[Stable-9.1.2 32/58] target/riscv: Set vtype.vill on CPU reset

pike which sets vtype.vill on reset. Signed-off-by: Rob Bradford Reviewed-by: Daniel Henrique Barboza Message-ID: <20240930165258.72258-1-rbradf...@rivosinc.com> Signed-off-by: Alistair Francis (cherry picked from commit f8c1f36a2e3dab4935e7c5690e578ac71765766b) Signed-off-by: Michael Tokare

[Stable-9.1.2 35/58] target/riscv/kvm: clarify how 'riscv-aia' default works

ed: if no message shows, riscv-aia was set to the default or uset-set value. Signed-off-by: Daniel Henrique Barboza Acked-by: Alistair Francis Message-ID: <20241028182037.290171-3-dbarb...@ventanamicro.com> Signed-off-by: Alistair Francis (cherry picked from commit fd16cfb2995e9196b579d88

[Stable-9.1.2 42/58] target/ppc: Fix HFSCR facility checks

87de77f6aeba4e38d123f7541cfdae7b124f6a02) Signed-off-by: Michael Tokarev diff --git a/target/ppc/cpu.h b/target/ppc/cpu.h index bd32a1a5f8..f7a2da2bbe 100644 --- a/target/ppc/cpu.h +++ b/target/ppc/cpu.h @@ -635,8 +635,8 @@ FIELD(MSR, LE, MSR_LE, 1) #define PSSCR_EC PPC_BIT(43) /* Exit Criterion */ /* HFSCR bits

[Stable-9.1.2 33/58] hw/intc/riscv_aplic: Check and update pending when write sourcecfg

ir Francis (cherry picked from commit 2ae6cca1d3389801ee72fc5e58c52573218f3514) Signed-off-by: Michael Tokarev diff --git a/hw/intc/riscv_aplic.c b/hw/intc/riscv_aplic.c index 32edd6d07b..4a262c82f0 100644 --- a/hw/intc/riscv_aplic.c +++ b/hw/intc/riscv_aplic.c @@ -159,31 +159,42 @@ static bool is_kv

[Stable-9.1.2 46/58] hw/ssi/pnv_spi: Fixes Coverity CID 1558831

y picked from commit 031324472eee57bce9bd4a0231aa9b137494d8a1) Signed-off-by: Michael Tokarev diff --git a/hw/ssi/pnv_spi.c b/hw/ssi/pnv_spi.c index 05e6afc11e..eadc36fa86 100644 --- a/hw/ssi/pnv_spi.c +++ b/hw/ssi/pnv_spi.c @@ -239,6 +239,7 @@ static void transfer(PnvSpi *s, PnvXferBuffer *payload) } } spi_re

[Stable-9.1.2 16/58] vfio/migration: Report only stop-copy size in vfio_state_pending_exact()

ihai Horon Reviewed-by: Cédric Le Goater (cherry picked from commit 3b5948f808e3b99aedfa0aff45cffbe8b7ec07ed) Signed-off-by: Michael Tokarev diff --git a/hw/vfio/migration.c b/hw/vfio/migration.c index 262d42a46e..dd717e8d6c 100644 --- a/hw/vfio/migration.c +++ b/hw/vfio/migration.c @@ -57

[Stable-9.1.2 48/58] hw/sd/sdcard: Fix calculation of size when using eMMC boot partitions

Roeck Reviewed-by: Cédric Le Goater (cherry picked from commit c078298301a8c72fe12da85d94372689196628bc) Signed-off-by: Michael Tokarev diff --git a/hw/sd/sd.c b/hw/sd/sd.c index e96181385f..a639ff674c 100644 --- a/hw/sd/sd.c +++ b/hw/sd/sd.c @@ -834,7 +834,9 @@ static void sd_reset(D

[Stable-9.1.2 41/58] target/ppc: Fix mtDPDES targeting SMT siblings

: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Signed-off-by: Nicholas Piggin (cherry picked from commit 0324d236d2918c18a9ad4a1081b1083965a1433b) Signed-off-by: Michael Tokarev diff --git a/target/ppc/misc_helper.c b/target/ppc/misc_helper.c index 1b83971375..f0ca80153b 100644 --- a/

[Stable-9.1.2 25/58] hw/sd/omap_mmc: Don't use sd_cmd_type_t

-peter.mayd...@linaro.org (cherry picked from commit 77dd098a5e790e3ede0dea5ddd5f690086fe608c) Signed-off-by: Michael Tokarev diff --git a/hw/sd/omap_mmc.c b/hw/sd/omap_mmc.c index edd3cf2a1e..b20edac2ce 100644 --- a/hw/sd/omap_mmc.c +++ b/hw/sd/omap_mmc.c @@ -103,6 +103,7 @@ static void omap_mmc_f

[Stable-9.1.2 36/58] target/riscv: Fix vcompress with rvv_ta_all_1s

Reviewed-by: Daniel Henrique Barboza Reviewed-by: Alistair Francis Message-ID: <20241030043538.939712-1-ant...@tenstorrent.com> Signed-off-by: Alistair Francis (cherry picked from commit c128d39edeff337220fc536a3e935bcba01ecb49) Signed-off-by: Michael Tokarev diff --git a/target/riscv/vector_he

[Stable-9.1.2 04/58] accel/kvm: check for KVM_CAP_READONLY_MEM on VM

...@nongnu.org Signed-off-by: Paolo Bonzini (cherry picked from commit 64e0e63ea16aa0122dc0c41a0679da0ae4616208) Signed-off-by: Michael Tokarev diff --git a/accel/kvm/kvm-all.c b/accel/kvm/kvm-all.c index 4db866f0ca..8c5e71f20c 100644 --- a/accel/kvm/kvm-all.c +++ b/accel/kvm/kvm-all.c @@ -2660,7 +2660,7

[Stable-9.1.2 10/58] tcg: Reset data_gen_ptr correctly

Signed-off-by: Richard Henderson (cherry picked from commit a7cfd751fb269de4a93bf1658cb13911c7ac77cc) Signed-off-by: Michael Tokarev diff --git a/tcg/tcg.c b/tcg/tcg.c index 34e3056380..b1b8b8bba3 100644 --- a/tcg/tcg.c +++ b/tcg/tcg.c @@ -1399,7 +1399,6 @@ TranslationBlock *tcg_tb_alloc(TCG

