIHN0YXRpYyB2b2lk IHZnYV91cGRhdGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CiAgICAgICAgIGJhc2Ug Kz0gaXNhX21lbV9iYXNlOworICAgICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6 ZSA8PSBzLT52cmFtX3NpemUpOwogICAgICAgICByZWdpb24gPSBnX21hbGxv YyhzaXplb2YoKnJlZ2lvbikpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2lu aXRfYWxpYXMocmVnaW9uLCAidmdhLmNoYWluNCIsICZzLT52cmFtLCBvZmZz ZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2FkZF9zdWJyZWdp b25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwgYmFzZSwKQEAg LTc0NywxMSArNzQ4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJy ZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAg ICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBd ID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19t YXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAg ICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9Cisg ICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAg ICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUyLDEzICs4 NDksMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9N RU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyog Y2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFz c2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+ dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZY X01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChh a2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMt PmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0g ICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsK KyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAg IHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAg ICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAg ICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAg ICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRk cl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4 MDgpKSB7CkBAIC05MTUsNiArOTIwLDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRl YihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9 ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIg PCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRk cl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAg cHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxu IiwgYWRkcik7CkBAIC05MjgsNiArOTM0LDkgQEAgdm9pZCB2Z2FfbWVtX3dy aXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAg aWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAg ICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQogICAgICAgICAg ICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdB X01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgi IFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTEwMDEsNiArMTAx MCw5IEBAIHZvaWQgdmdhX21lbV93cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMs IGh3YWRkciBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIG1hc2sgPSBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXTsKICAgICAgICAgcy0+cGxhbmVf dXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQg Y2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFza107 CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52 cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAgfQog ICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0KICAg ICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdICYg fndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9tYXNr KTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlN2Q3YzA5Njg5YzcyNWJlNGYwYjQ4OWI0YmEzYjc0MWM1ZDlhYjMx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQxOjM5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzVdIHZnYTogYWRkIHZi ZV9lbmFibGVkKCkgaGVscGVyCgpNYWtlcyBjb2RlIGEgYml0IGVhc2llciB0 byByZWFkLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFubiA8a3JheGVs QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGlu aSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92Z2EuYyB8IDEz ICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGluc2VydGlvbnMo KyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9o dy92Z2EuYwppbmRleCBjZDdlN2FhLi5jYjFjMTRkIDEwMDY0NAotLS0gYS9o dy92Z2EuYworKysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSwxMSBAQCBz dGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIHN0YXRpYyB2b2lkIHZn YV9zY3JlZW5fZHVtcCh2b2lkICpvcGFxdWUsIGNvbnN0IGNoYXIgKmZpbGVu YW1lLCBib29sIGNzd2l0Y2gsCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgRXJyb3IgKiplcnJwKTsKIAorc3RhdGljIGlubGluZSBib29sIHZiZV9l bmFibGVkKFZHQUNvbW1vblN0YXRlICpzKQoreworICAgIHJldHVybiBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9F TkFCTEVEOworfQorCiBzdGF0aWMgdm9pZCB2Z2FfdXBkYXRlX21lbW9yeV9h Y2Nlc3MoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgTWVtb3J5UmVnaW9u ICpyZWdpb24sICpvbGRfcmVnaW9uID0gcy0+Y2hhaW40X2FsaWFzOwpAQCAt NTk1LDcgKzYwMCw3IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZH QUNvbW1vblN0YXRlICpzKQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3Jl Z3M7CiAgICAgdWludDMyX3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zm c2V0OwogCi0gICAgaWYgKCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAm IFZCRV9ESVNQSV9FTkFCTEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQo cykpIHsKICAgICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGlu ZyB0byBkbyAqLwogICAgICAgICByZXR1cm47CiAgICAgfQpAQCAtMTE3Niw3 ICsxMTgxLDcgQEAgc3RhdGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNv bW1vblN0YXRlICpzLAogewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxp bmVfb2Zmc2V0LCBsaW5lX2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5l X29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRf YWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBh cmUgPSA2NTUzNTsKQEAgLTE2MjYsNyArMTYzMSw3IEBAIHN0YXRpYyBpbnQg dmdhX2dldF9icHAoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJl dDsKIAotICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFi bGVkKHMpKSB7CiAgICAgICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQ SV9JTkRFWF9CUFBdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7 CkBAIC0xNjM4LDcgKzE2NDMsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jl c29sdXRpb24oVkdBQ29tbW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQg KnBoZWlnaHQpCiB7CiAgICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICB3aWR0aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Y UkVTXTsKICAgICAgICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdOwogICAgIH0gZWxzZSB7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSAyNzAwMjUwYzZiMjgyNDhiNzBiMTVmZDZlMGI0YzlkYjhiMmRkZmI3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjI0ICswMTAwClN1YmplY3Q6IFtQQVRDSCAzLzVdIHZnYTogZmFjdG9y IG91dCB2Z2EgcmVnaXN0ZXIgc2V0dXAKCldoZW4gZW5hYmxpbmcgdmJlIG1v ZGUgcWVtdSB3aWxsIHNldHVwIGEgYnVuY2ggb2YgdmdhIHJlZ2lzdGVycyB0 byBtYWtlCnN1cmUgdGhlIHZnYSBlbXVsYXRpb24gb3BlcmF0ZXMgaW4gY29y cmVjdCBtb2RlIGZvciBhIGxpbmVhcgpmcmFtZWJ1ZmZlci4gIE1vdmUgdGhh dCBjb2RlIHRvIGEgc2VwYXJhdGUgZnVuY3Rpb24gc28gd2UgY2FuIGNhbGwg aXQKZnJvbSBvdGhlciBwbGFjZXMgdG9vLgoKU2lnbmVkLW9mZi1ieTogR2Vy ZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6 IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4K LS0tCiBody92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIDEgZmls ZSBjaGFuZ2VkLCA0NCBpbnNlcnRpb25zKCspLCAzNSBkZWxldGlvbnMoLSkK CmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGNiMWMx NGQuLmFkN2NhNDkgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3Zn YS5jCkBAIC02NzUsNiArNjc1LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1 cF9yZWdzKFZHQUNvbW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9h ZGRyICA9IG9mZnNldCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKKworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAg ICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAq LworICAgICAgICByZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBt b2RlICsgbWVtb3J5IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVND XSA9IChzLT5ncltWR0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8Cisg ICAgICAgIFZHQV9HUjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdB X0NSVENfTU9ERV0gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+ Y3JbVkdBX0NSVENfT0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAz OworICAgIC8qIHdpZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQ XSA9CisgICAgICAgIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJF U10gPj4gMykgLSAxOworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdIC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1Bf RU5EXSA9IGg7CisgICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMt PmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgo aCA+PiA3KSAmIDB4MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyog bGluZSBjb21wYXJlIHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19M SU5FX0NPTVBBUkVdID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVS RkxPV10gfD0gMHgxMDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0g fD0gMHg0MDsKKworICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfQlBQXSA9PSA0KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwor ICAgICAgICBzLT5zcltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBu byBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0 X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICov CisgICAgICAgIHMtPnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9T UjA0X0NITl80TTsKKyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAq LworICAgICAgICBzLT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0Ff U1IwMl9BTExfUExBTkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01P REVdID0gKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAg ICAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19N QVhfU0NBTl0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisK IHN0YXRpYyB1aW50MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAq b3BhcXVlLCB1aW50MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRl ICpzID0gb3BhcXVlOwpAQCAtNzYxLDUzICs4MDQsMTkgQEAgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVY X0VOQUJMRToKICAgICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VO QUJMRUQpICYmCiAgICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewot ICAgICAgICAgICAgICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAg ICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRf V0lEVEhdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfWF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSB8PSBWQkVfRElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2 YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUg c2NyZWVuIChzaG91bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAg ICAgICAgIGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewog ICAgICAgICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElT UElfSU5ERVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAg ICAgICAgICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxp emUgdGhlIFZHQSBncmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAg ICAgICAgICAgICAgICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAv KiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAg ICAgICBzLT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlT Q10gJiB+MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdB X0dSMDZfR1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xp bmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8K LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAg ICAgICAgICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRF WF9YUkVTXSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0 IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAg ICAgIGggPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAx OwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRd ID0gaDsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxP V10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAg ICAgICAgICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4g MykgJiAweDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUg dG8gMTAyMyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJ TkVfQ09NUEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMt PmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAg ICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09 IDQpIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7 Ci0gICAgICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9E RV0gJj0gfjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAg ICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJv bCA9IDI7Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1v ZGUgKi8KLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1P UllfTU9ERV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAg ICAgICAvKiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAg ICAgICAgIHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAy X0FMTF9QTEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAg ICAgIHMtPmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RF XSAmIH4weDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250 cm9sIDw8IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01B WF9TQ0FOXSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAg ICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUg YmlvcyBzaG91bGQgZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJh bmtfb2Zmc2V0ID0gMDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA5OGJlMWZiNmVhMzFjMTMwMjY0MDI1ZGU4ZWM4N2FkMmM3NTMyZjIx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCA0LzVdIHZnYTogdXBkYXRl IHZnYSByZWdpc3RlciBzZXR1cCBvbiB2YmUgY2hhbmdlcwoKQ2FsbCB0aGUg bmV3IHZiZV91cGRhdGVfdmdhcmVncygpIGZ1bmN0aW9uIG9uIHZiZSBjb25m aWd1cmF0aW9uCmNoYW5nZXMsIHRvIG1ha2Ugc3VyZSB2Z2EgcmVnaXN0ZXJz IGFyZSB1cC10by1kYXRlLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFu biA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8g U3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92 Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0aW9uKCspCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBhZDdjYTQ5 Li4xYWM4MDgzIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtNzk0LDYgKzc5NCw3IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9k YXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAg ICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAg dmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwZjJlOWU2YjNjNzVhODdlOWVjOWE4MGQ3YmM5MTQ4MTBlM2YzZGEy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQzOjM2ICswMTAwClN1YmplY3Q6IFtQQVRDSCA1LzVdIHZnYTogbWFrZSBz dXJlIHZnYSByZWdpc3RlciBzZXR1cCBmb3IgdmJlIHN0YXlzIGludGFjdAog KENWRS0yMDE2LTM3MTIpLgoKQ2FsbCB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSB3 aGVuIHRoZSBndWVzdCB0b3VjaGVzIEdGWCwgU0VRIG9yIENSVApyZWdpc3Rl cnMsIHRvIG1ha2Ugc3VyZSB0aGUgdmdhIHJlZ2lzdGVycyB3aWxsIGFsd2F5 cyBoYXZlIHRoZQp2YWx1ZXMgbmVlZGVkIGJ5IHZiZSBtb2RlLiAgVGhpcyBt YWtlcyBzdXJlIHRoZSBzYW5pdHkgY2hlY2tzCmFwcGxpZWQgYnkgdmJlX2Zp eHVwX3JlZ3MoKSBhcmUgZWZmZWN0aXZlLgoKV2l0aG91dCB0aGlzIGd1ZXN0 cyBjYW4gbXVjayB3aXRoIHNoaWZ0X2NvbnRyb2wsIGNhbiB0dXJuIG9uIHBs YW5hcgp2Z2EgbW9kZXMgb3IgdGV4dCBtb2RlIGVtdWxhdGlvbiB3aGlsZSBW QkUgaXMgYWN0aXZlLCBtYWtpbmcgcWVtdQp0YWtlIGNvZGUgcGF0aHMgbWVh bnQgZm9yIENHQSBjb21wYXRpYmlsaXR5LCBidXQgd2l0aCB0aGUgdmVyeQps YXJnZSBkaXNwbGF5IHdpZHRocyBhbmQgaGVpZ3RzIHNldHRhYmxlIHVzaW5n IFZCRSByZWdpc3RlcnMuCgpXaGljaCBpcyBnb29kIGZvciBvbmUgb3IgYW5v dGhlciBidWZmZXIgb3ZlcmZsb3cuICBOb3QgdGhhdApjcml0aWNhbCBhcyB0 aGV5IHR5cGljYWxseSByZWFkIG92ZXJmbG93cyBoYXBwZW5pbmcgc29tZXdo ZXJlCmluIHRoZSBkaXNwbGF5IGNvZGUuICBTbyBndWVzdHMgY2FuIERvUyBi eSBjcmFzaGluZyBxZW11IHdpdGggYQpzZWdmYXVsdCwgYnV0IGl0IGlzIHBy b2JhYmx5IG5vdCBwb3NzaWJsZSB0byBicmVhayBvdXQgb2YgdGhlIFZNLgoK Rml4ZXM6IENWRS0yMDE2LTM3MTIKUmVwb3J0ZWQtYnk6IFp1b3poaSBGenog PHp1b3poaS5menpAYWxpYmFiYS1pbmMuY29tPgpSZXBvcnRlZC1ieTogUCBK IFAgPHBwYW5kaXRAcmVkaGF0LmNvbT4KU2lnbmVkLW9mZi1ieTogR2VyZCBI b2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0 ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0t CiBody92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdlZCwgNiBpbnNl cnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCAxYWM4MDgzLi4xN2IzODllIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSw4IEBAIHN0YXRpYyB1aW50 OF90IGV4cGFuZDR0bzhbMTZdOwogc3RhdGljIHZvaWQgdmdhX3NjcmVlbl9k dW1wKHZvaWQgKm9wYXF1ZSwgY29uc3QgY2hhciAqZmlsZW5hbWUsIGJvb2wg Y3N3aXRjaCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICBFcnJvciAq KmVycnApOwogCitzdGF0aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpOworCiBzdGF0aWMgaW5saW5lIGJvb2wgdmJlX2Vu YWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgcmV0dXJuIHMtPnZi ZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VO QUJMRUQ7CkBAIC01MTUsNiArNTE3LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgU1IleCA9IDB4JTAyeFxu Iiwgcy0+c3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+c3Jb cy0+c3JfaW5kZXhdID0gdmFsICYgc3JfbWFza1tzLT5zcl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgaWYgKHMt PnNyX2luZGV4ID09IFZHQV9TRVFfQ0xPQ0tfTU9ERSkgewogICAgICAgICAg ICAgcy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgfQpAQCAt NTQ2LDYgKzU0OSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpv cGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg cHJpbnRmKCJ2Z2E6IHdyaXRlIEdSJXggPSAweCUwMnhcbiIsIHMtPmdyX2lu ZGV4LCB2YWwpOwogI2VuZGlmCiAgICAgICAgIHMtPmdyW3MtPmdyX2luZGV4 XSA9IHZhbCAmIGdyX21hc2tbcy0+Z3JfaW5kZXhdOworICAgICAgICB2YmVf dXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhzKTsKICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSBWR0FfQ1JU X0lNOgpAQCAtNTY0LDEwICs1NjgsMTIgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IFZHQV9DUlRDX09W RVJGTE9XKSB7CiAgICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfT1ZF UkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDEwKSB8 CiAgICAgICAgICAgICAgICAgICAgICh2YWwgJiAweDEwKTsKKyAgICAgICAg ICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgICAgICB9 CiAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgIH0KICAgICAgICAgcy0+ Y3Jbcy0+Y3JfaW5kZXhdID0gdmFsOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAKICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7CiAg ICAgICAgIGNhc2UgVkdBX0NSVENfSF9UT1RBTDoKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAyNTkzNWZkMWVkM2M0MzM3YWE0YjYxOTAyZWM1ODBlMTdiMTMwYjYz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNDMwZTdlZC4uNjllMjU1 NCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0NSwxMSArNzQ2LDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUwLDEzICs4NDcsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MTMs NiArOTE4LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjYsNiArOTMyLDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5OSw2ICsxMDA4LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAyOTRhNmMxNWEzODY2OWY4MDkyMGI4ODUyODcxOTE1MTRhYjdkOWZm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjllMjU1 NC4uZGExZWI0YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU5Myw3ICs1OTgsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzQsNyArMTE3OSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjI3 LDcgKzE2MzIsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzOSw3ICsxNjQ0LDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkMzc3OTE4YzIzZDg1ZjY0ZDAxOTE0YjQzYmZhYmMwYTQ2ZmU5NzRh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZGExZWI0YS4uY2Y1Zjk3ZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NzMs NiArNjczLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU5LDUzICs4MDIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBmYmNmZjgyY2Q3OTk4ZjkzNTU2YzI4ZGZjNjNiYmJkN2IyMDZjOGNl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggY2Y1Zjk3ZS4uNjNkMWE3MCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03OTIsNiArNzkyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmNzkyNmM3MzY4NWMyYmM3MTI0MjY1ZjU2N2JhZmI1MDI4NjRjNWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjNkMWE3MC4uZGQ2MTI0 NiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTEzLDYgKzUx NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0NCw2ICs1NDcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU2MiwxMCArNTY2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBjOWExYTJkN2JmM2RiNTRiNzk2MWRmNGI4YTMwOTQ2YTc2N2I0ODUz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMmJiODVhZS4uZjcxNDJi YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0MSwxMSArNzQyLDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODQ2LDEzICs4NDMsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MDks NiArOTE0LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjIsNiArOTI4LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5NSw2ICsxMDA0LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBmY2QyNjJhOTY2YzcyZGFjNDEyN2Q1ZmM0YTlkYTNjZjI0MjM5NWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjcxNDJi YS4uZDQ5M2IwYSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU4OSw3ICs1OTQsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzAsNyArMTE3NSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjIz LDcgKzE2MjgsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzNSw3ICsxNjQwLDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA2MGM4N2Q0MjVjNDFmNDNhYzgxY2IzM2IyN2FmNjg0NmYwMjJiNDVj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZDQ5M2IwYS4uM2U0YzUyZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02Njks NiArNjY5LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU1LDUzICs3OTgsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA0OTQ4NGViYjc5ZTRlNGVkYWMyNjA5ZmRhYTZlZjNhYzFhNGVlNmQw IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggM2U0YzUyZS4uZjI2NWI5NyAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03ODgsNiArNzg4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAxMTA5YjhiZDA1OTQ3YWMwOWI2ZjI0ZjQ2YTlmNzg0YzM5Y2FjNDZl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjI2NWI5Ny4uYTNmZWIy ZCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTA5LDYgKzUx MSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0MCw2ICs1NDMsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU1OCwxMCArNTYy LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiMTZkYjVhYjJkMGM1ZmY3NTVlMDg5NDJmNGM4ZThmOWY4NjE4ZWFl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNTJlYWYwNS4uYjU3Nzcx MiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNzgsNiArMTc4LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcygmcy0+Y2hhaW40X2FsaWFzLCBtZW1vcnlfcmVnaW9uX293bmVyKCZz LT52cmFtKSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJ2 Z2EuY2hhaW40IiwgJnMtPnZyYW0sIG9mZnNldCwgc2l6ZSk7CiAgICAgICAg IG1lbW9yeV9yZWdpb25fYWRkX3N1YnJlZ2lvbl9vdmVybGFwKHMtPmxlZ2Fj eV9hZGRyZXNzX3NwYWNlLCBiYXNlLApAQCAtNzE1LDExICs3MTYsNyBAQCB2 b2lkIHZiZV9pb3BvcnRfd3JpdGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQz Ml90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIHZiZV9maXh1 cF9yZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIGNhc2Ug VkJFX0RJU1BJX0lOREVYX0JBTks6Ci0gICAgICAgICAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgewotICAgICAgICAg ICAgICB2YWwgJj0gKHMtPnZiZV9iYW5rX21hc2sgPj4gMik7Ci0gICAgICAg ICAgICB9IGVsc2UgewotICAgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKLSAgICAgICAgICAgIH0KKyAgICAgICAgICAgIHZhbCAmPSBz LT52YmVfYmFua19tYXNrOwogICAgICAgICAgICAgcy0+dmJlX3JlZ3Nbcy0+ dmJlX2luZGV4XSA9IHZhbDsKICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0 ID0gKHZhbCA8PCAxNik7CiAgICAgICAgICAgICB2Z2FfdXBkYXRlX21lbW9y eV9hY2Nlc3Mocyk7CkBAIC04MTgsMTMgKzgxNSwyMSBAQCB1aW50MzJfdCB2 Z2FfbWVtX3JlYWRiKFZHQUNvbW1vblN0YXRlICpzLCBod2FkZHIgYWRkcikK IAogICAgIGlmIChzLT5zcltWR0FfU0VRX01FTU9SWV9NT0RFXSAmIFZHQV9T UjA0X0NITl80TSkgewogICAgICAgICAvKiBjaGFpbiA0IG1vZGUgOiBzaW1w bGVzdCBhY2Nlc3MgKi8KKyAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFt X3NpemUpOwogICAgICAgICByZXQgPSBzLT52cmFtX3B0clthZGRyXTsKICAg ICB9IGVsc2UgaWYgKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiAweDEwKSB7CiAg ICAgICAgIC8qIG9kZC9ldmVuIG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGlu ZykgKi8KICAgICAgICAgcGxhbmUgPSAocy0+Z3JbVkdBX0dGWF9QTEFORV9S RUFEXSAmIDIpIHwgKGFkZHIgJiAxKTsKLSAgICAgICAgcmV0ID0gcy0+dnJh bV9wdHJbKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmVdOworICAgICAgICBh ZGRyID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgIGlm IChhZGRyID49IHMtPnZyYW1fc2l6ZSkgeworICAgICAgICAgICAgcmV0dXJu IDB4ZmY7CisgICAgICAgIH0KKyAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJb YWRkcl07CiAgICAgfSBlbHNlIHsKICAgICAgICAgLyogc3RhbmRhcmQgVkdB IGxhdGNoZWQgYWNjZXNzICovCisgICAgICAgIGlmIChhZGRyICogc2l6ZW9m KHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CiAgICAgICAgIHMtPmxhdGNoID0gKCh1 aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRyXTsKIAogICAgICAgICBpZiAo IShzLT5ncltWR0FfR0ZYX01PREVdICYgMHgwOCkpIHsKQEAgLTg4MSw2ICs4 ODYsNyBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRlICpz LCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBwbGFuZSA9 IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gJiBtYXNrKSB7 CisgICAgICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAg ICAgICAgICAgICBzLT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBE RUJVR19WR0FfTUVNCiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40 OiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTg5NCw2 ICs5MDAsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRl ICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBtYXNr ID0gKDEgPDwgcGxhbmUpOwogICAgICAgICBpZiAocy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRyID0gKChh ZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBpZiAoYWRk ciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICByZXR1cm47 CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0clthZGRy XSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAgICAgICBw cmludGYoInZnYTogb2RkL2V2ZW46IFsweCIgVEFSR0VUX0ZNVF9wbHggIl1c biIsIGFkZHIpOwpAQCAtOTY3LDYgKzk3Niw5IEBAIHZvaWQgdmdhX21lbV93 cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMsIGh3YWRkciBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zcltWR0FfU0VRX1BMQU5FX1dS SVRFXTsKICAgICAgICAgcy0+cGxhbmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBv bmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQgY2hhbmdlICovCiAgICAgICAgIHdy aXRlX21hc2sgPSBtYXNrMTZbbWFza107CisgICAgICAgIGlmIChhZGRyICog c2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybjsKKyAgICAgICAgfQogICAgICAgICAoKHVpbnQzMl90ICop cy0+dnJhbV9wdHIpW2FkZHJdID0KICAgICAgICAgICAgICgoKHVpbnQzMl90 ICopcy0+dnJhbV9wdHIpW2FkZHJdICYgfndyaXRlX21hc2spIHwKICAgICAg