1 | Just a few minor bugfixes, but we might as well get them in | 1 | arm pullreq for rc1. All minor bugfixes, except for the sve-default-vector-length |
---|---|---|---|
2 | for rc0 tomorrow. | 2 | patches, which are somewhere between a bugfix and a new feature. |
3 | 3 | ||
4 | thanks | ||
4 | -- PMM | 5 | -- PMM |
5 | 6 | ||
6 | The following changes since commit 787f82407c5056a8b1097e39e53d01dd1abe406b: | 7 | The following changes since commit c08ccd1b53f488ac86c1f65cf7623dc91acc249a: |
7 | 8 | ||
8 | Merge remote-tracking branch 'remotes/cohuck/tags/s390x-20200323' into staging (2020-03-23 15:38:30 +0000) | 9 | Merge remote-tracking branch 'remotes/rth-gitlab/tags/pull-tcg-20210726' into staging (2021-07-27 08:35:01 +0100) |
9 | 10 | ||
10 | are available in the Git repository at: | 11 | are available in the Git repository at: |
11 | 12 | ||
12 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20200323 | 13 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20210727 |
13 | 14 | ||
14 | for you to fetch changes up to 550a04893c2bd4442211b353680b9a6408d94dba: | 15 | for you to fetch changes up to e229a179a503f2aee43a76888cf12fbdfe8a3749: |
15 | 16 | ||
16 | target/arm: Move computation of index in handle_simd_dupe (2020-03-23 17:22:30 +0000) | 17 | hw: aspeed_gpio: Fix memory size (2021-07-27 11:00:00 +0100) |
17 | 18 | ||
18 | ---------------------------------------------------------------- | 19 | ---------------------------------------------------------------- |
19 | target-arm queue: | 20 | target-arm queue: |
20 | * target/arm: avoid undefined behaviour shift in watchpoint code | 21 | * hw/arm/smmuv3: Check 31st bit to see if CD is valid |
21 | * target/arm: avoid undefined behaviour shift in handle_simd_dupe() | 22 | * qemu-options.hx: Fix formatting of -machine memory-backend option |
22 | * target/arm: add assert that immh != 0 in disas_simd_shift_imm() | 23 | * hw: aspeed_gpio: Fix memory size |
23 | * aspeed/smc: Fix DMA support for AST2600 | 24 | * hw/arm/nseries: Display hexadecimal value with '0x' prefix |
24 | * hw/arm/bcm283x: Correct the license text ('and' vs 'or') | 25 | * Add sve-default-vector-length cpu property |
26 | * docs: Update path that mentions deprecated.rst | ||
27 | * hw/intc/armv7m_nvic: for v8.1M VECTPENDING hides S exceptions from NS | ||
28 | * hw/intc/armv7m_nvic: Correct size of ICSR.VECTPENDING | ||
29 | * hw/intc/armv7m_nvic: ISCR.ISRPENDING is set for non-enabled pending interrupts | ||
30 | * target/arm: Report M-profile alignment faults correctly to the guest | ||
31 | * target/arm: Add missing 'return's after calling v7m_exception_taken() | ||
32 | * target/arm: Enforce that M-profile SP low 2 bits are always zero | ||
25 | 33 | ||
26 | ---------------------------------------------------------------- | 34 | ---------------------------------------------------------------- |
27 | Cédric Le Goater (1): | 35 | Joe Komlodi (1): |
28 | aspeed/smc: Fix DMA support for AST2600 | 36 | hw/arm/smmuv3: Check 31st bit to see if CD is valid |
37 | |||
38 | Joel Stanley (1): | ||
39 | hw: aspeed_gpio: Fix memory size | ||
40 | |||
41 | Mao Zhongyi (1): | ||
42 | docs: Update path that mentions deprecated.rst | ||
43 | |||
44 | Peter Maydell (7): | ||
45 | qemu-options.hx: Fix formatting of -machine memory-backend option | ||
46 | target/arm: Enforce that M-profile SP low 2 bits are always zero | ||
47 | target/arm: Add missing 'return's after calling v7m_exception_taken() | ||
48 | target/arm: Report M-profile alignment faults correctly to the guest | ||
49 | hw/intc/armv7m_nvic: ISCR.ISRPENDING is set for non-enabled pending interrupts | ||
50 | hw/intc/armv7m_nvic: Correct size of ICSR.VECTPENDING | ||
51 | hw/intc/armv7m_nvic: for v8.1M VECTPENDING hides S exceptions from NS | ||
29 | 52 | ||
30 | Philippe Mathieu-Daudé (1): | 53 | Philippe Mathieu-Daudé (1): |
31 | hw/arm/bcm283x: Correct the license text | 54 | hw/arm/nseries: Display hexadecimal value with '0x' prefix |
32 | 55 | ||
33 | Richard Henderson (3): | 56 | Richard Henderson (3): |
34 | target/arm: Rearrange disabled check for watchpoints | 57 | target/arm: Correctly bound length in sve_zcr_get_valid_len |
35 | target/arm: Assert immh != 0 in disas_simd_shift_imm | 58 | target/arm: Export aarch64_sve_zcr_get_valid_len |
36 | target/arm: Move computation of index in handle_simd_dupe | 59 | target/arm: Add sve-default-vector-length cpu property |
37 | 60 | ||
38 | include/hw/arm/bcm2835_peripherals.h | 3 ++- | 61 | docs/system/arm/cpu-features.rst | 15 ++++++++++ |
39 | include/hw/arm/bcm2836.h | 3 ++- | 62 | configure | 2 +- |
40 | include/hw/char/bcm2835_aux.h | 3 ++- | 63 | hw/arm/smmuv3-internal.h | 2 +- |
41 | include/hw/display/bcm2835_fb.h | 3 ++- | 64 | target/arm/cpu.h | 5 ++++ |
42 | include/hw/dma/bcm2835_dma.h | 4 +++- | 65 | target/arm/internals.h | 10 +++++++ |
43 | include/hw/intc/bcm2835_ic.h | 4 +++- | 66 | hw/arm/nseries.c | 2 +- |
44 | include/hw/intc/bcm2836_control.h | 3 ++- | 67 | hw/gpio/aspeed_gpio.c | 3 +- |
45 | include/hw/misc/bcm2835_mbox.h | 4 +++- | 68 | hw/intc/armv7m_nvic.c | 40 +++++++++++++++++++-------- |
46 | include/hw/misc/bcm2835_mbox_defs.h | 4 +++- | 69 | target/arm/cpu.c | 14 ++++++++-- |
47 | include/hw/misc/bcm2835_property.h | 4 +++- | 70 | target/arm/cpu64.c | 60 ++++++++++++++++++++++++++++++++++++++++ |
48 | hw/arm/aspeed_ast2600.c | 6 ++++++ | 71 | target/arm/gdbstub.c | 4 +++ |
49 | hw/arm/bcm2835_peripherals.c | 3 ++- | 72 | target/arm/helper.c | 8 ++++-- |
50 | hw/arm/bcm2836.c | 3 ++- | 73 | target/arm/m_helper.c | 24 ++++++++++++---- |
51 | hw/arm/raspi.c | 3 ++- | 74 | target/arm/translate.c | 3 ++ |
52 | hw/display/bcm2835_fb.c | 1 - | 75 | target/i386/cpu.c | 2 +- |
53 | hw/dma/bcm2835_dma.c | 4 +++- | 76 | MAINTAINERS | 2 +- |
54 | hw/intc/bcm2835_ic.c | 4 ++-- | 77 | qemu-options.hx | 30 +++++++++++--------- |
55 | hw/intc/bcm2836_control.c | 4 +++- | 78 | 17 files changed, 183 insertions(+), 43 deletions(-) |
56 | hw/misc/bcm2835_mbox.c | 4 +++- | ||
57 | hw/misc/bcm2835_property.c | 4 +++- | ||
58 | hw/ssi/aspeed_smc.c | 15 +++++++++++++-- | ||
59 | target/arm/helper.c | 11 ++++++----- | ||
60 | target/arm/translate-a64.c | 6 +++++- | ||
61 | hw/ssi/trace-events | 1 + | ||
62 | 24 files changed, 76 insertions(+), 28 deletions(-) | ||
63 | 79 | diff view generated by jsdifflib |
1 | From: Philippe Mathieu-Daudé <philmd@redhat.com> | 1 | From: Joe Komlodi <joe.komlodi@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | The license is the 'GNU General Public License v2.0 or later', | 3 | The bit to see if a CD is valid is the last bit of the first word of the CD. |
4 | not 'and': | ||
5 | 4 | ||
6 | This program is free software; you can redistribute it and/ori | 5 | Signed-off-by: Joe Komlodi <joe.komlodi@xilinx.com> |
7 | modify it under the terms of the GNU General Public License as | 6 | Message-id: 1626728232-134665-2-git-send-email-joe.komlodi@xilinx.com |
8 | published by the Free Software Foundation; either version 2 of | ||
9 | the License, or (at your option) any later version. | ||
10 | |||
11 | Fix the license comment. | ||
12 | |||
13 | Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
14 | Message-id: 20200312213455.15854-1-philmd@redhat.com | ||
15 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
16 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
17 | --- | 9 | --- |
18 | include/hw/arm/bcm2835_peripherals.h | 3 ++- | 10 | hw/arm/smmuv3-internal.h | 2 +- |
19 | include/hw/arm/bcm2836.h | 3 ++- | 11 | 1 file changed, 1 insertion(+), 1 deletion(-) |
20 | include/hw/char/bcm2835_aux.h | 3 ++- | ||
21 | include/hw/display/bcm2835_fb.h | 3 ++- | ||
22 | include/hw/dma/bcm2835_dma.h | 4 +++- | ||
23 | include/hw/intc/bcm2835_ic.h | 4 +++- | ||
24 | include/hw/intc/bcm2836_control.h | 3 ++- | ||
25 | include/hw/misc/bcm2835_mbox.h | 4 +++- | ||
26 | include/hw/misc/bcm2835_mbox_defs.h | 4 +++- | ||
27 | include/hw/misc/bcm2835_property.h | 4 +++- | ||
28 | hw/arm/bcm2835_peripherals.c | 3 ++- | ||
29 | hw/arm/bcm2836.c | 3 ++- | ||
30 | hw/arm/raspi.c | 3 ++- | ||
31 | hw/display/bcm2835_fb.c | 1 - | ||
32 | hw/dma/bcm2835_dma.c | 4 +++- | ||
33 | hw/intc/bcm2835_ic.c | 4 ++-- | ||
34 | hw/intc/bcm2836_control.c | 4 +++- | ||
