Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: 2251f9ac9261cda05b6b19e9ba329b15d9d89bae
      
https://github.com/qemu/qemu/commit/2251f9ac9261cda05b6b19e9ba329b15d9d89bae
  Author: Fabiano Rosas <faro...@suse.de>
  Date:   2025-07-22 (Tue, 22 Jul 2025)

  Changed paths:
    M migration/migration-hmp-cmds.c

  Log Message:
  -----------
  migration: HMP: Fix possible out-of-bounds access

Coverity has caught a bug in the formatting of time intervals for
postcopy latency distribution display in 'info migrate'.

While bounds checking the labels array, sizeof is incorrectly being
used. ARRAY_SIZE is the correct form of obtaining the size of an
array.

Fixes: 3345fb3b6d ("migration/postcopy: Add latency distribution report for 
blocktime")
Resolves: Coverity CID 1612248
Suggested-by: Peter Maydell <peter.mayd...@linaro.org>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Link: https://lore.kernel.org/qemu-devel/20250716182648.30202-2-faro...@suse.de
Signed-off-by: Fabiano Rosas <faro...@suse.de>


  Commit: fd1514cbd97bcad5b3dc5d002cab6fee4d7cd45e
      
https://github.com/qemu/qemu/commit/fd1514cbd97bcad5b3dc5d002cab6fee4d7cd45e
  Author: Fabiano Rosas <faro...@suse.de>
  Date:   2025-07-22 (Tue, 22 Jul 2025)

  Changed paths:
    M migration/migration-hmp-cmds.c

  Log Message:
  -----------
  migration: HMP: Fix postcopy latency distribution label

Fix the loop condition to avoid having a label with "1000 us" instead
of "1 ms".

Reported-by: Prasad Pandit <ppan...@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Link: https://lore.kernel.org/qemu-devel/20250716182648.30202-3-faro...@suse.de
Signed-off-by: Fabiano Rosas <faro...@suse.de>


  Commit: eaec556bc88cc1196f7bbf23d5de311aac1d812f
      
https://github.com/qemu/qemu/commit/eaec556bc88cc1196f7bbf23d5de311aac1d812f
  Author: Daniel P. Berrangé <berra...@redhat.com>
  Date:   2025-07-22 (Tue, 22 Jul 2025)

  Changed paths:
    M migration/migration-hmp-cmds.c

  Log Message:
  -----------
  migration: show error message when postcopy fails

The 'info migrate' command only shows the error message when the
migration state is 'failed'. When postcopy is used, however,
the 'postcopy-paused' state is used instead of 'failed', so we
must show the error message there too.

Signed-off-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: Fabiano Rosas <faro...@suse.de>
Link: 
https://lore.kernel.org/qemu-devel/20250721133913.2914669-1-berra...@redhat.com
[line break to satisfy checkpatch]
Signed-off-by: Fabiano Rosas <faro...@suse.de>


  Commit: 24ad5e19952b326796c8a3a1595c57ff180dab84
      
https://github.com/qemu/qemu/commit/24ad5e19952b326796c8a3a1595c57ff180dab84
  Author: Daniel P. Berrangé <berra...@redhat.com>
  Date:   2025-07-22 (Tue, 22 Jul 2025)

  Changed paths:
    M crypto/tlssession.c
    M include/crypto/tlssession.h
    M meson.build
    M meson_options.txt
    M scripts/meson-buildoptions.sh

  Log Message:
  -----------
  crypto: implement workaround for GNUTLS thread safety problems

When TLS 1.3 is negotiated on a TLS session, GNUTLS will perform
automatic rekeying of the session after 16 million records. This
is done for all algorithms except CHACHA20_POLY1305 which does
not require rekeying.

Unfortunately the rekeying breaks GNUTLS' promise that it is safe
to use a gnutls_session_t object concurrently from multiple threads
if they are exclusively calling gnutls_record_send/recv.

This patch implements a workaround for QEMU that adds a mutex lock
around any gnutls_record_send/recv call to serialize execution
within GNUTLS code. When GNUTLS calls into the push/pull functions
we can release the lock so the OS level I/O calls can at least
have some parallelism.

The big downside of this is that the actual encryption/decryption
code is fully serialized, which will halve performance of that
cipher operations if two threads are contending.

The workaround is not enabled by default, since most use of GNUTLS
in QEMU does not tickle the problem, only non-multifd migration
with a return path open is affected. Fortunately the migration
code also won't trigger the halving of performance, since only
the outbound channel diretion needs to sustain high data rates,
the inbound direction is low volume.

Signed-off-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: Fabiano Rosas <faro...@suse.de>
Link: 
https://lore.kernel.org/qemu-devel/20250718150514.2635338-2-berra...@redhat.com
[add stub for qcrypto_tls_session_require_thread_safety; fix unused var]
Signed-off-by: Fabiano Rosas <faro...@suse.de>


  Commit: edea818371bd7179b55f38d3b113d342251d8f9b
      
https://github.com/qemu/qemu/commit/edea818371bd7179b55f38d3b113d342251d8f9b
  Author: Daniel P. Berrangé <berra...@redhat.com>
  Date:   2025-07-22 (Tue, 22 Jul 2025)

  Changed paths:
    M include/io/channel.h
    M io/channel-tls.c

  Log Message:
  -----------
  io: add support for activating TLS thread safety workaround

Add a QIO_CHANNEL_FEATURE_CONCURRENT_IO feature flag.

