Series comparison

-[Qemu-devel] [PULL v2 00/52] target-arm queue
+[PULL v2 00/29] target-arm queue
-target-arm queue: this clears out a bunch of patches I'd sent over
+v2: drop pvpanic-pci patches.
 the last coupled of weeks that have now got reviewed. Mostly
 this is MPS2 device support improvements, put there is also
 more of the incremental work towards supporting AArch32 Hyp mode,
 a floating point bugfix, and the raspi framebuffer viewport support.
-v2 fixes a "variable used uninitialized" error in a15mpcore.c.
+The following changes since commit f1fcb6851aba6dd9838886dc179717a11e344a1c:
-thanks
+  Merge remote-tracking branch 'remotes/huth-gitlab/tags/pull-request-2021-01-19' into staging (2021-01-19 11:57:07 +0000)
 -- PMM
 The following changes since commit 6b699ae1be9f257478d5eca7ef65dcea270a2796:
   tests/vm: Increase timeout waiting for VM to boot to 5 minutes (2018-08-24 11:31:28 +0100)
 are available in the Git repository at:
-  https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20180824-1
+  https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20210119-1
-for you to fetch changes up to 239cb6feb298a31faa40b7e97ced107bf9c2f2bf:
+for you to fetch changes up to b93f4fbdc48283a39089469c44a5529d79dc40a8:
-  hw/arm/mps2: Fix ID register errors on AN511 and AN385 (2018-08-24 13:17:50 +0100)
+  docs: Build and install all the docs in a single manual (2021-01-19 15:45:14 +0000)
 ----------------------------------------------------------------
 target-arm queue:
- * Fix rounding errors in scaling float-to-int and int-to-float operations
+ * Implement IMPDEF pauth algorithm
- * Connect virtualization-related IRQs and memory regions of GICv2
+ * Support ARMv8.4-SEL2
-   in boards that use Cortex-A7 or Cortex-A15
+ * Fix bug where we were truncating predicate vector lengths in SVE insns
- * Support taking exceptions to AArch32 Hyp mode
+ * npcm7xx_adc-test: Fix memleak in adc_qom_set
- * Clear CPSR.IL and CPSR.J on 32-bit exception entry
+ * target/arm/m_helper: Silence GCC 10 maybe-uninitialized error
-   (a minor bug fix that won't affect non-buggy guest code)
+ * docs: Build and install all the docs in a single manual
  * mps2-an505: Implement various missing devices:
    dual timer, watchdogs, counters in the FPGAIO registers,
    some missing ID/control registers, TrustZone Master Security
    Controllers, PL081 DMA controllers, PL022 SPI controllers
  * correct ID register values for mps2-an385, -an511, -an505
  * fix some hardcoded tabs in untouched backwaters of the
    target/arm codebase
  * raspi: Refactor framebuffer property handling code and implement
    support for the virtual framebuffer/viewport
 ----------------------------------------------------------------
-Peter Maydell (48):
+Gan Qixin (1):
-      hw/intc/arm_gic: Make per-cpu GICH memory regions 0x200 bytes large
+      npcm7xx_adc-test: Fix memleak in adc_qom_set
       hw/arm/vexpress: Connect VIRQ and VFIQ
       hw/arm/highbank: Connect VIRQ and VFIQ
       hw/arm/fsl-imx6ul: Connect VIRQ and VFIQ
       hw/arm/fsl-imx6ul: Connect VIRQ and VFIQ
       hw/cpu/a15mpcore: If CPU has EL2, enable it on the GIC and wire it up
       hw/arm/vexpress: Don't set info->secure_boot if CPU doesn't have EL3
       hw/arm/vexpress: Add "virtualization" property controlling presence of EL2
       target/arm: Implement RAZ/WI HACTLR2
       target/arm: Implement AArch32 HCR and HCR2
       target/arm: Factor out code for taking an AArch32 exception
       target/arm: Implement support for taking exceptions to Hyp mode
       target/arm: Clear CPSR.IL and CPSR.J on 32-bit exception entry
       hw/arm/boot: AArch32 kernels should be started in Hyp mode if available
       hw/misc/mps2-fpgaio: Implement 1Hz and 100Hz counters
       hw/misc/mps2-fpgaio: Implement PSCNTR and COUNTER
       hw/timer/cmsdk-apb-dualtimer: Implement CMSDK dual timer module
       hw/arm/iotkit: Wire up the dualtimer
       hw/arm/mps2: Wire up dual-timer in mps2-an385 and mps2-an511
       hw/arm/iotkit: Wire up the watchdogs
