From: Fabiano Rosas
Remove the switch as this function applies to BookE only.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-11-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 11 ++-
1 file changed, 2 insertions(+), 9 deletions(
From: Fabiano Rosas
The 7xx CPUs don't have alternate/hypervisor Save and Restore
Registers, so we can set SRR0 and SRR1 directly.
Signed-off-by: Fabiano Rosas
Message-Id: <20220204173430.1457358-11-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 13 ++---
From: Keno Fischer
This implements the darwin equivalent of the functions that were
moved to 9p-util(-linux) earlier in this series in the new
9p-util-darwin file.
Signed-off-by: Keno Fischer
[Michael Roitzsch: - Rebase for NixOS]
Signed-off-by: Michael Roitzsch
Signed-off-by: Will Cohen
---
From: Fabiano Rosas
Differences from the generic powerpc_excp code:
- Not BookE, so some MSR bits are cleared at interrupt dispatch;
- No MSR_HV;
- No power saving states;
- No Hypervisor Emulation Assistance;
- Not 64 bits;
- No System call vectored;
- No Alternate Interrupt Location.
Exceptio
From: Fabiano Rosas
There is no HV support in the 6xx.
Signed-off-by: Fabiano Rosas
Message-Id: <20220203200957.1434641-10-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 18 ++
1 file changed, 2 insertions(+), 16 deletions(-)
diff --git
From: Fabiano Rosas
There is no LPES0 in BookE and no MSR_HV.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-8-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 33 -
1 file changed, 33 deletions(-)
diff --
From: Fabiano Rosas
This code applies only to the 6xx CPUs, so we can remove the switch
statement.
Signed-off-by: Fabiano Rosas
Message-Id: <20220203200957.1434641-11-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 31 +++
1 fi
From: Fabiano Rosas
Differences from the generic powerpc_excp code:
- Not BookE, so some MSR bits are cleared at interrupt dispatch;
- No MSR_HV;
- No power saving states;
- No Hypervisor Emulation Assistance;
- Not 64 bits;
- No System call vectored;
- No Alternate Interrupt Location.
Exceptio
From: Fabiano Rosas
Differences from the generic powerpc_excp code:
- No MSR bits are cleared at interrupt dispatch;
- No MSR_HV;
- No power saving states;
- No Hypervisor Emulation Assistance;
- SPEU needs special handling;
- Big endian only;
- Both 64 and 32 bits;
- No System call vectored;
-
From: Fabiano Rosas
There is no Hypervisor mode in the 6xx CPUs.
Signed-off-by: Fabiano Rosas
Message-Id: <20220203200957.1434641-9-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 21 ++---
1 file changed, 2 insertions(+), 19 deletions(-)
From: Fabiano Rosas
There's no MSR_HV in the 7xx.
Also remove 40x and BookE code.
Signed-off-by: Fabiano Rosas
Message-Id: <20220204173430.1457358-5-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 24
1 file changed, 24 deletions
From: Fabiano Rosas
BookE has no DSISR or DAR. The proper registers ESR and DEAR were
already set at this point.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-9-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 7 ---
1 file changed,
From: Fabiano Rosas
Since we've split the exception code by exception model, the exception
model IDs are becoming less useful. These two can be merged.
Signed-off-by: Fabiano Rosas
Message-Id: <20220204173430.1457358-2-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/cpu-
From: Fabiano Rosas
There's no ESR in the 6xx CPUs.
Signed-off-by: Fabiano Rosas
Message-Id: <20220203200957.1434641-8-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 4
1 file changed, 4 deletions(-)
diff --git a/target/ppc/excp_helper.c b/target/p
ppc_radix64_partition_scoped_xlate() logs the host page protection
bits variable but it is uninitialized. The value is set later on in
ppc_radix64_check_prot(). Remove the output.