[Stable-9.1.2 44/58] hw/ssi/pnv_spi: Match _xfer_buffer_free() with _xfer_buffer_new()

udé Reviewed-by: Richard Henderson Signed-off-by: Nicholas Piggin (cherry picked from commit 65f53702d2e4bd045ce16ca874469cdd1e1ef4e4) Signed-off-by: Michael Tokarev diff --git a/hw/ssi/pnv_spi.c b/hw/ssi/pnv_spi.c index c1297ab733..13a47f07e7 100644 --- a/hw/ssi/pnv_spi.c +++ b/hw/ssi/pnv_sp

[Stable-9.1.2 49/58] qemu-ga: Fix a SIGSEGV in ga_run_command() helper

niel P. Berrangé Link: https://lore.kernel.org/r/m15xppk9qg@nimmagadda.net Signed-off-by: Konstantin Kostiuk (cherry picked from commit 9cfe110d9fc0be88178770a85dc6170eecdf6be1) Signed-off-by: Michael Tokarev diff --git a/qga/commands-posix.c b/qga/commands-posix.c index c2bd0b4316.

[Stable-9.1.2 20/58] net: Check if nc is NULL in qemu_get_vnet_hdr_len()

an Cameron Signed-off-by: Akihiko Odaki Tested-by; Jonathan Cameron Acked-by: Michael S. Tsirkin Signed-off-by: Jason Wang (cherry picked from commit 76240dd2a37c7b361740616a7d6080beafdb8a71) Signed-off-by: Michael Tokarev diff --git a/net/net.c b/net/net.c index fc1125111c..264c4e9c5c 100644

[Stable-9.1.2 51/58] acpi/disassemle-aml.sh: fix up after dir reorg

ne} path") Cc: "Sunil V L" Message-ID: Signed-off-by: Michael S. Tsirkin Acked-by: Igor Mammedov (cherry picked from commit feb58e3b261db503ade94c5f43ccedeee4eac41f) Signed-off-by: Michael Tokarev diff --git a/tests/data/acpi/disassemle-aml.sh b/tests/data/acpi/disassemle-aml.sh i

[Stable-9.0.4 50/57] ppc/xive: Fix ESB length overflow on 32-bit hosts

From: Nicholas Piggin The length of this region can be > 32-bits, which overflows size_t on 32-bit hosts. Change to uint64_t. Signed-off-by: Nicholas Piggin (cherry picked from commit 07f2770503e24889720028ddf9ef54788ddf3b6d) Signed-off-by: Michael Tokarev diff --git a/hw/i

[Stable-9.1.2 13/58] linux-user: Emulate /proc/self/maps under mmap_lock

74c94aa94a145628) Signed-off-by: Michael Tokarev diff --git a/linux-user/syscall.c b/linux-user/syscall.c index 9d5415674d..6d9ed59594 100644 --- a/linux-user/syscall.c +++ b/linux-user/syscall.c @@ -8122,17 +8122,19 @@ static int open_self_maps_1(CPUArchState *env, int fd, bool smaps

[Stable-9.1.2 08/58] tests/qemu-iotests/211.out: Update to expect MapEntry 'compressed' field

naro.org> Reviewed-by: Kevin Wolf Signed-off-by: Kevin Wolf (cherry picked from commit d60bd080e783107cb876a6f16561fe03f9dcbca7) Signed-off-by: Michael Tokarev diff --git a/tests/qemu-iotests/211.out b/tests/qemu-iotests/211.out index f02c75409c..ff9f9a6913 100644 --- a/tests/qemu-iotests/2

[Stable-9.1.2 14/58] linux-user/ppc: Fix sigmask endianness issue in sigreturn

f-by: Ilya Leoshkevich Reviewed-by: Richard Henderson Reviewed-by: Philippe Mathieu-Daudé Message-ID: <20241017125811.447961-2-...@linux.ibm.com> Signed-off-by: Richard Henderson (cherry picked from commit 8704132805cf7a3259d1c5a073b3c2b92afa2616) Signed-off-by: Michael Tokarev diff --git

[Stable-9.1.2 02/58] KVM: Dynamic sized kvm memslots array

4a8126115d173687b37e657312a8ffe29fc0c) Signed-off-by: Michael Tokarev diff --git a/accel/kvm/kvm-all.c b/accel/kvm/kvm-all.c index 75d11a07b2..4db866f0ca 100644 --- a/accel/kvm/kvm-all.c +++ b/accel/kvm/kvm-all.c @@ -69,6 +69,9 @@ #define KVM_GUESTDBG_BLOCKIRQ 0 #endif +/* Default n

[Stable-9.0.4 34/57] gitlab: make check-[dco|patch] a little more verbose

cherry picked from commit 97f116f9c6fd127b6ed2953993fa9fb05e82f450) Signed-off-by: Michael Tokarev diff --git a/.gitlab-ci.d/check-dco.py b/.gitlab-ci.d/check-dco.py index 632c8bcce8..d221b16bd5 100755 --- a/.gitlab-ci.d/check-dco.py +++ b/.gitlab-ci.d/check-dco.py @@ -19,10 +19,9 @@ re

[Stable-9.1.2 52/58] Revert "target/arm: Fix usage of MMU indexes when EL3 is AArch32"

rg Signed-off-by: Peter Maydell Tested-by: Thomas Huth Message-id: 20241101142845.1712482-2-peter.mayd...@linaro.org Reviewed-by: Richard Henderson (cherry picked from commit 056c5c90c171c4895b407af0cf3d198e1d44b40f) Signed-off-by: Michael Tokarev diff --git a/target/arm/cpu.h b/target/

[Stable-9.1.2 38/58] target/ppc: Make divd[u] handler method decodetree compatible

eviewed-by: Philippe Mathieu-Daudé Signed-off-by: Nicholas Piggin (cherry picked from commit 7b4820a3e1dfba2b81f2354e7c748fc04b275dba) Signed-off-by: Michael Tokarev diff --git a/target/ppc/translate.c b/target/ppc/translate.c index 02c810e884..5a352cdad1 100644 --- a/target/ppc/translate.c +++ b/

