1
A last lot of bug fixes before rc0...
1
This bug seemed worth fixing for 8.0 since we need an rc4 anyway:
2
we were using uninitialized data for the guarded bit when
3
combining stage 1 and stage 2 attrs.
2
4
3
thanks
5
thanks
4
-- PMM
6
-- PMM
5
7
6
The following changes since commit 0d0275c31f00b71b49eb80bbdca2cfe244cf80fb:
8
The following changes since commit 08dede07030973c1053868bc64de7e10bfa02ad6:
7
9
8
Merge tag 'net-pull-request' of https://github.com/jasowang/qemu into staging (2022-07-26 10:31:02 +0100)
10
Merge tag 'pull-ppc-20230409' of https://github.com/legoater/qemu into staging (2023-04-10 11:47:52 +0100)
9
11
10
are available in the Git repository at:
12
are available in the Git repository at:
11
13
12
https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20220726
14
https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20230410
13
15
14
for you to fetch changes up to 5865d99fe88d8c8fa437c18c6b63fb2a8165634f:
16
for you to fetch changes up to 8539dc00552e8ea60420856fc1262c8299bc6308:
15
17
16
hw/display/bcm2835_fb: Fix framebuffer allocation address (2022-07-26 14:09:44 +0100)
18
target/arm: Copy guarded bit in combine_cacheattrs (2023-04-10 14:31:40 +0100)
17
19
18
----------------------------------------------------------------
20
----------------------------------------------------------------
19
target-arm queue:
21
target-arm: Fix bug where we weren't initializing
20
* Update Coverity component definitions
22
guarded bit state when combining S1/S2 attrs
21
* target/arm: Add MO_128 entry to pred_esz_masks[]
22
* configure: Fix portability issues
23
* hw/display/bcm2835_fb: Fix framebuffer allocation address
24
23
25
----------------------------------------------------------------
24
----------------------------------------------------------------
26
Alan Jian (1):
25
Richard Henderson (2):
27
hw/display/bcm2835_fb: Fix framebuffer allocation address
26
target/arm: PTE bit GP only applies to stage1
27
target/arm: Copy guarded bit in combine_cacheattrs
28
28
29
Peter Maydell (8):
29
target/arm/ptw.c | 11 ++++++-----
30
scripts/coverity-scan/COMPONENTS.md: Add loongarch component
30
1 file changed, 6 insertions(+), 5 deletions(-)
31
scripts/coverity-scan/COMPONENTS.md: Update slirp component info
32
target/arm: Add MO_128 entry to pred_esz_masks[]
33
configure: Add missing POSIX-required space
34
configure: Add braces to clarify intent of $emu[[:space:]]
35
configure: Don't use bash-specific string-replacement syntax
36
configure: Drop dead code attempting to use -msmall-data on alpha hosts
37
configure: Avoid '==' bashism
38
39
configure | 20 +++++++-------------
40
target/arm/cpu.h | 2 +-
41
hw/display/bcm2835_fb.c | 3 +--
42
target/arm/translate-sve.c | 5 +++--
43
scripts/coverity-scan/COMPONENTS.md | 7 +++++--
44
5 files changed, 17 insertions(+), 20 deletions(-)
diff view generated by jsdifflib
Deleted patch
1
Add the component regex for the new loongarch target.
2
1
3
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
4
Acked-by: Paolo Bonzini <pbonzini@redhat.com>
5
Message-id: 20220718142310.16013-2-peter.maydell@linaro.org
6
---
7
scripts/coverity-scan/COMPONENTS.md | 3 +++
8
1 file changed, 3 insertions(+)
9
10
diff --git a/scripts/coverity-scan/COMPONENTS.md b/scripts/coverity-scan/COMPONENTS.md
11
index XXXXXXX..XXXXXXX 100644
12
--- a/scripts/coverity-scan/COMPONENTS.md
13
+++ b/scripts/coverity-scan/COMPONENTS.md
14
@@ -XXX,XX +XXX,XX @@ testlibs
15
16
tests
17
~ (/qemu)?(/tests/.*)
18
+
19
+loongarch
20
+ ~ (/qemu)?((/include)?/hw/(loongarch/.*|.*/loongarch.*)|/target/loongarch/.*)
21
--
22
2.25.1
diff view generated by jsdifflib
Deleted patch
1
Update the regex for the slirp component now that it lives
2
solely inside /slirp/, and note that it should be ignored in
3
Coverity analysis (because it's a separate upstream project
4
now, and they run Coverity on it themselves).
