Commit 918c8843dc for qemu.org

commit 918c8843dc256036b3c9239914a57eeeed47dc62
Merge: f8296b816f a1b96fcde8
Author: Richard Henderson <richard.henderson@linaro.org>
Date:   Thu Sep 17 10:20:43 2026 -1000

    Merge tag 'firmware-20260917-pull-request' of https://gitlab.com/kraxel/qemu into staging

    - igvm: add checks to parameter directive processing
    - hw/uefi: add check to uefi_vars_mm_lock_variable
    - hw/uefi: align default config with upstream edk2

    # -----BEGIN PGP SIGNATURE-----
    #
    # iQIzBAABCgAdFiEEoDKM/7k6F6eZAf59TLbY7tPocTgFAmqr7AcACgkQTLbY7tPo
    # cTgdiQ/+OTiHp5YLsKjFIglGcUEIdbbYvLTDSwKa7NWylZzGJiwf7B+j/Z5hNsE5
    # oq+bTrn5tTqsmaMqgIAhENXVLDBBg4XVzWrdo4W9OjKQE26osBwLvJ2XZclGAEOl
    # 1bvkyfD4CW1rgkI0KfvfvB+HaDMMaO0OHKVMVr5Kp7ZqbzgmBzbCSP5hCP35Lfgq
    # IfmVHtR+74kwVCl6VcbCa7kHHN4u2jdhYecWSjq/zf6ehzUwmScZFqpSLfFMqt0A
    # qkkyMlq0BMC3svYrJkqitIeZEH8vyNlZNpib8wMA+fT8WRTeol6Ds7dL+vk6Bbk9
    # kq6fL+mBcfE4kcE3BFob9gCXLGdsq4EsWZQMNbKyJGde+mBUln0+bFoVcFiGZ5Dg
    # xlqT/Qhv7qT+VMv14IuD/SzBCc87Yn4rbCuAreY7LMqgX2wzmUjZ6hi8UswAj9fU
    # v1NX2alA/rUkiAdMz+JJgldJ1Wd6qX9EdNk7W62X8QgK3GEMhi3Bub6+U4+JTSFx
    # HF33cgSyZtiajd2XxWy5M3/gEwkTQRH//O5e0TDXOhn5xET3S5UjoQae9HiF8Kp2
    # SOgqLx0LGlXewnjlNkUuUiGUdeQwuwdSpInJHIdIUZJCwY2QgJETzsIPiilwWibf
    # DiwgX/Wmj+wM1cJyMPr0l3QcSfOr/hRyNx+7czTz2JpM0yOGe0k=
    # =CBMg
    # -----END PGP SIGNATURE-----
    # gpg: Signature made Thu 17 Sep 2026 03:32:55 AM HST
    # gpg:                using RSA key A0328CFFB93A17A79901FE7D4CB6D8EED3E87138
    # gpg: Good signature from "Gerd Hoffmann (work) <kraxel@redhat.com>" [unknown]
    # gpg:                 aka "Gerd Hoffmann <gerd@kraxel.org>" [unknown]
    # gpg:                 aka "Gerd Hoffmann (private) <kraxel@gmail.com>" [unknown]
    # gpg: WARNING: This key is not certified with a trusted signature!
    # gpg:          There is no indication that the signature belongs to the owner.
    # Primary key fingerprint: A032 8CFF B93A 17A7 9901  FE7D 4CB6 D8EE D3E8 7138

    * tag 'firmware-20260917-pull-request' of https://gitlab.com/kraxel/qemu:
      hw/uefi: improve default config security
      hw/uefi: add require-self-signed-pk config option
      igvm: mark qigvm_find_param_entry as static
      igvm: validate and honor byte_offset in parameter directives
      hw/uefi: add missing uefi_str_is_valid check to uefi_vars_mm_lock_variable

    Signed-off-by: Richard Henderson <richard.henderson@linaro.org>