Commit 8dfde8fb21 for qemu.org
commit 8dfde8fb21beb5f3567ef6a76a29f17f11e26715
Merge: c4deaead6a dd272c8c87
Author: Stefan Hajnoczi <stefanha@redhat.com>
Date: Tue Aug 4 15:29:15 2026 -0400
Merge tag 'fix-pr-v2' of https://gitlab.com/marcandre.lureau/qemu into staging
Fixes for 11.1-rc
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
---
v2:
- fix CVE# in "virtio-gpu: reject requests with short/truncated control
headers"
# -----BEGIN PGP SIGNATURE-----
#
# iQIzBAABCgAdFiEEh6m9kz+HxgbSdvYt2ujhCXWWnOUFAmpyO8QACgkQ2ujhCXWW
# nOVnCQ/9H1HlmL0SwDyNnFdG/xk8gby7F6H45HTX+gDx/i6VNDU1V60MbDcE2g1D
# dgTeNCgA81M9Lxa3FwWcVyRoRkp2ZygQmEb+XU9fRqAasL/YxvR/c+/Drk0gcsXX
# Qd1UQba6oelqK1SngEVEfhJauHSaVJq4YJWWak2u65FALGpj0CCgBT+42Syaj6+i
# f23crPOO01Ooggyk6TqtuH3Z7hal5mo2amOX5GBJ/YHJ94FRgoW/AcNe7k1xQ7/M
# hXuPG7ix3I18d6T0OUHTF2w+Fj/iplUR6F12ocrRBtc30IUw6/rG0MHFyuljT8Tg
# gyvn38b7JJLQL7dYFD7tYyFZJrum7c5BXQUkqg7hEYtwo7IR2f2V3FHEGcmg1inf
# wooVmrlfA3DA302QBBwCKzVgqD2x6DVPtlDALC1mKouCKz45OEBxQ6iMx5x9jaAo
# BcL415RnVRukK6aHvOvhj93eJqWyc/O6nrALDzy5B+4Zt0X15ytSL4t1ZmRumhxY
# O2d5kFEJC4rvjeQg9EfqSmjs8CWT87jHxLx54LEJIuQeknO4b9SXzQNHZstshY76
# cXPWTOqiKQeswKxK91W4svtBtQmrTp6pYMATmkOexUDAeo4+/d8GCBPYuaABJrJe
# llDdzfwFjsiFAHJ8DcROiOvU9lwy39J29pmp+yQcKKw2k5YZmww=
# =m5jV
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue 04 Aug 2026 15:21:40 EDT
# gpg: using RSA key 87A9BD933F87C606D276F62DDAE8E10975969CE5
# gpg: Good signature from "Marc-André Lureau <marcandre.lureau@redhat.com>" [full]
# gpg: aka "Marc-André Lureau <marcandre.lureau@gmail.com>" [full]
# Primary key fingerprint: 87A9 BD93 3F87 C606 D276 F62D DAE8 E109 7596 9CE5
* tag 'fix-pr-v2' of https://gitlab.com/marcandre.lureau/qemu:
qapi/dump: add allowed-by-guest feature to win-dmp
hw/display/virtio-gpu: Unmap DMA regions on reset
hw/display/virtio-gpu: Always reject invalid scanout bounds
virtio-gpu: reject requests with short/truncated control headers
hw/display/virtio-gpu: drop redundant node->value NULL checks
hw/display/virtio-gpu: fix offset wraparound in scanout_blob_to_fb
vhost-user-gpu: fix integer overflow in buffer allocation
hw/display/vga: fix panning_buf OOB after text/graphics switch
hw/display/virtio-gpu: validate blob iov size
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>