35 | hw/misc/bcm2835_mbox.c | 4 +++- | ||
36 | hw/misc/bcm2835_property.c | 4 +++- | ||
37 | 19 files changed, 45 insertions(+), 20 deletions(-) | ||
38 | 12 | ||
39 | diff --git a/include/hw/arm/bcm2835_peripherals.h b/include/hw/arm/bcm2835_peripherals.h | 13 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h |
40 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
41 | --- a/include/hw/arm/bcm2835_peripherals.h | 15 | --- a/hw/arm/smmuv3-internal.h |
42 | +++ b/include/hw/arm/bcm2835_peripherals.h | 16 | +++ b/hw/arm/smmuv3-internal.h |
43 | @@ -XXX,XX +XXX,XX @@ | 17 | @@ -XXX,XX +XXX,XX @@ static inline int pa_range(STE *ste) |
44 | * Rasperry Pi 2 emulation and refactoring Copyright (c) 2015, Microsoft | 18 | |
45 | * Written by Andrew Baumann | 19 | /* CD fields */ |
46 | * | 20 | |
47 | - * This code is licensed under the GNU GPLv2 and later. | 21 | -#define CD_VALID(x) extract32((x)->word[0], 30, 1) |
48 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | 22 | +#define CD_VALID(x) extract32((x)->word[0], 31, 1) |
49 | + * See the COPYING file in the top-level directory. | 23 | #define CD_ASID(x) extract32((x)->word[1], 16, 16) |
50 | */ | 24 | #define CD_TTB(x, sel) \ |
51 | 25 | ({ \ | |
52 | #ifndef BCM2835_PERIPHERALS_H | ||
53 | diff --git a/include/hw/arm/bcm2836.h b/include/hw/arm/bcm2836.h | ||
54 | index XXXXXXX..XXXXXXX 100644 | ||
55 | --- a/include/hw/arm/bcm2836.h | ||
56 | +++ b/include/hw/arm/bcm2836.h | ||
57 | @@ -XXX,XX +XXX,XX @@ | ||
58 | * Rasperry Pi 2 emulation and refactoring Copyright (c) 2015, Microsoft | ||
59 | * Written by Andrew Baumann | ||
60 | * | ||
61 | - * This code is licensed under the GNU GPLv2 and later. | ||
62 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
63 | + * See the COPYING file in the top-level directory. | ||
64 | */ | ||
65 | |||
66 | #ifndef BCM2836_H | ||
67 | diff --git a/include/hw/char/bcm2835_aux.h b/include/hw/char/bcm2835_aux.h | ||
68 | index XXXXXXX..XXXXXXX 100644 | ||
69 | --- a/include/hw/char/bcm2835_aux.h | ||
70 | +++ b/include/hw/char/bcm2835_aux.h | ||
71 | @@ -XXX,XX +XXX,XX @@ | ||
72 | * Rasperry Pi 2 emulation and refactoring Copyright (c) 2015, Microsoft | ||
73 | * Written by Andrew Baumann | ||
74 | * | ||
75 | - * This code is licensed under the GNU GPLv2 and later. | ||
76 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
77 | + * See the COPYING file in the top-level directory. | ||
78 | */ | ||
79 | |||
80 | #ifndef BCM2835_AUX_H | ||
81 | diff --git a/include/hw/display/bcm2835_fb.h b/include/hw/display/bcm2835_fb.h | ||
82 | index XXXXXXX..XXXXXXX 100644 | ||
83 | --- a/include/hw/display/bcm2835_fb.h | ||
84 | +++ b/include/hw/display/bcm2835_fb.h | ||
85 | @@ -XXX,XX +XXX,XX @@ | ||
86 | * Rasperry Pi 2 emulation and refactoring Copyright (c) 2015, Microsoft | ||
87 | * Written by Andrew Baumann | ||
88 | * | ||
89 | - * This code is licensed under the GNU GPLv2 and later. | ||
90 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
91 | + * See the COPYING file in the top-level directory. | ||
92 | */ | ||
93 | |||
94 | #ifndef BCM2835_FB_H | ||
95 | diff --git a/include/hw/dma/bcm2835_dma.h b/include/hw/dma/bcm2835_dma.h | ||
96 | index XXXXXXX..XXXXXXX 100644 | ||
97 | --- a/include/hw/dma/bcm2835_dma.h | ||
98 | +++ b/include/hw/dma/bcm2835_dma.h | ||
99 | @@ -XXX,XX +XXX,XX @@ | ||
100 | /* | ||
101 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
102 | - * This code is licensed under the GNU GPLv2 and later. | ||
103 | + * | ||
104 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
105 | + * See the COPYING file in the top-level directory. | ||
106 | */ | ||
107 | |||
108 | #ifndef BCM2835_DMA_H | ||
109 | diff --git a/include/hw/intc/bcm2835_ic.h b/include/hw/intc/bcm2835_ic.h | ||
110 | index XXXXXXX..XXXXXXX 100644 | ||
111 | --- a/include/hw/intc/bcm2835_ic.h | ||
112 | +++ b/include/hw/intc/bcm2835_ic.h | ||
113 | @@ -XXX,XX +XXX,XX @@ | ||
114 | /* | ||
115 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
116 | - * This code is licensed under the GNU GPLv2 and later. | ||
117 | + * | ||
118 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
119 | + * See the COPYING file in the top-level directory. | ||
120 | */ | ||
121 | |||
122 | #ifndef BCM2835_IC_H | ||
123 | diff --git a/include/hw/intc/bcm2836_control.h b/include/hw/intc/bcm2836_control.h | ||
124 | index XXXXXXX..XXXXXXX 100644 | ||
125 | --- a/include/hw/intc/bcm2836_control.h | ||
126 | +++ b/include/hw/intc/bcm2836_control.h | ||
127 | @@ -XXX,XX +XXX,XX @@ | ||
128 | * ARM Local Timer IRQ Copyright (c) 2019. Zoltán Baldaszti | ||
129 | * Added basic IRQ_TIMER interrupt support | ||
130 | * | ||
131 | - * This code is licensed under the GNU GPLv2 and later. | ||
132 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
133 | + * See the COPYING file in the top-level directory. | ||
134 | */ | ||
135 | |||
136 | #ifndef BCM2836_CONTROL_H | ||
137 | diff --git a/include/hw/misc/bcm2835_mbox.h b/include/hw/misc/bcm2835_mbox.h | ||
138 | index XXXXXXX..XXXXXXX 100644 | ||
139 | --- a/include/hw/misc/bcm2835_mbox.h | ||
140 | +++ b/include/hw/misc/bcm2835_mbox.h | ||
141 | @@ -XXX,XX +XXX,XX @@ | ||
142 | /* | ||
143 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
144 | - * This code is licensed under the GNU GPLv2 and later. | ||
145 | + * | ||
146 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
147 | + * See the COPYING file in the top-level directory. | ||
148 | */ | ||
149 | |||
150 | #ifndef BCM2835_MBOX_H | ||
151 | diff --git a/include/hw/misc/bcm2835_mbox_defs.h b/include/hw/misc/bcm2835_mbox_defs.h | ||
152 | index XXXXXXX..XXXXXXX 100644 | ||
153 | --- a/include/hw/misc/bcm2835_mbox_defs.h | ||
154 | +++ b/include/hw/misc/bcm2835_mbox_defs.h | ||
155 | @@ -XXX,XX +XXX,XX @@ | ||
156 | /* | ||
157 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
158 | - * This code is licensed under the GNU GPLv2 and later. | ||
159 | + * | ||
160 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
161 | + * See the COPYING file in the top-level directory. | ||
162 | */ | ||
163 | |||
164 | #ifndef BCM2835_MBOX_DEFS_H | ||
165 | diff --git a/include/hw/misc/bcm2835_property.h b/include/hw/misc/bcm2835_property.h | ||
166 | index XXXXXXX..XXXXXXX 100644 | ||
167 | --- a/include/hw/misc/bcm2835_property.h | ||
168 | +++ b/include/hw/misc/bcm2835_property.h | ||
169 | @@ -XXX,XX +XXX,XX @@ | ||
170 | /* | ||
171 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
172 | - * This code is licensed under the GNU GPLv2 and later. | ||
173 | + * | ||
174 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
175 | + * See the COPYING file in the top-level directory. | ||
176 | */ | ||
177 | |||
178 | #ifndef BCM2835_PROPERTY_H | ||
179 | diff --git a/hw/arm/bcm2835_peripherals.c b/hw/arm/bcm2835_peripherals.c | ||
180 | index XXXXXXX..XXXXXXX 100644 | ||
181 | --- a/hw/arm/bcm2835_peripherals.c | ||
182 | +++ b/hw/arm/bcm2835_peripherals.c | ||
183 | @@ -XXX,XX +XXX,XX @@ | ||
184 | * Rasperry Pi 2 emulation and refactoring Copyright (c) 2015, Microsoft | ||
185 | * Written by Andrew Baumann | ||
186 | * | ||
187 | - * This code is licensed under the GNU GPLv2 and later. | ||
188 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
189 | + * See the COPYING file in the top-level directory. | ||
190 | */ | ||
191 | |||
192 | #include "qemu/osdep.h" | ||
193 | diff --git a/hw/arm/bcm2836.c b/hw/arm/bcm2836.c | ||
194 | index XXXXXXX..XXXXXXX 100644 | ||
195 | --- a/hw/arm/bcm2836.c | ||
196 | +++ b/hw/arm/bcm2836.c | ||
197 | @@ -XXX,XX +XXX,XX @@ | ||
198 | * Rasperry Pi 2 emulation and refactoring Copyright (c) 2015, Microsoft | ||
199 | * Written by Andrew Baumann | ||
200 | * | ||
201 | - * This code is licensed under the GNU GPLv2 and later. | ||
202 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
203 | + * See the COPYING file in the top-level directory. | ||
204 | */ | ||
205 | |||
206 | #include "qemu/osdep.h" | ||
207 | diff --git a/hw/arm/raspi.c b/hw/arm/raspi.c | ||
208 | index XXXXXXX..XXXXXXX 100644 | ||
209 | --- a/hw/arm/raspi.c | ||
210 | +++ b/hw/arm/raspi.c | ||
211 | @@ -XXX,XX +XXX,XX @@ | ||
212 | * Raspberry Pi 3 emulation Copyright (c) 2018 Zoltán Baldaszti | ||
