Branch: refs/heads/stable-7.2
  Home:   https://github.com/qemu/qemu
  Commit: 4ce6d9351b7faa6c6ce9374fa7b59eaead5a0c85
      
https://github.com/qemu/qemu/commit/4ce6d9351b7faa6c6ce9374fa7b59eaead5a0c85
  Author: Michael Tokarev <[email protected]>
  Date:   2025-03-26 (Wed, 26 Mar 2025)

  Changed paths:
    M Makefile

  Log Message:
  -----------
  Makefile: "make dist" generates a .xz, not .bz2

Fixes: 9bc9e9511944 (make-release: switch to .xz format by default)
Signed-off-by: Michael Tokarev <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
(cherry picked from commit 14fb6dbbc50f43057202c685c3aa017287cca37f)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: ce9a1b9e51532ee227cf6d097feba8021d6bd7db
      
https://github.com/qemu/qemu/commit/ce9a1b9e51532ee227cf6d097feba8021d6bd7db
  Author: Heinrich Schuchardt <[email protected]>
  Date:   2025-04-02 (Wed, 02 Apr 2025)

  Changed paths:
    M hw/rtc/goldfish_rtc.c

  Log Message:
  -----------
  hw/rtc/goldfish: keep time offset when resetting

Currently resetting the leads to resynchronizing the Goldfish RTC
with the system clock of the host. In real hardware an RTC reset
would not change the wall time. Other RTCs like pl031 do not show
this behavior.

Move the synchronization of the RTC with the system clock to the
instance realization.

Cc: [email protected]
Reported-by: Frederik Du Toit Lotter <[email protected]>
Fixes: 9a5b40b8427 ("hw: rtc: Add Goldfish RTC device")
Signed-off-by: Heinrich Schuchardt <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Message-ID: <[email protected]>
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
(cherry picked from commit 2542d5cf471a38c4ceb9717708178938b96ded47)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: f8a0d81f0ed50a806cb433dc4bb94d0b439f03b8
      
https://github.com/qemu/qemu/commit/f8a0d81f0ed50a806cb433dc4bb94d0b439f03b8
  Author: Philippe Mathieu-Daudé <[email protected]>
  Date:   2025-04-05 (Sat, 05 Apr 2025)

  Changed paths:
    M hw/pci-host/designware.c

  Log Message:
  -----------
  hw/pci-host/designware: Fix ATU_UPPER_TARGET register access

Fix copy/paste error writing to the ATU_UPPER_TARGET
register, we want to update the upper 32 bits.

Cc: [email protected]
Reported-by: Joey <[email protected]>
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2861
Fixes: d64e5eabc4c ("pci: Add support for Designware IP block")
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
Reviewed-by: Gustavo Romero <[email protected]>
Message-Id: <[email protected]>
(cherry picked from commit 04e99f9eb7920b0f0fcce65686c3bedf5e32a1f9)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 5361f8136d7754293e1689c6274e57c0ac5e084a
      
https://github.com/qemu/qemu/commit/5361f8136d7754293e1689c6274e57c0ac5e084a
  Author: Richard Henderson <[email protected]>
  Date:   2025-04-05 (Sat, 05 Apr 2025)

  Changed paths:
    M target/avr/disas.c

  Log Message:
  -----------
  target/avr: Fix buffer read in avr_print_insn

Do not unconditionally attempt to read 4 bytes, as there
may only be 2 bytes remaining in the translator cache.