If this is set on a QIOChannelTLS session object, the TLS
session will be marked as requiring thread safety, which
will activate the workaround for GNUTLS bug 1717 if needed.

Signed-off-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: Fabiano Rosas <faro...@suse.de>
Link: 
https://lore.kernel.org/qemu-devel/20250718150514.2635338-3-berra...@redhat.com
Signed-off-by: Fabiano Rosas <faro...@suse.de>


  Commit: eb3618e9e259ef93f5a1a76867fbccae540fcd61
      
https://github.com/qemu/qemu/commit/eb3618e9e259ef93f5a1a76867fbccae540fcd61
  Author: Daniel P. Berrangé <berra...@redhat.com>
  Date:   2025-07-22 (Tue, 22 Jul 2025)

  Changed paths:
    M migration/tls.c

  Log Message:
  -----------
  migration: activate TLS thread safety workaround

When either the postcopy or return path capabilities are
enabled, the migration code will use the primary channel
for bidirectional I/O.

If either of those capabilities are enabled, the migration
code needs to mark the channel as expecting concurrent I/O
in order to activate the thread safety workarounds for
GNUTLS bug 1717

Closes: https://gitlab.com/qemu-project/qemu/-/issues/1937
Signed-off-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: Fabiano Rosas <faro...@suse.de>
Link: 
https://lore.kernel.org/qemu-devel/20250718150514.2635338-4-berra...@redhat.com
Signed-off-by: Fabiano Rosas <faro...@suse.de>


  Commit: 0db6f798024ea6f57ecf2020209b761b50a01d71
      
https://github.com/qemu/qemu/commit/0db6f798024ea6f57ecf2020209b761b50a01d71
  Author: Daniel P. Berrangé <berra...@redhat.com>
  Date:   2025-07-22 (Tue, 22 Jul 2025)

  Changed paths:
    M crypto/tlssession.c
    M crypto/trace-events

  Log Message:
  -----------
  crypto: add tracing & warning about GNUTLS countermeasures

We want some visibility on stderr when the GNUTLS thread
safety countermeasures are activated, to encourage people
to get the real fix deployed (once it exists). Some trace
points will also help if we see any further wierd crash
scenario we've not anticipated.

Reviewed-by: Daniel P. Berrangé <berra...@redhat.com>
Signed-off-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: Fabiano Rosas <faro...@suse.de>
Link: 
https://lore.kernel.org/qemu-devel/20250718150514.2635338-5-berra...@redhat.com
[add missing include]
Signed-off-by: Fabiano Rosas <faro...@suse.de>


  Commit: c4103b27973653a7a9f64244de8fb5243e4397c5
      
https://github.com/qemu/qemu/commit/c4103b27973653a7a9f64244de8fb5243e4397c5
  Author: Harsh Prateek Bora <hars...@linux.ibm.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: Adding myself as a co-maintainer for ppc/spapr

Have been contributing in ppc/spapr and related areas for quite some
time as a contributor and reviewer. I think its time to step up as a
co-maintainer to help with maintainer activities.

Signed-off-by: Harsh Prateek Bora <hars...@linux.ibm.com>
Reviewed-by: Cédric Le Goater <c...@redhat.com>
Link: 
https://lore.kernel.org/qemu-devel/20250724100623.3071131-2-hars...@linux.ibm.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 1da3e7f863d65bb850a7662c6b8dfba623ac7cb7
      
https://github.com/qemu/qemu/commit/1da3e7f863d65bb850a7662c6b8dfba623ac7cb7
  Author: Harsh Prateek Bora <hars...@linux.ibm.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: Adding myself as reviewer for PPC KVM cpus.

Have been contributing in ppc/spapr from tcg/kvm perspective, stepping
up to help with patch reviews and get notified of incoming changes.

Signed-off-by: Harsh Prateek Bora <hars...@linux.ibm.com>
Reviewed-by: Cédric Le Goater <c...@redhat.com>
Link: 
https://lore.kernel.org/qemu-devel/20250724100623.3071131-3-hars...@linux.ibm.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 884216cf419bb56664e3a8e7c0ce19d180fe2b24
      
https://github.com/qemu/qemu/commit/884216cf419bb56664e3a8e7c0ce19d180fe2b24
  Author: Chinmay Rath <ra...@linux.ibm.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: Add myself as reviewer for PowerPC TCG CPUs

I have been working on Power ISA for a long time now and have mostly
contributed in TCG instruction translation area (moved 300+ instructions to
decodetree as of yet) and would like to continue contributing to PPC TCG in
best possible ways I can. I think it's time to step up and assist in reviewing
related patches to enable myself contribute more effectively in this direction.

Signed-off-by: Chinmay Rath <ra...@linux.ibm.com>
Reviewed-by: Cédric Le Goater <c...@redhat.com>
Signed-off-by: Harsh Prateek Bora <hars...@linux.ibm.com>
Link: 
https://lore.kernel.org/qemu-devel/20250724100623.3071131-4-hars...@linux.ibm.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 01286ee41ea3fc030a171dc5813945370f18955b
      
https://github.com/qemu/qemu/commit/01286ee41ea3fc030a171dc5813945370f18955b
  Author: Aditya Gupta <adit...@linux.ibm.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: Add myself as a reviewer of PowerNV emulation

Proposing myself as a reviewer in the PowerNV emulation in QEMU

Have been working on PowerNV QEMU for sometime, with contributions in
Power11, MPIPL and minor fixes and things such as dtb support