       hw/arm/iotkit: Wire up the S32KTIMER
       hw/misc/iotkit-sysctl: Implement IoTKit system control element
       hw/misc/iotkit-sysinfo: Implement IoTKit system information block
       hw/misc/iotkit: Wire up the sysctl and sysinfo register blocks
       hw/misc/tz-msc: Model TrustZone Master Security Controller
       hw/misc/iotkit-secctl: Wire up registers for controlling MSCs
       hw/arm/iotkit: Wire up the lines for MSCs
       hw/arm/mps2-tz: Create PL081s and MSCs
       hw/ssi/pl022: Allow use as embedded-struct device
       hw/ssi/pl022: Set up reset function in class init
       hw/ssi/pl022: Don't directly call vmstate_register()
       hw/ssi/pl022: Use DeviceState::realize rather than SysBusDevice::init
       hw/ssi/pl022: Correct wrong value for PL022_INT_RT
       hw/ssi/pl022: Correct wrong DMACR and ICR handling
       hw/arm/mps2-tz: Instantiate SPI controllers
       hw/arm/mps2-tz: Fix MPS2 SCC config register values
       target/arm: Untabify translate.c
       target/arm: Untabify iwmmxt_helper.c
       target/arm: Remove a handful of stray tabs
       hw/misc/bcm2835_fb: Move config fields to their own struct
       hw/misc/bcm2835_property: Track fb settings using BCM2835FBConfig
       hw/display/bcm2835_fb: Drop unused size and pitch fields
       hw/display/bcm2835_fb: Reset resolution, etc correctly
       hw/display/bcm2835_fb: Abstract out calculation of pitch, size
       hw/display/bcm2835_fb: Fix handling of virtual framebuffer
       hw/display/bcm2835_fb: Validate config settings
       hw/display/bcm2835_fb: Validate bcm2835_fb_mbox_push() config
       hw/arm/mps2: Fix ID register errors on AN511 and AN385
-Richard Henderson (4):
+Peter Maydell (1):
-      softfloat: Add scaling int-to-float routines
+      docs: Build and install all the docs in a single manual
       softfloat: Add scaling float-to-int routines
       target/arm: Use the int-to-float-scale softfloat routines
       target/arm: Use the float-to-int-scale softfloat routines
- hw/misc/Makefile.objs                  |   3 +
+Philippe Mathieu-Daudé (1):
- hw/timer/Makefile.objs                 |   1 +
+      target/arm/m_helper: Silence GCC 10 maybe-uninitialized error
  include/fpu/softfloat.h                | 169 +++++++---
  include/hw/arm/iotkit.h                |  25 +-
  include/hw/display/bcm2835_fb.h        |  59 +++-
  include/hw/misc/iotkit-secctl.h        |  14 +
  include/hw/misc/iotkit-sysctl.h        |  49 +++
  include/hw/misc/iotkit-sysinfo.h       |  37 +++
  include/hw/misc/mps2-fpgaio.h          |  10 +
  include/hw/misc/tz-msc.h               |  79 +++++
  include/hw/ssi/pl022.h                 |  51 +++
  include/hw/timer/cmsdk-apb-dualtimer.h |  72 ++++
  target/arm/cpu.h                       |  16 +-
  fpu/softfloat.c                        | 579 ++++++++++++++++++++++++++-------
  hw/arm/boot.c                          |  11 +
  hw/arm/fsl-imx6ul.c                    |   4 +
  hw/arm/fsl-imx7.c                      |   4 +
  hw/arm/highbank.c                      |   6 +
  hw/arm/iotkit.c                        | 114 ++++++-
  hw/arm/mps2-tz.c                       | 142 +++++++-
  hw/arm/mps2.c                          |  17 +-
  hw/arm/vexpress.c                      |  64 +++-
  hw/cpu/a15mpcore.c                     |  31 +-
  hw/display/bcm2835_fb.c                | 218 ++++++++-----
  hw/intc/arm_gic.c                      |   2 +-
  hw/misc/bcm2835_property.c             | 123 ++++---
  hw/misc/iotkit-secctl.c                |  73 ++++-
  hw/misc/iotkit-sysctl.c                | 261 +++++++++++++++
  hw/misc/iotkit-sysinfo.c               | 128 ++++++++
  hw/misc/mps2-fpgaio.c                  | 146 ++++++++-
  hw/misc/tz-msc.c                       | 308 ++++++++++++++++++
  hw/ssi/pl022.c                         |  57 ++--
  hw/timer/cmsdk-apb-dualtimer.c         | 515 +++++++++++++++++++++++++++++
  target/arm/arm-semi.c                  |   2 +-
  target/arm/helper.c                    | 342 +++++++++++++------
