As scheduled I made the 1.1.3 release today, the git tree is tagged and tarball and rpms are available at the usual place: ftp://libvirt.org/libvirt/ Overall a rather big release, with more than 300 patches included, with a lot of fixes many of them being leaks or report from Coverity, but also 3 security fixes. There is also a few features but listed but they are more about focused improvement than anything revolutionary, this should be considered a stabilization release, it should be good (Famous Last Words !) Features: - VMware: Initial VMware Fusion support and various improvements (Doug Goldstein) - libvirt: add new public API virConnectGetCPUModelNames (Giuseppe Scrivano) - various libxl driver improvements (Jim Fehlig) - LXC many container driver improvement (Chen Hanxiao, Gao Feng, Daniel P. Berrange) - ARM cpu improvements (Cole Robinson) Security: - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296) (Daniel P. Berrange) - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311) (Daniel P. Berrange) - virFileNBDDeviceAssociate: Avoid use of uninitialized variable (Michal Privoznik) Documentation: - python: Document virNodeGetInfo bug (Michal Privoznik) - maint: fix comment typos (Eric Blake) - conf: Fix virNetworkAssignDef's comment. (lawrancejing) - fix virEventAddHandle return details (Jonathan Lebon) - fix XML for the RNG device example (Giuseppe Scrivano) - mention hostname subtlety (Eric Blake) - Add some notes about security considerations when using LXC (Daniel P. Berrange) - Repair the search on libvirt.org (Daniel Veillard) - api-docs: Fix description of virConnectGetType() API function (Michal Novotny) - Update docs about user namespace for LXC (Daniel P. Berrange) - docs, comments: minor typo fixes (Oskari Saarenmaa) - LXC: fix typos in lxc_container.c (Chen Hanxiao) - fix a typo in virt-login-shell.pod (Alex Jia) - Fix a typo in network XML docs (Ján Tomko) - Add OpenStack into references (Martin Kletzander) - examples: Add script to parse topology from capabilities output (Peter Krempa) Portability: - build: fix build --without-lxc (Eric Blake) - build: tweak vpath builds of net_rpc (Eric Blake) - fchosttest: Run the test only under linux (Michal Privoznik) - genprotocol.pl: Fix code on FreeBSD too (Michal Privoznik) - BSD: Ensure process creation timestamp is init'd (Doug Goldstein) - BSD: Ensure UNIX socket credentials are valid (Doug Goldstein) - build: fix testsuite building under cygwin (Eric Blake) - build: Fix VPATH build error for locking daemon (Viktor Mihajlovski) - build: fix use of rpc.h on cygwin (Eric Blake) - build: skip ld_preload tests on non-Linux systems (Eric Blake) - build: hoist system-specific checks before library checks (Eric Blake) - virsh: Don't shadow global variable "remove" in cmdMetadata (Peter Krempa) - conf: Avoid false positive of uninitialized variable use (Peter Krempa) - build: fix VPATH build of remote driver (Eric Blake) - build: make autobuild require rpm build deps (Eric Blake) - build: fix build with latest rawhide kernel headers (Eric Blake) - Explicitly link libvirt_net_rpc against SELINUX_LIBS (Guido Günther) - build: require libnl-3 if netcf uses it (Eric Blake) - build: fix regression in requiring yajl for new enough qemu (Eric Blake) - build: avoid obsolete AC_HELP_STRING (Eric Blake) - virsh: fix build on mingw, which lacks termios stuff (Eric Blake) - build: avoid stranded polkit file in client-only build (Eric Blake) - spec: fix rpm build when lxc disabled (Eric Blake) Bug Fixes: - lxc: do cleanup when failed to bind fs as read-only (Chen Hanxiao) - Fix max stream packet size for old clients (Daniel P. Berrange) - LXC: workaround machined uncleaned data with containers running systemd. (Cédric