You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
qemu/target/i386/tcg/sysemu
Richard Henderson 8218c048be target/i386: Always completely initialize TranslateFault
In get_physical_address, the canonical address check failed to
set TranslateFault.stage2, which resulted in an uninitialized
read from the struct when reporting the fault in x86_cpu_tlb_fill.

Adjust all error paths to use structure assignment so that the
entire struct is always initialized.

Reported-by: Daniel Hoffman <dhoff749@gmail.com>
Fixes: 9bbcf37219 ("target/i386: Reorg GET_HPHYS")
Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
Message-Id: <20221201074522.178498-1-richard.henderson@linaro.org>
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1324
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2 years ago
..
bpt_helper.c target/i386: Tidy hw_breakpoint_remove 3 years ago
excp_helper.c target/i386: Always completely initialize TranslateFault 2 years ago
fpu_helper.c i386: separate fpu_helper sysemu-only parts 4 years ago
meson.build i386: split seg_helper into user-only and sysemu parts 4 years ago
misc_helper.c x86: Implement MSR_CORE_THREAD_COUNT MSR 2 years ago
seg_helper.c exec/exec-all: Move 'qemu/log.h' include in units requiring it 3 years ago
smm_helper.c
svm_helper.c accel/tcg: Remove will_exit argument from cpu_restore_state 2 years ago
tcg-cpu.c