1 | Arm queue; bugfixes only. | 1 | v2 changes: dropped the patch that enables the new 'notcg' CI test: |
---|---|---|---|
2 | it doesn't pass on our aarch64 runner because the CI runner doesn't | ||
3 | have access to /dev/kvm. | ||
2 | 4 | ||
3 | thanks | 5 | thanks |
4 | -- PMM | 6 | -- PMM |
5 | 7 | ||
6 | The following changes since commit 48aa8f0ac536db3550a35c295ff7de94e4c33739: | 8 | The following changes since commit 7c18f2d663521f1b31b821a13358ce38075eaf7d: |
7 | 9 | ||
8 | Merge remote-tracking branch 'remotes/ericb/tags/pull-nbd-2020-11-16' into staging (2020-11-17 11:07:00 +0000) | 10 | Merge tag 'for-upstream' of https://gitlab.com/bonzini/qemu into staging (2023-04-29 23:07:17 +0100) |
9 | 11 | ||
10 | are available in the Git repository at: | 12 | are available in the Git repository at: |
11 | 13 | ||
12 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20201117 | 14 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20230502-2 |
13 | 15 | ||
14 | for you to fetch changes up to ab135622cf478585bdfcb68b85e4a817d74a0c42: | 16 | for you to fetch changes up to a4ae17e5ec512862bf73e40dfbb1e7db71f2c1e7: |
15 | 17 | ||
16 | tmp105: Correct handling of temperature limit checks (2020-11-17 12:56:33 +0000) | 18 | hw/net/allwinner-sun8i-emac: Correctly byteswap descriptor fields (2023-05-02 15:47:41 +0100) |
17 | 19 | ||
18 | ---------------------------------------------------------------- | 20 | ---------------------------------------------------------------- |
19 | target-arm queue: | 21 | target-arm queue: |
20 | * hw/arm/virt: ARM_VIRT must select ARM_GIC | 22 | * Support building Arm targets with CONFIG_TCG=no (ie KVM only) |
21 | * exynos: Fix bad printf format specifiers | 23 | * hw/net: npcm7xx_emc: set MAC in register space |
22 | * hw/input/ps2.c: Remove remnants of printf debug | 24 | * hw/arm/bcm2835_property: Implement "get command line" message |
23 | * target/openrisc: Remove dead code attempting to check "is timer disabled" | 25 | * Deprecate the '-singlestep' command line option in favour of |
24 | * register: Remove unnecessary NULL check | 26 | '-one-insn-per-tb' and '-accel one-insn-per-tb=on' |
25 | * util/cutils: Fix Coverity array overrun in freq_to_str() | 27 | * Deprecate 'singlestep' member of QMP StatusInfo struct |
26 | * configure: Make "does libgio work" test pull in some actual functions | 28 | * docs/about/deprecated.rst: Add "since 7.1" tag to dtb-kaslr-seed deprecation |
27 | * tmp105: reset the T_low and T_High registers | 29 | * hw/net/msf2-emac: Don't modify descriptor in-place in emac_store_desc() |
28 | * tmp105: Correct handling of temperature limit checks | 30 | * raspi, aspeed: Write bootloader code correctly on big-endian hosts |
31 | * hw/intc/allwinner-a10-pic: Fix bug on big-endian hosts | ||
32 | * Fix bug in A32 ERET on big-endian hosts that caused guest crash | ||
33 | * hw/sd/allwinner-sdhost: Correctly byteswap descriptor fields | ||
34 | * hw/net/allwinner-sun8i-emac: Correctly byteswap descriptor fields | ||
29 | 35 | ||
30 | ---------------------------------------------------------------- | 36 | ---------------------------------------------------------------- |
31 | Alex Chen (1): | 37 | Claudio Fontana (1): |
32 | exynos: Fix bad printf format specifiers | 38 | target/arm: move cpu_tcg to tcg/cpu32.c |
33 | 39 | ||
34 | Alistair Francis (1): | 40 | Cédric Le Goater (2): |
35 | register: Remove unnecessary NULL check | 41 | hw/arm/boot: Make write_bootloader() public as arm_write_bootloader() |
42 | hw/arm/aspeed: Use arm_write_bootloader() to write the bootloader | ||
36 | 43 | ||
37 | Andrew Jones (1): | 44 | Daniel Bertalan (1): |
38 | hw/arm/virt: ARM_VIRT must select ARM_GIC | 45 | hw/arm/bcm2835_property: Implement "get command line" message |
39 | 46 | ||
