Arm queue; bugfixes only.

The following changes since commit 48aa8f0ac536db3550a35c295ff7de94e4c33739:

Merge remote-tracking branch 'remotes/ericb/tags/pull-nbd-2020-11-16' into staging (2020-11-17 11:07:00 +0000)

are available in the Git repository at:

https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20201117

for you to fetch changes up to ab135622cf478585bdfcb68b85e4a817d74a0c42:

tmp105: Correct handling of temperature limit checks (2020-11-17 12:56:33 +0000)

* hw/arm/virt: ARM_VIRT must select ARM_GIC

* exynos: Fix bad printf format specifiers

* hw/input/ps2.c: Remove remnants of printf debug

* target/openrisc: Remove dead code attempting to check "is timer disabled"

* register: Remove unnecessary NULL check

* util/cutils: Fix Coverity array overrun in freq_to_str()

* configure: Make "does libgio work" test pull in some actual functions

* tmp105: reset the T_low and T_High registers

* tmp105: Correct handling of temperature limit checks

Alex Chen (1):

exynos: Fix bad printf format specifiers

Alistair Francis (1):

register: Remove unnecessary NULL check

Andrew Jones (1):

hw/arm/virt: ARM_VIRT must select ARM_GIC

Peter Maydell (5):

hw/input/ps2.c: Remove remnants of printf debug

target/openrisc: Remove dead code attempting to check "is timer disabled"

configure: Make "does libgio work" test pull in some actual functions

hw/misc/tmp105: reset the T_low and T_High registers

tmp105: Correct handling of temperature limit checks

Philippe Mathieu-Daudé (1):

util/cutils: Fix Coverity array overrun in freq_to_str()

configure | 11 +++++--

hw/misc/tmp105.h | 7 +++++

hw/core/register.c | 4 ---

hw/input/ps2.c | 9 ------

hw/misc/tmp105.c | 73 ++++++++++++++++++++++++++++++++++++++------

hw/timer/exynos4210_mct.c | 4 +--

hw/timer/exynos4210_pwm.c | 8 ++---

target/openrisc/sys_helper.c | 3 --

util/cutils.c | 3 +-

hw/arm/Kconfig | 1 +

10 files changed, 89 insertions(+), 34 deletions(-)

From: Andrew Jones <drjones@redhat.com>

The removal of the selection of A15MPCORE from ARM_VIRT also

removed what A15MPCORE selects, ARM_GIC. We still need ARM_GIC.

Fixes: bec3c97e0cf9 ("hw/arm/virt: Remove dependency on Cortex-A15 MPCore peripherals")

Reported-by: Miroslav Rezanina <mrezanin@redhat.com>

Signed-off-by: Andrew Jones <drjones@redhat.com>

Reviewed-by: Miroslav Rezanina <mrezanin@redhat.com>

Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Message-id: 20201111143440.112763-1-drjones@redhat.com

hw/arm/Kconfig | 1 +

1 file changed, 1 insertion(+)

diff --git a/hw/arm/Kconfig b/hw/arm/Kconfig

--- a/hw/arm/Kconfig

+++ b/hw/arm/Kconfig

@@ -XXX,XX +XXX,XX @@ config ARM_VIRT

imply VFIO_PLATFORM

imply VFIO_XGMAC

imply TPM_TIS_SYSBUS

+ select ARM_GIC

select ACPI

select ARM_SMMUV3

select GPIO_KEY

2.20.1

From: Alex Chen <alex.chen@huawei.com>

We should use printf format specifier "%u" instead of "%d" for

argument of type "unsigned int".

Reported-by: Euler Robot <euler.robot@huawei.com>

Signed-off-by: Alex Chen <alex.chen@huawei.com>

Message-id: 20201111073651.72804-1-alex.chen@huawei.com

hw/timer/exynos4210_mct.c | 4 ++--

hw/timer/exynos4210_pwm.c | 8 ++++----

2 files changed, 6 insertions(+), 6 deletions(-)

@@ -XXX,XX +XXX,XX @@ static void exynos4210_gcomp_raise_irq(void *opaque, uint32_t id)

/* If CSTAT is pending and IRQ is enabled */

if ((s->reg.int_cstat & G_INT_CSTAT_COMP(id)) &&

(s->reg.int_enb & G_INT_ENABLE(id))) {

- DPRINTF("gcmp timer[%d] IRQ\n", id);

+ DPRINTF("gcmp timer[%u] IRQ\n", id);

qemu_irq_raise(s->irq[id]);

}

}

@@ -XXX,XX +XXX,XX @@ static void exynos4210_mct_update_freq(Exynos4210MCTState *s)

MCT_CFG_GET_DIVIDER(s->reg_mct_cfg));

if (freq != s->freq) {

- DPRINTF("freq=%dHz\n", s->freq);

+ DPRINTF("freq=%uHz\n", s->freq);

/* global timer */

tx_ptimer_set_freq(s->g_timer.ptimer_frc, s->freq);

@@ -XXX,XX +XXX,XX @@ static void exynos4210_pwm_update_freq(Exynos4210PWMState *s, uint32_t id)

if (freq != s->timer[id].freq) {

ptimer_set_freq(s->timer[id].ptimer, s->timer[id].freq);

- DPRINTF("freq=%dHz\n", s->timer[id].freq);

+ DPRINTF("freq=%uHz\n", s->timer[id].freq);

}

@@ -XXX,XX +XXX,XX @@ static void exynos4210_pwm_tick(void *opaque)

uint32_t id = s->id;

bool cmp;

- DPRINTF("timer %d tick\n", id);

+ DPRINTF("timer %u tick\n", id);

/* set irq status */

p->reg_tint_cstat |= TINT_CSTAT_STATUS(id);