Cc: [email protected]
Reviewed-by: Pierrick Bouvier <[email protected]>
Signed-off-by: Richard Henderson <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Message-Id: <[email protected]>
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
(cherry picked from commit 070a500cc0da70c1b4c62a6c95e41f0a1b19dc0b)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: a00f7d4426fd432ec9ad44499d8f7952b90d8b58
      
https://github.com/qemu/qemu/commit/a00f7d4426fd432ec9ad44499d8f7952b90d8b58
  Author: Richard Henderson <[email protected]>
  Date:   2025-04-05 (Sat, 05 Apr 2025)

  Changed paths:
    M hw/mips/fuloong2e.c
    M hw/mips/loongson3_virt.c
    M target/mips/cpu-param.h
    M target/mips/tcg/sysemu/cp0_helper.c
    M target/mips/tcg/sysemu/tlb_helper.c

  Log Message:
  -----------
  target/mips: Revert TARGET_PAGE_BITS_VARY

Revert ee3863b9d41 and a08d60bc6c2b.  The logic behind changing
the system page size because of what the Loongson kernel "prefers"
is flawed.

In the Loongson-2E manual, section 5.5, it is clear that the cpu
supports a 4k page size (along with many others).  Similarly for
the Loongson-3 series CPUs, the 4k page size is mentioned in the
section 7.7 (PageMask Register).  Therefore we must continue to
support a 4k page size.

Signed-off-by: Richard Henderson <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Message-ID: <[email protected]>
[PMD: Mention Loongson-3 series CPUs]
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
(cherry picked from commit fca2817fdcb00e65020c2dcfcb0b23b2a20ea3c4)
(Mjt: context fixes for 7.2.x)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: c3fdfe81ab3f2a4bebad905d6065d0ed1a7841cc
      
https://github.com/qemu/qemu/commit/c3fdfe81ab3f2a4bebad905d6065d0ed1a7841cc
  Author: Richard Henderson <[email protected]>
  Date:   2025-04-05 (Sat, 05 Apr 2025)

  Changed paths:
    M target/mips/tcg/sysemu/cp0_helper.c

  Log Message:
  -----------
  target/mips: Require even maskbits in update_pagemask

The number of bits set in PageMask must be even.

Fixes: d40b55bc1b86 ("target/mips: Fix PageMask with variable page size")
Signed-off-by: Richard Henderson <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Message-ID: <[email protected]>
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
Cc: [email protected]
(cherry picked from commit d89b9899babcc01d7ee75f2917da861dc2afbc27)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: a527d31074f74c4225bd57b14d5c07299de0984e
      
https://github.com/qemu/qemu/commit/a527d31074f74c4225bd57b14d5c07299de0984e
  Author: Richard Henderson <[email protected]>
  Date:   2025-04-05 (Sat, 05 Apr 2025)

  Changed paths:
    M target/mips/tcg/sysemu/cp0_helper.c
    M target/mips/tcg/sysemu/tlb_helper.c
    M target/mips/tcg/tcg-internal.h

  Log Message:
  -----------
  target/mips: Simplify and fix update_pagemask

When update_pagemask was split from helper_mtc0_pagemask,
we failed to actually write to the new parameter but continue
to write to env->CP0_PageMask.  Thus the use within
page_table_walk_refill modifies cpu state and not the local
variable as expected.

Simplify by renaming to compute_pagemask and returning the
value directly.  No need for either env or pointer return.

Fixes: 074cfcb4dae ("target/mips: Implement hardware page table walker for 
MIPS32")
Signed-off-by: Richard Henderson <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Message-ID: <[email protected]>
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
Cc: [email protected]
(cherry picked from commit 256ba7715b109c080c0c77a3923df9e69736ba17)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: d34c201195ecea4fa5c3328a8f5507ca6d2c0a96
      
https://github.com/qemu/qemu/commit/d34c201195ecea4fa5c3328a8f5507ca6d2c0a96
  Author: Marco Cavenati <[email protected]>
  Date:   2025-04-05 (Sat, 05 Apr 2025)

  Changed paths:
    M migration/channel-block.c

  Log Message:
  -----------
  migration: fix SEEK_CUR offset calculation in qio_channel_block_seek

The SEEK_CUR case in qio_channel_block_seek was incorrectly using the
'whence' parameter instead of the 'offset' parameter when calculating the
new position.