40 | Peter Maydell (5): | 47 | Fabiano Rosas (11): |
41 | hw/input/ps2.c: Remove remnants of printf debug | 48 | target/arm: Move cortex sysregs into a separate file |
42 | target/openrisc: Remove dead code attempting to check "is timer disabled" | 49 | target/arm: Remove dead code from cpu_max_set_sve_max_vq |
43 | configure: Make "does libgio work" test pull in some actual functions | 50 | target/arm: Extract TCG -cpu max code into a function |
44 | hw/misc/tmp105: reset the T_low and T_High registers | 51 | target/arm: Do not expose all -cpu max features to qtests |
45 | tmp105: Correct handling of temperature limit checks | 52 | target/arm: Move 64-bit TCG CPUs into tcg/ |
53 | tests/qtest: Adjust and document query-cpu-model-expansion test for arm | ||
54 | tests/qtest: Fix tests when no KVM or TCG are present | ||
55 | tests/avocado: Pass parameters to migration test | ||
56 | arm/Kconfig: Always select SEMIHOSTING when TCG is present | ||
57 | arm/Kconfig: Do not build TCG-only boards on a KVM-only build | ||
58 | tests/qtest: Restrict tpm-tis-i2c-test to CONFIG_TCG | ||
46 | 59 | ||
47 | Philippe Mathieu-Daudé (1): | 60 | Patrick Venture (1): |
48 | util/cutils: Fix Coverity array overrun in freq_to_str() | 61 | hw/net: npcm7xx_emc: set MAC in register space |
49 | 62 | ||
50 | configure | 11 +++++-- | 63 | Peter Maydell (18): |
51 | hw/misc/tmp105.h | 7 +++++ | 64 | make one-insn-per-tb an accel option |
52 | hw/core/register.c | 4 --- | 65 | softmmu: Don't use 'singlestep' global in QMP and HMP commands |
53 | hw/input/ps2.c | 9 ------ | 66 | accel/tcg: Use one_insn_per_tb global instead of old singlestep global |
54 | hw/misc/tmp105.c | 73 ++++++++++++++++++++++++++++++++++++++------ | 67 | linux-user: Add '-one-insn-per-tb' option equivalent to '-singlestep' |
55 | hw/timer/exynos4210_mct.c | 4 +-- | 68 | bsd-user: Add '-one-insn-per-tb' option equivalent to '-singlestep' |
56 | hw/timer/exynos4210_pwm.c | 8 ++--- | 69 | Document that -singlestep command line option is deprecated |
57 | target/openrisc/sys_helper.c | 3 -- | 70 | accel/tcg: Report one-insn-per-tb in 'info jit', not 'info status' |
58 | util/cutils.c | 3 +- | 71 | hmp: Add 'one-insn-per-tb' command equivalent to 'singlestep' |
59 | hw/arm/Kconfig | 1 + | 72 | qapi/run-state.json: Fix missing newline at end of file |
60 | 10 files changed, 89 insertions(+), 34 deletions(-) | 73 | qmp: Deprecate 'singlestep' member of StatusInfo |
74 | docs/about/deprecated.rst: Add "since 7.1" tag to dtb-kaslr-seed deprecation | ||
75 | hw/net/msf2-emac: Don't modify descriptor in-place in emac_store_desc() | ||
76 | hw/arm/raspi: Use arm_write_bootloader() to write boot code | ||
77 | hw/intc/allwinner-a10-pic: Don't use set_bit()/clear_bit() | ||
78 | target/arm: Define and use new load_cpu_field_low32() | ||
79 | target/arm: Add compile time asserts to load/store_cpu_field macros | ||
80 | hw/sd/allwinner-sdhost: Correctly byteswap descriptor fields | ||
81 | hw/net/allwinner-sun8i-emac: Correctly byteswap descriptor fields | ||
61 | 82 | ||
83 | docs/about/deprecated.rst | 43 +- | ||
84 | docs/user/main.rst | 14 +- | ||
85 | configs/devices/aarch64-softmmu/default.mak | 4 - | ||
86 | configs/devices/arm-softmmu/default.mak | 39 -- | ||
87 | qapi/run-state.json | 16 +- | ||
88 | accel/tcg/internal.h | 2 + | ||
89 | include/exec/cpu-common.h | 2 - | ||
90 | include/hw/arm/boot.h | 49 ++ | ||
91 | include/hw/misc/bcm2835_property.h | 1 + | ||
92 | include/monitor/hmp.h | 2 +- | ||
93 | target/arm/cpregs.h | 6 + | ||
94 | target/arm/internals.h | 10 +- | ||
95 | target/arm/translate-a32.h | 24 +- | ||
96 | accel/tcg/cpu-exec.c | 2 +- | ||
97 | accel/tcg/monitor.c | 14 + | ||
98 | accel/tcg/tcg-all.c | 23 + | ||
99 | bsd-user/main.c | 14 +- | ||
100 | hw/arm/aspeed.c | 38 +- | ||
