Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: 1ebdd2d92611a573f9fcdf0fc7f31b1efd07ac30
      
https://github.com/qemu/qemu/commit/1ebdd2d92611a573f9fcdf0fc7f31b1efd07ac30
  Author: Cédric Le Goater <c...@redhat.com>
  Date:   2025-07-28 (Mon, 28 Jul 2025)

  Changed paths:
    M hw/core/machine.c
    M hw/i386/microvm.c
    M hw/i386/pc_piix.c
    M hw/i386/pc_q35.c
    M hw/vfio/pci.c
    M hw/vfio/types.h

  Log Message:
  -----------
  hw/i386: Fix 'use-legacy-x86-rom' property compatibility

Commit 350785d41d8b ("ramfb: Add property to control if load the
romfile") introduced the `use-legacy-x86-rom` property for the
`vfio-pci-nohotplug` device, allowing control over VGA BIOS ROM
loading. However, the property compatibility setting was incorrectly
applied to the `vfio-pci` device instead, which causes all `vfio-pci`
devices to fail to load. This change fixes the issue by ensuring the
property is set on the correct device.

Fixes: d5fcf0d960d8 ("hw/i386: Add the ramfb romfile compatibility")
Cc: Gerd Hoffmann <kra...@redhat.com>
Cc: Shaoqin Huang <shahu...@redhat.com>
Reviewed-by: Zhao Liu <zhao1....@intel.com>
Reviewed-by: Thomas Huth <th...@redhat.com>
Acked-by: Michael S. Tsirkin <m...@redhat.com>
Acked-by: Gerd Hoffmann <kra...@redhat.com>
Link: https://lore.kernel.org/qemu-devel/20250723062714.1245826-1-...@redhat.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 1dc1220fbd30a200aea972fc3aa53d439aff466b
      
https://github.com/qemu/qemu/commit/1dc1220fbd30a200aea972fc3aa53d439aff466b
  Author: Cédric Le Goater <c...@redhat.com>
  Date:   2025-07-28 (Mon, 28 Jul 2025)

  Changed paths:
    M hw/i386/Kconfig

  Log Message:
  -----------
  i386: Build SEV only for 64-bit target

Recent changes broke build on 32-bit host. Since there is no 32-bit
support, restrict SEV to 64-bit.

Reviewed-by: Xiaoyao Li <xiaoyao...@intel.com>
Reviewed-by: Daniel P. Berrangé <berra...@redhat.com>
Link: https://lore.kernel.org/qemu-devel/20250716071554.377356-1-...@redhat.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 9751377c3a9445f597c5d0bf134a79c8cb58e45d
      
https://github.com/qemu/qemu/commit/9751377c3a9445f597c5d0bf134a79c8cb58e45d
  Author: Steve Sistare <steven.sist...@oracle.com>
  Date:   2025-07-28 (Mon, 28 Jul 2025)

  Changed paths:
    M hw/vfio/cpr.c
    M hw/vfio/pci.c
    M hw/vfio/pci.h

  Log Message:
  -----------
  vfio: fix sub-page bar after cpr

Regions for sub-page BARs are normally mapped here, in response to the
guest writing to PCI config space:

  vfio_pci_write_config()
    pci_default_write_config()
      pci_update_mappings()
        memory_region_add_subregion()
    vfio_sub_page_bar_update_mapping()
      ... vfio_dma_map()

However, after CPR, the guest does not reconfigure the device and the
code path above is not taken.  To fix, in vfio_cpr_pci_post_load, call
vfio_sub_page_bar_update_mapping for each sub-page BAR with a valid
address.

