1 | A last lot of bug fixes before rc0... | 1 | This bug seemed worth fixing for 8.0 since we need an rc4 anyway: |
---|---|---|---|
2 | we were using uninitialized data for the guarded bit when | ||
3 | combining stage 1 and stage 2 attrs. | ||
2 | 4 | ||
3 | thanks | 5 | thanks |
4 | -- PMM | 6 | -- PMM |
5 | 7 | ||
6 | The following changes since commit 0d0275c31f00b71b49eb80bbdca2cfe244cf80fb: | 8 | The following changes since commit 08dede07030973c1053868bc64de7e10bfa02ad6: |
7 | 9 | ||
8 | Merge tag 'net-pull-request' of https://github.com/jasowang/qemu into staging (2022-07-26 10:31:02 +0100) | 10 | Merge tag 'pull-ppc-20230409' of https://github.com/legoater/qemu into staging (2023-04-10 11:47:52 +0100) |
9 | 11 | ||
10 | are available in the Git repository at: | 12 | are available in the Git repository at: |
11 | 13 | ||
12 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20220726 | 14 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20230410 |
13 | 15 | ||
14 | for you to fetch changes up to 5865d99fe88d8c8fa437c18c6b63fb2a8165634f: | 16 | for you to fetch changes up to 8539dc00552e8ea60420856fc1262c8299bc6308: |
15 | 17 | ||
16 | hw/display/bcm2835_fb: Fix framebuffer allocation address (2022-07-26 14:09:44 +0100) | 18 | target/arm: Copy guarded bit in combine_cacheattrs (2023-04-10 14:31:40 +0100) |
17 | 19 | ||
18 | ---------------------------------------------------------------- | 20 | ---------------------------------------------------------------- |
19 | target-arm queue: | 21 | target-arm: Fix bug where we weren't initializing |
20 | * Update Coverity component definitions | 22 | guarded bit state when combining S1/S2 attrs |
21 | * target/arm: Add MO_128 entry to pred_esz_masks[] | ||
22 | * configure: Fix portability issues | ||
23 | * hw/display/bcm2835_fb: Fix framebuffer allocation address | ||
24 | 23 | ||
25 | ---------------------------------------------------------------- | 24 | ---------------------------------------------------------------- |
26 | Alan Jian (1): | 25 | Richard Henderson (2): |
27 | hw/display/bcm2835_fb: Fix framebuffer allocation address | 26 | target/arm: PTE bit GP only applies to stage1 |
27 | target/arm: Copy guarded bit in combine_cacheattrs | ||
28 | 28 | ||
29 | Peter Maydell (8): | 29 | target/arm/ptw.c | 11 ++++++----- |
30 | scripts/coverity-scan/COMPONENTS.md: Add loongarch component | 30 | 1 file changed, 6 insertions(+), 5 deletions(-) |
31 | scripts/coverity-scan/COMPONENTS.md: Update slirp component info | ||
32 | target/arm: Add MO_128 entry to pred_esz_masks[] | ||
33 | configure: Add missing POSIX-required space | ||
34 | configure: Add braces to clarify intent of $emu[[:space:]] | ||
35 | configure: Don't use bash-specific string-replacement syntax | ||
36 | configure: Drop dead code attempting to use -msmall-data on alpha hosts | ||
37 | configure: Avoid '==' bashism | ||
38 | |||
39 | configure | 20 +++++++------------- | ||
40 | target/arm/cpu.h | 2 +- | ||
41 | hw/display/bcm2835_fb.c | 3 +-- | ||
42 | target/arm/translate-sve.c | 5 +++-- | ||
43 | scripts/coverity-scan/COMPONENTS.md | 7 +++++-- | ||
44 | 5 files changed, 17 insertions(+), 20 deletions(-) | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | Add the component regex for the new loongarch target. | ||
2 | 1 | ||
3 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
4 | Acked-by: Paolo Bonzini <pbonzini@redhat.com> | ||
