Merge tag 'pull-parallels-2026-07-28' of https://gitlab.com/dlunev/qemu into staging

Parallels block driver patches - fix a reachable assert()/process abort on a crafted image with an inconsistent BAT vs. advertised disk size (GitLab #3804) - fix related integer overflows capping the format's usable catalog size below its documented maximum - reject BAT entries pointing outside the data area in either direction - harden the dirty-bitmap extension loader against a reachable abort and an unsafe allocator # -----BEGIN PGP SIGNATURE----- # # iQIzBAABCgAdFiEEC66qh9MCCtwRUOUfXgdxtstmbKsFAmpoy6UACgkQXgdxtstm # bKvDcA/7Bis1fqsgvsLDiLfxPmNXmaA6JwsHLCgcqnBtrlfucLpDghsE6Nr6Lthb # zgkYuWrNRtnIwbGEe4oW4jEukLb8k6hyUlwfQvIQik3rV0nnv1G4ewQMH7TmLKX+ # xqFSK+TUpW5bQMphH3yOM2IShgytCXirPSZLfz1GY76eOSWcab/SgzPhANTf6bG3 # o3eVZML9GrPDeDx3MuNdqfup+pX081xOM9l3Ub1hn8YRVvvZiaEmaw4HvT66Qnul # XL9/biNii0r7b4uITOj6Pvvft7W5yW5d+VL9P5hiidDvhwpC6CAjpu7/qScA3ZH2 # v3MWnXwOEPLnmUE43ZR/8Vb07bHdSHuVLGgD7RPdmWGMMM2pzaCpbMRkdr9ABY5k # IdPISsijSeGt4Vi9hhXsBiL2tzBJ0w8w+x6o7YNM8RkHzKm7APWwKssJ6kIyQC7g # ImNgSVRbXBf+4bAD2MUiy3MOfkJ8li9oCXuFaC9fUx5Y4Y4DZdAmARjccUNwttMa # oixwlypndqJsXspikAsqQqMqA/cVAUd+rec2jDVx3W2nhZsV3KsMu8hD4jYeQkTx # CRi7owYuA0Z+eNLVvdsji292GcQKP7jcriM1gsSbhyyYDJUT3FHtpNKUxWOr1nFz # YWj8xSPy5rCpO9CheSXWtk7v/GKpq3riQ48KBbnfArBNxPBPNDY= # =aCB6 # -----END PGP SIGNATURE----- # gpg: Signature made Tue 28 Jul 2026 11:32:53 EDT # gpg: using RSA key 0BAEAA87D3020ADC1150E51F5E0771B6CB666CAB # gpg: Good signature from "Denis V. Lunev <den@openvz.org>" [unknown] # gpg: WARNING: This key is not certified with a trusted signature! # gpg: There is no indication that the signature belongs to the owner. # Primary key fingerprint: 0BAE AA87 D302 0ADC 1150 E51F 5E07 71B6 CB66 6CAB * tag 'pull-parallels-2026-07-28' of https://gitlab.com/dlunev/qemu: MAINTAINERS: update parallels tree location parallels: validate BAT capacity against advertised disk size parallels: avoid fatal abort on large bitmap L1 table parallels: skip loading a genuinely empty bitmap L1 table parallels: validate bitmap L1 table size before allocating it parallels: reject BAT entries pointing outside backed storage parallels: fix bat_entries overflow in image creation parallels: read header/BAT table in bounded chunks parallels: fix integer overflow in header size calculation Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>