  target/arm/iwmmxt_helper.c             | 234 ++++++-------
  target/arm/translate.c                 | 122 +++----
  MAINTAINERS                            |  10 +
  default-configs/arm-softmmu.mak        |   4 +
  hw/misc/trace-events                   |  16 +
  hw/timer/trace-events                  |   5 +
 files changed, 3405 insertions(+), 718 deletions(-)
  create mode 100644 include/hw/misc/iotkit-sysctl.h
  create mode 100644 include/hw/misc/iotkit-sysinfo.h
  create mode 100644 include/hw/misc/tz-msc.h
  create mode 100644 include/hw/ssi/pl022.h
  create mode 100644 include/hw/timer/cmsdk-apb-dualtimer.h
  create mode 100644 hw/misc/iotkit-sysctl.c
  create mode 100644 hw/misc/iotkit-sysinfo.c
  create mode 100644 hw/misc/tz-msc.c
  create mode 100644 hw/timer/cmsdk-apb-dualtimer.c
+Richard Henderson (7):
+      target/arm: Implement an IMPDEF pauth algorithm
+      target/arm: Add cpu properties to control pauth
+      target/arm: Use object_property_add_bool for "sve" property
+      target/arm: Introduce PREDDESC field definitions
+      target/arm: Update PFIRST, PNEXT for pred_desc
+      target/arm: Update ZIP, UZP, TRN for pred_desc
+      target/arm: Update REV, PUNPK for pred_desc
+Rémi Denis-Courmont (19):
+      target/arm: remove redundant tests
+      target/arm: add arm_is_el2_enabled() helper
+      target/arm: use arm_is_el2_enabled() where applicable
+      target/arm: use arm_hcr_el2_eff() where applicable
+      target/arm: factor MDCR_EL2 common handling
+      target/arm: Define isar_feature function to test for presence of SEL2
+      target/arm: add 64-bit S-EL2 to EL exception table
+      target/arm: add MMU stage 1 for Secure EL2
+      target/arm: add ARMv8.4-SEL2 system registers
+      target/arm: handle VMID change in secure state
+      target/arm: do S1_ptw_translate() before address space lookup
+      target/arm: translate NS bit in page-walks
+      target/arm: generalize 2-stage page-walk condition
+      target/arm: secure stage 2 translation regime
+      target/arm: set HPFAR_EL2.NS on secure stage 2 faults
+      target/arm: revector to run-time pick target EL
+      target/arm: Implement SCR_EL2.EEL2
+      target/arm: enable Secure EL2 in max CPU
+      target/arm: refactor vae1_tlbmask()
+ docs/conf.py                     |  46 ++++-
+ docs/devel/conf.py               |  15 --
+ docs/index.html.in               |  17 --
+ docs/interop/conf.py             |  28 ---
+ docs/meson.build                 |  64 +++---
+ docs/specs/conf.py               |  16 --
+ docs/system/arm/cpu-features.rst |  21 ++
+ docs/system/conf.py              |  28 ---
+ docs/tools/conf.py               |  37 ----
+ docs/user/conf.py                |  15 --
+ include/qemu/xxhash.h            |  98 +++++++++
+ target/arm/cpu-param.h           |   2 +-
+ target/arm/cpu.h                 | 107 ++++++++--
+ target/arm/internals.h           |  45 +++++
+ target/arm/cpu.c                 |  23 ++-
+ target/arm/cpu64.c               |  65 ++++--
+ target/arm/helper-a64.c          |   8 +-
+ target/arm/helper.c              | 414 ++++++++++++++++++++++++++-------------
+ target/arm/m_helper.c            |   2 +-
+ target/arm/monitor.c             |   1 +
+ target/arm/op_helper.c           |   4 +-
+ target/arm/pauth_helper.c        |  27 ++-
+ target/arm/sve_helper.c          |  33 ++--
+ target/arm/tlb_helper.c          |   3 +
+ target/arm/translate-a64.c       |   4 +
+ target/arm/translate-sve.c       |  31 ++-
+ target/arm/translate.c           |  36 +++-
+ tests/qtest/arm-cpu-features.c   |  13 ++
+ tests/qtest/npcm7xx_adc-test.c   |   1 +
+ .gitlab-ci.yml                   |   4 +-
+files changed, 770 insertions(+), 438 deletions(-)
+ delete mode 100644 docs/devel/conf.py
+ delete mode 100644 docs/index.html.in
+ delete mode 100644 docs/interop/conf.py
+ delete mode 100644 docs/specs/conf.py
+ delete mode 100644 docs/system/conf.py
+ delete mode 100644 docs/tools/conf.py
+ delete mode 100644 docs/user/conf.py