5 | Message-id: 20220718142310.16013-2-peter.maydell@linaro.org | ||
6 | --- | ||
7 | scripts/coverity-scan/COMPONENTS.md | 3 +++ | ||
8 | 1 file changed, 3 insertions(+) | ||
9 | |||
10 | diff --git a/scripts/coverity-scan/COMPONENTS.md b/scripts/coverity-scan/COMPONENTS.md | ||
11 | index XXXXXXX..XXXXXXX 100644 | ||
12 | --- a/scripts/coverity-scan/COMPONENTS.md | ||
13 | +++ b/scripts/coverity-scan/COMPONENTS.md | ||
14 | @@ -XXX,XX +XXX,XX @@ testlibs | ||
15 | |||
16 | tests | ||
17 | ~ (/qemu)?(/tests/.*) | ||
18 | + | ||
19 | +loongarch | ||
20 | + ~ (/qemu)?((/include)?/hw/(loongarch/.*|.*/loongarch.*)|/target/loongarch/.*) | ||
21 | -- | ||
22 | 2.25.1 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | Update the regex for the slirp component now that it lives | ||
2 | solely inside /slirp/, and note that it should be ignored in | ||
3 | Coverity analysis (because it's a separate upstream project | ||
4 | now, and they run Coverity on it themselves). | ||
5 | 1 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | Acked-by: Paolo Bonzini <pbonzini@redhat.com> | ||
8 | Message-id: 20220718142310.16013-3-peter.maydell@linaro.org | ||
9 | --- | ||
10 | scripts/coverity-scan/COMPONENTS.md | 4 ++-- | ||
11 | 1 file changed, 2 insertions(+), 2 deletions(-) | ||
12 | |||
13 | diff --git a/scripts/coverity-scan/COMPONENTS.md b/scripts/coverity-scan/COMPONENTS.md | ||
14 | index XXXXXXX..XXXXXXX 100644 | ||
15 | --- a/scripts/coverity-scan/COMPONENTS.md | ||
16 | +++ b/scripts/coverity-scan/COMPONENTS.md | ||
17 | @@ -XXX,XX +XXX,XX @@ qemu-ga | ||
18 | scsi | ||
19 | ~ (/qemu)?(/scsi/.*|/hw/scsi/.*|/include/hw/scsi/.*) | ||
20 | |||
21 | -slirp | ||
22 | - ~ (/qemu)?(/.*slirp.*) | ||
23 | +slirp (component should be ignored in analysis) | ||
24 | + ~ (/qemu)?(/slirp/.*) | ||
25 | |||
26 | tcg | ||
27 | ~ (/qemu)?(/accel/tcg/.*|/replay/.*|/(.*/)?softmmu.*) | ||
28 | -- | ||
29 | 2.25.1 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | In commit 7390e0e9ab8475, we added support for SME loads and stores. | ||
2 | Unlike SVE loads and stores, these include handling of 128-bit | ||
3 | elements. The SME load/store functions call down into the existing | ||
4 | sve_cont_ldst_elements() function, which uses the element size MO_* | ||
5 | value as an index into the pred_esz_masks[] array. Because this code | ||
6 | path now has to handle MO_128, we need to add an extra element to the | ||
7 | array. | ||
8 | 1 | ||
9 | This bug was spotted by Coverity because it meant we were reading off | ||
10 | the end of the array. | ||
11 | |||
12 | Resolves: Coverity CID 1490539, 1490541, 1490543, 1490544, 1490545, | ||
13 | 1490546, 1490548, 1490549, 1490550, 1490551, 1490555, 1490557, | ||
14 | 1490558, 1490560, 1490561, 1490563 | ||
15 | Fixes: 7390e0e9ab8475 ("target/arm: Implement SME LD1, ST1") | ||
16 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
17 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
18 | Message-id: 20220718100144.3248052-1-peter.maydell@linaro.org | ||
19 | --- | ||
20 | target/arm/cpu.h | 2 +- | ||
21 | target/arm/translate-sve.c | 5 +++-- | ||
22 | 2 files changed, 4 insertions(+), 3 deletions(-) | ||
23 | |||
24 | diff --git a/target/arm/cpu.h b/target/arm/cpu.h | ||
25 | index XXXXXXX..XXXXXXX 100644 | ||
26 | --- a/target/arm/cpu.h | ||
27 | +++ b/target/arm/cpu.h | ||
28 | @@ -XXX,XX +XXX,XX @@ static inline uint64_t *aa64_vfp_qreg(CPUARMState *env, unsigned regno) | ||
