Commit 4f4225874d for qemu.org

commit 4f4225874d4d3747ec1142e935dbd314218992fa
Merge: ed698be770 cfa70f3a82
Author: Richard Henderson <richard.henderson@linaro.org>
Date:   Thu Oct 22 12:47:21 2026 +0200

    Merge tag 'pull-request-2026-10-22' of https://gitlab.com/thuth/qemu into staging

    Various fixes for the USB code

    # -----BEGIN PGP SIGNATURE-----
    #
    # iQIzBAABCgAdFiEEJ7iIR+7gJQEY8+q5LtnXdP5wLbUFAmrZ5qsACgkQLtnXdP5w
    # LbUwdRAAm5qnbGSu4FFUC79n9KNbIyoGdI6zO3GAPk9VomKhf1b6lrk5iGZP8Xk7
    # A/1wBmO9FkxQRqrzdVu7IIUyZNGCBdLlYLNNTuEoQOG5uTBW/P+McFTgJe3yQmF9
    # FStkCChMcZe5XPiRy5NXWRUZYMJcdWa5LCL7AJ1EBTxW4IlT6Rf3/hVw1e8fgruK
    # zheWP89zSoZnJI51dFw2rm5EllPX21ktW5I/7iLdhl4bmKAQKgdhl2CdK7OhCNNY
    # xAh2HN/7HZ7/y5ky8mB1EzsU3JfpuFoC/kq+aBGEJ+YQhFnY1DSHu0tpKMn8aTVo
    # gPdihq00kh0POJzP0gPrqTTICfYcYyS04pmHR0DKL4pmuyMqNwwQMMYNjcq5lbFg
    # CEuYqxLTYZD7bhgFI9yo2Evuk74ulMxc3ALwZ8Y26DY5zTkJzRQrPR1Umrsw9g0t
    # H6DlJ1y9AQl0QPJaKbU7lnJ3WN21oVeQIhOs1TDaI13fP/lRVjFa+Ezzamie7hnb
    # uovx+noo++9A9Lj79UVVAK53CTdt8RYTWEJljBIV4ugS/k9hhbPO8K1nLdBkIxHZ
    # iKhzMhJjUKE1xHySkOJxCgDfsfIkcNxeqhxYoGpg+HY0LLMc7q0MYgzwPWByaA1B
    # 40QD2Q5y0dIv+eUPRL95hqyKrkDOgzFg+g760eToMKLQYJR3tIM=
    # =S65/
    # -----END PGP SIGNATURE-----
    # gpg: Signature made Thu 22 Oct 2026 12:34:19 PM CEST
    # gpg:                using RSA key 27B88847EEE0250118F3EAB92ED9D774FE702DB5
    # gpg: Good signature from "Thomas Huth <th.huth@gmx.de>" [unknown]
    # gpg:                 aka "Thomas Huth <thuth@redhat.com>" [unknown]
    # gpg:                 aka "Thomas Huth <th.huth@posteo.de>" [unknown]
    # gpg:                 aka "Thomas Huth <huth@tuxfamily.org>" [unknown]
    # gpg:                 aka "Thomas Huth <th.huth@posteo.eu>" [unknown]
    # gpg: WARNING: This key is not certified with a trusted signature!
    # gpg:          There is no indication that the signature belongs to the owner.
    # Primary key fingerprint: 27B8 8847 EEE0 2501 18F3  EAB9 2ED9 D774 FE70 2DB5

    * tag 'pull-request-2026-10-22' of https://gitlab.com/thuth/qemu:
      hw/usb/hcd-xhci: More reentrancy guard fixes for the XHCI code
      hw/usb/dev-mtp: Fix heap OOB read in usb_mtp_write_metadata()
      hw/usb/dev-mtp: Fix assert crash on short CMD_SEND_OBJECT
      usb-host: delete bottom halves during unrealize
      usb-host: free request on libusb submit failure
      tests/qtest/usb-hcd-xhci: test interrupt pacing above 2^32
      usb-host: free configuration descriptors on error paths
      usb-host: validate interface number before indexing altsetting
      tests/qtest: Cover OHCI endpoint type mismatches
      hw/usb/hcd-ohci: Fail iso packets sent to non-iso endpoints and vice-versa
      hw/usb/dev-mtp: Fix assert crash on undersized BULK IN

    Signed-off-by: Richard Henderson <richard.henderson@linaro.org>