213 | * Upstream code cleanup (c) 2018 Pekka Enberg | ||
214 | * | ||
215 | - * This code is licensed under the GNU GPLv2 and later. | ||
216 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
217 | + * See the COPYING file in the top-level directory. | ||
218 | */ | ||
219 | |||
220 | #include "qemu/osdep.h" | ||
221 | diff --git a/hw/display/bcm2835_fb.c b/hw/display/bcm2835_fb.c | ||
222 | index XXXXXXX..XXXXXXX 100644 | ||
223 | --- a/hw/display/bcm2835_fb.c | ||
224 | +++ b/hw/display/bcm2835_fb.c | ||
225 | @@ -XXX,XX +XXX,XX @@ | ||
226 | /* | ||
227 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
228 | * Refactoring for Pi2 Copyright (c) 2015, Microsoft. Written by Andrew Baumann. | ||
229 | - * This code is licensed under the GNU GPLv2 and later. | ||
230 | * | ||
231 | * Heavily based on milkymist-vgafb.c, copyright terms below: | ||
232 | * QEMU model of the Milkymist VGA framebuffer. | ||
233 | diff --git a/hw/dma/bcm2835_dma.c b/hw/dma/bcm2835_dma.c | ||
234 | index XXXXXXX..XXXXXXX 100644 | ||
235 | --- a/hw/dma/bcm2835_dma.c | ||
236 | +++ b/hw/dma/bcm2835_dma.c | ||
237 | @@ -XXX,XX +XXX,XX @@ | ||
238 | /* | ||
239 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
240 | - * This code is licensed under the GNU GPLv2 and later. | ||
241 | + * | ||
242 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
243 | + * See the COPYING file in the top-level directory. | ||
244 | */ | ||
245 | |||
246 | #include "qemu/osdep.h" | ||
247 | diff --git a/hw/intc/bcm2835_ic.c b/hw/intc/bcm2835_ic.c | ||
248 | index XXXXXXX..XXXXXXX 100644 | ||
249 | --- a/hw/intc/bcm2835_ic.c | ||
250 | +++ b/hw/intc/bcm2835_ic.c | ||
251 | @@ -XXX,XX +XXX,XX @@ | ||
252 | /* | ||
253 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
254 | * Refactoring for Pi2 Copyright (c) 2015, Microsoft. Written by Andrew Baumann. | ||
255 | - * This code is licensed under the GNU GPLv2 and later. | ||
256 | * Heavily based on pl190.c, copyright terms below: | ||
257 | * | ||
258 | * Arm PrimeCell PL190 Vector Interrupt Controller | ||
259 | @@ -XXX,XX +XXX,XX @@ | ||
260 | * Copyright (c) 2006 CodeSourcery. | ||
261 | * Written by Paul Brook | ||
262 | * | ||
263 | - * This code is licensed under the GPL. | ||
264 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
265 | + * See the COPYING file in the top-level directory. | ||
266 | */ | ||
267 | |||
268 | #include "qemu/osdep.h" | ||
269 | diff --git a/hw/intc/bcm2836_control.c b/hw/intc/bcm2836_control.c | ||
270 | index XXXXXXX..XXXXXXX 100644 | ||
271 | --- a/hw/intc/bcm2836_control.c | ||
272 | +++ b/hw/intc/bcm2836_control.c | ||
273 | @@ -XXX,XX +XXX,XX @@ | ||
274 | * Written by Andrew Baumann | ||
275 | * | ||
276 | * Based on bcm2835_ic.c (Raspberry Pi emulation) (c) 2012 Gregory Estrade | ||
277 | - * This code is licensed under the GNU GPLv2 and later. | ||
278 | * | ||
279 | * At present, only implements interrupt routing, and mailboxes (i.e., | ||
280 | * not PMU interrupt, or AXI counters). | ||
281 | @@ -XXX,XX +XXX,XX @@ | ||
282 | * | ||
283 | * Ref: | ||
284 | * https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2836/QA7_rev3.4.pdf | ||
285 | + * | ||
286 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
287 | + * See the COPYING file in the top-level directory. | ||
288 | */ | ||
289 | |||
290 | #include "qemu/osdep.h" | ||
291 | diff --git a/hw/misc/bcm2835_mbox.c b/hw/misc/bcm2835_mbox.c | ||
292 | index XXXXXXX..XXXXXXX 100644 | ||
293 | --- a/hw/misc/bcm2835_mbox.c | ||
294 | +++ b/hw/misc/bcm2835_mbox.c | ||
295 | @@ -XXX,XX +XXX,XX @@ | ||
296 | /* | ||
297 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
298 | - * This code is licensed under the GNU GPLv2 and later. | ||
299 | * | ||
300 | * This file models the system mailboxes, which are used for | ||
301 | * communication with low-bandwidth GPU peripherals. Refs: | ||
302 | * https://github.com/raspberrypi/firmware/wiki/Mailboxes | ||
303 | * https://github.com/raspberrypi/firmware/wiki/Accessing-mailboxes | ||
304 | + * | ||
305 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
306 | + * See the COPYING file in the top-level directory. | ||
307 | */ | ||
308 | |||
309 | #include "qemu/osdep.h" | ||
310 | diff --git a/hw/misc/bcm2835_property.c b/hw/misc/bcm2835_property.c | ||
311 | index XXXXXXX..XXXXXXX 100644 | ||
312 | --- a/hw/misc/bcm2835_property.c | ||
313 | +++ b/hw/misc/bcm2835_property.c | ||
314 | @@ -XXX,XX +XXX,XX @@ | ||
315 | /* | ||
316 | * Raspberry Pi emulation (c) 2012 Gregory Estrade | ||
317 | - * This code is licensed under the GNU GPLv2 and later. | ||
318 | + * | ||
319 | + * This work is licensed under the terms of the GNU GPL, version 2 or later. | ||
320 | + * See the COPYING file in the top-level directory. | ||
321 | */ | ||
322 | |||
323 | #include "qemu/osdep.h" | ||
324 | -- | 26 | -- |
325 | 2.20.1 | 27 | 2.20.1 |
326 | 28 | ||
327 | 29 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | The documentation of the -machine memory-backend has some minor | ||
2 | formatting errors: | ||
3 | * Misindentation of the initial line meant that the whole option | ||
4 | section is incorrectly indented in the HTML output compared to | ||
5 | the other -machine options | ||
6 | * The examples weren't indented, which meant that they were formatted | ||
7 | as plain run-on text including outputting the "::" as text. | ||
8 | * The a) b) list has no rst-format markup so it is rendered as | ||
9 | a single run-on paragraph | ||
1 | 10 | ||
11 | Fix the formatting. | ||
12 | |||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
14 | Reviewed-by: Igor Mammedov <imammedo@redhat.com> | ||
15 | Message-id: 20210719105257.3599-1-peter.maydell@linaro.org | ||
16 | --- | ||
17 | qemu-options.hx | 30 +++++++++++++++++------------- | ||
18 | 1 file changed, 17 insertions(+), 13 deletions(-) | ||
19 | |||
20 | diff --git a/qemu-options.hx b/qemu-options.hx | ||
21 | index XXXXXXX..XXXXXXX 100644 | ||
22 | --- a/qemu-options.hx | ||
23 | +++ b/qemu-options.hx | ||
24 | @@ -XXX,XX +XXX,XX @@ SRST | ||
25 | Enables or disables ACPI Heterogeneous Memory Attribute Table | ||
26 | (HMAT) support. The default is off. | ||
27 | |||
28 | - ``memory-backend='id'`` | ||
29 | + ``memory-backend='id'`` | ||
30 | An alternative to legacy ``-mem-path`` and ``mem-prealloc`` options. | ||
31 | Allows to use a memory backend as main RAM. | ||
32 | |||
33 | For example: | ||
34 | :: | ||
35 | - -object memory-backend-file,id=pc.ram,size=512M,mem-path=/hugetlbfs,prealloc=on,share=on | ||
36 | - -machine memory-backend=pc.ram | ||
37 | - -m 512M | ||
38 | + | ||
39 | + -object memory-backend-file,id=pc.ram,size=512M,mem-path=/hugetlbfs,prealloc=on,share=on | ||
40 | + -machine memory-backend=pc.ram | ||
41 | + -m 512M | ||
42 | |||
43 | Migration compatibility note: | ||
44 | - a) as backend id one shall use value of 'default-ram-id', advertised by | ||
45 | - machine type (available via ``query-machines`` QMP command), if migration | ||
46 | - to/from old QEMU (<5.0) is expected. | ||
47 | - b) for machine types 4.0 and older, user shall | ||
48 | - use ``x-use-canonical-path-for-ramblock-id=off`` backend option | ||
49 | - if migration to/from old QEMU (<5.0) is expected. | ||
50 | + | ||
51 | + * as backend id one shall use value of 'default-ram-id', advertised by | ||
52 | + machine type (available via ``query-machines`` QMP command), if migration | ||
53 | + to/from old QEMU (<5.0) is expected. | ||
54 | + * for machine types 4.0 and older, user shall | ||
55 | + use ``x-use-canonical-path-for-ramblock-id=off`` backend option | ||
56 | + if migration to/from old QEMU (<5.0) is expected. | ||
57 | + | ||
58 | For example: | ||
59 | :: | ||
60 | - -object memory-backend-ram,id=pc.ram,size=512M,x-use-canonical-path-for-ramblock-id=off | ||
61 | - -machine memory-backend=pc.ram | ||
62 | - -m 512M | ||
63 | + | ||
64 | + -object memory-backend-ram,id=pc.ram,size=512M,x-use-canonical-path-for-ramblock-id=off | ||
65 | + -machine memory-backend=pc.ram | ||
66 | + -m 512M | ||
67 | ERST | ||
68 | |||
69 | HXCOMM Deprecated by -machine | ||
70 | -- | ||
71 | 2.20.1 | ||
72 | |||
73 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | For M-profile, unlike A-profile, the low 2 bits of SP are defined to be | ||