Fixes: Coverity CID 1468942
Signed-off-by: Cédric Le Goater
Reviewed-by: Greg Kurz
Message-Id: <20220203142145.13017
From: Fabiano Rosas
Remove 40x and G2 code.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-4-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 17 ++---
1 file changed, 2 insertions(+), 15 deletions(-)
diff --git a/target/ppc/
From: Fabiano Rosas
There's no MSR_HV in BookE.
Also remove 40x code.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-5-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 29 ++---
1 file changed, 6 insertions(+), 23
From: Fabiano Rosas
The 6xx CPUs don't have alternate/hypervisor Save and Restore
Registers, so we can set SRR0 and SRR1 directly.
Signed-off-by: Fabiano Rosas
Message-Id: <20220203200957.1434641-12-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 13 ++---
s/pull-ppc-20220210
for you to fetch changes up to 10717c26dbe1c138ba6af6d09a3bb9958d4fe3f2:
spapr/vof: Install rom and nvram binaries (2022-02-09 09:08:56 +0100)
ppc-7.0 queue
* Exception model rework (Fabiano)
* Unused CPU mode
From: Fabiano Rosas
Thre is no HV support in the 7xx.
Signed-off-by: Fabiano Rosas
Message-Id: <20220204173430.1457358-9-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 18 ++
1 file changed, 2 insertions(+), 16 deletions(-)
diff --git a/
From: Fabiano Rosas
The SRR1 should be set to the MSR value. There are no diagnostic bits
in the SRR1 for BookE.
Note that this fixes a bug where MSR_GS would be set and Linux would
go into KVM code when there's no KVM guest.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-7-f
From: Fabiano Rosas
This CPU was partially removed due to lack of support in 2017 by commit
aef7796057 ("ppc: remove non implemented cpu models").
Signed-off-by: Fabiano Rosas
Reviewed-by: Cédric Le Goater
Message-Id: <20220128221611.1221715-1-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Go
From: Fabiano Rosas
Introduce a new powerpc_excp function specific for BookE CPUs. This
commit copies powerpc_excp_legacy verbatim so the next one has a clean
diff.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-2-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
ta
From: Fabiano Rosas
Now that all CPU families have their own separate exception
dispatching code we can remove powerpc_excp_legacy.
Signed-off-by: Fabiano Rosas
Reviewed-by: Cédric Le Goater
Message-Id: <20220207183036.1507882-2-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
targ
From: Fabiano Rosas
Remove the BookE code and add a comment explaining why we need to keep
hypercall support even though this CPU does not have a hypervisor
mode.
Signed-off-by: Fabiano Rosas
Message-Id: <20220204173430.1457358-8-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
targ
From: Víctor Colombo
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 2 ++
target/ppc/helper.h | 2 ++
target/ppc/insn32.decode| 3 +++
target/ppc/translate/vsx-impl.c.inc | 2 ++
4 files changed, 9 insertions(+)
From: Víctor Colombo
Refactor xs{max,min}cdp VSX_MAX_MINC helper to prepare for
xs{max,min}cqp implementation.
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 23 +--
1 file changed, 9 insertions(+), 14 deletions(-)
diff --git a/ta
From: Matheus Ferst
Implement the following PowerISA v3.1 instructions:
vcmpequq Vector Compare Equal Quadword
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 1 +
target/ppc/translate/vmx-impl.c.inc | 43 +
2 files changed, 44 insertions(+)
From: Víctor Colombo
Refactor VSX_SCALAR_CMP_DP, changing its name to VSX_SCALAR_CMP and
prepare the helper to be used for quadword comparisons.
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 31 ++-
1 file changed, 14 inse
The PowerPC 601 processor is the first generation of processors to
implement the PowerPC architecture. It was designed as a bridge
processor and also could execute most of the instructions of the
previous POWER architecture. It was found on the first Macs and IBM
RS/6000 workstations.
There is not
From: Matheus Ferst
Implement the following PowerISA v3.0 instuctions:
xsmaddqp[o]: VSX Scalar Multiply-Add Quad-Precision [using round to Odd]
xsmsubqp[o]: VSX Scalar Multiply-Subtract Quad-Precision [using round
to Odd]
xsnmaddqp[o]: VSX Scalar Negative Multiply-Add Quad-Precision
From: Fabiano Rosas
This only applies to the G2s, the other 6xx CPUs will not have this
vector registered.
