> -----Original Message-----
> From: Eric Auger <[email protected]>
> Sent: 07 July 2026 09:50
> To: [email protected]; [email protected]; qemu-
> [email protected]; [email protected]; [email protected];
> [email protected]; Shameer Kolothum Thodi
> <[email protected]>; Nicolin Chen <[email protected]>; Nathan
> Chen <[email protected]>; [email protected]
> Subject: [PATCH v3 3/5] hw/arm/smmuv3: Fix possible overflow in
> strtab_base computation
>
> External email: Use caution opening links or attachments
>
>
> In the linear stream table mode (FMT = 0), if the guest programs
> SMMU_STRTAB_BASE_CFG.LOG2SIZE (8 bits) to something bigger than 58,
> MAKE_64BIT_MASK() will overflow. So cap the mask length to 64. We
> still comply with the spec ADDR alignment computation:
>
> ADDR[LOG2SIZE + 5:0] = 0.
>
> In the 2 level stream table mode (FMT = 1), we don't have this risk
> anymore since SPLIT is sanitized and equals to 6 at minimum.
>
> Resolves: https://gitlab.com/qemu-project/qemu/-/work_items/3632
> Signed-off-by: Eric Auger <[email protected]>
Reviewed-by: Shameer Kolothum <[email protected]>
Thanks,
Shameer