2 | RES0H, which is to say that they must be hardwired to zero so that | ||
3 | guest attempts to write non-zero values to them are ignored. | ||
1 | 4 | ||
5 | Implement this behaviour by masking out the low bits: | ||
6 | * for writes to r13 by the gdbstub | ||
7 | * for writes to any of the various flavours of SP via MSR | ||
8 | * for writes to r13 via store_reg() in generated code | ||
9 | |||
10 | Note that all the direct uses of cpu_R[] in translate.c are in places | ||
11 | where the register is definitely not r13 (usually because that has | ||
12 | been checked for as an UNDEFINED or UNPREDICTABLE case and handled as | ||
13 | UNDEF). | ||
14 | |||
15 | All the other writes to regs[13] in C code are either: | ||
16 | * A-profile only code | ||
17 | * writes of values we can guarantee to be aligned, such as | ||
18 | - writes of previous-SP-value plus or minus a 4-aligned constant | ||
19 | - writes of the value in an SP limit register (which we already | ||
20 | enforce to be aligned) | ||
21 | |||
22 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
23 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
24 | Message-id: 20210723162146.5167-2-peter.maydell@linaro.org | ||
25 | --- | ||
26 | target/arm/gdbstub.c | 4 ++++ | ||
27 | target/arm/m_helper.c | 14 ++++++++------ | ||
28 | target/arm/translate.c | 3 +++ | ||
29 | 3 files changed, 15 insertions(+), 6 deletions(-) | ||
30 | |||
31 | diff --git a/target/arm/gdbstub.c b/target/arm/gdbstub.c | ||
32 | index XXXXXXX..XXXXXXX 100644 | ||
33 | --- a/target/arm/gdbstub.c | ||
34 | +++ b/target/arm/gdbstub.c | ||
35 | @@ -XXX,XX +XXX,XX @@ int arm_cpu_gdb_write_register(CPUState *cs, uint8_t *mem_buf, int n) | ||
36 | |||
37 | if (n < 16) { | ||
38 | /* Core integer register. */ | ||
39 | + if (n == 13 && arm_feature(env, ARM_FEATURE_M)) { | ||
40 | + /* M profile SP low bits are always 0 */ | ||
41 | + tmp &= ~3; | ||
42 | + } | ||
43 | env->regs[n] = tmp; | ||
44 | return 4; | ||
45 | } | ||
46 | diff --git a/target/arm/m_helper.c b/target/arm/m_helper.c | ||
47 | index XXXXXXX..XXXXXXX 100644 | ||
48 | --- a/target/arm/m_helper.c | ||
49 | +++ b/target/arm/m_helper.c | ||
50 | @@ -XXX,XX +XXX,XX @@ void HELPER(v7m_msr)(CPUARMState *env, uint32_t maskreg, uint32_t val) | ||
51 | if (!env->v7m.secure) { | ||
52 | return; | ||
53 | } | ||
54 | - env->v7m.other_ss_msp = val; | ||
55 | + env->v7m.other_ss_msp = val & ~3; | ||
56 | return; | ||
57 | case 0x89: /* PSP_NS */ | ||
58 | if (!env->v7m.secure) { | ||
59 | return; | ||
60 | } | ||
61 | - env->v7m.other_ss_psp = val; | ||
62 | + env->v7m.other_ss_psp = val & ~3; | ||
63 | return; | ||
64 | case 0x8a: /* MSPLIM_NS */ | ||
65 | if (!env->v7m.secure) { | ||
66 | @@ -XXX,XX +XXX,XX @@ void HELPER(v7m_msr)(CPUARMState *env, uint32_t maskreg, uint32_t val) | ||
67 | |||
68 | limit = is_psp ? env->v7m.psplim[false] : env->v7m.msplim[false]; | ||
69 | |||
70 | + val &= ~0x3; | ||
71 | + | ||
72 | if (val < limit) { | ||
73 | raise_exception_ra(env, EXCP_STKOF, 0, 1, GETPC()); | ||
74 | } | ||
75 | @@ -XXX,XX +XXX,XX @@ void HELPER(v7m_msr)(CPUARMState *env, uint32_t maskreg, uint32_t val) | ||
76 | break; | ||
77 | case 8: /* MSP */ | ||
78 | if (v7m_using_psp(env)) { | ||
79 | - env->v7m.other_sp = val; | ||
80 | + env->v7m.other_sp = val & ~3; | ||
81 | } else { | ||
82 | - env->regs[13] = val; | ||
83 | + env->regs[13] = val & ~3; | ||
84 | } | ||
85 | break; | ||
86 | case 9: /* PSP */ | ||
87 | if (v7m_using_psp(env)) { | ||
88 | - env->regs[13] = val; | ||
89 | + env->regs[13] = val & ~3; | ||
90 | } else { | ||
91 | - env->v7m.other_sp = val; | ||
92 | + env->v7m.other_sp = val & ~3; | ||
93 | } | ||
94 | break; | ||
95 | case 10: /* MSPLIM */ | ||
96 | diff --git a/target/arm/translate.c b/target/arm/translate.c | ||
97 | index XXXXXXX..XXXXXXX 100644 | ||
98 | --- a/target/arm/translate.c | ||
99 | +++ b/target/arm/translate.c | ||
100 | @@ -XXX,XX +XXX,XX @@ void store_reg(DisasContext *s, int reg, TCGv_i32 var) | ||
101 | */ | ||
102 | tcg_gen_andi_i32(var, var, s->thumb ? ~1 : ~3); | ||
103 | s->base.is_jmp = DISAS_JUMP; | ||
104 | + } else if (reg == 13 && arm_dc_feature(s, ARM_FEATURE_M)) { | ||
105 | + /* For M-profile SP bits [1:0] are always zero */ | ||
106 | + tcg_gen_andi_i32(var, var, ~3); | ||
107 | } | ||
108 | tcg_gen_mov_i32(cpu_R[reg], var); | ||
109 | tcg_temp_free_i32(var); | ||
110 | -- | ||
111 | 2.20.1 | ||
112 | |||
113 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | In do_v7m_exception_exit(), we perform various checks as part of | ||
2 | performing the exception return. If one of these checks fails, the | ||
3 | architecture requires that we take an appropriate exception on the | ||
4 | existing stackframe. We implement this by calling | ||
5 | v7m_exception_taken() to set up to take the new exception, and then | ||
6 | immediately returning from do_v7m_exception_exit() without proceeding | ||
7 | any further with the unstack-and-exception-return process. | ||
1 | 8 | ||
9 | In a couple of checks that are new in v8.1M, we forgot the "return" | ||
10 | statement, with the effect that if bad code in the guest tripped over | ||
11 | these checks we would set up to take a UsageFault exception but then | ||
12 | blunder on trying to also unstack and return from the original | ||
13 | exception, with the probable result that the guest would crash. | ||
14 | |||
15 | Add the missing return statements. | ||
16 | |||
17 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
18 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
19 | Message-id: 20210723162146.5167-3-peter.maydell@linaro.org | ||
20 | --- | ||
21 | target/arm/m_helper.c | 2 ++ | ||
22 | 1 file changed, 2 insertions(+) | ||
23 | |||
24 | diff --git a/target/arm/m_helper.c b/target/arm/m_helper.c | ||
25 | index XXXXXXX..XXXXXXX 100644 | ||
26 | --- a/target/arm/m_helper.c | ||
27 | +++ b/target/arm/m_helper.c | ||
28 | @@ -XXX,XX +XXX,XX @@ static void do_v7m_exception_exit(ARMCPU *cpu) | ||
29 | qemu_log_mask(CPU_LOG_INT, "...taking UsageFault on existing " | ||
30 | "stackframe: NSACR prevents clearing FPU registers\n"); | ||
31 | v7m_exception_taken(cpu, excret, true, false); | ||
32 | + return; | ||
33 | } else if (!cpacr_pass) { | ||
34 | armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_USAGE, | ||
35 | exc_secure); | ||
36 | @@ -XXX,XX +XXX,XX @@ static void do_v7m_exception_exit(ARMCPU *cpu) | ||
37 | qemu_log_mask(CPU_LOG_INT, "...taking UsageFault on existing " | ||
38 | "stackframe: CPACR prevents clearing FPU registers\n"); | ||
39 | v7m_exception_taken(cpu, excret, true, false); | ||
40 | + return; | ||
41 | } | ||
42 | } | ||
43 | /* Clear s0..s15, FPSCR and VPR */ | ||
44 | -- | ||
45 | 2.20.1 | ||
46 | |||
47 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | For M-profile, we weren't reporting alignment faults triggered by the | ||
2 | generic TCG code correctly to the guest. These get passed into | ||
3 | arm_v7m_cpu_do_interrupt() as an EXCP_DATA_ABORT with an A-profile | ||
4 | style exception.fsr value of 1. We didn't check for this, and so | ||
5 | they fell through into the default of "assume this is an MPU fault" | ||
6 | and were reported to the guest as a data access violation MPU fault. | ||
1 | 7 | ||
8 | Report these alignment faults as UsageFaults which set the UNALIGNED | ||
9 | bit in the UFSR. | ||
10 | |||
11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
12 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
13 | Message-id: 20210723162146.5167-4-peter.maydell@linaro.org | ||
14 | --- | ||
15 | target/arm/m_helper.c | 8 ++++++++ | ||
16 | 1 file changed, 8 insertions(+) | ||
17 | |||
18 | diff --git a/target/arm/m_helper.c b/target/arm/m_helper.c | ||
19 | index XXXXXXX..XXXXXXX 100644 | ||
20 | --- a/target/arm/m_helper.c | ||
21 | +++ b/target/arm/m_helper.c | ||
22 | @@ -XXX,XX +XXX,XX @@ void arm_v7m_cpu_do_interrupt(CPUState *cs) | ||
23 | env->v7m.sfsr |= R_V7M_SFSR_LSERR_MASK; | ||
24 | break; | ||
25 | case EXCP_UNALIGNED: | ||
26 | + /* Unaligned faults reported by M-profile aware code */ | ||
27 | armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_USAGE, env->v7m.secure); | ||
