For... ab9f0cb1d27 further stabilize by importing patches of qemu v4.2.1 ---- stable/lp-1891877-9p-Lock-directory-streams-with-a-CoMutex.patch stable/lp-1891877-9p-local-always-return-1-on-error-in-local_unlinkat_.patch stable/lp-1891877-9p-proxy-Fix-export_flags.patch stable/lp-1891877-9pfs-include-linux-limits.h-for-XATTR_SIZE_MAX.patch stable/lp-1891877-9pfs-local-Fix-possible-memory-leak-in-local_link.patch stable/lp-1891877-9pfs-local-ignore-O_NOATIME-if-we-don-t-have-permiss.patch stable/lp-1891877-Fix-double-free-issue-in-qemu_set_log_filename.patch stable/lp-1891877-Fix-tulip-breakage.patch stable/lp-1891877-Revert-qemu-options.hx-Update-for-reboot-timeout-par.patch stable/lp-1891877-Revert-vnc-allow-fall-back-to-RAW-encoding.patch stable/lp-1891877-Update-version-for-4.2.1-release.patch stable/lp-1891877-blkdebug-Allow-taking-unsharing-permissions.patch stable/lp-1891877-block-Add-bdrv_qapi_perm_to_blk_perm.patch stable/lp-1891877-block-Avoid-memleak-on-qcow2-image-info-failure.patch stable/lp-1891877-block-Call-attention-to-truncation-of-long-NBD-expor.patch stable/lp-1891877-block-Fix-VM-size-field-width-in-snapshot-dump.patch stable/lp-1891877-block-backup-fix-memory-leak-in-bdrv_backup_top_appe.patch stable/lp-1891877-block-bdrv_set_backing_bs-fix-use-after-free.patch stable/lp-1891877-block-fix-memleaks-in-bdrv_refresh_filename.patch stable/lp-1891877-compat-disable-edid-on-correct-virtio-gpu-device.patch stable/lp-1891877-display-bochs-display-fix-memory-leak.patch stable/lp-1891877-dp8393x-Always-update-RRA-pointers-and-sequence-numb.patch stable/lp-1891877-dp8393x-Always-use-32-bit-accesses.patch stable/lp-1891877-dp8393x-Clean-up-endianness-hacks.patch stable/lp-1891877-dp8393x-Clear-RRRA-command-register-bit-only-when-ap.patch stable/lp-1891877-dp8393x-Clear-descriptor-in_use-field-to-release-pac.patch stable/lp-1891877-dp8393x-Don-t-clobber-packet-checksum.patch stable/lp-1891877-dp8393x-Don-t-reset-Silicon-Revision-register.patch stable/lp-1891877-dp8393x-Don-t-stop-reception-upon-RBE-interrupt-asse.patch stable/lp-1891877-dp8393x-Have-dp8393x_receive-return-the-packet-size.patch stable/lp-1891877-dp8393x-Implement-packet-size-limit-and-RBAE-interru.patch stable/lp-1891877-dp8393x-Mask-EOL-bit-from-descriptor-addresses.patch stable/lp-1891877-dp8393x-Pad-frames-to-word-or-long-word-boundary.patch stable/lp-1891877-dp8393x-Update-LLFA-and-CRDA-registers-from-rx-descr.patch stable/lp-1891877-dp8393x-Use-long-word-aligned-RRA-pointers-in-32-bit.patch stable/lp-1891877-dump-Fix-writing-of-ELF-section.patch stable/lp-1891877-hmp-vnc-Fix-info-vnc-list-leak.patch stable/lp-1891877-hostmem-don-t-use-mbind-if-host-nodes-is-empty.patch stable/lp-1891877-hw-arm-cubieboard-use-ARM-Cortex-A8-as-the-default-C.patch stable/lp-1891877-hw-arm-smmuv3-Align-stream-table-base-address-to-tab.patch stable/lp-1891877-hw-arm-smmuv3-Apply-address-mask-to-linear-strtab-ba.patch stable/lp-1891877-hw-arm-smmuv3-Check-stream-IDs-against-actual-table-.patch stable/lp-1891877-hw-arm-smmuv3-Correct-SMMU_BASE_ADDR_MASK-value.patch stable/lp-1891877-hw-arm-smmuv3-Report-F_STE_FETCH-fault-address-in-co.patch stable/lp-1891877-hw-arm-smmuv3-Use-correct-bit-positions-in-EVT_SET_A.patch stable/lp-1891877-hw-i386-amd_iommu.c-Fix-corruption-of-log-events-pas.patch stable/lp-1891877-hw-intc-arm_gicv3_kvm-Stop-wrongly-programming-GICR_.patch stable/lp-1891877-i386-Resolve-CPU-models-to-v1-by-default.patch stable/lp-1891877-ide-Fix-incorrect-handling-of-some-PRDTs-in-ide_dma_.patch