[Stable-9.0.4 52/57] Revert "target/arm: Fix usage of MMU indexes when EL3 is AArch32"

7;ll fix it again in the next commit. Cc: qemu-sta...@nongnu.org Signed-off-by: Peter Maydell Tested-by: Thomas Huth Message-id: 20241101142845.1712482-2-peter.mayd...@linaro.org Reviewed-by: Richard Henderson (cherry picked from commit 056c5c90c171c4895b407af0cf3d198e1d44b40f) Signed-off-by: M

[Stable-9.1.2 29/58] target/riscv/csr.c: Fix an access to VXSAT

Signed-off-by: Alistair Francis (cherry picked from commit 5a60026cad4e9dba929cab4f63229e4b9110cf0a) Signed-off-by: Michael Tokarev diff --git a/target/riscv/csr.c b/target/riscv/csr.c index ea3560342c..c88ee1265e 100644 --- a/target/riscv/csr.c +++ b/target/riscv/csr.c @@ -734,7 +734,7 @@

[Stable-9.1.2 37/58] target/ppc: Set ctx->opcode for decode_insn32()

olas Piggin (cherry picked from commit c9b8a13a8841e0e23901e57e24ea98eeef16cf91) Signed-off-by: Michael Tokarev diff --git a/target/ppc/translate.c b/target/ppc/translate.c index 71513ba964..02c810e884 100644 --- a/target/ppc/translate.c +++ b/target/ppc/translate.c @@ -6426,8 +6426,6 @@ static bool decode_legacy(PowerPCCPU

[Stable-9.1.2 45/58] hw/ssi/pnv_spi: Return early in transfer()

From: Philippe Mathieu-Daudé Return early to simplify next commit. No logical change intended. Cc: qemu-sta...@nongnu.org Signed-off-by: Philippe Mathieu-Daudé Signed-off-by: Nicholas Piggin (cherry picked from commit 3feabc18ad4d4bdc178a205b986353a54dbfcf20) Signed-off-by: Michael Tokarev

[Stable-9.1.2 24/58] target/arm: Don't assert in regime_is_user() for E10 mmuidx values

x Bennée Tested-by: Alex Bennée Message-id: 20241017172331.822587-1-peter.mayd...@linaro.org (cherry picked from commit 1505b651fdbd9af59a4a90876a62ae7ea2d4cd39) Signed-off-by: Michael Tokarev diff --git a/target/arm/internals.h b/target/arm/internals.h index 38545552d0..d4dc9ab731 100644 ---

[Stable-9.1.2 03/58] target/i386/tcg: Use DPL-level accesses for interrupts and call gates

: Paolo Bonzini (cherry picked from commit e136648c5c95ee4ea233cccf999c07e065bef26d) Signed-off-by: Michael Tokarev diff --git a/target/i386/tcg/seg_helper.c b/target/i386/tcg/seg_helper.c index 3b8fd827e1..02ae6a0d1f 100644 --- a/target/i386/tcg/seg_helper.c +++ b/target/i386/tcg/seg_helper.c

[Stable-9.1.2 58/58] Revert "hw/audio/hda: fix memory leak on audio setup"

9 for details. Signed-off-by: Michael Tokarev diff --git a/hw/audio/hda-codec.c b/hw/audio/hda-codec.c index 4373565371..ee3d0a7dec 100644 --- a/hw/audio/hda-codec.c +++ b/hw/audio/hda-codec.c @@ -472,24 +472,6 @@ static void hda_audio_set_amp(HDAAudioStream *st) } } -static

[Stable-9.1.2 28/58] stubs: avoid duplicate symbols in libqemuutil.a

being requested. Cc: qemu-sta...@nongnu.org Reviewed-by: Alex Bennée Tested-by: Alex Bennée Signed-off-by: Paolo Bonzini (cherry picked from commit 388b849fb6c33882b481123568995a749a54f648) Signed-off-by: Michael Tokarev diff --git a/stubs/meson.build b/stubs/meson.build index 772a3e817d

[Stable-9.1.2 11/58] target/i386: Walk NPT in guest real mode

amazon.com> Signed-off-by: Richard Henderson (cherry picked from commit b56617bbcb473c25815d1bf475e326f84563b1de) Signed-off-by: Michael Tokarev diff --git a/target/i386/tcg/sysemu/excp_helper.c b/target/i386/tcg/sysemu/excp_helper.c index 8fb05b1f53..8cb0d80177 100644 --- a/target/i386/tcg/sysem

[Stable-9.1.2 06/58] tests: Wait for migration completion on destination QEMU to avoid failures

from the TIS into a buffer. Cc: Reported-by: Fabiano Rosas Reviewed-by: Daniel P. Berrangé Signed-off-by: Stefan Berger (cherry picked from commit d9280ea3174700170d39c4cdd3f587f260757711) Signed-off-by: Michael Tokarev diff --git a/tests/qtest/tpm-tests.c b/tests/qtest/tpm-tests.c index

[Stable-9.1.2 30/58] target/riscv: Correct SXL return value for RV32 in RV64 QEMU

9055048.562-4-zhiwei_...@linux.alibaba.com> Signed-off-by: Alistair Francis (cherry picked from commit 929e4277c128772bad41cc795995f754cb9991af) Signed-off-by: Michael Tokarev diff --git a/target/riscv/cpu.h b/target/riscv/cpu.h index 1619c3acb6..a63a29744c 100644 --- a/target/riscv/cpu.h ++

[Stable-9.0.4 46/57] target/riscv/kvm: clarify how 'riscv-aia' default works

ed: if no message shows, riscv-aia was set to the default or uset-set value. Signed-off-by: Daniel Henrique Barboza Acked-by: Alistair Francis Message-ID: <20241028182037.290171-3-dbarb...@ventanamicro.com> Signed-off-by: Alistair Francis (cherry picked from commit fd16cfb2995e9196b579d88

[Stable-9.1.2 09/58] raw-format: Fix error message for invalid offset/size

x27;) Signed-off-by: Kevin Wolf Message-ID: <20240829185527.47152-1-kw...@redhat.com> Reviewed-by: Daniel P. Berrangé Reviewed-by: Hanna Czenczek Signed-off-by: Kevin Wolf (cherry picked from commit 04bbc3ee52b32ac465547bb40c1f090a1b8f315a) Signed-off-by: Michael Tokarev diff --git a/bloc