28 | env->v7m.cfsr[env->v7m.secure] |= R_V7M_CFSR_UNALIGNED_MASK; | ||
29 | break; | ||
30 | @@ -XXX,XX +XXX,XX @@ void arm_v7m_cpu_do_interrupt(CPUState *cs) | ||
31 | } | ||
32 | armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_BUS, false); | ||
33 | break; | ||
34 | + case 0x1: /* Alignment fault reported by generic code */ | ||
35 | + qemu_log_mask(CPU_LOG_INT, | ||
36 | + "...really UsageFault with UFSR.UNALIGNED\n"); | ||
37 | + env->v7m.cfsr[env->v7m.secure] |= R_V7M_CFSR_UNALIGNED_MASK; | ||
38 | + armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_USAGE, | ||
39 | + env->v7m.secure); | ||
40 | + break; | ||
41 | default: | ||
42 | /* | ||
43 | * All other FSR values are either MPU faults or "can't happen | ||
44 | -- | ||
45 | 2.20.1 | ||
46 | |||
47 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | The ISCR.ISRPENDING bit is set when an external interrupt is pending. | ||
2 | This is true whether that external interrupt is enabled or not. | ||
3 | This means that we can't use 's->vectpending == 0' as a shortcut to | ||
4 | "ISRPENDING is zero", because s->vectpending indicates only the | ||
5 | highest priority pending enabled interrupt. | ||
1 | 6 | ||
7 | Remove the incorrect optimization so that if there is no pending | ||
8 | enabled interrupt we fall through to scanning through the whole | ||
9 | interrupt array. | ||
10 | |||
11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
12 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
13 | Message-id: 20210723162146.5167-5-peter.maydell@linaro.org | ||
14 | --- | ||
15 | hw/intc/armv7m_nvic.c | 9 ++++----- | ||
16 | 1 file changed, 4 insertions(+), 5 deletions(-) | ||
17 | |||
18 | diff --git a/hw/intc/armv7m_nvic.c b/hw/intc/armv7m_nvic.c | ||
19 | index XXXXXXX..XXXXXXX 100644 | ||
20 | --- a/hw/intc/armv7m_nvic.c | ||
21 | +++ b/hw/intc/armv7m_nvic.c | ||
22 | @@ -XXX,XX +XXX,XX @@ static bool nvic_isrpending(NVICState *s) | ||
23 | { | ||
24 | int irq; | ||
25 | |||
26 | - /* We can shortcut if the highest priority pending interrupt | ||
27 | - * happens to be external or if there is nothing pending. | ||
28 | + /* | ||
29 | + * We can shortcut if the highest priority pending interrupt | ||
30 | + * happens to be external; if not we need to check the whole | ||
31 | + * vectors[] array. | ||
32 | */ | ||
33 | if (s->vectpending > NVIC_FIRST_IRQ) { | ||
34 | return true; | ||
35 | } | ||
36 | - if (s->vectpending == 0) { | ||
37 | - return false; | ||
38 | - } | ||
39 | |||
40 | for (irq = NVIC_FIRST_IRQ; irq < s->num_irq; irq++) { | ||
41 | if (s->vectors[irq].pending) { | ||
42 | -- | ||
43 | 2.20.1 | ||
44 | |||
45 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | The VECTPENDING field in the ICSR is 9 bits wide, in bits [20:12] of | ||
2 | the register. We were incorrectly masking it to 8 bits, so it would | ||
3 | report the wrong value if the pending exception was greater than 256. | ||
4 | Fix the bug. | ||
1 | 5 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
8 | Message-id: 20210723162146.5167-6-peter.maydell@linaro.org | ||
9 | --- | ||
10 | hw/intc/armv7m_nvic.c | 2 +- | ||
11 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
12 | |||
13 | diff --git a/hw/intc/armv7m_nvic.c b/hw/intc/armv7m_nvic.c | ||
14 | index XXXXXXX..XXXXXXX 100644 | ||
15 | --- a/hw/intc/armv7m_nvic.c | ||
16 | +++ b/hw/intc/armv7m_nvic.c | ||
17 | @@ -XXX,XX +XXX,XX @@ static uint32_t nvic_readl(NVICState *s, uint32_t offset, MemTxAttrs attrs) | ||
18 | /* VECTACTIVE */ | ||
19 | val = cpu->env.v7m.exception; | ||
20 | /* VECTPENDING */ | ||
21 | - val |= (s->vectpending & 0xff) << 12; | ||
22 | + val |= (s->vectpending & 0x1ff) << 12; | ||
23 | /* ISRPENDING - set if any external IRQ is pending */ | ||
24 | if (nvic_isrpending(s)) { | ||
25 | val |= (1 << 22); | ||
26 | -- | ||
27 | 2.20.1 | ||
28 | |||
29 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | In Arm v8.1M the VECTPENDING field in the ICSR has new behaviour: if | ||
2 | the register is accessed NonSecure and the highest priority pending | ||
3 | enabled exception (that would be returned in the VECTPENDING field) | ||
4 | targets Secure, then the VECTPENDING field must read 1 rather than | ||
5 | the exception number of the pending exception. Implement this. | ||
1 | 6 | ||
7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
9 | Message-id: 20210723162146.5167-7-peter.maydell@linaro.org | ||
10 | --- | ||
11 | hw/intc/armv7m_nvic.c | 31 ++++++++++++++++++++++++------- | ||
12 | 1 file changed, 24 insertions(+), 7 deletions(-) | ||
13 | |||
14 | diff --git a/hw/intc/armv7m_nvic.c b/hw/intc/armv7m_nvic.c | ||
15 | index XXXXXXX..XXXXXXX 100644 | ||
16 | --- a/hw/intc/armv7m_nvic.c | ||
17 | +++ b/hw/intc/armv7m_nvic.c | ||
18 | @@ -XXX,XX +XXX,XX @@ void armv7m_nvic_acknowledge_irq(void *opaque) | ||
19 | nvic_irq_update(s); | ||
20 | } | ||
21 | |||
22 | +static bool vectpending_targets_secure(NVICState *s) | ||
23 | +{ | ||
24 | + /* Return true if s->vectpending targets Secure state */ | ||
25 | + if (s->vectpending_is_s_banked) { | ||
26 | + return true; | ||
27 | + } | ||
28 | + return !exc_is_banked(s->vectpending) && | ||
29 | + exc_targets_secure(s, s->vectpending); | ||
30 | +} | ||
31 | + | ||
32 | void armv7m_nvic_get_pending_irq_info(void *opaque, | ||
33 | int *pirq, bool *ptargets_secure) | ||
34 | { | ||
35 | @@ -XXX,XX +XXX,XX @@ void armv7m_nvic_get_pending_irq_info(void *opaque, | ||
36 | |||
37 | assert(pending > ARMV7M_EXCP_RESET && pending < s->num_irq); | ||
38 | |||
39 | - if (s->vectpending_is_s_banked) { | ||
40 | - targets_secure = true; | ||
41 | - } else { | ||
42 | - targets_secure = !exc_is_banked(pending) && | ||
43 | - exc_targets_secure(s, pending); | ||
44 | - } | ||
45 | + targets_secure = vectpending_targets_secure(s); | ||
46 | |||
47 | trace_nvic_get_pending_irq_info(pending, targets_secure); | ||
48 | |||
49 | @@ -XXX,XX +XXX,XX @@ static uint32_t nvic_readl(NVICState *s, uint32_t offset, MemTxAttrs attrs) | ||
50 | /* VECTACTIVE */ | ||
51 | val = cpu->env.v7m.exception; | ||
52 | /* VECTPENDING */ | ||
53 | - val |= (s->vectpending & 0x1ff) << 12; | ||
54 | + if (s->vectpending) { | ||
55 | + /* | ||
56 | + * From v8.1M VECTPENDING must read as 1 if accessed as | ||
57 | + * NonSecure and the highest priority pending and enabled | ||
58 | + * exception targets Secure. | ||
59 | + */ | ||
60 | + int vp = s->vectpending; | ||
61 | + if (!attrs.secure && arm_feature(&cpu->env, ARM_FEATURE_V8_1M) && | ||
62 | + vectpending_targets_secure(s)) { | ||
63 | + vp = 1; | ||
64 | + } | ||
65 | + val |= (vp & 0x1ff) << 12; | ||
66 | + } | ||
67 | /* ISRPENDING - set if any external IRQ is pending */ | ||
68 | if (nvic_isrpending(s)) { | ||
69 | val |= (1 << 22); | ||
70 | -- | ||
71 | 2.20.1 | ||
72 | |||
73 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Mao Zhongyi <maozhongyi@cmss.chinamobile.com> | ||
1 | 2 | ||
3 | Missed in commit f3478392 "docs: Move deprecation, build | ||
4 | and license info out of system/" | ||
5 | |||
6 | Signed-off-by: Mao Zhongyi <maozhongyi@cmss.chinamobile.com> | ||
7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
8 | Message-id: 20210723065828.1336760-1-maozhongyi@cmss.chinamobile.com | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
10 | --- | ||
11 | configure | 2 +- | ||
12 | target/i386/cpu.c | 2 +- | ||
13 | MAINTAINERS | 2 +- | ||
14 | 3 files changed, 3 insertions(+), 3 deletions(-) | ||
15 | |||
16 | diff --git a/configure b/configure | ||
17 | index XXXXXXX..XXXXXXX 100755 | ||
18 | --- a/configure | ||
19 | +++ b/configure | ||
20 | @@ -XXX,XX +XXX,XX @@ fi | ||
21 | |||
22 | if test -n "${deprecated_features}"; then | ||
23 | echo "Warning, deprecated features enabled." | ||
24 | - echo "Please see docs/system/deprecated.rst" | ||
25 | + echo "Please see docs/about/deprecated.rst" | ||
26 | echo " features: ${deprecated_features}" | ||
27 | fi | ||
28 | |||
29 | diff --git a/target/i386/cpu.c b/target/i386/cpu.c | ||
30 | index XXXXXXX..XXXXXXX 100644 | ||
31 | --- a/target/i386/cpu.c | ||
32 | +++ b/target/i386/cpu.c | ||
33 | @@ -XXX,XX +XXX,XX @@ static const X86CPUDefinition builtin_x86_defs[] = { | ||
34 | * none", but this is just for compatibility while libvirt isn't | ||