Bosdonnat) - virfile: safezero: align mmap offset to page size (Oskari Saarenmaa) - virscsi: hostdev SCSI AdapterId retrieval fix (Boris Fiuczynski) - virsh-volume: Add missing check when calling virStreamNew (Hongwei Bi) - virsh-domain: Free dom before return false in cmdDump (Hongwei Bi) - qemu: process: Silence coverity warning when rewinding log file (Peter Krempa) - Fix crash in libvirtd when events are registered & ACLs active (Daniel P. Berrange) - virsh: Fix domdisplay when domain only uses TLS (Christophe Fergeau) - qemu: Free all driver data in qemuStateCleanup (Jiri Denemark) - qemu: Don't leak reference to virQEMUDriverConfigPtr (Jiri Denemark) - rpc: Increase bound limit for virDomainGetJobStats (Jiri Denemark) - LXC: free dst before lxcDomainAttachDeviceDiskLive returns (Chen Hanxiao) - qemu: virDomainControllerFind may return 0 if controller found (Chen Hanxiao) - conf: Don't crash on invalid chardev source definition of RNGs and other (Peter Krempa) - Avoid use of uninitialized data in virnetmessagetest (Daniel P. Berrange) - Avoid crash on OOM in virnetmessagetest (Daniel P. Berrange) - Avoid crash on OOM in virportallocatortest (Daniel P. Berrange) - Avoid crash on OOM in virlockspacetest (Daniel P. Berrange) - Avoid crash on OOM in virbuftest (Daniel P. Berrange) - Avoid uninitialized data in qemuMonitorTestNew (Daniel P. Berrange) - Avoid double free in qemuMonitorCommonTestInit on OOM (Daniel P. Berrange) - Fix leak on OOM in qemuMonitorCommonTestNew (Daniel P. Berrange) - Don't ignore errors parsing nwfilter rules (Daniel P. Berrange) - Fix leak in virLockSpaceResourceFree (Daniel P. Berrange) - Fix leak of parser state in virJSONValueFromString (Daniel P. Berrange) - Fix double-free in virJSONParserHandleStartMap on OOM (Daniel P. Berrange) - Fix leak of iterators in virDBusMessageIterEncode (Daniel P. Berrange) - Fix leak of comment string if virConfAddEntry fails on OOM (Daniel P. Berrange) - Add missing check for OOM with virVMXEscapeHexPipe (Daniel P. Berrange) - Fix crash on OOM parsing storage pool XML (Daniel P. Berrange) - Fix double free of hostdev on OOM in xenParseSxprPCI (Daniel P. Berrange) - Don't clobber 'ret' in LXC XML test case (Daniel P. Berrange) - Fix crash on OOM in virDomainSnapshotDefParse (Daniel P. Berrange) - Don't clobber return value in virInterfaceDefParseProtoIPv6 (Daniel P. Berrange) - Fix handling of OOM when getting Xen dom ID (Daniel P. Berrange) - Fix crash on OOM in xenParseSxpr (Daniel P. Berrange) - virsh-domain: Add a missing check and fix leak in cmdScreenshot (Hongwei Bi) - Fix leak of serial value in xenFormatXM on OOM (Daniel P. Berrange) - Fix broken formatting on OOM in xenFormatXM (Daniel P. Berrange) - Fix crash on OOM in xenParseXM handling consoles (Daniel P. Berrange) - Fix leak of char device in xenParseXM (Daniel P. Berrange) - Fix leak of command line args in qemuParseCommandLine (Daniel P. Berrange) - Fix leak in qemuParseCommandLine on OOM (Daniel P. Berrange) - Fix leak in qemuStringToArgvEnv upon OOM (Daniel P. Berrange) - Fix missing jump to error cleanup in qemuParseCommandLineDisk (Daniel P. Berrange) - Fix leak in qemuParseCommandLineDisk on OOM (Daniel P. Berrange) - Fix leak on OOM in qemuBuildCommandLine dealing with sound card (Daniel P. Berrange) - Fix failure to honour OOM status in qemuParseNBDString (Daniel P. Berrange) - Avoid leak in qemuParseRBDString on failure of qemuAddRBDHost (Daniel P. Berrange) - Fix leak of address string in qemuDomainPCIAddressGetNextSlot (Daniel P. Berrange) - Fix leak in virDomainDefParseXML parsing vcpupin (Daniel P. Berrange) - Fix leak in virDomainVcpuPinDefParseXML parsing cpumask (Daniel P. Berrange) - Avoid leak if virDomainSoundCodecDefParseXML