Commit 006a22cb26 for qemu.org

commit 006a22cb26998998385b104db1ff9466ef2f3153
Merge: c6bac4e201 bd9b3c50f4
Author: Stefan Hajnoczi <stefanha@redhat.com>
Date:   Wed Jul 22 11:17:49 2026 -0400

    Merge tag 'firmware-20260722-pull-request' of https://gitlab.com/kraxel/qemu into staging

    hw/uefi: security fix collection

    # -----BEGIN PGP SIGNATURE-----
    #
    # iQIzBAABCgAdFiEEoDKM/7k6F6eZAf59TLbY7tPocTgFAmpgzEYACgkQTLbY7tPo
    # cThnDQ/+LLrl0XZ2/xV37yzNNQVrkVdLpRpmDMrzl60mT/mTaG9QKJkVoXRQs2lb
    # RvKlVJ0H2F21aicgECLLMVK2jLFaguYuqY3LWbApLm59ddz8VKcQ6/Hzi4mKv2gJ
    # oe7RuYQxeMX85o+026htsROnF+/QYGdGeen+jvyX5uvWDjAKNacK9qAkCwviUkvo
    # 8Xn4773dPiLiuLm17TLZtnrpFNFvMuDkA6nOyUcFcb0ko80pOWZLTkHCDYgQg70H
    # xrxuzl872mmChh6Bw65BTpWNYtJP2uCn7QdeW1SaFeRdeEgDN1jJ6Ghg6hZAijiT
    # 3i61VgXEcHDvUnTAPunGJSAG7AiFM5/biJ40tmbkST0LzvhyGJGLciQnzKwxmfa9
    # I45YQ2l63p4TZIOsKBg51hphGJvoKZMI7u0FhTd507fx4thZw8tOdd0eUA5wU61A
    # bvUciEGvcm+kwYcd2aaUOwISgPjluB70KfoQw4U8yLZeOn5Yal++6hRGcGrk4Tg6
    # gqjASeX8/C3Fd10KppOrpGkG2504EjvbeXVCtUNlhHp4tys5e/Q0GBn3BIW8T7QR
    # E3UQIvIlnrAnN/ciDcBJqjx0VLel/UxMufV9EGcu5UWvsU4AK0kjIq/zTUq0KOVl
    # /Bcyjt6gqGU2Ozhj/aXSBdK2vhtzXlUPvmTNbRUwg18jbQErVg8=
    # =mm3O
    # -----END PGP SIGNATURE-----
    # gpg: Signature made Wed 22 Jul 2026 09:57:26 EDT
    # gpg:                using RSA key A0328CFFB93A17A79901FE7D4CB6D8EED3E87138
    # gpg: Good signature from "Gerd Hoffmann (work) <kraxel@redhat.com>" [full]
    # gpg:                 aka "Gerd Hoffmann <gerd@kraxel.org>" [full]
    # gpg:                 aka "Gerd Hoffmann (private) <kraxel@gmail.com>" [full]
    # Primary key fingerprint: A032 8CFF B93A 17A7 9901  FE7D 4CB6 D8EE D3E8 7138

    * tag 'firmware-20260722-pull-request' of https://gitlab.com/kraxel/qemu:
      hw/uefi: make SetupMode read-only
      hw/uefi: add post_load checks
      hw/uefi: account variable policy entries against storage size
      hw/uefi: check lower limit for signature list size
      hw/uefi: remove debug function
      hw/uefi: add sanity check

    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>