ICAgICAgICh2YWwgJiB3cml0ZV9tYXNrKTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlMDI2ODU5ZTlhZWNmODYzNWRhZjA2ZTlmYzIzMjUyMzlmNDU4OTU5 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggYjU3Nzcx Mi4uZWJmNjNmZiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIGh3YWRkciBiYXNlLCBvZmZzZXQsIHNpemU7CkBAIC01 NjMsNyArNTY4LDcgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpCiAgICAgdWludDE2X3QgKnIgPSBzLT52YmVfcmVn czsKICAgICB1aW50MzJfdCBiaXRzLCBsaW5lbGVuZ3RoLCBtYXh5LCBvZmZz ZXQ7CiAKLSAgICBpZiAoIShyW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQpKSB7CisgICAgaWYgKCF2YmVfZW5hYmxlZChz KSkgewogICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9mZiAtLSBub3RoaW5n IHRvIGRvICovCiAgICAgICAgIHJldHVybjsKICAgICB9CkBAIC0xMDU3LDcg KzEwNjIsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X29mZnNldHMoVkdBQ29t bW9uU3RhdGUgKnMsCiB7CiAgICAgdWludDMyX3Qgc3RhcnRfYWRkciwgbGlu ZV9vZmZzZXQsIGxpbmVfY29tcGFyZTsKIAotICAgIGlmIChzLT52YmVfcmVn c1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVE KSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIGxpbmVf b2Zmc2V0ID0gcy0+dmJlX2xpbmVfb2Zmc2V0OwogICAgICAgICBzdGFydF9h ZGRyID0gcy0+dmJlX3N0YXJ0X2FkZHI7CiAgICAgICAgIGxpbmVfY29tcGFy ZSA9IDY1NTM1OwpAQCAtMTM4Miw3ICsxMzg3LDcgQEAgc3RhdGljIGludCB2 Z2FfZ2V0X2JwcChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBpbnQgcmV0 OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFC TEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJs ZWQocykpIHsKICAgICAgICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX0JQUF07CiAgICAgfSBlbHNlIHsKICAgICAgICAgcmV0ID0gMDsK QEAgLTEzOTQsNyArMTM5OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfcmVz b2x1dGlvbihWR0FDb21tb25TdGF0ZSAqcywgaW50ICpwd2lkdGgsIGludCAq cGhlaWdodCkKIHsKICAgICBpbnQgd2lkdGgsIGhlaWdodDsKIAotICAgIGlm IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9E SVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAg ICAgICAgIHdpZHRoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hS RVNdOwogICAgICAgICBoZWlnaHQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWVJFU107CiAgICAgfSBlbHNlIHsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBiMzZhNGUyNmNhZjdhMDUwYTZlODU5MzUyN2MyNmJmYTRmNDdhNzU4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc4ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzQgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZWJmNjNmZi4uZmI4MjJmNCAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NDMs NiArNjQzLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzI5LDUyICs3NzIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuICovCiAg ICAgICAgICAgICAgICAgaWYgKCEodmFsICYgVkJFX0RJU1BJX05PQ0xFQVJN RU0pKSB7CiAgICAgICAgICAgICAgICAgICAgIG1lbXNldChzLT52cmFtX3B0 ciwgMCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAqIHMtPnZiZV9saW5lX29mZnNldCk7 CiAgICAgICAgICAgICAgICAgfQotCi0gICAgICAgICAgICAgICAgLyogd2Ug aW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAqLwotICAgICAgICAg ICAgICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLwotICAg ICAgICAgICAgICAgIHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdB X0dGWF9NSVNDXSAmIH4weDBjKSB8IDB4MDQgfAotICAgICAgICAgICAgICAg ICAgICBWR0FfR1IwNl9HUkFQSElDU19NT0RFOwotICAgICAgICAgICAgICAg IHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENHQSBtb2RlcyAq LwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBz LT52YmVfbGluZV9vZmZzZXQgPj4gMzsKLSAgICAgICAgICAgICAgICAvKiB3 aWR0aCAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0hfRElT UF0gPQotICAgICAgICAgICAgICAgICAgICAocy0+dmJlX3JlZ3NbVkJFX0RJ U1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKLSAgICAgICAgICAgICAgICAv KiBoZWlnaHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCi0gICAg ICAgICAgICAgICAgaCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Z UkVTXSAtIDE7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfVl9E SVNQX0VORF0gPSBoOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+MHg0 MikgfAotICAgICAgICAgICAgICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8 ICgoaCA+PiAzKSAmIDB4NDApOwotICAgICAgICAgICAgICAgIC8qIGxpbmUg Y29tcGFyZSB0byAxMDIzICovCi0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7Ci0gICAgICAgICAg ICAgICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7Ci0KLSAg ICAgICAgICAgICAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X0JQUF0gPT0gNCkgewotICAgICAgICAgICAgICAgICAgICBzaGlmdF9jb250 cm9sID0gMDsKLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9D TE9DS19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KLSAgICAg ICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAgICAgICAgICBzaGlm dF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAgICAgLyogc2V0IGNo YWluIDQgbW9kZSAqLwotICAgICAgICAgICAgICAgICAgICBzLT5zcltWR0Ff U0VRX01FTU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07Ci0gICAgICAg ICAgICAgICAgICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gfD0g VkdBX1NSMDJfQUxMX1BMQU5FUzsKLSAgICAgICAgICAgICAgICB9Ci0gICAg ICAgICAgICAgICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0Ff R0ZYX01PREVdICYgfjB4NjApIHwKLSAgICAgICAgICAgICAgICAgICAgKHNo aWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBkb3VibGUgc2NhbiAq LwogICAgICAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7CiAgICAgICAgICAgICB9Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBlZjhiZDFiMjZhNTk3YWU3YzMwNjIyNzY1NTYyNjY0MDA5M2NiN2Ey IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggZmI4MjJmNC4uMzczOTc1OCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03NjIsNiArNzYyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSA5MjQ1NmMwYzM2MWQ1ZGE4NThkNTQ0NjQ3YzYyNDZlYzc4ZWQ5MjJi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMzczOTc1OC4uZTdiZTk3 ZSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDgzLDYgKzQ4 NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTUxNCw2ICs1MTcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTUzMiwxMCArNTM2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiZWJiNGY1ODA5MDFmYjYzODAxNmQ5ODUxYTI4ZGJiODNkNDRiM2E2 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3Bv cnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRy ZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3 L3ZnYS5jIHwgMjUgKysrKysrKysrKysrKysrKysrKy0tLS0tLQogMSBmaWxl IGNoYW5nZWQsIDE5IGluc2VydGlvbnMoKyksIDYgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBlOGIxY2Uw Li43MjI1NmYxIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtMzQsNiArMzQsOCBAQAogCiAjaW5jbHVkZSAicWVtdS10aW1lci5o IgogCisjaW5jbHVkZSA8YXNzZXJ0Lmg+CisKIC8vI2RlZmluZSBERUJVR19W R0EKIC8vI2RlZmluZSBERUJVR19WR0FfTUVNCiAvLyNkZWZpbmUgREVCVUdf VkdBX1JFRwpAQCAtNjg0LDExICs2ODYsNyBAQCBzdGF0aWMgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFs ICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7 Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRl eF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwg PDwgMTYpOwogICAgICAgICAgICAgYnJlYWs7CkBAIC03ODcsMTMgKzc4NSwy MSBAQCB1aW50MzJfdCB2Z2FfbWVtX3JlYWRiKHZvaWQgKm9wYXF1ZSwgdGFy Z2V0X3BoeXNfYWRkcl90IGFkZHIpCiAKICAgICBpZiAocy0+c3JbNF0gJiAw eDA4KSB7CiAgICAgICAgIC8qIGNoYWluIDQgbW9kZSA6IHNpbXBsZXN0IGFj Y2VzcyAqLworICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7 CiAgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSBpZiAocy0+Z3JbNV0gJiAweDEwKSB7CiAgICAgICAgIC8qIG9kZC9ldmVu IG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGluZykgKi8KICAgICAgICAgcGxh bmUgPSAocy0+Z3JbNF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJl dCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsK KyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMt PnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0 YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRk ciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5s YXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAg ICAgICAgaWYgKCEocy0+Z3JbNV0gJiAweDA4KSkgewpAQCAtODgwLDYgKzg4 Niw3IEBAIHZvaWQgdmdhX21lbV93cml0ZWIodm9pZCAqb3BhcXVlLCB0YXJn ZXRfcGh5c19hZGRyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBw bGFuZSA9IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUp OwogICAgICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CisgICAgICAgICAg ICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgICAgICBz LT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVN CiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40OiBbMHgleF1cbiIs IGFkZHIpOwpAQCAtODkzLDYgKzkwMCw5IEBAIHZvaWQgdmdhX21lbV93cml0 ZWIodm9pZCAqb3BhcXVlLCB0YXJnZXRfcGh5c19hZGRyX3QgYWRkciwgdWlu dDMyX3QgdmFsKQogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRy ID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBp ZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICBy ZXR1cm47CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0 clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAg ICAgICBwcmludGYoInZnYTogb2RkL2V2ZW46IFsweCV4XVxuIiwgYWRkcik7 CkBAIC05NjUsNiArOTc1LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYih2b2lk ICpvcGFxdWUsIHRhcmdldF9waHlzX2FkZHJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zclsyXTsKICAgICAgICAgcy0+cGxh bmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZv bnQgY2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFz a107CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBz LT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAg fQogICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0K ICAgICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJd ICYgfndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9t YXNrKTsKLS0gCjIuMS40Cgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAzNGRiMDlmYjk5Njc0NDE0MDhhMWZmMDU3OWQ1NTMyMjJjZjE3NDQx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9u XQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMTMgKysrKysrKysrLS0t LQogMSBmaWxlIGNoYW5nZWQsIDkgaW5zZXJ0aW9ucygrKSwgNCBkZWxldGlv bnMoLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4 IDcyMjU2ZjEuLmYzOWEyZWQgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBi L2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDExIEBAIHN0YXRpYyB1aW50MzJf dCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZd Owogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyBp bmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FTdGF0ZSAqcykKK3sKKyAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGljIHZvaWQgdmdhX2Jpb3Nf aW5pdChWR0FTdGF0ZSAqcyk7CiBzdGF0aWMgdm9pZCB2Z2Ffc2NyZWVuX2R1 bXAodm9pZCAqb3BhcXVlLCBjb25zdCBjaGFyICpmaWxlbmFtZSk7CiAKQEAg LTUzNSw3ICs1NDAsNyBAQCBzdGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhW R0FTdGF0ZSAqcykKICAgICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwog ICAgIHVpbnQzMl90IGJpdHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsK IAotICAgIGlmICghKHJbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7 CiAgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8g ZG8gKi8KICAgICAgICAgcmV0dXJuOwogICAgIH0KQEAgLTExNjUsNyArMTE3 MCw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FTdGF0ZSAq cywKIHsKICAgICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwg bGluZV9jb21wYXJlOwogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAg ICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAg ICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAgLTE1NTEsNyArMTU1Niw3IEBA IHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdBU3RhdGUgKnMpCiB7CiAgICAg aW50IHJldDsKICNpZmRlZiBDT05GSUdfQk9DSFNfVkJFCi0gICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJ X0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAg ICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF07CiAg ICAgfSBlbHNlCiAjZW5kaWYKQEAgLTE1NjYsNyArMTU3MSw3IEBAIHN0YXRp YyB2b2lkIHZnYV9nZXRfcmVzb2x1dGlvbihWR0FTdGF0ZSAqcywgaW50ICpw d2lkdGgsIGludCAqcGhlaWdodCkKICAgICBpbnQgd2lkdGgsIGhlaWdodDsK IAogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0 aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAg ICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd OwogICAgIH0gZWxzZQotLSAKMi4xLjQKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkZjIyODAyM2NlMzllOGI3MmJkNWExOThiODcwMzMxOWI4YjljYTIz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8g cWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29v cGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5j IHwgNzAgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQx IGluc2VydGlvbnMoKyksIDI5IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L3ZnYS5jIGIvaHcvdmdhLmMKaW5kZXggZjM5YTJlZC4uZGJhOTNkNyAx MDA2NDQKLS0tIGEvaHcvdmdhLmMKKysrIGIvaHcvdmdhLmMKQEAgLTYxNSw2 ICs2MTUsNDYgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdBU3Rh dGUgKnMpCiAgICAgcy0+dmJlX3N0YXJ0X2FkZHIgID0gb2Zmc2V0IC8gNDsK IH0KIAorLyogd2UgaW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAq Lworc3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpz KQoreworICAgIGludCBoLCBzaGlmdF9jb250cm9sOworCisgICAgaWYgKCF2 YmVfZW5hYmxlZChzKSkgeworICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9m ZiAtLSBub3RoaW5nIHRvIGRvICovCisgICAgICAgIHJldHVybjsKKyAgICB9 CisKKyAgICAvKiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KKyAg ICBzLT5nclsweDA2XSA9IChzLT5nclsweDA2XSAmIH4weDBjKSB8IDB4MDU7 CisgICAgcy0+Y3JbMHgxN10gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisg ICAgcy0+Y3JbMHgxM10gPSBzLT52YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAg ICAvKiB3aWR0aCAqLworICAgIHMtPmNyWzB4MDFdID0gKHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAzKSAtIDE7CisgICAgLyogaGVp Z2h0IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLworICAgIGggPSBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOworICAgIHMt PmNyWzB4MTJdID0gaDsKKyAgICBzLT5jclsweDA3XSA9IChzLT5jclsweDA3 XSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4MDIpIHwgKCho ID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJlIHRvIDEwMjMg Ki8KKyAgICBzLT5jclsweDE4XSA9IDB4ZmY7CisgICAgcy0+Y3JbMHgwN10g fD0gMHgxMDsKKyAgICBzLT5jclsweDA5XSB8PSAweDQwOworCisgICAgaWYg KHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKKyAg ICAgICAgc2hpZnRfY29udHJvbCA9IDA7CisgICAgICAgIHMtPnNyWzB4MDFd ICY9IH44OyAvKiBubyBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7Cisg ICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hh aW4gNCBtb2RlICovCisgICAgICAgIHMtPnNyWzRdIHw9IDB4MDg7CisgICAg ICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3Jb Ml0gfD0gMHgwZjsKKyAgICB9CisgICAgcy0+Z3JbMHgwNV0gPSAocy0+Z3Jb MHgwNV0gJiB+MHg2MCkgfCAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBz LT5jclsweDA5XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KK30K Kwogc3RhdGljIHVpbnQzMl90IHZiZV9pb3BvcnRfcmVhZF9pbmRleCh2b2lk ICpvcGFxdWUsIHVpbnQzMl90IGFkZHIpCiB7CiAgICAgVkdBU3RhdGUgKnMg PSBvcGFxdWU7CkBAIC02OTgsNyArNzM4LDYgQEAgc3RhdGljIHZvaWQgdmJl X2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRF WF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAoKHZhbCAmIFZCRV9ESVNQSV9F TkFCTEVEKSAmJgogICAgICAgICAgICAgICAgICEocy0+dmJlX3JlZ3NbVkJF X0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkpIHsK LSAgICAgICAgICAgICAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsKICAgICAg ICAgICAgICAgICAKICAgICAgICAgICAgICAgICBpZiAocy0+dnJhbV9nbWZu ICE9IHMtPmxmYl9hZGRyKSB7CiAgICAgICAgICAgICAgICAgICAgICBzZXRf dnJhbV9tYXBwaW5nKHMsIHMtPmxmYl9hZGRyLCBzLT5sZmJfZW5kKTsKQEAg LTcwOSw0MCArNzQ4LDEzIEBAIHN0YXRpYyB2b2lkIHZiZV9pb3BvcnRfd3Jp dGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVf cmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVfRElTUElfRU5B QkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAg ICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAKICAgICAg ICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91bGQgYmUgZG9u ZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICghKHZhbCAmIFZC RV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAgICAgICAgICBt ZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gKiBzLT52 YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0KLQotICAgICAg ICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGljIG1v ZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAgICAgaW4gQklP UykgKi8KLSAgICAgICAgICAgICAgICBzLT5nclsweDA2XSA9IChzLT5nclsw eDA2XSAmIH4weDBjKSB8IDB4MDU7IC8qIGdyYXBoaWMgbW9kZSArIG1lbW9y eSBtYXAgMSAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4MTddIHw9IDM7 IC8qIG5vIENHQSBtb2RlcyAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4 MTNdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAg ICAgLyogd2lkdGggKi8KLSAgICAgICAgICAgICAgICBzLT5jclsweDAxXSA9 IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OwotICAgICAgICAgICAgICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KLSAgICAgICAgICAgICAgICBoID0gcy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdIC0gMTsKLSAgICAgICAgICAgICAg ICBzLT5jclsweDEyXSA9IGg7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbMHgw N10gPSAocy0+Y3JbMHgwN10gJiB+MHg0MikgfAotICAgICAgICAgICAgICAg ICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAzKSAmIDB4NDApOwot ICAgICAgICAgICAgICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCi0g ICAgICAgICAgICAgICAgcy0+Y3JbMHgxOF0gPSAweGZmOwotICAgICAgICAg ICAgICAgIHMtPmNyWzB4MDddIHw9IDB4MTA7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbMHgwOV0gfD0gMHg0MDsKLQotICAgICAgICAgICAgICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0KSB7Ci0gICAg ICAgICAgICAgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwotICAgICAgICAg ICAgICAgICAgICBzLT5zclsweDAxXSAmPSB+ODsgLyogbm8gZG91YmxlIGxp bmUgKi8KLSAgICAgICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAg ICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAg ICAgcy0+c3JbNF0gfD0gMHgwODsgLyogc2V0IGNoYWluIDQgbW9kZSAqLwot ICAgICAgICAgICAgICAgICAgICBzLT5zclsyXSB8PSAweDBmOyAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgfQotICAgICAg ICAgICAgICAgIHMtPmdyWzB4MDVdID0gKHMtPmdyWzB4MDVdICYgfjB4NjAp IHwgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+ Y3JbMHgwOV0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCiAgICAg ICAgICAgICB9IGVsc2UgewogICAgICAgICAgICAgICAgIC8qIFhYWDogdGhl IGJpb3Mgc2hvdWxkIGRvIHRoYXQgKi8KICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA1ZTg0MGU2MjkyODI1ZmNhZTkwZjY3NTBhOGY1N2JjOTg5ZTI4YzVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4t dHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRy ZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMSArCiAx IGZpbGUgY2hhbmdlZCwgMSBpbnNlcnRpb24oKykKCmRpZmYgLS1naXQgYS9o dy92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGRiYTkzZDcuLmIxYjUwMWIgMTAw NjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3ZnYS5jCkBAIC03MjksNiAr NzI5LDcgQEAgc3RhdGljIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZv aWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9 IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwYjBjZjgxMTBlOTdiMGNiZDBkYTczZDExMTYzZTI2OTc4ODIyNzU3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVt dS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVy IDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwg OSArKysrKysrKy0KIDEgZmlsZSBjaGFuZ2VkLCA4IGluc2VydGlvbnMoKyks IDEgZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3Zn YS5jCmluZGV4IGIxYjUwMWIuLjU3NzhjN2QgMTAwNjQ0Ci0tLSBhL2h3L3Zn YS5jCisrKyBiL2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDggQEAgc3RhdGlj IHVpbnQzMl90IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBh bmQyWzI1Nl07CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAor c3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpzKTsK Kwogc3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQVN0YXRlICpz KQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDQ5LDYgKzQ1MSw3 IEBAIHN0YXRpYyB2b2lkIHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVl LCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50 ZigidmdhOiB3cml0ZSBTUiV4ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwg dmFsKTsKICNlbmRpZgogICAgICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2 YWwgJiBzcl9tYXNrW3MtPnNyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0 ZV92Z2FyZWdzKHMpOwogICAgICAgICBpZiAocy0+c3JfaW5kZXggPT0gMSkg cy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgYnJlYWs7CiAg ICAgY2FzZSAweDNjNzoKQEAgLTQ3Nyw2ICs0ODAsNyBAQCBzdGF0aWMgdm9p ZCB2Z2FfaW9wb3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUg R1IleCA9IDB4JTAyeFxuIiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYK ICAgICAgICAgcy0+Z3Jbcy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tz LT5ncl9pbmRleF07CisgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsK ICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSAweDNiNDoKICAgICBjYXNlIDB4 M2Q0OgpAQCAtNDkwLDggKzQ5NCwxMCBAQCBzdGF0aWMgdm9pZCB2Z2FfaW9w b3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMy X3QgdmFsKQogICAgICAgICAvKiBoYW5kbGUgQ1IwLTcgcHJvdGVjdGlvbiAq LwogICAgICAgICBpZiAoKHMtPmNyWzB4MTFdICYgMHg4MCkgJiYgcy0+Y3Jf aW5kZXggPD0gNykgewogICAgICAgICAgICAgLyogY2FuIGFsd2F5cyB3cml0 ZSBiaXQgNCBvZiBDUjcgKi8KLSAgICAgICAgICAgIGlmIChzLT5jcl9pbmRl eCA9PSA3KQorICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IDcpIHsK ICAgICAgICAgICAgICAgICBzLT5jcls3XSA9IChzLT5jcls3XSAmIH4weDEw KSB8ICh2YWwgJiAweDEwKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CisgICAgICAgICAgICB9CiAgICAgICAgICAgICByZXR1 cm47CiAgICAgICAgIH0KICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7 CkBAIC01MDcsNiArNTEzLDcgQEAgc3RhdGljIHZvaWQgdmdhX2lvcG9ydF93 cml0ZSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZhbDsKICAg ICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CisgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3JfaW5kZXgp IHsKICAgICAgICAgY2FzZSAweDAwOgotLSAKMi4xLjQKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Tue May 10 11:27:18 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 10 May 2016 11:27:18 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b05nr-0003PK-LF; Tue, 10 May 2016 11:26:15 +0000 Received: from mail6.bemta6.messagelabs.com ([85.158.143.247]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b05nq-0003P7-Aa; Tue, 10 May 2016 11:26:14 +0000 Received: from [85.158.143.35] by server-2.bemta-6.messagelabs.com id E6/48-09532-555C1375; Tue, 10 May 2016 11:26:13 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpil+JIrShJLcpLzFFi42LJaLquqht01DD cYMVZdYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmTO+YzFYw8z1HxZFFD5ka GI9d5ehi5OIQEjjNKHGoZT8zhLOKUeLqic9ADicHs4CrxI19m9kgbEWJC/caWEBsXgFBiZMzn 4DZEgKaEnferGIHsUUEiiR2nnsJZrMJ6EnMPTuJCaJXR+Ll/tVMIAuEBboZJdpaPkMNMpPY+G MpWAOLgKrE2SO9jBMYeWYh2T0Lye5ZSHbPYuQAimtKrN+lD2FKSyz/xwFRLS+x/e0c5llA25g FWhglru07COU0MkrsfNDNBDNzSvdDdgg7W+Lfhp+MEHaGxIQTp1gx1RRJ7L33mQXCzpdY+rWB EVNNrcTf6/Oh5ldJ/Fq2iQVTTSujRF9LNMRBTYwS0x9fYMZUVC+x5MkDqOYaiVm/X2IxKE1i0 78FUEckS0x58YodU02uxOqzx6HmZ0lMvvIFi5oKideTVkLZpRJH3x9lXMCYsIpRvTi1qCy1SN dQL6koMz2jJDcxM0fX0MBMLze1uDgxPTUnMalYLzk/dxMjMCUyAMEOxp3PnQ4xSnIwKYnyCk4 xDBfiS8pPqcxILM6ILyrNSS0+xCjDwaEkwRtzBCgnWJSanlqRlpkDTM4waQkOHiUR3vUgad7i gsTc4sx0iNQpRmOOJdOvrWXiWHTz8X4mIZa8/LxUKXHeySClAiClGaV5cINgWeMSo6yUMC8j0 GlCPAWpRbmZJajyrxjFORiVhHkDQKbwZOaVwO17BXQKE9Apcmz6IKeUJCKkpBoYPY2Opy53aZ KI6vvZWzrxak/Zlowz565aft132GKu0Mk+h9j9cQq97JFF1hUT5rj+uf/5Yc4vM3HW457Sass uNTDHTZo6+XTUW2ad7KmpKvaXK/f8dnoXllkz/RXTqrBabinnA78uMu9ZK+sj5fLsZaxzuR+D j9TlTs2w3Dl7ZjfnLXfUOeSlxFKckWioxVxUnAgAz65KchUEAAA= X-Env-Sender: gdunlap@xenbits.xen.org X-Msg-Ref: server-6.tower-21.messagelabs.com!1462879569!13429514!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 40017 invoked from network); 10 May 2016 11:26:10 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-6.tower-21.