return error (Daniel P. Berrange) - Fix leak in virDomainVcpuPinDefArrayFree (Daniel P. Berrange) - Check return value of virDomainControllerInsert when parsing QEMU args (Daniel P. Berrange) - Honour error returned by virBitmapFormat (Daniel P. Berrange) - Add missing check for OOM when building boot menu args (Daniel P. Berrange) - Fix format specifier for OOM test fprintfs (Daniel P. Berrange) - Always open files in binary mode in virFDStreamOpenFileInternal (Claudio Bley) - Don't ignore allocation failure in virCommandAddEnvPassCommon (Daniel P. Berrange) - Fix reporting of errors in OOM injection code (Daniel P. Berrange) - Fix missing OOM check in qemuParseCommandLine when splitting strings (Daniel P. Berrange) - Fix error checking of qemuParseKeywords return status (Daniel P. Berrange) - Fix allocation of arglist in qemuStringToArgvEnv (Daniel P. Berrange) - Fix crash on OOM in qemuAddRBDHost (Daniel P. Berrange) - Fix crash on OOM in qemuDomainCCWAddressSetCreate() (Daniel P. Berrange) - Fix crash if OOM occurs when creating virConnectPtr (Daniel P. Berrange) - Fix crash on OOM in parsing CPU mask in domain XML (Daniel P. Berrange) - Fix crash on OOM when parsing disk security label (Daniel P. Berrange) - Fix typo in identity code which is pre-requisite for CVE-2013-4311 (Daniel P. Berrange) - Fix potential use of uninitialized value in virDomainGetVcpuPinInfo (Daniel P. Berrange) - qemu: Fix seamless SPICE migration (Martin Kletzander) - Don't dereference NULL in qemumonitorjsontest (Ján Tomko) - Add checking of dbus_message_iter_append_basic return value (Daniel P. Berrange) - qemu: use "ide" as device name for implicit SATA controller on Q35 (Laine Stump) - qemu: Avoid dangling job in qemuDomainSetBlockIoTune (Jiri Denemark) - conf: Don't corrupt metadata on OOM (Peter Krempa) - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (Peter Krempa) - qemu: Use "migratable" XML definition when doing external checkpoints (Peter Krempa) - qemu: Fix checking of ABI stability when restoring external checkpoints (Peter Krempa) - virsh: Fix a wrong check in cmdEcho() (Hongwei Bi) - Always free network and graphics cookies (Ján Tomko) - Free slicename in virSystemdCreateMachine (Ján Tomko) - Fix naming of permission for detecting storage pools (Daniel P. Berrange) - qemu: Fix checking of guest ABI compatibility when reverting snapshots (Peter Krempa) - netcf driver: use a single netcf handle for all connections (Laine Stump) - Fix launching of VMs on when only logind part of systemd is present (Daniel P. Berrange) - Fix polkit permission names for storage pools, vols & node devices (Daniel P. Berrange) - virsh domjobinfo: Do not return 1 if job is NONE (Jiri Denemark) - virDomainDefParseXML: set the argument of virBitmapFree to NULL after calling virBitmapFree (Liuji (Jeremy)) - cpu: Cleanup ppcCompute to avoid memory leak (Li Zhang) - qemu: don't leak vm on failure (Eric Blake) - LXC: Free variable vroot in lxcDomainDetachDeviceHostdevUSBLive() (Hongwei Bi) - qemu: don't leave shutdown inhibited on attach failure (Eric Blake) - libxl: Compile regular expression where it is used (Jim Fehlig) - Don't call regfree() if regcomp() fails (Jim Fehlig) - Use loop-control to allocate loop device. (Ian Main) - LXC: Don't mount securityfs when user namespace enabled (Gao feng) - Stop free'ing 'const char *' strings (Daniel P. Berrange) - conf: Don't deref NULL actual network in virDomainNetGetActualHostdev() (Peter Krempa) - libxl: Check for regcomp failure (Jim Fehlig) - libxl: Fix Coverity warning (Jim Fehlig) - Don't call VIR_ALLOC on def->uuid in parallels storage driver (Daniel P. Berrange) - qemu: Make domain renaming work during migration (Jiri