[Stable-9.1.2 43/58] ppc/pnv: ADU fix possible buffer overrun with invalid size

: Cédric Le Goater Resolves: Coverity CID 1558830 Fixes: 24bd283bccb33 ("ppc/pnv: Implement ADU access to LPC space") Reviewed-by: Cédric Le Goater Signed-off-by: Nicholas Piggin (cherry picked from commit ddd2a060a0da41000ddca31e329ab1d54e37fedb) Signed-off-by: Michael Tokarev diff --gi

[Stable-9.0.4 44/57] hw/intc/riscv_aplic: Check and update pending when write sourcecfg

ir Francis (cherry picked from commit 2ae6cca1d3389801ee72fc5e58c52573218f3514) Signed-off-by: Michael Tokarev diff --git a/hw/intc/riscv_aplic.c b/hw/intc/riscv_aplic.c index 32edd6d07b..4a262c82f0 100644 --- a/hw/intc/riscv_aplic.c +++ b/hw/intc/riscv_aplic.c @@ -159,31 +159,42 @@ static bool is_kv

[Stable-9.1.2 47/58] tests/tcg: Replace -mpower8-vector with -mcpu=power8

c31bd223f2e867f2cae43bfd41dfb9) Signed-off-by: Michael Tokarev diff --git a/tests/tcg/ppc64/Makefile.target b/tests/tcg/ppc64/Makefile.target index 509a20be2b..102a2cefef 100644 --- a/tests/tcg/ppc64/Makefile.target +++ b/tests/tcg/ppc64/Makefile.target @@ -6,7 +6,7 @@ VPATH += $(SRC_PATH)/tests/tcg/ppc

[Stable-9.1.2 57/58] 9pfs: fix crash on 'Treaddir' request

Kurz Message-Id: (cherry picked from commit 042b4ebfd2298ae01553844124f27d651cdb1071) Signed-off-by: Michael Tokarev diff --git a/hw/9pfs/9p.c b/hw/9pfs/9p.c index af636cfb2d..9a291d1b51 100644 --- a/hw/9pfs/9p.c +++ b/hw/9pfs/9p.c @@ -2587,6 +2587,11 @@ static void coroutine_fn v9fs_readdir(void *opaque) retval = -EINVAL;

[Stable-9.0.4 56/57] hw/nvme: fix handling of over-committed queues

3f5b4704cb4198bd25cbbee31) Signed-off-by: Michael Tokarev diff --git a/hw/nvme/ctrl.c b/hw/nvme/ctrl.c index 659332db0a..4af1ac88d8 100644 --- a/hw/nvme/ctrl.c +++ b/hw/nvme/ctrl.c @@ -1516,9 +1516,16 @@ static void nvme_post_cqes(void *opaque) stl_le_p(&n->

[Stable-9.1.2 34/58] target/riscv/kvm: set 'aia_mode' to default in error path

rancis Message-ID: <20241028182037.290171-2-dbarb...@ventanamicro.com> Signed-off-by: Alistair Francis (cherry picked from commit d201a127e164b1683df5e7c93c6d42a74122db99) Signed-off-by: Michael Tokarev diff --git a/target/riscv/kvm/kvm-cpu.c b/target/riscv/kvm/kvm-cpu.c index f6e3156b8d..b264

[Stable-9.1.2 31/58] hw/intc: Don't clear pending bits on IRQ lowering

ed-off-by: Alistair Francis (cherry picked from commit a84be2baa9eca8bc500f866ad943b8f63dc99adf) Signed-off-by: Michael Tokarev diff --git a/hw/intc/sifive_plic.c b/hw/intc/sifive_plic.c index e559f11805..ca4c2de494 100644 --- a/hw/intc/sifive_plic.c +++ b/hw/intc/sifive_plic.c @@ -349,8 +

[Stable-9.0.4 21/57] tcg/s390x: fix constraint for 32-bit TSTEQ/TSTNE

ff-by: Paolo Bonzini (cherry picked from commit 615586cb356811e46c2e5f85c36db4b93f8381cd) Signed-off-by: Michael Tokarev diff --git a/tcg/s390x/tcg-target.c.inc b/tcg/s390x/tcg-target.c.inc index ad587325fc..a27e346602 100644 --- a/tcg/s390x/tcg-target.c.inc +++ b/tcg/s390x/tcg-target.c.inc @@ -563

[Stable-9.1.2 07/58] Revert "hw/sh4/r2d: Realize IDE controller before accessing it"

(cherry picked from commit 68ad89b75ad2bb5f38abea815a50ec17a142565a) Signed-off-by: Michael Tokarev diff --git a/hw/sh4/r2d.c b/hw/sh4/r2d.c index e5ac6751bd..7eecd79fcc 100644 --- a/hw/sh4/r2d.c +++ b/hw/sh4/r2d.c @@ -286,9 +286,9 @@ static void r2d_init(MachineState *machine) dinfo = drive_get(IF_IDE, 0, 0);

[Stable-9.0.4 45/57] target/riscv/kvm: set 'aia_mode' to default in error path

rancis Message-ID: <20241028182037.290171-2-dbarb...@ventanamicro.com> Signed-off-by: Alistair Francis (cherry picked from commit d201a127e164b1683df5e7c93c6d42a74122db99) Signed-off-by: Michael Tokarev diff --git a/target/riscv/kvm/kvm-cpu.c b/target/riscv/kvm/kvm-cpu.c index 94b0e393bf..06a8

[Stable-9.1.2 26/58] target/arm: Fix arithmetic underflow in SETM instruction

t the SET* instructions") Signed-off-by: Ido Plat Reviewed-by: Richard Henderson Message-id: 20241025024909.799989-1-ido.pl...@ibm.com Signed-off-by: Peter Maydell (cherry picked from commit bab209af35037b33f7eb1b8a3737085935bec3a3) Signed-off-by: Michael Tokarev diff --git a/target/arm/

[Stable-9.1.2 50/58] hw/acpi: Fix ordering of BDF in Generic Initiator PCI Device Handle.

wed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 16c687d84574a1139a6475c33e3b9191f7932ac0) Signed-off-by: Michael Tokarev diff --git a/hw/acpi/acpi_generic_initiator.c b/hw/acpi/acpi_generic_initiator.c index 17b9a052f5..3d2b567999 100644 --- a/hw/acpi/acpi