stable/lp-1891877-iotests-026-Move-v3-exclusive-test-to-new-file.patch stable/lp-1891877-iotests-026-Test-EIO-on-allocation-in-a-data-file.patch stable/lp-1891877-iotests-026-Test-EIO-on-preallocated-zero-cluster.patch stable/lp-1891877-iotests-283-Use-consistent-size-for-source-and-targe.patch stable/lp-1891877-iotests-Fix-IMGOPTSSYNTAX-for-nbd.patch stable/lp-1891877-iotests-Fix-nonportable-use-of-od-endian.patch stable/lp-1891877-iotests-Test-copy-offloading-with-external-data-file.patch stable/lp-1891877-iotests-add-test-for-backup-top-failure-on-permissio.patch stable/lp-1891877-m68k-Fix-regression-causing-Single-Step-via-GDB-RSP-.patch stable/lp-1891877-migration-Rate-limit-inside-host-pages.patch stable/lp-1891877-migration-colo-fix-use-after-free-of-local_err.patch stable/lp-1891877-migration-ram-fix-use-after-free-of-local_err.patch stable/lp-1891877-migration-test-ppc64-fix-FORTH-test-program.patch stable/lp-1891877-net-Do-not-include-a-newline-in-the-id-of-nic-device.patch stable/lp-1891877-numa-properly-check-if-numa-is-supported.patch stable/lp-1891877-numa-remove-not-needed-check.patch stable/lp-1891877-ppc-ppc405_boards-Remove-unnecessary-NULL-check.patch stable/lp-1891877-qapi-better-document-NVMe-blockdev-device-parameter.patch stable/lp-1891877-qcow2-List-autoclear-bit-names-in-header.patch stable/lp-1891877-qcow2-update_refcount-Reset-old_table_index-after-qc.patch stable/lp-1891877-qemu-ga-document-vsock-listen-in-the-man-page.patch stable/lp-1891877-qemu-nbd-Close-inherited-stderr.patch stable/lp-1891877-qga-Fix-undefined-C-behavior.patch stable/lp-1891877-qga-Installer-Wait-for-installation-to-finish.patch stable/lp-1891877-qga-win-Handle-VSS_E_PROVIDER_ALREADY_REGISTERED-err.patch stable/lp-1891877-qga-win-prevent-crash-when-executing-guest-file-read.patch stable/lp-1891877-runstate-ignore-finishmigrate-prelaunch-transition.patch stable/lp-1891877-s390x-adapter-routes-error-handling.patch stable/lp-1891877-scsi-qemu-pr-helper-Fix-out-of-bounds-access-to-trnp.patch stable/lp-1891877-sheepdog-Consistently-set-bdrv_has_zero_init_truncat.patch stable/lp-1891877-spapr-Fix-failure-path-for-attempting-to-hot-unplug-.patch stable/lp-1891877-target-arm-Clear-tail-in-gvec_fmul_idx_-gvec_fmla_id.patch stable/lp-1891877-target-arm-Correct-definition-of-PMCRDP.patch stable/lp-1891877-target-arm-fix-TCG-leak-for-fcvt-half-double.patch stable/lp-1891877-target-arm-monitor-query-cpu-model-expansion-crashed.patch stable/lp-1891877-target-ppc-Fix-mtmsr-d-L-1-variant-that-loses-interr.patch stable/lp-1891877-target-ppc-Fix-rlwinm-on-ppc64.patch stable/lp-1891877-target-xtensa-fix-pasto-in-pfwait.r-opcode-name.patch stable/lp-1891877-tcg-i386-Fix-INDEX_op_dup2_vec.patch stable/lp-1891877-tcg-mips-mips-sync-encode-error.patch stable/lp-1891877-tests-fix-modules-test-duplicate-test-case-error.patch stable/lp-1891877-tests-ide-test-Create-a-single-unit-test-covering-mo.patch stable/lp-1891877-vhost-user-blk-delete-virtioqueues-in-unrealize-to-f.patch stable/lp-1891877-vhost-user-gpu-Release-memory-returned-by-vu_queue_p.patch stable/lp-1891877-virtio-9p-device-fix-memleak-in-virtio_9p_device_unr.patch stable/lp-1891877-virtio-add-ability-to-delete-vq-through-a-pointer.patch stable/lp-1891877-virtio-balloon-fix-free-page-hinting-check-on-unreal.patch stable/lp-1891877-virtio-balloon-fix-free-page-hinting-without-an-ioth.patch stable/lp-1891877-virtio-balloon-unref-the-iothread-when-unrealizing.patch stable/lp-1891877-virtio-crypto-do-delete-ctrl_vq-in-virtio_crypto_dev.patch