target-arm queue: this clears out a bunch of patches I'd sent over
the last coupled of weeks that have now got reviewed. Mostly
this is MPS2 device support improvements, put there is also
more of the incremental work towards supporting AArch32 Hyp mode,
a floating point bugfix, and the raspi framebuffer viewport support.

v2 fixes a "variable used uninitialized" error in a15mpcore.c.

thanks
-- PMM

The following changes since commit 6b699ae1be9f257478d5eca7ef65dcea270a2796:

tests/vm: Increase timeout waiting for VM to boot to 5 minutes (2018-08-24 11:31:28 +0100)

are available in the Git repository at:

https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20180824-1

for you to fetch changes up to 239cb6feb298a31faa40b7e97ced107bf9c2f2bf:

hw/arm/mps2: Fix ID register errors on AN511 and AN385 (2018-08-24 13:17:50 +0100)

----------------------------------------------------------------
target-arm queue:
 * Fix rounding errors in scaling float-to-int and int-to-float operations
 * Connect virtualization-related IRQs and memory regions of GICv2
   in boards that use Cortex-A7 or Cortex-A15
 * Support taking exceptions to AArch32 Hyp mode
 * Clear CPSR.IL and CPSR.J on 32-bit exception entry
   (a minor bug fix that won't affect non-buggy guest code)
 * mps2-an505: Implement various missing devices:
   dual timer, watchdogs, counters in the FPGAIO registers,
   some missing ID/control registers, TrustZone Master Security
   Controllers, PL081 DMA controllers, PL022 SPI controllers
 * correct ID register values for mps2-an385, -an511, -an505
 * fix some hardcoded tabs in untouched backwaters of the
   target/arm codebase
 * raspi: Refactor framebuffer property handling code and implement
   support for the virtual framebuffer/viewport