Denemark) - AppArmorSetSecurityImageLabel: Avoid use of uninitialized variable (Michal Privoznik) - build: fix typo that broke 'make dist' (Eric Blake) - esx_driver: Resolve Coverity RESOURCE_LEAK on error paths (John Ferlan) - esx_vi: Resolve Coverity RESOURCE_LEAK in error path (John Ferlan) - test_virtlockd.aug.in: Use the correct file (Michal Privoznik) - virsh-console: Avoid using signal() in multithreaded application (Peter Krempa) - qemu: Handle huge number of queues correctly (Michal Privoznik) - Fix leaks in python bindings (Ján Tomko) - virsh-domain: Avoid killing ssh transport tunnels when cancelling job (Peter Krempa) - qemu: Fix networking for ARM guests (Cole Robinson) - qemu: Don't try to allocate PCI addresses for ARM (Cole Robinson) - Fix AM_LDFLAGS typo (Guido Günther) Improvements: - VMware: Add Fusion version test (Doug Goldstein) - VMware: Support more than 2 driver backends (Doug Goldstein) - Makefile.am: Always include rule to make org.libvirt.api.policy (Michal Privoznik) - event: Make debug message match function comments (Doug Goldstein) - lxc: fix a warning typo in virLXCControllerEventSend (Chen Hanxiao) - Distribute check-aclperms.pl (Guido Günther) - conf: clean up virDomainChrSourceDefParseXML (Peter Krempa) - spec: Clean up distribution of ChangeLog (and others) (Cole Robinson) - test: Allow specifying object runstate in driver XML (Cole Robinson) - Don't print all test suite errors to stderr in vmx2xmltest (Daniel P. Berrange) - qemu: prefer to put a Q35 machine's dmi-to-pci-bridge at 00:1E.0 (Laine Stump) - qemu: turn if into switch in qemuDomainValidateDevicePCISlotsQ35 (Laine Stump) - qemu: support ich9-intel-hda audio device (Laine Stump) - qemu: replace multiple strcmps with a switch on an enum (Laine Stump) - qemu: allow some PCI devices to be attached to PCIe slots (Laine Stump) - qemu: eliminate redundant if clauses in qemuCollectPCIAddress (Laine Stump) - bridge driver: don't masquerade local subnet broadcast/multicast packets (Laszlo Ersek) - util/viriptables: add/remove rules that short-circuit masquerading (Laszlo Ersek) - qemu: Wire up better early error reporting (Peter Krempa) - qemu: monitor: Produce better errors on monitor hangup (Peter Krempa) - qemu: monitor: Add infrastructure to access VM logs for better err msgs (Peter Krempa) - qemu_process: Make qemuProcessReadLog() more versatile and reusable (Peter Krempa) - maint: update to latest gnulib (Eric Blake) - test: fix call to virFDStreamOpenFile in testDomainScreenshot (Claudio Bley) - Add test case for virNetServerClient object identity code (Daniel P. Berrange) - Add a virNetSocketNewConnectSockFD method (Daniel P. Berrange) - python: add bindings for virConnectGetCPUModelNames (Giuseppe Scrivano) - virsh: add function to get the CPU models for an arch (Giuseppe Scrivano) - virConnectGetCPUModelNames: add the support for the test protocol (Giuseppe Scrivano) - virConnectGetCPUModelNames: add the support for qemu (Giuseppe Scrivano) - virConnectGetCPUModelNames: implement the remote protocol (Giuseppe Scrivano) - cpu: add function to get the models for an arch (Giuseppe Scrivano) - build: ensure 'make check' sees up-to-date config.h (Eric Blake) - docs: Load libvirt_access*.xml from build dir (Jiri Denemark) - LXC: Check the existence of dir before resolving symlinks (Chen Hanxiao) - LXC: follow the unit style of /proc/meminfo (Chen Hanxiao) - conf: Do better job when comparing features ABI compatibility (Peter Krempa) - VMware: Make version parsing testable and add tests (Doug Goldstein) - VMware: Store vmrun binary's path in the driver (Doug Goldstein) - VMware: Convert driver type defines to enum (Doug Goldstein) - virsh: add missing "async" option in opts_block_commit (Simone