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 10 May 2016 11:26:10 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b05nb-00047L-JD; Tue, 10 May 2016 11:25:59 +0000 Received: from gdunlap by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1b05nb-0007wp-H4; Tue, 10 May 2016 11:25:59 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 10 May 2016 11:25:59 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 179 (CVE-2016-3710, CVE-2016-3712) - QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2016-3710,CVE-2016-3712 / XSA-179 version 5 QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks UPDATES IN VERSION 5 ==================== Fixed credits section. Zuozhi Fzz was mistakenly credited with CVE-2016-3710, but should have been credited with CVE-2016-3712. ISSUE DESCRIPTION ================= Qemu VGA module allows banked access to video memory using the window at 0xa00000 and it supports different access modes with different address calculations. But an attacker can easily change access modes after setting the bank register. This is CVE-2016-3710. Qemu VGA module allows guest to edit certain registers in 'vbe' and 'vga' modes. ie. guest could set certain 'VGA' registers while in 'VBE' mode. This is CVE-2016-3712. IMPACT ====== A privileged guest user could use CVE-2016-3710 to exceed the bank address window and write beyond the said memory area, potentially leading to arbitrary code execution with privileges of the Qemu process. If the system is not using stubdomains, this will be in domain 0. A privileged guest user could use CVE-2016-3712 to cause potential integer overflow or OOB read access issues in Qemu, resulting in a DoS of the guest itself. More dangerous effect, such as data leakage or code execution, are not known but cannot be ruled out. VULNERABLE SYSTEMS ================== Versions of qemu shipped with all Xen versions are vulnerable. Xen systems running on x86 with HVM guests, with the qemu process running in dom0 are vulnerable. Only guests provided with the "stdvga" emulated video card can exploit the vulnerability. The default "cirrus" emulated video card is not vulnerable. (With xl the emulated video card is controlled by the "stdvga=" and "vga=" domain configuration options.) ARM systems are not vulnerable. Systems using only PV guests are not vulnerable. For VMs whose qemu process is running in a stub domain, a successful attacker will only gain the privileges of that stubdom, which should be only over the guest itself. Both upstream-based versions of qemu (device_model_version="qemu-xen") and `traditional' qemu (device_model_version="qemu-xen-traditional") are vulnerable. MITIGATION ========== Running only PV guests will avoid the issue. Running HVM guests with the device model in a stubdomain will mitigate the issue. Changing the video card emulation to cirrus (stdvga=0, vga="cirrus", in the xl domain configuraton) will avoid the vulnerability. CREDITS ======= CVE-2016-3710 was discovered and reported by "Wei Xiao and Qinghao Tang of 360 Marvel Team" of 360.cn Inc. CVE-2016-3712 was discovered and reported by Zuozhi Fzz of Alibaba Inc. RESOLUTION ========== Applying the appropriate attached patch resolves this issue for systems using upstream-based versions of qemu. Patch 0001 addresses CVE-2016-3710, and patches 0002-0005 address CVE-2016-3712. qemu-upstream, xen-unstable: xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.6: xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.5: xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.4: xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-upstream, xen 4.3: xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch qemu-xen-traditional, unstable: xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ sha256sum xsa179* e216959d099ed807b282026e1e4d558ce0c0e8ead284ddd9d0581cef5fcef0ad xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 708e40d85866540567d2d915731c6e9876cd0d6754bc6696650ed71d8e48d710 xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch 767007028189bce54df9769ff6cb9db7cd37b5c2afaac86787b30c8f2a03f342 xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch 1fb507c307b093e5e4471d4a5e567db419adecbfe772a68bf91722836bcba4cd xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch ff4327d598d2e0912dc3a22ab9ba14d6c79bfa5a154714b6c5da761d5ded403f xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 059bfa59f39222ad6991e6c0c8338385f2a317e379d02d0c2cb0e5a8138cb329 xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch c6dfe50d694b75670bbdec78a3ce6293a8da46d5ff8b47f1e0d7e4fac22260bf xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch f57e31e8b81f1161537277a0934013c1fb3bbf57319543dfd10a5dc5fdfb927b xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch 14900af2b13d362ffb98c061e76b13965965284399dd9b9f1a4e41b41f34a3a3 xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2b2e7d306fd95fa74490ee1694af1af9438d7ff738d8c6aecc7d99d4eb96dcb2 xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch e6108266bf0abada5fc6e0a3ca65c2702fcae610826ead6a215d622ec3ed973a xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 05bdfae312078b22542e9f18db98fae11dbfd9785184b0b3c8de8c94797e1427 xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch 56dee9d0f54357391d5249a01ab28a1879dd7d1a36b4d147d68c62688d8af22b xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch 10603f5ffe317de328dc46139a6b5ff6081040ca6368ee1642b5343db9bcfda1 xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch e0dbc47086f0346a9554b98468256bc325d67440f5d786c5825390d293896509 xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 9b0cfdba369437a3e3da86690cd0c6d9d05e39d1168065e4d11ff2de4e546feb xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3c56f255d2ff3e5ae24f15de69cbd4abf3ff0d2dbb63a686937d5e2ab1989d59 xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch b1ddabf50720635efa17a7c57778acd2e1d9fd6a6424038455163991afecb044 xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch 0f34eeda817f39d3b5e484d535aa29bae16e7e36b4dc042bc41ef0e1844bf3cb xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch c24b3401a7ed45f853de7c96b998d50461254e9082a706753b814ddcbc285b17 xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch de59a098a39c1adbc86f3857dbb2b655479f97756d46e017e83b41c1390a98b9 xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch 3686d0b5c3603819fe0eca65ed62161c676e6abd8e676e513f6d4b3d46e7a997 xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch 18d01083e2f4000816ecf26d85da5cb337f540da447e6252f348a5b538cc7fa4 xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch 811ce206293b54ad601eb0a0e59bee502277c642f73f1ea0bad712efc528f82d xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch 2097c9e4eac66a65e07607664d1aaec288c4c8b0f147c73636c1b2532cdd20dd xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 132fd7f7d1f7bee4d934daefc24ec65080ae09b7d0e07a86edc3b683cad8156a xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch b83c29c3737415bf05da14c0b856abeb3bdbb77fba7d538956535ed67160abe8 xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch 834266af0499167e6d8e2e87bb770b79c0e8480ab5ea72064298656ccdd36741 xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch a5c3c38340261c7ff44047289aad6276e501930e214c40350056a364469965cd xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch 4869ad504cba52f537dae102e226b020422e3b6494ffba3b865eb2893bee0e9e xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXMcStAAoJEIP+FMlX6CvZ8g4H/i3UdCtqBWhs5ZAa7arEzDLC GggGZ0MQDriujr+10MN6OyM7W493AxHC2+8Ck0jft1YrUh0ojlVt3/tqd+f4yI1I 1S5ueWQYS0vEqH4lxiftp4MRc9/wWpKnEGdo3437AyDuuZwqDfTjvt8yDrfMLCuI 2v3ofXfSOeBiNYqSSsz3Hbmlb9ZqohGRIGqc74C4D+RKYJlDBVO6GNDMv9lI5tdW LE5PqaCxndZVO+uFAgIg6tw+GOObk2IyEBi00R5FmkW5g9QP2i2em+/usKAb8l3v bFjBEuw0SkL/CZF3fpoBNjTej/5HHSJwhB2rDY2NFV1hwmt36G8NPKKwLrcQKdU= =O3qx -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAzYmYxODE3MDc5YmIwZDgwYzBkOGE4NmE3YzdkZDBiZmU5MGViODJl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3 L2Rpc3BsYXkvdmdhLmMgfCAyNCArKysrKysrKysrKysrKysrKystLS0tLS0K IDEgZmlsZSBjaGFuZ2VkLCAxOCBpbnNlcnRpb25zKCspLCA2IGRlbGV0aW9u cygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IDY1N2U5ZjEuLmI5MTkxY2EgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTc5LDYgKzE3OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKICAgICAgICAgICAgIHNpemUg PSAweDgwMDA7CiAgICAgICAgICAgICBicmVhazsKICAgICAgICAgfQorICAg ICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6ZSA8PSBzLT52cmFtX3NpemUpOwog ICAgICAgICBtZW1vcnlfcmVnaW9uX2luaXRfYWxpYXMoJnMtPmNoYWluNF9h bGlhcywgbWVtb3J5X3JlZ2lvbl9vd25lcigmcy0+dnJhbSksCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAidmdhLmNoYWluNCIsICZzLT52 cmFtLCBvZmZzZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2Fk ZF9zdWJyZWdpb25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwg YmFzZSwKQEAgLTcxNiwxMSArNzE3LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dy aXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAg ICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9C QU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9J TkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52 YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAg ICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAg ICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsK ICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7 CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwog ICAgICAgICAgICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAt ODE5LDEzICs4MTYsMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FD b21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3Jb VkdBX1NFUV9NRU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAg ICAgICAgLyogY2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisg ICAgICAgIGFzc2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAg cmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5n cltWR0FfR0ZYX01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZl biBtb2RlIChha2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBs YW5lID0gKHMtPmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRy ICYgMSk7Ci0gICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4x KSA8PCAxKSB8IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFt X3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9 CisgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSB7CiAgICAgICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAq LworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+ dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAg ICAgfQogICAgICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFt X3B0cilbYWRkcl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9N T0RFXSAmIDB4MDgpKSB7CkBAIC04ODIsNiArODg3LDcgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAg ICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZH QV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNz ZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJh bV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAg ICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1U X3BseCAiXVxuIiwgYWRkcik7CkBAIC04OTUsNiArOTAxLDkgQEAgdm9pZCB2 Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIs IHVpbnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgewogICAgICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQog ICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYg REVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9l dmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTk2 OCw2ICs5NzcsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0 YXRlICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBt YXNrID0gcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV07CiAgICAgICAgIHMt PnBsYW5lX3VwZGF0ZWQgfD0gbWFzazsgLyogb25seSB1c2VkIHRvIGRldGVj dCBmb250IGNoYW5nZSAqLwogICAgICAgICB3cml0ZV9tYXNrID0gbWFzazE2 W21hc2tdOworICAgICAgICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkg Pj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICByZXR1cm47CisgICAg ICAgIH0KICAgICAgICAgKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRy XSA9CiAgICAgICAgICAgICAoKCh1aW50MzJfdCAqKXMtPnZyYW1fcHRyKVth ZGRyXSAmIH53cml0ZV9tYXNrKSB8CiAgICAgICAgICAgICAodmFsICYgd3Jp dGVfbWFzayk7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBiZmEwZjE1MWE1NjRhODNiNWEyNmYzZTkxN2RhOTg2NzRiZjNjZjYy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMgfCAxMyArKysr KysrKystLS0tCiAxIGZpbGUgY2hhbmdlZCwgOSBpbnNlcnRpb25zKCspLCA0 IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMg Yi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IGI5MTkxY2EuLjBjMWM1YjUgMTAw NjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92 Z2EuYwpAQCAtMTQyLDYgKzE0MiwxMSBAQCBzdGF0aWMgdWludDMyX3QgZXhw YW5kNFsyNTZdOwogc3RhdGljIHVpbnQxNl90IGV4cGFuZDJbMjU2XTsKIHN0 YXRpYyB1aW50OF90IGV4cGFuZDR0bzhbMTZdOwogCitzdGF0aWMgaW5saW5l IGJvb2wgdmJlX2VuYWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCit7CisgICAg cmV0dXJuIHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQ7Cit9CisKIHN0YXRpYyB2b2lkIHZnYV91cGRh dGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBo d2FkZHIgYmFzZSwgb2Zmc2V0LCBzaXplOwpAQCAtNTY0LDcgKzU2OSw3IEBA IHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNvbW1vblN0YXRlICpz KQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3JlZ3M7CiAgICAgdWludDMy X3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zmc2V0OwogCi0gICAgaWYg KCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFC TEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKICAgICAgICAg LyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLwogICAg ICAgICByZXR1cm47CiAgICAgfQpAQCAtMTA1OCw3ICsxMDYzLDcgQEAgc3Rh dGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNvbW1vblN0YXRlICpzLAog ewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxpbmVfb2Zmc2V0LCBsaW5l X2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkgeworICAgIGlmICh2 YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZi ZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9z dGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAg LTEzODMsNyArMTM4OCw3IEBAIHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdB Q29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJldDsKIAotICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQ SV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAg ICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdOwog ICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7CkBAIC0xMzk1LDcgKzE0 MDAsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jlc29sdXRpb24oVkdBQ29t bW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQgKnBoZWlnaHQpCiB7CiAg ICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBpZiAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkg eworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0aCA9 IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAgICAg aGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdOwog ICAgIH0gZWxzZSB7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA3ZmE1YzJjNWRjOWY5YmY4NzhjMWU4NjY5ZWI5NjQ0ZDcwYTcxZTcx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3Bs YXkvdmdhLmMgfCA3OCArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQ0 IGluc2VydGlvbnMoKyksIDM0IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmluZGV4IDBj MWM1YjUuLmUxMmY1YWMgMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkvdmdhLmMK KysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNjQ0LDYgKzY0NCw0OSBAQCBz dGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICBzLT52YmVfc3RhcnRfYWRkciAgPSBvZmZzZXQgLyA0OwogfQogCisv KiB3ZSBpbml0aWFsaXplIHRoZSBWR0EgZ3JhcGhpYyBtb2RlICovCitzdGF0 aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdBQ29tbW9uU3RhdGUgKnMp Cit7CisgICAgaW50IGgsIHNoaWZ0X2NvbnRyb2w7CisKKyAgICBpZiAoIXZi ZV9lbmFibGVkKHMpKSB7CisgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2Zm IC0tIG5vdGhpbmcgdG8gZG8gKi8KKyAgICAgICAgcmV0dXJuOworICAgIH0K KworICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLworICAg IHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdBX0dGWF9NSVNDXSAm IH4weDBjKSB8IDB4MDQgfAorICAgICAgICBWR0FfR1IwNl9HUkFQSElDU19N T0RFOworICAgIHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENH QSBtb2RlcyAqLworICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBzLT52 YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAgICAvKiB3aWR0aCAqLworICAgIHMt PmNyW1ZHQV9DUlRDX0hfRElTUF0gPQorICAgICAgICAocy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKKyAgICAvKiBoZWln aHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCisgICAgaCA9IHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAtIDE7CisgICAgcy0+ Y3JbVkdBX0NSVENfVl9ESVNQX0VORF0gPSBoOworICAgIHMtPmNyW1ZHQV9D UlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+ MHg0MikgfAorICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAz KSAmIDB4NDApOworICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCisg ICAgcy0+Y3JbVkdBX0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7CisgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7CisgICAgcy0+Y3Jb VkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7CisKKyAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgeworICAgICAgICBz aGlmdF9jb250cm9sID0gMDsKKyAgICAgICAgcy0+c3JbVkdBX1NFUV9DTE9D S19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KKyAgICB9IGVs c2UgeworICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKKyAgICAgICAgLyog c2V0IGNoYWluIDQgbW9kZSAqLworICAgICAgICBzLT5zcltWR0FfU0VRX01F TU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07CisgICAgICAgIC8qIGFj dGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gfD0gVkdBX1NSMDJfQUxMX1BMQU5FUzsKKyAgICB9Cisg ICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0FfR0ZYX01PREVd ICYgfjB4NjApIHwKKyAgICAgICAgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Cisg ICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBk b3VibGUgc2NhbiAqLworfQorCiBzdGF0aWMgdWludDMyX3QgdmJlX2lvcG9y dF9yZWFkX2luZGV4KHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkcikKIHsK ICAgICBWR0FDb21tb25TdGF0ZSAqcyA9IG9wYXF1ZTsKQEAgLTczMCw1MiAr NzczLDE5IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9w YXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAo KHZhbCAmIFZCRV9ESVNQSV9FTkFCTEVEKSAmJgogICAgICAgICAgICAgICAg ICEocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKLSAgICAgICAgICAgICAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKIAogICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9WSVJUX1dJRFRIXSA9IDA7CiAgICAgICAgICAgICAg ICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hfT0ZGU0VUXSA9IDA7 CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X1lfT0ZGU0VUXSA9IDA7CiAgICAgICAgICAgICAgICAgcy0+dmJlX3JlZ3Nb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gfD0gVkJFX0RJU1BJX0VOQUJMRUQ7 CiAgICAgICAgICAgICAgICAgdmJlX2ZpeHVwX3JlZ3Mocyk7CisgICAgICAg ICAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAgICAg ICAgICAgLyogY2xlYXIgdGhlIHNjcmVlbiAqLwogICAgICAgICAgICAgICAg IGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAg ICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAg ICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFw aGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBz LT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+ MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZf R1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JU Q19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zm c2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAg ICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVT XSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5 IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGgg PSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAg ICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsK LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAo cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAg ICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAw eDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAy MyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09N UEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAg aWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAg ICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0g fjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7 Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8K LSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9E RV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAv KiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAg IHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9Q TEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMt PmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4w eDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8 IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FO XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAg IH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgcy0+YmFua19vZmZzZXQgPSAw OwogICAgICAgICAgICAgfQotLSAKMS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSAyMDY4MTkyZGNjY2Q4YTgwZGRkZmNjOGRmNjE2NGNmOWMyNmUwZmM0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkvdmdhLmMg fCAxICsKIDEgZmlsZSBjaGFuZ2VkLCAxIGluc2VydGlvbigrKQoKZGlmZiAt LWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNwbGF5L3ZnYS5jCmlu ZGV4IGUxMmY1YWMuLmVlZWI5YzggMTAwNjQ0Ci0tLSBhL2h3L2Rpc3BsYXkv dmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAtNzYzLDYgKzc2Myw3 IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwg dWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZC RV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAgICAgIHMtPnZiZV9y ZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICB2YmVfZml4 dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5r X21hc2s7Ci0tIAoxLjguMy4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmZDNjMTM2YjNlMTQ4MmNkMGVjNzI4NWQ2YmMyYTNlNmE2MmMzOGQ3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgotLS0KIGh3L2Rpc3BsYXkv dmdhLmMgfCA2ICsrKysrKwogMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9u cygrKQoKZGlmZiAtLWdpdCBhL2h3L2Rpc3BsYXkvdmdhLmMgYi9ody9kaXNw bGF5L3ZnYS5jCmluZGV4IGVlZWI5YzguLjRhNTVlYzYgMTAwNjQ0Ci0tLSBh L2h3L2Rpc3BsYXkvdmdhLmMKKysrIGIvaHcvZGlzcGxheS92Z2EuYwpAQCAt MTQyLDYgKzE0Miw4IEBAIHN0YXRpYyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07 CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4 X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcyk7CisKIHN0YXRpYyBpbmxpbmUg Ym9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKQEAgLTQ4NCw2ICs0ODYsNyBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBTUiV4 ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwgdmFsKTsKICNlbmRpZgogICAg ICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2YWwgJiBzcl9tYXNrW3MtPnNy X2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogICAg ICAgICBpZiAocy0+c3JfaW5kZXggPT0gVkdBX1NFUV9DTE9DS19NT0RFKSB7 CiAgICAgICAgICAgICBzLT51cGRhdGVfcmV0cmFjZV9pbmZvKHMpOwogICAg ICAgICB9CkBAIC01MTUsNiArNTE4LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgR1IleCA9IDB4JTAyeFxu Iiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+Z3Jb cy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tzLT5ncl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgdmdhX3Vw ZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwogICAgICAgICBicmVhazsKICAgICBj YXNlIFZHQV9DUlRfSU06CkBAIC01MzMsMTAgKzUzNywxMiBAQCB2b2lkIHZn YV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1 aW50MzJfdCB2YWwpCiAgICAgICAgICAgICBpZiAocy0+Y3JfaW5kZXggPT0g VkdBX0NSVENfT1ZFUkZMT1cpIHsKICAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1dd ICYgfjB4MTApIHwKICAgICAgICAgICAgICAgICAgICAgKHZhbCAmIDB4MTAp OworICAgICAgICAgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAg ICAgICAgICAgIH0KICAgICAgICAgICAgIHJldHVybjsKICAgICAgICAgfQog ICAgICAgICBzLT5jcltzLT5jcl9pbmRleF0gPSB2YWw7CisgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3Jf aW5kZXgpIHsKICAgICAgICAgY2FzZSBWR0FfQ1JUQ19IX1RPVEFMOgotLSAK MS44LjMuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSA2NzMwNWZjZjQ3MzNmYjRmYjllYWNjMzM0MzZlYzY2YTdjMDM1MmVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQwOjU4ICswMTAwClN1YmplY3Q6IFtQQVRDSCAxLzVdIHZnYTogZml4IGJh bmtlZCBhY2Nlc3MgYm91bmRzIGNoZWNraW5nIChDVkUtMjAxNi0zNzEwKQoK dmdhIGFsbG93cyBiYW5rZWQgYWNjZXNzIHRvIHZpZGVvIG1lbW9yeSB1c2lu ZyB0aGUgd2luZG93IGF0IDB4YTAwMDAwCmFuZCBpdCBzdXBwb3J0cyBhIGRp ZmZlcmVudCBhY2Nlc3MgbW9kZXMgd2l0aCBkaWZmZXJlbnQgYWRkcmVzcwpj YWxjdWxhdGlvbnMuCgpUaGUgVkJFIGJvY2hzIGV4dGVudGlvbnMgc3VwcG9y dCBiYW5rZWQgYWNjZXNzIHRvbywgdXNpbmcgdGhlClZCRV9ESVNQSV9JTkRF WF9CQU5LIHJlZ2lzdGVyLiAgVGhlIGNvZGUgdHJpZXMgdG8gdGFrZSB0aGUg ZGlmZmVyZW50CmFkZHJlc3MgY2FsY3VsYXRpb25zIGludG8gYWNjb3VudCBh bmQgYXBwbGllcyBkaWZmZXJlbnQgbGltaXRzIHRvClZCRV9ESVNQSV9JTkRF WF9CQU5LIGRlcGVuZGluZyBvbiB0aGUgY3VycmVudCBhY2Nlc3MgbW9kZS4K CldoaWNoIGlzIHByb2JhYmx5IGVmZmVjdGl2ZSBpbiBzdG9wcGluZyBtaXNw cm9ncmFtbWluZyBieSBhY2NpZGVudC4KQnV0IGZyb20gYSBzZWN1cml0eSBw b2ludCBvZiB2aWV3IGNvbXBsZXRlbHkgdXNlbGVzcyBhcyBhbiBhdHRhY2tl cgpjYW4gZWFzaWx5IGNoYW5nZSBhY2Nlc3MgbW9kZXMgYWZ0ZXIgc2V0dGlu ZyB0aGUgYmFuayByZWdpc3Rlci4KCkRyb3AgdGhlIGJvZ3VzIGNoZWNrLCBh ZGQgcmFuZ2UgY2hlY2tzIHRvIHZnYV9tZW1fe3JlYWRiLHdyaXRlYn0KaW5z dGVhZC4KCkZpeGVzOiBDVkUtMjAxNi0zNzEwClJlcG9ydGVkLWJ5OiBRaW5n aGFvIFRhbmcgPGx1b2RhbG9uZ2RlQGdtYWlsLmNvbT4KU2lnbmVkLW9mZi1i eTogR2VyZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1v ZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVs Lm9yZz4KLS0tCiBody92Z2EuYyB8IDI0ICsrKysrKysrKysrKysrKysrKy0t LS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMoKyksIDYgZGVs ZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCA2OTM5OWRiLi5jZDdlN2FhIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMjAwLDYgKzIwMCw3IEBAIHN0YXRpYyB2b2lk IHZnYV91cGRhdGVfbWVtb3J5X2FjY2VzcyhWR0FDb21tb25TdGF0ZSAqcykK ICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CiAgICAgICAgIGJhc2Ug Kz0gaXNhX21lbV9iYXNlOworICAgICAgICBhc3NlcnQob2Zmc2V0ICsgc2l6 ZSA8PSBzLT52cmFtX3NpemUpOwogICAgICAgICByZWdpb24gPSBnX21hbGxv YyhzaXplb2YoKnJlZ2lvbikpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2lu aXRfYWxpYXMocmVnaW9uLCAidmdhLmNoYWluNCIsICZzLT52cmFtLCBvZmZz ZXQsIHNpemUpOwogICAgICAgICBtZW1vcnlfcmVnaW9uX2FkZF9zdWJyZWdp b25fb3ZlcmxhcChzLT5sZWdhY3lfYWRkcmVzc19zcGFjZSwgYmFzZSwKQEAg LTc0NywxMSArNzQ4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJy ZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAg ICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBd ID09IDQpIHsKLSAgICAgICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19t YXNrID4+IDIpOwotICAgICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAg ICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9Cisg ICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAg ICAgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUyLDEzICs4 NDksMjEgQEAgdWludDMyX3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9N RU1PUllfTU9ERV0gJiBWR0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyog Y2hhaW4gNCBtb2RlIDogc2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFz c2VydChhZGRyIDwgcy0+dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+ dnJhbV9wdHJbYWRkcl07CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZY X01PREVdICYgMHgxMCkgewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChh a2EgdGV4dCBtb2RlIG1hcHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMt PmdyW1ZHQV9HRlhfUExBTkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0g ICAgICAgIHJldCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lXTsKKyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8 IHBsYW5lOworICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsK KyAgICAgICAgICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAg IHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAg ICAgIC8qIHN0YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAg ICBpZiAoYWRkciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXpl KSB7CisgICAgICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAg ICAgICBzLT5sYXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRk cl07CiAKICAgICAgICAgaWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4 MDgpKSB7CkBAIC05MTUsNiArOTIwLDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRl YihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgcGxhbmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9 ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdICYgbWFzaykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIg PCBzLT52cmFtX3NpemUpOwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRk cl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAg cHJpbnRmKCJ2Z2E6IGNoYWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxu IiwgYWRkcik7CkBAIC05MjgsNiArOTM0LDkgQEAgdm9pZCB2Z2FfbWVtX3dy aXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAg aWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAg ICAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICAgICAgaWYgKGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICAgICAgcmV0dXJuOworICAgICAgICAgICAgfQogICAgICAgICAg ICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdB X01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgi IFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTEwMDEsNiArMTAx MCw5IEBAIHZvaWQgdmdhX21lbV93cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMs IGh3YWRkciBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIG1hc2sgPSBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXTsKICAgICAgICAgcy0+cGxhbmVf dXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQg Y2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFza107 CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52 cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAgfQog ICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0KICAg ICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdICYg fndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9tYXNr KTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlN2Q3YzA5Njg5YzcyNWJlNGYwYjQ4OWI0YmEzYjc0MWM1ZDlhYjMx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQxOjM5ICswMTAwClN1YmplY3Q6IFtQQVRDSCAyLzVdIHZnYTogYWRkIHZi ZV9lbmFibGVkKCkgaGVscGVyCgpNYWtlcyBjb2RlIGEgYml0IGVhc2llciB0 byByZWFkLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFubiA8a3JheGVs QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8gU3RhYmVsbGlu aSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92Z2EuYyB8IDEz ICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGluc2VydGlvbnMo KyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9o dy92Z2EuYwppbmRleCBjZDdlN2FhLi5jYjFjMTRkIDEwMDY0NAotLS0gYS9o dy92Z2EuYworKysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSwxMSBAQCBz dGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIHN0YXRpYyB2b2lkIHZn YV9zY3JlZW5fZHVtcCh2b2lkICpvcGFxdWUsIGNvbnN0IGNoYXIgKmZpbGVu YW1lLCBib29sIGNzd2l0Y2gsCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgRXJyb3IgKiplcnJwKTsKIAorc3RhdGljIGlubGluZSBib29sIHZiZV9l bmFibGVkKFZHQUNvbW1vblN0YXRlICpzKQoreworICAgIHJldHVybiBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9F TkFCTEVEOworfQorCiBzdGF0aWMgdm9pZCB2Z2FfdXBkYXRlX21lbW9yeV9h Y2Nlc3MoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgTWVtb3J5UmVnaW9u ICpyZWdpb24sICpvbGRfcmVnaW9uID0gcy0+Y2hhaW40X2FsaWFzOwpAQCAt NTk1LDcgKzYwMCw3IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZH QUNvbW1vblN0YXRlICpzKQogICAgIHVpbnQxNl90ICpyID0gcy0+dmJlX3Jl Z3M7CiAgICAgdWludDMyX3QgYml0cywgbGluZWxlbmd0aCwgbWF4eSwgb2Zm c2V0OwogCi0gICAgaWYgKCEocltWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAm IFZCRV9ESVNQSV9FTkFCTEVEKSkgeworICAgIGlmICghdmJlX2VuYWJsZWQo cykpIHsKICAgICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGlu ZyB0byBkbyAqLwogICAgICAgICByZXR1cm47CiAgICAgfQpAQCAtMTE3Niw3 ICsxMTgxLDcgQEAgc3RhdGljIHZvaWQgdmdhX2dldF9vZmZzZXRzKFZHQUNv bW1vblN0YXRlICpzLAogewogICAgIHVpbnQzMl90IHN0YXJ0X2FkZHIsIGxp bmVfb2Zmc2V0LCBsaW5lX2NvbXBhcmU7CiAKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBsaW5l X29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAgICAgICAgc3RhcnRf YWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAgICBsaW5lX2NvbXBh cmUgPSA2NTUzNTsKQEAgLTE2MjYsNyArMTYzMSw3IEBAIHN0YXRpYyBpbnQg dmdhX2dldF9icHAoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgaW50IHJl dDsKIAotICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFi bGVkKHMpKSB7CiAgICAgICAgIHJldCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQ SV9JTkRFWF9CUFBdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIHJldCA9IDA7 CkBAIC0xNjM4LDcgKzE2NDMsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X3Jl c29sdXRpb24oVkdBQ29tbW9uU3RhdGUgKnMsIGludCAqcHdpZHRoLCBpbnQg KnBoZWlnaHQpCiB7CiAgICAgaW50IHdpZHRoLCBoZWlnaHQ7CiAKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICB3aWR0aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Y UkVTXTsKICAgICAgICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdOwogICAgIH0gZWxzZSB7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSAyNzAwMjUwYzZiMjgyNDhiNzBiMTVmZDZlMGI0YzlkYjhiMmRkZmI3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjI0ICswMTAwClN1YmplY3Q6IFtQQVRDSCAzLzVdIHZnYTogZmFjdG9y IG91dCB2Z2EgcmVnaXN0ZXIgc2V0dXAKCldoZW4gZW5hYmxpbmcgdmJlIG1v ZGUgcWVtdSB3aWxsIHNldHVwIGEgYnVuY2ggb2YgdmdhIHJlZ2lzdGVycyB0 byBtYWtlCnN1cmUgdGhlIHZnYSBlbXVsYXRpb24gb3BlcmF0ZXMgaW4gY29y cmVjdCBtb2RlIGZvciBhIGxpbmVhcgpmcmFtZWJ1ZmZlci4gIE1vdmUgdGhh dCBjb2RlIHRvIGEgc2VwYXJhdGUgZnVuY3Rpb24gc28gd2UgY2FuIGNhbGwg aXQKZnJvbSBvdGhlciBwbGFjZXMgdG9vLgoKU2lnbmVkLW9mZi1ieTogR2Vy ZCBIb2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6 IFN0ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4K LS0tCiBody92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIDEgZmls ZSBjaGFuZ2VkLCA0NCBpbnNlcnRpb25zKCspLCAzNSBkZWxldGlvbnMoLSkK CmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGNiMWMx NGQuLmFkN2NhNDkgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3Zn YS5jCkBAIC02NzUsNiArNjc1LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1 cF9yZWdzKFZHQUNvbW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9h ZGRyICA9IG9mZnNldCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhl IFZHQSBncmFwaGljIG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVf dmdhcmVncyhWR0FDb21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hp ZnRfY29udHJvbDsKKworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAg ICAgICAgLyogdmJlIGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAq LworICAgICAgICByZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBt b2RlICsgbWVtb3J5IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVND XSA9IChzLT5ncltWR0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8Cisg ICAgICAgIFZHQV9HUjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdB X0NSVENfTU9ERV0gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+ Y3JbVkdBX0NSVENfT0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAz OworICAgIC8qIHdpZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQ XSA9CisgICAgICAgIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJF U10gPj4gMykgLSAxOworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX1lSRVNdIC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1Bf RU5EXSA9IGg7CisgICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMt PmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgo aCA+PiA3KSAmIDB4MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyog bGluZSBjb21wYXJlIHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19M SU5FX0NPTVBBUkVdID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVS RkxPV10gfD0gMHgxMDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0g fD0gMHg0MDsKKworICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfQlBQXSA9PSA0KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwor ICAgICAgICBzLT5zcltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBu byBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0 X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICov CisgICAgICAgIHMtPnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9T UjA0X0NITl80TTsKKyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAq LworICAgICAgICBzLT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0Ff U1IwMl9BTExfUExBTkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01P REVdID0gKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAg ICAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19N QVhfU0NBTl0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisK IHN0YXRpYyB1aW50MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAq b3BhcXVlLCB1aW50MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRl ICpzID0gb3BhcXVlOwpAQCAtNzYxLDUzICs4MDQsMTkgQEAgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVY X0VOQUJMRToKICAgICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VO QUJMRUQpICYmCiAgICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewot ICAgICAgICAgICAgICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAg ICAgICAgICAgICAgcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRf V0lEVEhdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVf RElTUElfSU5ERVhfWF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5B QkxFXSB8PSBWQkVfRElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2 YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUg c2NyZWVuIChzaG91bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAg ICAgICAgIGlmICghKHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewog ICAgICAgICAgICAgICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElT UElfSU5ERVhfWVJFU10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAg ICAgICAgICAgIH0KLQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxp emUgdGhlIFZHQSBncmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAg ICAgICAgICAgICAgICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAv KiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAg ICAgICBzLT5ncltWR0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlT Q10gJiB+MHgwYykgfCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdB X0dSMDZfR1JBUEhJQ1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltW R0FfQ1JUQ19NT0RFXSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xp bmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8K LSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAg ICAgICAgICAgICAgICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRF WF9YUkVTXSA+PiAzKSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0 IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAg ICAgIGggPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAx OwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRd ID0gaDsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxP V10gPSAocy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAg ICAgICAgICAgICAgICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4g MykgJiAweDQwKTsKLSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUg dG8gMTAyMyAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJ TkVfQ09NUEFSRV0gPSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZH QV9DUlRDX09WRVJGTE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMt PmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAg ICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09 IDQpIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7 Ci0gICAgICAgICAgICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9E RV0gJj0gfjg7IC8qIG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAg ICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJv bCA9IDI7Ci0gICAgICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1v ZGUgKi8KLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1P UllfTU9ERV0gfD0gVkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAg ICAgICAvKiBhY3RpdmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAg ICAgICAgIHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAy X0FMTF9QTEFORVM7Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAg ICAgIHMtPmdyW1ZHQV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RF XSAmIH4weDYwKSB8Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250 cm9sIDw8IDUpOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01B WF9TQ0FOXSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAg ICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUg YmlvcyBzaG91bGQgZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJh bmtfb2Zmc2V0ID0gMDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA5OGJlMWZiNmVhMzFjMTMwMjY0MDI1ZGU4ZWM4N2FkMmM3NTMyZjIx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQyOjU5ICswMTAwClN1YmplY3Q6IFtQQVRDSCA0LzVdIHZnYTogdXBkYXRl IHZnYSByZWdpc3RlciBzZXR1cCBvbiB2YmUgY2hhbmdlcwoKQ2FsbCB0aGUg bmV3IHZiZV91cGRhdGVfdmdhcmVncygpIGZ1bmN0aW9uIG9uIHZiZSBjb25m aWd1cmF0aW9uCmNoYW5nZXMsIHRvIG1ha2Ugc3VyZSB2Z2EgcmVnaXN0ZXJz IGFyZSB1cC10by1kYXRlLgoKU2lnbmVkLW9mZi1ieTogR2VyZCBIb2ZmbWFu biA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0ZWZhbm8g U3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0tCiBody92 Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0aW9uKCspCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBhZDdjYTQ5 Li4xYWM4MDgzIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtNzk0LDYgKzc5NCw3IEBAIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9k YXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAg ICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAg ICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZi ZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAg dmFsICY9IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwZjJlOWU2YjNjNzVhODdlOWVjOWE4MGQ3YmM5MTQ4MTBlM2YzZGEy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogV2VkLCA0IE1heSAyMDE2IDE3 OjQzOjM2ICswMTAwClN1YmplY3Q6IFtQQVRDSCA1LzVdIHZnYTogbWFrZSBz dXJlIHZnYSByZWdpc3RlciBzZXR1cCBmb3IgdmJlIHN0YXlzIGludGFjdAog KENWRS0yMDE2LTM3MTIpLgoKQ2FsbCB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSB3 aGVuIHRoZSBndWVzdCB0b3VjaGVzIEdGWCwgU0VRIG9yIENSVApyZWdpc3Rl cnMsIHRvIG1ha2Ugc3VyZSB0aGUgdmdhIHJlZ2lzdGVycyB3aWxsIGFsd2F5 cyBoYXZlIHRoZQp2YWx1ZXMgbmVlZGVkIGJ5IHZiZSBtb2RlLiAgVGhpcyBt YWtlcyBzdXJlIHRoZSBzYW5pdHkgY2hlY2tzCmFwcGxpZWQgYnkgdmJlX2Zp eHVwX3JlZ3MoKSBhcmUgZWZmZWN0aXZlLgoKV2l0aG91dCB0aGlzIGd1ZXN0 cyBjYW4gbXVjayB3aXRoIHNoaWZ0X2NvbnRyb2wsIGNhbiB0dXJuIG9uIHBs YW5hcgp2Z2EgbW9kZXMgb3IgdGV4dCBtb2RlIGVtdWxhdGlvbiB3aGlsZSBW QkUgaXMgYWN0aXZlLCBtYWtpbmcgcWVtdQp0YWtlIGNvZGUgcGF0aHMgbWVh bnQgZm9yIENHQSBjb21wYXRpYmlsaXR5LCBidXQgd2l0aCB0aGUgdmVyeQps YXJnZSBkaXNwbGF5IHdpZHRocyBhbmQgaGVpZ3RzIHNldHRhYmxlIHVzaW5n IFZCRSByZWdpc3RlcnMuCgpXaGljaCBpcyBnb29kIGZvciBvbmUgb3IgYW5v dGhlciBidWZmZXIgb3ZlcmZsb3cuICBOb3QgdGhhdApjcml0aWNhbCBhcyB0 aGV5IHR5cGljYWxseSByZWFkIG92ZXJmbG93cyBoYXBwZW5pbmcgc29tZXdo ZXJlCmluIHRoZSBkaXNwbGF5IGNvZGUuICBTbyBndWVzdHMgY2FuIERvUyBi eSBjcmFzaGluZyBxZW11IHdpdGggYQpzZWdmYXVsdCwgYnV0IGl0IGlzIHBy b2JhYmx5IG5vdCBwb3NzaWJsZSB0byBicmVhayBvdXQgb2YgdGhlIFZNLgoK Rml4ZXM6IENWRS0yMDE2LTM3MTIKUmVwb3J0ZWQtYnk6IFp1b3poaSBGenog PHp1b3poaS5menpAYWxpYmFiYS1pbmMuY29tPgpSZXBvcnRlZC1ieTogUCBK IFAgPHBwYW5kaXRAcmVkaGF0LmNvbT4KU2lnbmVkLW9mZi1ieTogR2VyZCBI b2ZmbWFubiA8a3JheGVsQHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IFN0 ZWZhbm8gU3RhYmVsbGluaSA8c3N0YWJlbGxpbmlAa2VybmVsLm9yZz4KLS0t CiBody92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdlZCwgNiBpbnNl cnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwpp bmRleCAxYWM4MDgzLi4xN2IzODllIDEwMDY0NAotLS0gYS9ody92Z2EuYwor KysgYi9ody92Z2EuYwpAQCAtMTY5LDYgKzE2OSw4IEBAIHN0YXRpYyB1aW50 OF90IGV4cGFuZDR0bzhbMTZdOwogc3RhdGljIHZvaWQgdmdhX3NjcmVlbl9k dW1wKHZvaWQgKm9wYXF1ZSwgY29uc3QgY2hhciAqZmlsZW5hbWUsIGJvb2wg Y3N3aXRjaCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICBFcnJvciAq KmVycnApOwogCitzdGF0aWMgdm9pZCB2YmVfdXBkYXRlX3ZnYXJlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpOworCiBzdGF0aWMgaW5saW5lIGJvb2wgdmJlX2Vu YWJsZWQoVkdBQ29tbW9uU3RhdGUgKnMpCiB7CiAgICAgcmV0dXJuIHMtPnZi ZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VO QUJMRUQ7CkBAIC01MTUsNiArNTE3LDcgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUgU1IleCA9IDB4JTAyeFxu Iiwgcy0+c3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYKICAgICAgICAgcy0+c3Jb cy0+c3JfaW5kZXhdID0gdmFsICYgc3JfbWFza1tzLT5zcl9pbmRleF07Cisg ICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsKICAgICAgICAgaWYgKHMt PnNyX2luZGV4ID09IFZHQV9TRVFfQ0xPQ0tfTU9ERSkgewogICAgICAgICAg ICAgcy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgfQpAQCAt NTQ2LDYgKzU0OSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpv cGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg cHJpbnRmKCJ2Z2E6IHdyaXRlIEdSJXggPSAweCUwMnhcbiIsIHMtPmdyX2lu ZGV4LCB2YWwpOwogI2VuZGlmCiAgICAgICAgIHMtPmdyW3MtPmdyX2luZGV4 XSA9IHZhbCAmIGdyX21hc2tbcy0+Z3JfaW5kZXhdOworICAgICAgICB2YmVf dXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgIHZnYV91cGRhdGVfbWVtb3J5 X2FjY2VzcyhzKTsKICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSBWR0FfQ1JU X0lNOgpAQCAtNTY0LDEwICs1NjgsMTIgQEAgdm9pZCB2Z2FfaW9wb3J0X3dy aXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFs KQogICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IFZHQV9DUlRDX09W RVJGTE9XKSB7CiAgICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfT1ZF UkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSAmIH4weDEwKSB8 CiAgICAgICAgICAgICAgICAgICAgICh2YWwgJiAweDEwKTsKKyAgICAgICAg ICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAgICAgICAgICAgICB9 CiAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgIH0KICAgICAgICAgcy0+ Y3Jbcy0+Y3JfaW5kZXhdID0gdmFsOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAKICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7CiAg ICAgICAgIGNhc2UgVkdBX0NSVENfSF9UT1RBTDoKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSAyNTkzNWZkMWVkM2M0MzM3YWE0YjYxOTAyZWM1ODBlMTdiMTMwYjYz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNDMwZTdlZC4uNjllMjU1 NCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0NSwxMSArNzQ2LDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODUwLDEzICs4NDcsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MTMs NiArOTE4LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjYsNiArOTMyLDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5OSw2ICsxMDA4LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAyOTRhNmMxNWEzODY2OWY4MDkyMGI4ODUyODcxOTE1MTRhYjdkOWZm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjllMjU1 NC4uZGExZWI0YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU5Myw3ICs1OTgsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzQsNyArMTE3OSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjI3 LDcgKzE2MzIsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzOSw3ICsxNjQ0LDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkMzc3OTE4YzIzZDg1ZjY0ZDAxOTE0YjQzYmZhYmMwYTQ2ZmU5NzRh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZGExZWI0YS4uY2Y1Zjk3ZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NzMs NiArNjczLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU5LDUzICs4MDIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBmYmNmZjgyY2Q3OTk4ZjkzNTU2YzI4ZGZjNjNiYmJkN2IyMDZjOGNl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggY2Y1Zjk3ZS4uNjNkMWE3MCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03OTIsNiArNzkyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSBmNzkyNmM3MzY4NWMyYmM3MTI0MjY1ZjU2N2JhZmI1MDI4NjRjNWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNjNkMWE3MC4uZGQ2MTI0 NiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTEzLDYgKzUx NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0NCw2ICs1NDcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU2MiwxMCArNTY2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBjOWExYTJkN2JmM2RiNTRiNzk2MWRmNGI4YTMwOTQ2YTc2N2I0ODUz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMmJiODVhZS4uZjcxNDJi YSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xOTcsNiArMTk3LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIHJlZ2lvbiA9IGdfbWFsbG9jKHNp emVvZigqcmVnaW9uKSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcyhyZWdpb24sIG1lbW9yeV9yZWdpb25fb3duZXIoJnMtPnZyYW0pLAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgInZnYS5jaGFpbjQi LCAmcy0+dnJhbSwgb2Zmc2V0LCBzaXplKTsKQEAgLTc0MSwxMSArNzQyLDcg QEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1 aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVf Zml4dXBfcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgdmFsICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAg ICAgICAgICAgfSBlbHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZi ZV9iYW5rX21hc2s7Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdz W3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29m ZnNldCA9ICh2YWwgPDwgMTYpOwogICAgICAgICAgICAgdmdhX3VwZGF0ZV9t ZW1vcnlfYWNjZXNzKHMpOwpAQCAtODQ2LDEzICs4NDMsMjEgQEAgdWludDMy X3QgdmdhX21lbV9yZWFkYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFk ZHIpCiAKICAgICBpZiAocy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gJiBW R0FfU1IwNF9DSE5fNE0pIHsKICAgICAgICAgLyogY2hhaW4gNCBtb2RlIDog c2ltcGxlc3QgYWNjZXNzICovCisgICAgICAgIGFzc2VydChhZGRyIDwgcy0+ dnJhbV9zaXplKTsKICAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJbYWRkcl07 CiAgICAgfSBlbHNlIGlmIChzLT5ncltWR0FfR0ZYX01PREVdICYgMHgxMCkg ewogICAgICAgICAvKiBvZGQvZXZlbiBtb2RlIChha2EgdGV4dCBtb2RlIG1h cHBpbmcpICovCiAgICAgICAgIHBsYW5lID0gKHMtPmdyW1ZHQV9HRlhfUExB TkVfUkVBRF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJldCA9IHMt PnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsKKyAgICAg ICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAg ICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMtPnZyYW1f cHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0YW5kYXJk IFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRkciAqIHNp emVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAg ICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5sYXRjaCA9 ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAgICAgICAg aWYgKCEocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIDB4MDgpKSB7CkBAIC05MDks NiArOTE0LDcgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25TdGF0 ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcGxh bmUgPSBhZGRyICYgMzsKICAgICAgICAgbWFzayA9ICgxIDw8IHBsYW5lKTsK ICAgICAgICAgaWYgKHMtPnNyW1ZHQV9TRVFfUExBTkVfV1JJVEVdICYgbWFz aykgeworICAgICAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFtX3NpemUp OwogICAgICAgICAgICAgcy0+dnJhbV9wdHJbYWRkcl0gPSB2YWw7CiAjaWZk ZWYgREVCVUdfVkdBX01FTQogICAgICAgICAgICAgcHJpbnRmKCJ2Z2E6IGNo YWluNDogWzB4IiBUQVJHRVRfRk1UX3BseCAiXVxuIiwgYWRkcik7CkBAIC05 MjIsNiArOTI4LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYihWR0FDb21tb25T dGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAg bWFzayA9ICgxIDw8IHBsYW5lKTsKICAgICAgICAgaWYgKHMtPnNyW1ZHQV9T RVFfUExBTkVfV1JJVEVdICYgbWFzaykgewogICAgICAgICAgICAgYWRkciA9 ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOworICAgICAgICAgICAgaWYg KGFkZHIgPj0gcy0+dnJhbV9zaXplKSB7CisgICAgICAgICAgICAgICAgcmV0 dXJuOworICAgICAgICAgICAgfQogICAgICAgICAgICAgcy0+dnJhbV9wdHJb YWRkcl0gPSB2YWw7CiAjaWZkZWYgREVCVUdfVkdBX01FTQogICAgICAgICAg ICAgcHJpbnRmKCJ2Z2E6IG9kZC9ldmVuOiBbMHgiIFRBUkdFVF9GTVRfcGx4 ICJdXG4iLCBhZGRyKTsKQEAgLTk5NSw2ICsxMDA0LDkgQEAgdm9pZCB2Z2Ff bWVtX3dyaXRlYihWR0FDb21tb25TdGF0ZSAqcywgaHdhZGRyIGFkZHIsIHVp bnQzMl90IHZhbCkKICAgICAgICAgbWFzayA9IHMtPnNyW1ZHQV9TRVFfUExB TkVfV1JJVEVdOwogICAgICAgICBzLT5wbGFuZV91cGRhdGVkIHw9IG1hc2s7 IC8qIG9ubHkgdXNlZCB0byBkZXRlY3QgZm9udCBjaGFuZ2UgKi8KICAgICAg ICAgd3JpdGVfbWFzayA9IG1hc2sxNlttYXNrXTsKKyAgICAgICAgaWYgKGFk ZHIgKiBzaXplb2YodWludDMyX3QpID49IHMtPnZyYW1fc2l6ZSkgeworICAg ICAgICAgICAgcmV0dXJuOworICAgICAgICB9CiAgICAgICAgICgodWludDMy X3QgKilzLT52cmFtX3B0cilbYWRkcl0gPQogICAgICAgICAgICAgKCgodWlu dDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl0gJiB+d3JpdGVfbWFzaykgfAog ICAgICAgICAgICAgKHZhbCAmIHdyaXRlX21hc2spOwotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBmY2QyNjJhOTY2YzcyZGFjNDEyN2Q1ZmM0YTlkYTNjZjI0MjM5NWRk IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjcxNDJi YS4uZDQ5M2IwYSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIE1lbW9yeVJlZ2lvbiAqcmVnaW9uLCAqb2xkX3JlZ2lv biA9IHMtPmNoYWluNF9hbGlhczsKQEAgLTU4OSw3ICs1OTQsNyBAQCBzdGF0 aWMgdm9pZCB2YmVfZml4dXBfcmVncyhWR0FDb21tb25TdGF0ZSAqcykKICAg ICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwogICAgIHVpbnQzMl90IGJp dHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsKIAotICAgIGlmICghKHJb VkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkp IHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIC8qIHZi ZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8gZG8gKi8KICAgICAgICAg cmV0dXJuOwogICAgIH0KQEAgLTExNzAsNyArMTE3NSw3IEBAIHN0YXRpYyB2 b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FDb21tb25TdGF0ZSAqcywKIHsKICAg ICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwgbGluZV9jb21w YXJlOwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9F TkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2Vu YWJsZWQocykpIHsKICAgICAgICAgbGluZV9vZmZzZXQgPSBzLT52YmVfbGlu ZV9vZmZzZXQ7CiAgICAgICAgIHN0YXJ0X2FkZHIgPSBzLT52YmVfc3RhcnRf YWRkcjsKICAgICAgICAgbGluZV9jb21wYXJlID0gNjU1MzU7CkBAIC0xNjIz LDcgKzE2MjgsNyBAQCBzdGF0aWMgaW50IHZnYV9nZXRfYnBwKFZHQUNvbW1v blN0YXRlICpzKQogewogICAgIGludCByZXQ7CiAKLSAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5B QkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICBy ZXQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXTsKICAgICB9 IGVsc2UgewogICAgICAgICByZXQgPSAwOwpAQCAtMTYzNSw3ICsxNjQwLDcg QEAgc3RhdGljIHZvaWQgdmdhX2dldF9yZXNvbHV0aW9uKFZHQUNvbW1vblN0 YXRlICpzLCBpbnQgKnB3aWR0aCwgaW50ICpwaGVpZ2h0KQogewogICAgIGlu dCB3aWR0aCwgaGVpZ2h0OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9E SVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAg ICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAgICAgd2lkdGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU107CiAgICAgICAgIGhlaWdo dCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXTsKICAgICB9 IGVsc2UgewotLSAKMS45LjEKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSA2MGM4N2Q0MjVjNDFmNDNhYzgxY2IzM2IyN2FmNjg0NmYwMjJiNDVj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc5ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzUgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZDQ5M2IwYS4uM2U0YzUyZSAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02Njks NiArNjY5LDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzU1LDUzICs3OTgsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91 bGQgYmUgZG9uZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICgh KHZhbCAmIFZCRV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAg ICAgICAgICBtZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJF U10gKiBzLT52YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0K LQotICAgICAgICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBn cmFwaGljIG1vZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAg ICAgaW4gQklPUykgKi8KLSAgICAgICAgICAgICAgICAvKiBncmFwaGljIG1v ZGUgKyBtZW1vcnkgbWFwIDEgKi8KLSAgICAgICAgICAgICAgICBzLT5ncltW R0FfR0ZYX01JU0NdID0gKHMtPmdyW1ZHQV9HRlhfTUlTQ10gJiB+MHgwYykg fCAweDA0IHwKLSAgICAgICAgICAgICAgICAgICAgVkdBX0dSMDZfR1JBUEhJ Q1NfTU9ERTsKLSAgICAgICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19NT0RF XSB8PSAzOyAvKiBubyBDR0EgbW9kZXMgKi8KLSAgICAgICAgICAgICAgICBz LT5jcltWR0FfQ1JUQ19PRkZTRVRdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+ IDM7Ci0gICAgICAgICAgICAgICAgLyogd2lkdGggKi8KLSAgICAgICAgICAg ICAgICBzLT5jcltWR0FfQ1JUQ19IX0RJU1BdID0KLSAgICAgICAgICAgICAg ICAgICAgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAz KSAtIDE7Ci0gICAgICAgICAgICAgICAgLyogaGVpZ2h0IChvbmx5IG1lYW5p bmdmdWwgaWYgPCAxMDI0KSAqLwotICAgICAgICAgICAgICAgIGggPSBzLT52 YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOwotICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX1ZfRElTUF9FTkRdID0gaDsKLSAgICAg ICAgICAgICAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gPSAocy0+Y3Jb