Cc: Cédric Le Goater <c...@kaod.org>
Cc: Frédéric Barrat <fbar...@linux.ibm.com>
Cc: Mahesh J Salgaonkar <mah...@linux.ibm.com>
Cc: Madhavan Srinivasan <ma...@linux.ibm.com>
Cc: Nicholas Piggin <npig...@gmail.com>
Signed-off-by: Aditya Gupta <adit...@linux.ibm.com>
Signed-off-by: Harsh Prateek Bora <hars...@linux.ibm.com>
Reviewed-by: Cédric Le Goater <c...@redhat.com>
Link: 
https://lore.kernel.org/qemu-devel/20250724100623.3071131-5-hars...@linux.ibm.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 076b4306f9b6743059592e9632b149ac7708fa40
      
https://github.com/qemu/qemu/commit/076b4306f9b6743059592e9632b149ac7708fa40
  Author: Gautam Menghani <gau...@linux.ibm.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: Add myself as a reviewer for XIVE

Proposing myself as a reviewer for XIVE on PPC.

I have been looking at XIVE in context of KVM internally at IBM for some time
in addition to testing a few XIVE upstream patches; and I'll be closely looking
at XIVE going forward.

Signed-off-by: Gautam Menghani <gau...@linux.ibm.com>
Signed-off-by: Harsh Prateek Bora <hars...@linux.ibm.com>
Reviewed-by: Cédric Le Goater <c...@redhat.com>
Link: 
https://lore.kernel.org/qemu-devel/20250724100623.3071131-6-hars...@linux.ibm.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: cf8f0f006d380d50ef10ab77a4673e83eb19006c
      
https://github.com/qemu/qemu/commit/cf8f0f006d380d50ef10ab77a4673e83eb19006c
  Author: Cédric Le Goater <c...@redhat.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: Remove Frédéric as reviewer

Frédéric has moved to other tasks within IBM and no longer does QEMU
development.

Cc: Frédéric Barrat <fbar...@linux.ibm.com>
Acked-by: Frédéric Barrat <fbar...@linux.ibm.com>
Reviewed-by: Daniel Henrique Barboza <danielhb...@gmail.com>
Link: https://lore.kernel.org/qemu-devel/20250724075916.1593420-1-...@redhat.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 0fb961e392e2055adc5429236989b01bb763f12c
      
https://github.com/qemu/qemu/commit/0fb961e392e2055adc5429236989b01bb763f12c
  Author: Daniel Henrique Barboza <danielhb...@gmail.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: remove myself as ppc maintainer/reviewer

It has been awhile since I actively did anything for qemu-ppc aside from
reading the qemu-ppc inbox a couple of times each month. It's not enough
to justify a reviewer role, let alone being a maintainer.

Given that we're doing qemu-ppc maintainership changes across the board
I'll take the opportunity and remove myself from the premises too. Feel
free to reach out with questions about code I did in the past, but at
this moment I'm no longer able to keep up with qemu-ppc activities.

Signed-off-by: Daniel Henrique Barboza <danielhb...@gmail.com>
Reviewed-by: Cédric Le Goater <c...@redhat.com>
Link: 
https://lore.kernel.org/qemu-devel/20250724123416.3115941-1-danielhb...@gmail.com
[ clg: Adjusted context ]
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 012842c075520dbe1bd96a2fdcf4e218874ba443
      
https://github.com/qemu/qemu/commit/012842c075520dbe1bd96a2fdcf4e218874ba443
  Author: Daniel P. Berrangé <berra...@redhat.com>
  Date:   2025-07-24 (Thu, 24 Jul 2025)

  Changed paths:
    M scripts/tracetool/backend/log.py
    M util/log.c

  Log Message:
  -----------
  log: make '-msg timestamp=on' apply to all qemu_log usage

Currently the tracing 'log' back emits special code to add timestamps
to trace points sent via qemu_log(). This current impl is a bad design
for a number of reasons.

 * It changes the QEMU headers, such that 'error-report.h' content
   is visible to all files using tracing, but only when the 'log'
   backend is enabled. This has led to build failure bugs as devs
   rarely test without the (default) 'log' backend enabled, and
   CI can't cover every scenario for every trace backend.

 * It bloats the trace points definitions which are inlined into
   every probe location due to repeated inlining of timestamp
   formatting code, adding MBs of overhead to QEMU.

 * The tracing subsystem should not be treated any differently
   from other users of qemu_log. They all would benefit from
   having timestamps present.

 * The timestamp emitted with the tracepoints is in a needlessly
   different format to that used by error_report() in response
   to '-msg timestamp=on'.

This fixes all these issues simply by moving timestamp formatting
into qemu_log, using the same approach as for error_report.