Signed-off-by: Fabiano Rosas
Message-Id: <20220203200957.1434641-5-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 15 ---
1 file change
From: Matheus Ferst
Implement the following PowerISA v3.1 instructions:
vcmpgtsq: Vector Compare Greater Than Signed Quadword
vcmpgtuq: Vector Compare Greater Than Unsigned Quadword
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 2 ++
target/ppc/translate/vmx-impl.c.in
From: Fabiano Rosas
There is no MSR_HV in BookE, so remove all of the HV logic.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-12-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 18 ++
1 file changed, 2 insertions(+), 16
From: Fabiano Rosas
There is no DSISR or DAR in BookE. Change to ESR and DEAR.
Signed-off-by: Fabiano Rosas
Message-Id: <20220128224018.1228062-6-faro...@linux.ibm.com>
Signed-off-by: Cédric Le Goater
---
target/ppc/excp_helper.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --g
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 23 ++--
target/ppc/helper.h | 16 -
target/ppc/insn32.decode| 22
target/ppc/translate/vsx-impl.c.inc | 56 -
target/p
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 1 +
target/ppc/insn64.decode| 8 ++
target/ppc/int_helper.c | 42 ++
target/ppc/translate/vsx-impl.c.inc | 121
4 files changed, 172 inse
From: Víctor Colombo
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 7 +++
target/ppc/helper.h | 6 +++---
target/ppc/insn32.decode| 3 +++
target/ppc/translate/vsx-impl.c.inc | 28
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 1 +
target/ppc/insn64.decode| 8
target/ppc/int_helper.c | 20
target/ppc/translate/vsx-impl.c.inc | 22 ++
4 files changed, 51
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 4 ++
target/ppc/translate/vsx-impl.c.inc | 71 +
target/ppc/translate/vsx-ops.c.inc | 2 -
3 files changed, 36 insertions(+), 41 deletions(-)
diff --git a/target/ppc/insn3
From: Víctor Colombo
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 21 +++
target/ppc/helper.h | 1 +
target/ppc/insn32.decode| 11 +++---
target/ppc/translate/vsx-impl.c.inc | 31 ++
From: Víctor Colombo
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 4
target/ppc/helper.h | 3 +++
target/ppc/insn32.decode| 3 +++
target/ppc/translate/vsx-impl.c.inc | 31 +
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 21 ---
target/ppc/helper.h | 2 --
target/ppc/insn32.decode| 5
target/ppc/translate/vsx-impl.c.inc | 42 +++--
target/ppc/translate
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 6
target/ppc/insn64.decode| 24
target/ppc/translate/vsx-impl.c.inc | 20 ++
target/ppc/translate/vsx-ops.c.inc | 43 -
4 files
From: Víctor Colombo
Also, fixes these instructions not being capitalized.
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/fpu_helper.c | 8
target/ppc/helper.h | 8
target/ppc/translate/vsx-impl.c.inc | 30
From: Víctor Colombo
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 7 ++
target/ppc/translate/vsx-impl.c.inc | 37 +
2 files changed, 44 insertions(+)
diff --git a/target/ppc/insn32.decode b/target/ppc/ins
From: Víctor Colombo
xscmpnedp was added in ISA v3.0 but removed in v3.0B. This patch
removes this instruction as it was not in the final version of v3.0.