5
1
6
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
7
Acked-by: Paolo Bonzini <pbonzini@redhat.com>
8
Message-id: 20220718142310.16013-3-peter.maydell@linaro.org
9
---
10
scripts/coverity-scan/COMPONENTS.md | 4 ++--
11
1 file changed, 2 insertions(+), 2 deletions(-)
12
13
diff --git a/scripts/coverity-scan/COMPONENTS.md b/scripts/coverity-scan/COMPONENTS.md
14
index XXXXXXX..XXXXXXX 100644
15
--- a/scripts/coverity-scan/COMPONENTS.md
16
+++ b/scripts/coverity-scan/COMPONENTS.md
17
@@ -XXX,XX +XXX,XX @@ qemu-ga
18
scsi
19
~ (/qemu)?(/scsi/.*|/hw/scsi/.*|/include/hw/scsi/.*)
20
21
-slirp
22
- ~ (/qemu)?(/.*slirp.*)
23
+slirp (component should be ignored in analysis)
24
+ ~ (/qemu)?(/slirp/.*)
25
26
tcg
27
~ (/qemu)?(/accel/tcg/.*|/replay/.*|/(.*/)?softmmu.*)
28
--
29
2.25.1
diff view generated by jsdifflib
Deleted patch
1
In commit 7390e0e9ab8475, we added support for SME loads and stores.
2
Unlike SVE loads and stores, these include handling of 128-bit
3
elements. The SME load/store functions call down into the existing
4
sve_cont_ldst_elements() function, which uses the element size MO_*
5
value as an index into the pred_esz_masks[] array. Because this code
6
path now has to handle MO_128, we need to add an extra element to the
7
array.
8
1
9
This bug was spotted by Coverity because it meant we were reading off
10
the end of the array.
11
12
Resolves: Coverity CID 1490539, 1490541, 1490543, 1490544, 1490545,
13
1490546, 1490548, 1490549, 1490550, 1490551, 1490555, 1490557,
14
1490558, 1490560, 1490561, 1490563
15
Fixes: 7390e0e9ab8475 ("target/arm: Implement SME LD1, ST1")
16
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
17
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
18
Message-id: 20220718100144.3248052-1-peter.maydell@linaro.org
19
---
20
target/arm/cpu.h | 2 +-
21
target/arm/translate-sve.c | 5 +++--
22
2 files changed, 4 insertions(+), 3 deletions(-)
23
24
diff --git a/target/arm/cpu.h b/target/arm/cpu.h
25
index XXXXXXX..XXXXXXX 100644
26
--- a/target/arm/cpu.h
27
+++ b/target/arm/cpu.h
28
@@ -XXX,XX +XXX,XX @@ static inline uint64_t *aa64_vfp_qreg(CPUARMState *env, unsigned regno)
29
}
30
31
/* Shared between translate-sve.c and sve_helper.c. */
32
-extern const uint64_t pred_esz_masks[4];
33
+extern const uint64_t pred_esz_masks[5];
34
35
/* Helper for the macros below, validating the argument type. */
36
static inline MemTxAttrs *typecheck_memtxattrs(MemTxAttrs *x)
37
diff --git a/target/arm/translate-sve.c b/target/arm/translate-sve.c
38
index XXXXXXX..XXXXXXX 100644
39
--- a/target/arm/translate-sve.c
40
+++ b/target/arm/translate-sve.c
41
@@ -XXX,XX +XXX,XX @@ static void do_predtest(DisasContext *s, int dofs, int gofs, int words)
42
}
43
44
/* For each element size, the bits within a predicate word that are active. */
45
-const uint64_t pred_esz_masks[4] = {
46
+const uint64_t pred_esz_masks[5] = {
47
0xffffffffffffffffull, 0x5555555555555555ull,
48
- 0x1111111111111111ull, 0x0101010101010101ull
49
+ 0x1111111111111111ull, 0x0101010101010101ull,
50
+ 0x0001000100010001ull,
51
};
52
53
static bool trans_INVALID(DisasContext *s, arg_INVALID *a)
54
--
55
2.25.1
diff view generated by jsdifflib
Deleted patch
1
In commit 7d7dbf9dc15be6e1 we added a line to the configure script
2
which is not valid POSIX shell syntax, because it is missing a space
3
after a '!' character. shellcheck diagnoses this:
4
1
5
if !(GIT="$git" "$source_path/scripts/git-submodule.sh" "$git_submodules_action" "$git_submodules"); then
6
^-- SC1035: You are missing a required space after the !.