Fixes: 7e9f21411302 ("vfio/container: restore DMA vaddr")

Signed-off-by: Steve Sistare <steven.sist...@oracle.com>
Reviewed-by: Cédric Le Goater <c...@redhat.com>
Reviewed-by: Zhenzhong Duan <zhenzhong.d...@intel.com>
Link: 
https://lore.kernel.org/qemu-devel/1752520890-223356-1-git-send-email-steven.sist...@oracle.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: e0b33efe2acc3c6c651bb761394ef597e763e349
      
https://github.com/qemu/qemu/commit/e0b33efe2acc3c6c651bb761394ef597e763e349
  Author: Tomita Moeko <tomitamo...@gmail.com>
  Date:   2025-07-28 (Mon, 28 Jul 2025)

  Changed paths:
    M docs/igd-assign.txt
    M hw/vfio/igd.c

  Log Message:
  -----------
  vfio/igd: Require host VGA decode for legacy mode

Commit a59d06305fff ("vfio/pci: Introduce x-pci-class-code option")
allows user to expose non-VGA IGD device as VGA controller to the
guest. However, legacy mode requires host VGA range access. Check
that GGC.IVD == 0 before enabling legacy mode to ensure IGD is a real
VGA device claiming host VGA ranges.

Signed-off-by: Tomita Moeko <tomitamo...@gmail.com>
Reviewed-by: Alex Williamson <alex.william...@redhat.com>
Link: 
https://lore.kernel.org/qemu-devel/20250723160906.44941-2-tomitamo...@gmail.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: 0db7e4cb62026196f06755c77f943294d9879e5a
      
https://github.com/qemu/qemu/commit/0db7e4cb62026196f06755c77f943294d9879e5a
  Author: Tomita Moeko <tomitamo...@gmail.com>
  Date:   2025-07-28 (Mon, 28 Jul 2025)

  Changed paths:
    M hw/vfio/igd.c
    M hw/vfio/pci.c
    M hw/vfio/pci.h

  Log Message:
  -----------
  vfio/igd: Fix VGA regions are not exposed in legacy mode

In commit a59d06305fff ("vfio/pci: Introduce x-pci-class-code option"),
pci_register_vga() has been moved ouside of vfio_populate_vga(). As a
result, IGD VGA ranges are no longer properly exposed to guest.

To fix this, call pci_register_vga() after vfio_populate_vga() legacy
mode. A wrapper function vfio_pci_config_register_vga() is introduced
to handle it.

Fixes: a59d06305fff ("vfio/pci: Introduce x-pci-class-code option")
Signed-off-by: Tomita Moeko <tomitamo...@gmail.com>
Reviewed-by: Alex Williamson <alex.william...@redhat.com>
Link: 
https://lore.kernel.org/qemu-devel/20250723160906.44941-3-tomitamo...@gmail.com
Signed-off-by: Cédric Le Goater <c...@redhat.com>


  Commit: e895095c78ab877d40df2dd31ee79d85757d963b
      
https://github.com/qemu/qemu/commit/e895095c78ab877d40df2dd31ee79d85757d963b
  Author: Philippe Mathieu-Daudé <f4...@amsat.org>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M target/mips/tcg/system/cp0_helper.c

  Log Message:
  -----------
  target/mips: Only update MVPControl.EVP bit if executed by master VPE

According to the 'MIPS MT Application-Specific Extension' manual:

  If the VPE executing the instruction is not a Master VPE,
  with the MVP bit of the VPEConf0 register set, the EVP bit
  is unchanged by the instruction.

Modify the DVPE/EVPE opcodes to only update the MVPControl.EVP bit
if executed on a master VPE.

Cc: qemu-sta...@nongnu.org
Reported-by: Hansni Bu
Buglink: https://bugs.launchpad.net/qemu/+bug/1926277
Fixes: f249412c749 ("mips: Add MT halting and waking of VPEs")
Signed-off-by: Philippe Mathieu-Daudé <f4...@amsat.org>
Reviewed-by: Jiaxun Yang <jiaxun.y...@flygoat.com>
Message-ID: <20210427133343.159718-1-f4...@amsat.org>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: 8e8cb3b5722babe7e7b597b3805bf09f24ed6979
      
https://github.com/qemu/qemu/commit/8e8cb3b5722babe7e7b597b3805bf09f24ed6979
  Author: Michael Tokarev <m...@tls.msk.ru>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M hw/display/qxl-render.c

  Log Message:
  -----------
  hw/display/qxl-render: fix qxl_unpack_chunks() chunk size calculation

In case of multiple chunks, code in qxl_unpack_chunks() takes size of the
wrong (next in the chain) chunk, instead of using current chunk size.
This leads to wrong number of bytes being copied, and to crashes if next
chunk size is larger than the current one.

