From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazon11023116.outbound.protection.outlook.com [52.101.72.116]) by lore.virtuozzo.com (Postfix) with ESMTPS id AE88D803D6 for ; Fri, 4 Sep 2026 10:12:20 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=jnWcs9leEmqFwgAVZG57wgznDlmJWLfyUgzklue1OOkjXawsOLCsa1NKCG+4Dk/eEzzj23NaHPKX1X7iy3GR3Pkab4LAG2ncj/A543yAhtaFnkFEuB2WH9PuwS7K6a/+t36A4+68jzFho61p8UMOjxUAej2+HurZuRQIPIzD09n9eLGVOakFrnKuBN+xWBXZjLWdbII9wdNucJRvE91N/6fUyeoKlYe0wx4zGpr+lq1gBoLI1aypGPgYyodhW/F3j/g+c8ij3+rQ/0Fd7go6IRrZw0zg472CFouINMHcAm4oKyrWOGsLASIn0VFl2pbDGTBcWMenaVTrO+6WWBbC+g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=a0/f+zZZmmg+y8j2kJXmxiK9PnLRRqvWz6eCkPcC4MY=; b=OkJW/gGNfNdmtZXPsbvFQbR7o9hNLXwJBn3y0PahGOApaTzOMxtWPXOAjIBf+mP+2GnzDnoKB1iS2hJvlAskJcjWuyqoxPKiu/JXFrXG4HN07Ma0t1jrbAoWqydH5xwhOdh4TLV/yJVYmi6XJzoRfmehK37hW3WpfIwK2J7fs+uc4+c93BzQmbLFbEcZYPb8fWJjuqziMaT9XtvLdaVYz4QA/Zg2HojlQ5E74U5k5hEHw6iLryMSOpCnuWVEKOBVT58Ul062nqEi5AtVG26AZR6CuUOEkkBH5FkZbjwn7oP3Xpv3IG4rLAfNDm3Ln8ZiptPaUYIaqvCEw+oYZ4ElcQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=virtuozzo.com; dmarc=pass action=none header.from=virtuozzo.com; dkim=pass header.d=virtuozzo.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtuozzo.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=a0/f+zZZmmg+y8j2kJXmxiK9PnLRRqvWz6eCkPcC4MY=; b=a7ALQxpb0LJ7v9obz1O/FDxsOI72al5PDAeKZB7zminVn/ieUL+RmzRBXsBT3yUrkyj607GB6fzgpqI8XJKVu/5QubW3qU+ilp5SVww7WZmdFZvvgmWoR4+wZafA7XNS+xXkXgIVM1upuZMnW7YGzToSZmLFoqWT9SLj93nwbQB6nLVojWgLPQU8+barMAEN6fZrWwKCqtnmydwVwxYDsISJtNByHOdKt4nXYZ3uYHoc1iRXMOcE56QPgHy8ZiVngknyYZJ46kS65U/LgE7DQes2GsRv55j9J4VIfjIEe5B/b6665AsvSqYut6qfvy4S5lXZq/MXFDcPNyil43ufNg== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=virtuozzo.com; Received: from VI0PR08MB10656.eurprd08.prod.outlook.com (2603:10a6:800:20a::12) by DBBPR08MB6105.eurprd08.prod.outlook.com (2603:10a6:10:20d::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.10; Fri, 4 Sep 2026 10:12:16 +0000 Received: from VI0PR08MB10656.eurprd08.prod.outlook.com ([fe80::4e37:b189:ddcd:3dd8]) by VI0PR08MB10656.eurprd08.prod.outlook.com ([fe80::4e37:b189:ddcd:3dd8%7]) with mapi id 15.21.0382.007; Fri, 4 Sep 2026 10:12:16 +0000 From: Andrey Drobyshev To: svt-core@virtuozzo.com Cc: andrey.drobyshev@virtuozzo.com, den@openvz.org Subject: [QEMU HCI-8.0 PATCH 00/15] VNC stability fixes Date: Fri, 4 Sep 2026 13:11:50 +0300 Message-ID: <20260904101206.701978-1-andrey.drobyshev@virtuozzo.com> X-Mailer: git-send-email 2.47.