Signed-off-by: Víctor Colombo
Acked-by: Greg Kurz
Reviewed-by: Cédric Le Goater
Reviewed-by: Richard Henderson
Signed-off-by: Matheus Fer
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 5
target/ppc/translate/vmx-impl.c.inc | 44 +
2 files changed, 49 insertions(+)
diff --git a/target/ppc/insn32.decode b/target/ppc/insn32.decode
index 0a3e39f3e9..7b629
From: Matheus Ferst
Implement the following PowerISA v3.1 instructions:
vcmpsq: Vector Compare Signed Quadword
vcmpuq: Vector Compare Unsigned Quadword
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 6
target/ppc/translate/vmx-impl.c.inc | 45 +
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 4 ++
target/ppc/insn32.decode| 10
target/ppc/int_helper.c | 84 +
target/ppc/translate/vsx-impl.c.inc | 29 ++
4 files changed, 127 inse
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 8
target/ppc/translate/vmx-impl.c.inc | 32 +
2 files changed, 40 insertions(+)
diff --git a/target/ppc/insn32.decode b/target/ppc/insn32.decode
index bf2f3b1e0b..0
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 1 +
target/ppc/translate/vmx-impl.c.inc | 43 +++--
2 files changed, 35 insertions(+), 9 deletions(-)
diff --git a/target/ppc/insn32.decode b/target/ppc/insn32.decode
index 4836
From: Víctor Colombo
Based on [1] by Lijun Pan , which was never merged
into master.
[1]: https://lists.gnu.org/archive/html/qemu-ppc/2020-07/msg00419.html
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 1 +
target/ppc/translate/vmx-impl
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 9 ++--
target/ppc/insn32.decode| 4 ++
target/ppc/int_helper.c | 50 +
target/ppc/translate/vmx-impl.c.inc | 69 +++--
target/ppc/tra
From: Matheus Ferst
Following the implementation of tcg_gen_gvec_3i, add a four-vector and
immediate operand expansion method.
Signed-off-by: Matheus Ferst
---
include/tcg/tcg-op-gvec.h | 22 ++
tcg/tcg-op-gvec.c | 146 ++
2 files changed, 168 i
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 2 ++
target/ppc/translate/vmx-impl.c.inc | 56 +
2 files changed, 58 insertions(+)
diff --git a/target/ppc/insn32.decode b/target/ppc/insn32.decode
index ea497ecd80..483651c
From: Lucas Coutinho
Move the following instructions to decodetree:
vextsb2w: Vector Extend Sign Byte To Word
vextsh2w: Vector Extend Sign Halfword To Word
vextsb2d: Vector Extend Sign Byte To Doubleword
vextsh2d: Vector Extend Sign Halfword To Doubleword
vextsw2d: Vector Extend Sign Word To Doub
From: Luis Pires
New macros that add FLAGS and FLAGS2 checking were added for
both TRANS and TRANS64.
Signed-off-by: Luis Pires
[ferst: - TRANS_FLAGS2 instead of TRANS_FLAGS_E
- Use the new macros in load/store vector insns ]
Signed-off-by: Matheus Ferst
Reviewed-by: Richard Henderson
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 5 +--
target/ppc/insn32.decode| 5 +++
target/ppc/int_helper.c | 13 +-
target/ppc/translate/vmx-impl.c.inc | 69 ++---
target/ppc/translate/vmx-ops.
From: "Lucas Mateus Castro (alqotel)"
Changed vmulhuw, vmulhud, vmulhsw, vmulhsd to use
gvec instructions
Signed-off-by: Lucas Mateus Castro (alqotel)
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 8 +-
target/ppc/int_helper.c | 8 +-
target/ppc/transl
From: Lucas Coutinho
Signed-off-by: Lucas Coutinho
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 1 +
target/ppc/translate/vmx-impl.c.inc | 18 ++
2 files changed, 19 insertions(+)
diff --git a/target/ppc/insn32.decode b/target/ppc/insn32.decode
index
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 4
target/ppc/insn32.decode| 10 +
target/ppc/int_helper.c | 32 +
target/ppc/translate/vmx-impl.c.inc | 24 ++
4 file
From: Matheus Ferst
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 30 --
target/ppc/insn32.decode| 24
target/ppc/int_helper.c | 54 -
target/ppc/translate/vmx-impl.c.inc | 91 -
target
This will allow us to attach machine state attributes like
the device tree fdt.
