[Resending with the correct email of Akihiko Odaki, please excuse the duplicate]
On 7/17/26 14:52, Marc-André Lureau wrote:
Various UI/security-related fixes for 11.1
----------------------------------------------------------------
Akihiko Odaki (3):
ui/gtk: Narrow DMA-BUF critical section
hw/display/virtio-gpu: reject strides exceeding INT_MAX
hw/display/virtio-gpu: Check pixman_image_create_bits() results
Marc-André Lureau (12):
i386/tdx: fix uninitialized variable warning in tdx_check_features
ui/vnc: fix OOB write in vnc_refresh_lossy_rect
ui/vnc: validate color shifts in SetPixelFormat
ui/vnc: use RFB wire types for client message handlers
ui/input-barrier: fix off-by-one in keycode bounds check
ui/vnc: fix out-of-bounds write in lossy refresh dirty marking
ui/vnc: validate SetPixelFormat field ranges
hw/display/virtio-gpu: fix dmabuf_fd leak on remap failure
hw/display/qxl: fix TOCTOU in cursor chunk data_size handling
hw/display/virtio-gpu: validate stride against width on scanout
hw/display/virtio-gpu: cap submit_3d command buffer allocation
hw/display/virtio-gpu: handle migration iov allocation failure
Hi!
Is there anything in there which should *not* go
to the stable qemu series?
(besides fixes for code which is not in releases, if any)
It feels like everything in this pullreq should be picked up
for qemu-stable.
Thanks,
/mjt
contrib/vhost-user-gpu/vugpu.h | 9 ++++++
include/hw/virtio/virtio-gpu.h | 9 ++++++
contrib/vhost-user-gpu/virgl.c | 7 +++++
hw/display/qxl-render.c | 28 ++++++++++-------
hw/display/virtio-gpu-rutabaga.c | 8 +++++
hw/display/virtio-gpu-udmabuf.c | 1 +
hw/display/virtio-gpu-virgl.c | 8 +++++
hw/display/virtio-gpu.c | 57 ++++++++++++++++++++++++++++++++---
target/i386/kvm/tdx.c | 2 +-
ui/gtk-egl.c | 6 ++--
ui/gtk-gl-area.c | 23 +-------------
ui/input-barrier.c | 2 +-
ui/vnc.c | 65 ++++++++++++++++++++++++----------------
13 files changed, 157 insertions(+), 68 deletions(-)