[Stable-9.1.2 39/58] ppc/pnv: Fix LPC serirq routing calculation

by: Cédric Le Goater Resolves: Coverity CID 1558829 (partially) Reviewed-by: Cédric Le Goater Reviewed-by: Richard Henderson Signed-off-by: Nicholas Piggin (cherry picked from commit 899e488650bb8bd52e1b2b44ceaae17df2e20b7f) Signed-off-by: Michael Tokarev diff --git a/hw/ppc/pnv_lpc.c b/hw/

[Stable-9.0.4 17/57] hw/audio/hda: free timer on exit

3c5eb2db05251508) Signed-off-by: Michael Tokarev diff --git a/hw/audio/hda-codec.c b/hw/audio/hda-codec.c index b22e486fda..ee3d0a7dec 100644 --- a/hw/audio/hda-codec.c +++ b/hw/audio/hda-codec.c @@ -751,7 +751,7 @@ static void hda_audio_exit(HDACodecDevice *hda) continue;

[Stable-9.1.2 55/58] migration: Ensure vmstate_save() sets errp

appens e.g. when receiving the state from a virtio-fs back-end (virtiofsd) fails. Signed-off-by: Hanna Czenczek Link: https://lore.kernel.org/r/20241015170437.310358-1-hre...@redhat.com Signed-off-by: Peter Xu (cherry picked from commit 37dfcba1a04989830c706f9cbc00450e5d3a7447) Signed-off-by: M

[Stable-9.0.4 31/57] linux-user/ppc: Fix sigmask endianness issue in sigreturn

f-by: Ilya Leoshkevich Reviewed-by: Richard Henderson Reviewed-by: Philippe Mathieu-Daudé Message-ID: <20241017125811.447961-2-...@linux.ibm.com> Signed-off-by: Richard Henderson (cherry picked from commit 8704132805cf7a3259d1c5a073b3c2b92afa2616) Signed-off-by: Michael Tokarev diff --git

[Stable-9.1.2 05/58] target/i386: Use only 16 and 32-bit operands for IN/OUT

/20241015004144.2111817-1-richard.hender...@linaro.org Signed-off-by: Paolo Bonzini (cherry picked from commit 15d955975bd484c2c66af0d6daaa02a7d04d2256) Signed-off-by: Michael Tokarev diff --git a/target/i386/tcg/decode-new.c.inc b/target/i386/tcg/decode-new.c.inc index 30be9237c3..429ed87bb6 100644

[Stable-9.1.2 23/58] net/tap-win32: Fix gcc 14 format truncation errors

;%s%s%s", | ^ 621 | USERMODEDEVICEDIR, | ~~ 622 | device_guid, | 623 | TAPSUFFIX); | ~~ Signed-off-by: Bernhard Beschow Resolves:

[Stable-9.1.2 56/58] hw/nvme: fix handling of over-committed queues

3f5b4704cb4198bd25cbbee31) Signed-off-by: Michael Tokarev diff --git a/hw/nvme/ctrl.c b/hw/nvme/ctrl.c index 9f277b81d8..fe822f63b3 100644 --- a/hw/nvme/ctrl.c +++ b/hw/nvme/ctrl.c @@ -1516,9 +1516,16 @@ static void nvme_post_cqes(void *opaque) stl_le_p(&n->

[Stable-9.1.2 27/58] target/arm: Store FPSR cumulative exception bits in env->vfp.fpsr

@linaro.org (cherry picked from commit d9c7adb6019f2ac3d6a5a36c4121341f4b6424af) Signed-off-by: Michael Tokarev diff --git a/target/arm/vfp_helper.c b/target/arm/vfp_helper.c index b3698da8ca..45ec71a8ad 100644 --- a/target/arm/vfp_helper.c +++ b/target/arm/vfp_helper.c @@ -59,32 +59,6 @

[Stable-9.1.2 54/58] target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)

7237c846a295a9857920) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/vec_helper.c b/target/arm/tcg/vec_helper.c index 98604d170f..7cbd1b0f43 100644 --- a/target/arm/tcg/vec_helper.c +++ b/target/arm/tcg/vec_helper.c @@ -836,6 +836,13 @@ void HELPER(NAME)(void *vd, void *vn,

[Stable-9.1.2 17/58] gitlab: make check-[dco|patch] a little more verbose

cherry picked from commit 97f116f9c6fd127b6ed2953993fa9fb05e82f450) Signed-off-by: Michael Tokarev diff --git a/.gitlab-ci.d/check-dco.py b/.gitlab-ci.d/check-dco.py index 632c8bcce8..d221b16bd5 100755 --- a/.gitlab-ci.d/check-dco.py +++ b/.gitlab-ci.d/check-dco.py @@ -19,10 +19,9 @@ re

[Stable-9.0.4 48/57] target/ppc: Set ctx->opcode for decode_insn32()

olas Piggin (cherry picked from commit c9b8a13a8841e0e23901e57e24ea98eeef16cf91) Signed-off-by: Michael Tokarev diff --git a/target/ppc/translate.c b/target/ppc/translate.c index 93ffec787c..a7972a7e41 100644 --- a/target/ppc/translate.c +++ b/target/ppc/translate.c @@ -7170,8 +7170,6 @@ static bool decode_legacy(PowerPCCPU

[Stable-9.0.4 26/57] raw-format: Fix error message for invalid offset/size

x27;) Signed-off-by: Kevin Wolf Message-ID: <20240829185527.47152-1-kw...@redhat.com> Reviewed-by: Daniel P. Berrangé Reviewed-by: Hanna Czenczek Signed-off-by: Kevin Wolf (cherry picked from commit 04bbc3ee52b32ac465547bb40c1f090a1b8f315a) Signed-off-by: Michael Tokarev diff --git a/bloc

[Stable-9.0.4 38/57] net/tap-win32: Fix gcc 14 format truncation errors

;%s%s%s", | ^ 621 | USERMODEDEVICEDIR, | ~~ 622 | device_guid, | 623 | TAPSUFFIX); | ~~ Signed-off-by: Bernhard Beschow Resolves:

qemu-devel@nongnu.org

com/qemu-project/qemu/-/issues/2326 Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2588 Signed-off-by: Peter Maydell Tested-by: Thomas Huth Reviewed-by: Richard Henderson Message-id: 20241101142845.1712482-3-peter.mayd...@linaro.org (cherry picked from commit efbe180ad2ed75d4cc64dfc6fb46