35 | * adapted to resolve CPU model versions before creating VMs. | ||
36 | * See "Runnability guarantee of CPU models" at | ||
37 | - * docs/system/deprecated.rst. | ||
38 | + * docs/about/deprecated.rst. | ||
39 | */ | ||
40 | X86CPUVersion default_cpu_version = 1; | ||
41 | |||
42 | diff --git a/MAINTAINERS b/MAINTAINERS | ||
43 | index XXXXXXX..XXXXXXX 100644 | ||
44 | --- a/MAINTAINERS | ||
45 | +++ b/MAINTAINERS | ||
46 | @@ -XXX,XX +XXX,XX @@ F: contrib/gitdm/* | ||
47 | |||
48 | Incompatible changes | ||
49 | R: libvir-list@redhat.com | ||
50 | -F: docs/system/deprecated.rst | ||
51 | +F: docs/about/deprecated.rst | ||
52 | |||
53 | Build System | ||
54 | ------------ | ||
55 | -- | ||
56 | 2.20.1 | ||
57 | |||
58 | diff view generated by jsdifflib |
1 | From: Richard Henderson <richard.henderson@linaro.org> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Coverity rightly notes that ctz32(bas) on 0 will return 32, | 3 | Currently, our only caller is sve_zcr_len_for_el, which has |
4 | which makes the len calculation a BAD_SHIFT. | 4 | already masked the length extracted from ZCR_ELx, so the |
5 | masking done here is a nop. But we will shortly have uses | ||
6 | from other locations, where the length will be unmasked. | ||
5 | 7 | ||
6 | A value of 0 in DBGWCR<n>_EL1.BAS is reserved. Simply move | 8 | Saturate the length to ARM_MAX_VQ instead of truncating to |
7 | the existing check we have for this case. | 9 | the low 4 bits. |
8 | 10 | ||
9 | Reported-by: Coverity (CID 1421964) | ||
10 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | 11 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
11 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
12 | Message-id: 20200320160622.8040-2-richard.henderson@linaro.org | ||
13 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 12 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
13 | Message-id: 20210723203344.968563-2-richard.henderson@linaro.org | ||
14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
15 | --- | 15 | --- |
16 | target/arm/helper.c | 11 ++++++----- | 16 | target/arm/helper.c | 4 +++- |
17 | 1 file changed, 6 insertions(+), 5 deletions(-) | 17 | 1 file changed, 3 insertions(+), 1 deletion(-) |
18 | 18 | ||
19 | diff --git a/target/arm/helper.c b/target/arm/helper.c | 19 | diff --git a/target/arm/helper.c b/target/arm/helper.c |
20 | index XXXXXXX..XXXXXXX 100644 | 20 | index XXXXXXX..XXXXXXX 100644 |
21 | --- a/target/arm/helper.c | 21 | --- a/target/arm/helper.c |
22 | +++ b/target/arm/helper.c | 22 | +++ b/target/arm/helper.c |
23 | @@ -XXX,XX +XXX,XX @@ void hw_watchpoint_update(ARMCPU *cpu, int n) | 23 | @@ -XXX,XX +XXX,XX @@ static uint32_t sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len) |
24 | int bas = extract64(wcr, 5, 8); | 24 | { |
25 | int basstart; | 25 | uint32_t end_len; |
26 | 26 | ||
27 | - if (bas == 0) { | 27 | - end_len = start_len &= 0xf; |
28 | - /* This must act as if the watchpoint is disabled */ | 28 | + start_len = MIN(start_len, ARM_MAX_VQ - 1); |
29 | - return; | 29 | + end_len = start_len; |
30 | - } | ||
31 | - | ||
32 | if (extract64(wvr, 2, 1)) { | ||
33 | /* Deprecated case of an only 4-aligned address. BAS[7:4] are | ||
34 | * ignored, and BAS[3:0] define which bytes to watch. | ||
35 | */ | ||
36 | bas &= 0xf; | ||
37 | } | ||
38 | + | 30 | + |
39 | + if (bas == 0) { | 31 | if (!test_bit(start_len, cpu->sve_vq_map)) { |
40 | + /* This must act as if the watchpoint is disabled */ | 32 | end_len = find_last_bit(cpu->sve_vq_map, start_len); |
41 | + return; | 33 | assert(end_len < start_len); |
42 | + } | ||
43 | + | ||
44 | /* The BAS bits are supposed to be programmed to indicate a contiguous | ||
45 | * range of bytes. Otherwise it is CONSTRAINED UNPREDICTABLE whether | ||
46 | * we fire for each byte in the word/doubleword addressed by the WVR. | ||
47 | -- | 34 | -- |
48 | 2.20.1 | 35 | 2.20.1 |
49 | 36 | ||
50 | 37 | diff view generated by jsdifflib |
1 | From: Richard Henderson <richard.henderson@linaro.org> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Coverity reports a BAD_SHIFT with ctz32(imm5), with imm5 == 0. | 3 | Rename from sve_zcr_get_valid_len and make accessible |
4 | This is an invalid encoding, but we diagnose that just below | 4 | from outside of helper.c. |
5 | by rejecting size > 3. Avoid the warning by sinking the | ||
6 | computation of index below the check. | ||
7 | 5 | ||
8 | Reported-by: Coverity (CID 1421965) | ||
9 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | 6 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
10 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
11 | Message-id: 20200320160622.8040-4-richard.henderson@linaro.org | ||
12 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Message-id: 20210723203344.968563-3-richard.henderson@linaro.org | ||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
14 | --- | 10 | --- |
15 | target/arm/translate-a64.c | 3 ++- | 11 | target/arm/internals.h | 10 ++++++++++ |
16 | 1 file changed, 2 insertions(+), 1 deletion(-) | 12 | target/arm/helper.c | 4 ++-- |
13 | 2 files changed, 12 insertions(+), 2 deletions(-) | ||
17 | 14 | ||
18 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c | 15 | diff --git a/target/arm/internals.h b/target/arm/internals.h |
19 | index XXXXXXX..XXXXXXX 100644 | 16 | index XXXXXXX..XXXXXXX 100644 |
20 | --- a/target/arm/translate-a64.c | 17 | --- a/target/arm/internals.h |
21 | +++ b/target/arm/translate-a64.c | 18 | +++ b/target/arm/internals.h |
22 | @@ -XXX,XX +XXX,XX @@ static void handle_simd_dupe(DisasContext *s, int is_q, int rd, int rn, | 19 | @@ -XXX,XX +XXX,XX @@ void arm_translate_init(void); |
23 | int imm5) | 20 | void arm_cpu_synchronize_from_tb(CPUState *cs, const TranslationBlock *tb); |
21 | #endif /* CONFIG_TCG */ | ||
22 | |||
23 | +/** | ||
24 | + * aarch64_sve_zcr_get_valid_len: | ||
25 | + * @cpu: cpu context | ||
26 | + * @start_len: maximum len to consider | ||
27 | + * | ||
28 | + * Return the maximum supported sve vector length <= @start_len. | ||
29 | + * Note that both @start_len and the return value are in units | ||
30 | + * of ZCR_ELx.LEN, so the vector bit length is (x + 1) * 128. | ||
31 | + */ | ||
32 | +uint32_t aarch64_sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len); | ||
33 | |||
34 | enum arm_fprounding { | ||
35 | FPROUNDING_TIEEVEN, | ||
36 | diff --git a/target/arm/helper.c b/target/arm/helper.c | ||
37 | index XXXXXXX..XXXXXXX 100644 | ||
38 | --- a/target/arm/helper.c | ||
39 | +++ b/target/arm/helper.c | ||
40 | @@ -XXX,XX +XXX,XX @@ int sve_exception_el(CPUARMState *env, int el) | ||
41 | return 0; | ||
42 | } | ||
43 | |||
44 | -static uint32_t sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len) | ||
45 | +uint32_t aarch64_sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len) | ||
24 | { | 46 | { |
25 | int size = ctz32(imm5); | 47 | uint32_t end_len; |
26 | - int index = imm5 >> (size + 1); | 48 | |
27 | + int index; | 49 | @@ -XXX,XX +XXX,XX @@ uint32_t sve_zcr_len_for_el(CPUARMState *env, int el) |
28 | 50 | zcr_len = MIN(zcr_len, 0xf & (uint32_t)env->vfp.zcr_el[3]); | |
29 | if (size > 3 || (size == 3 && !is_q)) { | ||
30 | unallocated_encoding(s); | ||
31 | @@ -XXX,XX +XXX,XX @@ static void handle_simd_dupe(DisasContext *s, int is_q, int rd, int rn, | ||
32 | return; | ||
33 | } | 51 | } |
34 | 52 | ||
35 | + index = imm5 >> (size + 1); | 53 | - return sve_zcr_get_valid_len(cpu, zcr_len); |
36 | tcg_gen_gvec_dup_mem(size, vec_full_reg_offset(s, rd), | 54 | + return aarch64_sve_zcr_get_valid_len(cpu, zcr_len); |
37 | vec_reg_offset(s, rn, index, size), | 55 | } |
38 | is_q ? 16 : 8, vec_full_reg_size(s)); | 56 | |
57 | static void zcr_write(CPUARMState *env, const ARMCPRegInfo *ri, | ||
39 | -- | 58 | -- |
40 | 2.20.1 | 59 | 2.20.1 |
41 | 60 | ||
42 | 61 | diff view generated by jsdifflib |
1 | From: Richard Henderson <richard.henderson@linaro.org> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Coverity raised a shed-load of errors cascading from inferring | 3 | Mirror the behavour of /proc/sys/abi/sve_default_vector_length |
4 | that clz32(immh) might yield 32, from immh might be 0. | 4 | under the real linux kernel. We have no way of passing along |
