Merge tag 'pull-vfio-20260721' of https://github.com/legoater/qemu into staging

vfio queue: * Fix IGD legacy VBIOS ROM to clear saved BDSM at load time, avoiding garbled BIOS POST output * Clarify dma-buf failure messages for P2P DMA * Fix config read error handling and reject invalid PCI_INTERRUPT_PIN values in vfio/pci * Harden vfio-user: prevent buffer overflows, excessive mallocs, and fix region info capability check # -----BEGIN PGP SIGNATURE----- # # iQIzBAABCAAdFiEEoPZlSPBIlev+awtgUaNDx8/77KEFAmpfppcACgkQUaNDx8/7 # 7KHf7g/+LY4BptviNUX5XKYdCZKPiLSTDL5mejuU5ynu5b2WeHNqu9Iuml9B5k7a # 6ZWDcdp2OqaZehIgJcpn9XHA4sXT9EXan0z4+W5K2ZauMKLinxCq2oXYmz38YJCh # IPn8i7LpBJ94U02Vcqd/EDoRHeV9/4RcapqukuU67TYL5d31NP2IpXQqqOFhawWQ # kVqCvT1hl9IntRAgZdhERrz3BF7v4cgFhRPWMBhlUTbXvpWJBOAmZuPao9QyAXCE # VA1cjGtE/dM1g/z/8N+Ok5vOWeh/7ajPCzmZAC1JCsdCIyVe+N7nxfg5P2SvvmDj # j0cbj6KXLA8JXt/f3oDO813Ji+TNYY5FYSPcMlHTBO2uXAOCIuZb+RpIWV4xPsrv # HqinRGG/BSbusU69v/W6bPJAK4DfJnNrnXckCj7qcGpmVJ/gqfen1qCmnacvql87 # tlNJQEyqTZEPcb2BEqEvCWOX7xKoq9+rRsnn0vOAoYIQiJHBoEDxkhbbmHcW++t9 # Tl+HAAqK3oaynMIi6zBcgL75G+CgUo/DAWpms4w0vl0hmP5R1I+lDobd3GFNcBO2 # rPsj4CZxxX6fvP4XZ/c81TWPgY4z0SkBDPNktjPM4fW2dhyHSEwn2Wz32iD8HSwv # XtPdm7f8CTbAXRhKQU6XjnGizhn8XeICwqXfRTZCPqtKNCIklH0= # =/TnF # -----END PGP SIGNATURE----- # gpg: Signature made Tue 21 Jul 2026 13:04:23 EDT # gpg: using RSA key A0F66548F04895EBFE6B0B6051A343C7CFFBECA1 # gpg: Good signature from "Cédric Le Goater <clg@redhat.com>" [full] # gpg: aka "Cédric Le Goater <clg@kaod.org>" [full] # Primary key fingerprint: A0F6 6548 F048 95EB FE6B 0B60 51A3 43C7 CFFB ECA1 * tag 'pull-vfio-20260721' of https://github.com/legoater/qemu: vfio-user: vfio_user_device_io_set_irqs: prevent excessive malloc vfio-user: vfio_user_device_io_set_irqs: prevent buffer overflow vfio-user: vfio_user_device_io_device_feature: prevent excessive malloc vfio-user: vfio_user_device_io_device_feature: prevent buffer overflow vfio-user: vfio_user_device_io_get_region_info: fix capability check vfio-user: vfio_user_get_region_info: prevent excessive malloc vfio-user: vfio_user_get_region_info: reject unreasonably short struct vfio-user: vfio_user_get_region_info: respect max_xfer_size vfio-user: vfio_user_get_region_info: prevent buffer overflow vfio/pci: reject invalid PCI_INTERRUPT_PIN values vfio/pci: don't narrow a failed config read to a plausible value vfio/region: Clarify dma-buf failure messages vfio/igd: Clear saved BDSM in legacy VBIOS ROM at load time Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>