[Stable-9.0.4 33/57] vfio/migration: Report only stop-copy size in vfio_state_pending_exact()

ihai Horon Reviewed-by: Cédric Le Goater (cherry picked from commit 3b5948f808e3b99aedfa0aff45cffbe8b7ec07ed) Signed-off-by: Michael Tokarev diff --git a/hw/vfio/migration.c b/hw/vfio/migration.c index 1149c6b374..3a97d56950 100644 --- a/hw/vfio/migration.c +++ b/hw/vfio/migration.c @@ -48

[Stable-9.1.2 01/58] tcg/s390x: fix constraint for 32-bit TSTEQ/TSTNE

ff-by: Paolo Bonzini (cherry picked from commit 615586cb356811e46c2e5f85c36db4b93f8381cd) Signed-off-by: Michael Tokarev diff --git a/tcg/s390x/tcg-target.c.inc b/tcg/s390x/tcg-target.c.inc index ad587325fc..a27e346602 100644 --- a/tcg/s390x/tcg-target.c.inc +++ b/tcg/s390x/tcg-target.c.inc @@ -563

[Stable-9.1.2 40/58] ppc/pnv: Fix LPC POWER8 register sanity check

son Signed-off-by: Nicholas Piggin (cherry picked from commit 84416e262ea1218026a8567ed9ea31c16d77edea) Signed-off-by: Michael Tokarev diff --git a/hw/ppc/pnv_lpc.c b/hw/ppc/pnv_lpc.c index 80b79dfbbc..8c203d2059 100644 --- a/hw/ppc/pnv_lpc.c +++ b/hw/ppc/pnv_lpc.c @@ -427,8 +427,8 @@ static v

[Stable-9.0.4 22/57] KVM: Dynamic sized kvm memslots array

4a8126115d173687b37e657312a8ffe29fc0c) Signed-off-by: Michael Tokarev (Mjt: context fixup in accel/kvm/trace-events) diff --git a/accel/kvm/kvm-all.c b/accel/kvm/kvm-all.c index 931f74256e..4d44a63eca 100644 --- a/accel/kvm/kvm-all.c +++ b/accel/kvm/kvm-all.c @@ -69,6 +69,9 @@ #define KVM_GUE

[Stable-9.0.4 57/57] 9pfs: fix crash on 'Treaddir' request

Kurz Message-Id: (cherry picked from commit 042b4ebfd2298ae01553844124f27d651cdb1071) Signed-off-by: Michael Tokarev diff --git a/hw/9pfs/9p.c b/hw/9pfs/9p.c index af636cfb2d..9a291d1b51 100644 --- a/hw/9pfs/9p.c +++ b/hw/9pfs/9p.c @@ -2587,6 +2587,11 @@ static void coroutine_fn v9fs_readdir(void *opaque) retval = -EINVAL;

[Stable-9.0.4 13/57] tcg/ppc: Use TCG_REG_TMP2 for scratch tcg_out_qemu_st

on Tested-By: Michael Tokarev (cherry picked from commit 4cabcb89b101942346aebff081aa1453e958fe7f) Signed-off-by: Michael Tokarev diff --git a/tcg/ppc/tcg-target.c.inc b/tcg/ppc/tcg-target.c.inc index 3553a47ba9..69abd30bbb 100644 --- a/tcg/ppc/tcg-target.c.inc +++ b/tcg/ppc/tcg-target.c.inc

[Stable-9.1.2 21/58] Fix calculation of minimum in colo_compare_tcp

ommit e29bc931e1699a98959680f6776b48673825762b) Signed-off-by: Michael Tokarev diff --git a/net/colo-compare.c b/net/colo-compare.c index c4ad0ab71f..39f90c4065 100644 --- a/net/colo-compare.c +++ b/net/colo-compare.c @@ -412,8 +412,7 @@ static void colo_compare_tcp(CompareState *s, Connection *conn)

[Stable-9.0.4 14/57] tcg/ppc: Use TCG_REG_TMP2 for scratch index in prepare_host_addr

store") Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2597 Signed-off-by: Richard Henderson Tested-By: Michael Tokarev (cherry picked from commit 3213da7b9539581c6df95f8ced5b09d0b02d425f) Signed-off-by: Michael Tokarev diff --git a/tcg/ppc/tcg-target.c.inc b/tcg/ppc/tcg-target.c

[Stable-9.1.2 18/58] dockerfiles: fix default targets for debian-loongarch-cross

: <20241020213759.2168248-1-pierrick.bouv...@linaro.org> Signed-off-by: Alex Bennée Message-Id: <20241023113406.1284676-10-alex.ben...@linaro.org> (cherry picked from commit 24be5341fbeea341cca38b59d4c0928a8cf5fac1) Signed-off-by: Michael Tokarev diff --git a/tests/docker/dockerfiles/debi

[Stable-9.1.2 00/58] Patch Round-up for stable 9.1.2, freeze on 2024-11-18

1b81ac Peter Maydell: target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed) 55 37dfcba1a049 Hanna Czenczek: migration: Ensure vmstate_save() sets errp 56 9529aa6bb4d1 Klaus Jensen: hw/nvme: fix handling of over-committed queues 57 042b4ebfd229 Christian Schoenebeck: 9pfs: fix crash on 'Treaddi

qemu-devel@nongnu.org

com/qemu-project/qemu/-/issues/2326 Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2588 Signed-off-by: Peter Maydell Tested-by: Thomas Huth Reviewed-by: Richard Henderson Message-id: 20241101142845.1712482-3-peter.mayd...@linaro.org (cherry picked from commit efbe180ad2ed75d4cc64dfc6fb46

[Stable-9.0.4 51/57] hw/acpi: Fix ordering of BDF in Generic Initiator PCI Device Handle.

wed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin (cherry picked from commit 16c687d84574a1139a6475c33e3b9191f7932ac0) Signed-off-by: Michael Tokarev diff --git a/hw/acpi/acpi_generic_initiator.c b/hw/acpi/acpi_generic_initiator.c index 17b9a052f5..3d2b567999 100644 --- a/hw/acpi/acpi