5 | a real default across exec like the kernel can, but this is a | ||
6 | decent way of adjusting the startup vector length of a process. | ||
5 | 7 | ||
6 | While immh cannot be 0 from encoding, it is not obvious even to | 8 | Resolves: https://gitlab.com/qemu-project/qemu/-/issues/482 |
7 | a human how we've checked that: via the filtering provided by | ||
8 | data_proc_simd[]. | ||
9 | |||
10 | Reported-by: Coverity (CID 1421923, and more) | ||
11 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | 9 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
12 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
13 | Message-id: 20200320160622.8040-3-richard.henderson@linaro.org | ||
14 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 10 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
11 | Message-id: 20210723203344.968563-4-richard.henderson@linaro.org | ||
12 | [PMM: tweaked docs formatting, document -1 special-case, | ||
13 | added fixup patch from RTH mentioning QEMU's maximum veclen.] | ||
15 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
16 | --- | 15 | --- |
17 | target/arm/translate-a64.c | 3 +++ | 16 | docs/system/arm/cpu-features.rst | 15 ++++++++ |
18 | 1 file changed, 3 insertions(+) | 17 | target/arm/cpu.h | 5 +++ |
18 | target/arm/cpu.c | 14 ++++++-- | ||
19 | target/arm/cpu64.c | 60 ++++++++++++++++++++++++++++++++ | ||
20 | 4 files changed, 92 insertions(+), 2 deletions(-) | ||
19 | 21 | ||
20 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c | 22 | diff --git a/docs/system/arm/cpu-features.rst b/docs/system/arm/cpu-features.rst |
21 | index XXXXXXX..XXXXXXX 100644 | 23 | index XXXXXXX..XXXXXXX 100644 |
22 | --- a/target/arm/translate-a64.c | 24 | --- a/docs/system/arm/cpu-features.rst |
23 | +++ b/target/arm/translate-a64.c | 25 | +++ b/docs/system/arm/cpu-features.rst |
24 | @@ -XXX,XX +XXX,XX @@ static void disas_simd_shift_imm(DisasContext *s, uint32_t insn) | 26 | @@ -XXX,XX +XXX,XX @@ verbose command lines. However, the recommended way to select vector |
25 | bool is_u = extract32(insn, 29, 1); | 27 | lengths is to explicitly enable each desired length. Therefore only |
26 | bool is_q = extract32(insn, 30, 1); | 28 | example's (1), (4), and (6) exhibit recommended uses of the properties. |
27 | 29 | ||
28 | + /* data_proc_simd[] has sent immh == 0 to disas_simd_mod_imm. */ | 30 | +SVE User-mode Default Vector Length Property |
29 | + assert(immh != 0); | 31 | +-------------------------------------------- |
30 | + | 32 | + |
31 | switch (opcode) { | 33 | +For qemu-aarch64, the cpu property ``sve-default-vector-length=N`` is |
32 | case 0x08: /* SRI */ | 34 | +defined to mirror the Linux kernel parameter file |
33 | if (!is_u) { | 35 | +``/proc/sys/abi/sve_default_vector_length``. The default length, ``N``, |
36 | +is in units of bytes and must be between 16 and 8192. | ||
37 | +If not specified, the default vector length is 64. | ||
38 | + | ||
39 | +If the default length is larger than the maximum vector length enabled, | ||
40 | +the actual vector length will be reduced. Note that the maximum vector | ||
41 | +length supported by QEMU is 256. | ||
42 | + | ||
43 | +If this property is set to ``-1`` then the default vector length | ||
44 | +is set to the maximum possible length. | ||
45 | diff --git a/target/arm/cpu.h b/target/arm/cpu.h | ||
46 | index XXXXXXX..XXXXXXX 100644 | ||
47 | --- a/target/arm/cpu.h | ||
48 | +++ b/target/arm/cpu.h | ||
49 | @@ -XXX,XX +XXX,XX @@ struct ARMCPU { | ||
50 | /* Used to set the maximum vector length the cpu will support. */ | ||
51 | uint32_t sve_max_vq; | ||
52 | |||
53 | +#ifdef CONFIG_USER_ONLY | ||
54 | + /* Used to set the default vector length at process start. */ | ||
55 | + uint32_t sve_default_vq; | ||
56 | +#endif | ||
57 | + | ||
58 | /* | ||
59 | * In sve_vq_map each set bit is a supported vector length of | ||
60 | * (bit-number + 1) * 16 bytes, i.e. each bit number + 1 is the vector | ||
61 | diff --git a/target/arm/cpu.c b/target/arm/cpu.c | ||
62 | index XXXXXXX..XXXXXXX 100644 | ||
63 | --- a/target/arm/cpu.c | ||
64 | +++ b/target/arm/cpu.c | ||
65 | @@ -XXX,XX +XXX,XX @@ static void arm_cpu_reset(DeviceState *dev) | ||
66 | env->cp15.cpacr_el1 = deposit64(env->cp15.cpacr_el1, 16, 2, 3); | ||
67 | /* with reasonable vector length */ | ||
68 | if (cpu_isar_feature(aa64_sve, cpu)) { | ||
69 | - env->vfp.zcr_el[1] = MIN(cpu->sve_max_vq - 1, 3); | ||
70 | + env->vfp.zcr_el[1] = | ||
71 | + aarch64_sve_zcr_get_valid_len(cpu, cpu->sve_default_vq - 1); | ||
72 | } | ||
73 | /* | ||
74 | * Enable TBI0 but not TBI1. | ||
75 | @@ -XXX,XX +XXX,XX @@ static void arm_cpu_initfn(Object *obj) | ||
76 | QLIST_INIT(&cpu->pre_el_change_hooks); | ||
77 | QLIST_INIT(&cpu->el_change_hooks); | ||
78 | |||
79 | -#ifndef CONFIG_USER_ONLY | ||
80 | +#ifdef CONFIG_USER_ONLY | ||
81 | +# ifdef TARGET_AARCH64 | ||
82 | + /* | ||
83 | + * The linux kernel defaults to 512-bit vectors, when sve is supported. | ||
84 | + * See documentation for /proc/sys/abi/sve_default_vector_length, and | ||
85 | + * our corresponding sve-default-vector-length cpu property. | ||
86 | + */ | ||
87 | + cpu->sve_default_vq = 4; | ||
88 | +# endif | ||
89 | +#else | ||
90 | /* Our inbound IRQ and FIQ lines */ | ||
91 | if (kvm_enabled()) { | ||
92 | /* VIRQ and VFIQ are unused with KVM but we add them to maintain | ||
93 | diff --git a/target/arm/cpu64.c b/target/arm/cpu64.c | ||
94 | index XXXXXXX..XXXXXXX 100644 | ||
95 | --- a/target/arm/cpu64.c | ||
96 | +++ b/target/arm/cpu64.c | ||
97 | @@ -XXX,XX +XXX,XX @@ static void cpu_arm_set_sve(Object *obj, bool value, Error **errp) | ||
98 | cpu->isar.id_aa64pfr0 = t; | ||
99 | } | ||
100 | |||
101 | +#ifdef CONFIG_USER_ONLY | ||
102 | +/* Mirror linux /proc/sys/abi/sve_default_vector_length. */ | ||
103 | +static void cpu_arm_set_sve_default_vec_len(Object *obj, Visitor *v, | ||
104 | + const char *name, void *opaque, | ||
105 | + Error **errp) | ||
106 | +{ | ||
107 | + ARMCPU *cpu = ARM_CPU(obj); | ||
108 | + int32_t default_len, default_vq, remainder; | ||
109 | + | ||
110 | + if (!visit_type_int32(v, name, &default_len, errp)) { | ||
111 | + return; | ||
112 | + } | ||
113 | + | ||
114 | + /* Undocumented, but the kernel allows -1 to indicate "maximum". */ | ||
115 | + if (default_len == -1) { | ||
116 | + cpu->sve_default_vq = ARM_MAX_VQ; | ||
117 | + return; | ||
118 | + } | ||
119 | + | ||
120 | + default_vq = default_len / 16; | ||
121 | + remainder = default_len % 16; | ||
122 | + | ||
123 | + /* | ||
124 | + * Note that the 512 max comes from include/uapi/asm/sve_context.h | ||
125 | + * and is the maximum architectural width of ZCR_ELx.LEN. | ||
126 | + */ | ||
127 | + if (remainder || default_vq < 1 || default_vq > 512) { | ||
128 | + error_setg(errp, "cannot set sve-default-vector-length"); | ||
129 | + if (remainder) { | ||
130 | + error_append_hint(errp, "Vector length not a multiple of 16\n"); | ||
131 | + } else if (default_vq < 1) { | ||
132 | + error_append_hint(errp, "Vector length smaller than 16\n"); | ||
133 | + } else { | ||
134 | + error_append_hint(errp, "Vector length larger than %d\n", | ||
135 | + 512 * 16); | ||
136 | + } | ||
137 | + return; | ||
138 | + } | ||
139 | + | ||
140 | + cpu->sve_default_vq = default_vq; | ||
141 | +} | ||
142 | + | ||
143 | +static void cpu_arm_get_sve_default_vec_len(Object *obj, Visitor *v, | ||
144 | + const char *name, void *opaque, | ||
145 | + Error **errp) | ||
146 | +{ | ||
147 | + ARMCPU *cpu = ARM_CPU(obj); | ||
148 | + int32_t value = cpu->sve_default_vq * 16; | ||
149 | + | ||
150 | + visit_type_int32(v, name, &value, errp); | ||
151 | +} | ||
152 | +#endif | ||
153 | + | ||
154 | void aarch64_add_sve_properties(Object *obj) | ||
155 | { | ||
156 | uint32_t vq; | ||
157 | @@ -XXX,XX +XXX,XX @@ void aarch64_add_sve_properties(Object *obj) | ||
158 | object_property_add(obj, name, "bool", cpu_arm_get_sve_vq, | ||
159 | cpu_arm_set_sve_vq, NULL, NULL); | ||
160 | } | ||
161 | + | ||
162 | +#ifdef CONFIG_USER_ONLY | ||
163 | + /* Mirror linux /proc/sys/abi/sve_default_vector_length. */ | ||
164 | + object_property_add(obj, "sve-default-vector-length", "int32", | ||
165 | + cpu_arm_get_sve_default_vec_len, | ||