29 | } | ||
30 | |||
31 | /* Shared between translate-sve.c and sve_helper.c. */ | ||
32 | -extern const uint64_t pred_esz_masks[4]; | ||
33 | +extern const uint64_t pred_esz_masks[5]; | ||
34 | |||
35 | /* Helper for the macros below, validating the argument type. */ | ||
36 | static inline MemTxAttrs *typecheck_memtxattrs(MemTxAttrs *x) | ||
37 | diff --git a/target/arm/translate-sve.c b/target/arm/translate-sve.c | ||
38 | index XXXXXXX..XXXXXXX 100644 | ||
39 | --- a/target/arm/translate-sve.c | ||
40 | +++ b/target/arm/translate-sve.c | ||
41 | @@ -XXX,XX +XXX,XX @@ static void do_predtest(DisasContext *s, int dofs, int gofs, int words) | ||
42 | } | ||
43 | |||
44 | /* For each element size, the bits within a predicate word that are active. */ | ||
45 | -const uint64_t pred_esz_masks[4] = { | ||
46 | +const uint64_t pred_esz_masks[5] = { | ||
47 | 0xffffffffffffffffull, 0x5555555555555555ull, | ||
48 | - 0x1111111111111111ull, 0x0101010101010101ull | ||
49 | + 0x1111111111111111ull, 0x0101010101010101ull, | ||
50 | + 0x0001000100010001ull, | ||
51 | }; | ||
52 | |||
53 | static bool trans_INVALID(DisasContext *s, arg_INVALID *a) | ||
54 | -- | ||
55 | 2.25.1 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | In commit 7d7dbf9dc15be6e1 we added a line to the configure script | ||
2 | which is not valid POSIX shell syntax, because it is missing a space | ||
3 | after a '!' character. shellcheck diagnoses this: | ||
4 | 1 | ||
5 | if !(GIT="$git" "$source_path/scripts/git-submodule.sh" "$git_submodules_action" "$git_submodules"); then | ||
6 | ^-- SC1035: You are missing a required space after the !. | ||
7 | |||
8 | and the OpenBSD shell will not correctly handle this without the space. | ||
9 | |||
10 | Fixes: 7d7dbf9dc15be6e1 ("configure: replace --enable/disable-git-update with --with-git-submodules") | ||
11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
12 | Reviewed-by: Thomas Huth <thuth@redhat.com> | ||
13 | Tested-by: Dr. David Alan Gilbert <dgilbert@redhat.com> | ||
14 | Message-id: 20220720152631.450903-2-peter.maydell@linaro.org | ||
15 | --- | ||
16 | configure | 2 +- | ||
17 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
18 | |||
19 | diff --git a/configure b/configure | ||
20 | index XXXXXXX..XXXXXXX 100755 | ||
21 | --- a/configure | ||
22 | +++ b/configure | ||
23 | @@ -XXX,XX +XXX,XX @@ else | ||
24 | cxx= | ||
25 | fi | ||
26 | |||
27 | -if !(GIT="$git" "$source_path/scripts/git-submodule.sh" "$git_submodules_action" "$git_submodules"); then | ||
28 | +if ! (GIT="$git" "$source_path/scripts/git-submodule.sh" "$git_submodules_action" "$git_submodules"); then | ||
29 | exit 1 | ||
30 | fi | ||
31 | |||
32 | -- | ||
33 | 2.25.1 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | In shell script syntax, $var[something] is not special for variable | ||
2 | expansion: $var is expanded. However, as it can look as if it were | ||
3 | intended to be an array element access (the correct syntax for which | ||
4 | is ${var[something]}), shellcheck recommends using explicit braces | ||
5 | around ${var} to clarify the intended expansion. | ||
6 | 1 | ||
7 | This fixes the warning: | ||
8 | |||
9 | In ./configure line 2346: | ||
10 | if "$target_ld" -verbose 2>&1 | grep -q "^[[:space:]]*$emu[[:space:]]*$"; then | ||
11 | ^-- SC1087: Use braces when expanding arrays, e.g. ${array[idx]} (or ${var}[.. to quiet). | ||
12 | |||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