101 | hw/arm/bcm2835_peripherals.c | 2 + | ||
102 | hw/arm/bcm2836.c | 2 + | ||
103 | hw/arm/boot.c | 35 +- | ||
104 | hw/arm/raspi.c | 66 +-- | ||
105 | hw/arm/virt.c | 6 +- | ||
106 | hw/intc/allwinner-a10-pic.c | 7 +- | ||
107 | hw/misc/bcm2835_property.c | 13 +- | ||
108 | hw/net/allwinner-sun8i-emac.c | 22 +- | ||
109 | hw/net/msf2-emac.c | 16 +- | ||
110 | hw/net/npcm7xx_emc.c | 32 +- | ||
111 | hw/sd/allwinner-sdhost.c | 31 +- | ||
112 | linux-user/main.c | 18 +- | ||
113 | softmmu/globals.c | 1 - | ||
114 | softmmu/runstate-hmp-cmds.c | 25 +- | ||
115 | softmmu/runstate.c | 10 +- | ||
116 | softmmu/vl.c | 17 +- | ||
117 | target/arm/cortex-regs.c | 69 +++ | ||
118 | target/arm/cpu64.c | 702 +-------------------------- | ||
119 | target/arm/{cpu_tcg.c => tcg/cpu32.c} | 72 +-- | ||
120 | target/arm/tcg/cpu64.c | 723 ++++++++++++++++++++++++++++ | ||
121 | target/arm/tcg/translate.c | 4 +- | ||
122 | tests/qtest/arm-cpu-features.c | 20 +- | ||
123 | tests/qtest/bios-tables-test.c | 11 +- | ||
124 | tests/qtest/boot-serial-test.c | 5 + | ||
125 | tests/qtest/migration-test.c | 9 +- | ||
126 | tests/qtest/pxe-test.c | 8 +- | ||
127 | tests/qtest/test-hmp.c | 1 + | ||
128 | tests/qtest/vmgenid-test.c | 9 +- | ||
129 | hmp-commands.hx | 25 +- | ||
130 | hw/arm/Kconfig | 43 +- | ||
131 | qemu-options.hx | 12 +- | ||
132 | target/arm/Kconfig | 7 + | ||
133 | target/arm/meson.build | 2 +- | ||
134 | target/arm/tcg/meson.build | 2 + | ||
135 | tcg/tci/README | 2 +- | ||
136 | tests/avocado/migration.py | 83 +++- | ||
137 | tests/qtest/meson.build | 3 +- | ||
138 | 55 files changed, 1438 insertions(+), 980 deletions(-) | ||
139 | create mode 100644 target/arm/cortex-regs.c | ||
140 | rename target/arm/{cpu_tcg.c => tcg/cpu32.c} (93%) | ||
141 | create mode 100644 target/arm/tcg/cpu64.c | ||
142 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | From: Andrew Jones <drjones@redhat.com> | ||
2 | 1 | ||
3 | The removal of the selection of A15MPCORE from ARM_VIRT also | ||
4 | removed what A15MPCORE selects, ARM_GIC. We still need ARM_GIC. | ||
5 | |||
6 | Fixes: bec3c97e0cf9 ("hw/arm/virt: Remove dependency on Cortex-A15 MPCore peripherals") | ||
7 | Reported-by: Miroslav Rezanina <mrezanin@redhat.com> | ||
8 | Signed-off-by: Andrew Jones <drjones@redhat.com> | ||
9 | Reviewed-by: Miroslav Rezanina <mrezanin@redhat.com> | ||
10 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
11 | Message-id: 20201111143440.112763-1-drjones@redhat.com | ||
12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
13 | --- | ||
14 | hw/arm/Kconfig | 1 + | ||
15 | 1 file changed, 1 insertion(+) | ||
16 | |||
17 | diff --git a/hw/arm/Kconfig b/hw/arm/Kconfig | ||
18 | index XXXXXXX..XXXXXXX 100644 | ||
19 | --- a/hw/arm/Kconfig | ||
20 | +++ b/hw/arm/Kconfig | ||
21 | @@ -XXX,XX +XXX,XX @@ config ARM_VIRT | ||
22 | imply VFIO_PLATFORM | ||
23 | imply VFIO_XGMAC | ||
24 | imply TPM_TIS_SYSBUS | ||
25 | + select ARM_GIC | ||
26 | select ACPI | ||
27 | select ARM_SMMUV3 | ||
28 | select GPIO_KEY | ||
29 | -- | ||
30 | 2.20.1 | ||
31 | |||
32 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | From: Alex Chen <alex.chen@huawei.com> | ||
2 | 1 | ||
3 | We should use printf format specifier "%u" instead of "%d" for | ||
4 | argument of type "unsigned int". | ||
5 | |||
6 | Reported-by: Euler Robot <euler.robot@huawei.com> | ||
7 | Signed-off-by: Alex Chen <alex.chen@huawei.com> | ||
8 | Message-id: 20201111073651.72804-1-alex.chen@huawei.com | ||
9 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
11 | --- | ||
12 | hw/timer/exynos4210_mct.c | 4 ++-- | ||
13 | hw/timer/exynos4210_pwm.c | 8 ++++---- | ||
14 | 2 files changed, 6 insertions(+), 6 deletions(-) | ||
15 | |||
16 | diff --git a/hw/timer/exynos4210_mct.c b/hw/timer/exynos4210_mct.c | ||