Based on the code by Gao Yong.

Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1628
Tested-by: Thaddeus Hogan <thadd...@thogan.com>
Tested-by: Vadim Zeitlin <va...@wxwidgets.org>
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Reviewed-by: Thomas Huth <th...@redhat.com>
Message-ID: <20250221134856.478806-1-...@tls.msk.ru>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: 962316a6a339367e187b4728ef131ec6e635f364
      
https://github.com/qemu/qemu/commit/962316a6a339367e187b4728ef131ec6e635f364
  Author: Philippe Mathieu-Daudé <phi...@linaro.org>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M hw/vfio/vfio-migration-internal.h

  Log Message:
  -----------
  hw/vfio/vfio-migration: Remove unnecessary 'qemu/typedefs.h' include

"qemu/typedefs.h" is already included by "qemu/osdep.h".

Reviewed-by: Cédric Le Goater <c...@redhat.com>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Message-ID: <20250708085859.7885-3-phi...@linaro.org>


  Commit: b496a392fec656d8e7af81c496efa3d45fd59023
      
https://github.com/qemu/qemu/commit/b496a392fec656d8e7af81c496efa3d45fd59023
  Author: Pierrick Bouvier <pierrick.bouv...@linaro.org>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M migration/meson.build
    R migration/target.c
    A migration/vfio.c

  Log Message:
  -----------
  migration: rename target.c to vfio.c

Signed-off-by: Pierrick Bouvier <pierrick.bouv...@linaro.org>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Acked-by: Fabiano Rosas <faro...@suse.de>
Reviewed-by: Peter Xu <pet...@redhat.com>
Message-ID: <20250725201729.17100-3-pierrick.bouv...@linaro.org>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: 2bfcd27e00a49da2efa5d703121b94cd9cd4948b
      
https://github.com/qemu/qemu/commit/2bfcd27e00a49da2efa5d703121b94cd9cd4948b
  Author: Luc Michel <luc.mic...@amd.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M hw/net/cadence_gem.c

  Log Message:
  -----------
  hw/net/cadence_gem: fix register mask initialization

The gem_init_register_masks function was called at init time but it
relies on the num-priority-queues property. Call it at realize time
instead.

Cc: qemu-sta...@nongnu.org
Fixes: 4c70e32f05f ("net: cadence_gem: Define access permission for interrupt 
registers")
Signed-off-by: Luc Michel <luc.mic...@amd.com>
Reviewed-by: Francisco Iglesias <francisco.igles...@amd.com>
Reviewed-by: Sai Pavan Boddu <sai.pavan.bo...@amd.com>
Message-ID: <20250716095432.81923-2-luc.mic...@amd.com>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: 014bb30d218ef0d91c300324dec99138e999e32d
      
https://github.com/qemu/qemu/commit/014bb30d218ef0d91c300324dec99138e999e32d
  Author: Adam Williamson <awill...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M hw/xen/xen_pt.c

  Log Message:
  -----------
  hw/xen/passthrough: add missing error-report include

In commit cfcacbab38e ("xen/passthrough: use gsi to map pirq when
dom0 is PVH") an `error_report` was added to this file, but the
corresponding include of `qemu/error-report.h` was missed. This
only becomes apparent when building against Xen 4.20+ with trace
backend log disabled.

Fixes: cfcacbab38e4 (xen/passthrough: use gsi to map pirq when dom0 is PVH)
Signed-off-by: Adam Williamson <awill...@redhat.com>
Reviewed-by: Markus Armbruster <arm...@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Message-ID: <20250717220207.171040-1-awill...@redhat.com>
[PMD: Improved commit description, added Fixes: tag]
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: 2865bf1c5795371ef441e9029bc22566ccff8299
      
https://github.com/qemu/qemu/commit/2865bf1c5795371ef441e9029bc22566ccff8299
  Author: Pierrick Bouvier <pierrick.bouv...@linaro.org>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M system/physmem.c

  Log Message:
  -----------
  system/physmem: fix use-after-free with dispatch

A use-after-free bug was reported when booting a Linux kernel during the
pci setup phase. It's quite hard to reproduce (needs smp, and favored by
having several pci devices with BAR and specific Linux config, which
is Debian default one in this case).