14 | Reviewed-by: Thomas Huth <thuth@redhat.com> | ||
15 | Message-id: 20220720152631.450903-3-peter.maydell@linaro.org | ||
16 | --- | ||
17 | configure | 2 +- | ||
18 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
19 | |||
20 | diff --git a/configure b/configure | ||
21 | index XXXXXXX..XXXXXXX 100755 | ||
22 | --- a/configure | ||
23 | +++ b/configure | ||
24 | @@ -XXX,XX +XXX,XX @@ if test -n "$target_cc" && | ||
25 | # emulation. Linux and OpenBSD/amd64 use 'elf_i386'; FreeBSD uses the _fbsd | ||
26 | # variant; OpenBSD/i386 uses the _obsd variant; and Windows uses i386pe. | ||
27 | for emu in elf_i386 elf_i386_fbsd elf_i386_obsd i386pe; do | ||
28 | - if "$target_ld" -verbose 2>&1 | grep -q "^[[:space:]]*$emu[[:space:]]*$"; then | ||
29 | + if "$target_ld" -verbose 2>&1 | grep -q "^[[:space:]]*${emu}[[:space:]]*$"; then | ||
30 | ld_i386_emulation="$emu" | ||
31 | break | ||
32 | fi | ||
33 | -- | ||
34 | 2.25.1 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | The variable string-replacement syntax ${var/old/new} is a bashism | ||
2 | (though it is also supported by some other shells), and for instance | ||
3 | does not work with the NetBSD /bin/sh, which complains: | ||
4 | ../src/configure: 687: Syntax error: Bad substitution | ||
5 | 1 | ||
6 | Replace it with a more portable sed-based approach, similar to | ||
7 | what we already do in quote_sh(). | ||
8 | |||
9 | Note that shellcheck also diagnoses this: | ||
10 | |||
11 | In ./configure line 687: | ||
12 | e=${e/'\'/'\\'} | ||
13 | ^-----------^ SC2039: In POSIX sh, string replacement is undefined. | ||
14 | ^-- SC1003: Want to escape a single quote? echo 'This is how it'\''s done'. | ||
15 | ^-- SC1003: Want to escape a single quote? echo 'This is how it'\''s done'. | ||
16 | |||
17 | In ./configure line 688: | ||
18 | e=${e/\"/'\"'} | ||
19 | ^----------^ SC2039: In POSIX sh, string replacement is undefined. | ||
20 | |||
21 | Fixes: 8154f5e64b0cf ("meson: Prefix each element of firmware path") | ||
22 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
23 | Tested-by: Thomas Huth <thuth@redhat.com> | ||
24 | Message-id: 20220720152631.450903-4-peter.maydell@linaro.org | ||
25 | --- | ||
26 | configure | 7 ++++--- | ||
27 | 1 file changed, 4 insertions(+), 3 deletions(-) | ||
28 | |||
29 | diff --git a/configure b/configure | ||
30 | index XXXXXXX..XXXXXXX 100755 | ||
31 | --- a/configure | ||
32 | +++ b/configure | ||
33 | @@ -XXX,XX +XXX,XX @@ meson_option_build_array() { | ||
34 | IFS=: | ||
35 | fi | ||
36 | for e in $1; do | ||
37 | - e=${e/'\'/'\\'} | ||
38 | - e=${e/\"/'\"'} | ||
39 | - printf '"""%s""",' "$e" | ||
40 | + printf '"""' | ||
41 | + # backslash escape any '\' and '"' characters | ||
42 | + printf "%s" "$e" | sed -e 's/\([\"]\)/\\\1/g' | ||
43 | + printf '""",' | ||
44 | done) | ||
45 | printf ']\n' | ||
46 | } | ||
47 | -- | ||
48 | 2.25.1 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | In commit 823eb013452e93d we moved the setting of ARCH from configure | ||
2 | to meson.build, but we accidentally left behind one attempt to use | ||
3 | $ARCH in configure, which was trying to add -msmall-data to the | ||
4 | compiler flags on Alpha hosts. Since ARCH is now never set, the test | ||
5 | always fails and we never add the flag. | ||
6 | 1 | ||
7 | There isn't actually any need to use this compiler flag on Alpha: | ||
8 | the original intent was that it would allow us to simplify our TCG | ||