Fixes: 65cf200a51 ("migration: introduce a QIOChannel impl for BlockDriverState 
VMState")
Signed-off-by: Marco Cavenati <[email protected]>
Reviewed-by: Daniel P. Berrangé <[email protected]>
Reviewed-by: Michael Tokarev <[email protected]>
Message-ID: <[email protected]>
Signed-off-by: Fabiano Rosas <[email protected]>
(cherry picked from commit c0b32426ce56182c1ce2a12904f3a702c2ecc460)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: cefd67f2543045cfebe51f9e6feccfa56cda9797
      
https://github.com/qemu/qemu/commit/cefd67f2543045cfebe51f9e6feccfa56cda9797
  Author: Akihiko Odaki <[email protected]>
  Date:   2025-04-05 (Sat, 05 Apr 2025)

  Changed paths:
    M hw/net/virtio-net.c

  Log Message:
  -----------
  virtio-net: Fix num_buffers for version 1

The specification says the device MUST set num_buffers to 1 if
VIRTIO_NET_F_MRG_RXBUF has not been negotiated.

Fixes: df91055db5c9 ("virtio-net: enable virtio 1.0")
Signed-off-by: Akihiko Odaki <[email protected]>
Message-Id: <[email protected]>
Reviewed-by: Michael S. Tsirkin <[email protected]>
Signed-off-by: Michael S. Tsirkin <[email protected]>
Tested-by: Lei Yang <[email protected]>
Reviewed-by: Michael S. Tsirkin <[email protected]>
Signed-off-by: Michael S. Tsirkin <[email protected]>
(cherry picked from commit c17ad4b11bd268a35506cd976884562df6ca69d7)
(Mjt: adjust for 7.2.x)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: eafb095ea48e873cc8014e53c24e9ebc236d1996
      
https://github.com/qemu/qemu/commit/eafb095ea48e873cc8014e53c24e9ebc236d1996
  Author: Daan De Meyer <[email protected]>
  Date:   2025-04-10 (Thu, 10 Apr 2025)

  Changed paths:
    M hw/smbios/smbios.c

  Log Message:
  -----------
  smbios: Fix buffer overrun when using path= option

We have to make sure the array of bytes read from the path= file
is null-terminated, otherwise we run into a buffer overrun later on.

Fixes: bb99f4772f54017490e3356ecbb3df25c5d4537f ("hw/smbios: support loading 
OEM strings values from a file")
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2879

Signed-off-by: Daan De Meyer <[email protected]>
Reviewed-by: Daniel P. Berrangé <[email protected]>
Tested-by: Valentin David <[email protected]>
Message-ID: <[email protected]>
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
(cherry picked from commit a7a05f5f6a4085afbede315e749b1c67e78c966b)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: d2d2524b48df23faf5d1e3e34636fb1bbd7f5f60
      
https://github.com/qemu/qemu/commit/d2d2524b48df23faf5d1e3e34636fb1bbd7f5f60
  Author: Pierrick Bouvier <[email protected]>
  Date:   2025-04-16 (Wed, 16 Apr 2025)

  Changed paths:
    M plugins/loader.c

  Log Message:
  -----------
  plugins/loader: fix deadlock when resetting/uninstalling a plugin

Reported and fixed by Dmitry Kurakin.

Fixes: https://gitlab.com/qemu-project/qemu/-/issues/2901
Signed-off-by: Pierrick Bouvier <[email protected]>
Message-Id: <[email protected]>
Signed-off-by: Alex Bennée <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
(cherry picked from commit c07cd110a1824e2d046581af7375f16dac26e96f)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: b401e48860d7aaf226b4db0d19531db1452b3880
      
https://github.com/qemu/qemu/commit/b401e48860d7aaf226b4db0d19531db1452b3880
  Author: Paolo Bonzini <[email protected]>
  Date:   2025-04-24 (Thu, 24 Apr 2025)

  Changed paths:
    M target/i386/hvf/x86_flags.c

  Log Message:
  -----------
  target/i386/hvf: fix lflags_to_rflags

Clear the flags before adding in the ones computed from lflags.

