On 7/17/26 14:52, Marc-André Lureau wrote:
Various UI/security-related fixes for 11.1---------------------------------------------------------------- Akihiko Odaki (3): ui/gtk: Narrow DMA-BUF critical section hw/display/virtio-gpu: reject strides exceeding INT_MAX hw/display/virtio-gpu: Check pixman_image_create_bits() results Marc-André Lureau (12): i386/tdx: fix uninitialized variable warning in tdx_check_features ui/vnc: fix OOB write in vnc_refresh_lossy_rect ui/vnc: validate color shifts in SetPixelFormat ui/vnc: use RFB wire types for client message handlers ui/input-barrier: fix off-by-one in keycode bounds check ui/vnc: fix out-of-bounds write in lossy refresh dirty marking ui/vnc: validate SetPixelFormat field ranges hw/display/virtio-gpu: fix dmabuf_fd leak on remap failure hw/display/qxl: fix TOCTOU in cursor chunk data_size handling hw/display/virtio-gpu: validate stride against width on scanout hw/display/virtio-gpu: cap submit_3d command buffer allocation hw/display/virtio-gpu: handle migration iov allocation failure
Hi! Is there anything in there which should *not* go to the stable qemu series? (besides fixes for code which is not in releases, if any) It feels like everything in this pullreq should be picked up for qemu-stable. Thanks, /mjt
contrib/vhost-user-gpu/vugpu.h | 9 ++++++ include/hw/virtio/virtio-gpu.h | 9 ++++++ contrib/vhost-user-gpu/virgl.c | 7 +++++ hw/display/qxl-render.c | 28 ++++++++++------- hw/display/virtio-gpu-rutabaga.c | 8 +++++ hw/display/virtio-gpu-udmabuf.c | 1 + hw/display/virtio-gpu-virgl.c | 8 +++++ hw/display/virtio-gpu.c | 57 ++++++++++++++++++++++++++++++++--- target/i386/kvm/tdx.c | 2 +- ui/gtk-egl.c | 6 ++-- ui/gtk-gl-area.c | 23 +------------- ui/input-barrier.c | 2 +- ui/vnc.c | 65 ++++++++++++++++++++++++---------------- 13 files changed, 157 insertions(+), 68 deletions(-)