17 | index XXXXXXX..XXXXXXX 100644 | ||
18 | --- a/hw/timer/exynos4210_mct.c | ||
19 | +++ b/hw/timer/exynos4210_mct.c | ||
20 | @@ -XXX,XX +XXX,XX @@ static void exynos4210_gcomp_raise_irq(void *opaque, uint32_t id) | ||
21 | /* If CSTAT is pending and IRQ is enabled */ | ||
22 | if ((s->reg.int_cstat & G_INT_CSTAT_COMP(id)) && | ||
23 | (s->reg.int_enb & G_INT_ENABLE(id))) { | ||
24 | - DPRINTF("gcmp timer[%d] IRQ\n", id); | ||
25 | + DPRINTF("gcmp timer[%u] IRQ\n", id); | ||
26 | qemu_irq_raise(s->irq[id]); | ||
27 | } | ||
28 | } | ||
29 | @@ -XXX,XX +XXX,XX @@ static void exynos4210_mct_update_freq(Exynos4210MCTState *s) | ||
30 | MCT_CFG_GET_DIVIDER(s->reg_mct_cfg)); | ||
31 | |||
32 | if (freq != s->freq) { | ||
33 | - DPRINTF("freq=%dHz\n", s->freq); | ||
34 | + DPRINTF("freq=%uHz\n", s->freq); | ||
35 | |||
36 | /* global timer */ | ||
37 | tx_ptimer_set_freq(s->g_timer.ptimer_frc, s->freq); | ||
38 | diff --git a/hw/timer/exynos4210_pwm.c b/hw/timer/exynos4210_pwm.c | ||
39 | index XXXXXXX..XXXXXXX 100644 | ||
40 | --- a/hw/timer/exynos4210_pwm.c | ||
41 | +++ b/hw/timer/exynos4210_pwm.c | ||
42 | @@ -XXX,XX +XXX,XX @@ static void exynos4210_pwm_update_freq(Exynos4210PWMState *s, uint32_t id) | ||
43 | |||
44 | if (freq != s->timer[id].freq) { | ||
45 | ptimer_set_freq(s->timer[id].ptimer, s->timer[id].freq); | ||
46 | - DPRINTF("freq=%dHz\n", s->timer[id].freq); | ||
47 | + DPRINTF("freq=%uHz\n", s->timer[id].freq); | ||
48 | } | ||
49 | } | ||
50 | |||
51 | @@ -XXX,XX +XXX,XX @@ static void exynos4210_pwm_tick(void *opaque) | ||
52 | uint32_t id = s->id; | ||
53 | bool cmp; | ||
54 | |||
55 | - DPRINTF("timer %d tick\n", id); | ||
56 | + DPRINTF("timer %u tick\n", id); | ||
57 | |||
58 | /* set irq status */ | ||
59 | p->reg_tint_cstat |= TINT_CSTAT_STATUS(id); | ||
60 | |||
61 | /* raise IRQ */ | ||
62 | if (p->reg_tint_cstat & TINT_CSTAT_ENABLE(id)) { | ||
63 | - DPRINTF("timer %d IRQ\n", id); | ||
64 | + DPRINTF("timer %u IRQ\n", id); | ||
65 | qemu_irq_raise(p->timer[id].irq); | ||
66 | } | ||
67 | |||
68 | @@ -XXX,XX +XXX,XX @@ static void exynos4210_pwm_tick(void *opaque) | ||
69 | } | ||
70 | |||
71 | if (cmp) { | ||
72 | - DPRINTF("auto reload timer %d count to %x\n", id, | ||
73 | + DPRINTF("auto reload timer %u count to %x\n", id, | ||
74 | p->timer[id].reg_tcntb); | ||
75 | ptimer_set_count(p->timer[id].ptimer, p->timer[id].reg_tcntb); | ||
76 | ptimer_run(p->timer[id].ptimer, 1); | ||
77 | -- | ||
78 | 2.20.1 | ||
79 | |||
80 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | In commit 5edab03d4040 we added tracepoints to the ps2 keyboard | ||
2 | and mouse emulation. However we didn't remove all the debug-by-printf | ||
3 | support. In fact there is only one printf() remaining, and it is | ||
4 | redundant with the trace_ps2_write_mouse() event next to it. | ||
5 | Remove the printf() and the now-unused DEBUG* macros. | ||
6 | 1 | ||
7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
8 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
9 | Reviewed-by: Stefano Garzarella <sgarzare@redhat.com> | ||
10 | Message-id: 20201101133258.4240-1-peter.maydell@linaro.org | ||
11 | --- | ||
12 | hw/input/ps2.c | 9 --------- | ||
13 | 1 file changed, 9 deletions(-) | ||
14 | |||
15 | diff --git a/hw/input/ps2.c b/hw/input/ps2.c | ||
16 | index XXXXXXX..XXXXXXX 100644 | ||
17 | --- a/hw/input/ps2.c | ||
18 | +++ b/hw/input/ps2.c | ||
19 | @@ -XXX,XX +XXX,XX @@ | ||
20 | |||
21 | #include "trace.h" | ||
22 | |||
23 | -/* debug PC keyboard */ | ||
24 | -//#define DEBUG_KBD | ||
25 | - | ||
26 | -/* debug PC keyboard : only mouse */ | ||
27 | -//#define DEBUG_MOUSE | ||
28 | - | ||
29 | /* Keyboard Commands */ | ||
30 | #define KBD_CMD_SET_LEDS 0xED /* Set keyboard leds */ | ||
31 | #define KBD_CMD_ECHO 0xEE | ||