The code before:

  static inline void _nocheck__trace_qcrypto_tls_creds_get_path(void * creds, 
const char * filename, const char * path)
  {
      if (trace_event_get_state(TRACE_QCRYPTO_TLS_CREDS_GET_PATH) && 
qemu_loglevel_mask(LOG_TRACE)) {
          if (message_with_timestamp) {
              struct timeval _now;
              gettimeofday(&_now, NULL);
              qemu_log("%d@%zu.%06zu:qcrypto_tls_creds_get_path " "TLS creds 
path creds=%p filename=%s path=%s" "\n",
                       qemu_get_thread_id(),
                       (size_t)_now.tv_sec, (size_t)_now.tv_usec
                       , creds, filename, path);
          } else {
              qemu_log("qcrypto_tls_creds_get_path " "TLS creds path creds=%p 
filename=%s path=%s" "\n", creds, filename, path);
          }
      }
  }

and after:

  static inline void _nocheck__trace_qcrypto_tls_creds_get_path(void * creds, 
const char * filename, const char * path)
  {
      if (trace_event_get_state(TRACE_QCRYPTO_TLS_CREDS_GET_PATH) && 
qemu_loglevel_mask(LOG_TRACE)) {
          qemu_log("qcrypto_tls_creds_get_path " "TLS creds path creds=%p 
filename=%s path=%s" "\n", creds, filename, path);
      }
  }

The log and error messages before:

  $ qemu-system-x86_64 -trace qcrypto* -object 
tls-creds-x509,id=tls0,dir=$HOME/tls -msg timestamp=on
  2986097@1753122905.917608:qcrypto_tls_creds_x509_load TLS creds x509 load 
creds=0x55d925bd9490 dir=/var/home/berrange/tls
  2986097@1753122905.917621:qcrypto_tls_creds_get_path TLS creds path 
creds=0x55d925bd9490 filename=ca-cert.pem path=<none>
  2025-07-21T18:35:05.917626Z qemu-system-x86_64: Unable to access credentials 
/var/home/berrange/tls/ca-cert.pem: No such file or directory

and after:

  $ qemu-system-x86_64 -trace qcrypto* -object 
tls-creds-x509,id=tls0,dir=$HOME/tls -msg timestamp=on
  2025-07-21T18:43:28.089797Z qcrypto_tls_creds_x509_load TLS creds x509 load 
creds=0x55bf5bf12380 dir=/var/home/berrange/tls
  2025-07-21T18:43:28.089815Z qcrypto_tls_creds_get_path TLS creds path 
creds=0x55bf5bf12380 filename=ca-cert.pem path=<none>
  2025-07-21T18:43:28.089819Z qemu-system-x86_64: Unable to access credentials 
/var/home/berrange/tls/ca-cert.pem: No such file or directory

The binary size before:

  $ ls -alh qemu-system-x86_64
  -rwxr-xr-x. 1 berrange berrange 87M Jul 21 19:39 qemu-system-x86_64
  $ strip qemu-system-x86_64
  $ ls -alh qemu-system-x86_64
  -rwxr-xr-x. 1 berrange berrange 30M Jul 21 19:39 qemu-system-x86_64

and after:

  $ ls -alh qemu-system-x86_64
  -rwxr-xr-x. 1 berrange berrange 85M Jul 21 19:41 qemu-system-x86_64
  $ strip qemu-system-x86_64
  $ ls -alh qemu-system-x86_64
  -rwxr-xr-x. 1 berrange berrange 29M Jul 21 19:41 qemu-system-x86_64

Signed-off-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: Markus Armbruster <arm...@redhat.com>
Reviewed-by: Vladimir Sementsov-Ogievskiy <vsement...@yandex-team.ru>
Message-id: 20250721185452.3016488-1-berra...@redhat.com
Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


  Commit: 0e171b427b1d2f68d76a2b7cae987432c10ca8aa
      
https://github.com/qemu/qemu/commit/0e171b427b1d2f68d76a2b7cae987432c10ca8aa
  Author: Richard Henderson <richard.hender...@linaro.org>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M target/arm/tcg/helper-sme.h
    M target/arm/tcg/helper-sve.h
    M target/arm/tcg/sme_helper.c
    M target/arm/tcg/sve_helper.c
    M target/arm/tcg/translate-a64.h
    M target/arm/tcg/translate-sme.c
    M target/arm/tcg/translate-sve.c

  Log Message:
  -----------
  target/arm: Expand the descriptor for SME/SVE memory ops to i64

We have run out of room attempting to pack both the gvec
descriptor and the mte descriptor into 32 bits.
Here, change nothing except the parameter type, which
affects all declarations, the function typedefs, and the
type used with tcg expansion.

Signed-off-by: Richard Henderson <richard.hender...@linaro.org>
Reviewed-by: Peter Maydell <peter.mayd...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
Message-id: 20250723165458.3509150-2-peter.mayd...@linaro.org


  Commit: aba39946baaf5ca73aae0b79e2cd0790ddafe291
      
https://github.com/qemu/qemu/commit/aba39946baaf5ca73aae0b79e2cd0790ddafe291
  Author: Richard Henderson <richard.hender...@linaro.org>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M target/arm/internals.h
    M target/arm/tcg/sme_helper.c
    M target/arm/tcg/sve_helper.c
    M target/arm/tcg/translate-sve.c

  Log Message:
  -----------
  target/arm: Pack mtedesc into upper 32 bits of descriptor

Instead of trying to pack mtedesc into the upper 17 bits of a 32-bit
gvec descriptor, pass the gvec descriptor in the lower 32 bits and
the mte descriptor in the upper 32 bits of a 64-bit operand.

This fixes two bugs:
 (1) in gen_sve_ldr() and gen_sve_str() call gen_mte_checkN() with a
 length value which is the SVE vector length and can be up to 256
 bytes. We don't assert there that it fits in the descriptor, so
 we would just fail to do the MTE checks on the right length of memory
 if the VL is more than 32 bytes

 (2) the new-in-SVE2p1 insns LD3Q, LD4Q, ST3Q, ST4Q also involve
 transfers of more than 32 bytes of memory. In this case we would
 assert at translate time.