Signed-off-by: Stafford Horne
Reviewed-by: Philippe Mathieu-Daudé
---
hw/openrisc/openrisc_sim.c | 30 --
1 file changed, 28 insertions(+), 2 deletions(-)
diff --git a/hw/openrisc/openri
From: "Lucas Mateus Castro (alqotel)"
Moved the instructions vmulesb, vmulosb, vmuleub, vmuloub,
vmulesh, vmulosh, vmuleuh, vmulouh, vmulesw, vmulosw,
muleuw and vmulouw from legacy to decodetree. Implemented
the instructions vmulesd, vmulosd, vmuleud, vmuloud.
Signed-off-by: Lucas Mateus Castro
Changes since v1:
- Fixed typos pointed out by Philippe
- Moved usage of machine state to patch 3/4
- added config dependency on FDT
This series adds device tree support for the OpenRISC SIM hardware.
The simulator will generate an FDT and pass it to the kernel.
For example:
qemu-system-or1
From: "Lucas Mateus Castro (alqotel)"
Moved instructions vmulld, vmulhuw, vmulhsw, vmulhud and vmulhsd to
decodetree
Signed-off-by: Lucas Mateus Castro (alqotel)
Signed-off-by: Matheus Ferst
---
target/ppc/helper.h | 8
target/ppc/insn32.decode| 6 ++
From: Matheus Ferst
This patch series implements 5 missing instructions from PowerISA v3.0
and 40 new instructions from PowerISA v3.1, moving 62 other instructions
to decodetree along the way.
v3:
- Dropped patch 33, which caused a regression in xxperm[r]
v2:
- New patch (30) to remove xscmpn
From: Víctor Colombo
Based on [1] by Lijun Pan , which was never merged
into master.
[1]: https://lists.gnu.org/archive/html/qemu-ppc/2020-07/msg00419.html
Signed-off-by: Víctor Colombo
Signed-off-by: Matheus Ferst
---
target/ppc/insn32.decode| 4 +++
target/ppc/translate/vmx-im
On Thu, Feb 10, 2022 at 12:10:54PM +0100, Philippe Mathieu-Daudé wrote:
> Typo "device" in subject.
OK.
> On 10/2/22 07:30, Stafford Horne wrote:
> > Using the device tree means that qemu can now directly tell
> > the kernel what hardware is configured rather than use having
> > to maintain and u
Using the device tree means that qemu can now directly tell
the kernel what hardware is configured rather than use having
to maintain and update a separate device tree file.
This patch adds device tree support for the OpenRISC simulator.
A device tree is built up based on the state of the configur
Signed-off-by: Christian Schoenebeck
Reviewed-by: Greg Kurz
Message-Id:
---
tests/qtest/virtio-9p-test.c | 90 +++-
1 file changed, 27 insertions(+), 63 deletions(-)
diff --git a/tests/qtest/virtio-9p-test.c b/tests/qtest/virtio-9p-test.c
index 41fed41de1..502e5
10.02.2022, 15:06, "Philippe Mathieu-Daudé" :On 10/2/22 12:46, Konstantin Khlebnikov wrote: Fuzzing found that on some error paths vhost_memory_unmap() is called twice or for NULL address. Let's reset pointers after unmap and ingnore unmap for NULL. Signed-off-by: Konstantin Khlebnikov
The initrd passed via the command line is loaded into memory. It's
location and size is then added to the device tree so the kernel knows
where to find it.
Signed-off-by: Stafford Horne
---
hw/openrisc/openrisc_sim.c | 32 +++-
1 file changed, 31 insertions(+), 1 del
Move magic numbers to variables and enums. These will be reused for
upcoming fdt initialization.