32 | @@ -XXX,XX +XXX,XX @@ void ps2_write_mouse(void *opaque, int val) | ||
33 | PS2MouseState *s = (PS2MouseState *)opaque; | ||
34 | |||
35 | trace_ps2_write_mouse(opaque, val); | ||
36 | -#ifdef DEBUG_MOUSE | ||
37 | - printf("kbd: write mouse 0x%02x\n", val); | ||
38 | -#endif | ||
39 | switch(s->common.write_cmd) { | ||
40 | default: | ||
41 | case -1: | ||
42 | -- | ||
43 | 2.20.1 | ||
44 | |||
45 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | In the mtspr helper we attempt to check for "is the timer disabled" | ||
2 | with "if (env->ttmr & TIMER_NONE)". This is wrong because TIMER_NONE | ||
3 | is zero and the condition is always false (Coverity complains about | ||
4 | the dead code.) | ||
5 | 1 | ||
6 | The correct check would be to test whether the TTMR_M field in the | ||
7 | register is equal to TIMER_NONE instead. However, the | ||
8 | cpu_openrisc_timer_update() function checks whether the timer is | ||
9 | enabled (it looks at cpu->env.is_counting, which is set to 0 via | ||
10 | cpu_openrisc_count_stop() when the TTMR_M field is set to | ||
11 | TIMER_NONE), so there's no need to check for "timer disabled" in the | ||
12 | target/openrisc code. Instead, simply remove the dead code. | ||
13 | |||
14 | Fixes: Coverity CID 1005812 | ||
15 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
16 | Acked-by: Stafford Horne <shorne@gmail.com> | ||
17 | Message-id: 20201103114654.18540-1-peter.maydell@linaro.org | ||
18 | --- | ||
19 | target/openrisc/sys_helper.c | 3 --- | ||
20 | 1 file changed, 3 deletions(-) | ||
21 | |||
22 | diff --git a/target/openrisc/sys_helper.c b/target/openrisc/sys_helper.c | ||
23 | index XXXXXXX..XXXXXXX 100644 | ||
24 | --- a/target/openrisc/sys_helper.c | ||
25 | +++ b/target/openrisc/sys_helper.c | ||
26 | @@ -XXX,XX +XXX,XX @@ void HELPER(mtspr)(CPUOpenRISCState *env, target_ulong spr, target_ulong rb) | ||
27 | |||
28 | case TO_SPR(10, 1): /* TTCR */ | ||
29 | cpu_openrisc_count_set(cpu, rb); | ||
30 | - if (env->ttmr & TIMER_NONE) { | ||
31 | - return; | ||
32 | - } | ||
33 | cpu_openrisc_timer_update(cpu); | ||
34 | break; | ||
35 | #endif | ||
36 | -- | ||
37 | 2.20.1 | ||
38 | |||
39 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | From: Alistair Francis <alistair.francis@wdc.com> | ||
2 | 1 | ||
3 | This patch fixes CID 1432800 by removing an unnecessary check. | ||
4 | |||
5 | Signed-off-by: Alistair Francis <alistair.francis@wdc.com> | ||
6 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
8 | --- | ||
9 | hw/core/register.c | 4 ---- | ||
10 | 1 file changed, 4 deletions(-) | ||
11 | |||
12 | diff --git a/hw/core/register.c b/hw/core/register.c | ||
13 | index XXXXXXX..XXXXXXX 100644 | ||
14 | --- a/hw/core/register.c | ||
15 | +++ b/hw/core/register.c | ||
16 | @@ -XXX,XX +XXX,XX @@ static RegisterInfoArray *register_init_block(DeviceState *owner, | ||
17 | int index = rae[i].addr / data_size; | ||
18 | RegisterInfo *r = &ri[index]; | ||
19 | |||
20 | - if (data + data_size * index == 0 || !&rae[i]) { | ||
21 | - continue; | ||
22 | - } | ||
23 | - | ||
24 | /* Init the register, this will zero it. */ | ||
25 | object_initialize((void *)r, sizeof(*r), TYPE_REGISTER); | ||
26 | |||
27 | -- | ||
28 | 2.20.1 | ||
29 | |||
30 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | From: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
2 | 1 | ||
3 | Fix Coverity CID 1435957: Memory - illegal accesses (OVERRUN): | ||
4 | |||
5 | >>> Overrunning array "suffixes" of 7 8-byte elements at element | ||
6 | index 7 (byte offset 63) using index "idx" (which evaluates to 7). | ||
7 | |||
8 | Note, the biggest input value freq_to_str() can accept is UINT64_MAX, | ||
9 | which is ~18.446 EHz, less than 1000 EHz. | ||
10 | |||