After investigation (see the associated bug ticket), it appears that,
under specific conditions, we might access a cached AddressSpaceDispatch
that was reclaimed by RCU thread meanwhile.
In the Linux boot scenario, during the pci phase, memory region are
destroyed/recreated, resulting in exposition of the bug.

The core of the issue is that we cache the dispatch associated to
current cpu in cpu->cpu_ases[asidx].memory_dispatch. It is updated with
tcg_commit, which runs asynchronously on a given cpu.
At some point, we leave the rcu critial section, and the RCU thread
starts reclaiming it, but tcg_commit is not yet invoked, resulting in
the use-after-free.

It's not the first problem around this area, and commit 0d58c660689 [1]
("softmmu: Use async_run_on_cpu in tcg_commit") already tried to
address it. It did a good job, but it seems that we found a specific
situation where it's not enough.

This patch takes a simple approach: remove the cached value creating the
issue, and make sure we always get the current mapping for address
space, using address_space_to_dispatch(cpu->cpu_ases[asidx].as).
It's equivalent to qatomic_rcu_read(&as->current_map)->dispatch;
This is not really costly, we just need two dereferences,
including one atomic (rcu) read, which is negligible considering we are
already on mmu slow path anyway.

Note that tcg_commit is still needed, as it's taking care of flushing
TLB, removing previously mapped entries.

Another solution would be to cache directly values under the dispatch
(dispatch themselves are not ref counted), keep an active reference on
associated memory section, and release it when appropriate (tricky).
Given the time already spent debugging this area now and previously, I
strongly prefer eliminating the root of the issue, instead of adding
more complexity for a hypothetical performance gain. RCU is precisely
used to ensure good performance when reading data, so caching is not as
beneficial as it might seem IMHO.

[1] 
https://gitlab.com/qemu-project/qemu/-/commit/0d58c660689f6da1e3feff8a997014003d928b3b

Cc: qemu-sta...@nongnu.org
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/3040
Signed-off-by: Pierrick Bouvier <pierrick.bouv...@linaro.org>
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>
Reviewed-by: Michael Tokarev <m...@tls.msk.ru>
Tested-by: Michael Tokarev <m...@tls.msk.ru>
Message-ID: <20250724161142.2803091-1-pierrick.bouv...@linaro.org>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: 653a75a9d7f957c4ba9387d1a54bccfdce49cb9c
      
https://github.com/qemu/qemu/commit/653a75a9d7f957c4ba9387d1a54bccfdce49cb9c
  Author: Michael Tokarev <m...@tls.msk.ru>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M roms/Makefile

  Log Message:
  -----------
  roms/Makefile: fix npcmNxx_bootrom build rules

Since commit 70ce076fa6dff60, the actual rom source dirs
are subdirs of vbootrom/ submodule, not in top-level of it.

Fixes: 70ce076fa6dff60 "roms: Update vbootrom to 1287b6e"
Fixes: 269b7effd90 ("pc-bios: Add NPCM8XX vBootrom")

Cc: qemu-sta...@nongnu.org
Signed-off-by: Michael Tokarev <m...@tls.msk.ru>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Tested-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Message-ID: <20250727215511.807880-1-...@tls.msk.ru>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: 67e4808403471427b73c8d2c3f4273d64908f480
      
https://github.com/qemu/qemu/commit/67e4808403471427b73c8d2c3f4273d64908f480
  Author: Clément Chigot <chi...@adacore.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M hw/display/sm501.c

  Log Message:
  -----------
  hw/display/sm501: fix missing error-report.h

"qemu/error-report.h" was previously implicitly included. This is no
longer the case following 012842c075520dbe1bd96a2fdcf4e218874ba443.

However, the issue predates this change as `error-report.h` should have
been included when the `warn_report` call was introduced.