7
8
and the OpenBSD shell will not correctly handle this without the space.
9
10
Fixes: 7d7dbf9dc15be6e1 ("configure: replace --enable/disable-git-update with --with-git-submodules")
11
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
12
Reviewed-by: Thomas Huth <thuth@redhat.com>
13
Tested-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
14
Message-id: 20220720152631.450903-2-peter.maydell@linaro.org
15
---
16
configure | 2 +-
17
1 file changed, 1 insertion(+), 1 deletion(-)
18
19
diff --git a/configure b/configure
20
index XXXXXXX..XXXXXXX 100755
21
--- a/configure
22
+++ b/configure
23
@@ -XXX,XX +XXX,XX @@ else
24
cxx=
25
fi
26
27
-if !(GIT="$git" "$source_path/scripts/git-submodule.sh" "$git_submodules_action" "$git_submodules"); then
28
+if ! (GIT="$git" "$source_path/scripts/git-submodule.sh" "$git_submodules_action" "$git_submodules"); then
29
exit 1
30
fi
31
32
--
33
2.25.1
diff view generated by jsdifflib
Deleted patch
1
In shell script syntax, $var[something] is not special for variable
2
expansion: $var is expanded. However, as it can look as if it were
3
intended to be an array element access (the correct syntax for which
4
is ${var[something]}), shellcheck recommends using explicit braces
5
around ${var} to clarify the intended expansion.
6
1
7
This fixes the warning:
8
9
In ./configure line 2346:
10
if "$target_ld" -verbose 2>&1 | grep -q "^[[:space:]]*$emu[[:space:]]*$"; then
11
^-- SC1087: Use braces when expanding arrays, e.g. ${array[idx]} (or ${var}[.. to quiet).
12
13
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
14
Reviewed-by: Thomas Huth <thuth@redhat.com>
15
Message-id: 20220720152631.450903-3-peter.maydell@linaro.org
16
---
17
configure | 2 +-
18
1 file changed, 1 insertion(+), 1 deletion(-)
19
20
diff --git a/configure b/configure
21
index XXXXXXX..XXXXXXX 100755
22
--- a/configure
23
+++ b/configure
24
@@ -XXX,XX +XXX,XX @@ if test -n "$target_cc" &&
25
# emulation. Linux and OpenBSD/amd64 use 'elf_i386'; FreeBSD uses the _fbsd
26
# variant; OpenBSD/i386 uses the _obsd variant; and Windows uses i386pe.
27
for emu in elf_i386 elf_i386_fbsd elf_i386_obsd i386pe; do
28
- if "$target_ld" -verbose 2>&1 | grep -q "^[[:space:]]*$emu[[:space:]]*$"; then
29
+ if "$target_ld" -verbose 2>&1 | grep -q "^[[:space:]]*${emu}[[:space:]]*$"; then
30
ld_i386_emulation="$emu"
31
break
32
fi
33
--
34
2.25.1
diff view generated by jsdifflib
Deleted patch
1
The variable string-replacement syntax ${var/old/new} is a bashism
2
(though it is also supported by some other shells), and for instance
3
does not work with the NetBSD /bin/sh, which complains:
4
../src/configure: 687: Syntax error: Bad substitution
5
1
6
Replace it with a more portable sed-based approach, similar to
7
what we already do in quote_sh().
8
9
Note that shellcheck also diagnoses this:
10
11
In ./configure line 687:
12
e=${e/'\'/'\\'}
13
^-----------^ SC2039: In POSIX sh, string replacement is undefined.
14
^-- SC1003: Want to escape a single quote? echo 'This is how it'\''s done'.
15
^-- SC1003: Want to escape a single quote? echo 'This is how it'\''s done'.
16
17
In ./configure line 688:
18
e=${e/\"/'\"'}
19
^----------^ SC2039: In POSIX sh, string replacement is undefined.