/* raise IRQ */

if (p->reg_tint_cstat & TINT_CSTAT_ENABLE(id)) {

- DPRINTF("timer %d IRQ\n", id);

+ DPRINTF("timer %u IRQ\n", id);

qemu_irq_raise(p->timer[id].irq);

@@ -XXX,XX +XXX,XX @@ static void exynos4210_pwm_tick(void *opaque)

if (cmp) {

- DPRINTF("auto reload timer %d count to %x\n", id,

+ DPRINTF("auto reload timer %u count to %x\n", id,

p->timer[id].reg_tcntb);

ptimer_set_count(p->timer[id].ptimer, p->timer[id].reg_tcntb);

ptimer_run(p->timer[id].ptimer, 1);

2.20.1

In commit 5edab03d4040 we added tracepoints to the ps2 keyboard

and mouse emulation. However we didn't remove all the debug-by-printf

support. In fact there is only one printf() remaining, and it is

redundant with the trace_ps2_write_mouse() event next to it.

Remove the printf() and the now-unused DEBUG* macros.

Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Reviewed-by: Stefano Garzarella <sgarzare@redhat.com>

Message-id: 20201101133258.4240-1-peter.maydell@linaro.org

hw/input/ps2.c | 9 ---------

1 file changed, 9 deletions(-)

diff --git a/hw/input/ps2.c b/hw/input/ps2.c

--- a/hw/input/ps2.c

+++ b/hw/input/ps2.c

@@ -XXX,XX +XXX,XX @@

#include "trace.h"

-/* debug PC keyboard */

-//#define DEBUG_KBD

-/* debug PC keyboard : only mouse */

-//#define DEBUG_MOUSE

/* Keyboard Commands */

#define KBD_CMD_SET_LEDS    0xED    /* Set keyboard leds */

#define KBD_CMD_ECHO     0xEE

@@ -XXX,XX +XXX,XX @@ void ps2_write_mouse(void *opaque, int val)

PS2MouseState *s = (PS2MouseState *)opaque;

trace_ps2_write_mouse(opaque, val);

-#ifdef DEBUG_MOUSE

- printf("kbd: write mouse 0x%02x\n", val);

-#endif

switch(s->common.write_cmd) {

default:

case -1:

2.20.1

In the mtspr helper we attempt to check for "is the timer disabled"

with "if (env->ttmr & TIMER_NONE)". This is wrong because TIMER_NONE

is zero and the condition is always false (Coverity complains about

the dead code.)

The correct check would be to test whether the TTMR_M field in the

register is equal to TIMER_NONE instead. However, the

cpu_openrisc_timer_update() function checks whether the timer is

enabled (it looks at cpu->env.is_counting, which is set to 0 via

cpu_openrisc_count_stop() when the TTMR_M field is set to

TIMER_NONE), so there's no need to check for "timer disabled" in the

target/openrisc code. Instead, simply remove the dead code.

Fixes: Coverity CID 1005812

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>

Acked-by: Stafford Horne <shorne@gmail.com>

Message-id: 20201103114654.18540-1-peter.maydell@linaro.org

---

target/openrisc/sys_helper.c | 3 ---

1 file changed, 3 deletions(-)

diff --git a/target/openrisc/sys_helper.c b/target/openrisc/sys_helper.c

--- a/target/openrisc/sys_helper.c

+++ b/target/openrisc/sys_helper.c

@@ -XXX,XX +XXX,XX @@ void HELPER(mtspr)(CPUOpenRISCState *env, target_ulong spr, target_ulong rb)

case TO_SPR(10, 1): /* TTCR */

cpu_openrisc_count_set(cpu, rb);

- if (env->ttmr & TIMER_NONE) {

- return;

- }

cpu_openrisc_timer_update(cpu);

break;

#endif

2.20.1

From: Alistair Francis <alistair.francis@wdc.com>

This patch fixes CID 1432800 by removing an unnecessary check.

Signed-off-by: Alistair Francis <alistair.francis@wdc.com>

hw/core/register.c | 4 ----

1 file changed, 4 deletions(-)

diff --git a/hw/core/register.c b/hw/core/register.c

--- a/hw/core/register.c

+++ b/hw/core/register.c

@@ -XXX,XX +XXX,XX @@ static RegisterInfoArray *register_init_block(DeviceState *owner,

int index = rae[i].addr / data_size;

RegisterInfo *r = &ri[index];

- if (data + data_size * index == 0 || !&rae[i]) {

- continue;

- }

/* Init the register, this will zero it. */

object_initialize((void *)r, sizeof(*r), TYPE_REGISTER);

2.20.1

From: Philippe Mathieu-Daudé <f4bug@amsat.org>

Fix Coverity CID 1435957: Memory - illegal accesses (OVERRUN):

>>> Overrunning array "suffixes" of 7 8-byte elements at element

index 7 (byte offset 63) using index "idx" (which evaluates to 7).

Note, the biggest input value freq_to_str() can accept is UINT64_MAX,

which is ~18.446 EHz, less than 1000 EHz.

Reported-by: Eduardo Habkost <ehabkost@redhat.com>

Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>

util/cutils.c | 3 ++-

1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/util/cutils.c b/util/cutils.c

--- a/util/cutils.c

+++ b/util/cutils.c

@@ -XXX,XX +XXX,XX @@ char *freq_to_str(uint64_t freq_hz)

double freq = freq_hz;

size_t idx = 0;

- while (freq >= 1000.0 && idx < ARRAY_SIZE(suffixes)) {

+ while (freq >= 1000.0) {

freq /= 1000.0;

idx++;

}

+ assert(idx < ARRAY_SIZE(suffixes));

return g_strdup_printf("%0.3g %sHz", freq, suffixes[idx]);

2.20.1