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-ClientProxiedBy: VIUP296CA0052.AUTP296.PROD.OUTLOOK.COM (2603:10a6:800:34b::10) To VI0PR08MB10656.eurprd08.prod.outlook.com (2603:10a6:800:20a::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: VI0PR08MB10656:EE_|DBBPR08MB6105:EE_ X-MS-Office365-Filtering-Correlation-Id: e646b789-3510-477e-62fe-08df0a6cff45 X-LD-Processed: 0bc7f26d-0264-416e-a6fc-8352af79c58f,ExtAddr List-Id: svt-core@virtuozzo.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|376014|366016|23010399003|52116014|5113699003|18002099003|56012099006|10067099003|38350700014; X-Microsoft-Antispam-Message-Info: PVG7EEFd1vuXPMis5xOfZrHpRNbSYKUYrWZtLWSwwFFhRTjEu12kwFlzvmPjsuD8R+uP2W5YscyFSmCJ82MfA35grfS1l4YMvR0rF8wxOIthhNkI1mcKngYkiwRwTuZi/QaoJ3LU7WaO6ycWRZqv74hq+NT1WOhVlyalONd7YlJ90mlvKBDly+dujaGu+Pf+VEeqISWmcQxjV6MaV2a80BuBnW6sjM5Ef7SoxRPPB6lb2qbzlgBp2GbveeIRgjzclOV9TX4oSsTQiKrG5KrnV8L6i/enbQtulSTUJZBV6Xn4PXtCCnciXheU314gfsU3vbx8+NC1uvhsVFYD518loW/zklZ/vfHiG47WjJJ5mLd/ue0wg1JLKIDCyv9xWJ7BgNMYcrusTqhX+/cROpqK9eAwuIFp0i1BmP/Y56K3k56KS74UzlNHlbQ9u5FLYQEpSbKW3pfJiyM09CRJV3a+OW3EkVv9LKkxId4boGnJIIpVjtQrqwDX9T40YQyr8E8R/YtbKSIhhdQNwF/pepI779qH75W/NGrywKj4/vXwZ3dS7sk4gTVtINqLgqdU0Ksw3lCefmqCHL5NgNR5jilnLA7LVwg2At3ig8UVQAHUvcgPgV5/B97kCJPqTOkf4Yp0o/xhevm2eLqO9mDBGVbXLwYKbrEOuvsdVKqjuID5JqajYyOfAUqC115dQcOVxXZ7TZ9yp37AABrYyad6O8VbSA== X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:VI0PR08MB10656.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(23010399003)(52116014)(5113699003)(18002099003)(56012099006)(10067099003)(38350700014);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?b1RvRnhnV3dzWUJzckxwSHp2YUw5anJKOW5EZmFHNE9uZkZ2U1grMURaZzBj?= =?utf-8?B?ODBNa0FZOGxKRytIVzRvbUhseWpWZ3VTSHluTjM0Zno2dTIxS1Y3eHNJMkg1?= =?utf-8?B?aG5hcDZXME5kZGJCMmYvallJMksrQmIzYTJBTTQ4TFlxVUVYTUpvaXgxcmx0?= =?utf-8?B?M1JmUmtyUTBqYjRXTzA0bWNMa21yU0RXdGlSZEdaTHQwK2wwc0N1OTVmei9k?