Cc: Wei Liu <[email protected]>
Cc: [email protected]
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Signed-off-by: Paolo Bonzini <[email protected]>
(cherry picked from commit 94a159f3dc737d00749cc930adaec112abe07b3c)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 927d89739393257f6eaf02183a3672c6fc351932
      
https://github.com/qemu/qemu/commit/927d89739393257f6eaf02183a3672c6fc351932
  Author: Richard Henderson <[email protected]>
  Date:   2025-04-24 (Thu, 24 Apr 2025)

  Changed paths:
    M target/avr/insn.decode
    M target/avr/translate.c

  Log Message:
  -----------
  target/avr: Improve decode of LDS, STS

The comment about not being able to define a field with
zero bits is out of date since 94597b6146f3
("decodetree: Allow !function with no input bits").

This fixes the missing load of imm in the disassembler.

Cc: [email protected]
Fixes: 9d8caa67a24 ("target/avr: Add support for disassembling via option '-d 
in_asm'")
Reviewed-by: Pierrick Bouvier <[email protected]>
Signed-off-by: Richard Henderson <[email protected]>
(cherry picked from commit 6b661b7ed7cd02c54a78426d5eb7dd8543b030ed)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 5f2fd50a7619b992db8e512c461921dba4a45df8
      
https://github.com/qemu/qemu/commit/5f2fd50a7619b992db8e512c461921dba4a45df8
  Author: Peter Maydell <[email protected]>
  Date:   2025-05-08 (Thu, 08 May 2025)

  Changed paths:
    M target/arm/translate.c

  Log Message:
  -----------
  target/arm: Don't assert() for ISB/SB inside IT block

If the guest code has an ISB or SB insn inside an IT block, we
generate incorrect code which trips a TCG assertion:

qemu-system-arm: ../tcg/tcg-op.c:3343: void tcg_gen_goto_tb(unsigned int): 
Assertion `(tcg_ctx->goto_tb_issue_mask & (1 << idx)) == 0' failed.

This is because we call gen_goto_tb(dc, 1, ...) twice:

 brcond_i32 ZF,$0x0,ne,$L1
 add_i32 pc,pc,$0x4
 goto_tb $0x1
 exit_tb $0x73d948001b81
 set_label $L1
 add_i32 pc,pc,$0x4
 goto_tb $0x1
 exit_tb $0x73d948001b81

Both calls are in arm_tr_tb_stop(), one for the
DISAS_NEXT/DISAS_TOO_MANY handling, and one for the dc->condjump
condition-failed codepath.  The DISAS_NEXT handling doesn't have this
problem because arm_post_translate_insn() does the handling of "emit
the label for the condition-failed conditional execution" and so
arm_tr_tb_stop() doesn't have dc->condjump set.  But for
DISAS_TOO_MANY we don't do that.

Fix the bug by making arm_post_translate_insn() handle the
DISAS_TOO_MANY case.  This only affects the SB and ISB insns when
used in Thumb mode inside an IT block: only these insns specifically
set is_jmp to TOO_MANY, and their A32 encodings are unconditional.

For the major TOO_MANY case (breaking the TB because it would cross a
page boundary) we do that check and set is_jmp to TOO_MANY only after
the call to arm_post_translate_insn(); so arm_post_translate_insn()
sees is_jmp == DISAS_NEXT, and  we emit the correct code for that
situation.

With this fix we generate the somewhat more sensible set of TCG ops:
 brcond_i32 ZF,$0x0,ne,$L1
 set_label $L1
 add_i32 pc,pc,$0x4
 goto_tb $0x1
 exit_tb $0x7c5434001b81

(NB: the TCG optimizer doesn't optimize out the jump-to-next, but
we can't really avoid emitting it because we don't know at the
point we're emitting the handling for the condexec check whether
this insn is going to happen to be a nop for us or not.)