(Note for potential backporting: this commit depends on the previous
"target/arm: Expand the descriptor for SME/SVE memory ops to i64".)

Fixes: 7b1613a1020d2942 ("target/arm: Enable FEAT_SME2p1 on -cpu max")
Signed-off-by: Richard Henderson <richard.hender...@linaro.org>
Reviewed-by: Peter Maydell <peter.mayd...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
Message-id: 20250723165458.3509150-3-peter.mayd...@linaro.org
[PMM: expand commit message to clarify that we are fixing bugs here]
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>


  Commit: b79f944e09657f63b6dd6e78ac7966fdc7a3e6d1
      
https://github.com/qemu/qemu/commit/b79f944e09657f63b6dd6e78ac7966fdc7a3e6d1
  Author: Richard Henderson <richard.hender...@linaro.org>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M scripts/decodetree.py
    M tests/decode/meson.build
    A tests/decode/succ_infer1.decode

  Log Message:
  -----------
  decodetree: Infer argument set before inferring format

Failure to confirm an argument set first may result in
the selection of a format which leaves extra arguments
to be filled in by the pattern.

Signed-off-by: Richard Henderson <richard.hender...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Reviewed-by: Peter Maydell <peter.mayd...@linaro.org>
Tested-by: Peter Maydell <peter.mayd...@linaro.org>
Message-id: 20250723165458.3509150-4-peter.mayd...@linaro.org
Message-id: 20250722183343.273533-1-richard.hender...@linaro.org
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Reviewed-by: Peter Maydell <peter.mayd...@linaro.org>
Tested-by: Peter Maydell <peter.mayd...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>


  Commit: 1c6aae5efbd28ac35003dea341364cd63a4515a1
      
https://github.com/qemu/qemu/commit/1c6aae5efbd28ac35003dea341364cd63a4515a1
  Author: Peter Maydell <peter.mayd...@linaro.org>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M target/arm/tcg/sve.decode
    M target/arm/tcg/translate-sve.c

  Log Message:
  -----------
  target/arm: LD1Q, ST1Q are vector + scalar, not scalar + vector

Unlike the "LD1D (scalar + vector)" etc instructions, LD1Q is
vector + scalar. This means that:
 * the vector and the scalar register are in opposite fields
   in the encoding
 * 31 in the scalar register field is XZR, not XSP

The same applies for ST1Q.

This means we can't reuse the trans_LD1_zprz() and trans_ST1_zprz()
functions for LD1Q and ST1Q. Split them out to use their own
trans functions.

Note that the change made here to sve.decode requires the decodetree
bugfix "decodetree: Infer argument set before inferring format" to
avoid a spurious compile-time error about "dtype".

Fixes: d2aa9a804ee678f ("target/arm: Implement LD1Q, ST1Q for SVE2p1")
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Message-id: 20250723165458.3509150-5-peter.mayd...@linaro.org


  Commit: 4726be1c69606e34c3cc4c26e39e252a9856b3d3
      
https://github.com/qemu/qemu/commit/4726be1c69606e34c3cc4c26e39e252a9856b3d3
  Author: Peter Maydell <peter.mayd...@linaro.org>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M target/arm/tcg/sve_helper.c

  Log Message:
  -----------
  target/arm: Pass correct esize to sve_st1_z() for LD1Q, ST1Q

Our implementation of the helper functions for the LD1Q and ST1Q
insns reused the existing DO_LD1_ZPZ_D and DO_ST1_ZPZ_D macros.  This
passes the wrong esize (8, not 16) to sve_ldl_z().

Create new macros DO_LD1_ZPZ_Q and DO_ST1_ZPZ_Q which pass the
correct esize, and use them for the LD1Q and ST1Q helpers.

Fixes: d2aa9a804ee ("target/arm: Implement LD1Q, ST1Q for SVE2p1")
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Message-id: 20250723165458.3509150-6-peter.mayd...@linaro.org


  Commit: 7428c46c06b4365ee5131dcdcc3da218c5e99ddd
      
https://github.com/qemu/qemu/commit/7428c46c06b4365ee5131dcdcc3da218c5e99ddd
  Author: Peter Maydell <peter.mayd...@linaro.org>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M target/arm/tcg/sve_helper.c

  Log Message:
  -----------
  target/arm: Fix LD1W, LD1D to 128-bit elements

In our implementation of the SVE2p1 contiguous load to 128-bit
element insns such as LD1D (scalar plus scalar, single register), we
got the order of the arguments to the DO_LD1_2() macro wrong.  Here
the first argument is the element size and the second is the memory
size, and the element size is always the same size or larger than
the memory size.

For the 128-bit versions, we want to load either 32-bit or 64-bit
values from memory and extend them to the 128-bit vector element, but
were trying to load 128 bit values and then stuff them into 32-bit or
64-bit vector elements.  Correct the macro ordering.

Fixes: fc5f060bcb7b ("target/arm: Implement {LD1, ST1}{W, D} (128-bit element) 
for SVE2p1")
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Message-id: 20250723165458.3509150-7-peter.mayd...@linaro.org


  Commit: bd52d8bc9e01dcf68731dcdd9d2b8ebcb9fc5692
      
https://github.com/qemu/qemu/commit/bd52d8bc9e01dcf68731dcdd9d2b8ebcb9fc5692
  Author: JianChunfu <jansef.j...@hj-micro.com>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M hw/arm/smmu-common.c

  Log Message:
  -----------
  hw/arm/smmu-common: Avoid using inlined functions with external linkage

Similarly to commit 9de9fa5c ("hw/arm/smmu-common: Avoid using
inlined functions with external linkage"):

  None of our code base require / use inlined functions with external
  linkage. Some places use internal inlining in the hot path. These
  two functions are certainly not in any hot path and don't justify
  any inlining, so these are likely oversights rather than intentional.