= =?utf-8?B?WVRid28vTHpNTVNtalVleGYrN2FoTXZKbVpQTUJZbVVySUlMK0NHbGo0UW5j?= =?utf-8?B?RVh6bnc0azZ1Y0RhUUJHb2pzc3dSSHdOTnhQUnhmMWZoYUFnaEd4TG45c1ly?= =?utf-8?B?c1czVDQ0QnFQN1o3Nm1NS0JZSzRIV05FMzBmRytPdTU0TUdMb2ZXSXl5TkZp?= =?utf-8?B?VFg1ekswSGNSRDVwOVp1WEpmTGxCT0x1VHd5N0t3NUI2SkQxdE1Lalp6VTNS?= =?utf-8?B?NkdKYzQ2STFvc1NIM3NGcE5FMzlEemUzOGIwSlgvZjlMRlpRcWVhbS9Uanhk?= =?utf-8?B?cVNwOWRTaFpiNDRSZFpHTmpmT0FGTTQxWHFYR080T1hGQitRbFp3R1lKT2Qw?= =?utf-8?B?MTQxdlduTVNkb3REYm0wdGxMc3hzTFJFbUlLTDNwUWRZckg2RjI3SStsWHRF?= =?utf-8?B?dmxXZ2NmZGI5VWlkbkxJcHhzYnZpQ2JWdHNxUmZxaU5MN1ZPdUk4YzNIdStF?= =?utf-8?B?QUZoOUpSTnVzZG1GN2RKSk00MXd1VXRiUG1qZFFWcGZaN1hsZ1huWGF3dDlE?= =?utf-8?B?djI1VStqdFk4T1Y4UFdxdFFxMEV6Q0gvWGFZaHFLK1lndlF0RVh6V09mcEFq?= =?utf-8?B?UmtGSDMydEVhTzVxR3RNYjRvOEVrT1dFcThHZDUyaFJ0R3BRNVROOFg4dEE2?= =?utf-8?B?TFhKQndFck9Za3A5WUxTckl4UzJpU0tscnNnL054Qk16dW5YQWZsWGZOL0hn?= =?utf-8?B?TFNBNFQwOWtuenk1Mjh0OW1CelJBaDFYM3d0V0ljK1Blc0Q5UTBwdXVRMVcx?= =?utf-8?B?bGZCNE9ETlZCd0JWUWhvbitSSytiajhSc1pwTTFTcXFJaVV2TVJqQ1ZQYWFJ?= =?utf-8?B?Z3NvOUw2VlJ5TG5iUW5aOHdOcVdhaGsxZWhnTWNZakV6NGhKdXBGVDRnbTJm?= =?utf-8?B?QzBOUmliQ3FucWlDSm05UkFTdk9GYVBjTEM1V0tzYm1vc1R2amRkeWhQMkRJ?= =?utf-8?B?SmNNOXJXUTJjUjMvdU53U2UwKzBwdlV1N0hPMVBzaUNodzEyR1U3RTBWc2dj?= =?utf-8?B?b09qYmZmWGloODF5UTA5cExzcDJFQmN2Rll1L004UUY4eTVwNU1kdlVPZTNr?= =?utf-8?B?Q2lScHB5dWl0L1p4YXZVaVVGb05iSStOZ29VS1Ztc05aVk5OZ0I4bjJrc1pu?= =?utf-8?B?by84NklZbitkalhldjBNWFJKK2czQ05NQmtkMW9xb0VxcTludnJOeThUbWpr?= =?utf-8?B?b1V0ckxsY0tjcEhZOE9Obmp6bmpjM21PSlZUSlY0RXlXSHA0ZnFVdlR1cVMx?= =?utf-8?B?QnNGRjY4bTBmNWltWkcwNU1DWUtjMWMyZDFWeVFKdE15TXNqeU56cXY0ak96?= =?utf-8?B?a1h6NWMxa0FtMTUydmFMeGE2V0g2YlB0M2JhQzlaN2dlQmQxVnNVaGxlSThU?= =?utf-8?B?Qk5Bc21UWW9ib1dPMDJpb3c4bVlKNkc5YlJGVmdxbDFNTXdmTTJlZzJGMkFw?= =?utf-8?B?YVd6SnBaaitYS29nTjF5UUpiU1VJck9PYStDYWVjc1pIT2xCV2JBRXY5d3Bu?= =?utf-8?B?UjRJQXJFQ1hIMWxlUzF2cUNleE9uZ0gxVTltVHRhblBmTGFVSldaUVlFN1pp?= =?utf-8?B?RXFtRytYNVJuYzh1LzNpRUhDaFA3dmNjeGV6OUlyQzJlc0hQb2pmTkNOckZw?= =?utf-8?B?VU9OUlFzdE8rT2lTeE03cFlNM1F0MUExKzI3Ni8vbG9oWC9yeVcrajJOOERN?= =?utf-8?B?SW5QdmgvN05IQXRXU2ZTMFN1QWxwaHpnWWVBY3NYcnFpNnpqVGJOd0s0bGNh?= =?utf-8?B?dCsyTkdjNmthdlRRT1ZSaUVldjI2QVNHdkhwdWYyWVExU2VLSk5IYlpFN1Nz?