9 | codegen on that platform, but we never actually made the TCG changes | ||
10 | that would rely on -msmall-data. | ||
11 | |||
12 | Drop the effectively-dead code from configure, as we don't need it. | ||
13 | |||
14 | This was spotted by shellcheck: | ||
15 | |||
16 | In ./configure line 2254: | ||
17 | case "$ARCH" in | ||
18 | ^---^ SC2153: Possible misspelling: ARCH may not be assigned, but arch is. | ||
19 | |||
20 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
21 | Reviewed-by: Thomas Huth <thuth@redhat.com> | ||
22 | Message-id: 20220720152631.450903-5-peter.maydell@linaro.org | ||
23 | --- | ||
24 | configure | 7 ------- | ||
25 | 1 file changed, 7 deletions(-) | ||
26 | |||
27 | diff --git a/configure b/configure | ||
28 | index XXXXXXX..XXXXXXX 100755 | ||
29 | --- a/configure | ||
30 | +++ b/configure | ||
31 | @@ -XXX,XX +XXX,XX @@ if test "$fortify_source" = "yes" ; then | ||
32 | QEMU_CFLAGS="-U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 $QEMU_CFLAGS" | ||
33 | fi | ||
34 | |||
35 | -case "$ARCH" in | ||
36 | -alpha) | ||
37 | - # Ensure there's only a single GP | ||
38 | - QEMU_CFLAGS="-msmall-data $QEMU_CFLAGS" | ||
39 | -;; | ||
40 | -esac | ||
41 | - | ||
42 | if test "$have_asan" = "yes"; then | ||
43 | QEMU_CFLAGS="-fsanitize=address $QEMU_CFLAGS" | ||
44 | QEMU_LDFLAGS="-fsanitize=address $QEMU_LDFLAGS" | ||
45 | -- | ||
46 | 2.25.1 | diff view generated by jsdifflib |
1 | The '==' operator to test is a bashism; the standard way to copmare | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | strings is '='. This causes dash to complain: | ||
3 | 2 | ||
4 | ../../configure: 681: test: linux: unexpected operator | 3 | Only perform the extract of GP during the stage1 walk. |
5 | 4 | ||
5 | Reported-by: Peter Maydell <peter.maydell@linaro.org> | ||
6 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | ||
7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
8 | Message-id: 20230407185149.3253946-2-richard.henderson@linaro.org | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
7 | Reviewed-by: Thomas Huth <thuth@redhat.com> | ||
8 | Message-id: 20220720152631.450903-6-peter.maydell@linaro.org | ||
9 | --- | 10 | --- |
10 | configure | 2 +- | 11 | target/arm/ptw.c | 10 +++++----- |
11 | 1 file changed, 1 insertion(+), 1 deletion(-) | 12 | 1 file changed, 5 insertions(+), 5 deletions(-) |
12 | 13 | ||
13 | diff --git a/configure b/configure | 14 | diff --git a/target/arm/ptw.c b/target/arm/ptw.c |
14 | index XXXXXXX..XXXXXXX 100755 | 15 | index XXXXXXX..XXXXXXX 100644 |
15 | --- a/configure | 16 | --- a/target/arm/ptw.c |
16 | +++ b/configure | 17 | +++ b/target/arm/ptw.c |
17 | @@ -XXX,XX +XXX,XX @@ werror="" | 18 | @@ -XXX,XX +XXX,XX @@ static bool get_phys_addr_lpae(CPUARMState *env, S1Translate *ptw, |
18 | 19 | result->f.attrs.secure = false; | |
19 | meson_option_build_array() { | 20 | } |
20 | printf '[' | 21 | |
21 | - (if test "$targetos" == windows; then | 22 | - /* When in aarch64 mode, and BTI is enabled, remember GP in the TLB. */ |
22 | + (if test "$targetos" = windows; then | 23 | - if (aarch64 && cpu_isar_feature(aa64_bti, cpu)) { |
23 | IFS=\; | 24 | - result->f.guarded = extract64(attrs, 50, 1); /* GP */ |
24 | else | 25 | - } |
25 | IFS=: | 26 | - |
27 | if (regime_is_stage2(mmu_idx)) { | ||
28 | result->cacheattrs.is_s2_format = true; | ||
29 | result->cacheattrs.attrs = extract32(attrs, 2, 4); | ||