Fixes: fa140b9562 ("hw/sm501: allow compiling without PIXMAN")
Signed-off-by: Clément Chigot <chi...@adacore.com>
Reviewed-by: Philippe Mathieu-Daudé <phi...@linaro.org>
Reviewed-by: Daniel P. Berrangé <berra...@redhat.com>
Message-ID: <20250728090518.963573-1-chi...@adacore.com>
Signed-off-by: Philippe Mathieu-Daudé <phi...@linaro.org>


  Commit: d4d91ed42eb93f64950a036f35efbd915feb95b3
      
https://github.com/qemu/qemu/commit/d4d91ed42eb93f64950a036f35efbd915feb95b3
  Author: Markus Armbruster <arm...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M qapi/dump.json
    M qapi/machine.json
    M qapi/migration.json
    M qapi/misc-i386.json
    M qapi/run-state.json
    M qapi/sockets.json

  Log Message:
  -----------
  qapi: Add more cross-references

We recently (merge commit 504632dcc631) enclosed command and type
names in `backquotes`, so they become links in generated HTML.  Take
care of a few we missed.

Signed-off-by: Markus Armbruster <arm...@redhat.com>
Message-ID: <20250717115751.3832597-1-arm...@redhat.com>
Reviewed-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: John Snow <js...@redhat.com>


  Commit: a3004697f7342258de6fdc3ed85943a33a4809cf
      
https://github.com/qemu/qemu/commit/a3004697f7342258de6fdc3ed85943a33a4809cf
  Author: Markus Armbruster <arm...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M qapi/accelerator.json

  Log Message:
  -----------
  qapi/accelerator: Fix markup of heading

The docs generated for qapi/accelerator.json shows text "=
Accelerators" instead of a heading.  This is because the patch that
added the heading crossed with the commit that changed heading
markup (commit 6c10778826a "docs/sphinx: remove special parsing for
freeform sections").  Fix the markup.

Fixes: 18da42ee4273 (qapi/accel: Move definitions related to accelerators in 
their own file)
Signed-off-by: Markus Armbruster <arm...@redhat.com>
Message-ID: <20250724091742.1950167-2-arm...@redhat.com>


  Commit: 1047cc281631063ff2db481b8ea7eb755005236a
      
https://github.com/qemu/qemu/commit/1047cc281631063ff2db481b8ea7eb755005236a
  Author: Markus Armbruster <arm...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    R tests/qapi-schema/doc-non-first-section.err
    R tests/qapi-schema/doc-non-first-section.json
    R tests/qapi-schema/doc-non-first-section.out

  Log Message:
  -----------
  tests/qapi-schema: Bury dead test case doc-non-first-section

The test passed when it was added.  However, the commit adding it
neglected to make Meson aware of it, so it never ran automatically.
The test stopped making sense when we changed headings markup, and
ceased to pass then.  It should've been removed then.  Do that now.

Fixes: 6c10778826a8 (docs/sphinx: remove special parsing for freeform sections)
Signed-off-by: Markus Armbruster <arm...@redhat.com>
Message-ID: <20250724091742.1950167-3-arm...@redhat.com>
Reviewed-by: Daniel P. Berrangé <berra...@redhat.com>
Reviewed-by: John Snow <js...@redhat.com>


  Commit: a14f6d3288bcfd4f3f7e6aca4572e2443cc1f91b
      
https://github.com/qemu/qemu/commit/a14f6d3288bcfd4f3f7e6aca4572e2443cc1f91b
  Author: Markus Armbruster <arm...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M docs/devel/qapi-domain.rst

  Log Message:
  -----------
  docs/qapi-domain: Fix typos

Signed-off-by: Markus Armbruster <arm...@redhat.com>
Message-ID: <20250729091642.3513895-2-arm...@redhat.com>
Reviewed-by: Manos Pitsidianakis <manos.pitsidiana...@linaro.org>


  Commit: a95b3c0ad857055198cdb272bca2af975092d060
      
https://github.com/qemu/qemu/commit/a95b3c0ad857055198cdb272bca2af975092d060
  Author: Markus Armbruster <arm...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M MAINTAINERS

  Log Message:
  -----------
  MAINTAINERS: Cover docs/devel/qapi-domain.rst properly

Section QAPI already covers it, and that's fine.  It's missing from
"Sphinx documentation configuration and build machinery".  Add it
there.