stable/lp-1891877-virtio-make-virtio_delete_queue-idempotent.patch stable/lp-1891877-virtio-pmem-do-delete-rq_vq-in-virtio_pmem_unrealize.patch stable/lp-1891877-virtio-reset-region-cache-when-on-queue-deletion.patch stable/lp-1891877-vpc-Don-t-round-up-already-aligned-BAT-sizes.patch stable/lp-1891877-xen-9pfs-yield-when-there-isn-t-enough-room-on-the-r.patch stable/lp-1891877-xen-block-Fix-double-qlist-remove-and-request-leak.patch ---- dad6d5e7e6 9p: Lock directory streams with a CoMutex 03afe9c035 9p: local: always return -1 on error in local_unlinkat_common 410252fc5b 9p/proxy: Fix export_flags 0c6499ff2b 9pfs: include linux/limits.h for XATTR_SIZE_MAX 18f6b13e08 9pfs: local: Fix possible memory leak in local_link() 17216bc044 9pfs: local: ignore O_NOATIME if we don't have permissions 45b65bf8df Fix double free issue in qemu_set_log_filename(). 0664ffac4b Fix tulip breakage aea7a50fb5 Revert "qemu-options.hx: Update for reboot-timeout parameter" b5ba361d8f Revert "vnc: allow fall back to RAW encoding" 6cdf8c4efa (tag: refs/tags/v4.2.1, refs/remotes/origin/stable-4.2) Update version for 4.2.1 release 9a30621d3d blkdebug: Allow taking/unsharing permissions 0972fbf353 block: Add bdrv_qapi_perm_to_blk_perm() 47e0fa7479 block: Avoid memleak on qcow2 image info failure 6c75ddf4a9 block: Call attention to truncation of long NBD exports 0b487ea664 block: Fix VM size field width in snapshot dump dc6bdba433 block/backup: fix memory leak in bdrv_backup_top_append() 5ff78dc9bc block: bdrv_set_backing_bs: fix use-after-free a967e75f3a block: fix memleaks in bdrv_refresh_filename 219362f965 compat: disable edid on correct virtio-gpu device 7e1bc51f3f display/bochs-display: fix memory leak 1190026fe4 dp8393x: Always update RRA pointers and sequence numbers 956e1b2d97 dp8393x: Always use 32-bit accesses bf3f12ac8c dp8393x: Clean up endianness hacks 5f08c382ca dp8393x: Clear RRRA command register bit only when appropriate 8d61b1e2c4 dp8393x: Clear descriptor in_use field to release packet d50aa8acbc dp8393x: Don't clobber packet checksum 735cd8ddab dp8393x: Don't reset Silicon Revision register 3e1d95301e dp8393x: Don't stop reception upon RBE interrupt assertion 153c3320e7 dp8393x: Have dp8393x_receive() return the packet size 3a8068f4eb dp8393x: Implement packet size limit and RBAE interrupt eb54a2f9ce dp8393x: Mask EOL bit from descriptor addresses cbc8277051 dp8393x: Pad frames to word or long word boundary edd67a61f4 dp8393x: Update LLFA and CRDA registers from rx descriptor e7cad754fd dp8393x: Use long-word-aligned RRA pointers in 32-bit mode 25fcaed9a3 dump: Fix writing of ELF section 674d382225 hmp/vnc: Fix info vnc list leak 34c78a4100 hostmem: don't use mbind() if host-nodes is empty 9dd68ac26b hw/arm/cubieboard: use ARM Cortex-A8 as the default CPU in machine definition 65fad28d85 hw/arm/smmuv3: Align stream table base address to table size e8ae3a4e2b hw/arm/smmuv3: Apply address mask to linear strtab base address 256ecc06eb hw/arm/smmuv3: Check stream IDs against actual table LOG2SIZE 606a6bf788 hw/arm/smmuv3: Correct SMMU_BASE_ADDR_MASK value 9b59fdf478 hw/arm/smmuv3: Report F_STE_FETCH fault address in correct word position ec3bd881e2 hw/arm/smmuv3: Use correct bit positions in EVT_SET_ADDR2 macro 33be7aa9b6 hw/i386/amd_iommu.c: Fix corruption of log events passed to guest 9adb6569bf hw/intc/arm_gicv3_kvm: Stop wrongly programming GICR_PENDBASER.PTZ bit bed590f2b8 i386: Resolve CPU models to v1 by default 4412cb3bca ide: Fix incorrect handling of some PRDTs in ide_dma_cb() 