Cc: [email protected]
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/2942
Signed-off-by: Peter Maydell <[email protected]>
Reviewed-by: Richard Henderson <[email protected]>
Message-id: [email protected]
(cherry picked from commit 8ed7c0b6488a7f20318d6ba414f1cbcd0ed92afe)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 7e2ff77f73be14330f698d49a72a583848cf5562
      
https://github.com/qemu/qemu/commit/7e2ff77f73be14330f698d49a72a583848cf5562
  Author: Bernhard Beschow <[email protected]>
  Date:   2025-05-08 (Thu, 08 May 2025)

  Changed paths:
    M hw/gpio/imx_gpio.c

  Log Message:
  -----------
  hw/gpio/imx_gpio: Fix interpretation of GDIR polarity

According to the i.MX 8M Plus reference manual, a GPIO pin is
configured as an output when the corresponding bit in the GDIR
register is set.  The function imx_gpio_set_int_line() is intended to
be a no-op if the pin is configured as an output, returning early in
such cases.  However, it inverts the condition.  Fix this by
returning early when the bit is set.

cc: [email protected]
Fixes: f44272809779 ("i.MX: Add GPIO device")
Signed-off-by: Bernhard Beschow <[email protected]>
Message-id: [email protected]
Reviewed-by: Peter Maydell <[email protected]>
Signed-off-by: Peter Maydell <[email protected]>
(cherry picked from commit eba837a31b9579e30cc6d7ecb4b5c2662a6ffaba)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 95dacfb15767bfaa0e22840d379434013de1fa75
      
https://github.com/qemu/qemu/commit/95dacfb15767bfaa0e22840d379434013de1fa75
  Author: Bernhard Beschow <[email protected]>
  Date:   2025-05-11 (Sun, 11 May 2025)

  Changed paths:
    M hw/i2c/imx_i2c.c

  Log Message:
  -----------
  hw/i2c/imx: Always set interrupt status bit if interrupt condition occurs

According to the i.MX 8M Plus reference manual, the status flag
I2C_I2SR[IIF] continues to be set when an interrupt condition
occurs even when I2C interrupts are disabled (I2C_I2CR[IIEN] is
clear). However, the device model only sets the flag when I2C
interrupts are enabled which causes U-Boot to loop forever. Fix
the device model by always setting the flag and let I2C_I2CR[IIEN]
guard I2C interrupts only.

Also remove the comment in the code since it merely stated the
obvious and would be outdated now.

Cc: [email protected]
Fixes: 20d0f9cf6a41 ("i.MX: Add I2C controller emulator")
Signed-off-by: Bernhard Beschow <[email protected]>
Acked-by: Corey Minyard <[email protected]>
Message-ID: <[email protected]>
Signed-off-by: Philippe Mathieu-Daudé <[email protected]>
(cherry picked from commit 54e54e594bc8273d210f7ff4448c165a989cbbe8)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 75cc804bc7eb5556edd3cc9aa9e9a3487f6a80d6
      
https://github.com/qemu/qemu/commit/75cc804bc7eb5556edd3cc9aa9e9a3487f6a80d6
  Author: Christian Schoenebeck <[email protected]>
  Date:   2025-05-12 (Mon, 12 May 2025)

  Changed paths:
    M hw/9pfs/9p.c
    M hw/9pfs/9p.h

  Log Message:
  -----------
  9pfs: fix concurrent v9fs_reclaim_fd() calls

Even though this function is serialized to be always called from main
thread, v9fs_reclaim_fd() is dispatching the coroutine to a worker thread
in between via its v9fs_co_*() calls, hence leading to the situation where
v9fs_reclaim_fd() is effectively executed multiple times simultaniously,
which renders its LRU algorithm useless and causes high latency.

