Commit 90229f6aba for qemu.org
commit 90229f6aba83cece729559ee000073c02470bf82
Merge: 1a269766d4 cc479aa897
Author: Stefan Hajnoczi <stefanha@redhat.com>
Date: Mon Jul 20 11:12:31 2026 -0400
Merge tag 'pull-request-2026-07-20' of https://gitlab.com/thuth/qemu into staging
* Fixes for various USB-related bugs
# -----BEGIN PGP SIGNATURE-----
#
# iQIzBAABCgAdFiEEJ7iIR+7gJQEY8+q5LtnXdP5wLbUFAmpd+gkACgkQLtnXdP5w
# LbWVJQ//fnxnOSQLc977PcdQCy1jP7sQ7dO6Wb6WKddQuaGQh49wFeMdHp3ktfH/
# o3IslKo951H2urrz5KhStE08DumCgUxir+Yl6ImDqcOPA0Qzc6i9grxPhhpyUdtZ
# +o50nn73hBalKYf+s8qo81Ba39QdhsJwd5LoEPbmd21ZQiWsTOeQ7c0l8PkP7ZCt
# dnSf4ox7Vn8en897btcxhuY12u29NKPmWEWSLzgXJXmp1CHFTexml8Cp/qYaavg/
# jjE30rM0r/W2nkB3E1HMdMM8fvLeeKKwdarfdJ56Ysx/D4LOBR/aAGjWs8iYx/qM
# jjgzNt4Rps6eKfz+uMXOOvpLhYmue+D4OVZl0kxvoRKckVp6idMXBCWCTnXlthbl
# gxub+sbajrEi7HnT8CthTj8Ct6MTO04V2hpX5JmCrL+X+JLXxC6ZIbJKU7/WuwnT
# MpvkzkmwLPqlf2VKtEMgkRGsvEQz4rxOjpNjy7+TTFoKUd/qoCYyPiW1WL5/Bo6q
# M8z31tGcfmsV5P2A+8HTBwGUfHGByIONVq5J8T9E4dUo4wH5ar9avMKSrxVsFnTo
# a7D+reNJrLb3Y+qSq1U8TH2pf3xcNYz3JAsncBZOb688JbtKjpH5wDwHkH1Myjw7
# j5zEW/Put7xafKrD86I4N32X7V/SOrnnjZMFSYlqiM2wU1aCwcA=
# =cXwW
# -----END PGP SIGNATURE-----
# gpg: Signature made Mon 20 Jul 2026 06:35:53 EDT
# gpg: using RSA key 27B88847EEE0250118F3EAB92ED9D774FE702DB5
# gpg: Good signature from "Thomas Huth <th.huth@gmx.de>" [full]
# gpg: aka "Thomas Huth <thuth@redhat.com>" [full]
# gpg: aka "Thomas Huth <huth@tuxfamily.org>" [full]
# gpg: aka "Thomas Huth <th.huth@posteo.de>" [full]
# gpg: aka "Thomas Huth <th.huth@posteo.eu>" [full]
# Primary key fingerprint: 27B8 8847 EEE0 2501 18F3 EAB9 2ED9 D774 FE70 2DB5
* tag 'pull-request-2026-07-20' of https://gitlab.com/thuth/qemu:
hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise()
hw/usb/hcd-xhci: Fix guest-triggerable assert() in xhci_find_stream()
usbredir: fix infinite loop and SIGFPE with zero max_packet_size
usbredir: fix use-after-free on buffered bulk packet overflow
tests/qtest: add xhci-pci unplug finalize regression test
hw/usb/hcd-xhci-pci: break host link cycle so device_finalize() runs on unplug
hw/usb/xhci: clamp interval exponent to avoid UB shift in xhci_init_epctx()
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>