The following changes since commit ad14439be5731e872d8448a04664a9c0e66624a8:
gitlab: remove gdb from MacOS jobs (2026-07-21 10:09:47 -0400) are available in the Git repository at: https://github.com/legoater/qemu/ tags/pull-vfio-20260721 for you to fetch changes up to aef1e7c5ec80ee7a4484e4903c9e4c47d80535de: vfio-user: vfio_user_device_io_set_irqs: prevent excessive malloc (2026-07-21 18:02:47 +0200) ---------------------------------------------------------------- vfio queue: * Fix IGD legacy VBIOS ROM to clear saved BDSM at load time, avoiding garbled BIOS POST output * Clarify dma-buf failure messages for P2P DMA * Fix config read error handling and reject invalid PCI_INTERRUPT_PIN values in vfio/pci * Harden vfio-user: prevent buffer overflows, excessive mallocs, and fix region info capability check ---------------------------------------------------------------- Cédric Le Goater (1): vfio/region: Clarify dma-buf failure messages Denis V. Lunev (2): vfio/pci: don't narrow a failed config read to a plausible value vfio/pci: reject invalid PCI_INTERRUPT_PIN values Thanos Makatos (9): vfio-user: vfio_user_get_region_info: prevent buffer overflow vfio-user: vfio_user_get_region_info: respect max_xfer_size vfio-user: vfio_user_get_region_info: reject unreasonably short struct vfio-user: vfio_user_get_region_info: prevent excessive malloc vfio-user: vfio_user_device_io_get_region_info: fix capability check vfio-user: vfio_user_device_io_device_feature: prevent buffer overflow vfio-user: vfio_user_device_io_device_feature: prevent excessive malloc vfio-user: vfio_user_device_io_set_irqs: prevent buffer overflow vfio-user: vfio_user_device_io_set_irqs: prevent excessive malloc Tomita Moeko (1): vfio/igd: Clear saved BDSM in legacy VBIOS ROM at load time hw/vfio/pci.h | 3 ++ hw/vfio-user/device.c | 54 ++++++++++++++++++++++-- hw/vfio/igd-stubs.c | 5 +++ hw/vfio/igd.c | 115 ++++++++++++++++++++++++++++++++++++++++++++++++++ hw/vfio/pci-quirks.c | 5 +++ hw/vfio/pci.c | 39 ++++++++++++++--- hw/vfio/region.c | 11 +++-- hw/vfio/trace-events | 1 + 8 files changed, 216 insertions(+), 17 deletions(-)