Fix this by adding a simple boolean variable to ensure this function is
only called once at a time. No synchronization needed for this boolean
variable as this function is only entered and returned on main thread.

Fixes: 7a46274529c ('hw/9pfs: Add file descriptor reclaim support')
Signed-off-by: Christian Schoenebeck <[email protected]>
Reviewed-by: Greg Kurz <[email protected]>
Message-Id: 
<5c622067efd66dd4ee5eca740dcf263f41db20b2.1741339452.git.qemu_...@crudebyte.com>
(cherry picked from commit 61da38db70affd925226ce1e8a61d761c20d045b)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: cf303fefc974a8c6e876a33ab669eabbf7bf3d20
      
https://github.com/qemu/qemu/commit/cf303fefc974a8c6e876a33ab669eabbf7bf3d20
  Author: Christian Schoenebeck <[email protected]>
  Date:   2025-05-12 (Mon, 12 May 2025)

  Changed paths:
    M hw/9pfs/9p.c

  Log Message:
  -----------
  9pfs: fix FD leak and reduce latency of v9fs_reclaim_fd()

This patch fixes two different bugs in v9fs_reclaim_fd():

1. Reduce latency:

This function calls v9fs_co_close() and v9fs_co_closedir() in a loop. Each
one of the calls adds two thread hops (between main thread and a fs driver
background thread). Each thread hop adds latency, which sums up in
function's loop to a significant duration.

Reduce overall latency by open coding what v9fs_co_close() and
v9fs_co_closedir() do, executing those and the loop itself altogether in
only one background thread block, hence reducing the total amount of
thread hops to only two.

2. Fix file descriptor leak:

The existing code called v9fs_co_close() and v9fs_co_closedir() to close
file descriptors. Both functions check right at the beginning if the 9p
request was cancelled:

    if (v9fs_request_cancelled(pdu)) {
        return -EINTR;
    }

So if client sent a 'Tflush' message, v9fs_co_close() / v9fs_co_closedir()
returned without having closed the file descriptor and v9fs_reclaim_fd()
subsequently freed the FID without its file descriptor being closed, hence
leaking those file descriptors.

This 2nd bug is fixed by this patch as well by open coding v9fs_co_close()
and v9fs_co_closedir() inside of v9fs_reclaim_fd() and not performing the
v9fs_request_cancelled(pdu) check there.

Fixes: 7a46274529c ('hw/9pfs: Add file descriptor reclaim support')
Fixes: bccacf6c792 ('hw/9pfs: Implement TFLUSH operation')
Signed-off-by: Christian Schoenebeck <[email protected]>
Reviewed-by: Greg Kurz <[email protected]>
Message-Id: 
<5747469d3f039c53147e850b456943a1d4b5485c.1741339452.git.qemu_...@crudebyte.com>
(cherry picked from commit 89f7b4da7662ecc6840ffb0846045f03f9714bc6)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: ce1431615292dc735597db4062834bfb271381bc
      
https://github.com/qemu/qemu/commit/ce1431615292dc735597db4062834bfb271381bc
  Author: Akihiko Odaki <[email protected]>
  Date:   2025-05-16 (Fri, 16 May 2025)

  Changed paths:
    M hw/virtio/virtio.c

  Log Message:
  -----------
  virtio: Call set_features during reset

virtio-net expects set_features() will be called when the feature set
used by the guest changes to update the number of virtqueues but it is
not called during reset, which will clear all features, leaving the
queues added for VIRTIO_NET_F_MQ or VIRTIO_NET_F_RSS. Not only these
extra queues are visible to the guest, they will cause segmentation
fault during migration.

Call set_features() during reset to remove those queues for virtio-net
as we call set_status(). It will also prevent similar bugs for
virtio-net and other devices in the future.