11 | Reported-by: Eduardo Habkost <ehabkost@redhat.com> | ||
12 | Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
13 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
14 | Reviewed-by: Eduardo Habkost <ehabkost@redhat.com> | ||
15 | Reviewed-by: Luc Michel <luc@lmichel.fr> | ||
16 | Message-id: 20201101215755.2021421-1-f4bug@amsat.org | ||
17 | Suggested-by: Peter Maydell <peter.maydell@linaro.org> | ||
18 | Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
19 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
20 | --- | ||
21 | util/cutils.c | 3 ++- | ||
22 | 1 file changed, 2 insertions(+), 1 deletion(-) | ||
23 | |||
24 | diff --git a/util/cutils.c b/util/cutils.c | ||
25 | index XXXXXXX..XXXXXXX 100644 | ||
26 | --- a/util/cutils.c | ||
27 | +++ b/util/cutils.c | ||
28 | @@ -XXX,XX +XXX,XX @@ char *freq_to_str(uint64_t freq_hz) | ||
29 | double freq = freq_hz; | ||
30 | size_t idx = 0; | ||
31 | |||
32 | - while (freq >= 1000.0 && idx < ARRAY_SIZE(suffixes)) { | ||
33 | + while (freq >= 1000.0) { | ||
34 | freq /= 1000.0; | ||
35 | idx++; | ||
36 | } | ||
37 | + assert(idx < ARRAY_SIZE(suffixes)); | ||
38 | |||
39 | return g_strdup_printf("%0.3g %sHz", freq, suffixes[idx]); | ||
40 | } | ||
41 | -- | ||
42 | 2.20.1 | ||
43 | |||
44 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | In commit 76346b6264a9b01979 we tried to add a configure check that | ||
2 | the libgio pkg-config data was correct, which builds an executable | ||
3 | linked against it. Unfortunately this doesn't catch the problem | ||
4 | (missing static library dependency info), because a "do nothing" test | ||
5 | source file doesn't have any symbol references that cause the linker | ||
6 | to pull in .o files from libgio.a, and so we don't see the "missing | ||
7 | symbols from libmount" error that a full QEMU link triggers. | ||
8 | 1 | ||
9 | (The ineffective test went unnoticed because of a typo that | ||
10 | effectively disabled libgio unconditionally, but after commit | ||
11 | 3569a5dfc11f2 fixed that, a static link of the system emulator on | ||
12 | Ubuntu stopped working again.) | ||
13 | |||
14 | Improve the gio test by having the test source fragment reference a | ||
15 | g_dbus function (which is what is indirectly causing us to end up | ||
16 | wanting functions from libmount). | ||
17 | |||
18 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
19 | Reviewed-by: Paolo Bonzini <pbonzini@redhat.com> | ||
20 | Message-id: 20201116104617.18333-1-peter.maydell@linaro.org | ||
21 | --- | ||
22 | configure | 11 +++++++++-- | ||
23 | 1 file changed, 9 insertions(+), 2 deletions(-) | ||
24 | |||
25 | diff --git a/configure b/configure | ||
26 | index XXXXXXX..XXXXXXX 100755 | ||
27 | --- a/configure | ||
28 | +++ b/configure | ||
29 | @@ -XXX,XX +XXX,XX @@ if $pkg_config --atleast-version=$glib_req_ver gio-2.0; then | ||
30 | # Check that the libraries actually work -- Ubuntu 18.04 ships | ||
31 | # with pkg-config --static --libs data for gio-2.0 that is missing | ||
32 | # -lblkid and will give a link error. | ||
33 | - write_c_skeleton | ||
34 | - if compile_prog "" "$gio_libs" ; then | ||
35 | + cat > $TMPC <<EOF | ||
36 | +#include <gio/gio.h> | ||
37 | +int main(void) | ||
38 | +{ | ||
39 | + g_dbus_proxy_new_sync(0, 0, 0, 0, 0, 0, 0, 0); | ||
40 | + return 0; | ||
41 | +} | ||
42 | +EOF | ||
43 | + if compile_prog "$gio_cflags" "$gio_libs" ; then | ||
44 | gio=yes | ||
45 | else | ||
46 | gio=no | ||
47 | -- | ||
48 | 2.20.1 | ||
49 | |||
50 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | The TMP105 datasheet (https://www.ti.com/lit/gpn/tmp105) says that the | ||
2 | power-up reset values for the T_low and T_high registers are 80 degrees C | ||
3 | and 75 degrees C, which are 0x500 and 0x4B0 hex according to table 5. These | ||