VkdBX0NSVENfT1ZFUkZMT1ddICYgfjB4NDIpIHwKLSAgICAgICAgICAgICAg ICAgICAgKChoID4+IDcpICYgMHgwMikgfCAoKGggPj4gMykgJiAweDQwKTsK LSAgICAgICAgICAgICAgICAvKiBsaW5lIGNvbXBhcmUgdG8gMTAyMyAqLwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0xJTkVfQ09NUEFSRV0g PSAweGZmOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJG TE9XXSB8PSAweDEwOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X01BWF9TQ0FOXSB8PSAweDQwOwotCi0gICAgICAgICAgICAgICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAg ICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDA7Ci0gICAgICAgICAg ICAgICAgICAgIHMtPnNyW1ZHQV9TRVFfQ0xPQ0tfTU9ERV0gJj0gfjg7IC8q IG5vIGRvdWJsZSBsaW5lICovCi0gICAgICAgICAgICAgICAgfSBlbHNlIHsK LSAgICAgICAgICAgICAgICAgICAgc2hpZnRfY29udHJvbCA9IDI7Ci0gICAg ICAgICAgICAgICAgICAgIC8qIHNldCBjaGFpbiA0IG1vZGUgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9NRU1PUllfTU9ERV0gfD0g VkdBX1NSMDRfQ0hOXzRNOwotICAgICAgICAgICAgICAgICAgICAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgICAgIHMtPnNy W1ZHQV9TRVFfUExBTkVfV1JJVEVdIHw9IFZHQV9TUjAyX0FMTF9QTEFORVM7 Ci0gICAgICAgICAgICAgICAgfQotICAgICAgICAgICAgICAgIHMtPmdyW1ZH QV9HRlhfTU9ERV0gPSAocy0+Z3JbVkdBX0dGWF9NT0RFXSAmIH4weDYwKSB8 Ci0gICAgICAgICAgICAgICAgICAgIChzaGlmdF9jb250cm9sIDw8IDUpOwot ICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX01BWF9TQ0FOXSAmPSB+ MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KICAgICAgICAgICAgIH0gZWxz ZSB7CiAgICAgICAgICAgICAgICAgLyogWFhYOiB0aGUgYmlvcyBzaG91bGQg ZG8gdGhhdCAqLwogICAgICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0ID0g MDsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA0OTQ4NGViYjc5ZTRlNGVkYWMyNjA5ZmRhYTZlZjNhYzFhNGVlNmQw IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggM2U0YzUyZS4uZjI2NWI5NyAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03ODgsNiArNzg4LDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAxMTA5YjhiZDA1OTQ3YWMwOWI2ZjI0ZjQ2YTlmNzg0YzM5Y2FjNDZl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggZjI2NWI5Ny4uYTNmZWIy ZCAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNjYsNiArMTY2LDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNTA5LDYgKzUx MSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTU0MCw2ICs1NDMsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTU1OCwxMCArNTYy LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiMTZkYjVhYjJkMGM1ZmY3NTVlMDg5NDJmNGM4ZThmOWY4NjE4ZWFl IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQt b2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5l bC5vcmc+Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDI0ICsrKysrKysrKysr KysrKysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDE4IGluc2VydGlvbnMo KyksIDYgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggNTJlYWYwNS4uYjU3Nzcx MiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNzgsNiArMTc4LDcgQEAgc3RhdGljIHZvaWQgdmdh X3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRlICpzKQogICAg ICAgICAgICAgYnJlYWs7CiAgICAgICAgIH0KICAgICAgICAgYmFzZSArPSBp c2FfbWVtX2Jhc2U7CisgICAgICAgIGFzc2VydChvZmZzZXQgKyBzaXplIDw9 IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgIG1lbW9yeV9yZWdpb25faW5pdF9h bGlhcygmcy0+Y2hhaW40X2FsaWFzLCBtZW1vcnlfcmVnaW9uX293bmVyKCZz LT52cmFtKSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJ2 Z2EuY2hhaW40IiwgJnMtPnZyYW0sIG9mZnNldCwgc2l6ZSk7CiAgICAgICAg IG1lbW9yeV9yZWdpb25fYWRkX3N1YnJlZ2lvbl9vdmVybGFwKHMtPmxlZ2Fj eV9hZGRyZXNzX3NwYWNlLCBiYXNlLApAQCAtNzE1LDExICs3MTYsNyBAQCB2 b2lkIHZiZV9pb3BvcnRfd3JpdGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQz Ml90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIHZiZV9maXh1 cF9yZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgIGNhc2Ug VkJFX0RJU1BJX0lOREVYX0JBTks6Ci0gICAgICAgICAgICBpZiAocy0+dmJl X3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF0gPT0gNCkgewotICAgICAgICAg ICAgICB2YWwgJj0gKHMtPnZiZV9iYW5rX21hc2sgPj4gMik7Ci0gICAgICAg ICAgICB9IGVsc2UgewotICAgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKLSAgICAgICAgICAgIH0KKyAgICAgICAgICAgIHZhbCAmPSBz LT52YmVfYmFua19tYXNrOwogICAgICAgICAgICAgcy0+dmJlX3JlZ3Nbcy0+ dmJlX2luZGV4XSA9IHZhbDsKICAgICAgICAgICAgIHMtPmJhbmtfb2Zmc2V0 ID0gKHZhbCA8PCAxNik7CiAgICAgICAgICAgICB2Z2FfdXBkYXRlX21lbW9y eV9hY2Nlc3Mocyk7CkBAIC04MTgsMTMgKzgxNSwyMSBAQCB1aW50MzJfdCB2 Z2FfbWVtX3JlYWRiKFZHQUNvbW1vblN0YXRlICpzLCBod2FkZHIgYWRkcikK IAogICAgIGlmIChzLT5zcltWR0FfU0VRX01FTU9SWV9NT0RFXSAmIFZHQV9T UjA0X0NITl80TSkgewogICAgICAgICAvKiBjaGFpbiA0IG1vZGUgOiBzaW1w bGVzdCBhY2Nlc3MgKi8KKyAgICAgICAgYXNzZXJ0KGFkZHIgPCBzLT52cmFt X3NpemUpOwogICAgICAgICByZXQgPSBzLT52cmFtX3B0clthZGRyXTsKICAg ICB9IGVsc2UgaWYgKHMtPmdyW1ZHQV9HRlhfTU9ERV0gJiAweDEwKSB7CiAg ICAgICAgIC8qIG9kZC9ldmVuIG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGlu ZykgKi8KICAgICAgICAgcGxhbmUgPSAocy0+Z3JbVkdBX0dGWF9QTEFORV9S RUFEXSAmIDIpIHwgKGFkZHIgJiAxKTsKLSAgICAgICAgcmV0ID0gcy0+dnJh bV9wdHJbKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmVdOworICAgICAgICBh ZGRyID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgIGlm IChhZGRyID49IHMtPnZyYW1fc2l6ZSkgeworICAgICAgICAgICAgcmV0dXJu IDB4ZmY7CisgICAgICAgIH0KKyAgICAgICAgcmV0ID0gcy0+dnJhbV9wdHJb YWRkcl07CiAgICAgfSBlbHNlIHsKICAgICAgICAgLyogc3RhbmRhcmQgVkdB IGxhdGNoZWQgYWNjZXNzICovCisgICAgICAgIGlmIChhZGRyICogc2l6ZW9m KHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJl dHVybiAweGZmOworICAgICAgICB9CiAgICAgICAgIHMtPmxhdGNoID0gKCh1 aW50MzJfdCAqKXMtPnZyYW1fcHRyKVthZGRyXTsKIAogICAgICAgICBpZiAo IShzLT5ncltWR0FfR0ZYX01PREVdICYgMHgwOCkpIHsKQEAgLTg4MSw2ICs4 ODYsNyBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRlICpz LCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBwbGFuZSA9 IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gJiBtYXNrKSB7 CisgICAgICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAg ICAgICAgICAgICBzLT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBE RUJVR19WR0FfTUVNCiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40 OiBbMHgiIFRBUkdFVF9GTVRfcGx4ICJdXG4iLCBhZGRyKTsKQEAgLTg5NCw2 ICs5MDAsOSBAQCB2b2lkIHZnYV9tZW1fd3JpdGViKFZHQUNvbW1vblN0YXRl ICpzLCBod2FkZHIgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBtYXNr ID0gKDEgPDwgcGxhbmUpOwogICAgICAgICBpZiAocy0+c3JbVkdBX1NFUV9Q TEFORV9XUklURV0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRyID0gKChh ZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBpZiAoYWRk ciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICByZXR1cm47 CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0clthZGRy XSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAgICAgICBw cmludGYoInZnYTogb2RkL2V2ZW46IFsweCIgVEFSR0VUX0ZNVF9wbHggIl1c biIsIGFkZHIpOwpAQCAtOTY3LDYgKzk3Niw5IEBAIHZvaWQgdmdhX21lbV93 cml0ZWIoVkdBQ29tbW9uU3RhdGUgKnMsIGh3YWRkciBhZGRyLCB1aW50MzJf dCB2YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zcltWR0FfU0VRX1BMQU5FX1dS SVRFXTsKICAgICAgICAgcy0+cGxhbmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBv bmx5IHVzZWQgdG8gZGV0ZWN0IGZvbnQgY2hhbmdlICovCiAgICAgICAgIHdy aXRlX21hc2sgPSBtYXNrMTZbbWFza107CisgICAgICAgIGlmIChhZGRyICog c2l6ZW9mKHVpbnQzMl90KSA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybjsKKyAgICAgICAgfQogICAgICAgICAoKHVpbnQzMl90ICop cy0+dnJhbV9wdHIpW2FkZHJdID0KICAgICAgICAgICAgICgoKHVpbnQzMl90 ICopcy0+dnJhbV9wdHIpW2FkZHJdICYgfndyaXRlX21hc2spIHwKICAgICAg ICAgICAgICh2YWwgJiB3cml0ZV9tYXNrKTsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSBlMDI2ODU5ZTlhZWNmODYzNWRhZjA2ZTlmYzIzMjUyMzlmNDU4OTU5 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5vIFN0YWJlbGxp bmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcvZGlzcGxheS92 Z2EuYyB8IDEzICsrKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA5IGlu c2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvaHcv ZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggYjU3Nzcx Mi4uZWJmNjNmZiAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysg Yi9ody9kaXNwbGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDExIEBAIHN0YXRp YyB1aW50MzJfdCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhw YW5kMlsyNTZdOwogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAK K3N0YXRpYyBpbmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FDb21tb25TdGF0 ZSAqcykKK3sKKyAgICByZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lO REVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGlj IHZvaWQgdmdhX3VwZGF0ZV9tZW1vcnlfYWNjZXNzKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIGh3YWRkciBiYXNlLCBvZmZzZXQsIHNpemU7CkBAIC01 NjMsNyArNTY4LDcgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdB Q29tbW9uU3RhdGUgKnMpCiAgICAgdWludDE2X3QgKnIgPSBzLT52YmVfcmVn czsKICAgICB1aW50MzJfdCBiaXRzLCBsaW5lbGVuZ3RoLCBtYXh5LCBvZmZz ZXQ7CiAKLSAgICBpZiAoIShyW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYg VkJFX0RJU1BJX0VOQUJMRUQpKSB7CisgICAgaWYgKCF2YmVfZW5hYmxlZChz KSkgewogICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9mZiAtLSBub3RoaW5n IHRvIGRvICovCiAgICAgICAgIHJldHVybjsKICAgICB9CkBAIC0xMDU3LDcg KzEwNjIsNyBAQCBzdGF0aWMgdm9pZCB2Z2FfZ2V0X29mZnNldHMoVkdBQ29t bW9uU3RhdGUgKnMsCiB7CiAgICAgdWludDMyX3Qgc3RhcnRfYWRkciwgbGlu ZV9vZmZzZXQsIGxpbmVfY29tcGFyZTsKIAotICAgIGlmIChzLT52YmVfcmVn c1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVE KSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAgICAgICAgIGxpbmVf b2Zmc2V0ID0gcy0+dmJlX2xpbmVfb2Zmc2V0OwogICAgICAgICBzdGFydF9h ZGRyID0gcy0+dmJlX3N0YXJ0X2FkZHI7CiAgICAgICAgIGxpbmVfY29tcGFy ZSA9IDY1NTM1OwpAQCAtMTM4Miw3ICsxMzg3LDcgQEAgc3RhdGljIGludCB2 Z2FfZ2V0X2JwcChWR0FDb21tb25TdGF0ZSAqcykKIHsKICAgICBpbnQgcmV0 OwogCi0gICAgaWYgKHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFC TEVdICYgVkJFX0RJU1BJX0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJs ZWQocykpIHsKICAgICAgICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJ X0lOREVYX0JQUF07CiAgICAgfSBlbHNlIHsKICAgICAgICAgcmV0ID0gMDsK QEAgLTEzOTQsNyArMTM5OSw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfcmVz b2x1dGlvbihWR0FDb21tb25TdGF0ZSAqcywgaW50ICpwd2lkdGgsIGludCAq cGhlaWdodCkKIHsKICAgICBpbnQgd2lkdGgsIGhlaWdodDsKIAotICAgIGlm IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSAmIFZCRV9E SVNQSV9FTkFCTEVEKSB7CisgICAgaWYgKHZiZV9lbmFibGVkKHMpKSB7CiAg ICAgICAgIHdpZHRoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1hS RVNdOwogICAgICAgICBoZWlnaHQgPSBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWVJFU107CiAgICAgfSBlbHNlIHsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBiMzZhNGUyNmNhZjdhMDUwYTZlODU5MzUyN2MyNmJmYTRmNDdhNzU4 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5 OiBTdGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+ Ci0tLQogaHcvZGlzcGxheS92Z2EuYyB8IDc4ICsrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAxIGZp bGUgY2hhbmdlZCwgNDQgaW5zZXJ0aW9ucygrKSwgMzQgZGVsZXRpb25zKC0p CgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rpc3BsYXkv dmdhLmMKaW5kZXggZWJmNjNmZi4uZmI4MjJmNCAxMDA2NDQKLS0tIGEvaHcv ZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBAIC02NDMs NiArNjQzLDQ5IEBAIHN0YXRpYyB2b2lkIHZiZV9maXh1cF9yZWdzKFZHQUNv bW1vblN0YXRlICpzKQogICAgIHMtPnZiZV9zdGFydF9hZGRyICA9IG9mZnNl dCAvIDQ7CiB9CiAKKy8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGlj IG1vZGUgKi8KK3N0YXRpYyB2b2lkIHZiZV91cGRhdGVfdmdhcmVncyhWR0FD b21tb25TdGF0ZSAqcykKK3sKKyAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsK KworICAgIGlmICghdmJlX2VuYWJsZWQocykpIHsKKyAgICAgICAgLyogdmJl IGlzIHR1cm5lZCBvZmYgLS0gbm90aGluZyB0byBkbyAqLworICAgICAgICBy ZXR1cm47CisgICAgfQorCisgICAgLyogZ3JhcGhpYyBtb2RlICsgbWVtb3J5 IG1hcCAxICovCisgICAgcy0+Z3JbVkdBX0dGWF9NSVNDXSA9IChzLT5ncltW R0FfR0ZYX01JU0NdICYgfjB4MGMpIHwgMHgwNCB8CisgICAgICAgIFZHQV9H UjA2X0dSQVBISUNTX01PREU7CisgICAgcy0+Y3JbVkdBX0NSVENfTU9ERV0g fD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisgICAgcy0+Y3JbVkdBX0NSVENf T0ZGU0VUXSA9IHMtPnZiZV9saW5lX29mZnNldCA+PiAzOworICAgIC8qIHdp ZHRoICovCisgICAgcy0+Y3JbVkdBX0NSVENfSF9ESVNQXSA9CisgICAgICAg IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OworICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVsIGlmIDwgMTAyNCkg Ki8KKyAgICBoID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd IC0gMTsKKyAgICBzLT5jcltWR0FfQ1JUQ19WX0RJU1BfRU5EXSA9IGg7Cisg ICAgcy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddID0gKHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4 MDIpIHwgKChoID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJl IHRvIDEwMjMgKi8KKyAgICBzLT5jcltWR0FfQ1JUQ19MSU5FX0NPTVBBUkVd ID0gMHhmZjsKKyAgICBzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gfD0gMHgx MDsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gfD0gMHg0MDsKKwor ICAgIGlmIChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0 KSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOworICAgICAgICBzLT5z cltWR0FfU0VRX0NMT0NLX01PREVdICY9IH44OyAvKiBubyBkb3VibGUgbGlu ZSAqLworICAgIH0gZWxzZSB7CisgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAy OworICAgICAgICAvKiBzZXQgY2hhaW4gNCBtb2RlICovCisgICAgICAgIHMt PnNyW1ZHQV9TRVFfTUVNT1JZX01PREVdIHw9IFZHQV9TUjA0X0NITl80TTsK KyAgICAgICAgLyogYWN0aXZhdGUgYWxsIHBsYW5lcyAqLworICAgICAgICBz LT5zcltWR0FfU0VRX1BMQU5FX1dSSVRFXSB8PSBWR0FfU1IwMl9BTExfUExB TkVTOworICAgIH0KKyAgICBzLT5ncltWR0FfR0ZYX01PREVdID0gKHMtPmdy W1ZHQV9HRlhfTU9ERV0gJiB+MHg2MCkgfAorICAgICAgICAoc2hpZnRfY29u dHJvbCA8PCA1KTsKKyAgICBzLT5jcltWR0FfQ1JUQ19NQVhfU0NBTl0gJj0g fjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCit9CisKIHN0YXRpYyB1aW50 MzJfdCB2YmVfaW9wb3J0X3JlYWRfaW5kZXgodm9pZCAqb3BhcXVlLCB1aW50 MzJfdCBhZGRyKQogewogICAgIFZHQUNvbW1vblN0YXRlICpzID0gb3BhcXVl OwpAQCAtNzI5LDUyICs3NzIsMTkgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRl X2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX0VOQUJMRToKICAg ICAgICAgICAgIGlmICgodmFsICYgVkJFX0RJU1BJX0VOQUJMRUQpICYmCiAg ICAgICAgICAgICAgICAgIShzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEKSkgewotICAgICAgICAgICAg ICAgIGludCBoLCBzaGlmdF9jb250cm9sOwogCiAgICAgICAgICAgICAgICAg cy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1ZJUlRfV0lEVEhdID0gMDsK ICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf WF9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tW QkVfRElTUElfSU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAg ICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVf RElTUElfRU5BQkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVn cyhzKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7 CiAKICAgICAgICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuICovCiAg ICAgICAgICAgICAgICAgaWYgKCEodmFsICYgVkJFX0RJU1BJX05PQ0xFQVJN RU0pKSB7CiAgICAgICAgICAgICAgICAgICAgIG1lbXNldChzLT52cmFtX3B0 ciwgMCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgIHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9ZUkVTXSAqIHMtPnZiZV9saW5lX29mZnNldCk7 CiAgICAgICAgICAgICAgICAgfQotCi0gICAgICAgICAgICAgICAgLyogd2Ug aW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAqLwotICAgICAgICAg ICAgICAgIC8qIGdyYXBoaWMgbW9kZSArIG1lbW9yeSBtYXAgMSAqLwotICAg ICAgICAgICAgICAgIHMtPmdyW1ZHQV9HRlhfTUlTQ10gPSAocy0+Z3JbVkdB X0dGWF9NSVNDXSAmIH4weDBjKSB8IDB4MDQgfAotICAgICAgICAgICAgICAg ICAgICBWR0FfR1IwNl9HUkFQSElDU19NT0RFOwotICAgICAgICAgICAgICAg IHMtPmNyW1ZHQV9DUlRDX01PREVdIHw9IDM7IC8qIG5vIENHQSBtb2RlcyAq LwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX09GRlNFVF0gPSBz LT52YmVfbGluZV9vZmZzZXQgPj4gMzsKLSAgICAgICAgICAgICAgICAvKiB3 aWR0aCAqLwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRDX0hfRElT UF0gPQotICAgICAgICAgICAgICAgICAgICAocy0+dmJlX3JlZ3NbVkJFX0RJ U1BJX0lOREVYX1hSRVNdID4+IDMpIC0gMTsKLSAgICAgICAgICAgICAgICAv KiBoZWlnaHQgKG9ubHkgbWVhbmluZ2Z1bCBpZiA8IDEwMjQpICovCi0gICAg ICAgICAgICAgICAgaCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9Z UkVTXSAtIDE7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdBX0NSVENfVl9E SVNQX0VORF0gPSBoOwotICAgICAgICAgICAgICAgIHMtPmNyW1ZHQV9DUlRD X09WRVJGTE9XXSA9IChzLT5jcltWR0FfQ1JUQ19PVkVSRkxPV10gJiB+MHg0 MikgfAotICAgICAgICAgICAgICAgICAgICAoKGggPj4gNykgJiAweDAyKSB8 ICgoaCA+PiAzKSAmIDB4NDApOwotICAgICAgICAgICAgICAgIC8qIGxpbmUg Y29tcGFyZSB0byAxMDIzICovCi0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTElORV9DT01QQVJFXSA9IDB4ZmY7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbVkdBX0NSVENfT1ZFUkZMT1ddIHw9IDB4MTA7Ci0gICAgICAgICAg ICAgICAgcy0+Y3JbVkdBX0NSVENfTUFYX1NDQU5dIHw9IDB4NDA7Ci0KLSAg ICAgICAgICAgICAgICBpZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVY X0JQUF0gPT0gNCkgewotICAgICAgICAgICAgICAgICAgICBzaGlmdF9jb250 cm9sID0gMDsKLSAgICAgICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9D TE9DS19NT0RFXSAmPSB+ODsgLyogbm8gZG91YmxlIGxpbmUgKi8KLSAgICAg ICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAgICAgICAgICBzaGlm dF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAgICAgLyogc2V0IGNo YWluIDQgbW9kZSAqLwotICAgICAgICAgICAgICAgICAgICBzLT5zcltWR0Ff U0VRX01FTU9SWV9NT0RFXSB8PSBWR0FfU1IwNF9DSE5fNE07Ci0gICAgICAg ICAgICAgICAgICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KLSAgICAg ICAgICAgICAgICAgICAgcy0+c3JbVkdBX1NFUV9QTEFORV9XUklURV0gfD0g VkdBX1NSMDJfQUxMX1BMQU5FUzsKLSAgICAgICAgICAgICAgICB9Ci0gICAg ICAgICAgICAgICAgcy0+Z3JbVkdBX0dGWF9NT0RFXSA9IChzLT5ncltWR0Ff R0ZYX01PREVdICYgfjB4NjApIHwKLSAgICAgICAgICAgICAgICAgICAgKHNo aWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbVkdB X0NSVENfTUFYX1NDQU5dICY9IH4weDlmOyAvKiBubyBkb3VibGUgc2NhbiAq LwogICAgICAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7CiAgICAgICAgICAgICB9Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSBlZjhiZDFiMjZhNTk3YWU3YzMwNjIyNzY1NTYyNjY0MDA5M2NiN2Ey IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW5v IFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0tLQogaHcv ZGlzcGxheS92Z2EuYyB8IDEgKwogMSBmaWxlIGNoYW5nZWQsIDEgaW5zZXJ0 aW9uKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92Z2EuYyBiL2h3L2Rp c3BsYXkvdmdhLmMKaW5kZXggZmI4MjJmNC4uMzczOTc1OCAxMDA2NDQKLS0t IGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNwbGF5L3ZnYS5jCkBA IC03NjIsNiArNzYyLDcgQEAgdm9pZCB2YmVfaW9wb3J0X3dyaXRlX2RhdGEo dm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAg ICAgICAgIGNhc2UgVkJFX0RJU1BJX0lOREVYX1lfT0ZGU0VUOgogICAgICAg ICAgICAgcy0+dmJlX3JlZ3Nbcy0+dmJlX2luZGV4XSA9IHZhbDsKICAgICAg ICAgICAgIHZiZV9maXh1cF9yZWdzKHMpOworICAgICAgICAgICAgdmJlX3Vw ZGF0ZV92Z2FyZWdzKHMpOwogICAgICAgICAgICAgYnJlYWs7CiAgICAgICAg IGNhc2UgVkJFX0RJU1BJX0lOREVYX0JBTks6CiAgICAgICAgICAgICB2YWwg Jj0gcy0+dmJlX2JhbmtfbWFzazsKLS0gCjEuOS4xCgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSA5MjQ1NmMwYzM2MWQ1ZGE4NThkNTQ0NjQ3YzYyNDZlYzc4ZWQ5MjJi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpTaWduZWQtb2ZmLWJ5OiBT dGVmYW5vIFN0YWJlbGxpbmkgPHNzdGFiZWxsaW5pQGtlcm5lbC5vcmc+Ci0t LQogaHcvZGlzcGxheS92Z2EuYyB8IDYgKysrKysrCiAxIGZpbGUgY2hhbmdl ZCwgNiBpbnNlcnRpb25zKCspCgpkaWZmIC0tZ2l0IGEvaHcvZGlzcGxheS92 Z2EuYyBiL2h3L2Rpc3BsYXkvdmdhLmMKaW5kZXggMzczOTc1OC4uZTdiZTk3 ZSAxMDA2NDQKLS0tIGEvaHcvZGlzcGxheS92Z2EuYworKysgYi9ody9kaXNw bGF5L3ZnYS5jCkBAIC0xNDAsNiArMTQwLDggQEAgc3RhdGljIHVpbnQzMl90 IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBhbmQyWzI1Nl07 CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAorc3RhdGljIHZv aWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQUNvbW1vblN0YXRlICpzKTsKKwog c3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQUNvbW1vblN0YXRl ICpzKQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5E RVhfRU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDgzLDYgKzQ4 NSw3IEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgcHJpbnRmKCJ2 Z2E6IHdyaXRlIFNSJXggPSAweCUwMnhcbiIsIHMtPnNyX2luZGV4LCB2YWwp OwogI2VuZGlmCiAgICAgICAgIHMtPnNyW3MtPnNyX2luZGV4XSA9IHZhbCAm IHNyX21hc2tbcy0+c3JfaW5kZXhdOworICAgICAgICB2YmVfdXBkYXRlX3Zn YXJlZ3Mocyk7CiAgICAgICAgIGlmIChzLT5zcl9pbmRleCA9PSBWR0FfU0VR X0NMT0NLX01PREUpIHsKICAgICAgICAgICAgIHMtPnVwZGF0ZV9yZXRyYWNl X2luZm8ocyk7CiAgICAgICAgIH0KQEAgLTUxNCw2ICs1MTcsNyBAQCB2b2lk IHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50ZigidmdhOiB3cml0ZSBH UiV4ID0gMHglMDJ4XG4iLCBzLT5ncl9pbmRleCwgdmFsKTsKICNlbmRpZgog ICAgICAgICBzLT5ncltzLT5ncl9pbmRleF0gPSB2YWwgJiBncl9tYXNrW3Mt PmdyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwog ICAgICAgICB2Z2FfdXBkYXRlX21lbW9yeV9hY2Nlc3Mocyk7CiAgICAgICAg IGJyZWFrOwogICAgIGNhc2UgVkdBX0NSVF9JTToKQEAgLTUzMiwxMCArNTM2 LDEyIEBAIHZvaWQgdmdhX2lvcG9ydF93cml0ZSh2b2lkICpvcGFxdWUsIHVp bnQzMl90IGFkZHIsIHVpbnQzMl90IHZhbCkKICAgICAgICAgICAgIGlmIChz LT5jcl9pbmRleCA9PSBWR0FfQ1JUQ19PVkVSRkxPVykgewogICAgICAgICAg ICAgICAgIHMtPmNyW1ZHQV9DUlRDX09WRVJGTE9XXSA9IChzLT5jcltWR0Ff Q1JUQ19PVkVSRkxPV10gJiB+MHgxMCkgfAogICAgICAgICAgICAgICAgICAg ICAodmFsICYgMHgxMCk7CisgICAgICAgICAgICAgICAgdmJlX3VwZGF0ZV92 Z2FyZWdzKHMpOwogICAgICAgICAgICAgfQogICAgICAgICAgICAgcmV0dXJu OwogICAgICAgICB9CiAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZh bDsKKyAgICAgICAgdmJlX3VwZGF0ZV92Z2FyZWdzKHMpOwogCiAgICAgICAg IHN3aXRjaChzLT5jcl9pbmRleCkgewogICAgICAgICBjYXNlIFZHQV9DUlRD X0hfVE9UQUw6Ci0tIAoxLjkuMQoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch" Content-Transfer-Encoding: base64 RnJvbSBiZWJiNGY1ODA5MDFmYjYzODAxNmQ5ODUxYTI4ZGJiODNkNDRiM2E2 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAw ODo0OToxMCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMS81XSB2Z2E6IGZpeCBi YW5rZWQgYWNjZXNzIGJvdW5kcyBjaGVja2luZyAoQ1ZFLTIwMTYtMzcxMCkK CnZnYSBhbGxvd3MgYmFua2VkIGFjY2VzcyB0byB2aWRlbyBtZW1vcnkgdXNp bmcgdGhlIHdpbmRvdyBhdCAweGEwMDAwMAphbmQgaXQgc3VwcG9ydHMgYSBk aWZmZXJlbnQgYWNjZXNzIG1vZGVzIHdpdGggZGlmZmVyZW50IGFkZHJlc3MK Y2FsY3VsYXRpb25zLgoKVGhlIFZCRSBib2NocyBleHRlbnRpb25zIHN1cHBv cnQgYmFua2VkIGFjY2VzcyB0b28sIHVzaW5nIHRoZQpWQkVfRElTUElfSU5E RVhfQkFOSyByZWdpc3Rlci4gIFRoZSBjb2RlIHRyaWVzIHRvIHRha2UgdGhl IGRpZmZlcmVudAphZGRyZXNzIGNhbGN1bGF0aW9ucyBpbnRvIGFjY291bnQg YW5kIGFwcGxpZXMgZGlmZmVyZW50IGxpbWl0cyB0bwpWQkVfRElTUElfSU5E RVhfQkFOSyBkZXBlbmRpbmcgb24gdGhlIGN1cnJlbnQgYWNjZXNzIG1vZGUu CgpXaGljaCBpcyBwcm9iYWJseSBlZmZlY3RpdmUgaW4gc3RvcHBpbmcgbWlz cHJvZ3JhbW1pbmcgYnkgYWNjaWRlbnQuCkJ1dCBmcm9tIGEgc2VjdXJpdHkg cG9pbnQgb2YgdmlldyBjb21wbGV0ZWx5IHVzZWxlc3MgYXMgYW4gYXR0YWNr ZXIKY2FuIGVhc2lseSBjaGFuZ2UgYWNjZXNzIG1vZGVzIGFmdGVyIHNldHRp bmcgdGhlIGJhbmsgcmVnaXN0ZXIuCgpEcm9wIHRoZSBib2d1cyBjaGVjaywg YWRkIHJhbmdlIGNoZWNrcyB0byB2Z2FfbWVtX3tyZWFkYix3cml0ZWJ9Cmlu c3RlYWQuCgpGaXhlczogQ1ZFLTIwMTYtMzcxMApSZXBvcnRlZC1ieTogUWlu Z2hhbyBUYW5nIDxsdW9kYWxvbmdkZUBnbWFpbC5jb20+ClNpZ25lZC1vZmYt Ynk6IEdlcmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3Bv cnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRy ZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3 L3ZnYS5jIHwgMjUgKysrKysrKysrKysrKysrKysrKy0tLS0tLQogMSBmaWxl IGNoYW5nZWQsIDE5IGluc2VydGlvbnMoKyksIDYgZGVsZXRpb25zKC0pCgpk aWZmIC0tZ2l0IGEvaHcvdmdhLmMgYi9ody92Z2EuYwppbmRleCBlOGIxY2Uw Li43MjI1NmYxIDEwMDY0NAotLS0gYS9ody92Z2EuYworKysgYi9ody92Z2Eu YwpAQCAtMzQsNiArMzQsOCBAQAogCiAjaW5jbHVkZSAicWVtdS10aW1lci5o IgogCisjaW5jbHVkZSA8YXNzZXJ0Lmg+CisKIC8vI2RlZmluZSBERUJVR19W R0EKIC8vI2RlZmluZSBERUJVR19WR0FfTUVNCiAvLyNkZWZpbmUgREVCVUdf VkdBX1JFRwpAQCAtNjg0LDExICs2ODYsNyBAQCBzdGF0aWMgdm9pZCB2YmVf aW9wb3J0X3dyaXRlX2RhdGEodm9pZCAqb3BhcXVlLCB1aW50MzJfdCBhZGRy LCB1aW50MzJfdCB2YWwpCiAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhz KTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBjYXNlIFZCRV9ESVNQ SV9JTkRFWF9CQU5LOgotICAgICAgICAgICAgaWYgKHMtPnZiZV9yZWdzW1ZC RV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKLSAgICAgICAgICAgICAgdmFs ICY9IChzLT52YmVfYmFua19tYXNrID4+IDIpOwotICAgICAgICAgICAgfSBl bHNlIHsKLSAgICAgICAgICAgICAgdmFsICY9IHMtPnZiZV9iYW5rX21hc2s7 Ci0gICAgICAgICAgICB9CisgICAgICAgICAgICB2YWwgJj0gcy0+dmJlX2Jh bmtfbWFzazsKICAgICAgICAgICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRl eF0gPSB2YWw7CiAgICAgICAgICAgICBzLT5iYW5rX29mZnNldCA9ICh2YWwg PDwgMTYpOwogICAgICAgICAgICAgYnJlYWs7CkBAIC03ODcsMTMgKzc4NSwy MSBAQCB1aW50MzJfdCB2Z2FfbWVtX3JlYWRiKHZvaWQgKm9wYXF1ZSwgdGFy Z2V0X3BoeXNfYWRkcl90IGFkZHIpCiAKICAgICBpZiAocy0+c3JbNF0gJiAw eDA4KSB7CiAgICAgICAgIC8qIGNoYWluIDQgbW9kZSA6IHNpbXBsZXN0IGFj Y2VzcyAqLworICAgICAgICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7 CiAgICAgICAgIHJldCA9IHMtPnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxz ZSBpZiAocy0+Z3JbNV0gJiAweDEwKSB7CiAgICAgICAgIC8qIG9kZC9ldmVu IG1vZGUgKGFrYSB0ZXh0IG1vZGUgbWFwcGluZykgKi8KICAgICAgICAgcGxh bmUgPSAocy0+Z3JbNF0gJiAyKSB8IChhZGRyICYgMSk7Ci0gICAgICAgIHJl dCA9IHMtPnZyYW1fcHRyWygoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lXTsK KyAgICAgICAgYWRkciA9ICgoYWRkciAmIH4xKSA8PCAxKSB8IHBsYW5lOwor ICAgICAgICBpZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAg ICAgIHJldHVybiAweGZmOworICAgICAgICB9CisgICAgICAgIHJldCA9IHMt PnZyYW1fcHRyW2FkZHJdOwogICAgIH0gZWxzZSB7CiAgICAgICAgIC8qIHN0 YW5kYXJkIFZHQSBsYXRjaGVkIGFjY2VzcyAqLworICAgICAgICBpZiAoYWRk ciAqIHNpemVvZih1aW50MzJfdCkgPj0gcy0+dnJhbV9zaXplKSB7CisgICAg ICAgICAgICByZXR1cm4gMHhmZjsKKyAgICAgICAgfQogICAgICAgICBzLT5s YXRjaCA9ICgodWludDMyX3QgKilzLT52cmFtX3B0cilbYWRkcl07CiAKICAg ICAgICAgaWYgKCEocy0+Z3JbNV0gJiAweDA4KSkgewpAQCAtODgwLDYgKzg4 Niw3IEBAIHZvaWQgdmdhX21lbV93cml0ZWIodm9pZCAqb3BhcXVlLCB0YXJn ZXRfcGh5c19hZGRyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAgICAgICBw bGFuZSA9IGFkZHIgJiAzOwogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUp OwogICAgICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CisgICAgICAgICAg ICBhc3NlcnQoYWRkciA8IHMtPnZyYW1fc2l6ZSk7CiAgICAgICAgICAgICBz LT52cmFtX3B0clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVN CiAgICAgICAgICAgICBwcmludGYoInZnYTogY2hhaW40OiBbMHgleF1cbiIs IGFkZHIpOwpAQCAtODkzLDYgKzkwMCw5IEBAIHZvaWQgdmdhX21lbV93cml0 ZWIodm9pZCAqb3BhcXVlLCB0YXJnZXRfcGh5c19hZGRyX3QgYWRkciwgdWlu dDMyX3QgdmFsKQogICAgICAgICBtYXNrID0gKDEgPDwgcGxhbmUpOwogICAg ICAgICBpZiAocy0+c3JbMl0gJiBtYXNrKSB7CiAgICAgICAgICAgICBhZGRy ID0gKChhZGRyICYgfjEpIDw8IDEpIHwgcGxhbmU7CisgICAgICAgICAgICBp ZiAoYWRkciA+PSBzLT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgICAgICBy ZXR1cm47CisgICAgICAgICAgICB9CiAgICAgICAgICAgICBzLT52cmFtX3B0 clthZGRyXSA9IHZhbDsKICNpZmRlZiBERUJVR19WR0FfTUVNCiAgICAgICAg ICAgICBwcmludGYoInZnYTogb2RkL2V2ZW46IFsweCV4XVxuIiwgYWRkcik7 CkBAIC05NjUsNiArOTc1LDkgQEAgdm9pZCB2Z2FfbWVtX3dyaXRlYih2b2lk ICpvcGFxdWUsIHRhcmdldF9waHlzX2FkZHJfdCBhZGRyLCB1aW50MzJfdCB2 YWwpCiAgICAgICAgIG1hc2sgPSBzLT5zclsyXTsKICAgICAgICAgcy0+cGxh bmVfdXBkYXRlZCB8PSBtYXNrOyAvKiBvbmx5IHVzZWQgdG8gZGV0ZWN0IGZv bnQgY2hhbmdlICovCiAgICAgICAgIHdyaXRlX21hc2sgPSBtYXNrMTZbbWFz a107CisgICAgICAgIGlmIChhZGRyICogc2l6ZW9mKHVpbnQzMl90KSA+PSBz LT52cmFtX3NpemUpIHsKKyAgICAgICAgICAgIHJldHVybjsKKyAgICAgICAg fQogICAgICAgICAoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJdID0K ICAgICAgICAgICAgICgoKHVpbnQzMl90ICopcy0+dnJhbV9wdHIpW2FkZHJd ICYgfndyaXRlX21hc2spIHwKICAgICAgICAgICAgICh2YWwgJiB3cml0ZV9t YXNrKTsKLS0gCjIuMS40Cgo= --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch" Content-Transfer-Encoding: base64 RnJvbSAzNGRiMDlmYjk5Njc0NDE0MDhhMWZmMDU3OWQ1NTMyMjJjZjE3NDQx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDoxMTozNCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMi81XSB2Z2E6IGFkZCB2 YmVfZW5hYmxlZCgpIGhlbHBlcgoKTWFrZXMgY29kZSBhIGJpdCBlYXNpZXIg dG8gcmVhZC4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1hbm4gPGtyYXhl bEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4tdHJhZGl0aW9u XQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMTMgKysrKysrKysrLS0t LQogMSBmaWxlIGNoYW5nZWQsIDkgaW5zZXJ0aW9ucygrKSwgNCBkZWxldGlv bnMoLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4 IDcyMjU2ZjEuLmYzOWEyZWQgMTAwNjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBi L2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDExIEBAIHN0YXRpYyB1aW50MzJf dCBleHBhbmQ0WzI1Nl07CiBzdGF0aWMgdWludDE2X3QgZXhwYW5kMlsyNTZd Owogc3RhdGljIHVpbnQ4X3QgZXhwYW5kNHRvOFsxNl07CiAKK3N0YXRpYyBp bmxpbmUgYm9vbCB2YmVfZW5hYmxlZChWR0FTdGF0ZSAqcykKK3sKKyAgICBy ZXR1cm4gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBW QkVfRElTUElfRU5BQkxFRDsKK30KKwogc3RhdGljIHZvaWQgdmdhX2Jpb3Nf aW5pdChWR0FTdGF0ZSAqcyk7CiBzdGF0aWMgdm9pZCB2Z2Ffc2NyZWVuX2R1 bXAodm9pZCAqb3BhcXVlLCBjb25zdCBjaGFyICpmaWxlbmFtZSk7CiAKQEAg LTUzNSw3ICs1NDAsNyBAQCBzdGF0aWMgdm9pZCB2YmVfZml4dXBfcmVncyhW R0FTdGF0ZSAqcykKICAgICB1aW50MTZfdCAqciA9IHMtPnZiZV9yZWdzOwog ICAgIHVpbnQzMl90IGJpdHMsIGxpbmVsZW5ndGgsIG1heHksIG9mZnNldDsK IAotICAgIGlmICghKHJbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkpIHsKKyAgICBpZiAoIXZiZV9lbmFibGVkKHMpKSB7 CiAgICAgICAgIC8qIHZiZSBpcyB0dXJuZWQgb2ZmIC0tIG5vdGhpbmcgdG8g ZG8gKi8KICAgICAgICAgcmV0dXJuOwogICAgIH0KQEAgLTExNjUsNyArMTE3 MCw3IEBAIHN0YXRpYyB2b2lkIHZnYV9nZXRfb2Zmc2V0cyhWR0FTdGF0ZSAq cywKIHsKICAgICB1aW50MzJfdCBzdGFydF9hZGRyLCBsaW5lX29mZnNldCwg bGluZV9jb21wYXJlOwogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBp ZiAocy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVf RElTUElfRU5BQkxFRCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewog ICAgICAgICBsaW5lX29mZnNldCA9IHMtPnZiZV9saW5lX29mZnNldDsKICAg ICAgICAgc3RhcnRfYWRkciA9IHMtPnZiZV9zdGFydF9hZGRyOwogICAgICAg ICBsaW5lX2NvbXBhcmUgPSA2NTUzNTsKQEAgLTE1NTEsNyArMTU1Niw3IEBA IHN0YXRpYyBpbnQgdmdhX2dldF9icHAoVkdBU3RhdGUgKnMpCiB7CiAgICAg aW50IHJldDsKICNpZmRlZiBDT05GSUdfQk9DSFNfVkJFCi0gICAgaWYgKHMt PnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9FTkFCTEVdICYgVkJFX0RJU1BJ X0VOQUJMRUQpIHsKKyAgICBpZiAodmJlX2VuYWJsZWQocykpIHsKICAgICAg ICAgcmV0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX0JQUF07CiAg ICAgfSBlbHNlCiAjZW5kaWYKQEAgLTE1NjYsNyArMTU3MSw3IEBAIHN0YXRp YyB2b2lkIHZnYV9nZXRfcmVzb2x1dGlvbihWR0FTdGF0ZSAqcywgaW50ICpw d2lkdGgsIGludCAqcGhlaWdodCkKICAgICBpbnQgd2lkdGgsIGhlaWdodDsK IAogI2lmZGVmIENPTkZJR19CT0NIU19WQkUKLSAgICBpZiAocy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxF RCkgeworICAgIGlmICh2YmVfZW5hYmxlZChzKSkgewogICAgICAgICB3aWR0 aCA9IHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9YUkVTXTsKICAgICAg ICAgaGVpZ2h0ID0gcy0+dmJlX3JlZ3NbVkJFX0RJU1BJX0lOREVYX1lSRVNd OwogICAgIH0gZWxzZQotLSAKMi4xLjQKCg== --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch" Content-Transfer-Encoding: base64 RnJvbSBkZjIyODAyM2NlMzllOGI3MmJkNWExOThiODcwMzMxOWI4YjljYTIz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NToyNDoxOCArMDIwMApTdWJqZWN0OiBbUEFUQ0ggMy81XSB2Z2E6IGZhY3Rv ciBvdXQgdmdhIHJlZ2lzdGVyIHNldHVwCgpXaGVuIGVuYWJsaW5nIHZiZSBt b2RlIHFlbXUgd2lsbCBzZXR1cCBhIGJ1bmNoIG9mIHZnYSByZWdpc3RlcnMg dG8gbWFrZQpzdXJlIHRoZSB2Z2EgZW11bGF0aW9uIG9wZXJhdGVzIGluIGNv cnJlY3QgbW9kZSBmb3IgYSBsaW5lYXIKZnJhbWVidWZmZXIuICBNb3ZlIHRo YXQgY29kZSB0byBhIHNlcGFyYXRlIGZ1bmN0aW9uIHNvIHdlIGNhbiBjYWxs IGl0CmZyb20gb3RoZXIgcGxhY2VzIHRvby4KClNpZ25lZC1vZmYtYnk6IEdl cmQgSG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8g cWVtdS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29v cGVyIDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5j IHwgNzAgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDQx IGluc2VydGlvbnMoKyksIDI5IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBh L2h3L3ZnYS5jIGIvaHcvdmdhLmMKaW5kZXggZjM5YTJlZC4uZGJhOTNkNyAx MDA2NDQKLS0tIGEvaHcvdmdhLmMKKysrIGIvaHcvdmdhLmMKQEAgLTYxNSw2 ICs2MTUsNDYgQEAgc3RhdGljIHZvaWQgdmJlX2ZpeHVwX3JlZ3MoVkdBU3Rh dGUgKnMpCiAgICAgcy0+dmJlX3N0YXJ0X2FkZHIgID0gb2Zmc2V0IC8gNDsK IH0KIAorLyogd2UgaW5pdGlhbGl6ZSB0aGUgVkdBIGdyYXBoaWMgbW9kZSAq Lworc3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpz KQoreworICAgIGludCBoLCBzaGlmdF9jb250cm9sOworCisgICAgaWYgKCF2 YmVfZW5hYmxlZChzKSkgeworICAgICAgICAvKiB2YmUgaXMgdHVybmVkIG9m ZiAtLSBub3RoaW5nIHRvIGRvICovCisgICAgICAgIHJldHVybjsKKyAgICB9 CisKKyAgICAvKiBncmFwaGljIG1vZGUgKyBtZW1vcnkgbWFwIDEgKi8KKyAg ICBzLT5nclsweDA2XSA9IChzLT5nclsweDA2XSAmIH4weDBjKSB8IDB4MDU7 CisgICAgcy0+Y3JbMHgxN10gfD0gMzsgLyogbm8gQ0dBIG1vZGVzICovCisg ICAgcy0+Y3JbMHgxM10gPSBzLT52YmVfbGluZV9vZmZzZXQgPj4gMzsKKyAg ICAvKiB3aWR0aCAqLworICAgIHMtPmNyWzB4MDFdID0gKHMtPnZiZV9yZWdz W1ZCRV9ESVNQSV9JTkRFWF9YUkVTXSA+PiAzKSAtIDE7CisgICAgLyogaGVp Z2h0IChvbmx5IG1lYW5pbmdmdWwgaWYgPCAxMDI0KSAqLworICAgIGggPSBz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gLSAxOworICAgIHMt PmNyWzB4MTJdID0gaDsKKyAgICBzLT5jclsweDA3XSA9IChzLT5jclsweDA3 XSAmIH4weDQyKSB8CisgICAgICAgICgoaCA+PiA3KSAmIDB4MDIpIHwgKCho ID4+IDMpICYgMHg0MCk7CisgICAgLyogbGluZSBjb21wYXJlIHRvIDEwMjMg Ki8KKyAgICBzLT5jclsweDE4XSA9IDB4ZmY7CisgICAgcy0+Y3JbMHgwN10g fD0gMHgxMDsKKyAgICBzLT5jclsweDA5XSB8PSAweDQwOworCisgICAgaWYg KHMtPnZiZV9yZWdzW1ZCRV9ESVNQSV9JTkRFWF9CUFBdID09IDQpIHsKKyAg ICAgICAgc2hpZnRfY29udHJvbCA9IDA7CisgICAgICAgIHMtPnNyWzB4MDFd ICY9IH44OyAvKiBubyBkb3VibGUgbGluZSAqLworICAgIH0gZWxzZSB7Cisg ICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAyOworICAgICAgICAvKiBzZXQgY2hh aW4gNCBtb2RlICovCisgICAgICAgIHMtPnNyWzRdIHw9IDB4MDg7CisgICAg ICAgIC8qIGFjdGl2YXRlIGFsbCBwbGFuZXMgKi8KKyAgICAgICAgcy0+c3Jb Ml0gfD0gMHgwZjsKKyAgICB9CisgICAgcy0+Z3JbMHgwNV0gPSAocy0+Z3Jb MHgwNV0gJiB+MHg2MCkgfCAoc2hpZnRfY29udHJvbCA8PCA1KTsKKyAgICBz LT5jclsweDA5XSAmPSB+MHg5ZjsgLyogbm8gZG91YmxlIHNjYW4gKi8KK30K Kwogc3RhdGljIHVpbnQzMl90IHZiZV9pb3BvcnRfcmVhZF9pbmRleCh2b2lk ICpvcGFxdWUsIHVpbnQzMl90IGFkZHIpCiB7CiAgICAgVkdBU3RhdGUgKnMg PSBvcGFxdWU7CkBAIC02OTgsNyArNzM4LDYgQEAgc3RhdGljIHZvaWQgdmJl X2lvcG9ydF93cml0ZV9kYXRhKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBjYXNlIFZCRV9ESVNQSV9JTkRF WF9FTkFCTEU6CiAgICAgICAgICAgICBpZiAoKHZhbCAmIFZCRV9ESVNQSV9F TkFCTEVEKSAmJgogICAgICAgICAgICAgICAgICEocy0+dmJlX3JlZ3NbVkJF X0RJU1BJX0lOREVYX0VOQUJMRV0gJiBWQkVfRElTUElfRU5BQkxFRCkpIHsK LSAgICAgICAgICAgICAgICBpbnQgaCwgc2hpZnRfY29udHJvbDsKICAgICAg ICAgICAgICAgICAKICAgICAgICAgICAgICAgICBpZiAocy0+dnJhbV9nbWZu ICE9IHMtPmxmYl9hZGRyKSB7CiAgICAgICAgICAgICAgICAgICAgICBzZXRf dnJhbV9tYXBwaW5nKHMsIHMtPmxmYl9hZGRyLCBzLT5sZmJfZW5kKTsKQEAg LTcwOSw0MCArNzQ4LDEzIEBAIHN0YXRpYyB2b2lkIHZiZV9pb3BvcnRfd3Jp dGVfZGF0YSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90 IHZhbCkKICAgICAgICAgICAgICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElf SU5ERVhfWV9PRkZTRVRdID0gMDsKICAgICAgICAgICAgICAgICBzLT52YmVf cmVnc1tWQkVfRElTUElfSU5ERVhfRU5BQkxFXSB8PSBWQkVfRElTUElfRU5B QkxFRDsKICAgICAgICAgICAgICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAg ICAgICAgICAgICAgICB2YmVfdXBkYXRlX3ZnYXJlZ3Mocyk7CiAKICAgICAg ICAgICAgICAgICAvKiBjbGVhciB0aGUgc2NyZWVuIChzaG91bGQgYmUgZG9u ZSBpbiBCSU9TKSAqLwogICAgICAgICAgICAgICAgIGlmICghKHZhbCAmIFZC RV9ESVNQSV9OT0NMRUFSTUVNKSkgewogICAgICAgICAgICAgICAgICAgICBt ZW1zZXQocy0+dnJhbV9wdHIsIDAsCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWVJFU10gKiBzLT52 YmVfbGluZV9vZmZzZXQpOwogICAgICAgICAgICAgICAgIH0KLQotICAgICAg ICAgICAgICAgIC8qIHdlIGluaXRpYWxpemUgdGhlIFZHQSBncmFwaGljIG1v ZGUgKHNob3VsZCBiZSBkb25lCi0gICAgICAgICAgICAgICAgICAgaW4gQklP UykgKi8KLSAgICAgICAgICAgICAgICBzLT5nclsweDA2XSA9IChzLT5nclsw eDA2XSAmIH4weDBjKSB8IDB4MDU7IC8qIGdyYXBoaWMgbW9kZSArIG1lbW9y eSBtYXAgMSAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4MTddIHw9IDM7 IC8qIG5vIENHQSBtb2RlcyAqLwotICAgICAgICAgICAgICAgIHMtPmNyWzB4 MTNdID0gcy0+dmJlX2xpbmVfb2Zmc2V0ID4+IDM7Ci0gICAgICAgICAgICAg ICAgLyogd2lkdGggKi8KLSAgICAgICAgICAgICAgICBzLT5jclsweDAxXSA9 IChzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfWFJFU10gPj4gMykgLSAx OwotICAgICAgICAgICAgICAgIC8qIGhlaWdodCAob25seSBtZWFuaW5nZnVs IGlmIDwgMTAyNCkgKi8KLSAgICAgICAgICAgICAgICBoID0gcy0+dmJlX3Jl Z3NbVkJFX0RJU1BJX0lOREVYX1lSRVNdIC0gMTsKLSAgICAgICAgICAgICAg ICBzLT5jclsweDEyXSA9IGg7Ci0gICAgICAgICAgICAgICAgcy0+Y3JbMHgw N10gPSAocy0+Y3JbMHgwN10gJiB+MHg0MikgfAotICAgICAgICAgICAgICAg ICAgICAoKGggPj4gNykgJiAweDAyKSB8ICgoaCA+PiAzKSAmIDB4NDApOwot ICAgICAgICAgICAgICAgIC8qIGxpbmUgY29tcGFyZSB0byAxMDIzICovCi0g ICAgICAgICAgICAgICAgcy0+Y3JbMHgxOF0gPSAweGZmOwotICAgICAgICAg ICAgICAgIHMtPmNyWzB4MDddIHw9IDB4MTA7Ci0gICAgICAgICAgICAgICAg cy0+Y3JbMHgwOV0gfD0gMHg0MDsKLQotICAgICAgICAgICAgICAgIGlmIChz LT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhfQlBQXSA9PSA0KSB7Ci0gICAg ICAgICAgICAgICAgICAgIHNoaWZ0X2NvbnRyb2wgPSAwOwotICAgICAgICAg ICAgICAgICAgICBzLT5zclsweDAxXSAmPSB+ODsgLyogbm8gZG91YmxlIGxp bmUgKi8KLSAgICAgICAgICAgICAgICB9IGVsc2UgewotICAgICAgICAgICAg ICAgICAgICBzaGlmdF9jb250cm9sID0gMjsKLSAgICAgICAgICAgICAgICAg ICAgcy0+c3JbNF0gfD0gMHgwODsgLyogc2V0IGNoYWluIDQgbW9kZSAqLwot ICAgICAgICAgICAgICAgICAgICBzLT5zclsyXSB8PSAweDBmOyAvKiBhY3Rp dmF0ZSBhbGwgcGxhbmVzICovCi0gICAgICAgICAgICAgICAgfQotICAgICAg ICAgICAgICAgIHMtPmdyWzB4MDVdID0gKHMtPmdyWzB4MDVdICYgfjB4NjAp IHwgKHNoaWZ0X2NvbnRyb2wgPDwgNSk7Ci0gICAgICAgICAgICAgICAgcy0+ Y3JbMHgwOV0gJj0gfjB4OWY7IC8qIG5vIGRvdWJsZSBzY2FuICovCiAgICAg ICAgICAgICB9IGVsc2UgewogICAgICAgICAgICAgICAgIC8qIFhYWDogdGhl IGJpb3Mgc2hvdWxkIGRvIHRoYXQgKi8KICAgICAgICAgICAgICAgICBzLT5i YW5rX29mZnNldCA9IDA7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch" Content-Transfer-Encoding: base64 RnJvbSA1ZTg0MGU2MjkyODI1ZmNhZTkwZjY3NTBhOGY1N2JjOTg5ZTI4YzVm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NTozOToyMiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNC81XSB2Z2E6IHVwZGF0 ZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgb24gdmJlIGNoYW5nZXMKCkNhbGwgdGhl IG5ldyB2YmVfdXBkYXRlX3ZnYXJlZ3MoKSBmdW5jdGlvbiBvbiB2YmUgY29u ZmlndXJhdGlvbgpjaGFuZ2VzLCB0byBtYWtlIHN1cmUgdmdhIHJlZ2lzdGVy cyBhcmUgdXAtdG8tZGF0ZS4KClNpZ25lZC1vZmYtYnk6IEdlcmQgSG9mZm1h bm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVtdS14ZW4t dHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRy ZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwgMSArCiAx IGZpbGUgY2hhbmdlZCwgMSBpbnNlcnRpb24oKykKCmRpZmYgLS1naXQgYS9o dy92Z2EuYyBiL2h3L3ZnYS5jCmluZGV4IGRiYTkzZDcuLmIxYjUwMWIgMTAw NjQ0Ci0tLSBhL2h3L3ZnYS5jCisrKyBiL2h3L3ZnYS5jCkBAIC03MjksNiAr NzI5LDcgQEAgc3RhdGljIHZvaWQgdmJlX2lvcG9ydF93cml0ZV9kYXRhKHZv aWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMyX3QgdmFsKQogICAg ICAgICBjYXNlIFZCRV9ESVNQSV9JTkRFWF9ZX09GRlNFVDoKICAgICAgICAg ICAgIHMtPnZiZV9yZWdzW3MtPnZiZV9pbmRleF0gPSB2YWw7CiAgICAgICAg ICAgICB2YmVfZml4dXBfcmVncyhzKTsKKyAgICAgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBj YXNlIFZCRV9ESVNQSV9JTkRFWF9CQU5LOgogICAgICAgICAgICAgdmFsICY9 IHMtPnZiZV9iYW5rX21hc2s7Ci0tIAoyLjEuNAoK --=separator Content-Type: application/octet-stream; name="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Disposition: attachment; filename="xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch" Content-Transfer-Encoding: base64 RnJvbSAwYjBjZjgxMTBlOTdiMGNiZDBkYTczZDExMTYzZTI2OTc4ODIyNzU3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZXJkIEhvZmZtYW5u IDxrcmF4ZWxAcmVkaGF0LmNvbT4KRGF0ZTogVHVlLCAyNiBBcHIgMjAxNiAx NDo0ODowNiArMDIwMApTdWJqZWN0OiBbUEFUQ0ggNS81XSB2Z2E6IG1ha2Ug c3VyZSB2Z2EgcmVnaXN0ZXIgc2V0dXAgZm9yIHZiZSBzdGF5cyBpbnRhY3QK IChDVkUtMjAxNi0zNzEyKS4KCkNhbGwgdmJlX3VwZGF0ZV92Z2FyZWdzKCkg d2hlbiB0aGUgZ3Vlc3QgdG91Y2hlcyBHRlgsIFNFUSBvciBDUlQKcmVnaXN0 ZXJzLCB0byBtYWtlIHN1cmUgdGhlIHZnYSByZWdpc3RlcnMgd2lsbCBhbHdh eXMgaGF2ZSB0aGUKdmFsdWVzIG5lZWRlZCBieSB2YmUgbW9kZS4gIFRoaXMg bWFrZXMgc3VyZSB0aGUgc2FuaXR5IGNoZWNrcwphcHBsaWVkIGJ5IHZiZV9m aXh1cF9yZWdzKCkgYXJlIGVmZmVjdGl2ZS4KCldpdGhvdXQgdGhpcyBndWVz dHMgY2FuIG11Y2sgd2l0aCBzaGlmdF9jb250cm9sLCBjYW4gdHVybiBvbiBw bGFuYXIKdmdhIG1vZGVzIG9yIHRleHQgbW9kZSBlbXVsYXRpb24gd2hpbGUg VkJFIGlzIGFjdGl2ZSwgbWFraW5nIHFlbXUKdGFrZSBjb2RlIHBhdGhzIG1l YW50IGZvciBDR0EgY29tcGF0aWJpbGl0eSwgYnV0IHdpdGggdGhlIHZlcnkK bGFyZ2UgZGlzcGxheSB3aWR0aHMgYW5kIGhlaWd0cyBzZXR0YWJsZSB1c2lu ZyBWQkUgcmVnaXN0ZXJzLgoKV2hpY2ggaXMgZ29vZCBmb3Igb25lIG9yIGFu b3RoZXIgYnVmZmVyIG92ZXJmbG93LiAgTm90IHRoYXQKY3JpdGljYWwgYXMg dGhleSB0eXBpY2FsbHkgcmVhZCBvdmVyZmxvd3MgaGFwcGVuaW5nIHNvbWV3 aGVyZQppbiB0aGUgZGlzcGxheSBjb2RlLiAgU28gZ3Vlc3RzIGNhbiBEb1Mg YnkgY3Jhc2hpbmcgcWVtdSB3aXRoIGEKc2VnZmF1bHQsIGJ1dCBpdCBpcyBw cm9iYWJseSBub3QgcG9zc2libGUgdG8gYnJlYWsgb3V0IG9mIHRoZSBWTS4K CkZpeGVzOiBDVkUtMjAxNi0zNzEyClJlcG9ydGVkLWJ5OiBadW96aGkgRnp6 IDx6dW96aGkuZnp6QGFsaWJhYmEtaW5jLmNvbT4KUmVwb3J0ZWQtYnk6IFAg SiBQIDxwcGFuZGl0QHJlZGhhdC5jb20+ClNpZ25lZC1vZmYtYnk6IEdlcmQg SG9mZm1hbm4gPGtyYXhlbEByZWRoYXQuY29tPgpbQmFja3BvcnQgdG8gcWVt dS14ZW4tdHJhZGl0aW9uXQpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVy IDxhbmRyZXcuY29vcGVyM0BjaXRyaXguY29tPgotLS0KIGh3L3ZnYS5jIHwg OSArKysrKysrKy0KIDEgZmlsZSBjaGFuZ2VkLCA4IGluc2VydGlvbnMoKyks IDEgZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS9ody92Z2EuYyBiL2h3L3Zn YS5jCmluZGV4IGIxYjUwMWIuLjU3NzhjN2QgMTAwNjQ0Ci0tLSBhL2h3L3Zn YS5jCisrKyBiL2h3L3ZnYS5jCkBAIC0xNjAsNiArMTYwLDggQEAgc3RhdGlj IHVpbnQzMl90IGV4cGFuZDRbMjU2XTsKIHN0YXRpYyB1aW50MTZfdCBleHBh bmQyWzI1Nl07CiBzdGF0aWMgdWludDhfdCBleHBhbmQ0dG84WzE2XTsKIAor c3RhdGljIHZvaWQgdmJlX3VwZGF0ZV92Z2FyZWdzKFZHQVN0YXRlICpzKTsK Kwogc3RhdGljIGlubGluZSBib29sIHZiZV9lbmFibGVkKFZHQVN0YXRlICpz KQogewogICAgIHJldHVybiBzLT52YmVfcmVnc1tWQkVfRElTUElfSU5ERVhf RU5BQkxFXSAmIFZCRV9ESVNQSV9FTkFCTEVEOwpAQCAtNDQ5LDYgKzQ1MSw3 IEBAIHN0YXRpYyB2b2lkIHZnYV9pb3BvcnRfd3JpdGUodm9pZCAqb3BhcXVl LCB1aW50MzJfdCBhZGRyLCB1aW50MzJfdCB2YWwpCiAgICAgICAgIHByaW50 ZigidmdhOiB3cml0ZSBTUiV4ID0gMHglMDJ4XG4iLCBzLT5zcl9pbmRleCwg dmFsKTsKICNlbmRpZgogICAgICAgICBzLT5zcltzLT5zcl9pbmRleF0gPSB2 YWwgJiBzcl9tYXNrW3MtPnNyX2luZGV4XTsKKyAgICAgICAgdmJlX3VwZGF0 ZV92Z2FyZWdzKHMpOwogICAgICAgICBpZiAocy0+c3JfaW5kZXggPT0gMSkg cy0+dXBkYXRlX3JldHJhY2VfaW5mbyhzKTsKICAgICAgICAgYnJlYWs7CiAg ICAgY2FzZSAweDNjNzoKQEAgLTQ3Nyw2ICs0ODAsNyBAQCBzdGF0aWMgdm9p ZCB2Z2FfaW9wb3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRk ciwgdWludDMyX3QgdmFsKQogICAgICAgICBwcmludGYoInZnYTogd3JpdGUg R1IleCA9IDB4JTAyeFxuIiwgcy0+Z3JfaW5kZXgsIHZhbCk7CiAjZW5kaWYK ICAgICAgICAgcy0+Z3Jbcy0+Z3JfaW5kZXhdID0gdmFsICYgZ3JfbWFza1tz LT5ncl9pbmRleF07CisgICAgICAgIHZiZV91cGRhdGVfdmdhcmVncyhzKTsK ICAgICAgICAgYnJlYWs7CiAgICAgY2FzZSAweDNiNDoKICAgICBjYXNlIDB4 M2Q0OgpAQCAtNDkwLDggKzQ5NCwxMCBAQCBzdGF0aWMgdm9pZCB2Z2FfaW9w b3J0X3dyaXRlKHZvaWQgKm9wYXF1ZSwgdWludDMyX3QgYWRkciwgdWludDMy X3QgdmFsKQogICAgICAgICAvKiBoYW5kbGUgQ1IwLTcgcHJvdGVjdGlvbiAq LwogICAgICAgICBpZiAoKHMtPmNyWzB4MTFdICYgMHg4MCkgJiYgcy0+Y3Jf aW5kZXggPD0gNykgewogICAgICAgICAgICAgLyogY2FuIGFsd2F5cyB3cml0 ZSBiaXQgNCBvZiBDUjcgKi8KLSAgICAgICAgICAgIGlmIChzLT5jcl9pbmRl eCA9PSA3KQorICAgICAgICAgICAgaWYgKHMtPmNyX2luZGV4ID09IDcpIHsK ICAgICAgICAgICAgICAgICBzLT5jcls3XSA9IChzLT5jcls3XSAmIH4weDEw KSB8ICh2YWwgJiAweDEwKTsKKyAgICAgICAgICAgICAgICB2YmVfdXBkYXRl X3ZnYXJlZ3Mocyk7CisgICAgICAgICAgICB9CiAgICAgICAgICAgICByZXR1 cm47CiAgICAgICAgIH0KICAgICAgICAgc3dpdGNoKHMtPmNyX2luZGV4KSB7 CkBAIC01MDcsNiArNTEzLDcgQEAgc3RhdGljIHZvaWQgdmdhX2lvcG9ydF93 cml0ZSh2b2lkICpvcGFxdWUsIHVpbnQzMl90IGFkZHIsIHVpbnQzMl90IHZh bCkKICAgICAgICAgICAgIHMtPmNyW3MtPmNyX2luZGV4XSA9IHZhbDsKICAg ICAgICAgICAgIGJyZWFrOwogICAgICAgICB9CisgICAgICAgIHZiZV91cGRh dGVfdmdhcmVncyhzKTsKIAogICAgICAgICBzd2l0Y2gocy0+Y3JfaW5kZXgp IHsKICAgICAgICAgY2FzZSAweDAwOgotLSAKMi4xLjQKCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Tue May 10 17:14:39 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 10 May 2016 17:14:39 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0BDb-0007ug-GS; Tue, 10 May 2016 17:13:11 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0BCy-0007nV-5x for xen-announce@lists.xenproject.org; Tue, 10 May 2016 17:12:32 +0000 Received: from [193.109.254.147] by server-13.bemta-14.messagelabs.com id 62/9B-02833-F7612375; Tue, 10 May 2016 17:12:31 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrCIsWRWlGSWpSXmKPExsXitHRDpG69mFG 4weMzjBazN7YxOzB6HP5whSWAMYo1My8pvyKBNaPz3F22gv/MFT1vP7E2MB5i7mLk5JAQ8Jd4 cvMoE4gtJKAl8XLPMhYIW0fi3aKVbBC2mcTK3auh4noSDbf+sYPYvAKCEidnPgGLswioSvTd+ AZWzyagLPGzsxfMFhEokzg/cyaYzSygKHHq9gywvcJANY+v7QfaywE0R09i31tXiBIdiQW7P7 GBhJkFpCWW/+MACYsKqEhcmfCWHdNlChId04+BTZEQ4Jb4220/gVFoFpLbZiEZOgth6AJG5lW M6sWpRWWpRbqmeklFmekZJbmJmTm6hoYmermpxcWJ6ak5iUnFesn5uZsYgSHMAAQ7GNctdj7E KMnBpCTK+13EKFyILyk/pTIjsTgjvqg0J7X4EKMMB4eSBO9MkJxgUWp6akVaZg4wmmDSEhw8S iK8D0DSvMUFibnFmekQqVOMuhwLftxeyyTEkpeflyolznsRpEgApCijNA9uBCyyLzHKSgnzMg IdJcRTkFqUm1mCKv+KUZyDUUmYl1UUaApPZl4J3KZXQEcwAR0hx6YPckRJIkJKqoGxLiSkVNO vepV398+bB5n/30+9XuG0bOGLSRfOrP3dcHiab+OaDbW2joI1p++GtDd9zDDNNzFvKDLe6rko qOHopiWmbRZ6iWqrm+7reli8vBMj31G6NHbleveASY+2u7xR8tw5k2un1a+Uc9+sbz01Tz18q PHdNrFAo+1tP1ceFOoXbZljezFOiaU4I9FQi7moOBEAo4C8fOcCAAA= X-Env-Sender: prvs=9316acc9e=wei.liu2@citrix.com X-Msg-Ref: server-3.tower-27.messagelabs.com!1462900349!40367824!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 13308 invoked from network); 10 May 2016 17:12:30 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-3.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 10 May 2016 17:12:30 -0000 X-IronPort-AV: E=Sophos;i="5.24,605,1454976000"; d="scan'208";a="352863820" Resent-From: Wei Liu Resent-Date: Tue, 10 May 2016 18:12:28 +0100 Resent-Message-ID: <20160510171228.GK12241@citrix.com> Resent-To: MIME-Version: 1.0 Date: Tue, 10 May 2016 18:05:41 +0100 From: Wei Liu To: Xen-devel , , Message-ID: <20160510170541.GA3464@citrix.com> Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) Resent-Date: Tue, 10 May 2016 18:12:28 +0100 X-DLP: MIA1 X-Mailman-Approved-At: Tue, 10 May 2016 17:13:10 +0000 Subject: [Xen-announce] [ANNOUNCEMENT] Xen 4.7 RC2 X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" SGkgYWxsCgpYZW4gNC43IFJDMiBpcyB0YWdnZWQuIFlvdSBjYW4gY2hlY2sgdGhhdCBvdXQgZnJv bSB4ZW4uZ2l0OgoKICBnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjcuMC1yYzIKCkZv ciB5b3UgY29udmVuaWVuY2UgdGhlcmUgaXMgYWxzbyB0YXJiYWxsIGF0OgpodHRwOi8vYml0cy54 ZW5zb3VyY2UuY29tL29zcy14ZW4vcmVsZWFzZS80LjcuMC1yYzIveGVuLTQuNy4wLXJjMi50YXIu Z3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwOi8vYml0cy54ZW5zb3VyY2UuY29tL29z cy14ZW4vcmVsZWFzZS80LjcuMC1yYzIveGVuLTQuNy4wLXJjMi50YXIuZ3ouc2lnCgpQbGVhc2Ug c2VuZCBidWcgcmVwb3J0cyBhbmQgdGVzdCByZXBvcnRzIHRvCnhlbi1kZXZlbEBsaXN0cy54ZW5w cm9qZWN0Lm9yZy4gV2hlbiBzZW5kaW5nIGJ1ZyByZXBvcnRzLCBwbGVhc2UgQ0MKcmVsZXZhbnQg bWFpbnRhaW5lcnMgYW5kIG1lICh3ZWkubGl1MkBjaXRyaXguY29tKS4KClRoYW5rcwpXZWkuCgpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpYZW4tYW5ub3Vu Y2UgbWFpbGluZyBsaXN0Clhlbi1hbm5vdW5jZUBsaXN0cy54ZW4ub3JnCmh0dHA6Ly9saXN0cy54 ZW4ub3JnL3hlbi1hbm5vdW5jZQ== From xen-announce-bounces@lists.xen.org Tue May 10 17:14:39 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 10 May 2016 17:14:39 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0BDb-0007ug-GS; Tue, 10 May 2016 17:13:11 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0BCy-0007nV-5x for xen-announce@lists.xenproject.org; Tue, 10 May 2016 17:12:32 +0000 Received: from [193.109.254.147] by server-13.bemta-14.messagelabs.com id 62/9B-02833-F7612375; Tue, 10 May 2016 17:12:31 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrCIsWRWlGSWpSXmKPExsXitHRDpG69mFG 4weMzjBazN7YxOzB6HP5whSWAMYo1My8pvyKBNaPz3F22gv/MFT1vP7E2MB5i7mLk5JAQ8Jd4 cvMoE4gtJKAl8XLPMhYIW0fi3aKVbBC2mcTK3auh4noSDbf+sYPYvAKCEidnPgGLswioSvTd+ AZWzyagLPGzsxfMFhEokzg/cyaYzSygKHHq9gywvcJANY+v7QfaywE0R09i31tXiBIdiQW7P7 GBhJkFpCWW/+MACYsKqEhcmfCWHdNlChId04+BTZEQ4Jb4220/gVFoFpLbZiEZOgth6AJG5lW M6sWpRWWpRbqmeklFmekZJbmJmTm6hoYmermpxcWJ6ak5iUnFesn5uZsYgSHMAAQ7GNctdj7E KMnBpCTK+13EKFyILyk/pTIjsTgjvqg0J7X4EKMMB4eSBO9MkJxgUWp6akVaZg4wmmDSEhw8S iK8D0DSvMUFibnFmekQqVOMuhwLftxeyyTEkpeflyolznsRpEgApCijNA9uBCyyLzHKSgnzMg IdJcRTkFqUm1mCKv+KUZyDUUmYl1UUaApPZl4J3KZXQEcwAR0hx6YPckRJIkJKqoGxLiSkVNO vepV398+bB5n/30+9XuG0bOGLSRfOrP3dcHiab+OaDbW2joI1p++GtDd9zDDNNzFvKDLe6rko qOHopiWmbRZ6iWqrm+7reli8vBMj31G6NHbleveASY+2u7xR8tw5k2un1a+Uc9+sbz01Tz18q PHdNrFAo+1tP1ceFOoXbZljezFOiaU4I9FQi7moOBEAo4C8fOcCAAA= X-Env-Sender: prvs=9316acc9e=wei.liu2@citrix.com X-Msg-Ref: server-3.tower-27.messagelabs.com!1462900349!40367824!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 13308 invoked from network); 10 May 2016 17:12:30 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-3.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 10 May 2016 17:12:30 -0000 X-IronPort-AV: E=Sophos;i="5.24,605,1454976000"; d="scan'208";a="352863820" Resent-From: Wei Liu Resent-Date: Tue, 10 May 2016 18:12:28 +0100 Resent-Message-ID: <20160510171228.GK12241@citrix.com> Resent-To: MIME-Version: 1.0 Date: Tue, 10 May 2016 18:05:41 +0100 From: Wei Liu To: Xen-devel , , Message-ID: <20160510170541.GA3464@citrix.com> Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) Resent-Date: Tue, 10 May 2016 18:12:28 +0100 X-DLP: MIA1 X-Mailman-Approved-At: Tue, 10 May 2016 17:13:10 +0000 Subject: [Xen-announce] [ANNOUNCEMENT] Xen 4.7 RC2 X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" SGkgYWxsCgpYZW4gNC43IFJDMiBpcyB0YWdnZWQuIFlvdSBjYW4gY2hlY2sgdGhhdCBvdXQgZnJv bSB4ZW4uZ2l0OgoKICBnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjcuMC1yYzIKCkZv ciB5b3UgY29udmVuaWVuY2UgdGhlcmUgaXMgYWxzbyB0YXJiYWxsIGF0OgpodHRwOi8vYml0cy54 ZW5zb3VyY2UuY29tL29zcy14ZW4vcmVsZWFzZS80LjcuMC1yYzIveGVuLTQuNy4wLXJjMi50YXIu Z3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwOi8vYml0cy54ZW5zb3VyY2UuY29tL29z cy14ZW4vcmVsZWFzZS80LjcuMC1yYzIveGVuLTQuNy4wLXJjMi50YXIuZ3ouc2lnCgpQbGVhc2Ug c2VuZCBidWcgcmVwb3J0cyBhbmQgdGVzdCByZXBvcnRzIHRvCnhlbi1kZXZlbEBsaXN0cy54ZW5w cm9qZWN0Lm9yZy4gV2hlbiBzZW5kaW5nIGJ1ZyByZXBvcnRzLCBwbGVhc2UgQ0MKcmVsZXZhbnQg bWFpbnRhaW5lcnMgYW5kIG1lICh3ZWkubGl1MkBjaXRyaXguY29tKS4KClRoYW5rcwpXZWkuCgpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpYZW4tYW5ub3Vu Y2UgbWFpbGluZyBsaXN0Clhlbi1hbm5vdW5jZUBsaXN0cy54ZW4ub3JnCmh0dHA6Ly9saXN0cy54 ZW4ub3JnL3hlbi1hbm5vdW5jZQ== From xen-announce-bounces@lists.xen.org Wed May 11 10:52:07 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 11 May 2016 10:52:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0Rj8-00021R-QS; Wed, 11 May 2016 10:50:50 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0RhM-0001RM-U5; Wed, 11 May 2016 10:49:01 +0000 Received: from [85.158.137.68] by server-3.bemta-3.messagelabs.com id 55/22-03294-B1E03375; Wed, 11 May 2016 10:48:59 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrHIsWRWlGSWpSXmKPExsXiVRtkpivFZxx ucOixpcXsjW3MFt+3TGayeLfvL7MDs8fhD1dYAhijWDPzkvIrElgzXi28wFJwnrdi5jLpBsYn 3F2MnBxCAqUS097NZ+ti5OJgEWhglbj+4iMLiCMhMIdVYvvt8+wgVRICMRIz2y6xQtjVEs9f7 WGE6FaXuLfoNjtIg5DAV0aJNd/3MIEk2AS0JTbdeMAMYjMLaEnc+PeSCcLWlli28DVYXFjAVu L5l1awOK+AjcTpJbfAlrEIqEqsXNzOBDJURKCJUaLn4202iCI9iVe3LkNdISux+/cjpgmMArO Q7JiFZMcsJC0LGJlXMWoUpxaVpRbpGprqJRVlpmeU5CZm5ugaGhjr5aYWFyemp+YkJhXrJefn bmIEhi0DEOxgXLPd8xCjJAeTkihv/0ujcCG+pPyUyozE4oz4otKc1OJDjDIcHEoSvMU8xuFCg kWp6akVaZk5wAiCSUtw8CiJ8F7iBkrzFhck5hZnpkOkTjHqcmyZem8tkxBLXn5eqpQ4byfIDA GQoozSPLgRsGi+xCgrJczLCHSUEE9BalFuZgmq/CtGcQ5GJWHepyBTeDLzSuA2vQI6ggnoiOr rRiBHlCQipKQaGCVnvT1aZHmGU0OSQfDm6g8POevnHJiruCFzfaZc8Z73k/9OKTr2dwtzbLW+ 96rTMbtCGyzqNiyVNrmyednF+/vv6s5gl3v/iN1EvMhnEcPE9G7/rzzeV0QcTxR7u2w8vb7qo M5R3oeqH55ti7Pye6Q+X7NcsjFkXfOsJ2nvrN895juY/S09fJMSS3FGoqEWc1FxIgBcj6ww4Q IAAA== X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-12.tower-31.messagelabs.com!1462963737!22866815!1 X-Originating-IP: [74.125.82.54] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 1545 invoked from network); 11 May 2016 10:48:58 -0000 Received: from mail-wm0-f54.google.com (HELO mail-wm0-f54.google.com) (74.125.82.54) by server-12.