[Stable-9.1.2 15/58] linux-user/riscv: Fix definition of RISCV_HWPROBE_EXT_ZVFHMIN

f80daad12cd9cf02) Signed-off-by: Michael Tokarev diff --git a/linux-user/syscall.c b/linux-user/syscall.c index 6d9ed59594..ad8e786aac 100644 --- a/linux-user/syscall.c +++ b/linux-user/syscall.c @@ -8855,7 +8855,7 @@ static int do_getdents64(abi_long dirfd, abi_long arg2, abi_long

[Stable-9.1.2 22/58] net: fix build when libbpf is disabled, but libxdp is enabled

-off-by: Jason Wang (cherry picked from commit 1f37280b37dbf85f36748f359a9f8802c8fe7ccd) Signed-off-by: Michael Tokarev diff --git a/meson.build b/meson.build index a11018b3ad..aa7ea85d0b 100644 --- a/meson.build +++ b/meson.build @@ -2123,8 +2123,14 @@ endif # libxdp libxdp = not_found if not

[Stable-9.0.4 54/57] target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)

7237c846a295a9857920) Signed-off-by: Michael Tokarev diff --git a/target/arm/tcg/vec_helper.c b/target/arm/tcg/vec_helper.c index cc7cab338c..83b49ef009 100644 --- a/target/arm/tcg/vec_helper.c +++ b/target/arm/tcg/vec_helper.c @@ -692,6 +692,13 @@ void HELPER(NAME)(void *vd, void *vn,

[Stable-9.0.4 12/57] linux-user: Fix parse_elf_properties GNU0_MAGIC check

Parse NT_GNU_PROPERTY_TYPE_0 notes") Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2596 Signed-off-by: Richard Henderson Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Michael Tokarev (cherry picked from commit 2884596f5f385b5712c356310dd4125a089888a8) Signed-off-by: Michael Toka

[Stable-9.0.4 47/57] target/riscv: Fix vcompress with rvv_ta_all_1s

Reviewed-by: Daniel Henrique Barboza Reviewed-by: Alistair Francis Message-ID: <20241030043538.939712-1-ant...@tenstorrent.com> Signed-off-by: Alistair Francis (cherry picked from commit c128d39edeff337220fc536a3e935bcba01ecb49) Signed-off-by: Michael Tokarev diff --git a/target/riscv/vector_he

[Stable-9.1.2 12/58] target/i386: Use probe_access_full_mmu in ptw_translate

hieu-Daudé Reviewed-by: Alex Bennée Signed-off-by: Richard Henderson Message-ID: <20241013184733.1423747-3-richard.hender...@linaro.org> (cherry picked from commit 115ade42d50144c15b74368d32dc734ea277d853) Signed-off-by: Michael Tokarev diff --git a/target/i386/tcg/sysemu/excp_helper.c b

[Stable-9.0.4 25/57] tests/qemu-iotests/211.out: Update to expect MapEntry 'compressed' field

naro.org> Reviewed-by: Kevin Wolf Signed-off-by: Kevin Wolf (cherry picked from commit d60bd080e783107cb876a6f16561fe03f9dcbca7) Signed-off-by: Michael Tokarev diff --git a/tests/qemu-iotests/211.out b/tests/qemu-iotests/211.out index f02c75409c..ff9f9a6913 100644 --- a/tests/qemu-iotests/2

[Stable-9.1.2 19/58] plugins: fix qemu_plugin_reset

tails from commit msg] Signed-off-by: Alex Bennée Message-Id: <20241023113406.1284676-19-alex.ben...@linaro.org> (cherry picked from commit b56f7dd203c301231d3bb2d071b4e32b345f49d6) Signed-off-by: Michael Tokarev diff --git a/accel/tcg/plugin-gen.c b/accel/tcg/plugin-gen.c index ec89a0

[Stable-9.0.4 37/57] net: fix build when libbpf is disabled, but libxdp is enabled

-off-by: Jason Wang (cherry picked from commit 1f37280b37dbf85f36748f359a9f8802c8fe7ccd) Signed-off-by: Michael Tokarev diff --git a/meson.build b/meson.build index 7a56772136..5cfd7bb2cc 100644 --- a/meson.build +++ b/meson.build @@ -2033,8 +2033,14 @@ endif # libxdp libxdp = not_found if not

[Stable-9.0.4 41/57] target/riscv: Correct SXL return value for RV32 in RV64 QEMU

9055048.562-4-zhiwei_...@linux.alibaba.com> Signed-off-by: Alistair Francis (cherry picked from commit 929e4277c128772bad41cc795995f754cb9991af) Signed-off-by: Michael Tokarev diff --git a/target/riscv/cpu.h b/target/riscv/cpu.h index 52fb8c15d0..9d1d2778ca 100644 --- a/target/riscv/cpu.h ++

[Stable-9.0.4 29/57] target/i386: Use probe_access_full_mmu in ptw_translate

hieu-Daudé Reviewed-by: Alex Bennée Signed-off-by: Richard Henderson Message-ID: <20241013184733.1423747-3-richard.hender...@linaro.org> (cherry picked from commit 115ade42d50144c15b74368d32dc734ea277d853) Signed-off-by: Michael Tokarev diff --git a/target/i386/tcg/sysemu/excp_helper.c b

[Stable-9.0.4 30/57] linux-user: Emulate /proc/self/maps under mmap_lock

74c94aa94a145628) Signed-off-by: Michael Tokarev (Mjt: context fix in linux-user/syscall.c due to missing v9.0.0-421-g59272469bd13 "user: Use get_task_state() helper") diff --git a/linux-user/syscall.c b/linux-user/syscall.c index 2edbd1ef15..caa91c3b1d 100644 --- a/linux-user/

[Stable-9.0.4 43/57] target/riscv: Set vtype.vill on CPU reset

pike which sets vtype.vill on reset. Signed-off-by: Rob Bradford Reviewed-by: Daniel Henrique Barboza Message-ID: <20240930165258.72258-1-rbradf...@rivosinc.com> Signed-off-by: Alistair Francis (cherry picked from commit f8c1f36a2e3dab4935e7c5690e578ac71765766b) Signed-off-by: Michael Tokare