Fixes: f9d6dbf0bf6e ("virtio-net: remove virtio queues if the guest doesn't 
support multiqueue")
Buglink: https://issues.redhat.com/browse/RHEL-73842
Cc: [email protected]
Signed-off-by: Akihiko Odaki <[email protected]>
Message-Id: <[email protected]>
Reviewed-by: Michael S. Tsirkin <[email protected]>
Signed-off-by: Michael S. Tsirkin <[email protected]>
(cherry picked from commit 0caed25cd171c611781589b5402161d27d57229c)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 5fee5c68229da7ee259d8430603867a2104d2f76
      
https://github.com/qemu/qemu/commit/5fee5c68229da7ee259d8430603867a2104d2f76
  Author: Icenowy Zheng <[email protected]>
  Date:   2025-05-20 (Tue, 20 May 2025)

  Changed paths:
    M common-user/host/riscv/safe-syscall.inc.S

  Log Message:
  -----------
  common-user/host/riscv: use tail pseudoinstruction for calling tail

The j pseudoinstruction maps to a JAL instruction, which can only handle
a jump to somewhere with a signed 20-bit destination. In case of static
linking and LTO'ing this easily leads to "relocation truncated to fit"
error.

Switch to use tail pseudoinstruction, which is the standard way to
tail-call a function in medium code model (emits AUIPC+JALR).

Signed-off-by: Icenowy Zheng <[email protected]>
Reviewed-by: Richard Henderson <[email protected]>
Message-ID: <[email protected]>
Signed-off-by: Alistair Francis <[email protected]>
Cc: [email protected]
(cherry picked from commit 22b448ccc6611a59d4aa54419f4d88c1f343cb35)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: 700e6e768af0b5ff91613bf528f00334f10e1b89
      
https://github.com/qemu/qemu/commit/700e6e768af0b5ff91613bf528f00334f10e1b89
  Author: Zhao Liu <[email protected]>
  Date:   2025-05-22 (Thu, 22 May 2025)

  Changed paths:
    M qapi/misc-target.json

  Log Message:
  -----------
  qapi/misc-target: Fix the doc to distinguish query-sgx and 
query-sgx-capabilities

There're 2 QMP commands: query-sgx and query-sgx-capabilities, but
their outputs are very similar and the documentation lacks clear
differentiation.

>From the codes, query-sgx is used to gather guest's SGX capabilities
(including SGX related CPUIDs and EPC sections' size, in SGXInfo), and
if guest doesn't have SGX, then QEMU will report the error message.

On the other hand, query-sgx-capabilities is used to gather host's SGX
capabilities (descripted by SGXInfo as well). And if host doesn't
support SGX, then QEMU will also report the error message.

Considering that SGXInfo is already documented and both these 2 commands
have enough error messages (for the exception case in their codes).

Therefore the QAPI documentation for these two commands only needs to
emphasize that one of them applies to the guest and the other to the
host.

Fix their documentation to reflect this difference.

Reported-by: Markus Armbruster <[email protected]>
Suggested-by: Paolo Bonzini <[email protected]>
Signed-off-by: Zhao Liu <[email protected]>
Acked-by: Markus Armbruster <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Paolo Bonzini <[email protected]>
(cherry picked from commit 7f2131c35c1781ca41c62dc26fd93282e1351323)
Signed-off-by: Michael Tokarev <[email protected]>


  Commit: ceb3cba94bfac25f278760731947201f1b013e06
      
https://github.com/qemu/qemu/commit/ceb3cba94bfac25f278760731947201f1b013e06
  Author: Michael Tokarev <[email protected]>
  Date:   2025-05-26 (Mon, 26 May 2025)

  Changed paths:
    M VERSION

  Log Message:
  -----------
  Update version for 7.2.18 release

Signed-off-by: Michael Tokarev <[email protected]>


Compare: https://github.com/qemu/qemu/compare/40b933fca989...ceb3cba94bfa

To unsubscribe from these emails, change your notification settings at 
https://github.com/qemu/qemu/settings/notifications

Reply via email to