Fixes: b8fa4c23 (hw/arm/smmu: Support nesting in the rest of commands)
Signed-off-by: JianChunfu <jansef.j...@hj-micro.com>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>


  Commit: a7aa2af13e287e11cb2d73972353bfec161803a4
      
https://github.com/qemu/qemu/commit/a7aa2af13e287e11cb2d73972353bfec161803a4
  Author: Mohamed Mediouni <moha...@unpredictable.fr>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M target/arm/hvf/hvf.c

  Log Message:
  -----------
  target/arm: hvf: stubbing reads to LORC_EL1

Linux zeroes LORC_EL1 on boot at EL2, without further interaction with FEAT_LOR 
afterwards.

Stub out LORC_EL1 accesses as FEAT_LOR is a mandatory extension on Armv8.1+.

Signed-off-by: Mohamed Mediouni <moha...@unpredictable.fr>
Reviewed-by: Peter Maydell <peter.mayd...@linaro.org>
Signed-off-by: Peter Maydell <peter.mayd...@linaro.org>


  Commit: 919c486c406a34823c6cef5438f1a13e2c79a7d5
      
https://github.com/qemu/qemu/commit/919c486c406a34823c6cef5438f1a13e2c79a7d5
  Author: Stefan Hajnoczi <stefa...@redhat.com>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M crypto/tlssession.c
    M crypto/trace-events
    M include/crypto/tlssession.h
    M include/io/channel.h
    M io/channel-tls.c
    M meson.build
    M meson_options.txt
    M migration/migration-hmp-cmds.c
    M migration/tls.c
    M scripts/meson-buildoptions.sh

  Log Message:
  -----------
  Merge tag 'migration-20250722-pull-request' of 
https://gitlab.com/farosas/qemu into staging

Migration pull request

- Fixes to postcopy blocktime latency display code
- Fix to QMP error message (not)shown when postcopy fails
- Workaround to a GNUTLS bug that crashes QEMU

# -----BEGIN PGP SIGNATURE-----
#
# iQJEBAABCAAuFiEEqhtIsKIjJqWkw2TPx5jcdBvsMZ0FAmiAG1wQHGZhcm9zYXNA
# c3VzZS5kZQAKCRDHmNx0G+wxnR0xEACZMIqnVIFUu57V5gJ8v/4IJv70n6jrjtzJ
# 5/TzdAAY9bKJE5y84axovZy4iHijbZnGz+kVKr5Wai9KKb41tW0liWAe5RART2TE
# VuRBgxXODCmg3US6w0niy9cR3NH7WXbEQ5gyexC7D3/1R1ahpqOragZQxzvtA+3e
# aKe2pqRyQODHU9D1tnKexeFNJM6dGBVd9FVsYAHDfhx0Bk1vcpVXVrAJcfaSY2Y5
# +4/g7CXOJCUFBrFbVxYFU9muU8JrMvWv8lU4nG2ztDhmSH7Uy/DVCfEUa9/jEjDa
# 1BwZbOIIFMJy0P/G3toK6Z9lJEVfiUXaboNtqgSK5ZM8ZL1L1yHKQi631Qny/Wuf
# pzJWR1nOSL2f/bsueWj2OmZKl3FpXcaDWisZuDeS3wXWrtPRuJEXi6f//6JcYd2i
# Zm0kVRNf3CbXGnJxwDrsbh0hr5sN+bonaI+N4hHGxDCqUHhND4p0JMaPMte+PF4u
# pOooaRKq2a6KRZFyDPjyBgESXfDJ0Tdw5IeOKbFPskOEIpBVxyc3mpwu8Kz45qoV
# 8b2GYCKBjWLpqfTPwUcJd5MNVDO1ZUyqOPuarHNADth6pJglnWyFI/TIBoARzAKB
# EzS4dQ+DKM/Jz5cM++0dMPL75/1i2q2x7BBhCBBm9yeZDqDIKeT07yl8JGL/OCq9
# 7gNGfyze5w==
# =DGn2
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue 22 Jul 2025 19:14:36 EDT
# gpg:                using RSA key AA1B48B0A22326A5A4C364CFC798DC741BEC319D
# gpg:                issuer "faro...@suse.de"
# gpg: Good signature from "Fabiano Rosas <faro...@suse.de>" [unknown]
# gpg:                 aka "Fabiano Almeida Rosas <fabiano.ro...@suse.com>" 
[unknown]
# gpg: WARNING: The key's User ID is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: AA1B 48B0 A223 26A5 A4C3  64CF C798 DC74 1BEC 319D

* tag 'migration-20250722-pull-request' of https://gitlab.com/farosas/qemu:
  crypto: add tracing & warning about GNUTLS countermeasures
  migration: activate TLS thread safety workaround
  io: add support for activating TLS thread safety workaround
  crypto: implement workaround for GNUTLS thread safety problems
  migration: show error message when postcopy fails
  migration: HMP: Fix postcopy latency distribution label
  migration: HMP: Fix possible out-of-bounds access

Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


  Commit: 92ac518223c73484c89236ae26afb56f00a4bc15
      
https://github.com/qemu/qemu/commit/92ac518223c73484c89236ae26afb56f00a4bc15
  Author: Stefan Hajnoczi <stefa...@redhat.com>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  Merge tag 'pull-ppc-20250724' of https://github.com/legoater/qemu into staging

ppc queue:

* Update maintainers

# -----BEGIN PGP SIGNATURE-----
#
# iQIzBAABCAAdFiEEoPZlSPBIlev+awtgUaNDx8/77KEFAmiCMyUACgkQUaNDx8/7
# 7KEfqhAAvyOcR8r2bFfbLcOXWnHLgh+zjO5WlJpofMdktKK+AkzDK3oRZJHi8KtH
# Xu+F68F2Qt2AFZC7K4ddI/6hT+ki78yTUCSCVr73YTa+R94iHlOIWn/8CaQJjNjU
# FZPRIGQuGg5kNw0IJQj4qqo0qk77v2mkLhi0nuQ69mjuiCnydr2UWDrkaNCP9qtx
# WwhcneTK5UIwelowWVBpV3E6aH8jo1psj9PyIn11nBaLmriFtcu4Uz1X3WG6ydxW
# AKDDD5hBom9SwRMlKPNJjRqZ5ydDdMkgmRSrCCMWSv0m5wdvzbA3pqTPkl5Cc/o5
# IH8m/YAlF5mGAHbIBryys0OnCqMd7AiYjCdVrP14qc/Ccrar61v8rBMQo24qUDcB
# NF6+4MlbgYMqns79VJftu7s/DI4p4R9cJmkInKNFGlpVIaDHYhENz3KTTszlntp2
# aV8fILK9oFpoQllgtFuSx89Ay2DG8kqU/D8OKR6haHXwdaFaKGMSyB+hoZ9+Iv3R
# LNne5hGKr6p0j6k0kyIAXi11KS1i0mOg+Eha+v0fLqRqsIPt1Nt7ysRbxV+Yf6zc
# zsxK4CR98FERKSlBbNtMU2sb3AJRamdX35+cGG8/lWq+RK5RbweCMBgHktLFW5/8
# BXPF2Ju0fZk5kvhxoJ0qg9SRU6t4C6kApSa/buKj22Ix/41KpWI=
# =bWN6
# -----END PGP SIGNATURE-----
# gpg: Signature made Thu 24 Jul 2025 09:20:37 EDT
# gpg:                using RSA key A0F66548F04895EBFE6B0B6051A343C7CFFBECA1
# gpg: Good signature from "Cédric Le Goater <c...@redhat.com>" [full]
# gpg:                 aka "Cédric Le Goater <c...@kaod.org>" [full]
# Primary key fingerprint: A0F6 6548 F048 95EB FE6B  0B60 51A3 43C7 CFFB ECA1

* tag 'pull-ppc-20250724' of https://github.com/legoater/qemu:
  MAINTAINERS: remove myself as ppc maintainer/reviewer
  MAINTAINERS: Remove Frédéric as reviewer
  MAINTAINERS: Add myself as a reviewer for XIVE
  MAINTAINERS: Add myself as a reviewer of PowerNV emulation
  MAINTAINERS: Add myself as reviewer for PowerPC TCG CPUs
  MAINTAINERS: Adding myself as reviewer for PPC KVM cpus.
  MAINTAINERS: Adding myself as a co-maintainer for ppc/spapr

Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


  Commit: d3c9de45b2a54f6021c9a48a216263aa76847a29
      
https://github.com/qemu/qemu/commit/d3c9de45b2a54f6021c9a48a216263aa76847a29
  Author: Stefan Hajnoczi <stefa...@redhat.com>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M scripts/tracetool/backend/log.py
    M util/log.c

  Log Message:
  -----------
  Merge tag 'tracing-pull-request' of https://gitlab.com/stefanha/qemu into 
staging

Pull request

This commit is still worth having in QEMU 10.1 for the all-round improvements
made (consistent timestamping, binary size reduction, header pollution cleanup)
even if it's debatable whether this is a bug fix.

# -----BEGIN PGP SIGNATURE-----
#
# iQEzBAABCgAdFiEEhpWov9P5fNqsNXdanKSrs4Grc8gFAmiCR0UACgkQnKSrs4Gr
# c8g4AggAyBo1oNAVSMQIC6JRRcLrVBCWGPWVyU1/3AaayKLy8egs1pImmT09DcdQ
# D2CHCjEp0xbTzFlN3YiBymAOeq/a73G7NPzWdCi/PY1qBmB4td8Eli/tBoQUYvmE
# k0a0r6DrOo6vGddCqv6fAKnvamcs/IB2ogzpqLVLCC4oAP6TVG0LeHsaqTAtO8bv
# yZb+1YQxFZtum2yp9I4+mk8c1R04cCdDL17TRCrv4hTkpGRYfaDs8LRy5yJ4Nw6V
# AID3fkLTaxOcQpb2EItfcoGalF/JcCdZoOlJ/91clJ1MWFAnV9Y9gBZtlSF4dx+k
# c2rTlcBw9j402imuotLOP7Cl8mLNeg==
# =lXaI
# -----END PGP SIGNATURE-----
# gpg: Signature made Thu 24 Jul 2025 10:46:29 EDT
# gpg:                using RSA key 8695A8BFD3F97CDAAC35775A9CA4ABB381AB73C8
# gpg: Good signature from "Stefan Hajnoczi <stefa...@redhat.com>" [ultimate]
# gpg:                 aka "Stefan Hajnoczi <stefa...@gmail.com>" [ultimate]
# Primary key fingerprint: 8695 A8BF D3F9 7CDA AC35  775A 9CA4 ABB3 81AB 73C8