----------------------------------------------------------------
Peter Maydell (48):
      hw/intc/arm_gic: Make per-cpu GICH memory regions 0x200 bytes large
      hw/arm/vexpress: Connect VIRQ and VFIQ
      hw/arm/highbank: Connect VIRQ and VFIQ
      hw/arm/fsl-imx6ul: Connect VIRQ and VFIQ
      hw/arm/fsl-imx6ul: Connect VIRQ and VFIQ
      hw/cpu/a15mpcore: If CPU has EL2, enable it on the GIC and wire it up
      hw/arm/vexpress: Don't set info->secure_boot if CPU doesn't have EL3
      hw/arm/vexpress: Add "virtualization" property controlling presence of EL2
      target/arm: Implement RAZ/WI HACTLR2
      target/arm: Implement AArch32 HCR and HCR2
      target/arm: Factor out code for taking an AArch32 exception
      target/arm: Implement support for taking exceptions to Hyp mode
      target/arm: Clear CPSR.IL and CPSR.J on 32-bit exception entry
      hw/arm/boot: AArch32 kernels should be started in Hyp mode if available
      hw/misc/mps2-fpgaio: Implement 1Hz and 100Hz counters
      hw/misc/mps2-fpgaio: Implement PSCNTR and COUNTER
      hw/timer/cmsdk-apb-dualtimer: Implement CMSDK dual timer module
      hw/arm/iotkit: Wire up the dualtimer
      hw/arm/mps2: Wire up dual-timer in mps2-an385 and mps2-an511
      hw/arm/iotkit: Wire up the watchdogs
      hw/arm/iotkit: Wire up the S32KTIMER
      hw/misc/iotkit-sysctl: Implement IoTKit system control element
      hw/misc/iotkit-sysinfo: Implement IoTKit system information block
      hw/misc/iotkit: Wire up the sysctl and sysinfo register blocks
      hw/misc/tz-msc: Model TrustZone Master Security Controller
      hw/misc/iotkit-secctl: Wire up registers for controlling MSCs
      hw/arm/iotkit: Wire up the lines for MSCs
      hw/arm/mps2-tz: Create PL081s and MSCs
      hw/ssi/pl022: Allow use as embedded-struct device
      hw/ssi/pl022: Set up reset function in class init
      hw/ssi/pl022: Don't directly call vmstate_register()
      hw/ssi/pl022: Use DeviceState::realize rather than SysBusDevice::init
      hw/ssi/pl022: Correct wrong value for PL022_INT_RT
      hw/ssi/pl022: Correct wrong DMACR and ICR handling
      hw/arm/mps2-tz: Instantiate SPI controllers
      hw/arm/mps2-tz: Fix MPS2 SCC config register values
      target/arm: Untabify translate.c
      target/arm: Untabify iwmmxt_helper.c
      target/arm: Remove a handful of stray tabs
      hw/misc/bcm2835_fb: Move config fields to their own struct
      hw/misc/bcm2835_property: Track fb settings using BCM2835FBConfig
      hw/display/bcm2835_fb: Drop unused size and pitch fields
      hw/display/bcm2835_fb: Reset resolution, etc correctly
      hw/display/bcm2835_fb: Abstract out calculation of pitch, size
      hw/display/bcm2835_fb: Fix handling of virtual framebuffer
      hw/display/bcm2835_fb: Validate config settings
      hw/display/bcm2835_fb: Validate bcm2835_fb_mbox_push() config
      hw/arm/mps2: Fix ID register errors on AN511 and AN385

Richard Henderson (4):
      softfloat: Add scaling int-to-float routines
      softfloat: Add scaling float-to-int routines
      target/arm: Use the int-to-float-scale softfloat routines
      target/arm: Use the float-to-int-scale softfloat routines

hw/misc/Makefile.objs                  |   3 +
 hw/timer/Makefile.objs                 |   1 +
 include/fpu/softfloat.h                | 169 +++++++---
 include/hw/arm/iotkit.h                |  25 +-
 include/hw/display/bcm2835_fb.h        |  59 +++-
 include/hw/misc/iotkit-secctl.h        |  14 +
 include/hw/misc/iotkit-sysctl.h        |  49 +++
 include/hw/misc/iotkit-sysinfo.h       |  37 +++
 include/hw/misc/mps2-fpgaio.h          |  10 +
 include/hw/misc/tz-msc.h               |  79 +++++
 include/hw/ssi/pl022.h                 |  51 +++
 include/hw/timer/cmsdk-apb-dualtimer.h |  72 ++++
 target/arm/cpu.h                       |  16 +-
 fpu/softfloat.c                        | 579 ++++++++++++++++++++++++++-------
 hw/arm/boot.c                          |  11 +
 hw/arm/fsl-imx6ul.c                    |   4 +
 hw/arm/fsl-imx7.c                      |   4 +
 hw/arm/highbank.c                      |   6 +
 hw/arm/iotkit.c                        | 114 ++++++-
 hw/arm/mps2-tz.c                       | 142 +++++++-
 hw/arm/mps2.c                          |  17 +-
 hw/arm/vexpress.c                      |  64 +++-
 hw/cpu/a15mpcore.c                     |  31 +-
 hw/display/bcm2835_fb.c                | 218 ++++++++-----
 hw/intc/arm_gic.c                      |   2 +-
 hw/misc/bcm2835_property.c             | 123 ++++---
 hw/misc/iotkit-secctl.c                |  73 ++++-
 hw/misc/iotkit-sysctl.c                | 261 +++++++++++++++
 hw/misc/iotkit-sysinfo.c               | 128 ++++++++
 hw/misc/mps2-fpgaio.c                  | 146 ++++++++-
 hw/misc/tz-msc.c                       | 308 ++++++++++++++++++
 hw/ssi/pl022.c                         |  57 ++--
 hw/timer/cmsdk-apb-dualtimer.c         | 515 +++++++++++++++++++++++++++++
 target/arm/arm-semi.c                  |   2 +-
 target/arm/helper.c                    | 342 +++++++++++++------
 target/arm/iwmmxt_helper.c             | 234 ++++++-------
 target/arm/translate.c                 | 122 +++----
 MAINTAINERS                            |  10 +
 default-configs/arm-softmmu.mak        |   4 +
 hw/misc/trace-events                   |  16 +
 hw/timer/trace-events                  |   5 +
 41 files changed, 3405 insertions(+), 718 deletions(-)
 create mode 100644 include/hw/misc/iotkit-sysctl.h
 create mode 100644 include/hw/misc/iotkit-sysinfo.h
 create mode 100644 include/hw/misc/tz-msc.h
 create mode 100644 include/hw/ssi/pl022.h
 create mode 100644 include/hw/timer/cmsdk-apb-dualtimer.h
 create mode 100644 hw/misc/iotkit-sysctl.c
 create mode 100644 hw/misc/iotkit-sysinfo.c
 create mode 100644 hw/misc/tz-msc.c
 create mode 100644 hw/timer/cmsdk-apb-dualtimer.c