[Stable-9.0.4 39/57] target/arm: Don't assert in regime_is_user() for E10 mmuidx values

x Bennée Tested-by: Alex Bennée Message-id: 20241017172331.822587-1-peter.mayd...@linaro.org (cherry picked from commit 1505b651fdbd9af59a4a90876a62ae7ea2d4cd39) Signed-off-by: Michael Tokarev diff --git a/target/arm/internals.h b/target/arm/internals.h index 315591ae79..389fbab3ed 100644 ---

[Stable-9.0.4 20/57] ui/dbus: fix filtering all update messages

ed-off-by: Marc-André Lureau Reviewed-by: Akihiko Odaki Message-ID: <20241008125028.1177932-6-marcandre.lur...@redhat.com> (cherry picked from commit cf59889781297a5618f1735a5f31402caa806b42) Signed-off-by: Michael Tokarev diff --git a/ui/dbus-listener.c b/ui/dbus-listener.c index 83140f60

[Stable-9.0.4 55/57] migration: Ensure vmstate_save() sets errp

appens e.g. when receiving the state from a virtio-fs back-end (virtiofsd) fails. Signed-off-by: Hanna Czenczek Link: https://lore.kernel.org/r/20241015170437.310358-1-hre...@redhat.com Signed-off-by: Peter Xu (cherry picked from commit 37dfcba1a04989830c706f9cbc00450e5d3a7447) Signed-off-by: M

[Stable-9.0.4 35/57] dockerfiles: fix default targets for debian-loongarch-cross

: <20241020213759.2168248-1-pierrick.bouv...@linaro.org> Signed-off-by: Alex Bennée Message-Id: <20241023113406.1284676-10-alex.ben...@linaro.org> (cherry picked from commit 24be5341fbeea341cca38b59d4c0928a8cf5fac1) Signed-off-by: Michael Tokarev diff --git a/tests/docker/dockerfiles/debi

[Stable-9.0.4 36/57] Fix calculation of minimum in colo_compare_tcp

ommit e29bc931e1699a98959680f6776b48673825762b) Signed-off-by: Michael Tokarev diff --git a/net/colo-compare.c b/net/colo-compare.c index c4ad0ab71f..39f90c4065 100644 --- a/net/colo-compare.c +++ b/net/colo-compare.c @@ -412,8 +412,7 @@ static void colo_compare_tcp(CompareState *s, Connection *conn)

[Stable-9.0.4 19/57] ui/win32: fix potential use-after-free with dbus shared memory

177932-5-marcandre.lur...@redhat.com> (cherry picked from commit 330ef31deb2e5461cff907488b710f5bd9cd2327) Signed-off-by: Michael Tokarev diff --git a/hw/display/virtio-gpu.c b/hw/display/virtio-gpu.c index d60b1b2973..b0b64c1dc5 100644 --- a/hw/display/virtio-gpu.c +++ b/hw/display/virtio-gpu.c

[Stable-9.0.4 24/57] Revert "hw/sh4/r2d: Realize IDE controller before accessing it"

(cherry picked from commit 68ad89b75ad2bb5f38abea815a50ec17a142565a) Signed-off-by: Michael Tokarev diff --git a/hw/sh4/r2d.c b/hw/sh4/r2d.c index e5ac6751bd..7eecd79fcc 100644 --- a/hw/sh4/r2d.c +++ b/hw/sh4/r2d.c @@ -286,9 +286,9 @@ static void r2d_init(MachineState *machine) dinfo = drive_get(IF_IDE, 0, 0);

[Stable-9.0.4 49/57] target/ppc: Fix mtDPDES targeting SMT siblings

: Philippe Mathieu-Daudé Reviewed-by: Richard Henderson Signed-off-by: Nicholas Piggin (cherry picked from commit 0324d236d2918c18a9ad4a1081b1083965a1433b) Signed-off-by: Michael Tokarev diff --git a/target/ppc/misc_helper.c b/target/ppc/misc_helper.c index 58e808dc96..45ab8e4416 100644 --- a/

[Stable-9.0.4 40/57] target/riscv/csr.c: Fix an access to VXSAT

Signed-off-by: Alistair Francis (cherry picked from commit 5a60026cad4e9dba929cab4f63229e4b9110cf0a) Signed-off-by: Michael Tokarev diff --git a/target/riscv/csr.c b/target/riscv/csr.c index 829d8346ed..c31b3121f1 100644 --- a/target/riscv/csr.c +++ b/target/riscv/csr.c @@ -708,7 +708,7 @@

[Stable-9.0.4 32/57] linux-user/riscv: Fix definition of RISCV_HWPROBE_EXT_ZVFHMIN

f80daad12cd9cf02) Signed-off-by: Michael Tokarev diff --git a/linux-user/syscall.c b/linux-user/syscall.c index caa91c3b1d..8b29b07e47 100644 --- a/linux-user/syscall.c +++ b/linux-user/syscall.c @@ -8855,7 +8855,7 @@ static int do_getdents64(abi_long dirfd, abi_long arg2, abi_long

[Stable-9.0.4 42/57] hw/intc: Don't clear pending bits on IRQ lowering

ed-off-by: Alistair Francis (cherry picked from commit a84be2baa9eca8bc500f866ad943b8f63dc99adf) Signed-off-by: Michael Tokarev diff --git a/hw/intc/sifive_plic.c b/hw/intc/sifive_plic.c index e559f11805..ca4c2de494 100644 --- a/hw/intc/sifive_plic.c +++ b/hw/intc/sifive_plic.c @@ -349,8 +

[Stable-9.0.4 03/57] tcg: Fix iteration step in 32-bit gvec operation

commit 9d8d5a5b9078a16b4c0862fe54248c5cc8435648) Signed-off-by: Michael Tokarev diff --git a/tcg/tcg-op-gvec.c b/tcg/tcg-op-gvec.c index bb88943f79..566fd6eef7 100644 --- a/tcg/tcg-op-gvec.c +++ b/tcg/tcg-op-gvec.c @@ -3925,7 +3925,7 @@ void tcg_gen_gvec_cmps(TCGCond cond, unsigned vece, uint32_

  1   2   3   4   5   6   7   8   9   10   >