You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Richard Henderson 8218c048be target/i386: Always completely initialize TranslateFault ... In get_physical_address, the canonical address check failed to set TranslateFault.stage2, which resulted in an uninitialized read from the struct when reporting the fault in x86_cpu_tlb_fill. Adjust all error paths to use structure assignment so that the entire struct is always initialized. Reported-by: Daniel Hoffman <dhoff749@gmail.com> Fixes: 9bbcf37219 ("target/i386: Reorg GET_HPHYS") Signed-off-by: Richard Henderson <richard.henderson@linaro.org> Message-Id: <20221201074522.178498-1-richard.henderson@linaro.org> Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1324 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2 years ago
..
sysemu	target/i386: Always completely initialize TranslateFault	2 years ago
user	target/i386: Raise #GP on unaligned m128 accesses when required.	2 years ago
bpt_helper.c	compiler.h: replace QEMU_NORETURN with G_NORETURN	3 years ago
cc_helper.c	target/i386: Expand eflags updates inline	2 years ago
cc_helper_template.h	…
decode-new.c.inc	target/i386: allow MMX instructions with CR4.OSFXSR=0	2 years ago
decode-new.h	target/i386: implement FMA instructions	2 years ago
emit.c.inc	target/i386: implement FMA instructions	2 years ago
excp_helper.c	target/i386: Raise #GP on unaligned m128 accesses when required.	2 years ago
fpu_helper.c	target/i386: introduce function to set rounding mode from FPCW or MXCSR bits	2 years ago
helper-tcg.h	target/i386: Raise #GP on unaligned m128 accesses when required.	2 years ago
int_helper.c	exec/exec-all: Move 'qemu/log.h' include in units requiring it	3 years ago
mem_helper.c	exec/memop: Adding signedness to quad definitions	3 years ago
meson.build	i386: split svm_helper into sysemu and stub-only user	4 years ago
misc_helper.c	compiler.h: replace QEMU_NORETURN with G_NORETURN	3 years ago
mpx_helper.c	…
seg_helper.c	target/i386: Truncate values for lcall_real to i32	2 years ago
seg_helper.h	i386: split seg_helper into user-only and sysemu parts	4 years ago
tcg-cpu.c	target/i386: Convert to tcg_ops restore_state_to_opc	2 years ago
tcg-cpu.h	target/i386: Move X86XSaveArea into TCG	3 years ago
tcg-stub.c	…
translate.c	target/i386: hardcode R_EAX as destination register for LAHF/SAHF	2 years ago