v2: drop pvpanic-pci patches.

The following changes since commit f1fcb6851aba6dd9838886dc179717a11e344a1c:

Merge remote-tracking branch 'remotes/huth-gitlab/tags/pull-request-2021-01-19' into staging (2021-01-19 11:57:07 +0000)

are available in the Git repository at:

https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20210119-1

for you to fetch changes up to b93f4fbdc48283a39089469c44a5529d79dc40a8:

docs: Build and install all the docs in a single manual (2021-01-19 15:45:14 +0000)

----------------------------------------------------------------
target-arm queue:
 * Implement IMPDEF pauth algorithm
 * Support ARMv8.4-SEL2
 * Fix bug where we were truncating predicate vector lengths in SVE insns
 * npcm7xx_adc-test: Fix memleak in adc_qom_set
 * target/arm/m_helper: Silence GCC 10 maybe-uninitialized error
 * docs: Build and install all the docs in a single manual

----------------------------------------------------------------
Gan Qixin (1):
      npcm7xx_adc-test: Fix memleak in adc_qom_set

Peter Maydell (1):
      docs: Build and install all the docs in a single manual

Philippe Mathieu-Daudé (1):
      target/arm/m_helper: Silence GCC 10 maybe-uninitialized error

Richard Henderson (7):
      target/arm: Implement an IMPDEF pauth algorithm
      target/arm: Add cpu properties to control pauth
      target/arm: Use object_property_add_bool for "sve" property
      target/arm: Introduce PREDDESC field definitions
      target/arm: Update PFIRST, PNEXT for pred_desc
      target/arm: Update ZIP, UZP, TRN for pred_desc
      target/arm: Update REV, PUNPK for pred_desc

Rémi Denis-Courmont (19):
      target/arm: remove redundant tests
      target/arm: add arm_is_el2_enabled() helper
      target/arm: use arm_is_el2_enabled() where applicable
      target/arm: use arm_hcr_el2_eff() where applicable
      target/arm: factor MDCR_EL2 common handling
      target/arm: Define isar_feature function to test for presence of SEL2
      target/arm: add 64-bit S-EL2 to EL exception table
      target/arm: add MMU stage 1 for Secure EL2
      target/arm: add ARMv8.4-SEL2 system registers
      target/arm: handle VMID change in secure state
      target/arm: do S1_ptw_translate() before address space lookup
      target/arm: translate NS bit in page-walks
      target/arm: generalize 2-stage page-walk condition
      target/arm: secure stage 2 translation regime
      target/arm: set HPFAR_EL2.NS on secure stage 2 faults
      target/arm: revector to run-time pick target EL
      target/arm: Implement SCR_EL2.EEL2
      target/arm: enable Secure EL2 in max CPU
      target/arm: refactor vae1_tlbmask()