2f7597fbc2 iotests/026: Move v3-exclusive test to new file 4540aa4a8d iotests/026: Test EIO on allocation in a data-file 30aa0ea6c5 iotests/026: Test EIO on preallocated zero cluster 4a0db6ba7d iotests/283: Use consistent size for source and target 6772bba8a4 iotests: Fix IMGOPTSSYNTAX for nbd c6decabc4a iotests: Fix nonportable use of od --endian 373fd948ab iotests: Test copy offloading with external data file 8952da32c3 iotests: add test for backup-top failure on permission activation c44015c50c m68k: Fix regression causing Single-Step via GDB/RSP to not single step 52771abbfa migration: Rate limit inside host pages 09397e9657 migration/colo: fix use after free of local_err 1c8d9fb334 migration/ram: fix use after free of local_err e8a286010c migration-test: ppc64: fix FORTH test program 252d614ea2 net: Do not include a newline in the id of -nic devices cbdfd3865b numa: properly check if numa is supported 89eebb016d numa: remove not needed check 745859d5bf ppc/ppc405_boards: Remove unnecessary NULL check d636d64b35 qapi: better document NVMe blockdev @device parameter 5eca12bbad qcow2: List autoclear bit names in header f9854de0d8 qcow2: update_refcount(): Reset old_table_index after qcow2_cache_put() 8f5728cb97 qemu-ga: document vsock-listen in the man page ad56aecb21 qemu-nbd: Close inherited stderr e3531619f1 qga: Fix undefined C behavior 7cc217b30d qga: Installer: Wait for installation to finish 3c3e1653c5 qga-win: Handle VSS_E_PROVIDER_ALREADY_REGISTERED error 4996bd7161 qga-win: prevent crash when executing guest-file-read with large count d306348fd6 runstate: ignore finishmigrate -> prelaunch transition bc509b2a5b s390x: adapter routes error handling 4a1c5955e7 scsi/qemu-pr-helper: Fix out-of-bounds access to trnptid_list[] 60c21aa017 sheepdog: Consistently set bdrv_has_zero_init_truncate 9c2e242077 spapr: Fix failure path for attempting to hot unplug PCI bridges d5691a6373 target/arm: Clear tail in gvec_fmul_idx_*, gvec_fmla_idx_* 1509a13240 target/arm: Correct definition of PMCRDP aacf6bfb7e target/arm: fix TCG leak for fcvt half->double ee9f37f3e5 target/arm/monitor: query-cpu-model-expansion crashed qemu when using machine type none 8d127b4be7 target/ppc: Fix mtmsr(d) L=1 variant that loses interrupts 4a9486a02d target/ppc: Fix rlwinm on ppc64 97701bc03e target/xtensa: fix pasto in pfwait.r opcode name aabd9ddd2d tcg/i386: Fix INDEX_op_dup2_vec 27f56b9aa2 tcg/mips: mips sync* encode error 3729ff3032 tests: fix modules-test 'duplicate test case' error 3a94a8b7fd tests/ide-test: Create a single unit-test covering more PRDT cases 4e258da94a vhost-user-blk: delete virtioqueues in unrealize to fix memleaks ea1518bb5e vhost-user-gpu: Release memory returned by vu_queue_pop() with free() 603cda272d virtio-9p-device: fix memleak in virtio_9p_device_unrealize d5a5d43e27 virtio: add ability to delete vq through a pointer 2a7c80d82e virtio-balloon: fix free page hinting check on unrealize e27f334fdc virtio-balloon: fix free page hinting without an iothread d6d45d9ed1 virtio-balloon: unref the iothread when unrealizing e08de99abe virtio-crypto: do delete ctrl_vq in virtio_crypto_device_unrealize a843731d7f virtio: make virtio_delete_queue idempotent 5e063a5846 virtio-pmem: do delete rq_vq in virtio_pmem_unrealize a474197f11 virtio: reset region cache when on queue deletion ecdb0d5651 vpc: Don't round up already aligned BAT sizes 2367c7235b xen/9pfs: yield when there isn't enough room on the ring c5feb39219 xen-block: Fix double qlist remove and request leak ---- all good.