= =?utf-8?B?S0Z3UmVyT0tvbXdHenN0d05TT3N5SnpGRmF0VTdJL1oxYm5RbDF0SGc2dTFO?= =?utf-8?B?REhzTXpDUnBaLytjQzIzSkdBU1MxS2dhUTF2YzcrclduOUV4RHJsSm9lTGQ1?= =?utf-8?B?VnpDKzhDQTFhZkh5Qityb1dDcisvNUJNUTdmQ215R3krc0lINlUwRlBXU2Vw?= =?utf-8?B?SDhoU3BrRi9JOHBXVEZKc3A4dGNSVm44QitFdWVrVXZvWEV1amIxc0pjclRi?= =?utf-8?B?bFM4dHU2V0VxMm9FT1ZuSlBFR0JjaVprSmtNUmw2RS9wdzQ4TWw5T291aGFm?= =?utf-8?Q?RkLW/hGD/e2qT87c=3D?= X-Auto-Response-Suppress: DR, OOF, AutoReply X-OriginatorOrg: virtuozzo.com X-MS-Exchange-CrossTenant-Network-Message-Id: e646b789-3510-477e-62fe-08df0a6cff45 X-MS-Exchange-CrossTenant-AuthSource: VI0PR08MB10656.eurprd08.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Sep 2026 10:12:16.7167 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 0bc7f26d-0264-416e-a6fc-8352af79c58f X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: Mu+isxS8JutvZxbv8pJDsMgy9DOCxNFHkrlNweqDAvULJF2vc4nVpA+AxMW8i7NTrm/iMC/3e+1YgFwYSN9ujQh9o/whCY4GckUgMpM5ovo= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR08MB6105 These are VNC CVE/stability fixes, all cherry-picked from master or qemu-stable. AlanoSong@163.com (1): ui/vnc: Fix qemu abort when query vnc info Daniel P. Berrangé (4): ui/vnc: fix OOB read access in VNC SASL mechname array ui/vnc: fix OOB write in VNC stats array ui/vnc: fix OOB write in lossy rect worker code ui/vnc: fix OOB read updating VNC update frequency stats Heechan Kang (1): ui: fix validation of VNC extended clipboard data length Marc-André Lureau (8): ui/vnc-jobs: fix VncRectEntry leak on job cleanup ui/vnc: fix OOB write in vnc_refresh_lossy_rect ui/vnc: validate color shifts in SetPixelFormat ui/vnc: use RFB wire types for client message handlers ui/vnc: fix out-of-bounds write in lossy refresh dirty marking ui/vnc: validate SetPixelFormat field ranges ui/vnc: remove redundant rows computation ui/spice: fix crash when disabling GL scanout on Thomas Huth (1): ui/vnc: Fix crash when specifying [vnc] without id in the config file ui/spice-display.c | 4 +- ui/vnc-auth-sasl.c | 2 + ui/vnc-clipboard.c | 9 +++- ui/vnc-jobs.c | 19 +++++++- ui/vnc.c | 107 +++++++++++++++++++++++++++------------------ ui/vnc.h | 4 +- 6 files changed, 96 insertions(+), 49 deletions(-) -- 2.47.1