Signed-off-by: Stafford Horne
Reviewed-by: Philippe Mathieu-Daudé
---
hw/openrisc/openrisc_sim.c | 42 ++
1 file changed, 34 insertions(+), 8 deletions(-)
diff -
gs/pull-9p-20220210
for you to fetch changes up to de19c79dad6a2cad54ae04ce754d47c07bf9bc93:
9pfs: Fix segfault in do_readdir_many caused by struct dirent overread
(2022-02-10 11:56:01 +0100)
9pfs: fixes and cleanup
* Fifth pat
On Fri, 4 Feb 2022, Ani Sinha wrote:
> On Fri, Feb 4, 2022 at 17:48 Igor Mammedov wrote:
>
> > On Fri, 4 Feb 2022 12:05:58 +0100
> > Gerd Hoffmann wrote:
> >
> > > Hi,
> > >
> > > > Another question is why we split memory on 16Gb chunks, to begin with.
> > > > Maybe instead of doing so, we
On Thu, Feb 10, 2022 at 12:07:02PM +0100, Philippe Mathieu-Daudé wrote:
> On 10/2/22 07:30, Stafford Horne wrote:
> > Move magic numbers to variables and enums. These will be
> > reused for upcoming fdt initialization.
> >
> > Signed-off-by: Stafford Horne
> > ---
> > hw/openrisc/openrisc_sim.c
On Thu, Feb 10, 2022 at 12:05:22PM +0100, Philippe Mathieu-Daudé wrote:
> On 10/2/22 07:30, Stafford Horne wrote:
> > This will allow us to attach machine state attributes like
> > the device tree fdt.
> >
> > Signed-off-by: Stafford Horne
> > ---
> > hw/openrisc/openrisc_sim.c | 31 +++
10.02.2022, 14:56, "Philippe Mathieu-Daudé" :On 10/2/22 12:46, Konstantin Khlebnikov wrote: Cleanup vhost device and update connection state when initialization fails. Signed-off-by: Konstantin Khlebnikov --- hw/block/vhost-user-blk.c | 10 -- 1 file change
On 10/2/22 12:46, Konstantin Khlebnikov wrote:
Cleanup vhost device and update connection state when initialization fails.
Signed-off-by: Konstantin Khlebnikov
---
hw/block/vhost-user-blk.c | 10 --
1 file changed, 8 insertions(+), 2 deletions(-)
diff --git a/hw/block/vhost-user-b
On 10/2/22 12:46, Konstantin Khlebnikov wrote:
Fuzzing found that on some error paths vhost_memory_unmap() is called twice or
for NULL address. Let's reset pointers after unmap and ingnore unmap for NULL.
Signed-off-by: Konstantin Khlebnikov
---
hw/virtio/vhost.c |4 +++-
1 file changed,
Hi Konstantin,
On 10/2/22 12:44, Konstantin Khlebnikov wrote:
Flags passed to configure must be at the end to override defaults.
Signed-off-by: Konstantin Khlebnikov
---
meson.build | 12 ++--
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/meson.build b/meson.build
10.02.2022, 14:52, "Philippe Mathieu-Daudé" :Hi Konstantin,On 10/2/22 12:44, Konstantin Khlebnikov wrote: Flags passed to configure must be at the end to override defaults. Signed-off-by: Konstantin Khlebnikov --- meson.build | 12 ++-- 1 file changed, 6 in
Hi Alex,
On 10/2/22 12:30, Alex Bennée wrote:
The previous numbers were a guess at best and rather arbitrary without
taking into account anything that might be loaded. Instead of using
guesses based on the state of registers implement a new function that:
a) scans the MemoryRegions for the la
Fuzzing found that ->set_config() could be called without connection.
Signed-off-by: Konstantin Khlebnikov
---
hw/block/vhost-user-blk.c |4
1 file changed, 4 insertions(+)
diff --git a/hw/block/vhost-user-blk.c b/hw/block/vhost-user-blk.c
index 35ac188ca4..9ac50443bc 100644
--- a/hw/b
Fuzzing found that on some error paths vhost_memory_unmap() is called twice or
for NULL address. Let's reset pointers after unmap and ingnore unmap for NULL.
Signed-off-by: Konstantin Khlebnikov
---
hw/virtio/vhost.c |4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/hw/vi
Right now too short packet from guest triggers assert in iov_copy().