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 11 May 2016 10:48:58 -0000 Received: by mail-wm0-f54.google.com with SMTP id e201so213267453wme.0; Wed, 11 May 2016 03:48:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-transfer-encoding:subject:message-id:date:to :mime-version; bh=HACErKI8LH48h+BKQcQEeFDYq0wFuxiFpiTH8Xu+CyM=; b=ajGuDgQVnkiv63Bn1qEV/7D8cZ0AHV+ct83YFv6R5B4SJQYtP94rf7pAT1NYJdWGak kOkdSDOBlOHY6QopZ/YeNl9eBLVLFG5Pgfmj6EzHNJ6rumG1xbNIsLU8YJ6hsf9Cw6/M r60rx8lwvujZyGV7PU1OhP8Hb3CdDbevlM15ok+rBUgDubC3cdNXWNOo26MBdWvLPE9b C9cKQseIGVl54PLuSFcNbfFIh56Np4ySL6iBHYII/I9CK7Ls/oenY5J4SdmQY2N2c41Y wks+TtUB3ZVwuvNrDUGx6ivF6Bupd5APi8W8DGdBwdoKLP73DGmayCD9qSRfYDGYWO+2 C5Ew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-transfer-encoding:subject :message-id:date:to:mime-version; bh=HACErKI8LH48h+BKQcQEeFDYq0wFuxiFpiTH8Xu+CyM=; b=Ak59nS1CRBouKD26w24XWe8Urb9gKVF3qjnKz08vgQ6oigXZzVK4PNK6BHR4N0OSC6 H5VUF/sIRzPNMtw5v0AKg8iDZUnt4mf774eXrqPY5+Qm+omDMVCNj/fZReq8XHxPrBWQ JauLfmyH8qr4KuA5R2GJ0uz0yFO/K9aNCYGTom6PianIddXjC3hoq4Xwy2Rc2nfu94Gq zyrJQ0D8OtBKwiImANdszny/q7TtuIuQ/5oLKXauAfwHFwDmCmwRRfQdVNmK4i5ERYLQ tJ0YXY7BZT5/10VC/GnUBaJc+PVxro0bsCY2nDzxoVKglbdh9gL67Cw2bR4tTVJVCKav IY7w== X-Gm-Message-State: AOPr4FV7qyOB2tvSphzClkgWR8rkFPMYKEM5/CGvoO1/QtoTBSzdKcMpGy0AVC/j7xo3ag== X-Received: by 10.194.115.230 with SMTP id jr6mr2995773wjb.125.1462963737178; Wed, 11 May 2016 03:48:57 -0700 (PDT) Received: from [192.168.0.12] (bcde049e.skybroadband.com. [188.222.4.158]) by smtp.gmail.com with ESMTPSA id jq1sm7412664wjc.28.2016.05.11.03.48.55 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 11 May 2016 03:48:55 -0700 (PDT) From: Lars Kurth Message-Id: <267CF716-65E3-4630-8922-F1AC2092B099@gmail.com> Date: Wed, 11 May 2016 11:48:54 +0100 To: xen-announce , Xen-devel , xen-users@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Mailman-Approved-At: Wed, 11 May 2016 10:50:49 +0000 Subject: [Xen-announce] Announcing Xen Project 4.7 RC and Test Day Schedule X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" RGVhciBDb21tdW5pdHkgbWVtYmVycywKClllc3RlcmRheSwgd2UgY3JlYXRlZCBYZW4gNC43IFJD MiBhbmQgd2lsbCByZWxlYXNlIGEgbmV3IHJlbGVhc2UgCmNhbmRpZGF0ZSBldmVyeSBXZWRuZXNk YXksIHVudGlsIHdlIGRlY2xhcmUgYSByZWxlYXNlIGNhbmRpZGF0ZSBhcyB0aGUgCmZpbmFsIGNh bmRpZGF0ZSBhbmQgY3V0IHRoZSBYZW4gNC43IHJlbGVhc2UuIFdlIHdpbGwgYWxzbyBob2xkIGEg VGVzdCAKRGF5IFsxXSBldmVyeSBGcmlkYXkgZm9yIHRoZSByZWxlYXNlIGNhbmRpZGF0ZSB0aGF0 IHdhcyByZWxlYXNlZCB0aGUgCldlZG5lc2RheSBwcmlvciB0byB0aGUgVGVzdCBEYXkuIFRoaXMg bWVhbnMgd2Ugd2lsbCBoYXZlIFRlc3QgRGF5cyBvbiAKTWF5IDEzdGgsIDIwdGgsIDI3dGggYW5k IEp1bmUgM3JkLiBZb3VyIHRlc3RpbmcgaXMgc3RpbGwgdmFsdWFibGUgb24gCm90aGVyIGRheXMs IHNvIHBsZWFzZSBmZWVsIGZyZWUgdG8gc2VuZCBUZXN0IFJlcG9ydHMgYXMgb3V0bGluZWQgYmVs b3cgCmF0IGFueSB0aW1lLgoKPSBHZXR0aW5nLCBCdWlsZGluZyBhbmQgSW5zdGFsbGluZyBhIFJl bGVhc2UgQ2FuZGlkYXRlID0KClJlbGVhc2UgY2FuZGlkYXRlcyBhcmUgYXZhaWxhYmxlIGZyb20g b3VyIGdpdCByZXBvc2l0b3J5IGF0CgpnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCAodGFn IDQuNy4wLTxyYz4pCgp3aGVyZSA8cmM+IGlzIHJjMSwgcmMyLCByYzMsIGV0Yy4gYW5kIGFzIHRh cmJhbGwgZnJvbQoKaHR0cDovL2JpdHMueGVuc291cmNlLmNvbS9vc3MteGVuL3JlbGVhc2UvNC43 LjAtPHJjPi94ZW4tNC43LjAtPHJjPi50YXIuZ3ogCmh0dHA6Ly9iaXRzLnhlbnNvdXJjZS5jb20v b3NzLXhlbi9yZWxlYXNlLzQuNy4wLTxyYz4veGVuLTQuNy4wLTxyYz4udGFyLmd6LnNpZwoKRGV0 YWlsZWQgYnVpbGQgYW5kIEluc3RhbGwgaW5zdHJ1Y3Rpb25zIGNhbiBiZSBmb3VuZCBvbiB0aGUg VGVzdCBEYXkgCldpa2kgWzJdLgoKPSBUZXN0aW5nIG5ldyBGZWF0dXJlcywgVGVzdCBhbmQgQnVn IFJlcG9ydHMgPQoKWW91IGNhbiBmaW5kIFRlc3QgSW5zdHJ1Y3Rpb25zIGZvciBuZXcgZmVhdHVy ZXMgb24gb3VyIFRlc3QgRGF5IFdpa2kgWzJdIAphbmQgaW5zdHJ1Y3Rpb25zIGZvciBnZW5lcmFs IHRlc3RzIG9uIFRlc3RpbmcgWGVuIFszXS4gVGhlIGZvbGxvd2luZyAKcGFnZXMgcHJvdmlkZSBp bmZvcm1hdGlvbiBvbiBob3cgdG8gcmVwb3J0IHN1Y2Nlc3NmdWwgdGVzdHMgWzRdIGFuZCBob3cg CnRvIHJlcG9ydCBidWdzIGFuZCBpc3N1ZXMgWzVdLgoKSGFwcHkgVGVzdGluZyEKCkJlc3QgUmVn YXJkcwpMYXJzCgpbMV0gaHR0cDovL3dpa2kueGVucHJvamVjdC5vcmcvd2lraS9YZW5fUHJvamVj dF9UZXN0X0RheXMKWzJdIGh0dHA6Ly93aWtpLnhlbnByb2plY3Qub3JnL3dpa2kvWGVuXzQuN19S Q190ZXN0X2luc3RydWN0aW9ucyNJbnN0YWxsaW5nClszXSBodHRwOi8vd2lraS54ZW5wcm9qZWN0 Lm9yZy93aWtpL1Rlc3RpbmdfWGVuCls0XSBodHRwOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtp L1hlbl80LjdfUkNfdGVzdF9pbnN0cnVjdGlvbnMjUmVwb3J0aW5nX3N1Y2Nlc3MKWzVdIGh0dHA6 Ly93aWtpLnhlbnByb2plY3Qub3JnL3dpa2kvWGVuXzQuN19SQ190ZXN0X2luc3RydWN0aW9ucyNS ZXBvcnRpbmdfQnVnc18uMjguMjZfSXNzdWVzLjI5Cl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fClhlbi1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91 bmNlQGxpc3RzLnhlbi5vcmcKaHR0cDovL2xpc3RzLnhlbi5vcmcveGVuLWFubm91bmNl From xen-announce-bounces@lists.xen.org Wed May 11 10:52:07 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 11 May 2016 10:52:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0Rj8-00021R-QS; Wed, 11 May 2016 10:50:50 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b0RhM-0001RM-U5; Wed, 11 May 2016 10:49:01 +0000 Received: from [85.158.137.68] by server-3.bemta-3.messagelabs.com id 55/22-03294-B1E03375; Wed, 11 May 2016 10:48:59 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrHIsWRWlGSWpSXmKPExsXiVRtkpivFZxx ucOixpcXsjW3MFt+3TGayeLfvL7MDs8fhD1dYAhijWDPzkvIrElgzXi28wFJwnrdi5jLpBsYn 3F2MnBxCAqUS097NZ+ti5OJgEWhglbj+4iMLiCMhMIdVYvvt8+wgVRICMRIz2y6xQtjVEs9f7 WGE6FaXuLfoNjtIg5DAV0aJNd/3MIEk2AS0JTbdeMAMYjMLaEnc+PeSCcLWlli28DVYXFjAVu L5l1awOK+AjcTpJbfAlrEIqEqsXNzOBDJURKCJUaLn4202iCI9iVe3LkNdISux+/cjpgmMArO Q7JiFZMcsJC0LGJlXMWoUpxaVpRbpGprqJRVlpmeU5CZm5ugaGhjr5aYWFyemp+YkJhXrJefn bmIEhi0DEOxgXLPd8xCjJAeTkihv/0ujcCG+pPyUyozE4oz4otKc1OJDjDIcHEoSvMU8xuFCg kWp6akVaZk5wAiCSUtw8CiJ8F7iBkrzFhck5hZnpkOkTjHqcmyZem8tkxBLXn5eqpQ4byfIDA GQoozSPLgRsGi+xCgrJczLCHSUEE9BalFuZgmq/CtGcQ5GJWHepyBTeDLzSuA2vQI6ggnoiOr rRiBHlCQipKQaGCVnvT1aZHmGU0OSQfDm6g8POevnHJiruCFzfaZc8Z73k/9OKTr2dwtzbLW+ 96rTMbtCGyzqNiyVNrmyednF+/vv6s5gl3v/iN1EvMhnEcPE9G7/rzzeV0QcTxR7u2w8vb7qo M5R3oeqH55ti7Pye6Q+X7NcsjFkXfOsJ2nvrN895juY/S09fJMSS3FGoqEWc1FxIgBcj6ww4Q IAAA== X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-12.tower-31.messagelabs.com!1462963737!22866815!1 X-Originating-IP: [74.125.82.54] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 1545 invoked from network); 11 May 2016 10:48:58 -0000 Received: from mail-wm0-f54.google.com (HELO mail-wm0-f54.google.com) (74.125.82.54) by server-12.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 11 May 2016 10:48:58 -0000 Received: by mail-wm0-f54.google.com with SMTP id e201so213267453wme.0; Wed, 11 May 2016 03:48:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-transfer-encoding:subject:message-id:date:to :mime-version; bh=HACErKI8LH48h+BKQcQEeFDYq0wFuxiFpiTH8Xu+CyM=; b=ajGuDgQVnkiv63Bn1qEV/7D8cZ0AHV+ct83YFv6R5B4SJQYtP94rf7pAT1NYJdWGak kOkdSDOBlOHY6QopZ/YeNl9eBLVLFG5Pgfmj6EzHNJ6rumG1xbNIsLU8YJ6hsf9Cw6/M r60rx8lwvujZyGV7PU1OhP8Hb3CdDbevlM15ok+rBUgDubC3cdNXWNOo26MBdWvLPE9b C9cKQseIGVl54PLuSFcNbfFIh56Np4ySL6iBHYII/I9CK7Ls/oenY5J4SdmQY2N2c41Y wks+TtUB3ZVwuvNrDUGx6ivF6Bupd5APi8W8DGdBwdoKLP73DGmayCD9qSRfYDGYWO+2 C5Ew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:content-transfer-encoding:subject :message-id:date:to:mime-version; bh=HACErKI8LH48h+BKQcQEeFDYq0wFuxiFpiTH8Xu+CyM=; b=Ak59nS1CRBouKD26w24XWe8Urb9gKVF3qjnKz08vgQ6oigXZzVK4PNK6BHR4N0OSC6 H5VUF/sIRzPNMtw5v0AKg8iDZUnt4mf774eXrqPY5+Qm+omDMVCNj/fZReq8XHxPrBWQ JauLfmyH8qr4KuA5R2GJ0uz0yFO/K9aNCYGTom6PianIddXjC3hoq4Xwy2Rc2nfu94Gq zyrJQ0D8OtBKwiImANdszny/q7TtuIuQ/5oLKXauAfwHFwDmCmwRRfQdVNmK4i5ERYLQ tJ0YXY7BZT5/10VC/GnUBaJc+PVxro0bsCY2nDzxoVKglbdh9gL67Cw2bR4tTVJVCKav IY7w== X-Gm-Message-State: AOPr4FV7qyOB2tvSphzClkgWR8rkFPMYKEM5/CGvoO1/QtoTBSzdKcMpGy0AVC/j7xo3ag== X-Received: by 10.194.115.230 with SMTP id jr6mr2995773wjb.125.1462963737178; Wed, 11 May 2016 03:48:57 -0700 (PDT) Received: from [192.168.0.12] (bcde049e.skybroadband.com. [188.222.4.158]) by smtp.gmail.com with ESMTPSA id jq1sm7412664wjc.28.2016.05.11.03.48.55 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 11 May 2016 03:48:55 -0700 (PDT) From: Lars Kurth Message-Id: <267CF716-65E3-4630-8922-F1AC2092B099@gmail.com> Date: Wed, 11 May 2016 11:48:54 +0100 To: xen-announce , Xen-devel , xen-users@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Mailman-Approved-At: Wed, 11 May 2016 10:50:49 +0000 Subject: [Xen-announce] Announcing Xen Project 4.7 RC and Test Day Schedule X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" RGVhciBDb21tdW5pdHkgbWVtYmVycywKClllc3RlcmRheSwgd2UgY3JlYXRlZCBYZW4gNC43IFJD MiBhbmQgd2lsbCByZWxlYXNlIGEgbmV3IHJlbGVhc2UgCmNhbmRpZGF0ZSBldmVyeSBXZWRuZXNk YXksIHVudGlsIHdlIGRlY2xhcmUgYSByZWxlYXNlIGNhbmRpZGF0ZSBhcyB0aGUgCmZpbmFsIGNh bmRpZGF0ZSBhbmQgY3V0IHRoZSBYZW4gNC43IHJlbGVhc2UuIFdlIHdpbGwgYWxzbyBob2xkIGEg VGVzdCAKRGF5IFsxXSBldmVyeSBGcmlkYXkgZm9yIHRoZSByZWxlYXNlIGNhbmRpZGF0ZSB0aGF0 IHdhcyByZWxlYXNlZCB0aGUgCldlZG5lc2RheSBwcmlvciB0byB0aGUgVGVzdCBEYXkuIFRoaXMg bWVhbnMgd2Ugd2lsbCBoYXZlIFRlc3QgRGF5cyBvbiAKTWF5IDEzdGgsIDIwdGgsIDI3dGggYW5k IEp1bmUgM3JkLiBZb3VyIHRlc3RpbmcgaXMgc3RpbGwgdmFsdWFibGUgb24gCm90aGVyIGRheXMs IHNvIHBsZWFzZSBmZWVsIGZyZWUgdG8gc2VuZCBUZXN0IFJlcG9ydHMgYXMgb3V0bGluZWQgYmVs b3cgCmF0IGFueSB0aW1lLgoKPSBHZXR0aW5nLCBCdWlsZGluZyBhbmQgSW5zdGFsbGluZyBhIFJl bGVhc2UgQ2FuZGlkYXRlID0KClJlbGVhc2UgY2FuZGlkYXRlcyBhcmUgYXZhaWxhYmxlIGZyb20g b3VyIGdpdCByZXBvc2l0b3J5IGF0CgpnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCAodGFn IDQuNy4wLTxyYz4pCgp3aGVyZSA8cmM+IGlzIHJjMSwgcmMyLCByYzMsIGV0Yy4gYW5kIGFzIHRh cmJhbGwgZnJvbQoKaHR0cDovL2JpdHMueGVuc291cmNlLmNvbS9vc3MteGVuL3JlbGVhc2UvNC43 LjAtPHJjPi94ZW4tNC43LjAtPHJjPi50YXIuZ3ogCmh0dHA6Ly9iaXRzLnhlbnNvdXJjZS5jb20v b3NzLXhlbi9yZWxlYXNlLzQuNy4wLTxyYz4veGVuLTQuNy4wLTxyYz4udGFyLmd6LnNpZwoKRGV0 YWlsZWQgYnVpbGQgYW5kIEluc3RhbGwgaW5zdHJ1Y3Rpb25zIGNhbiBiZSBmb3VuZCBvbiB0aGUg VGVzdCBEYXkgCldpa2kgWzJdLgoKPSBUZXN0aW5nIG5ldyBGZWF0dXJlcywgVGVzdCBhbmQgQnVn IFJlcG9ydHMgPQoKWW91IGNhbiBmaW5kIFRlc3QgSW5zdHJ1Y3Rpb25zIGZvciBuZXcgZmVhdHVy ZXMgb24gb3VyIFRlc3QgRGF5IFdpa2kgWzJdIAphbmQgaW5zdHJ1Y3Rpb25zIGZvciBnZW5lcmFs IHRlc3RzIG9uIFRlc3RpbmcgWGVuIFszXS4gVGhlIGZvbGxvd2luZyAKcGFnZXMgcHJvdmlkZSBp bmZvcm1hdGlvbiBvbiBob3cgdG8gcmVwb3J0IHN1Y2Nlc3NmdWwgdGVzdHMgWzRdIGFuZCBob3cg CnRvIHJlcG9ydCBidWdzIGFuZCBpc3N1ZXMgWzVdLgoKSGFwcHkgVGVzdGluZyEKCkJlc3QgUmVn YXJkcwpMYXJzCgpbMV0gaHR0cDovL3dpa2kueGVucHJvamVjdC5vcmcvd2lraS9YZW5fUHJvamVj dF9UZXN0X0RheXMKWzJdIGh0dHA6Ly93aWtpLnhlbnByb2plY3Qub3JnL3dpa2kvWGVuXzQuN19S Q190ZXN0X2luc3RydWN0aW9ucyNJbnN0YWxsaW5nClszXSBodHRwOi8vd2lraS54ZW5wcm9qZWN0 Lm9yZy93aWtpL1Rlc3RpbmdfWGVuCls0XSBodHRwOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtp L1hlbl80LjdfUkNfdGVzdF9pbnN0cnVjdGlvbnMjUmVwb3J0aW5nX3N1Y2Nlc3MKWzVdIGh0dHA6 Ly93aWtpLnhlbnByb2plY3Qub3JnL3dpa2kvWGVuXzQuN19SQ190ZXN0X2luc3RydWN0aW9ucyNS ZXBvcnRpbmdfQnVnc18uMjguMjZfSXNzdWVzLjI5Cl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fClhlbi1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91 bmNlQGxpc3RzLnhlbi5vcmcKaHR0cDovL2xpc3RzLnhlbi5vcmcveGVuLWFubm91bmNl From xen-announce-bounces@lists.xen.org Tue May 17 12:12:39 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 17 May 2016 12:12:39 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b2dqW-0003o1-9h; Tue, 17 May 2016 12:11:32 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b2dqV-0003ni-F7; Tue, 17 May 2016 12:11:31 +0000 Received: from [85.158.137.68] by server-9.bemta-3.messagelabs.com id F1/BB-03814-17A0B375; Tue, 17 May 2016 12:11:29 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrOIsWRWlGSWpSXmKPExsWS0XRdVbeAyzr c4OIbTYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmbGuaxVzwy6Cie1MDewPj Xe0uRi4OIYEzjBLX1p1jh3DWMErs/PCKpYuRk4NZwFXixr7NbBC2osSFew1gcV4BQYmTM5+A2 RICmhJ33qxiB7FFBIokdp57CWazCehJzD07iQmiV0fi5f7VYLawQLrEkkltUHPMJD4/2cYKYr MIqEpMvNbBNIGRZxaS1bOQrJ6FZPUsRg6guKbE+l36EKa0xPJ/HBDV8hLb385hhrCtJZZ82MY MUWIhcWGfDczAKd0P2Rcwcq5iVC9OLSpLLdK10EsqykzPKMlNzMzRNTQw1stNLS5OTE/NSUwq 1kvOz93ECAxuBiDYwXih3fkQoyQHk5Io78uLVuFCfEn5KZUZicUZ8UWlOanFhxhlODiUJHgNO K3DhQSLUtNTK9Iyc4BxBpOW4OBREuHdwwGU5i0uSMwtzkyHSJ1iNOZYMv3aWiaORTcf72cSYs nLz0uVEuf9CVIqAFKaUZoHNwgW/5cYZaWEeRmBThPiKUgtys0sQZV/xSjOwagkzGsHcg9PZl4 J3L5XQKcwAZ0ywcwC5JSSRISUVANjVN5580OPNL88efSssuerSERl09Nlvi7rNsl8Xbd5Tvw5 HrM3p1/cNDDYOqnDe6rV23CWX5lL1s0y5XF6emDqPKFFQq8Te+K/bG28uCjB98i3NjNxSQ51y zn2j/evNu9x1L7w9WzC9a7yytjYfxr1sje4yqumTFT19Tz53TchnpelarLG/cBPSizFGYmGWs xFxYkAhUTGlfoCAAA= X-Env-Sender: jbeulich@xenbits.xen.org X-Msg-Ref: server-5.tower-31.messagelabs.com!1463487087!37386357!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 6777 invoked from network); 17 May 2016 12:11:28 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-5.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 17 May 2016 12:11:28 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b2dqK-0004dz-JZ; Tue, 17 May 2016 12:11:20 +0000 Received: from jbeulich by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1b2dqK-0008FL-IE; Tue, 17 May 2016 12:11:20 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 17 May 2016 12:11:20 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 176 (CVE-2016-4480) - x86 software guest page walk PS bit handling flaw X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2016-4480 / XSA-176 version 3 x86 software guest page walk PS bit handling flaw UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= The Page Size (PS) page table entry bit exists at all page table levels other than L1. Its meaning is reserved in L4, and conditionally reserved in L3 and L2 (depending on hardware capabilities). The software page table walker in the hypervisor, however, so far ignored that bit in L4 and (on respective hardware) L3 entries, resulting in pages to be treated as page tables which the guest OS may not have designated as such. If the page in question is writable by an unprivileged user, then that user will be able to map arbitrary guest memory. IMPACT ====== On vulnerable OSes, guest user mode code may be able to establish mappings of arbitrary memory inside the guest, allowing it to elevate its privileges inside the guest. VULNERABLE SYSTEMS ================== All Xen versions expose the vulnerability. ARM systems are not vulnerable. x86 PV guests are not vulnerable. To be vulnerable, a system must have both a vulnerable hypervisor, and a vulnerable guest operating system, i.e. ones which make non-standard use of the PS bit. We are not aware of any vulnerable guest operating systems, but we cannot rule it out. We have checked with maintainers of the following operating systems, all of whom have said that to the best of their knowledge their operating system is not vulnerable: Linux, FreeBSD, NetBSD, OpenBSD, and Solaris. Nor has it been observed in common proprietary operating systems. MITIGATION ========== Running only PV guests will avoid this issue. CREDITS ======= This issue was discovered by Jan Beulich from SUSE. RESOLUTION ========== Applying the attached patch resolves this issue. Note, however, that on hosts supporting 1Gb page mappings, for guests which get this capability hidden via CPUID override in their config file, fully correct behavior cannot be provided when using HAP paging. This is a result of hardware behavior, which software cannot mitigate. If that is a concern, such guests would need to be run in shadow paging mode. xsa176.patch xen-unstable, Xen 4.6.x, Xen 4.5.x, Xen 4.4.x, Xen 4.3.x $ sha256sum xsa176* e61c52477a8d8aa79111d686b103202ff8a558d8b3356635288c1290789b7eb3 xsa176.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXOvhuAAoJEIP+FMlX6CvZ8JgH/A7YU+62hV5ayIx77AEwHeIJ 6nqf6B1k+Y0aEtiSbupHDIMwSw13FoR+LluaZjTXpBd251Ut1cwXkDvC6yiPHxq0 rWlb1/ka0rnOT3/rx0SgUjx02HbBzOFyyhZgR6W/gXV/S5fQhE26KbhEWvVaYCXO QeryIsi9WBV/AWbx4fis4ecREhyEWPYkJ/bQq867P6YJLXQ1btc/CyZ7ahBjna68 VB9WE8czSs2x5QjJfKad5ksRAixdvaLFtVNOhnqJuJBickO3dd/IZPRxcSmazjdl sIiSMfKU9nPb56MIgZxTWCLpvYLe8yarnvjiVOivaHl2cBT01UOjVJv/dSQEyrw= =uQdJ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa176.patch" Content-Disposition: attachment; filename="xsa176.patch" Content-Transfer-Encoding: base64 eDg2L21tOiBmdWxseSBob25vciBQUyBiaXRzIGluIGd1ZXN0IHBhZ2UgdGFi bGUgd2Fsa3MKCkluIEw0IGVudHJpZXMgaXQgaXMgY3VycmVudGx5IHVuY29u ZGl0aW9uYWxseSByZXNlcnZlZCAoYW5kIGhlbmNlCnNob3VsZCwgd2hlbiBz ZXQsIGFsd2F5cyByZXN1bHQgaW4gYSByZXNlcnZlZCBiaXQgcGFnZSBmYXVs dCksIGFuZCBpcwpyZXNlcnZlZCBvbiBoYXJkd2FyZSBub3Qgc3VwcG9ydGlu ZyAxR2IgcGFnZXMgKGFuZCBoZW5jZSBzaG91bGQsIHdoZW4Kc2V0LCBzaW1p bGFybHkgY2F1c2UgYSByZXNlcnZlZCBiaXQgcGFnZSBmYXVsdCBvbiBzdWNo IGhhcmR3YXJlKS4KClRoaXMgaXMgQ1ZFLTIwMTYtNDQ4MCAvIFhTQS0xNzYu CgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5j b20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgpUZXN0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0v Z3Vlc3Rfd2Fsay5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS9ndWVzdF93YWxr LmMKQEAgLTIyNiw2ICsyMjYsMTEgQEAgZ3Vlc3Rfd2Fsa190YWJsZXMoc3Ry dWN0IHZjcHUgKnYsIHN0cnVjdAogICAgICAgICByYyB8PSBfUEFHRV9QUkVT RU5UOwogICAgICAgICBnb3RvIG91dDsKICAgICB9CisgICAgaWYgKCBnZmxh Z3MgJiBfUEFHRV9QU0UgKQorICAgIHsKKyAgICAgICAgcmMgfD0gX1BBR0Vf UFNFIHwgX1BBR0VfSU5WQUxJRF9CSVQ7CisgICAgICAgIGdvdG8gb3V0Owor ICAgIH0KICAgICByYyB8PSAoKGdmbGFncyAmIG1mbGFncykgXiBtZmxhZ3Mp OwogCiAgICAgLyogTWFwIHRoZSBsMyB0YWJsZSAqLwpAQCAtMjQ3LDcgKzI1 Miw3IEBAIGd1ZXN0X3dhbGtfdGFibGVzKHN0cnVjdCB2Y3B1ICp2LCBzdHJ1 Y3QKICAgICB9CiAgICAgcmMgfD0gKChnZmxhZ3MgJiBtZmxhZ3MpIF4gbWZs YWdzKTsKICAgICAKLSAgICBwc2UxRyA9IChnZmxhZ3MgJiBfUEFHRV9QU0Up ICYmIGd1ZXN0X3N1cHBvcnRzXzFHX3N1cGVycGFnZXModik7IAorICAgIHBz ZTFHID0gISEoZ2ZsYWdzICYgX1BBR0VfUFNFKTsKIAogICAgIGlmICggcHNl MUcgKQogICAgIHsKQEAgLTI2Nyw2ICsyNzIsOCBAQCBndWVzdF93YWxrX3Rh YmxlcyhzdHJ1Y3QgdmNwdSAqdiwgc3RydWN0CiAgICAgICAgICAgICAvKiBf UEFHRV9QU0VfUEFUIG5vdCBzZXQ6IHJlbW92ZSBfUEFHRV9QQVQgZnJvbSBm bGFncy4gKi8KICAgICAgICAgICAgIGZsYWdzICY9IH5fUEFHRV9QQVQ7CiAK KyAgICAgICAgaWYgKCAhZ3Vlc3Rfc3VwcG9ydHNfMUdfc3VwZXJwYWdlcyh2 KSApCisgICAgICAgICAgICByYyB8PSBfUEFHRV9QU0UgfCBfUEFHRV9JTlZB TElEX0JJVDsKICAgICAgICAgaWYgKCBnZm5feChzdGFydCkgJiBHVUVTVF9M M19HRk5fTUFTSyAmIH4weDEgKQogICAgICAgICAgICAgcmMgfD0gX1BBR0Vf SU5WQUxJRF9CSVRTOwogCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Tue May 17 12:12:39 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 17 May 2016 12:12:39 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b2dqW-0003o1-9h; Tue, 17 May 2016 12:11:32 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b2dqV-0003ni-F7; Tue, 17 May 2016 12:11:31 +0000 Received: from [85.158.137.68] by server-9.bemta-3.messagelabs.com id F1/BB-03814-17A0B375; Tue, 17 May 2016 12:11:29 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrOIsWRWlGSWpSXmKPExsWS0XRdVbeAyzr c4OIbTYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmbGuaxVzwy6Cie1MDewPj Xe0uRi4OIYEzjBLX1p1jh3DWMErs/PCKpYuRk4NZwFXixr7NbBC2osSFew1gcV4BQYmTM5+A2 RICmhJ33qxiB7FFBIokdp57CWazCehJzD07iQmiV0fi5f7VYLawQLrEkkltUHPMJD4/2cYKYr MIqEpMvNbBNIGRZxaS1bOQrJ6FZPUsRg6guKbE+l36EKa0xPJ/HBDV8hLb385hhrCtJZZ82MY MUWIhcWGfDczAKd0P2Rcwcq5iVC9OLSpLLdK10EsqykzPKMlNzMzRNTQw1stNLS5OTE/NSUwq 1kvOz93ECAxuBiDYwXih3fkQoyQHk5Io78uLVuFCfEn5KZUZicUZ8UWlOanFhxhlODiUJHgNO K3DhQSLUtNTK9Iyc4BxBpOW4OBREuHdwwGU5i0uSMwtzkyHSJ1iNOZYMv3aWiaORTcf72cSYs nLz0uVEuf9CVIqAFKaUZoHNwgW/5cYZaWEeRmBThPiKUgtys0sQZV/xSjOwagkzGsHcg9PZl4 J3L5XQKcwAZ0ywcwC5JSSRISUVANjVN5580OPNL88efSssuerSERl09Nlvi7rNsl8Xbd5Tvw5 HrM3p1/cNDDYOqnDe6rV23CWX5lL1s0y5XF6emDqPKFFQq8Te+K/bG28uCjB98i3NjNxSQ51y zn2j/evNu9x1L7w9WzC9a7yytjYfxr1sje4yqumTFT19Tz53TchnpelarLG/cBPSizFGYmGWs xFxYkAhUTGlfoCAAA= X-Env-Sender: jbeulich@xenbits.xen.org X-Msg-Ref: server-5.tower-31.messagelabs.com!1463487087!37386357!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 6777 invoked from network); 17 May 2016 12:11:28 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-5.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 17 May 2016 12:11:28 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b2dqK-0004dz-JZ; Tue, 17 May 2016 12:11:20 +0000 Received: from jbeulich by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1b2dqK-0008FL-IE; Tue, 17 May 2016 12:11:20 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 17 May 2016 12:11:20 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 176 (CVE-2016-4480) - x86 software guest page walk PS bit handling flaw X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2016-4480 / XSA-176 version 3 x86 software guest page walk PS bit handling flaw UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= The Page Size (PS) page table entry bit exists at all page table levels other than L1. Its meaning is reserved in L4, and conditionally reserved in L3 and L2 (depending on hardware capabilities). The software page table walker in the hypervisor, however, so far ignored that bit in L4 and (on respective hardware) L3 entries, resulting in pages to be treated as page tables which the guest OS may not have designated as such. If the page in question is writable by an unprivileged user, then that user will be able to map arbitrary guest memory. IMPACT ====== On vulnerable OSes, guest user mode code may be able to establish mappings of arbitrary memory inside the guest, allowing it to elevate its privileges inside the guest. VULNERABLE SYSTEMS ================== All Xen versions expose the vulnerability. ARM systems are not vulnerable. x86 PV guests are not vulnerable. To be vulnerable, a system must have both a vulnerable hypervisor, and a vulnerable guest operating system, i.e. ones which make non-standard use of the PS bit. We are not aware of any vulnerable guest operating systems, but we cannot rule it out. We have checked with maintainers of the following operating systems, all of whom have said that to the best of their knowledge their operating system is not vulnerable: Linux, FreeBSD, NetBSD, OpenBSD, and Solaris. Nor has it been observed in common proprietary operating systems. MITIGATION ========== Running only PV guests will avoid this issue. CREDITS ======= This issue was discovered by Jan Beulich from SUSE. RESOLUTION ========== Applying the attached patch resolves this issue. Note, however, that on hosts supporting 1Gb page mappings, for guests which get this capability hidden via CPUID override in their config file, fully correct behavior cannot be provided when using HAP paging. This is a result of hardware behavior, which software cannot mitigate. If that is a concern, such guests would need to be run in shadow paging mode. xsa176.patch xen-unstable, Xen 4.6.x, Xen 4.5.x, Xen 4.4.x, Xen 4.3.x $ sha256sum xsa176* e61c52477a8d8aa79111d686b103202ff8a558d8b3356635288c1290789b7eb3 xsa176.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXOvhuAAoJEIP+FMlX6CvZ8JgH/A7YU+62hV5ayIx77AEwHeIJ 6nqf6B1k+Y0aEtiSbupHDIMwSw13FoR+LluaZjTXpBd251Ut1cwXkDvC6yiPHxq0 rWlb1/ka0rnOT3/rx0SgUjx02HbBzOFyyhZgR6W/gXV/S5fQhE26KbhEWvVaYCXO QeryIsi9WBV/AWbx4fis4ecREhyEWPYkJ/bQq867P6YJLXQ1btc/CyZ7ahBjna68 VB9WE8czSs2x5QjJfKad5ksRAixdvaLFtVNOhnqJuJBickO3dd/IZPRxcSmazjdl sIiSMfKU9nPb56MIgZxTWCLpvYLe8yarnvjiVOivaHl2cBT01UOjVJv/dSQEyrw= =uQdJ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa176.patch" Content-Disposition: attachment; filename="xsa176.patch" Content-Transfer-Encoding: base64 eDg2L21tOiBmdWxseSBob25vciBQUyBiaXRzIGluIGd1ZXN0IHBhZ2UgdGFi bGUgd2Fsa3MKCkluIEw0IGVudHJpZXMgaXQgaXMgY3VycmVudGx5IHVuY29u ZGl0aW9uYWxseSByZXNlcnZlZCAoYW5kIGhlbmNlCnNob3VsZCwgd2hlbiBz ZXQsIGFsd2F5cyByZXN1bHQgaW4gYSByZXNlcnZlZCBiaXQgcGFnZSBmYXVs dCksIGFuZCBpcwpyZXNlcnZlZCBvbiBoYXJkd2FyZSBub3Qgc3VwcG9ydGlu ZyAxR2IgcGFnZXMgKGFuZCBoZW5jZSBzaG91bGQsIHdoZW4Kc2V0LCBzaW1p bGFybHkgY2F1c2UgYSByZXNlcnZlZCBiaXQgcGFnZSBmYXVsdCBvbiBzdWNo IGhhcmR3YXJlKS4KClRoaXMgaXMgQ1ZFLTIwMTYtNDQ4MCAvIFhTQS0xNzYu CgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5j b20+ClJldmlld2VkLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVy M0BjaXRyaXguY29tPgpUZXN0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl dy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vYXJjaC94ODYvbW0v Z3Vlc3Rfd2Fsay5jCisrKyBiL3hlbi9hcmNoL3g4Ni9tbS9ndWVzdF93YWxr LmMKQEAgLTIyNiw2ICsyMjYsMTEgQEAgZ3Vlc3Rfd2Fsa190YWJsZXMoc3Ry dWN0IHZjcHUgKnYsIHN0cnVjdAogICAgICAgICByYyB8PSBfUEFHRV9QUkVT RU5UOwogICAgICAgICBnb3RvIG91dDsKICAgICB9CisgICAgaWYgKCBnZmxh Z3MgJiBfUEFHRV9QU0UgKQorICAgIHsKKyAgICAgICAgcmMgfD0gX1BBR0Vf UFNFIHwgX1BBR0VfSU5WQUxJRF9CSVQ7CisgICAgICAgIGdvdG8gb3V0Owor ICAgIH0KICAgICByYyB8PSAoKGdmbGFncyAmIG1mbGFncykgXiBtZmxhZ3Mp OwogCiAgICAgLyogTWFwIHRoZSBsMyB0YWJsZSAqLwpAQCAtMjQ3LDcgKzI1 Miw3IEBAIGd1ZXN0X3dhbGtfdGFibGVzKHN0cnVjdCB2Y3B1ICp2LCBzdHJ1 Y3QKICAgICB9CiAgICAgcmMgfD0gKChnZmxhZ3MgJiBtZmxhZ3MpIF4gbWZs YWdzKTsKICAgICAKLSAgICBwc2UxRyA9IChnZmxhZ3MgJiBfUEFHRV9QU0Up ICYmIGd1ZXN0X3N1cHBvcnRzXzFHX3N1cGVycGFnZXModik7IAorICAgIHBz ZTFHID0gISEoZ2ZsYWdzICYgX1BBR0VfUFNFKTsKIAogICAgIGlmICggcHNl MUcgKQogICAgIHsKQEAgLTI2Nyw2ICsyNzIsOCBAQCBndWVzdF93YWxrX3Rh YmxlcyhzdHJ1Y3QgdmNwdSAqdiwgc3RydWN0CiAgICAgICAgICAgICAvKiBf UEFHRV9QU0VfUEFUIG5vdCBzZXQ6IHJlbW92ZSBfUEFHRV9QQVQgZnJvbSBm bGFncy4gKi8KICAgICAgICAgICAgIGZsYWdzICY9IH5fUEFHRV9QQVQ7CiAK KyAgICAgICAgaWYgKCAhZ3Vlc3Rfc3VwcG9ydHNfMUdfc3VwZXJwYWdlcyh2 KSApCisgICAgICAgICAgICByYyB8PSBfUEFHRV9QU0UgfCBfUEFHRV9JTlZB TElEX0JJVDsKICAgICAgICAgaWYgKCBnZm5feChzdGFydCkgJiBHVUVTVF9M M19HRk5fTUFTSyAmIH4weDEgKQogICAgICAgICAgICAgcmMgfD0gX1BBR0Vf SU5WQUxJRF9CSVRTOwogCg== --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Mon May 23 17:10:55 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 23 May 2016 17:10:55 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b4tMU-0004Nf-ML; Mon, 23 May 2016 17:09:50 +0000 Received: from mail6.bemta6.messagelabs.com ([85.158.143.247]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b4tMT-0004NE-ET; Mon, 23 May 2016 17:09:49 +0000 Received: from [85.158.143.35] by server-2.bemta-6.messagelabs.com id B7/0C-09532-C5933475; Mon, 23 May 2016 17:09:48 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupileJIrShJLcpLzFFi42LJaLquqhtt6Rx u8HGXnMWtm63MFks+LmaxWHX1AKsDs8fR3b+ZAhijWDPzkvIrElgzft5/wVJwJaTi5eF7TA2M EwK6GDk5hASOM0q8/qXVxcgFZC9ilPjR1MUMkmAWcJW4sW8zG4StKHHhXgMLiM0rIChxcuYTM FtCQFPizptV7CC2iECRxM5zL8FsNgE9iblnJzFB9OpIvNy/GswWFvCTaOvqZ4SYYyZx8uV1MJ tFQFWi81U/0wRGnllIVs9CsnoWktWzGDmA4poS63fpQ5jSEsv/cUBUy0tsfzuHGcJ2lFg//RY jhG0n8f/SeriJU7ofskO0OkrcWZYOU/L29jx2ZCULGHlWMaoXpxaVpRbpGuklFWWmZ5TkJmbm 6BoamOnlphYXJ6an5iQmFesl5+duYgTGCAMQ7GBc9tfpEKMkB5OSKK+jlnO4EF9SfkplRmJxR nxRaU5q8SFGGQ4OJQneE+ZAOcGi1PTUirTMHGC0wqQlOHiURHjlQdK8xQWJucWZ6RCpU4zGHE umX1vLxLHo5uP9TEIsefl5qVLivDNASgVASjNK8+AGwZLIJUZZKWFeRqDThHgKUotyM0tQ5V8 xinMwKgnz3gCZwpOZVwK37xXQKUxApzyUdgA5pSQRISXVwDhZvWz5In+tK77fVXe5nZ6VE93V Xiuu2+JpY8vxPfrntuJ2pakdrwwWKPyR6Zj387LTQvNz+eHb6iyvJE466Cym9P724tfNm6btO fEo5/PincFCj5g5LnY/Zzptopuis90vXT/+/MSwzOK4jD4l1Ta/Zb3ekf6Tf6zvDot8oVEyWV Um+IhtjRJLcUaioRZzUXEiANIiVxMdAwAA X-Env-Sender: iwj@xenbits.xen.org X-Msg-Ref: server-2.tower-21.messagelabs.com!1464023386!1620303!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 55410 invoked from network); 23 May 2016 17:09:47 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-2.tower-21.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 23 May 2016 17:09:47 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b4tME-0008Fb-W1; Mon, 23 May 2016 17:09:34 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1b4tME-0003x1-2c; Mon, 23 May 2016 17:09:34 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Mon, 23 May 2016 17:09:34 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 180 (CVE-2014-3672) - Unrestricted qemu logging X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2014-3672 / XSA-180 Unrestricted qemu logging ISSUE DESCRIPTION ================= When the libxl toolstack launches qemu for HVM guests, it pipes the output of stderr to a file in /var/log/xen. This output is not rate-limited in any way. The guest can easily cause qemu to print messages to stderr, causing this file to become arbitrarily large. IMPACT ====== The disk containing the logfile can be exausted, possibly causing a denial-of-service (DoS). VULNERABLE SYSTEMS ================== All versions of Xen are affected. Only x86 systems are affected; ARM systems are not affected. Only systems running HVM guests are affected; systems running only PV guests are not affected. Both qemu-upstream and qemu-traditional are affected. MITIGATION ========== Running only PV guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Andrew Sorensen of leviathansecurity.com. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. The patches adopt a simple and rather crude approach which is effective at resolving the security issue in the context of a Xen device model. They may not be appropriate for adoption upstream or in other contexts. xsa180-qemut.patch qemu-xen-traditional (all supported versions) xsa180-qemuu.patch qemu-xen (upstream) Xen unstable $ sha256sum xsa180* 7733fd57868c4313c7c47ccde3aba21e9ed5002ee8a937b20997fb3d2282a5d7 xsa180-qemut.patch 7a92bbd3b6368f91e694400c8e850567972e14852e4f61fbb61cc3b7b98f14ef xsa180-qemuu.