20
21
Fixes: 8154f5e64b0cf ("meson: Prefix each element of firmware path")
22
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
23
Tested-by: Thomas Huth <thuth@redhat.com>
24
Message-id: 20220720152631.450903-4-peter.maydell@linaro.org
25
---
26
configure | 7 ++++---
27
1 file changed, 4 insertions(+), 3 deletions(-)
28
29
diff --git a/configure b/configure
30
index XXXXXXX..XXXXXXX 100755
31
--- a/configure
32
+++ b/configure
33
@@ -XXX,XX +XXX,XX @@ meson_option_build_array() {
34
IFS=:
35
fi
36
for e in $1; do
37
- e=${e/'\'/'\\'}
38
- e=${e/\"/'\"'}
39
- printf '"""%s""",' "$e"
40
+ printf '"""'
41
+ # backslash escape any '\' and '"' characters
42
+ printf "%s" "$e" | sed -e 's/\([\"]\)/\\\1/g'
43
+ printf '""",'
44
done)
45
printf ']\n'
46
}
47
--
48
2.25.1
diff view generated by jsdifflib
Deleted patch
1
In commit 823eb013452e93d we moved the setting of ARCH from configure
2
to meson.build, but we accidentally left behind one attempt to use
3
$ARCH in configure, which was trying to add -msmall-data to the
4
compiler flags on Alpha hosts. Since ARCH is now never set, the test
5
always fails and we never add the flag.
6
1
7
There isn't actually any need to use this compiler flag on Alpha:
8
the original intent was that it would allow us to simplify our TCG
9
codegen on that platform, but we never actually made the TCG changes
10
that would rely on -msmall-data.
11
12
Drop the effectively-dead code from configure, as we don't need it.
13
14
This was spotted by shellcheck:
15
16
In ./configure line 2254:
17
case "$ARCH" in
18
^---^ SC2153: Possible misspelling: ARCH may not be assigned, but arch is.
19
20
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
21
Reviewed-by: Thomas Huth <thuth@redhat.com>
22
Message-id: 20220720152631.450903-5-peter.maydell@linaro.org
23
---
24
configure | 7 -------
25
1 file changed, 7 deletions(-)
26
27
diff --git a/configure b/configure
28
index XXXXXXX..XXXXXXX 100755
29
--- a/configure
30
+++ b/configure
31
@@ -XXX,XX +XXX,XX @@ if test "$fortify_source" = "yes" ; then
32
QEMU_CFLAGS="-U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 $QEMU_CFLAGS"
33
fi
34
35
-case "$ARCH" in
36
-alpha)
37
- # Ensure there's only a single GP
38
- QEMU_CFLAGS="-msmall-data $QEMU_CFLAGS"
39
-;;
40
-esac
41
-
42
if test "$have_asan" = "yes"; then
43
QEMU_CFLAGS="-fsanitize=address $QEMU_CFLAGS"
44
QEMU_LDFLAGS="-fsanitize=address $QEMU_LDFLAGS"
45
--
46
2.25.1
diff view generated by jsdifflib
1
The '==' operator to test is a bashism; the standard way to copmare
1
From: Richard Henderson <richard.henderson@linaro.org>
2
strings is '='. This causes dash to complain:
3
2
4
../../configure: 681: test: linux: unexpected operator
3
Only perform the extract of GP during the stage1 walk.
5
4
5
Reported-by: Peter Maydell <peter.maydell@linaro.org>
6
Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
7
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
8
Message-id: 20230407185149.3253946-2-richard.henderson@linaro.org
6
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
9
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
7
Reviewed-by: Thomas Huth <thuth@redhat.com>
8
Message-id: 20220720152631.450903-6-peter.maydell@linaro.org
9
---
10
---
10
configure | 2 +-
11
target/arm/ptw.c | 10 +++++-----
11
1 file changed, 1 insertion(+), 1 deletion(-)
12
1 file changed, 5 insertions(+), 5 deletions(-)
12
13
13
diff --git a/configure b/configure
14
diff --git a/target/arm/ptw.c b/target/arm/ptw.c
14
index XXXXXXX..XXXXXXX 100755
15
index XXXXXXX..XXXXXXX 100644
15
--- a/configure
16
--- a/target/arm/ptw.c
16
+++ b/configure
17
+++ b/target/arm/ptw.c
17
@@ -XXX,XX +XXX,XX @@ werror=""
18
@@ -XXX,XX +XXX,XX @@ static bool get_phys_addr_lpae(CPUARMState *env, S1Translate *ptw,