* tag 'tracing-pull-request' of https://gitlab.com/stefanha/qemu:
  log: make '-msg timestamp=on' apply to all qemu_log usage

Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


  Commit: c017386f28c03a03b8f14444f8671d3d8f7180fe
      
https://github.com/qemu/qemu/commit/c017386f28c03a03b8f14444f8671d3d8f7180fe
  Author: Stefan Hajnoczi <stefa...@redhat.com>
  Date:   2025-07-25 (Fri, 25 Jul 2025)

  Changed paths:
    M hw/arm/smmu-common.c
    M scripts/decodetree.py
    M target/arm/hvf/hvf.c
    M target/arm/internals.h
    M target/arm/tcg/helper-sme.h
    M target/arm/tcg/helper-sve.h
    M target/arm/tcg/sme_helper.c
    M target/arm/tcg/sve.decode
    M target/arm/tcg/sve_helper.c
    M target/arm/tcg/translate-a64.h
    M target/arm/tcg/translate-sme.c
    M target/arm/tcg/translate-sve.c
    M tests/decode/meson.build
    A tests/decode/succ_infer1.decode

  Log Message:
  -----------
  Merge tag 'pull-target-arm-20250725' of https://gitlab.com/pm215/qemu into 
staging

target-arm queue:
 * Fix various bugs in SMEp/SVE2p1 load/store handling
 * hw/arm/smmu-common: Avoid using inlined functions with external linkage
 * target/arm: hvf: stubbing reads to LORC_EL1

# -----BEGIN PGP SIGNATURE-----
#
# iQJNBAABCAA3FiEE4aXFk81BneKOgxXPPCUl7RQ2DN4FAmiDbRIZHHBldGVyLm1h
# eWRlbGxAbGluYXJvLm9yZwAKCRA8JSXtFDYM3sifD/9uJRrZ0o/PQfRVIYl7vIFE
# MjUl6sncznX1zk/B7xNuiJ5KDoziQm/L3KPcb0JPoqhO3nLeqvLIvfmB6W85cV/w
# OD0PFnL1inuxWf1rKdeheGtyZ0R9Ep3BFzB6NJMDxVJC9aP0eqfGxVo2BCdydv/9
# m3v7gCkp/lj5LcpJ+8w0bEzuqT3xzcbibFdFi4eKBiG5P3OvwGv3Kt+FhOISXcBe
# cU+RpXEkd0MBusOWq1OXLgWS+IPx/e67l1ehxAfVztxFUI3gwej7JgLCnIIoxRsw
# EWGQYhSSg6QE8h2TknxDKj9jmMcqnjluRjaefPQS8BxbYc6s6dsSBCxbeZJ/zNyJ
# gD/ymK/nayTBfoP+S7eWGDaldNv/AnKSWa28GEpi3dmDDfKlwRB77arGU2zXirjo
# dG/0tcg+G7mmkSH5BbPJfFJgjUqEu+D2wq1wm53SSb/AqK8BL4ODF3LE6r6+65ft
# fg5nalDbn2uTa90M7BHfaGEJj0hdP8xM9wmRHCoJ1LEDieSsjInZWwIbSwQBL6Rc
# Rr2PmnTWdMKuyr9WgOBzFfCAzmFDwJmqlIqRIRHPKo21xAiGYh8oTp31MhgZWdaj
# yK+V9t5Mznp1PVfL5xYwe/xG1CmKE6FKOwuvF3RkTF5lBU88x9fIcPOjaWZymW4n
# iqkUZmp+nS9K3V4WWjGxnQ==
# =quq9
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri 25 Jul 2025 07:40:02 EDT
# gpg:                using RSA key E1A5C593CD419DE28E8315CF3C2525ED14360CDE
# gpg:                issuer "peter.mayd...@linaro.org"
# gpg: Good signature from "Peter Maydell <peter.mayd...@linaro.org>" [full]
# gpg:                 aka "Peter Maydell <pmayd...@gmail.com>" [full]
# gpg:                 aka "Peter Maydell <pmayd...@chiark.greenend.org.uk>" 
[full]
# gpg:                 aka "Peter Maydell <pe...@archaic.org.uk>" [unknown]
# Primary key fingerprint: E1A5 C593 CD41 9DE2 8E83  15CF 3C25 25ED 1436 0CDE

* tag 'pull-target-arm-20250725' of https://gitlab.com/pm215/qemu:
  target/arm: hvf: stubbing reads to LORC_EL1
  hw/arm/smmu-common: Avoid using inlined functions with external linkage
  target/arm: Fix LD1W, LD1D to 128-bit elements
  target/arm: Pass correct esize to sve_st1_z() for LD1Q, ST1Q
  target/arm: LD1Q, ST1Q are vector + scalar, not scalar + vector
  decodetree: Infer argument set before inferring format
  target/arm: Pack mtedesc into upper 32 bits of descriptor
  target/arm: Expand the descriptor for SME/SVE memory ops to i64

Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


Compare: https://github.com/qemu/qemu/compare/9e601684dc24...c017386f28c0

To unsubscribe from these emails, change your notification settings at 
https://github.com/qemu/qemu/settings/notifications


Reply via email to