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXQzkrAAoJEIP+FMlX6CvZjkYIAMJRhIzcKP7P8Q075WKw29e2 PpLFy+eOM/946SOnKxrN/1Pq+yYl5Jn1rN/TMRre4n6pYdGlGY/+MFa4N2tfKhBv 8dYcE2BMD9tbLi4SpbvoIMUtmLM1y0lVSmtHbMaw/zQDpT0uM1Kh+P0VjTeBADo/ PgRgePGfV7r+4nVjxjdSiNah8XAR5P/hoHNGOaM2kuIT19FwyDK7uQONE+HL2SdI ccA+JAMZFlHs1/hcjeCLny7Soedy4GPfGfqUpu/zRkaaDmCkG1E+gfcox5S2myYc Kogj7oiVWjRTcYh5cUOIfSmC4TDM8pqWnMmFftGShOvWqRJH3tUWt3TkaU669X8= =SczG -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa180-qemut.patch" Content-Disposition: attachment; filename="xsa180-qemut.patch" Content-Transfer-Encoding: base64 RnJvbSA3NDkwZGFiNWMxYTAxYjE2MjNlOWQ4N2JkYzY1M2NiNGY5NjNkZDhh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBJYW4gSmFja3NvbiA8 aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KRGF0ZTogVGh1LCAxOSBNYXkg MjAxNiAxOTozODozNSArMDEwMApTdWJqZWN0OiBbUEFUQ0hdIG1haW4gbG9v cDogQmlnIGhhbW1lciB0byBmaXggbG9nZmlsZSBkaXNrIERvUyBpbiBYZW4g c2V0dXBzCgpFYWNoIHRpbWUgcm91bmQgdGhlIG1haW4gbG9vcCwgd2Ugbm93 IGZzdGF0IHN0ZGVyci4gIElmIGl0IGlzIHRvbyBiaWcsCndlIGR1cDIgL2Rl di9udWxsIG9udG8gaXQuICBUaGlzIGlzIG5vdCBhIHZlcnkgcHJldHR5IHBh dGNoIGJ1dCBpdCBpcwp2ZXJ5IHNpbXBsZSwgZWFzeSB0byBzZWUgdGhhdCBp dCdzIGNvcnJlY3QsIGFuZCBoYXMgYSBsb3cgcmlzayBvZgpjb2xsYXRlcmFs IGRhbWFnZS4KClRoZSBsaW1pdCBpcyAxTWJ5IGJ5IGRlZmF1bHQgYnV0IGNh biBiZSBhZGp1c3RlZCBieSBzZXR0aW5nIGEgbmV3CmVudmlyb25tZW50IHZh cmlhYmxlLgoKVGhpcyBmaXhlcyBDVkUtMjAxNC0zNjcyLgoKU2lnbmVkLW9m Zi1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJpeC5jb20+ ClRlc3RlZC1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJp eC5jb20+Ci0tLQogdmwuYyB8ICAgNDYgKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKwogMSBmaWxlIGNoYW5nZWQsIDQ2 IGluc2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS92bC5jIGIvdmwuYwppbmRl eCBjODY0ZTdkLi5kN2VmNzQyIDEwMDY0NAotLS0gYS92bC5jCisrKyBiL3Zs LmMKQEAgLTM3NTIsNiArMzc1Miw1MCBAQCBzdGF0aWMgdm9pZCBob3N0X21h aW5fbG9vcF93YWl0KGludCAqdGltZW91dCkKIH0KICNlbmRpZgogCitzdGF0 aWMgdm9pZCBjaGVja19jdmVfMjAxNF8zNjcyX3hlbih2b2lkKQoreworICAg IHN0YXRpYyB1bnNpZ25lZCBsb25nIGxpbWl0ID0gfjBVTDsKKyAgICBjb25z dCBpbnQgZmQgPSAyOworICAgIHN0cnVjdCBzdGF0IHN0YWI7CisKKyAgICBp ZiAobGltaXQgPT0gfjBVTCkgeworICAgICAgICBjb25zdCBjaGFyICpzID0g Z2V0ZW52KCJYRU5fUUVNVV9DT05TT0xFX0xJTUlUIik7CisgICAgICAgIC8q IFhFTl9RRU1VX0NPTlNPTEVfTElNSVQ9MCBtZWFucyBubyBsaW1pdCAqLwor ICAgICAgICBsaW1pdCA9IHMgPyBzdHJ0b3VsKHMsMCwwKSA6IDEqMTAyNCox MDI0OworICAgIH0KKyAgICBpZiAobGltaXQgPT0gMCkKKyAgICAgICAgcmV0 dXJuOworCisgICAgaW50IHIgPSBmc3RhdChmZCwgJnN0YWIpOworICAgIGlm IChyKSB7CisgICAgICAgIHBlcnJvcigiZnN0YXQgc3RkZXJyIChmb3IgQ1ZF LTIwMTQtMzY3MiBjaGVjaykiKTsKKyAgICAgICAgZXhpdCgtMSk7CisgICAg fQorICAgIGlmICghU19JU1JFRyhzdGFiLnN0X21vZGUpKQorICAgICAgICBy ZXR1cm47CisgICAgaWYgKHN0YWIuc3Rfc2l6ZSA8PSBsaW1pdCkKKyAgICAg ICAgcmV0dXJuOworCisgICAgLyogb2ggZGVhciAqLworICAgIGZwcmludGYo c3RkZXJyLCJcclxuIgorICAgICAgICAgICAgIkNsb3Npbmcgc3RkZXJyIGR1 ZSB0byBDVkUtMjAxNC0zNjcyIGxpbWl0LiAiCisgICAgICAgICAgICAiIFNl dCBYRU5fUUVNVV9DT05TT0xFX0xJTUlUIHRvIG51bWJlciBvZiBieXRlcyB0 byBvdmVycmlkZSwiCisgICAgICAgICAgICAiIG9yIDAgZm9yIG5vIGxpbWl0 LlxuIik7CisgICAgZmZsdXNoKHN0ZGVycik7CisKKyAgICBpbnQgbmZkID0g b3BlbigiL2Rldi9udWxsIiwgT19XUk9OTFkpOworICAgIGlmIChuZmQgPCAw KSB7CisgICAgICAgIHBlcnJvcigib3BlbiAvZGV2L251bGwgKGZvciBDVkUt MjAxNC0zNjcyIGNoZWNrKSIpOworICAgICAgICBleGl0KC0xKTsKKyAgICB9 CisgICAgciA9IGR1cDIobmZkLCBmZCk7CisgICAgaWYgKHIgIT0gZmQpIHsK KyAgICAgICAgcGVycm9yKCJkdXAyIC9kZXYvbnVsbCAoZm9yIENWRS0yMDE0 LTM2NzIgY2hlY2spIik7CisgICAgICAgIGV4aXQoLTEpOworICAgIH0KKyAg ICBjbG9zZShuZmQpOworfQorCiB2b2lkIG1haW5fbG9vcF93YWl0KGludCB0 aW1lb3V0KQogewogICAgIElPSGFuZGxlclJlY29yZCAqaW9oOwpAQCAtMzc2 Myw2ICszODA3LDggQEAgdm9pZCBtYWluX2xvb3Bfd2FpdChpbnQgdGltZW91 dCkKIAogICAgIGhvc3RfbWFpbl9sb29wX3dhaXQoJnRpbWVvdXQpOwogCisg ICAgY2hlY2tfY3ZlXzIwMTRfMzY3Ml94ZW4oKTsKKwogICAgIC8qIHBvbGwg YW55IGV2ZW50cyAqLwogICAgIC8qIFhYWDogc2VwYXJhdGUgZGV2aWNlIGhh bmRsZXJzIGZyb20gc3lzdGVtIG9uZXMgKi8KICAgICBuZmRzID0gLTE7Ci0t IAoxLjcuMTAuNAoK --=separator Content-Type: application/octet-stream; name="xsa180-qemuu.patch" Content-Disposition: attachment; filename="xsa180-qemuu.patch" Content-Transfer-Encoding: base64 RnJvbSBmNGViZGYwOGYzZWFhZjIwMjZhZGVhZWU1YjhlNTIwYjA4YmI1ZTEx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBJYW4gSmFja3NvbiA8 aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KRGF0ZTogVGh1LCAxOSBNYXkg MjAxNiAxNTo0MzozMyArMDEwMApTdWJqZWN0OiBbUEFUQ0hdIG1haW4gbG9v cDogQmlnIGhhbW1lciB0byBmaXggbG9nZmlsZSBkaXNrIERvUyBpbiBYZW4g c2V0dXBzCgpFYWNoIHRpbWUgcm91bmQgdGhlIG1haW4gbG9vcCwgd2Ugbm93 IGZzdGF0IHN0ZGVyci4gIElmIGl0IGlzIHRvbyBiaWcsCndlIGR1cDIgL2Rl di9udWxsIG9udG8gaXQuICBUaGlzIGlzIG5vdCBhIHZlcnkgcHJldHR5IHBh dGNoIGJ1dCBpdCBpcwp2ZXJ5IHNpbXBsZSwgZWFzeSB0byBzZWUgdGhhdCBp dCdzIGNvcnJlY3QsIGFuZCBoYXMgYSBsb3cgcmlzayBvZgpjb2xsYXRlcmFs IGRhbWFnZS4KClRoZSBsaW1pdCBpcyAxTWJ5IGJ5IGRlZmF1bHQgYnV0IGNh biBiZSBhZGp1c3RlZCBieSBzZXR0aW5nIGEgbmV3CmVudmlyb25tZW50IHZh cmlhYmxlLgoKVGhpcyBmaXhlcyBDVkUtMjAxNC0zNjcyLgoKU2lnbmVkLW9m Zi1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJpeC5jb20+ ClRlc3RlZC1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJp eC5jb20+Ci0tLQp2MjogTWFrZSBpdCBhY3R1YWxseSBjb21waWxlLiAgRml4 IGEgdHlwbyBpbiB0aGUgbWVzc2FnZS4KICAgIE1vdmUgdGhlIGNoZWNrX2N2 ZV8yMDE0XzM2NzJfeGVuIHVwIGluIHRoZSBmaWxlLCBzbyB0aGF0IHdlIGNh bjoKICAgIENhbGwgY2hlY2tfY3ZlXzIwMTRfMzY3Ml94ZW4gaW4gdGhlIG90 aGVyIGNvcHkgb2YgdGhlIG1haW4gbG9vcCAoISkKLS0tCiBtYWluLWxvb3Au YyB8ICAgNDggKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrCiAxIGZpbGUgY2hhbmdlZCwgNDggaW5zZXJ0aW9ucygr KQoKZGlmZiAtLWdpdCBhL21haW4tbG9vcC5jIGIvbWFpbi1sb29wLmMKaW5k ZXggMzk5NzA0My4uNGFjMDg5ZSAxMDA2NDQKLS0tIGEvbWFpbi1sb29wLmMK KysrIGIvbWFpbi1sb29wLmMKQEAgLTE2NCw2ICsxNjQsNTAgQEAgaW50IHFl bXVfaW5pdF9tYWluX2xvb3AoRXJyb3IgKiplcnJwKQogICAgIHJldHVybiAw OwogfQogCitzdGF0aWMgdm9pZCBjaGVja19jdmVfMjAxNF8zNjcyX3hlbih2 b2lkKQoreworICAgIHN0YXRpYyB1bnNpZ25lZCBsb25nIGxpbWl0ID0gfjBV TDsKKyAgICBjb25zdCBpbnQgZmQgPSAyOworICAgIHN0cnVjdCBzdGF0IHN0 YWI7CisKKyAgICBpZiAobGltaXQgPT0gfjBVTCkgeworICAgICAgICBjb25z dCBjaGFyICpzID0gZ2V0ZW52KCJYRU5fUUVNVV9DT05TT0xFX0xJTUlUIik7 CisgICAgICAgIC8qIFhFTl9RRU1VX0NPTlNPTEVfTElNSVQ9MCBtZWFucyBu byBsaW1pdCAqLworICAgICAgICBsaW1pdCA9IHMgPyBzdHJ0b3VsKHMsMCww KSA6IDEqMTAyNCoxMDI0OworICAgIH0KKyAgICBpZiAobGltaXQgPT0gMCkK KyAgICAgICAgcmV0dXJuOworCisgICAgaW50IHIgPSBmc3RhdChmZCwgJnN0 YWIpOworICAgIGlmIChyKSB7CisgICAgICAgIHBlcnJvcigiZnN0YXQgc3Rk ZXJyIChmb3IgQ1ZFLTIwMTQtMzY3MiBjaGVjaykiKTsKKyAgICAgICAgZXhp dCgtMSk7CisgICAgfQorICAgIGlmICghU19JU1JFRyhzdGFiLnN0X21vZGUp KQorICAgICAgICByZXR1cm47CisgICAgaWYgKHN0YWIuc3Rfc2l6ZSA8PSBs aW1pdCkKKyAgICAgICAgcmV0dXJuOworCisgICAgLyogb2ggZGVhciAqLwor ICAgIGZwcmludGYoc3RkZXJyLCJcclxuIgorICAgICAgICAgICAgIkNsb3Np bmcgc3RkZXJyIGR1ZSB0byBDVkUtMjAxNC0zNjcyIGxpbWl0LiAiCisgICAg ICAgICAgICAiIFNldCBYRU5fUUVNVV9DT05TT0xFX0xJTUlUIHRvIG51bWJl ciBvZiBieXRlcyB0byBvdmVycmlkZSwiCisgICAgICAgICAgICAiIG9yIDAg Zm9yIG5vIGxpbWl0LlxuIik7CisgICAgZmZsdXNoKHN0ZGVycik7CisKKyAg ICBpbnQgbmZkID0gb3BlbigiL2Rldi9udWxsIiwgT19XUk9OTFkpOworICAg IGlmIChuZmQgPCAwKSB7CisgICAgICAgIHBlcnJvcigib3BlbiAvZGV2L251 bGwgKGZvciBDVkUtMjAxNC0zNjcyIGNoZWNrKSIpOworICAgICAgICBleGl0 KC0xKTsKKyAgICB9CisgICAgciA9IGR1cDIobmZkLCBmZCk7CisgICAgaWYg KHIgIT0gZmQpIHsKKyAgICAgICAgcGVycm9yKCJkdXAyIC9kZXYvbnVsbCAo Zm9yIENWRS0yMDE0LTM2NzIgY2hlY2spIik7CisgICAgICAgIGV4aXQoLTEp OworICAgIH0KKyAgICBjbG9zZShuZmQpOworfQorCiBzdGF0aWMgaW50IG1h eF9wcmlvcml0eTsKIAogI2lmbmRlZiBfV0lOMzIKQEAgLTIxNiw2ICsyNjAs OCBAQCBzdGF0aWMgaW50IG9zX2hvc3RfbWFpbl9sb29wX3dhaXQoaW50NjRf dCB0aW1lb3V0KQogICAgIGludCByZXQ7CiAgICAgc3RhdGljIGludCBzcGlu X2NvdW50ZXI7CiAKKyAgICBjaGVja19jdmVfMjAxNF8zNjcyX3hlbigpOwor CiAgICAgZ2xpYl9wb2xsZmRzX2ZpbGwoJnRpbWVvdXQpOwogCiAgICAgLyog SWYgdGhlIEkvTyB0aHJlYWQgaXMgdmVyeSBidXN5IG9yIHdlIGFyZSBpbmNv cnJlY3RseSBidXN5IHdhaXRpbmcgaW4KQEAgLTQwNyw2ICs0NTMsOCBAQCBz dGF0aWMgaW50IG9zX2hvc3RfbWFpbl9sb29wX3dhaXQoaW50NjRfdCB0aW1l b3V0KQogICAgIGZkX3NldCByZmRzLCB3ZmRzLCB4ZmRzOwogICAgIGludCBu ZmRzOwogCisgICAgY2hlY2tfY3ZlXzIwMTRfMzY3Ml94ZW4oKTsKKwogICAg IC8qIFhYWDogbmVlZCB0byBzdXBwcmVzcyBwb2xsaW5nIGJ5IGJldHRlciB1 c2luZyB3aW4zMiBldmVudHMgKi8KICAgICByZXQgPSAwOwogICAgIGZvciAo cGUgPSBmaXJzdF9wb2xsaW5nX2VudHJ5OyBwZSAhPSBOVUxMOyBwZSA9IHBl LT5uZXh0KSB7Ci0tIAoxLjcuMTAuNAoK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Mon May 23 17:10:55 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 23 May 2016 17:10:55 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b4tMU-0004Nf-ML; Mon, 23 May 2016 17:09:50 +0000 Received: from mail6.bemta6.messagelabs.com ([85.158.143.247]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b4tMT-0004NE-ET; Mon, 23 May 2016 17:09:49 +0000 Received: from [85.158.143.35] by server-2.bemta-6.messagelabs.com id B7/0C-09532-C5933475; Mon, 23 May 2016 17:09:48 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupileJIrShJLcpLzFFi42LJaLquqhtt6Rx u8HGXnMWtm63MFks+LmaxWHX1AKsDs8fR3b+ZAhijWDPzkvIrElgzft5/wVJwJaTi5eF7TA2M EwK6GDk5hASOM0q8/qXVxcgFZC9ilPjR1MUMkmAWcJW4sW8zG4StKHHhXgMLiM0rIChxcuYTM FtCQFPizptV7CC2iECRxM5zL8FsNgE9iblnJzFB9OpIvNy/GswWFvCTaOvqZ4SYYyZx8uV1MJ tFQFWi81U/0wRGnllIVs9CsnoWktWzGDmA4poS63fpQ5jSEsv/cUBUy0tsfzuHGcJ2lFg//RY jhG0n8f/SeriJU7ofskO0OkrcWZYOU/L29jx2ZCULGHlWMaoXpxaVpRbpGuklFWWmZ5TkJmbm 6BoamOnlphYXJ6an5iQmFesl5+duYgTGCAMQ7GBc9tfpEKMkB5OSKK+jlnO4EF9SfkplRmJxR nxRaU5q8SFGGQ4OJQneE+ZAOcGi1PTUirTMHGC0wqQlOHiURHjlQdK8xQWJucWZ6RCpU4zGHE umX1vLxLHo5uP9TEIsefl5qVLivDNASgVASjNK8+AGwZLIJUZZKWFeRqDThHgKUotyM0tQ5V8 xinMwKgnz3gCZwpOZVwK37xXQKUxApzyUdgA5pSQRISXVwDhZvWz5In+tK77fVXe5nZ6VE93V Xiuu2+JpY8vxPfrntuJ2pakdrwwWKPyR6Zj387LTQvNz+eHb6iyvJE466Cym9P724tfNm6btO fEo5/PincFCj5g5LnY/Zzptopuis90vXT/+/MSwzOK4jD4l1Ta/Zb3ekf6Tf6zvDot8oVEyWV Um+IhtjRJLcUaioRZzUXEiANIiVxMdAwAA X-Env-Sender: iwj@xenbits.xen.org X-Msg-Ref: server-2.tower-21.messagelabs.com!1464023386!1620303!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 55410 invoked from network); 23 May 2016 17:09:47 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-2.tower-21.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 23 May 2016 17:09:47 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b4tME-0008Fb-W1; Mon, 23 May 2016 17:09:34 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1b4tME-0003x1-2c; Mon, 23 May 2016 17:09:34 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Mon, 23 May 2016 17:09:34 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 180 (CVE-2014-3672) - Unrestricted qemu logging X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2014-3672 / XSA-180 Unrestricted qemu logging ISSUE DESCRIPTION ================= When the libxl toolstack launches qemu for HVM guests, it pipes the output of stderr to a file in /var/log/xen. This output is not rate-limited in any way. The guest can easily cause qemu to print messages to stderr, causing this file to become arbitrarily large. IMPACT ====== The disk containing the logfile can be exausted, possibly causing a denial-of-service (DoS). VULNERABLE SYSTEMS ================== All versions of Xen are affected. Only x86 systems are affected; ARM systems are not affected. Only systems running HVM guests are affected; systems running only PV guests are not affected. Both qemu-upstream and qemu-traditional are affected. MITIGATION ========== Running only PV guests will avoid this vulnerability. CREDITS ======= This issue was discovered by Andrew Sorensen of leviathansecurity.com. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. The patches adopt a simple and rather crude approach which is effective at resolving the security issue in the context of a Xen device model. They may not be appropriate for adoption upstream or in other contexts. xsa180-qemut.patch qemu-xen-traditional (all supported versions) xsa180-qemuu.patch qemu-xen (upstream) Xen unstable $ sha256sum xsa180* 7733fd57868c4313c7c47ccde3aba21e9ed5002ee8a937b20997fb3d2282a5d7 xsa180-qemut.patch 7a92bbd3b6368f91e694400c8e850567972e14852e4f61fbb61cc3b7b98f14ef xsa180-qemuu.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXQzkrAAoJEIP+FMlX6CvZjkYIAMJRhIzcKP7P8Q075WKw29e2 PpLFy+eOM/946SOnKxrN/1Pq+yYl5Jn1rN/TMRre4n6pYdGlGY/+MFa4N2tfKhBv 8dYcE2BMD9tbLi4SpbvoIMUtmLM1y0lVSmtHbMaw/zQDpT0uM1Kh+P0VjTeBADo/ PgRgePGfV7r+4nVjxjdSiNah8XAR5P/hoHNGOaM2kuIT19FwyDK7uQONE+HL2SdI ccA+JAMZFlHs1/hcjeCLny7Soedy4GPfGfqUpu/zRkaaDmCkG1E+gfcox5S2myYc Kogj7oiVWjRTcYh5cUOIfSmC4TDM8pqWnMmFftGShOvWqRJH3tUWt3TkaU669X8= =SczG -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa180-qemut.patch" Content-Disposition: attachment; filename="xsa180-qemut.patch" Content-Transfer-Encoding: base64 RnJvbSA3NDkwZGFiNWMxYTAxYjE2MjNlOWQ4N2JkYzY1M2NiNGY5NjNkZDhh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBJYW4gSmFja3NvbiA8 aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KRGF0ZTogVGh1LCAxOSBNYXkg MjAxNiAxOTozODozNSArMDEwMApTdWJqZWN0OiBbUEFUQ0hdIG1haW4gbG9v cDogQmlnIGhhbW1lciB0byBmaXggbG9nZmlsZSBkaXNrIERvUyBpbiBYZW4g c2V0dXBzCgpFYWNoIHRpbWUgcm91bmQgdGhlIG1haW4gbG9vcCwgd2Ugbm93 IGZzdGF0IHN0ZGVyci4gIElmIGl0IGlzIHRvbyBiaWcsCndlIGR1cDIgL2Rl di9udWxsIG9udG8gaXQuICBUaGlzIGlzIG5vdCBhIHZlcnkgcHJldHR5IHBh dGNoIGJ1dCBpdCBpcwp2ZXJ5IHNpbXBsZSwgZWFzeSB0byBzZWUgdGhhdCBp dCdzIGNvcnJlY3QsIGFuZCBoYXMgYSBsb3cgcmlzayBvZgpjb2xsYXRlcmFs IGRhbWFnZS4KClRoZSBsaW1pdCBpcyAxTWJ5IGJ5IGRlZmF1bHQgYnV0IGNh biBiZSBhZGp1c3RlZCBieSBzZXR0aW5nIGEgbmV3CmVudmlyb25tZW50IHZh cmlhYmxlLgoKVGhpcyBmaXhlcyBDVkUtMjAxNC0zNjcyLgoKU2lnbmVkLW9m Zi1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJpeC5jb20+ ClRlc3RlZC1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJp eC5jb20+Ci0tLQogdmwuYyB8ICAgNDYgKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKwogMSBmaWxlIGNoYW5nZWQsIDQ2 IGluc2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS92bC5jIGIvdmwuYwppbmRl eCBjODY0ZTdkLi5kN2VmNzQyIDEwMDY0NAotLS0gYS92bC5jCisrKyBiL3Zs LmMKQEAgLTM3NTIsNiArMzc1Miw1MCBAQCBzdGF0aWMgdm9pZCBob3N0X21h aW5fbG9vcF93YWl0KGludCAqdGltZW91dCkKIH0KICNlbmRpZgogCitzdGF0 aWMgdm9pZCBjaGVja19jdmVfMjAxNF8zNjcyX3hlbih2b2lkKQoreworICAg IHN0YXRpYyB1bnNpZ25lZCBsb25nIGxpbWl0ID0gfjBVTDsKKyAgICBjb25z dCBpbnQgZmQgPSAyOworICAgIHN0cnVjdCBzdGF0IHN0YWI7CisKKyAgICBp ZiAobGltaXQgPT0gfjBVTCkgeworICAgICAgICBjb25zdCBjaGFyICpzID0g Z2V0ZW52KCJYRU5fUUVNVV9DT05TT0xFX0xJTUlUIik7CisgICAgICAgIC8q IFhFTl9RRU1VX0NPTlNPTEVfTElNSVQ9MCBtZWFucyBubyBsaW1pdCAqLwor ICAgICAgICBsaW1pdCA9IHMgPyBzdHJ0b3VsKHMsMCwwKSA6IDEqMTAyNCox MDI0OworICAgIH0KKyAgICBpZiAobGltaXQgPT0gMCkKKyAgICAgICAgcmV0 dXJuOworCisgICAgaW50IHIgPSBmc3RhdChmZCwgJnN0YWIpOworICAgIGlm IChyKSB7CisgICAgICAgIHBlcnJvcigiZnN0YXQgc3RkZXJyIChmb3IgQ1ZF LTIwMTQtMzY3MiBjaGVjaykiKTsKKyAgICAgICAgZXhpdCgtMSk7CisgICAg fQorICAgIGlmICghU19JU1JFRyhzdGFiLnN0X21vZGUpKQorICAgICAgICBy ZXR1cm47CisgICAgaWYgKHN0YWIuc3Rfc2l6ZSA8PSBsaW1pdCkKKyAgICAg ICAgcmV0dXJuOworCisgICAgLyogb2ggZGVhciAqLworICAgIGZwcmludGYo c3RkZXJyLCJcclxuIgorICAgICAgICAgICAgIkNsb3Npbmcgc3RkZXJyIGR1 ZSB0byBDVkUtMjAxNC0zNjcyIGxpbWl0LiAiCisgICAgICAgICAgICAiIFNl dCBYRU5fUUVNVV9DT05TT0xFX0xJTUlUIHRvIG51bWJlciBvZiBieXRlcyB0 byBvdmVycmlkZSwiCisgICAgICAgICAgICAiIG9yIDAgZm9yIG5vIGxpbWl0 LlxuIik7CisgICAgZmZsdXNoKHN0ZGVycik7CisKKyAgICBpbnQgbmZkID0g b3BlbigiL2Rldi9udWxsIiwgT19XUk9OTFkpOworICAgIGlmIChuZmQgPCAw KSB7CisgICAgICAgIHBlcnJvcigib3BlbiAvZGV2L251bGwgKGZvciBDVkUt MjAxNC0zNjcyIGNoZWNrKSIpOworICAgICAgICBleGl0KC0xKTsKKyAgICB9 CisgICAgciA9IGR1cDIobmZkLCBmZCk7CisgICAgaWYgKHIgIT0gZmQpIHsK KyAgICAgICAgcGVycm9yKCJkdXAyIC9kZXYvbnVsbCAoZm9yIENWRS0yMDE0 LTM2NzIgY2hlY2spIik7CisgICAgICAgIGV4aXQoLTEpOworICAgIH0KKyAg ICBjbG9zZShuZmQpOworfQorCiB2b2lkIG1haW5fbG9vcF93YWl0KGludCB0 aW1lb3V0KQogewogICAgIElPSGFuZGxlclJlY29yZCAqaW9oOwpAQCAtMzc2 Myw2ICszODA3LDggQEAgdm9pZCBtYWluX2xvb3Bfd2FpdChpbnQgdGltZW91 dCkKIAogICAgIGhvc3RfbWFpbl9sb29wX3dhaXQoJnRpbWVvdXQpOwogCisg ICAgY2hlY2tfY3ZlXzIwMTRfMzY3Ml94ZW4oKTsKKwogICAgIC8qIHBvbGwg YW55IGV2ZW50cyAqLwogICAgIC8qIFhYWDogc2VwYXJhdGUgZGV2aWNlIGhh bmRsZXJzIGZyb20gc3lzdGVtIG9uZXMgKi8KICAgICBuZmRzID0gLTE7Ci0t IAoxLjcuMTAuNAoK --=separator Content-Type: application/octet-stream; name="xsa180-qemuu.patch" Content-Disposition: attachment; filename="xsa180-qemuu.patch" Content-Transfer-Encoding: base64 RnJvbSBmNGViZGYwOGYzZWFhZjIwMjZhZGVhZWU1YjhlNTIwYjA4YmI1ZTEx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBJYW4gSmFja3NvbiA8 aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KRGF0ZTogVGh1LCAxOSBNYXkg MjAxNiAxNTo0MzozMyArMDEwMApTdWJqZWN0OiBbUEFUQ0hdIG1haW4gbG9v cDogQmlnIGhhbW1lciB0byBmaXggbG9nZmlsZSBkaXNrIERvUyBpbiBYZW4g c2V0dXBzCgpFYWNoIHRpbWUgcm91bmQgdGhlIG1haW4gbG9vcCwgd2Ugbm93 IGZzdGF0IHN0ZGVyci4gIElmIGl0IGlzIHRvbyBiaWcsCndlIGR1cDIgL2Rl di9udWxsIG9udG8gaXQuICBUaGlzIGlzIG5vdCBhIHZlcnkgcHJldHR5IHBh dGNoIGJ1dCBpdCBpcwp2ZXJ5IHNpbXBsZSwgZWFzeSB0byBzZWUgdGhhdCBp dCdzIGNvcnJlY3QsIGFuZCBoYXMgYSBsb3cgcmlzayBvZgpjb2xsYXRlcmFs IGRhbWFnZS4KClRoZSBsaW1pdCBpcyAxTWJ5IGJ5IGRlZmF1bHQgYnV0IGNh biBiZSBhZGp1c3RlZCBieSBzZXR0aW5nIGEgbmV3CmVudmlyb25tZW50IHZh cmlhYmxlLgoKVGhpcyBmaXhlcyBDVkUtMjAxNC0zNjcyLgoKU2lnbmVkLW9m Zi1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJpeC5jb20+ ClRlc3RlZC1ieTogSWFuIEphY2tzb24gPElhbi5KYWNrc29uQGV1LmNpdHJp eC5jb20+Ci0tLQp2MjogTWFrZSBpdCBhY3R1YWxseSBjb21waWxlLiAgRml4 IGEgdHlwbyBpbiB0aGUgbWVzc2FnZS4KICAgIE1vdmUgdGhlIGNoZWNrX2N2 ZV8yMDE0XzM2NzJfeGVuIHVwIGluIHRoZSBmaWxlLCBzbyB0aGF0IHdlIGNh bjoKICAgIENhbGwgY2hlY2tfY3ZlXzIwMTRfMzY3Ml94ZW4gaW4gdGhlIG90 aGVyIGNvcHkgb2YgdGhlIG1haW4gbG9vcCAoISkKLS0tCiBtYWluLWxvb3Au YyB8ICAgNDggKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrCiAxIGZpbGUgY2hhbmdlZCwgNDggaW5zZXJ0aW9ucygr KQoKZGlmZiAtLWdpdCBhL21haW4tbG9vcC5jIGIvbWFpbi1sb29wLmMKaW5k ZXggMzk5NzA0My4uNGFjMDg5ZSAxMDA2NDQKLS0tIGEvbWFpbi1sb29wLmMK KysrIGIvbWFpbi1sb29wLmMKQEAgLTE2NCw2ICsxNjQsNTAgQEAgaW50IHFl bXVfaW5pdF9tYWluX2xvb3AoRXJyb3IgKiplcnJwKQogICAgIHJldHVybiAw OwogfQogCitzdGF0aWMgdm9pZCBjaGVja19jdmVfMjAxNF8zNjcyX3hlbih2 b2lkKQoreworICAgIHN0YXRpYyB1bnNpZ25lZCBsb25nIGxpbWl0ID0gfjBV TDsKKyAgICBjb25zdCBpbnQgZmQgPSAyOworICAgIHN0cnVjdCBzdGF0IHN0 YWI7CisKKyAgICBpZiAobGltaXQgPT0gfjBVTCkgeworICAgICAgICBjb25z dCBjaGFyICpzID0gZ2V0ZW52KCJYRU5fUUVNVV9DT05TT0xFX0xJTUlUIik7 CisgICAgICAgIC8qIFhFTl9RRU1VX0NPTlNPTEVfTElNSVQ9MCBtZWFucyBu byBsaW1pdCAqLworICAgICAgICBsaW1pdCA9IHMgPyBzdHJ0b3VsKHMsMCww KSA6IDEqMTAyNCoxMDI0OworICAgIH0KKyAgICBpZiAobGltaXQgPT0gMCkK KyAgICAgICAgcmV0dXJuOworCisgICAgaW50IHIgPSBmc3RhdChmZCwgJnN0 YWIpOworICAgIGlmIChyKSB7CisgICAgICAgIHBlcnJvcigiZnN0YXQgc3Rk ZXJyIChmb3IgQ1ZFLTIwMTQtMzY3MiBjaGVjaykiKTsKKyAgICAgICAgZXhp dCgtMSk7CisgICAgfQorICAgIGlmICghU19JU1JFRyhzdGFiLnN0X21vZGUp KQorICAgICAgICByZXR1cm47CisgICAgaWYgKHN0YWIuc3Rfc2l6ZSA8PSBs aW1pdCkKKyAgICAgICAgcmV0dXJuOworCisgICAgLyogb2ggZGVhciAqLwor ICAgIGZwcmludGYoc3RkZXJyLCJcclxuIgorICAgICAgICAgICAgIkNsb3Np bmcgc3RkZXJyIGR1ZSB0byBDVkUtMjAxNC0zNjcyIGxpbWl0LiAiCisgICAg ICAgICAgICAiIFNldCBYRU5fUUVNVV9DT05TT0xFX0xJTUlUIHRvIG51bWJl ciBvZiBieXRlcyB0byBvdmVycmlkZSwiCisgICAgICAgICAgICAiIG9yIDAg Zm9yIG5vIGxpbWl0LlxuIik7CisgICAgZmZsdXNoKHN0ZGVycik7CisKKyAg ICBpbnQgbmZkID0gb3BlbigiL2Rldi9udWxsIiwgT19XUk9OTFkpOworICAg IGlmIChuZmQgPCAwKSB7CisgICAgICAgIHBlcnJvcigib3BlbiAvZGV2L251 bGwgKGZvciBDVkUtMjAxNC0zNjcyIGNoZWNrKSIpOworICAgICAgICBleGl0 KC0xKTsKKyAgICB9CisgICAgciA9IGR1cDIobmZkLCBmZCk7CisgICAgaWYg KHIgIT0gZmQpIHsKKyAgICAgICAgcGVycm9yKCJkdXAyIC9kZXYvbnVsbCAo Zm9yIENWRS0yMDE0LTM2NzIgY2hlY2spIik7CisgICAgICAgIGV4aXQoLTEp OworICAgIH0KKyAgICBjbG9zZShuZmQpOworfQorCiBzdGF0aWMgaW50IG1h eF9wcmlvcml0eTsKIAogI2lmbmRlZiBfV0lOMzIKQEAgLTIxNiw2ICsyNjAs OCBAQCBzdGF0aWMgaW50IG9zX2hvc3RfbWFpbl9sb29wX3dhaXQoaW50NjRf dCB0aW1lb3V0KQogICAgIGludCByZXQ7CiAgICAgc3RhdGljIGludCBzcGlu X2NvdW50ZXI7CiAKKyAgICBjaGVja19jdmVfMjAxNF8zNjcyX3hlbigpOwor CiAgICAgZ2xpYl9wb2xsZmRzX2ZpbGwoJnRpbWVvdXQpOwogCiAgICAgLyog SWYgdGhlIEkvTyB0aHJlYWQgaXMgdmVyeSBidXN5IG9yIHdlIGFyZSBpbmNv cnJlY3RseSBidXN5IHdhaXRpbmcgaW4KQEAgLTQwNyw2ICs0NTMsOCBAQCBz dGF0aWMgaW50IG9zX2hvc3RfbWFpbl9sb29wX3dhaXQoaW50NjRfdCB0aW1l b3V0KQogICAgIGZkX3NldCByZmRzLCB3ZmRzLCB4ZmRzOwogICAgIGludCBu ZmRzOwogCisgICAgY2hlY2tfY3ZlXzIwMTRfMzY3Ml94ZW4oKTsKKwogICAg IC8qIFhYWDogbmVlZCB0byBzdXBwcmVzcyBwb2xsaW5nIGJ5IGJldHRlciB1 c2luZyB3aW4zMiBldmVudHMgKi8KICAgICByZXQgPSAwOwogICAgIGZvciAo cGUgPSBmaXJzdF9wb2xsaW5nX2VudHJ5OyBwZSAhPSBOVUxMOyBwZSA9IHBl LT5uZXh0KSB7Ci0tIAoxLjcuMTAuNAoK --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMu eGVuLm9yZy94ZW4tYW5ub3VuY2U= --=separator-- From xen-announce-bounces@lists.xen.org Thu May 26 14:49:47 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 26 May 2016 14:49:47 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b5wag-0001MQ-7g; Thu, 26 May 2016 14:48:50 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b5wXn-000182-G4; Thu, 26 May 2016 14:45:51 +0000 Received: from [85.158.139.211] by server-12.bemta-5.messagelabs.com id 9C/F8-25675-E1C07475; Thu, 26 May 2016 14:45:50 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrEIsWRWlGSWpSXmKPExsXitHRDpK4cj3u 4wTl1i9kb25gtvm+ZzGTxbt9fZgdmj8MfrrAEMEaxZuYl5VcksGZc3b2OuaCRpeLn6W7mBsZD zF2MnBwSAv4S7/5fYAexWQRUJRY/WMgKYrMJKEv87Oxl62Lk4BARyJG4dCEPJMwsoChx6vYMs FZhoJI/y86BlfAK6Eu8+WcGEuYVEJQ4OfMJC0S5jsSC3Z/ASpgFpCWW/+MACYsKqEhcmfAWbK mQgIJEx/RjTBDHcEvcPj2VeQIj7ywkk2YhmTQLYdICRuZVjBrFqUVlqUW6huZ6SUWZ6RkluYm ZObqGBqZ6uanFxYnpqTmJScV6yfm5mxiB4cUABDsYL572PMQoycGkJMorLu4WLsSXlJ9SmZFY nBFfVJqTWnyIUYaDQ0mC99IBoJxgUWp6akVaZg4w0GHSEhw8SiK8M7jcw4V4iwsSc4sz0yFSp xh1ORb8uL2WSYglLz8vVUqc9wxIkQBIUUZpHtwIWNRdYpSVEuZlBDpKiKcgtSg3swRV/hWjOA ejkjDvAZApPJl5JXCbXgEdwQR0hP8XZ5AjShIRUlINjDumr6y7v1Y7SZnhXI7xi9oFJxdbVd/ 4rquyvearxvJV+VcsVqfqXr32ZqLybY1iu+RAOdOlyyzNDWdkOmxUOX9btm/qlb9qu67ztBnY +BYe/JRaINK98l/ZttseB702W1c5vlnrZqyUfeeP/pWEjMrFB+M7fQJ8pzTI3i40/8nx+GbwK 6bIL0osxRmJhlrMRcWJAIFqNbO1AgAA X-Env-Sender: prvs=947cb6223=wei.liu2@citrix.com X-Msg-Ref: server-15.tower-206.messagelabs.com!1464273948!29722914!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 47063 invoked from network); 26 May 2016 14:45:49 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-15.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 26 May 2016 14:45:49 -0000 X-IronPort-AV: E=Sophos;i="5.26,367,1459814400"; d="scan'208";a="356822534" Date: Thu, 26 May 2016 15:45:46 +0100 From: Wei Liu To: , , Message-ID: <20160526144546.GB32088@citrix.com> MIME-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) X-DLP: MIA2 X-Mailman-Approved-At: Thu, 26 May 2016 14:48:49 +0000 Subject: [Xen-announce] [ANNOUNCEMENT] Xen 4.7 RC4 X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" SGkgYWxsCgpYZW4gNC43IHJjNCBpcyB0YWdnZWQuIFlvdSBjYW4gY2hlY2sgdGhhdCBvdXQgZnJv bSB4ZW4uZ2l0OgoKICBnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjcuMC1yYzQKCkZv ciB5b3UgY29udmVuaWVuY2UgdGhlcmUgaXMgYWxzbyB0YXJiYWxsIGF0OgpodHRwOi8vYml0cy54 ZW5zb3VyY2UuY29tL29zcy14ZW4vcmVsZWFzZS80LjcuMC1yYzQveGVuLTQuNy4wLXJjNC50YXIu Z3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwOi8vYml0cy54ZW5zb3VyY2UuY29tL29z cy14ZW4vcmVsZWFzZS80LjcuMC1yYzQveGVuLTQuNy4wLXJjNC50YXIuZ3ouc2lnCgpQbGVhc2Ug c2VuZCBidWcgcmVwb3J0cyBhbmQgdGVzdCByZXBvcnRzIHRvCnhlbi1kZXZlbEBsaXN0cy54ZW5w cm9qZWN0Lm9yZy4gV2hlbiBzZW5kaW5nIGJ1ZyByZXBvcnRzLCBwbGVhc2UgQ0MKcmVsZXZhbnQg bWFpbnRhaW5lcnMgYW5kIG1lICh3ZWkubGl1MkBjaXRyaXguY29tKS4KClRoYW5rcwpXZWkuCgoK Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClhlbi1hbm5v dW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91bmNlQGxpc3RzLnhlbi5vcmcKaHR0cDovL2xpc3Rz Lnhlbi5vcmcveGVuLWFubm91bmNl From xen-announce-bounces@lists.xen.org Thu May 26 14:49:47 2016 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 26 May 2016 14:49:47 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b5wag-0001MQ-7g; Thu, 26 May 2016 14:48:50 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b5wXn-000182-G4; Thu, 26 May 2016 14:45:51 +0000 Received: from [85.158.139.211] by server-12.bemta-5.messagelabs.com id 9C/F8-25675-E1C07475; Thu, 26 May 2016 14:45:50 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrEIsWRWlGSWpSXmKPExsXitHRDpK4cj3u 4wTl1i9kb25gtvm+ZzGTxbt9fZgdmj8MfrrAEMEaxZuYl5VcksGZc3b2OuaCRpeLn6W7mBsZD zF2MnBwSAv4S7/5fYAexWQRUJRY/WMgKYrMJKEv87Oxl62Lk4BARyJG4dCEPJMwsoChx6vYMs FZhoJI/y86BlfAK6Eu8+WcGEuYVEJQ4OfMJC0S5jsSC3Z/ASpgFpCWW/+MACYsKqEhcmfAWbK mQgIJEx/RjTBDHcEvcPj2VeQIj7ywkk2YhmTQLYdICRuZVjBrFqUVlqUW6huZ6SUWZ6RkluYm ZObqGBqZ6uanFxYnpqTmJScV6yfm5mxiB4cUABDsYL572PMQoycGkJMorLu4WLsSXlJ9SmZFY nBFfVJqTWnyIUYaDQ0mC99IBoJxgUWp6akVaZg4w0GHSEhw8SiK8M7jcw4V4iwsSc4sz0yFSp xh1ORb8uL2WSYglLz8vVUqc9wxIkQBIUUZpHtwIWNRdYpSVEuZlBDpKiKcgtSg3swRV/hWjOA ejkjDvAZApPJl5JXCbXgEdwQR0hP8XZ5AjShIRUlINjDumr6y7v1Y7SZnhXI7xi9oFJxdbVd/ 4rquyvearxvJV+VcsVqfqXr32ZqLybY1iu+RAOdOlyyzNDWdkOmxUOX9btm/qlb9qu67ztBnY +BYe/JRaINK98l/ZttseB702W1c5vlnrZqyUfeeP/pWEjMrFB+M7fQJ8pzTI3i40/8nx+GbwK 6bIL0osxRmJhlrMRcWJAIFqNbO1AgAA X-Env-Sender: prvs=947cb6223=wei.liu2@citrix.com X-Msg-Ref: server-15.tower-206.messagelabs.com!1464273948!29722914!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 8.34; banners=-,-,- X-VirusChecked: Checked Received: (qmail 47063 invoked from network); 26 May 2016 14:45:49 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-15.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 26 May 2016 14:45:49 -0000 X-IronPort-AV: E=Sophos;i="5.26,367,1459814400"; d="scan'208";a="356822534" Date: Thu, 26 May 2016 15:45:46 +0100 From: Wei Liu To: , , Message-ID: <20160526144546.GB32088@citrix.com> MIME-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.5.23 (2014-03-12) X-DLP: MIA2 X-Mailman-Approved-At: Thu, 26 May 2016 14:48:49 +0000 Subject: [Xen-announce] [ANNOUNCEMENT] Xen 4.7 RC4 X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" SGkgYWxsCgpYZW4gNC43IHJjNCBpcyB0YWdnZWQuIFlvdSBjYW4gY2hlY2sgdGhhdCBvdXQgZnJv bSB4ZW4uZ2l0OgoKICBnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0LjcuMC1yYzQKCkZv ciB5b3UgY29udmVuaWVuY2UgdGhlcmUgaXMgYWxzbyB0YXJiYWxsIGF0OgpodHRwOi8vYml0cy54 ZW5zb3VyY2UuY29tL29zcy14ZW4vcmVsZWFzZS80LjcuMC1yYzQveGVuLTQuNy4wLXJjNC50YXIu Z3oKCkFuZCB0aGUgc2lnbmF0dXJlIGlzIGF0OgpodHRwOi8vYml0cy54ZW5zb3VyY2UuY29tL29z cy14ZW4vcmVsZWFzZS80LjcuMC1yYzQveGVuLTQuNy4wLXJjNC50YXIuZ3ouc2lnCgpQbGVhc2Ug c2VuZCBidWcgcmVwb3J0cyBhbmQgdGVzdCByZXBvcnRzIHRvCnhlbi1kZXZlbEBsaXN0cy54ZW5w cm9qZWN0Lm9yZy4gV2hlbiBzZW5kaW5nIGJ1ZyByZXBvcnRzLCBwbGVhc2UgQ0MKcmVsZXZhbnQg bWFpbnRhaW5lcnMgYW5kIG1lICh3ZWkubGl1MkBjaXRyaXguY29tKS4KClRoYW5rcwpXZWkuCgoK Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClhlbi1hbm5v dW5jZSBtYWlsaW5nIGxpc3QKWGVuLWFubm91bmNlQGxpc3RzLnhlbi5vcmcKaHR0cDovL2xpc3Rz Lnhlbi5vcmcveGVuLWFubm91bmNl