166 | + cpu_arm_set_sve_default_vec_len, NULL, NULL); | ||
167 | +#endif | ||
168 | } | ||
169 | |||
170 | void arm_cpu_pauth_finalize(ARMCPU *cpu, Error **errp) | ||
34 | -- | 171 | -- |
35 | 2.20.1 | 172 | 2.20.1 |
36 | 173 | ||
37 | 174 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
1 | 2 | ||
3 | Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
4 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
5 | Message-id: 20210726150953.1218690-1-f4bug@amsat.org | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | --- | ||
8 | hw/arm/nseries.c | 2 +- | ||
9 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
10 | |||
11 | diff --git a/hw/arm/nseries.c b/hw/arm/nseries.c | ||
12 | index XXXXXXX..XXXXXXX 100644 | ||
13 | --- a/hw/arm/nseries.c | ||
14 | +++ b/hw/arm/nseries.c | ||
15 | @@ -XXX,XX +XXX,XX @@ static uint32_t mipid_txrx(void *opaque, uint32_t cmd, int len) | ||
16 | default: | ||
17 | bad_cmd: | ||
18 | qemu_log_mask(LOG_GUEST_ERROR, | ||
19 | - "%s: unknown command %02x\n", __func__, s->cmd); | ||
20 | + "%s: unknown command 0x%02x\n", __func__, s->cmd); | ||
21 | break; | ||
22 | } | ||
23 | |||
24 | -- | ||
25 | 2.20.1 | ||
26 | |||
27 | diff view generated by jsdifflib |
1 | From: Cédric Le Goater <clg@kaod.org> | 1 | From: Joel Stanley <joel@jms.id.au> |
---|---|---|---|
2 | 2 | ||
3 | Recent firmwares uses SPI DMA transfers in U-Boot to load the | 3 | The macro used to calculate the maximum memory size of the MMIO region |
4 | different images (kernel, initrd, dtb) in the SoC DRAM. The AST2600 | 4 | had a mistake, causing all GPIO models to create a mapping of 0x9D8. |
5 | FMC model is missing the masks to be applied on the DMA registers | 5 | The intent was to have it be 0x9D8 - 0x800. |
6 | which resulted in incorrect values. Fix that and wire the SPI | ||
7 | controllers which have DMA support on the AST2600. | ||
8 | 6 | ||
9 | Fixes: bcaa8ddd081c ("aspeed/smc: Add AST2600 support") | 7 | This extra size doesn't matter on ast2400 and ast2500, which have a 4KB |
10 | Signed-off-by: Cédric Le Goater <clg@kaod.org> | 8 | region set aside for the GPIO controller. |
11 | Reviewed-by: Joel Stanley <joel@jms.id.au> | 9 | |
12 | Message-id: 20200320053923.20565-1-clg@kaod.org | 10 | On the ast2600 the 3.3V and 1.8V GPIO controllers are 2KB apart, so the |
11 | regions would overlap. Worse was the 1.8V controller would map over the | ||
12 | top of the following peripheral, which happens to be the RTC. | ||
13 | |||
14 | The mmio region used by each device is a maximum of 2KB, so avoid the | ||
15 | calculations and hard code this as the maximum. | ||
16 | |||
17 | Fixes: 36d737ee82b2 ("hw/gpio: Add in AST2600 specific implementation") | ||
18 | Signed-off-by: Joel Stanley <joel@jms.id.au> | ||
19 | Reviewed-by: Rashmica Gupta <rashmica.g@gmail.com> | ||
20 | Reviewed-by: Cédric Le Goater <clg@kaod.org> | ||
21 | Message-id: 20210713065854.134634-2-joel@jms.id.au | ||
22 | [PMM: fix autocorrect error in commit message] | ||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 23 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
14 | --- | 24 | --- |
15 | hw/arm/aspeed_ast2600.c | 6 ++++++ | 25 | hw/gpio/aspeed_gpio.c | 3 +-- |
16 | hw/ssi/aspeed_smc.c | 15 +++++++++++++-- | 26 | 1 file changed, 1 insertion(+), 2 deletions(-) |
17 | hw/ssi/trace-events | 1 + | ||
18 | 3 files changed, 20 insertions(+), 2 deletions(-) | ||
19 | 27 | ||
20 | diff --git a/hw/arm/aspeed_ast2600.c b/hw/arm/aspeed_ast2600.c | 28 | diff --git a/hw/gpio/aspeed_gpio.c b/hw/gpio/aspeed_gpio.c |
21 | index XXXXXXX..XXXXXXX 100644 | 29 | index XXXXXXX..XXXXXXX 100644 |
22 | --- a/hw/arm/aspeed_ast2600.c | 30 | --- a/hw/gpio/aspeed_gpio.c |
23 | +++ b/hw/arm/aspeed_ast2600.c | 31 | +++ b/hw/gpio/aspeed_gpio.c |
24 | @@ -XXX,XX +XXX,XX @@ static void aspeed_soc_ast2600_realize(DeviceState *dev, Error **errp) | 32 | @@ -XXX,XX +XXX,XX @@ |
25 | 33 | #define GPIO_1_8V_MEM_SIZE 0x9D8 | |
26 | /* SPI */ | 34 | #define GPIO_1_8V_REG_ARRAY_SIZE ((GPIO_1_8V_MEM_SIZE - \ |
27 | for (i = 0; i < sc->spis_num; i++) { | 35 | GPIO_1_8V_REG_OFFSET) >> 2) |
28 | + object_property_set_link(OBJECT(&s->spi[i]), OBJECT(s->dram_mr), | 36 | -#define GPIO_MAX_MEM_SIZE MAX(GPIO_3_6V_MEM_SIZE, GPIO_1_8V_MEM_SIZE) |
29 | + "dram", &err); | 37 | |
30 | + if (err) { | 38 | static int aspeed_evaluate_irq(GPIOSets *regs, int gpio_prev_high, int gpio) |
31 | + error_propagate(errp, err); | 39 | { |
32 | + return; | 40 | @@ -XXX,XX +XXX,XX @@ static void aspeed_gpio_realize(DeviceState *dev, Error **errp) |
33 | + } | 41 | } |
34 | object_property_set_int(OBJECT(&s->spi[i]), 1, "num-cs", &err); | 42 | |
35 | object_property_set_bool(OBJECT(&s->spi[i]), true, "realized", | 43 | memory_region_init_io(&s->iomem, OBJECT(s), &aspeed_gpio_ops, s, |
36 | &local_err); | 44 | - TYPE_ASPEED_GPIO, GPIO_MAX_MEM_SIZE); |
37 | diff --git a/hw/ssi/aspeed_smc.c b/hw/ssi/aspeed_smc.c | 45 | + TYPE_ASPEED_GPIO, 0x800); |
38 | index XXXXXXX..XXXXXXX 100644 | 46 | |
39 | --- a/hw/ssi/aspeed_smc.c | 47 | sysbus_init_mmio(sbd, &s->iomem); |
40 | +++ b/hw/ssi/aspeed_smc.c | 48 | } |
41 | @@ -XXX,XX +XXX,XX @@ static const AspeedSMCController controllers[] = { | ||
42 | .flash_window_base = ASPEED26_SOC_FMC_FLASH_BASE, | ||
43 | .flash_window_size = 0x10000000, | ||
44 | .has_dma = true, | ||
45 | + .dma_flash_mask = 0x0FFFFFFC, | ||
46 | + .dma_dram_mask = 0x3FFFFFFC, | ||
47 | .nregs = ASPEED_SMC_R_MAX, | ||
48 | .segment_to_reg = aspeed_2600_smc_segment_to_reg, | ||
49 | .reg_to_segment = aspeed_2600_smc_reg_to_segment, | ||
50 | @@ -XXX,XX +XXX,XX @@ static const AspeedSMCController controllers[] = { | ||
51 | .segments = aspeed_segments_ast2600_spi1, | ||
52 | .flash_window_base = ASPEED26_SOC_SPI_FLASH_BASE, | ||
53 | .flash_window_size = 0x10000000, | ||
54 | - .has_dma = false, | ||
55 | + .has_dma = true, | ||
56 | + .dma_flash_mask = 0x0FFFFFFC, | ||
57 | + .dma_dram_mask = 0x3FFFFFFC, | ||
58 | .nregs = ASPEED_SMC_R_MAX, | ||
59 | .segment_to_reg = aspeed_2600_smc_segment_to_reg, | ||
60 | .reg_to_segment = aspeed_2600_smc_reg_to_segment, | ||
61 | @@ -XXX,XX +XXX,XX @@ static const AspeedSMCController controllers[] = { | ||
62 | .segments = aspeed_segments_ast2600_spi2, | ||
63 | .flash_window_base = ASPEED26_SOC_SPI2_FLASH_BASE, | ||
64 | .flash_window_size = 0x10000000, | ||
65 | - .has_dma = false, | ||
66 | + .has_dma = true, | ||
67 | + .dma_flash_mask = 0x0FFFFFFC, | ||
68 | + .dma_dram_mask = 0x3FFFFFFC, | ||
69 | .nregs = ASPEED_SMC_R_MAX, | ||
70 | .segment_to_reg = aspeed_2600_smc_segment_to_reg, | ||
71 | .reg_to_segment = aspeed_2600_smc_reg_to_segment, | ||
72 | @@ -XXX,XX +XXX,XX @@ static void aspeed_smc_dma_rw(AspeedSMCState *s) | ||
73 | MemTxResult result; | ||
74 | uint32_t data; | ||
75 | |||
76 | + trace_aspeed_smc_dma_rw(s->regs[R_DMA_CTRL] & DMA_CTRL_WRITE ? | ||
77 | + "write" : "read", | ||
78 | + s->regs[R_DMA_FLASH_ADDR], | ||
79 | + s->regs[R_DMA_DRAM_ADDR], | ||
80 | + s->regs[R_DMA_LEN]); | ||
81 | while (s->regs[R_DMA_LEN]) { | ||
82 | if (s->regs[R_DMA_CTRL] & DMA_CTRL_WRITE) { | ||
83 | data = address_space_ldl_le(&s->dram_as, s->regs[R_DMA_DRAM_ADDR], | ||
84 | diff --git a/hw/ssi/trace-events b/hw/ssi/trace-events | ||
85 | index XXXXXXX..XXXXXXX 100644 | ||
86 | --- a/hw/ssi/trace-events | ||
87 | +++ b/hw/ssi/trace-events | ||
88 | @@ -XXX,XX +XXX,XX @@ aspeed_smc_do_snoop(int cs, int index, int dummies, int data) "CS%d index:0x%x d | ||
89 | aspeed_smc_flash_write(int cs, uint64_t addr, uint32_t size, uint64_t data, int mode) "CS%d @0x%" PRIx64 " size %u: 0x%" PRIx64" mode:%d" | ||
90 | aspeed_smc_read(uint64_t addr, uint32_t size, uint64_t data) "@0x%" PRIx64 " size %u: 0x%" PRIx64 | ||
91 | aspeed_smc_dma_checksum(uint32_t addr, uint32_t data) "0x%08x: 0x%08x" | ||
92 | +aspeed_smc_dma_rw(const char *dir, uint32_t flash_addr, uint32_t dram_addr, uint32_t size) "%s flash:@0x%08x dram:@0x%08x size:0x%08x" | ||
93 | aspeed_smc_write(uint64_t addr, uint32_t size, uint64_t data) "@0x%" PRIx64 " size %u: 0x%" PRIx64 | ||
94 | aspeed_smc_flash_select(int cs, const char *prefix) "CS%d %sselect" | ||
95 | -- | 49 | -- |
96 | 2.20.1 | 50 | 2.20.1 |
97 | 51 | ||
98 | 52 | diff view generated by jsdifflib |