Gotti) - qemumonitorjsontest: Introduce DO_TEST_SIMPLE (Michal Privoznik) - qemumonitorjsontest: Test CPU state handling code (Michal Privoznik) - daemon: Remove more hardcoded paths from help output (Christophe Fergeau) - Fix LIBVIRTD_CONFIGURATION_FILE constant (Christophe Fergeau) - Ensure system identity includes process start time (Daniel P. Berrange) - Also store user & group ID values in virIdentity (Daniel P. Berrange) - daemon: Don't hardcode pki paths in help output (Christophe Fergeau) - daemon: Fix 'caert.pem' typo in privileged help output (Christophe Fergeau) - virsh: Add vshCompleter to each option (Tomas Meszaros) - Add forwarder attribute to <dns/> element (Diego Woitasen) - VMX: Add a VMWare Fusion 5 configuration for tests (Doug Goldstein) - VMX: Add support for 'auto detect' fileNames (Doug Goldstein) - Allow <source> for type=block to have no dev (Doug Goldstein) - maint: ignore recently-added test (Eric Blake) - tests: metadatatest: Quiesce errors on expected paths (Peter Krempa) - test: Refactor setting of dummy error handlers (Peter Krempa) - Add tftp protocol support for cdrom disk (Aline Manera) - Add ftps protocol support for cdrom disk (Aline Manera) - Add https protocol support for cdrom disk (Aline Manera) - tests: Add metadata tests (Peter Krempa) - test: Add <metadata> support into the test driver (Peter Krempa) - lxc: Add metadata modification APIs (Peter Krempa) - lib: Don't force the key argument when deleting metadata (Peter Krempa) - conf: allow to add XML metadata using the virDomainSetMetadata api (Peter Krempa) - conf: Add support for requesting of XML metadata via the API (Peter Krempa) - virsh-domain: Add command to allow modifications of XML metadata (Peter Krempa) - virsh-domain: use virXMLNodeToString instead of xmlNodeDump (Peter Krempa) - util: Add helper to convert libxml2 nodes to a string (Peter Krempa) - conf: Factor out setting of metadata to simplify code (Peter Krempa) - qemu: Factor out body of qemuDomainSetMetadata for universal use (Peter Krempa) - qemu: Factor out body of qemuDomainGetMetadata for universal use (Peter Krempa) - virsh-domain: Line up signal names array (Peter Krempa) - virsh-domain: Remove spurious ATTRIBUTE_UNUSED from cmdDesc (Peter Krempa) - Allow LUN type disks to have no source (Doug Goldstein) - cgroup: Move [qemu|lxc]GetCpuBWStatus to vicgroup.c and refactor it (Peter Krempa) - cleanup: Kill usage of access(PATH, F_OK) in favor of virFileExists() (Peter Krempa) - util: Declare that virFileExists shall honor errno (Peter Krempa) - virsh: move command maxvcpus from domain group to host group. (yangdongsheng) - tools: add missing 'interface' type and update man page (Alex Jia) - tests: Don't test user config file if ran as root (Martin Kletzander) - test-lib: Make case skipping possible (Martin Kletzander) - LXC: don't try to mount selinux filesystem when user namespace enabled (Gao feng) - rename "struct interface_driver" to virNetcfDriverState (Laine Stump) - Ensure root filesystem is recursively mounted readonly (Daniel P. Berrange) - Move array of mounts out of lxcContainerMountBasicFS (Daniel P. Berrange) - Fix virsystemdtest for previous commit (Daniel P. Berrange) - DBus: introduce virDBusIsServiceEnabled (Gao feng) - LXC: introduce lxcContainerUnmountForSharedRoot (Gao feng) - LXC: umount the temporary filesystem created by libvirt (Gao feng) - Add test for the nodemask double free crash (Ján Tomko) - Fix cgroups when all are mounted on /sys/fs/cgroup (Daniel P. Berrange) - qemu: endjob returns a bool (Eric Blake) - build: use automake subdir-objects (Eric Blake) - tests: check remaining .x files (Eric Blake) - build: use library rather than cross-directory compilation (Eric Blake) - build: avoid $(srcdir) in *_SOURCES (Eric Blake) - Add ARM v7 big-endian architecture (armv7b) (Yogesh Tillu) - qemu: avoid users specifying CPU features for non-x86 plaftorm. (Li Zhang) - qemu: recognize -machine accel=kvm when parsing native (Eric Blake) - qemu: only parse basename when determining emulator properties (Eric Blake) - spec: make client-only testing easier (Eric Blake) - build: shut up automake warnings (Eric Blake) - Change 'shortforward' to bool. (Ján Tomko) - Add '<nat>' element to '<forward>' network schemas (Ján Tomko) - cpu: Add cpu test cases for PPC CPU driver. (Li Zhang) - cpu: Implement guestData and update for PPC (Li Zhang) - qemu: Remove CPU features functions calling for non-x86 platform. (Li Zhang) - Stop calling virAllocN directly from ESX code (Daniel P. Berrange) - virDomainDeviceIsUSB: Drop check for USB controller (Liuji (Jeremy)) - Ensure 'arch' is always set in cpuArchNodeData (Daniel P. Berrange) - qemu: simplify list cleanup (Eric Blake) - libxl: Unconditionally call virSysinfoRead() on driver init (Jim Fehlig) - spec: default vbox according to libvirtd build (Eric Blake) - build: only install nwfilter examples when building nwfilter (Eric Blake) - build: only run fdstreamtest when libvirtd is built (Eric Blake) - virGet{User,Group}Ent() don't say success on fail (Doug Goldstein) - build: enforce makefile conditional style (Eric Blake) - Add missing 'libvirt_lxc_api' variable in pkg-config file (Daniel P. Berrange) - Fix coding style issues in daemon/remote.c (Nehal J Wani) - conf: Remove the actual hostdev when removing a network (Peter Krempa) - libxl: Use standard format for source file copyright notice (Jim Fehlig) - libxl: Add libxlDomObjFromDomain (Jim Fehlig) - libxl: Remove unnecessary driver locking (Jim Fehlig) - libxl: Move driver lock/unlock to libxl_conf (Jim Fehlig) - libxl: Add comments to libxlDriverPrivate fields (Jim Fehlig) - libxl: Use atomic ops for driver->nactive (Jim Fehlig) - libxl: Introduce libxlDriverConfig object (Jim Fehlig) - libxl: User per-domain ctx in libxlDomainGetInfo (Jim Fehlig) - libxl: libxl: Use per-domain ctx in libxlMakeDomCreateInfo (Jim Fehlig) - libxl: Add libxl_version_info to libxlDriverPrivate (Jim Fehlig) - libxl: Earlier detection of not running on Xen (Jim Fehlig) - libxl: Introduce libxl_domain.[ch] (Jim Fehlig) - libxl: Move detection of autoballoon to libxl_conf (Jim Fehlig) - virsh: Rename vshMakeStdinRaw to vshTTYMakeRaw and move it to virsh.c (Peter Krempa) - tools: rename console.[ch] to virsh-console.[ch] and fix coding style (Peter Krempa) - virsh: Remember terminal state when starting and add helpers (Peter Krempa) - VMX: Add cdrom-raw dev type from VMWare Fusion (Doug Goldstein) - VMX: Some serial ports are not actually connected (Doug Goldstein) - qemu: Support virtio-mmio transport for virtio on ARM (Cole Robinson) - domain_conf: Add disk bus=sd, wire it up for qemu (Cole Robinson) - qemu: Fix specifying char devs for ARM (Cole Robinson) - qemu: Don't add default memballoon device on ARM (Cole Robinson) - domain_conf: Add default memballoon in PostParse callbacks (Cole Robinson) - qemu: Set QEMU_AUDIO_DRV=none with -nographic (Cole Robinson) - Pass AM_LDFLAGS to driver modules too (Guido Günther) - qemu: Support setting the 'removable' flag for USB disks (Fred A. Kemp) - qemu: Add capability flag for usb-storage (Fred A. Kemp) - VMX: Create virVMXFormatDisk() from HD and CD-ROM (Doug Goldstein) Cleanup: - daemon: Avoid dead code in polkit auth (Jiri Denemark) So thanks everybody for your contributions, with code, comments, reports, documentation or fixes, and of course our localizations from Fedora Transifex team ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/