30 | @@ -XXX,XX +XXX,XX @@ static bool get_phys_addr_lpae(CPUARMState *env, S1Translate *ptw, | ||
31 | assert(attrindx <= 7); | ||
32 | result->cacheattrs.is_s2_format = false; | ||
33 | result->cacheattrs.attrs = extract64(mair, attrindx * 8, 8); | ||
34 | + | ||
35 | + /* When in aarch64 mode, and BTI is enabled, remember GP in the TLB. */ | ||
36 | + if (aarch64 && cpu_isar_feature(aa64_bti, cpu)) { | ||
37 | + result->f.guarded = extract64(attrs, 50, 1); /* GP */ | ||
38 | + } | ||
39 | } | ||
40 | |||
41 | /* | ||
26 | -- | 42 | -- |
27 | 2.25.1 | 43 | 2.34.1 | diff view generated by jsdifflib |
1 | From: Alan Jian <alanjian85@gmail.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | This patch fixes the dedicated framebuffer mailbox interface by | 3 | The guarded bit comes from the stage1 walk. |
4 | removing an unneeded offset. This means that we pick the framebuffer | ||
5 | address in the same way that we do if the guest code uses the buffer | ||
6 | allocate mechanism of the bcm2835_property interface (case | ||
7 | 0x00040001: /* Allocate buffer */ in bcm2835_property.c). | ||
8 | 4 | ||
9 | The documentation of this mailbox interface doesn't say anything | 5 | Fixes: Coverity CID 1507929 |
10 | about using parts of the request buffer address to affect the | 6 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
11 | chosen framebuffer address: | ||
12 | https://github.com/raspberrypi/firmware/wiki/Mailbox-framebuffer-interface | ||
13 | |||
14 | Some baremetal applications like the Screen01/Screen02 examples from | ||
15 | Baking Pi tutorial[1] didn't work before this patch. | ||
16 | |||
17 | [1] https://www.cl.cam.ac.uk/projects/raspberrypi/tutorials/os/screen01.html | ||
18 | |||
19 | Signed-off-by: Alan Jian <alanjian85@outlook.com> | ||
20 | Message-id: 20220725145838.8412-1-alanjian85@outlook.com | ||
21 | [PMM: tweaked commit message] | ||
22 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Message-id: 20230407185149.3253946-3-richard.henderson@linaro.org | ||
23 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
24 | --- | 10 | --- |
25 | hw/display/bcm2835_fb.c | 3 +-- | 11 | target/arm/ptw.c | 1 + |
26 | 1 file changed, 1 insertion(+), 2 deletions(-) | 12 | 1 file changed, 1 insertion(+) |
27 | 13 | ||
28 | diff --git a/hw/display/bcm2835_fb.c b/hw/display/bcm2835_fb.c | 14 | diff --git a/target/arm/ptw.c b/target/arm/ptw.c |
29 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
30 | --- a/hw/display/bcm2835_fb.c | 16 | --- a/target/arm/ptw.c |
31 | +++ b/hw/display/bcm2835_fb.c | 17 | +++ b/target/arm/ptw.c |
32 | @@ -XXX,XX +XXX,XX @@ static void bcm2835_fb_mbox_push(BCM2835FBState *s, uint32_t value) | 18 | @@ -XXX,XX +XXX,XX @@ static ARMCacheAttrs combine_cacheattrs(uint64_t hcr, |
33 | newconf.xoffset = ldl_le_phys(&s->dma_as, value + 24); | 19 | |
34 | newconf.yoffset = ldl_le_phys(&s->dma_as, value + 28); | 20 | assert(!s1.is_s2_format); |
35 | 21 | ret.is_s2_format = false; | |
36 | - newconf.base = s->vcram_base | (value & 0xc0000000); | 22 | + ret.guarded = s1.guarded; |
37 | - newconf.base += BCM2835_FB_OFFSET; | 23 | |
38 | + newconf.base = s->vcram_base + BCM2835_FB_OFFSET; | 24 | if (s1.attrs == 0xf0) { |
39 | 25 | tagged = true; | |
40 | /* Copy fields which we don't want to change from the existing config */ | ||
41 | newconf.pixo = s->config.pixo; | ||
42 | -- | 26 | -- |
43 | 2.25.1 | 27 | 2.34.1 | diff view generated by jsdifflib |