Re: [PULL 00/13] Misc fixes patches

["Daniel P. Berrangé" <berrange@redhat.com>]

Sorry, this one is going to fail on the msys2 job, due
to the new websock test trying to use AF_UNIX which
fails at runtime only. I'll re-spin changing the new
test to skip Windows hosts.

On Fri, Sep 04, 2026 at 11:59:16AM +0100, Daniel P. Berrangé wrote:
> The following changes since commit 99e54ab5e7a6efc945af6d5661842155d1f3fc7a:
> 
>   Merge tag 'hw-misc-20260903' of https://github.com/philmd/qemu into staging (2026-09-03 16:43:24 +0100)
> 
> are available in the Git repository at:
> 
>   https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request
> 
> for you to fetch changes up to a61ee2ff816bc2804f773cbcff45a6cd8d83330d:
> 
>   docs/system/security: exclude uninitialized stack variables as bugs (2026-09-04 11:17:00 +0100)
> 
> ----------------------------------------------------------------
> Merge crypto, I/O and misc fixes
> 
>  * Deprecated the AF_ALG crypto backend
>  * Improve checkpatch output in CI jobs
>  * Fix --disable-containers arg handling in configure
>  * Document security policy for uninitialized stack variables
>  * Fix multiple denial of service flaws in websockets
>  * Fix error handling in some x509 APIs
> 
> ----------------------------------------------------------------
> 
> Daniel P. Berrangé (4):
>   crypto: deprecate the AF_ALG crypto backend
>   gitlab: use --emacs --quiet for checkpatch.pl instead of --terse
>   configure: correctly honour --disable-containers
>   docs/system/security: exclude uninitialized stack variables as bugs
> 
> Denis V. Lunev (6):
>   io/channel-socket: do not treat a zero length write as an error
>   io/channel-websock: send an HTTP 400 when the greeting has no space
>   io/channel-websock: handle a blocked write during the handshake
>   tests/unit: add websock handshake test
>   io/channel-websock: do not lose QIO_CHANNEL_ERR_BLOCK while reading
>   tests/unit: cover blocked IO during the websock handshake
> 
> Evgeny Kolmakov (1):
>   crypto: Use g_autofree
> 
> Marc-André Lureau (2):
>   crypto/x509-utils: don't double set errp
>   crypto/x509-utils: propagate the error
> 
>  .gitlab-ci.d/check-patch.py          |   6 +-
>  configure                            |   1 +
>  crypto/block.c                       |  17 +-
>  crypto/hmac-gcrypt.c                 |  12 +-
>  crypto/hmac-glib.c                   |  10 +-
>  crypto/ivgen-essiv.c                 |  15 +-
>  crypto/ivgen.c                       |   6 +-
>  crypto/secret_keyring.c              |   5 +-
>  crypto/x509-utils.c                  |   4 +-
>  docs/about/deprecated.rst            |  21 +++
>  docs/system/security.rst             |  10 ++
>  io/channel-socket.c                  |   2 +-
>  io/channel-websock.c                 |  10 +-
>  meson.build                          |   6 +
>  tests/unit/meson.build               |   1 +
>  tests/unit/test-io-channel-websock.c | 249 +++++++++++++++++++++++++++
>  16 files changed, 327 insertions(+), 48 deletions(-)
>  create mode 100644 tests/unit/test-io-channel-websock.c
> 
> -- 
> 2.55.0
> 

With regards,
Daniel
-- 
|: https://berrange.com       ~~        https://hachyderm.io/@berrange :|
|: https://libvirt.org          ~~          https://entangle-photo.org :|
|: https://pixelfed.art/berrange   ~~    https://fstop138.berrange.com :|