4 | values are then shifted right by four bits to give the register reset | ||
5 | values, since both registers store the 12 bits of temperature data in bits | ||
6 | [15..4] of a 16 bit register. | ||
7 | 1 | ||
8 | We were resetting these registers to zero, which is problematic for Linux | ||
9 | guests which enable the alert interrupt and then immediately take an | ||
10 | unexpected overtemperature alert because the current temperature is above | ||
11 | freezing... | ||
12 | |||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
14 | Reviewed-by: Cédric Le Goater <clg@kaod.org> | ||
15 | Message-id: 20201110150023.25533-2-peter.maydell@linaro.org | ||
16 | --- | ||
17 | hw/misc/tmp105.c | 3 +++ | ||
18 | 1 file changed, 3 insertions(+) | ||
19 | |||
20 | diff --git a/hw/misc/tmp105.c b/hw/misc/tmp105.c | ||
21 | index XXXXXXX..XXXXXXX 100644 | ||
22 | --- a/hw/misc/tmp105.c | ||
23 | +++ b/hw/misc/tmp105.c | ||
24 | @@ -XXX,XX +XXX,XX @@ static void tmp105_reset(I2CSlave *i2c) | ||
25 | s->faults = tmp105_faultq[(s->config >> 3) & 3]; | ||
26 | s->alarm = 0; | ||
27 | |||
28 | + s->limit[0] = 0x4b00; /* T_LOW, 75 degrees C */ | ||
29 | + s->limit[1] = 0x5000; /* T_HIGH, 80 degrees C */ | ||
30 | + | ||
31 | tmp105_interrupt_update(s); | ||
32 | } | ||
33 | |||
34 | -- | ||
35 | 2.20.1 | ||
36 | |||
37 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | The TMP105 datasheet says that in Interrupt Mode (when TM==1) the device | ||
2 | signals an alert when the temperature equals or exceeds the T_high value and | ||
3 | then remains high until a device register is read or the device responds to | ||
4 | the SMBUS Alert Response address, or the device is put into Shutdown Mode. | ||
5 | Thereafter the Alert pin will only be re-signalled when temperature falls | ||
6 | below T_low; alert can then be cleared in the same set of ways, and the | ||
7 | device returns to its initial "alert when temperature goes above T_high" | ||
8 | mode. (If this textual description is confusing, see figure 3 in the | ||
9 | TI datasheet at https://www.ti.com/lit/gpn/tmp105 .) | ||
10 | 1 | ||
11 | We were misimplementing this as a simple "always alert if temperature is | ||
12 | above T_high or below T_low" condition, which gives a spurious alert on | ||
13 | startup if using the "T_high = 80 degrees C, T_low = 75 degrees C" reset | ||
14 | limit values. | ||
15 | |||
16 | Implement the correct (hysteresis) behaviour by tracking whether we | ||
17 | are currently looking for the temperature to rise over T_high or | ||
18 | for it to fall below T_low. Our implementation of the comparator | ||
19 | mode (TM==0) wasn't wrong, but rephrase it to match the way that | ||
20 | interrupt mode is now handled for clarity. | ||
21 | |||
22 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
23 | Reviewed-by: Cédric Le Goater <clg@kaod.org> | ||
24 | Message-id: 20201110150023.25533-3-peter.maydell@linaro.org | ||
25 | --- | ||
26 | hw/misc/tmp105.h | 7 +++++ | ||
27 | hw/misc/tmp105.c | 70 +++++++++++++++++++++++++++++++++++++++++------- | ||
28 | 2 files changed, 68 insertions(+), 9 deletions(-) | ||
29 | |||
30 | diff --git a/hw/misc/tmp105.h b/hw/misc/tmp105.h | ||
31 | index XXXXXXX..XXXXXXX 100644 | ||
32 | --- a/hw/misc/tmp105.h | ||
33 | +++ b/hw/misc/tmp105.h | ||
34 | @@ -XXX,XX +XXX,XX @@ struct TMP105State { | ||
35 | int16_t limit[2]; | ||
36 | int faults; | ||
37 | uint8_t alarm; | ||
38 | + /* | ||
39 | + * The TMP105 initially looks for a temperature rising above T_high; | ||
40 | + * once this is detected, the condition it looks for next is the | ||
41 | + * temperature falling below T_low. This flag is false when initially | ||
42 | + * looking for T_high, true when looking for T_low. | ||
43 | + */ | ||
44 | + bool detect_falling; | ||