18
19
result->f.attrs.secure = false;
19
meson_option_build_array() {
20
}
20
printf '['
21
21
- (if test "$targetos" == windows; then
22
- /* When in aarch64 mode, and BTI is enabled, remember GP in the TLB. */
22
+ (if test "$targetos" = windows; then
23
- if (aarch64 && cpu_isar_feature(aa64_bti, cpu)) {
23
IFS=\;
24
- result->f.guarded = extract64(attrs, 50, 1); /* GP */
24
else
25
- }
25
IFS=:
26
-
27
if (regime_is_stage2(mmu_idx)) {
28
result->cacheattrs.is_s2_format = true;
29
result->cacheattrs.attrs = extract32(attrs, 2, 4);
30
@@ -XXX,XX +XXX,XX @@ static bool get_phys_addr_lpae(CPUARMState *env, S1Translate *ptw,
31
assert(attrindx <= 7);
32
result->cacheattrs.is_s2_format = false;
33
result->cacheattrs.attrs = extract64(mair, attrindx * 8, 8);
34
+
35
+ /* When in aarch64 mode, and BTI is enabled, remember GP in the TLB. */
36
+ if (aarch64 && cpu_isar_feature(aa64_bti, cpu)) {
37
+ result->f.guarded = extract64(attrs, 50, 1); /* GP */
38
+ }
39
}
40
41
/*
26
--
42
--
27
2.25.1
43
2.34.1
diff view generated by jsdifflib
1
From: Alan Jian <alanjian85@gmail.com>
1
From: Richard Henderson <richard.henderson@linaro.org>
2
2
3
This patch fixes the dedicated framebuffer mailbox interface by
3
The guarded bit comes from the stage1 walk.
4
removing an unneeded offset. This means that we pick the framebuffer
5
address in the same way that we do if the guest code uses the buffer
6
allocate mechanism of the bcm2835_property interface (case
7
0x00040001: /* Allocate buffer */ in bcm2835_property.c).
8
4
9
The documentation of this mailbox interface doesn't say anything
5
Fixes: Coverity CID 1507929
10
about using parts of the request buffer address to affect the
6
Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
11
chosen framebuffer address:
12
https://github.com/raspberrypi/firmware/wiki/Mailbox-framebuffer-interface
13
14
Some baremetal applications like the Screen01/Screen02 examples from
15
Baking Pi tutorial[1] didn't work before this patch.
16
17
[1] https://www.cl.cam.ac.uk/projects/raspberrypi/tutorials/os/screen01.html
18
19
Signed-off-by: Alan Jian <alanjian85@outlook.com>
20
Message-id: 20220725145838.8412-1-alanjian85@outlook.com
21
[PMM: tweaked commit message]
22
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
7
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
8
Message-id: 20230407185149.3253946-3-richard.henderson@linaro.org
23
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
9
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
24
---
10
---
25
hw/display/bcm2835_fb.c | 3 +--
11
target/arm/ptw.c | 1 +
26
1 file changed, 1 insertion(+), 2 deletions(-)
12
1 file changed, 1 insertion(+)
27
13
28
diff --git a/hw/display/bcm2835_fb.c b/hw/display/bcm2835_fb.c
14
diff --git a/target/arm/ptw.c b/target/arm/ptw.c
29
index XXXXXXX..XXXXXXX 100644
15
index XXXXXXX..XXXXXXX 100644
30
--- a/hw/display/bcm2835_fb.c
16
--- a/target/arm/ptw.c
31
+++ b/hw/display/bcm2835_fb.c
17
+++ b/target/arm/ptw.c
32
@@ -XXX,XX +XXX,XX @@ static void bcm2835_fb_mbox_push(BCM2835FBState *s, uint32_t value)
18
@@ -XXX,XX +XXX,XX @@ static ARMCacheAttrs combine_cacheattrs(uint64_t hcr,
33
newconf.xoffset = ldl_le_phys(&s->dma_as, value + 24);
19
34
newconf.yoffset = ldl_le_phys(&s->dma_as, value + 28);
20
assert(!s1.is_s2_format);
35
21
ret.is_s2_format = false;
36
- newconf.base = s->vcram_base | (value & 0xc0000000);
22
+ ret.guarded = s1.guarded;
37
- newconf.base += BCM2835_FB_OFFSET;
23
38
+ newconf.base = s->vcram_base + BCM2835_FB_OFFSET;
24
if (s1.attrs == 0xf0) {
39
25
tagged = true;
40
/* Copy fields which we don't want to change from the existing config */
41
newconf.pixo = s->config.pixo;
42
--
26
--
43
2.25.1
27
2.34.1
diff view generated by jsdifflib