Signed-off-by: Markus Armbruster <arm...@redhat.com>
Message-ID: <20250729091642.3513895-3-arm...@redhat.com>
Reviewed-by: Manos Pitsidianakis <manos.pitsidiana...@linaro.org>
[Improved commit message]


  Commit: 0ae375ab08037a8ee6421c2f37678444c0e6337f
      
https://github.com/qemu/qemu/commit/0ae375ab08037a8ee6421c2f37678444c0e6337f
  Author: Stefan Hajnoczi <stefa...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M docs/igd-assign.txt
    M hw/core/machine.c
    M hw/i386/Kconfig
    M hw/i386/microvm.c
    M hw/i386/pc_piix.c
    M hw/i386/pc_q35.c
    M hw/vfio/cpr.c
    M hw/vfio/igd.c
    M hw/vfio/pci.c
    M hw/vfio/pci.h
    M hw/vfio/types.h

  Log Message:
  -----------
  Merge tag 'pull-vfio-20250729' of https://github.com/legoater/qemu into 
staging

vfio queue:

* Fixed regression introduced by the `use-legacy-x86-rom` property
* Fixed regressions on IGD passthrough in legacy mode
* Fixed region mappings of sub-page BARs after CPR
* Removed build of SEV on 32-bit hosts

# -----BEGIN PGP SIGNATURE-----
#
# iQIzBAABCAAdFiEEoPZlSPBIlev+awtgUaNDx8/77KEFAmiIaXIACgkQUaNDx8/7
# 7KHEUw//S/9+Aw7sHI0dLvYLLxMUfoDHY2B7nx/o3EgDMc3we4L19+t9d2RTxsc0
# QLz1wufhWn4gGIrb46fwqaU1ggu9cHi0o0E57cU+ZeADe/H9YRdFQ1q88yUzBARd
# /exYAMV9L9NejzA/gvJDr2pZgf5ZZGY8H2MoiYw21z5nGJXlCS+1kXah7rZPHRcu
# NEPw9jqab78jvHoFK1L1EaRCPN/qTaU8XGCFguDP0icFZCGnu4pIMHHQC6Btcjft
# 2k5FDkQ9bzYqpq9W0KLimREBCnhmvBnCVSG/KTf/gsU222anGGgS8+80OABG7xrZ
# 6LjFsBor2vKRhZ1JsL21BANg7M9iLPe3CB8KOgNdWl+RIkNfbUvt/tOqlAQgw9EI
# JN7g9Ru1B0JVg18SHkTQ6/5eiWxnYRZvQA3R0BJXF23f2qqUtCm9VsQFUfYppc92
# Ci/hEtCXej8HoiJFK4gUHLYKRtk4DGbpiWgx1FYLid0ks5I+31m6x/PUMSvUbJez
# oeKv5oCjvl3ORGrjpiDSA2O3gIEiMSru6jejN0RKEeRpSWOMcEsGPL7nySJaZElR
# PrR/Cw+n4brTTIwUw7VnpeJnQ+XQbxD6wEzcDB7ZZ+gVs7BvmMT2LeDHzhPcaJuf
# vDsTSss+YBSDCC8TCmcWPGOQB5SHPRNO/5aMPyYLulfa+VnHQmY=
# =kKby
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue 29 Jul 2025 02:25:54 EDT
# gpg:                using RSA key A0F66548F04895EBFE6B0B6051A343C7CFFBECA1
# gpg: Good signature from "Cédric Le Goater <c...@redhat.com>" [full]
# gpg:                 aka "Cédric Le Goater <c...@kaod.org>" [full]
# Primary key fingerprint: A0F6 6548 F048 95EB FE6B  0B60 51A3 43C7 CFFB ECA1

* tag 'pull-vfio-20250729' of https://github.com/legoater/qemu:
  vfio/igd: Fix VGA regions are not exposed in legacy mode
  vfio/igd: Require host VGA decode for legacy mode
  vfio: fix sub-page bar after cpr
  i386: Build SEV only for 64-bit target
  hw/i386: Fix 'use-legacy-x86-rom' property compatibility

Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


  Commit: e52966be20228456c4282acef00982ea37d8ab8d
      
https://github.com/qemu/qemu/commit/e52966be20228456c4282acef00982ea37d8ab8d
  Author: Stefan Hajnoczi <stefa...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M hw/display/sm501.c
    M hw/net/cadence_gem.c
    M hw/vfio/vfio-migration-internal.h
    M hw/xen/xen_pt.c
    M migration/meson.build
    R migration/target.c
    A migration/vfio.c
    M roms/Makefile
    M system/physmem.c
    M target/mips/tcg/system/cp0_helper.c

  Log Message:
  -----------
  Merge tag 'hw-misc-20250729' of https://github.com/philmd/qemu into staging

Misc HW patches

- Fix MIPS MVPControl.EVP update
- Fix qxl_unpack_chunks() chunk size calculation
- Fix Cadence GEM register mask initialization
- Fix AddressSpaceDispatch use after free
- Fix building npcm7xx/npcm8xx bootroms
- Include missing headers

# -----BEGIN PGP SIGNATURE-----
#
# iQIzBAABCAAdFiEE+qvnXhKRciHc/Wuy4+MsLN6twN4FAmiItwoACgkQ4+MsLN6t
# wN5OGw//SFNgCvin6ic3H+QoUNwrRAH7eFuVfAKSKGopSqWf19imHy8rZl/8DYeo
# WsCRUPkVcAGzgRHZFc+8VYGdSR5GW7AulSzHh7fGQ8EFNunu3cnGsDflVV6UjgRP
# wnCfFuyrnyGfXVWkkjWYqCLI78AR0hB0Gp1E5nR4ZwGM4OhatDjKpYxWlRZbnjSA
# pBArLw8eKUrq90RekVpsa15oF9eMU89HzDBfxYvk0tb4//BWBiWfgQ+cz7j9f1wC
# wtTOEQ2BTkvGhqhe9VacV4YpQDXE9comlTked48GzHGqsAgp55NcB6FAR438qiG1
# 3z7LpL4LQn39+oC0S9cR2OahIGFEveOvGJoj014Iny4QR/ghNzt3F2Z9tgPISIKj
# MhJ0Bu7K7X+RWikY9xiAu24ORrRd5O6EItgLsl+24vkySOKODZ85WdKtIx0DQ7Yj
# rvRTkFDs/3K3kzMfZ20Jpeu7Bc74qUgsii27rivM/9rN0R9w+Br8MWLe0QSFalUe
# 08NoRZMVuSPCWlvJGGb0SRYpVAZsZaE9Ucd8wQzEcjHdVu0/+7KQfACXrJ09Y8sq
# lTgytCL8gO2jSEAh4cN/Ds1uBc8X5KKL32hNzRgddZVujqAuriBjAYEEk1pc7qe4
# yBxVkhASOpY53b1O2UqanajT2vY4T3JX5w+Jqn1HubZ/ZUwcK64=
# =H2Ie
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue 29 Jul 2025 07:56:58 EDT
# gpg:                using RSA key FAABE75E12917221DCFD6BB2E3E32C2CDEADC0DE
# gpg: Good signature from "Philippe Mathieu-Daudé (F4BUG) <f4...@amsat.org>" 
[full]
# Primary key fingerprint: FAAB E75E 1291 7221 DCFD  6BB2 E3E3 2C2C DEAD C0DE

* tag 'hw-misc-20250729' of https://github.com/philmd/qemu:
  hw/display/sm501: fix missing error-report.h
  roms/Makefile: fix npcmNxx_bootrom build rules
  system/physmem: fix use-after-free with dispatch
  hw/xen/passthrough: add missing error-report include
  hw/net/cadence_gem: fix register mask initialization
  migration: rename target.c to vfio.c
  hw/vfio/vfio-migration: Remove unnecessary 'qemu/typedefs.h' include
  hw/display/qxl-render: fix qxl_unpack_chunks() chunk size calculation
  target/mips: Only update MVPControl.EVP bit if executed by master VPE

Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


  Commit: 7a3abf7243523353054476ed9a1eee8ccafe3247
      
https://github.com/qemu/qemu/commit/7a3abf7243523353054476ed9a1eee8ccafe3247
  Author: Stefan Hajnoczi <stefa...@redhat.com>
  Date:   2025-07-29 (Tue, 29 Jul 2025)

  Changed paths:
    M MAINTAINERS
    M docs/devel/qapi-domain.rst
    M qapi/accelerator.json
    M qapi/dump.json
    M qapi/machine.json
    M qapi/migration.json
    M qapi/misc-i386.json
    M qapi/run-state.json
    M qapi/sockets.json
    R tests/qapi-schema/doc-non-first-section.err
    R tests/qapi-schema/doc-non-first-section.json
    R tests/qapi-schema/doc-non-first-section.out

  Log Message:
  -----------
  Merge tag 'pull-qapi-2025-07-29' of https://repo.or.cz/qemu/armbru into 
staging

QAPI patches for 2025-07-29

# -----BEGIN PGP SIGNATURE-----
#
# iQJGBAABCAAwFiEENUvIs9frKmtoZ05fOHC0AOuRhlMFAmiIxAYSHGFybWJydUBy
# ZWRoYXQuY29tAAoJEDhwtADrkYZTmvEP/iYxb+1mNWLimDE/Q0nO89KDBvxLMsIr
# +Z/dB4GTffvfITX5bxlzf4CaivCBGxoV02kFnzhYVHNYZD9CFA7pPwKySg2kpOeh
# NIrR7OAI9/W7H+uOyZslU78HhFSoKSfeYWssXnRyrXKPFXwyO7eJacXY9YlMz2ap
# A1aQT843I60ldsW2/7oJ4wy/TwHnIwXwFyBXSuKq7447LpospXDXdNdaghEjxTsQ
# LkYKcmSVgonCGnZf43OyiITdkXRdttZUoSQTMKJWBzg2UZkikqDeUt67t3XYkjWk
# irvBnF0lt2oEbmyeuWNciEkI5/fyoENh0bNeLWDAKwEqDf2Dc3s19/SYV8y8N3pY
# UuJRPSeJ4m2cNGv/5SU8C72GMMxcP50Usrk9JvJ1ZhS7C/rWXENC1CTm4uZDkJ0t
# TJt0KC4lFW0wDoXMQv1zWSXqri6+n7Ts1iYsHq5jEpDPNvQB7TGHA1VN2FBipN2d
# FXFCKWfpIxYbXsAh32mAUe1wiEkZTQdBZ/ZFFNRupMgg34B7X9gGg0kUBY161IfJ
# x2N9/508kgCWppz5AR8Y3sniLGtWv0KMwfQcLK1392w8AcuhVSnmejY3SUaXlmGE
# JRTqnMgo1EvS/7+We5OV1NuAbHbsk/bQUeN4ZDAkzQFAQscJvCQD/uD7jzY4xBFr
# 4LhegQM8eG57
# =Opw0
# -----END PGP SIGNATURE-----
# gpg: Signature made Tue 29 Jul 2025 08:52:22 EDT
# gpg:                using RSA key 354BC8B3D7EB2A6B68674E5F3870B400EB918653
# gpg:                issuer "arm...@redhat.com"
# gpg: Good signature from "Markus Armbruster <arm...@redhat.com>" [full]
# gpg:                 aka "Markus Armbruster <arm...@pond.sub.org>" [full]
# Primary key fingerprint: 354B C8B3 D7EB 2A6B 6867  4E5F 3870 B400 EB91 8653

* tag 'pull-qapi-2025-07-29' of https://repo.or.cz/qemu/armbru:
  MAINTAINERS: Cover docs/devel/qapi-domain.rst properly
  docs/qapi-domain: Fix typos
  tests/qapi-schema: Bury dead test case doc-non-first-section
  qapi/accelerator: Fix markup of heading
  qapi: Add more cross-references

Signed-off-by: Stefan Hajnoczi <stefa...@redhat.com>


Compare: https://github.com/qemu/qemu/compare/92c05be4dfb5...7a3abf724352

To unsubscribe from these emails, change your notification settings at 
https://github.com/qemu/qemu/settings/notifications

Reply via email to