(because requested offset does not fit into io vector)
For legacy virtio without feature VIRTIO_F_ANY_LAYOUT virtio-net header
must fit exactly in the first descriptor. With features VIRTIO_F_ANY_LAYOUT
or VIRTIO_F_VERSION_1 head
Fuzzing found that queue size could be changed after writing queue address.
Resulting cached regions might be shorter than that and cause assert later.
Let's update cached memory regions after changing queue size.
This is no-op if queue address isn't set yet.
Buglink: https://gitlab.com/qemu-proj
From: Greg Kurz
It is recommended to use g_autofree or g_autoptr as it reduces
the odds of introducing memory leaks in future changes.
Signed-off-by: Greg Kurz
Message-Id: <20220201151508.190035-3-gr...@kaod.org>
Reviewed-by: Christian Schoenebeck
Signed-off-by: Christian Schoenebeck
---
tes
Cleanup vhost device and update connection state when initialization fails.
Signed-off-by: Konstantin Khlebnikov
---
hw/block/vhost-user-blk.c | 10 --
1 file changed, 8 insertions(+), 2 deletions(-)
diff --git a/hw/block/vhost-user-blk.c b/hw/block/vhost-user-blk.c
index 1a42ae9187..
Flags passed to configure must be at the end to override defaults.
Signed-off-by: Konstantin Khlebnikov
---
meson.build | 12 ++--
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/meson.build b/meson.build
index 5f43355071..d94f3ee3e3 100644
--- a/meson.build
+++ b/meson.b
From: Greg Kurz
local_test_path is allocated in virtio_9p_create_local_test_dir() to hold the
path
of the temporary directory. It should be freed in
virtio_9p_remove_local_test_dir()
when the temporary directory is removed. Clarify the lifecycle of
local_test_path
while here.
Based-on:
Sign
From: Vitaly Chikunov
`struct dirent' returned from readdir(3) could be shorter (or longer)
than `sizeof(struct dirent)', thus memcpy of sizeof length will overread
into unallocated page causing SIGSEGV. Example stack trace:
#0 0x559ebeed v9fs_co_readdir_many (/usr/bin/qemu-system-x86_
This allows us to check our new SYS_HEAPINFO implementation generates
sane values.
Signed-off-by: Alex Bennée
---
v5
- static init of heapinfo structure
- clean-up comment on why we can test stack position
- add memory clobber for semicall
- test we can read/write to a portion of the hea
The 9p test cases use mkdtemp() to create a temporary directory for
running the 'local' 9p tests with real files/dirs. Unlike mktemp()
which only generates a unique file name, mkdtemp() also creates the
directory, therefore the subsequent mkdir() was wrong and caused
errors on some systems.
Signed
The previous numbers were a guess at best and rather arbitrary without
taking into account anything that might be loaded. Instead of using
guesses based on the state of registers implement a new function that:
a) scans the MemoryRegions for the largest RAM block
b) iterates through all "ROM" blo
Hi Kevin,
On 30/1/22 10:50, Kevin Townsend wrote:
This commit adds emulation of the magnetometer on the LSM303DLHC.
It allows the magnetometer's X, Y and Z outputs to be set via the
mag-x, mag-y and mag-z properties, as well as the 12-bit
temperature output via the temperature property. Sensor c
Hi,
I'm working through the backlog of stalled patches in my queue so here
is the latest version of the semihosting info fixes with Peter's
comments addressed. Both patches are still missing their elusive r-b
tags ;-)
Alex Bennée (2):
semihosting/arm-compat: replace heuristic for softmmu SYS_HE
On Thu, Feb 10 2022, Halil Pasic wrote:
> On Thu, 10 Feb 2022 10:55:13 +0100
> Cornelia Huck wrote:
>
>> On Wed, Feb 09 2022, Halil Pasic wrote:
>>
>> > On Wed, 09 Feb 2022 18:24:56 +0100
>> > Cornelia Huck wrote:
>> >
>> >> On Wed, Feb 09 2022, Halil Pasic wrote:
>> >> > @@ -78,16 +78,1
201 - 300 of 334 matches
Mail list logo