Sorry, this one is going to fail on the msys2 job, due
to the new websock test trying to use AF_UNIX which
fails at runtime only. I'll re-spin changing the new
test to skip Windows hosts.
On Fri, Sep 04, 2026 at 11:59:16AM +0100, Daniel P. Berrangé wrote:
> The following changes since commit 99e54ab5e7a6efc945af6d5661842155d1f3fc7a:
>
> Merge tag 'hw-misc-20260903' of https://github.com/philmd/qemu into staging (2026-09-03 16:43:24 +0100)
>
> are available in the Git repository at:
>
> https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request
>
> for you to fetch changes up to a61ee2ff816bc2804f773cbcff45a6cd8d83330d:
>
> docs/system/security: exclude uninitialized stack variables as bugs (2026-09-04 11:17:00 +0100)
>
> ----------------------------------------------------------------
> Merge crypto, I/O and misc fixes
>
> * Deprecated the AF_ALG crypto backend
> * Improve checkpatch output in CI jobs
> * Fix --disable-containers arg handling in configure
> * Document security policy for uninitialized stack variables
> * Fix multiple denial of service flaws in websockets
> * Fix error handling in some x509 APIs
>
> ----------------------------------------------------------------
>
> Daniel P. Berrangé (4):
> crypto: deprecate the AF_ALG crypto backend
> gitlab: use --emacs --quiet for checkpatch.pl instead of --terse
> configure: correctly honour --disable-containers
> docs/system/security: exclude uninitialized stack variables as bugs
>
> Denis V. Lunev (6):
> io/channel-socket: do not treat a zero length write as an error
> io/channel-websock: send an HTTP 400 when the greeting has no space
> io/channel-websock: handle a blocked write during the handshake
> tests/unit: add websock handshake test
> io/channel-websock: do not lose QIO_CHANNEL_ERR_BLOCK while reading
> tests/unit: cover blocked IO during the websock handshake
>
> Evgeny Kolmakov (1):
> crypto: Use g_autofree
>
> Marc-André Lureau (2):
> crypto/x509-utils: don't double set errp
> crypto/x509-utils: propagate the error
>
> .gitlab-ci.d/check-patch.py | 6 +-
> configure | 1 +
> crypto/block.c | 17 +-
> crypto/hmac-gcrypt.c | 12 +-
> crypto/hmac-glib.c | 10 +-
> crypto/ivgen-essiv.c | 15 +-
> crypto/ivgen.c | 6 +-
> crypto/secret_keyring.c | 5 +-
> crypto/x509-utils.c | 4 +-
> docs/about/deprecated.rst | 21 +++
> docs/system/security.rst | 10 ++
> io/channel-socket.c | 2 +-
> io/channel-websock.c | 10 +-
> meson.build | 6 +
> tests/unit/meson.build | 1 +
> tests/unit/test-io-channel-websock.c | 249 +++++++++++++++++++++++++++
> 16 files changed, 327 insertions(+), 48 deletions(-)
> create mode 100644 tests/unit/test-io-channel-websock.c
>
> --
> 2.55.0
>
With regards,
Daniel
--
|: https://berrange.com ~~ https://hachyderm.io/@berrange :|
|: https://libvirt.org ~~ https://entangle-photo.org :|
|: https://pixelfed.art/berrange ~~ https://fstop138.berrange.com :|