The following changes since commit ad14439be5731e872d8448a04664a9c0e66624a8:
gitlab: remove gdb from MacOS jobs (2026-07-21 10:09:47 -0400)
are available in the Git repository at:
https://github.com/legoater/qemu/ tags/pull-vfio-20260721
for you to fetch changes up to aef1e7c5ec80ee7a4484e4903c9e4c47d80535de:
vfio-user: vfio_user_device_io_set_irqs: prevent excessive malloc (2026-07-21 18:02:47 +0200)
----------------------------------------------------------------
vfio queue:
* Fix IGD legacy VBIOS ROM to clear saved BDSM at load time, avoiding
garbled BIOS POST output
* Clarify dma-buf failure messages for P2P DMA
* Fix config read error handling and reject invalid PCI_INTERRUPT_PIN
values in vfio/pci
* Harden vfio-user: prevent buffer overflows, excessive mallocs, and
fix region info capability check
----------------------------------------------------------------
Cédric Le Goater (1):
vfio/region: Clarify dma-buf failure messages
Denis V. Lunev (2):
vfio/pci: don't narrow a failed config read to a plausible value
vfio/pci: reject invalid PCI_INTERRUPT_PIN values
Thanos Makatos (9):
vfio-user: vfio_user_get_region_info: prevent buffer overflow
vfio-user: vfio_user_get_region_info: respect max_xfer_size
vfio-user: vfio_user_get_region_info: reject unreasonably short struct
vfio-user: vfio_user_get_region_info: prevent excessive malloc
vfio-user: vfio_user_device_io_get_region_info: fix capability check
vfio-user: vfio_user_device_io_device_feature: prevent buffer overflow
vfio-user: vfio_user_device_io_device_feature: prevent excessive malloc
vfio-user: vfio_user_device_io_set_irqs: prevent buffer overflow
vfio-user: vfio_user_device_io_set_irqs: prevent excessive malloc
Tomita Moeko (1):
vfio/igd: Clear saved BDSM in legacy VBIOS ROM at load time
hw/vfio/pci.h | 3 ++
hw/vfio-user/device.c | 54 ++++++++++++++++++++++--
hw/vfio/igd-stubs.c | 5 +++
hw/vfio/igd.c | 115 ++++++++++++++++++++++++++++++++++++++++++++++++++
hw/vfio/pci-quirks.c | 5 +++
hw/vfio/pci.c | 39 ++++++++++++++---
hw/vfio/region.c | 11 +++--
hw/vfio/trace-events | 1 +
8 files changed, 216 insertions(+), 17 deletions(-)