45 | }; | ||
46 | |||
47 | #endif | ||
48 | diff --git a/hw/misc/tmp105.c b/hw/misc/tmp105.c | ||
49 | index XXXXXXX..XXXXXXX 100644 | ||
50 | --- a/hw/misc/tmp105.c | ||
51 | +++ b/hw/misc/tmp105.c | ||
52 | @@ -XXX,XX +XXX,XX @@ static void tmp105_alarm_update(TMP105State *s) | ||
53 | return; | ||
54 | } | ||
55 | |||
56 | - if ((s->config >> 1) & 1) { /* TM */ | ||
57 | - if (s->temperature >= s->limit[1]) | ||
58 | - s->alarm = 1; | ||
59 | - else if (s->temperature < s->limit[0]) | ||
60 | - s->alarm = 1; | ||
61 | + if (s->config >> 1 & 1) { | ||
62 | + /* | ||
63 | + * TM == 1 : Interrupt mode. We signal Alert when the | ||
64 | + * temperature rises above T_high, and expect the guest to clear | ||
65 | + * it (eg by reading a device register). | ||
66 | + */ | ||
67 | + if (s->detect_falling) { | ||
68 | + if (s->temperature < s->limit[0]) { | ||
69 | + s->alarm = 1; | ||
70 | + s->detect_falling = false; | ||
71 | + } | ||
72 | + } else { | ||
73 | + if (s->temperature >= s->limit[1]) { | ||
74 | + s->alarm = 1; | ||
75 | + s->detect_falling = true; | ||
76 | + } | ||
77 | + } | ||
78 | } else { | ||
79 | - if (s->temperature >= s->limit[1]) | ||
80 | - s->alarm = 1; | ||
81 | - else if (s->temperature < s->limit[0]) | ||
82 | - s->alarm = 0; | ||
83 | + /* | ||
84 | + * TM == 0 : Comparator mode. We signal Alert when the temperature | ||
85 | + * rises above T_high, and stop signalling it when the temperature | ||
86 | + * falls below T_low. | ||
87 | + */ | ||
88 | + if (s->detect_falling) { | ||
89 | + if (s->temperature < s->limit[0]) { | ||
90 | + s->alarm = 0; | ||
91 | + s->detect_falling = false; | ||
92 | + } | ||
93 | + } else { | ||
94 | + if (s->temperature >= s->limit[1]) { | ||
95 | + s->alarm = 1; | ||
96 | + s->detect_falling = true; | ||
97 | + } | ||
98 | + } | ||
99 | } | ||
100 | |||
101 | tmp105_interrupt_update(s); | ||
102 | @@ -XXX,XX +XXX,XX @@ static int tmp105_post_load(void *opaque, int version_id) | ||
103 | return 0; | ||
104 | } | ||
105 | |||
106 | +static bool detect_falling_needed(void *opaque) | ||
107 | +{ | ||
108 | + TMP105State *s = opaque; | ||
109 | + | ||
110 | + /* | ||
111 | + * We only need to migrate the detect_falling bool if it's set; | ||
112 | + * for migration from older machines we assume that it is false | ||
113 | + * (ie temperature is not out of range). | ||
114 | + */ | ||
115 | + return s->detect_falling; | ||
116 | +} | ||
117 | + | ||
118 | +static const VMStateDescription vmstate_tmp105_detect_falling = { | ||
119 | + .name = "TMP105/detect-falling", | ||
120 | + .version_id = 1, | ||
121 | + .minimum_version_id = 1, | ||
122 | + .needed = detect_falling_needed, | ||
123 | + .fields = (VMStateField[]) { | ||
124 | + VMSTATE_BOOL(detect_falling, TMP105State), | ||
125 | + VMSTATE_END_OF_LIST() | ||
126 | + } | ||
127 | +}; | ||
128 | + | ||
129 | static const VMStateDescription vmstate_tmp105 = { | ||
130 | .name = "TMP105", | ||
131 | .version_id = 0, | ||
132 | @@ -XXX,XX +XXX,XX @@ static const VMStateDescription vmstate_tmp105 = { | ||
133 | VMSTATE_UINT8(alarm, TMP105State), | ||
134 | VMSTATE_I2C_SLAVE(i2c, TMP105State), | ||
135 | VMSTATE_END_OF_LIST() | ||
136 | + }, | ||
137 | + .subsections = (const VMStateDescription*[]) { | ||
138 | + &vmstate_tmp105_detect_falling, | ||
139 | + NULL | ||
140 | } | ||
141 | }; | ||
142 | |||
143 | @@ -XXX,XX +XXX,XX @@ static void tmp105_reset(I2CSlave *i2c) | ||
144 | s->config = 0; | ||
145 | s->faults = tmp105_faultq[(s->config >> 3) & 3]; | ||
146 | s->alarm = 0; | ||
147 | + s->detect_falling = false; | ||
148 | |||
149 | s->limit[0] = 0x4b00; /* T_LOW, 75 degrees C */ | ||
150 | s->limit[1] = 0x5000; /* T_HIGH, 80 degrees C */ | ||
151 | -- | ||
152 | 2.20.1 | ||
153 | |||
154 | diff view generated by jsdifflib |