[GIT PULL v2 0/9] Fixes for 11.1-rc

["Marc-André Lureau" <marcandre.lureau@redhat.com>]

The following changes since commit b428fe036233cbd15d37e3c027ab6ca4d3661a80:

  Merge tag 'pull-target-arm-20260731' of https://gitlab.com/pm215/qemu into staging (2026-07-31 16:19:04 -0400)

are available in the Git repository at:

  https://gitlab.com/marcandre.lureau/qemu.git tags/fix-pr-v2

for you to fetch changes up to dd272c8c87f165d41c945946242c5c8619e7122f:

  qapi/dump: add allowed-by-guest feature to win-dmp (2026-08-04 23:21:40 +0400)

----------------------------------------------------------------
Fixes for 11.1-rc

Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>

---
v2:
 - fix CVE# in "virtio-gpu: reject requests with short/truncated control
 headers"

----------------------------------------------------------------
Akihiko Odaki (1):
      hw/display/virtio-gpu: Always reject invalid scanout bounds

Ankur Saini (1):
      virtio-gpu: reject requests with short/truncated control headers

Bin Guo (1):
      hw/display/virtio-gpu: Unmap DMA regions on reset

Denis V. Lunev (1):
      qapi/dump: add allowed-by-guest feature to win-dmp

Marc-André Lureau (5):
      hw/display/virtio-gpu: validate blob iov size
      hw/display/vga: fix panning_buf OOB after text/graphics switch
      vhost-user-gpu: fix integer overflow in buffer allocation
      hw/display/virtio-gpu: fix offset wraparound in scanout_blob_to_fb
      hw/display/virtio-gpu: drop redundant node->value NULL checks

 qapi/dump.json                          |  9 +++-
 contrib/vhost-user-gpu/vugpu.h          |  1 +
 include/hw/virtio/virtio-gpu.h          |  8 ++++
 contrib/vhost-user-gpu/vhost-user-gpu.c | 29 +++++++-----
 contrib/vhost-user-gpu/vugbm.c          | 11 ++++-
 hw/display/vga.c                        |  7 +--
 hw/display/virtio-gpu-base.c            |  4 +-
 hw/display/virtio-gpu-rutabaga.c        |  6 +++
 hw/display/virtio-gpu-virgl.c           | 20 ++++-----
 hw/display/virtio-gpu.c                 | 80 ++++++++++++++++++++++++---------
 10 files changed, 126 insertions(+), 49 deletions(-)